@opengeni/worker-bundle 2.3.1 → 2.3.2-canary.37090756480001

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/workflows/activities.ts","../src/knowledge-source-sync-activity-policy.ts","../src/http.ts","../src/worker-service-lifecycle.ts","../src/memory-pressure-guard.ts","../src/unhandled-rejection-boundary.ts","../src/browser-deadline-checkpoint-contract.ts"],"sourcesContent":["import {\n  dbSearchPath,\n  getSettings,\n  resolveNatsControlPlaneAuth,\n  retryStartupDependency,\n  startupRetryOptions,\n  temporalConnectionOptions,\n  type Settings,\n} from \"@opengeni/config\";\nimport {\n  assertRuntimeDatabasePosture,\n  isRetryableRuntimeDatabaseStartupError,\n  countSessionRecoveryBacklog,\n  createDb,\n  getContextCompactionPendingSummary,\n  markSessionWorkflowWakeDelivered,\n  type Database,\n  type RuntimeDatabasePostureOptions,\n} from \"@opengeni/db\";\nimport {\n  createNatsEventBus,\n  requireSessionEventDurableFanoutCapability,\n  type EventBus,\n} from \"@opengeni/events\";\nimport {\n  createObservability,\n  logStartupDependencyRetry,\n  type Observability,\n} from \"@opengeni/observability\";\nimport {\n  Connection,\n  isGrpcServiceError,\n  ScheduleAlreadyRunning,\n  ScheduleOverlapPolicy,\n  Client as TemporalClient,\n  WorkflowExecutionAlreadyStartedError,\n} from \"@temporalio/client\";\nimport { NativeConnection, Worker, type WorkflowBundleOption } from \"@temporalio/worker\";\nimport { existsSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport type { createControlActivities } from \"./activities-control\";\nimport type { createTurnActivities } from \"./activities-turn\";\nimport type { ActivityDependencies } from \"./activities/types\";\nimport type {\n  InspectSessionAttemptActivity,\n  SignalCodexCapacityWorkflow,\n  SignalSessionAttemptQuiesced,\n  StartSandboxReaperWorkflow,\n  StartVideoGenerationWorkflow,\n  WakeSessionWorkflowSignal,\n} from \"./activities/types\";\nimport { turnTaskQueue } from \"./workflows/activities\";\nimport {\n  dbReadyCheck,\n  natsReadyCheck,\n  startWorkerHttpServer,\n  temporalReadyCheck,\n  type WorkerLifecycleState,\n} from \"./http\";\nimport {\n  initializeContextCompactionMetrics,\n  initializeWorkerOutcomeMetrics,\n  normalizeTurnTaskQueueStats,\n  observabilityEventBusOptions,\n  startContextCompactionPendingMonitor,\n  startSessionRecoveryMonitor,\n  startTurnCapacityMonitor,\n  type TurnTaskQueueStats,\n} from \"./observability-metrics\";\nimport {\n  resolveCatalogSettings,\n  SESSION_WORKFLOW_WAKE_DISPATCHER_PERIOD_MS,\n  SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID,\n  SESSION_WORKFLOW_WAKE_DISPATCHER_WORKFLOW_TYPE,\n  TURN_ACTIVITY_CANCELLATION_HEARTBEAT_INTERVAL_MS,\n} from \"@opengeni/core\";\nimport {\n  CONTROL_WORKER_MAX_CACHED_WORKFLOWS,\n  CONTROL_WORKER_MAX_CONCURRENT_ACTIVITIES,\n  CONTROL_WORKER_MAX_CONCURRENT_WORKFLOW_TASKS,\n  createTurnWorkerConcurrencyPlan,\n  turnWorkerConcurrencyLogFields,\n} from \"./concurrency\";\nimport {\n  combineWorkerRunTargets,\n  constructWithOwnedConnection,\n  createWorkerServiceLifecycle,\n  type WorkerServiceLifecycle,\n  type WorkerRunTarget,\n} from \"./worker-service-lifecycle\";\nimport {\n  createTurnWorkerMemoryPressureGuard,\n  turnWorkerMemoryPressureGuardEnabled,\n  type TurnWorkerMemoryPressureGuard,\n} from \"./memory-pressure-guard\";\nimport { assertSandboxReaperActivityTimeout } from \"./sandbox-reaper-timeout\";\nimport { installWorkerUnhandledRejectionBoundary } from \"./unhandled-rejection-boundary\";\nimport {\n  SANDBOX_REAPER_V2_WORKFLOW_ID,\n  sandboxLifecycleTaskQueue,\n} from \"./sandbox-reaper-contract\";\nimport {\n  BROWSER_DEADLINE_CHECKPOINT_SWEEP_ID,\n  browserDeadlineCheckpointTaskQueue,\n} from \"./browser-deadline-checkpoint-contract\";\n\nexport {\n  createHostExportPump,\n  type HostExportDrainResult,\n  type HostExportPump,\n  type HostExportPumpOptions,\n  type HostEventExport,\n  type HostEventExportBatch,\n  type HostEventSink,\n  type HostLifecycleFactExport,\n  type HostLifecycleFactExportBatch,\n  type HostLifecycleFactSink,\n  type HostUsageExport,\n  type HostUsageExportBatch,\n  type HostUsageSink,\n} from \"./host-export\";\n\n// The deterministic id of the ONE global reaper Schedule. A single id means\n// create() is idempotent across every worker in the pool: the first worker to\n// boot creates it, all others collide on this id (ScheduleAlreadyRunning) and\n// no-op — so the Schedule is registered EXACTLY ONCE per deployment regardless\n// of replica count.\nconst SANDBOX_REAPER_SCHEDULE_ID = \"opengeni-sandbox-lease-reaper\";\nexport const KNOWLEDGE_INDEXING_SCHEDULE_ID = \"opengeni-knowledge-indexing\";\nexport const KNOWLEDGE_INDEXING_PERIOD_MS = 15_000;\nexport const FILE_UPLOAD_REAPER_SCHEDULE_ID = \"opengeni-file-upload-reaper\";\nexport const FILE_UPLOAD_REAPER_PERIOD_MS = 15 * 60 * 1_000;\nexport const SITE_AUTH_MAINTENANCE_SCHEDULE_ID = \"opengeni-site-auth-maintenance\";\nexport const SITE_AUTH_MAINTENANCE_PERIOD_MS = 60 * 1_000;\nexport type OpenGeniWorkerRole = \"control\" | \"turn\";\n\nexport type WorkerOptions = {\n  role: OpenGeniWorkerRole;\n  settings?: Settings;\n  activities?: ReturnType<typeof createControlActivities> | ReturnType<typeof createTurnActivities>;\n  activityDependencies?: ActivityDependencies;\n  /** Override the release-coherent workflow artifact. Most hosts should omit this. */\n  workflowBundle?: WorkflowBundleOption;\n};\n\ntype TemporalActivityLease = {\n  lastHeartbeatTime?: { seconds?: unknown; nanos?: number | null } | null;\n  lastStartedTime?: { seconds?: unknown; nanos?: number | null } | null;\n  activityOptions?: {\n    heartbeatTimeout?: { seconds?: unknown; nanos?: number | null } | null;\n  } | null;\n};\n\nfunction temporalTimeMs(\n  value: { seconds?: unknown; nanos?: number | null } | null | undefined,\n): number | null {\n  if (value?.seconds === undefined || value.seconds === null) return null;\n  return Number(String(value.seconds)) * 1_000 + Math.floor((value.nanos ?? 0) / 1_000_000);\n}\n\nexport function temporalActivityLeaseSettled(\n  pending: TemporalActivityLease | null | undefined,\n  nowMs = Date.now(),\n): boolean {\n  if (!pending) return true;\n  const heartbeatAt =\n    temporalTimeMs(pending.lastHeartbeatTime) ?? temporalTimeMs(pending.lastStartedTime);\n  const heartbeatTimeoutMs = temporalTimeMs(pending.activityOptions?.heartbeatTimeout);\n  return (\n    heartbeatAt !== null && heartbeatTimeoutMs !== null && nowMs >= heartbeatAt + heartbeatTimeoutMs\n  );\n}\n\n/** The exact Temporal workflow run is absent, so it cannot retain an activity. */\nexport function temporalWorkflowExecutionNotFound(error: unknown): boolean {\n  // gRPC status code 5 is NOT_FOUND. The typed guard prevents unrelated\n  // provider/HTTP errors carrying a numeric code from proving quiescence.\n  return isGrpcServiceError(error) && error.code === 5;\n}\n\n/** Load exactly one role's activity graph. Exported for embedded hosts and the\n * process-RSS conformance benchmark; construction remains side-effect free\n * until an activity first resolves its injected services. */\nexport async function createDefaultWorkerActivities(\n  role: OpenGeniWorkerRole,\n  dependencies: ActivityDependencies = {},\n) {\n  return role === \"control\"\n    ? (await import(\"./activities-control\")).createControlActivities(dependencies)\n    : (await import(\"./activities-turn\")).createTurnActivities(dependencies);\n}\n\ntype WorkerWorkflowDefinition =\n  | { workflowBundle: WorkflowBundleOption }\n  | { workflowsPath: string };\n\n/**\n * Resolve the deterministic workflow graph without asking installed hosts to\n * transpile or relocate package TypeScript. Monorepo source execution retains\n * the source path for the local development loop; published dist execution\n * fails closed unless the build-generated sibling artifact is present.\n */\nexport function resolveOpenGeniWorkflowDefinition(\n  moduleUrl: string = import.meta.url,\n): WorkerWorkflowDefinition {\n  const modulePath = fileURLToPath(moduleUrl).replaceAll(\"\\\\\", \"/\");\n  if (modulePath.endsWith(\"/src/index.ts\")) {\n    return { workflowsPath: fileURLToPath(new URL(\"./workflows.ts\", moduleUrl)) };\n  }\n  const codePath = fileURLToPath(new URL(\"./workflow-bundle.js\", moduleUrl));\n  if (!existsSync(codePath)) {\n    throw new Error(\n      `OpenGeni workflow bundle is missing at ${codePath}; rebuild or reinstall @opengeni/worker-bundle`,\n    );\n  }\n  return { workflowBundle: { codePath } };\n}\n\nexport function turnCancellationHeartbeatThrottleOptions() {\n  return {\n    maxHeartbeatThrottleInterval: TURN_ACTIVITY_CANCELLATION_HEARTBEAT_INTERVAL_MS,\n    defaultHeartbeatThrottleInterval: TURN_ACTIVITY_CANCELLATION_HEARTBEAT_INTERVAL_MS,\n  } as const;\n}\n\nexport async function createOpenGeniWorker(options: WorkerOptions): Promise<{\n  worker: WorkerRunTarget;\n  connection: NativeConnection;\n}> {\n  const settings = options.settings ?? getSettings();\n  if (options.role === \"control\") {\n    // The exported lower-level factory is itself poll-capable. Validate here so\n    // embedded hosts cannot bypass the reaper budget contract by omitting the\n    // higher-level service and its Schedule-registration lifecycle.\n    assertSandboxReaperActivityTimeout(settings);\n  }\n  const observability =\n    options.activityDependencies?.observability ??\n    createObservability(settings, { component: `worker-${options.role}` });\n  initializeWorkerOutcomeMetrics(observability);\n  if (options.role === \"turn\") {\n    initializeContextCompactionMetrics(observability);\n  }\n  if (options.role === \"turn\" && options.workflowBundle) {\n    throw new Error(\"workflowBundle is valid only for the control worker role\");\n  }\n  // Pre-resolve a PRIVATE-registry sandbox image before any turn creates a box.\n  // A provider-native OPENGENI_MODAL_IMAGE_ID intentionally bypasses this\n  // registry path and is resolved by ModalImageSelector.fromId at create time.\n  // Otherwise this is a no-op unless the registry secret + logical ref are both\n  // set. Memoized in the provider, so it runs once per process.\n  if (options.role === \"turn\") {\n    const { ensureModalRegistryImage } = await import(\"@opengeni/runtime/sandbox\");\n    await retryStartupDependency(\n      \"Modal private-registry image\",\n      () => ensureModalRegistryImage(settings),\n      {\n        ...startupRetryOptions(settings),\n        onRetry: (event) => logStartupDependencyRetry(observability, event),\n      },\n    );\n  }\n  return constructWithOwnedConnection(\n    () =>\n      retryStartupDependency(\n        \"Temporal\",\n        () => NativeConnection.connect(temporalConnectionOptions(settings)),\n        {\n          ...startupRetryOptions(settings),\n          onRetry: (event) => logStartupDependencyRetry(observability, event),\n        },\n      ),\n    async (connection) => {\n      const activityDependencies = {\n        ...options.activityDependencies,\n        settings,\n        observability,\n      };\n      const activities =\n        options.activities ??\n        (await createDefaultWorkerActivities(options.role, activityDependencies));\n      const turnConcurrency =\n        options.role === \"turn\"\n          ? createTurnWorkerConcurrencyPlan(settings, { observability })\n          : null;\n      const workflowDefinition =\n        options.role === \"control\"\n          ? options.workflowBundle\n            ? { workflowBundle: options.workflowBundle }\n            : resolveOpenGeniWorkflowDefinition()\n          : {};\n      const sharedWorkerOptions = {\n        connection,\n        namespace: settings.temporalNamespace,\n        activities,\n        // Cancellation is delivered through an activity heartbeat. Keep the SDK\n        // throttle aligned with runAgentTurn's local heartbeat cadence so the\n        // four-second control contract still has time for physical writer drain\n        // and exact receipt-gated replacement admission.\n        ...turnCancellationHeartbeatThrottleOptions(),\n        // GRACEFUL DEPLOY SHUTDOWN (with the SIGTERM handler in startWorker):\n        // after shutdown() stops polling, in-flight activities get this long to\n        // finish naturally; the rest are then CANCELLED with WORKER_SHUTDOWN.\n        shutdownGraceTime: \"5s\",\n        // Hard ceiling inside the pod's termination grace period.\n        shutdownForceTime: \"100s\",\n      } as const;\n      const worker = await Worker.create({\n        ...sharedWorkerOptions,\n        taskQueue:\n          options.role === \"control\"\n            ? settings.temporalTaskQueue\n            : turnTaskQueue(settings.temporalTaskQueue),\n        ...(options.role === \"control\"\n          ? {\n              ...workflowDefinition,\n              reuseV8Context: true,\n              workflowThreadPoolSize: 1,\n              maxCachedWorkflows: CONTROL_WORKER_MAX_CACHED_WORKFLOWS,\n              maxConcurrentWorkflowTaskExecutions: CONTROL_WORKER_MAX_CONCURRENT_WORKFLOW_TASKS,\n              maxConcurrentActivityTaskExecutions: CONTROL_WORKER_MAX_CONCURRENT_ACTIVITIES,\n            }\n          : turnConcurrency!.options),\n      });\n      if (options.role !== \"control\") {\n        turnConcurrency?.admission?.finalizeStartupBaseline();\n        return { worker, connection };\n      }\n\n      const ownedWorkers = [worker];\n      try {\n        // The new activity type has its own queue. Retain the V1 poller so old\n        // drain histories finish; old binaries never receive checkpoint work.\n        for (const taskQueue of [\n          sandboxLifecycleTaskQueue(settings.temporalTaskQueue),\n          browserDeadlineCheckpointTaskQueue(settings.temporalTaskQueue),\n        ]) {\n          const lifecycleWorker = await Worker.create({\n            ...sharedWorkerOptions,\n            ...workflowDefinition,\n            taskQueue,\n            reuseV8Context: true,\n            workflowThreadPoolSize: 1,\n            maxCachedWorkflows: CONTROL_WORKER_MAX_CACHED_WORKFLOWS,\n            maxConcurrentWorkflowTaskExecutions: CONTROL_WORKER_MAX_CONCURRENT_WORKFLOW_TASKS,\n            maxConcurrentActivityTaskExecutions: CONTROL_WORKER_MAX_CONCURRENT_ACTIVITIES,\n          });\n          ownedWorkers.push(lifecycleWorker);\n        }\n        return {\n          worker: combineWorkerRunTargets(ownedWorkers),\n          connection,\n        };\n      } catch (error) {\n        for (const ownedWorker of ownedWorkers) {\n          try {\n            ownedWorker.shutdown();\n          } catch {\n            // Preserve the lifecycle worker construction failure. The base poller\n            // still received its shutdown request; a secondary synchronous\n            // shutdown error must not replace the startup root cause.\n          }\n        }\n        throw error;\n      }\n    },\n    (connection) => connection.close(),\n  );\n}\n\n// A signalWithStart capability so a worker activity can wake a PARENT\n// session's workflow when a spawned worker completes (the parent may have\n// idled and let its run finish, so a plain signal would not start one).\n// Separate from the worker's NativeConnection: the @temporalio/client\n// Connection is what exposes workflow.signalWithStart.\nexport async function createWorkerWorkflowSignaler(\n  settings: Settings,\n  db: Database,\n): Promise<{\n  wakeSessionWorkflow: WakeSessionWorkflowSignal;\n  signalSessionAttemptQuiesced: SignalSessionAttemptQuiesced;\n  inspectSessionAttemptActivity: InspectSessionAttemptActivity;\n  signalCodexCapacityWorkflow: SignalCodexCapacityWorkflow;\n  getTurnTaskQueueStats: () => Promise<TurnTaskQueueStats>;\n  startSandboxReaperWorkflow: StartSandboxReaperWorkflow;\n  startVideoGenerationWorkflow: StartVideoGenerationWorkflow;\n  check: () => Promise<void>;\n  close: () => Promise<void>;\n}> {\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  return {\n    wakeSessionWorkflow: async ({\n      accountId,\n      workspaceId,\n      sessionId,\n      workflowId,\n      wakeRevision,\n      interruptionRequested,\n      onSignalAccepted,\n    }) => {\n      if (interruptionRequested) {\n        await temporal.workflow.signalWithStart(\"sessionWorkflow\", {\n          taskQueue: settings.temporalTaskQueue,\n          workflowId,\n          workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n          args: [{ accountId, workspaceId, sessionId }],\n          signal: \"sessionControl\",\n          signalArgs: [],\n        });\n      } else {\n        await temporal.workflow.signalWithStart(\"sessionWorkflow\", {\n          taskQueue: settings.temporalTaskQueue,\n          workflowId,\n          workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n          args: [{ accountId, workspaceId, sessionId }],\n          signal: \"queueChanged\",\n        });\n      }\n      onSignalAccepted?.();\n      return await markSessionWorkflowWakeDelivered(db, {\n        accountId,\n        workspaceId,\n        sessionId,\n        temporalWorkflowId: workflowId,\n        wakeRevision,\n      });\n    },\n    signalSessionAttemptQuiesced: async (proof) => {\n      await temporal.workflow.signalWithStart(\"sessionWorkflow\", {\n        taskQueue: settings.temporalTaskQueue,\n        workflowId: proof.workflowId,\n        workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n        args: [\n          {\n            accountId: proof.accountId,\n            workspaceId: proof.workspaceId,\n            sessionId: proof.sessionId,\n          },\n        ],\n        signal: \"sessionAttemptQuiesced\",\n        signalArgs: [proof],\n      });\n      // No wake-outbox row exists yet: the direct receipt transaction failed.\n      // The signalled workflow's DB-only control activity owns committing the\n      // receipt and its exact wake revision atomically.\n    },\n    inspectSessionAttemptActivity: async ({ workflowId, workflowRunId, activityId }) => {\n      let description;\n      try {\n        description = await connection.workflowService.describeWorkflowExecution({\n          namespace: settings.temporalNamespace,\n          execution: { workflowId, runId: workflowRunId },\n        });\n      } catch (error) {\n        if (temporalWorkflowExecutionNotFound(error)) return \"settled\";\n        throw error;\n      }\n      const pending = description.pendingActivities?.find(\n        (activity) => activity.activityId === activityId,\n      );\n      return temporalActivityLeaseSettled(pending) ? \"settled\" : \"pending\";\n    },\n    signalCodexCapacityWorkflow: async ({\n      accountId,\n      workspaceId,\n      sessionId,\n      workflowId,\n      wakeRevision,\n    }) => {\n      await temporal.workflow.signalWithStart(\"sessionWorkflow\", {\n        taskQueue: settings.temporalTaskQueue,\n        workflowId,\n        workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n        args: [{ accountId, workspaceId, sessionId }],\n        signal: \"codexCapacityChanged\",\n        signalArgs: [wakeRevision],\n      });\n      // A typed capacity signal cannot acknowledge the generic outbox row:\n      // another producer may have advanced it with a Pause/Steer that requires\n      // sessionControl. The global dispatcher owns that acknowledgement.\n    },\n    getTurnTaskQueueStats: async () => {\n      const response = await connection.workflowService.describeTaskQueue({\n        namespace: settings.temporalNamespace,\n        taskQueue: { name: turnTaskQueue(settings.temporalTaskQueue) },\n        // temporal.api.enums.v1.TASK_QUEUE_TYPE_ACTIVITY. Keep this request in\n        // the supported DEFAULT mode; `stats.approximateBacklogCount` is the\n        // server-documented scaling signal.\n        taskQueueType: 2,\n        reportStats: true,\n      });\n      return normalizeTurnTaskQueueStats(response.stats);\n    },\n    startSandboxReaperWorkflow: async () => {\n      // Same backend tick, no additional schedule. A bounded independent\n      // inventory cannot prevent the existing per-box drain from starting.\n      const starts = await Promise.allSettled([\n        temporal.workflow.start(\"sandboxReaperWorkflowV2\", {\n          taskQueue: sandboxLifecycleTaskQueue(settings.temporalTaskQueue),\n          workflowId: SANDBOX_REAPER_V2_WORKFLOW_ID,\n          workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n          args: [],\n        }),\n        temporal.workflow.start(\"browserDeadlineCheckpointSweepWorkflow\", {\n          taskQueue: browserDeadlineCheckpointTaskQueue(settings.temporalTaskQueue),\n          workflowId: BROWSER_DEADLINE_CHECKPOINT_SWEEP_ID,\n          workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n          args: [],\n        }),\n      ]);\n      for (const start of starts) {\n        if (\n          start.status === \"rejected\" &&\n          !(start.reason instanceof WorkflowExecutionAlreadyStartedError)\n        ) {\n          // The other start already settled. Retry the router without losing\n          // ordinary draining or silently omitting the checkpoint sweep.\n          throw start.reason;\n        }\n      }\n      return starts[0].status === \"fulfilled\" ? \"started\" : \"already_running\";\n    },\n    startVideoGenerationWorkflow: async ({ accountId, workspaceId, operationId }) => {\n      try {\n        await temporal.workflow.start(\"videoGenerationWorkflow\", {\n          taskQueue: settings.temporalTaskQueue,\n          workflowId: `video-generation:${operationId}`,\n          // Reject a concurrent or already-completed run, but allow the repair\n          // sweep to restart this exact operation if the workflow itself failed.\n          // Every provider/storage transition remains CAS/idempotency fenced in\n          // Postgres, so recovery never creates a second logical operation.\n          workflowIdReusePolicy: \"ALLOW_DUPLICATE_FAILED_ONLY\",\n          args: [\n            {\n              accountId,\n              workspaceId,\n              operationId,\n              baseTaskQueue: settings.temporalTaskQueue,\n            },\n          ],\n        });\n        return \"started\";\n      } catch (error) {\n        if (error instanceof WorkflowExecutionAlreadyStartedError) {\n          return \"already_running\";\n        }\n        throw error;\n      }\n    },\n    check: async () => {\n      await connection.workflowService.getSystemInfo({});\n    },\n    close: async () => {\n      await connection.close();\n    },\n  };\n}\n\n/**\n * Register the ONE global reaper Temporal Schedule (the sole liveness/GC/cost-stop\n * driver — P1.3 / OD-3) and durable system-update outbox repair cadence. With\n * sandbox ownership off the activity performs bounded DB outbox repair and\n * read-only observability projections; it never mutates or terminates sandbox leases.\n *\n * The Schedule permanently fires sandboxReaperWorkflow on the legacy/base queue\n * every settings.sandboxLeaseReaperPeriodMs (the SAME cadence the boot invariant\n * `reaperPeriod < viewerHolderTTL` and `reaperPeriod + idleGrace < providerLifetime`\n * validates in packages/config — wiring the schedule period to it). SKIP overlap means a slow\n * sweep never overlaps itself. Idempotent: a duplicate scheduleId across the\n * worker pool collides on ScheduleAlreadyRunning and reconciles the same\n * definition. New workers route onto the versioned lifecycle queue; old workers\n * can still run the legacy action during rollout or a full binary rollback.\n *\n * Returns a `close()` for the dedicated client connection (separate from the\n * worker's NativeConnection — the Schedule client is a @temporalio/client).\n */\nexport async function registerSandboxReaperSchedule(\n  settings: Settings,\n  observability: Observability,\n): Promise<{ registered: boolean; close: () => Promise<void> }> {\n  assertSandboxReaperActivityTimeout(settings);\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  const spec = { intervals: [{ every: settings.sandboxLeaseReaperPeriodMs }] };\n  const action = {\n    type: \"startWorkflow\" as const,\n    workflowType: \"sandboxReaperWorkflow\",\n    taskQueue: settings.temporalTaskQueue,\n    args: [] as [],\n  };\n  const policies = {\n    overlap: ScheduleOverlapPolicy.SKIP,\n    catchupWindow: \"1m\",\n    pauseOnFailure: false,\n  } as const;\n  try {\n    await temporal.schedule.create({\n      scheduleId: SANDBOX_REAPER_SCHEDULE_ID,\n      // @every-style interval: fire once per reaper period. The boot invariant\n      // guarantees reaperPeriod < viewerHolderTTL and\n      // reaperPeriod + idleGrace < providerLifetime.\n      spec,\n      action,\n      // The base workflow is a short router on new binaries; legacy binaries\n      // still execute the pre-refactor composite under this same overlap fence.\n      policies,\n    });\n    observability.info(\"Registered the global sandbox-lease reaper Schedule\", {\n      scheduleId: SANDBOX_REAPER_SCHEDULE_ID,\n      reaperPeriodMs: settings.sandboxLeaseReaperPeriodMs,\n    });\n    return {\n      registered: true,\n      close: async () => {\n        await connection.close();\n      },\n    };\n  } catch (error) {\n    if (error instanceof ScheduleAlreadyRunning) {\n      // Never move this action off the base queue: doing so would leave a full\n      // rollback with no worker polling the only reaper Schedule. The workflow\n      // implementation itself owns the forward-compatible queue handoff.\n      await temporal.schedule.getHandle(SANDBOX_REAPER_SCHEDULE_ID).update((previous) => ({\n        spec,\n        action,\n        policies,\n        state: {\n          paused: previous.state.paused,\n          ...(previous.state.note ? { note: previous.state.note } : {}),\n          ...(previous.state.remainingActions !== undefined\n            ? { remainingActions: previous.state.remainingActions }\n            : {}),\n        },\n      }));\n      observability.info(\"Reconciled the global sandbox-lease reaper Schedule\", {\n        scheduleId: SANDBOX_REAPER_SCHEDULE_ID,\n        temporalTaskQueue: action.taskQueue,\n      });\n      return {\n        registered: false,\n        close: async () => {\n          await connection.close();\n        },\n      };\n    }\n    await connection.close().catch(() => undefined);\n    throw error;\n  }\n}\n\n/** Register the deployment-wide worker for rebuildable Knowledge search projections. */\nexport async function registerKnowledgeIndexingSchedule(\n  settings: Settings,\n  observability: Observability,\n): Promise<{ registered: boolean; close: () => Promise<void> }> {\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  try {\n    await temporal.schedule.create({\n      scheduleId: KNOWLEDGE_INDEXING_SCHEDULE_ID,\n      spec: { intervals: [{ every: KNOWLEDGE_INDEXING_PERIOD_MS }] },\n      action: {\n        type: \"startWorkflow\",\n        workflowType: \"knowledgeIndexingWorkflow\",\n        taskQueue: settings.temporalTaskQueue,\n        args: [],\n      },\n      policies: {\n        overlap: ScheduleOverlapPolicy.SKIP,\n        catchupWindow: \"1m\",\n        pauseOnFailure: false,\n      },\n    });\n    observability.info(\"Registered the global Knowledge indexer Schedule\", {\n      scheduleId: KNOWLEDGE_INDEXING_SCHEDULE_ID,\n      indexingPeriodMs: KNOWLEDGE_INDEXING_PERIOD_MS,\n    });\n    return { registered: true, close: async () => connection.close() };\n  } catch (error) {\n    if (error instanceof ScheduleAlreadyRunning) {\n      observability.info(\"Global Knowledge indexer Schedule already registered\", {\n        scheduleId: KNOWLEDGE_INDEXING_SCHEDULE_ID,\n      });\n      return { registered: false, close: async () => connection.close() };\n    }\n    await connection.close().catch(() => undefined);\n    throw error;\n  }\n}\n\n/**\n * Register the one provider-neutral expired direct-upload cleanup Schedule.\n * Unlike sandbox GC this is always registered: file uploads can be enabled in\n * deployments where sandbox ownership is disabled. The activity is a cheap\n * no-op when object storage is not configured.\n */\nexport async function registerFileUploadReaperSchedule(\n  settings: Settings,\n  observability: Observability,\n): Promise<{ registered: boolean; close: () => Promise<void> }> {\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  try {\n    await temporal.schedule.create({\n      scheduleId: FILE_UPLOAD_REAPER_SCHEDULE_ID,\n      spec: { intervals: [{ every: FILE_UPLOAD_REAPER_PERIOD_MS }] },\n      action: {\n        type: \"startWorkflow\",\n        workflowType: \"fileUploadReaperWorkflow\",\n        taskQueue: settings.temporalTaskQueue,\n        args: [],\n      },\n      policies: {\n        overlap: ScheduleOverlapPolicy.SKIP,\n        catchupWindow: \"1m\",\n        pauseOnFailure: false,\n      },\n    });\n    observability.info(\"Registered the global file-upload reaper Schedule\", {\n      scheduleId: FILE_UPLOAD_REAPER_SCHEDULE_ID,\n      reaperPeriodMs: FILE_UPLOAD_REAPER_PERIOD_MS,\n    });\n    return { registered: true, close: async () => connection.close() };\n  } catch (error) {\n    if (error instanceof ScheduleAlreadyRunning) {\n      observability.info(\"Global file-upload reaper Schedule already registered\", {\n        scheduleId: FILE_UPLOAD_REAPER_SCHEDULE_ID,\n      });\n      return { registered: false, close: async () => connection.close() };\n    }\n    await connection.close().catch(() => undefined);\n    throw error;\n  }\n}\n\n/** Register the deployment-wide maintained-auth dispatcher. Its one-minute\n * cadence matches the minimum public policy interval; DB claims own overlap,\n * crash recovery, and exact session idempotency. */\nexport async function registerSiteAuthMaintenanceSchedule(\n  settings: Settings,\n  observability: Observability,\n): Promise<{ registered: boolean; close: () => Promise<void> }> {\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  try {\n    await temporal.schedule.create({\n      scheduleId: SITE_AUTH_MAINTENANCE_SCHEDULE_ID,\n      spec: { intervals: [{ every: SITE_AUTH_MAINTENANCE_PERIOD_MS }] },\n      action: {\n        type: \"startWorkflow\",\n        workflowType: \"siteAuthMaintenanceWorkflow\",\n        taskQueue: settings.temporalTaskQueue,\n        args: [],\n      },\n      policies: {\n        overlap: ScheduleOverlapPolicy.SKIP,\n        catchupWindow: \"1m\",\n        pauseOnFailure: false,\n      },\n    });\n    observability.info(\"Registered the global site-auth maintenance Schedule\", {\n      scheduleId: SITE_AUTH_MAINTENANCE_SCHEDULE_ID,\n      maintenancePeriodMs: SITE_AUTH_MAINTENANCE_PERIOD_MS,\n    });\n    return { registered: true, close: async () => connection.close() };\n  } catch (error) {\n    if (error instanceof ScheduleAlreadyRunning) {\n      observability.info(\"Global site-auth maintenance Schedule already registered\", {\n        scheduleId: SITE_AUTH_MAINTENANCE_SCHEDULE_ID,\n      });\n      return { registered: false, close: async () => connection.close() };\n    }\n    await connection.close().catch(() => undefined);\n    throw error;\n  }\n}\n\n/**\n * Register the one repair cadence for committed workflow-wake revisions. The\n * activity only reads the transactional outbox and sends revision-scoped\n * signals; it is independent of sandbox ownership and child-agent features.\n */\nexport async function registerSessionWorkflowWakeDispatcherSchedule(\n  settings: Settings,\n  observability: Observability,\n): Promise<{ registered: boolean; close: () => Promise<void> }> {\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  try {\n    await temporal.schedule.create({\n      scheduleId: SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID,\n      spec: { intervals: [{ every: SESSION_WORKFLOW_WAKE_DISPATCHER_PERIOD_MS }] },\n      action: {\n        type: \"startWorkflow\",\n        workflowType: SESSION_WORKFLOW_WAKE_DISPATCHER_WORKFLOW_TYPE,\n        taskQueue: settings.temporalTaskQueue,\n        args: [],\n      },\n      policies: {\n        overlap: ScheduleOverlapPolicy.SKIP,\n        catchupWindow: \"1m\",\n        pauseOnFailure: false,\n      },\n    });\n    observability.info(\"Registered the session-workflow wake dispatcher Schedule\", {\n      scheduleId: SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID,\n      periodMs: SESSION_WORKFLOW_WAKE_DISPATCHER_PERIOD_MS,\n    });\n    return { registered: true, close: async () => connection.close() };\n  } catch (error) {\n    if (error instanceof ScheduleAlreadyRunning) {\n      observability.info(\"Session-workflow wake dispatcher Schedule already registered\", {\n        scheduleId: SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID,\n      });\n      return { registered: false, close: async () => connection.close() };\n    }\n    await connection.close().catch(() => undefined);\n    throw error;\n  }\n}\n\nexport type OpenGeniWorkerServiceOptions = Omit<WorkerOptions, \"activityDependencies\"> & {\n  activityDependencies: ActivityDependencies & { db: Database; bus: EventBus };\n  /**\n   * Exact catalog posture required by the standalone runtime. Embedded hosts\n   * may omit this when they own an equivalent database isolation contract.\n   */\n  databasePosture?: RuntimeDatabasePostureOptions;\n  /**\n   * `role-default` registers OpenGeni's internal maintenance schedules on a\n   * control worker only. These are engine maintenance schedules, not a host's\n   * product-level scheduled-agent jobs. Use `none` when another control worker\n   * in the same deployment owns them.\n   */\n  internalSchedules?: \"role-default\" | \"none\";\n  /**\n   * Set false only when the host exposes equivalent lifecycle endpoints itself.\n   * A dedicated readiness database prevents ordinary activity-pool saturation\n   * from making an otherwise healthy Temporal worker fail Kubernetes readiness.\n   * The embedding host retains ownership of this handle.\n   */\n  http?: false | { readinessTimeoutMs?: number; readinessDb?: Database };\n};\n\nexport type OpenGeniWorkerService = {\n  readonly role: OpenGeniWorkerRole;\n  readonly worker: WorkerRunTarget;\n  readonly connection: NativeConnection;\n  state(): WorkerLifecycleState;\n  run(): Promise<void>;\n  drain(reason?: string): void;\n  close(): Promise<void>;\n};\n\nexport function workerOwnsInternalSchedules(\n  role: OpenGeniWorkerRole,\n  policy: OpenGeniWorkerServiceOptions[\"internalSchedules\"] = \"role-default\",\n): boolean {\n  return role === \"control\" && policy !== \"none\";\n}\n\n/**\n * Construct one role-specific worker process around the lower-level Temporal\n * worker factory. The service owns every Temporal client and HTTP listener it\n * creates. The embedding host retains ownership of its injected DB and EventBus\n * handles and closes those only after this service has drained.\n */\nexport async function createOpenGeniWorkerService(\n  options: OpenGeniWorkerServiceOptions,\n): Promise<OpenGeniWorkerService> {\n  requireSessionEventDurableFanoutCapability(options.activityDependencies.bus);\n  const settings = options.settings ?? getSettings();\n  const observability =\n    options.activityDependencies.observability ??\n    createObservability(settings, { component: `worker-${options.role}` });\n  const retryOptions = startupRetryOptions(settings);\n  const onRetry = (event: Parameters<typeof logStartupDependencyRetry>[1]) =>\n    logStartupDependencyRetry(observability, event);\n  let lifecycle: WorkerServiceLifecycle | undefined;\n  let signaler: Awaited<ReturnType<typeof createWorkerWorkflowSignaler>> | undefined;\n  let workerBundle: Awaited<ReturnType<typeof createOpenGeniWorker>> | undefined;\n  let turnCapacityMonitor: ReturnType<typeof startTurnCapacityMonitor> | undefined;\n  let sessionRecoveryMonitor: ReturnType<typeof startSessionRecoveryMonitor> | undefined;\n  let contextCompactionPendingMonitor:\n    | ReturnType<typeof startContextCompactionPendingMonitor>\n    | undefined;\n  const schedules: Array<{ close: () => Promise<void> }> = [];\n  let httpServer: ReturnType<typeof startWorkerHttpServer> | undefined;\n  let memoryPressureGuard: TurnWorkerMemoryPressureGuard | undefined;\n\n  try {\n    const resolvedCatalog = await retryStartupDependency(\n      \"model catalog\",\n      () => resolveCatalogSettings(options.activityDependencies.db, settings),\n      { ...retryOptions, onRetry },\n    );\n    observability.info(\"OpenGeni model catalog resolved\", {\n      role: options.role,\n      catalogSource: resolvedCatalog.source,\n      catalogVersion: resolvedCatalog.version,\n    });\n    const needsSignaler =\n      options.role === \"turn\" ||\n      !options.activityDependencies.wakeSessionWorkflow ||\n      !options.activityDependencies.signalSessionAttemptQuiesced ||\n      !options.activityDependencies.inspectSessionAttemptActivity ||\n      !options.activityDependencies.signalCodexCapacityWorkflow ||\n      !options.activityDependencies.startSandboxReaperWorkflow ||\n      !options.activityDependencies.startVideoGenerationWorkflow;\n    if (needsSignaler) {\n      signaler = await retryStartupDependency(\n        \"Temporal client\",\n        () => createWorkerWorkflowSignaler(settings, options.activityDependencies.db),\n        { ...retryOptions, onRetry },\n      );\n    }\n    const wakeSessionWorkflow =\n      options.activityDependencies.wakeSessionWorkflow ?? signaler?.wakeSessionWorkflow;\n    const signalSessionAttemptQuiesced =\n      options.activityDependencies.signalSessionAttemptQuiesced ??\n      signaler?.signalSessionAttemptQuiesced;\n    const inspectSessionAttemptActivity =\n      options.activityDependencies.inspectSessionAttemptActivity ??\n      signaler?.inspectSessionAttemptActivity;\n    const signalCodexCapacityWorkflow =\n      options.activityDependencies.signalCodexCapacityWorkflow ??\n      signaler?.signalCodexCapacityWorkflow;\n    const startSandboxReaperWorkflow =\n      options.activityDependencies.startSandboxReaperWorkflow ??\n      signaler?.startSandboxReaperWorkflow;\n    const startVideoGenerationWorkflow =\n      options.activityDependencies.startVideoGenerationWorkflow ??\n      signaler?.startVideoGenerationWorkflow;\n    if (\n      !wakeSessionWorkflow ||\n      !signalSessionAttemptQuiesced ||\n      !inspectSessionAttemptActivity ||\n      !signalCodexCapacityWorkflow ||\n      !startSandboxReaperWorkflow ||\n      !startVideoGenerationWorkflow\n    ) {\n      throw new Error(\"OpenGeni worker lifecycle could not resolve its workflow signalers\");\n    }\n    workerBundle = await createOpenGeniWorker({\n      role: options.role,\n      settings,\n      ...(options.activities ? { activities: options.activities } : {}),\n      ...(options.workflowBundle ? { workflowBundle: options.workflowBundle } : {}),\n      activityDependencies: {\n        ...options.activityDependencies,\n        settings,\n        observability,\n        wakeSessionWorkflow,\n        signalSessionAttemptQuiesced,\n        inspectSessionAttemptActivity,\n        signalCodexCapacityWorkflow,\n        startSandboxReaperWorkflow,\n        startVideoGenerationWorkflow,\n      },\n    });\n\n    if (options.role === \"turn\") {\n      if (!signaler) {\n        throw new Error(\"Turn worker capacity monitor could not resolve its Temporal stats client\");\n      }\n      turnCapacityMonitor = startTurnCapacityMonitor({\n        observability,\n        read: signaler.getTurnTaskQueueStats,\n      });\n    } else {\n      sessionRecoveryMonitor = startSessionRecoveryMonitor({\n        observability,\n        read: async () => await countSessionRecoveryBacklog(options.activityDependencies.db),\n      });\n      contextCompactionPendingMonitor = startContextCompactionPendingMonitor({\n        observability,\n        read: async () => await getContextCompactionPendingSummary(options.activityDependencies.db),\n      });\n    }\n\n    if (workerOwnsInternalSchedules(options.role, options.internalSchedules)) {\n      schedules.push(\n        await retryStartupDependency(\n          \"Temporal schedule (sandbox reaper)\",\n          () => registerSandboxReaperSchedule(settings, observability),\n          { ...retryOptions, onRetry },\n        ),\n      );\n      schedules.push(\n        await retryStartupDependency(\n          \"Temporal schedule (Knowledge indexing)\",\n          () => registerKnowledgeIndexingSchedule(settings, observability),\n          { ...retryOptions, onRetry },\n        ),\n      );\n      schedules.push(\n        await retryStartupDependency(\n          \"Temporal schedule (file upload reaper)\",\n          () => registerFileUploadReaperSchedule(settings, observability),\n          { ...retryOptions, onRetry },\n        ),\n      );\n      schedules.push(\n        await retryStartupDependency(\n          \"Temporal schedule (site auth maintenance)\",\n          () => registerSiteAuthMaintenanceSchedule(settings, observability),\n          { ...retryOptions, onRetry },\n        ),\n      );\n      schedules.push(\n        await retryStartupDependency(\n          \"Temporal schedule (session-workflow wake dispatcher)\",\n          () => registerSessionWorkflowWakeDispatcherSchedule(settings, observability),\n          { ...retryOptions, onRetry },\n        ),\n      );\n    }\n\n    if (options.http !== false) {\n      const databaseReady = dbReadyCheck(\n        options.http?.readinessDb ?? options.activityDependencies.db,\n        options.databasePosture,\n      );\n      httpServer = startWorkerHttpServer({\n        settings,\n        observability,\n        checks: {\n          db: async () => {\n            await databaseReady();\n            await resolveCatalogSettings(options.activityDependencies.db, settings);\n          },\n          nats: natsReadyCheck(options.activityDependencies.bus),\n          temporal: temporalReadyCheck(workerBundle.connection),\n        },\n        ...(options.http?.readinessTimeoutMs ? { timeoutMs: options.http.readinessTimeoutMs } : {}),\n        lifecycle: { role: options.role, state: () => lifecycle?.state() ?? \"starting\" },\n      });\n    }\n  } catch (error) {\n    httpServer?.stop(true);\n    await Promise.allSettled([\n      turnCapacityMonitor?.close(),\n      sessionRecoveryMonitor?.close(),\n      contextCompactionPendingMonitor?.close(),\n      workerBundle?.connection.close(),\n      signaler?.close(),\n      ...schedules.map((schedule) => schedule.close()),\n    ]);\n    throw error;\n  }\n\n  const activeWorkerBundle = workerBundle;\n  const activeSignaler = signaler;\n  if (!activeWorkerBundle) {\n    throw new Error(\"OpenGeni worker service initialization did not complete\");\n  }\n\n  lifecycle = createWorkerServiceLifecycle({\n    role: options.role,\n    worker: activeWorkerBundle.worker,\n    observability,\n    closeOwnedResources: async () => {\n      memoryPressureGuard?.close();\n      httpServer?.stop(true);\n      await Promise.allSettled([\n        turnCapacityMonitor?.close(),\n        sessionRecoveryMonitor?.close(),\n        contextCompactionPendingMonitor?.close(),\n        activeWorkerBundle.connection.close(),\n        activeSignaler?.close(),\n        ...schedules.map((schedule) => schedule.close()),\n      ]);\n    },\n    onReady: () => {\n      observability.info(\"OpenGeni worker listening\", {\n        role: options.role,\n        temporalTaskQueue:\n          options.role === \"control\"\n            ? settings.temporalTaskQueue\n            : turnTaskQueue(settings.temporalTaskQueue),\n        ...(options.role === \"turn\"\n          ? turnWorkerConcurrencyLogFields(settings)\n          : {\n              concurrencyMode: \"fixed\",\n              maxConcurrentTurns: CONTROL_WORKER_MAX_CONCURRENT_ACTIVITIES,\n              targetCpuUsage: null,\n              targetMemoryUsage: null,\n            }),\n        maxConcurrentWorkflowTaskExecutions:\n          options.role === \"control\" ? CONTROL_WORKER_MAX_CONCURRENT_WORKFLOW_TASKS : 0,\n        maxCachedWorkflows: options.role === \"control\" ? CONTROL_WORKER_MAX_CACHED_WORKFLOWS : 0,\n        httpPort: options.http === false ? null : settings.workerHttpPort,\n      });\n    },\n  });\n  const activeLifecycle = lifecycle;\n\n  if (turnWorkerMemoryPressureGuardEnabled(options.role, settings)) {\n    try {\n      memoryPressureGuard = createTurnWorkerMemoryPressureGuard({\n        settings,\n        observability,\n        drain: () => {\n          if (!activeLifecycle.drain(\"memory pressure guard\")) {\n            throw new Error(\"worker shutdown request failed\");\n          }\n        },\n      });\n    } catch (error) {\n      await activeLifecycle.close();\n      throw error;\n    }\n  }\n\n  return {\n    role: options.role,\n    worker: activeWorkerBundle.worker,\n    connection: activeWorkerBundle.connection,\n    state: activeLifecycle.state,\n    run: activeLifecycle.run,\n    drain: (reason) => {\n      activeLifecycle.drain(reason);\n    },\n    close: activeLifecycle.close,\n  };\n}\n\nexport type RunOpenGeniWorkerOptions = OpenGeniWorkerServiceOptions & {\n  /** Defaults to SIGTERM and SIGINT. Pass false when the host owns process signals. */\n  shutdownSignals?: false | ReadonlyArray<\"SIGTERM\" | \"SIGINT\">;\n};\n\n/** Start, drain, and close one embedded worker process. */\nexport async function runOpenGeniWorker(options: RunOpenGeniWorkerOptions): Promise<void> {\n  const service = await createOpenGeniWorkerService(options);\n  const signals =\n    options.shutdownSignals === false ? [] : (options.shutdownSignals ?? [\"SIGTERM\", \"SIGINT\"]);\n  const handlers = signals.map((signal) => {\n    const handler = () => service.drain(signal);\n    process.on(signal, handler);\n    return { signal, handler };\n  });\n  try {\n    await service.run();\n  } finally {\n    for (const { signal, handler } of handlers) {\n      process.off(signal, handler);\n    }\n    await service.close();\n  }\n}\n\nexport async function startWorker() {\n  const role = process.env.OPENGENI_WORKER_ROLE;\n  if (role !== \"control\" && role !== \"turn\") {\n    throw new Error(\"OPENGENI_WORKER_ROLE must be explicitly set to 'control' or 'turn'\");\n  }\n  const settings = getSettings();\n  const observability = createObservability(settings, { component: `worker-${role}` });\n  // The Agents SDK also listens for unhandled rejections and exits the process.\n  // Keep detached SDK/transport promises observational here: durable turn\n  // activity boundaries own failures, while process exit causes cross-session\n  // lease loss for every turn assigned to this shared worker pod.\n  const disposeUnhandledRejectionBoundary = installWorkerUnhandledRejectionBoundary();\n  const retryOptions = startupRetryOptions(settings);\n  const onRetry = (event: Parameters<typeof logStartupDependencyRetry>[1]) =>\n    logStartupDependencyRetry(observability, event);\n  const searchPath = dbSearchPath(settings);\n  const dbClient = createDb(settings.databaseUrl, {\n    ...(searchPath ? { searchPath } : {}),\n    rlsStrategy: settings.rlsStrategy,\n  });\n  // Readiness must prove PostgreSQL independently of activity demand. Sharing\n  // the default application pool makes the probe wait behind live turns when\n  // all ten slots are occupied, even while PostgreSQL itself is healthy. Since\n  // Kubernetes readiness cannot stop Temporal polling, that false negative\n  // only wedges rollouts and service health; reserve one probe connection.\n  const readinessDbClient = createDb(settings.databaseUrl, {\n    ...(searchPath ? { searchPath } : {}),\n    rlsStrategy: settings.rlsStrategy,\n    max: 1,\n  });\n  const databasePosture = {\n    rlsStrategy: settings.rlsStrategy,\n    expectedRole: settings.runtimeDatabaseRole,\n    targetSchema: settings.dbSchema.trim() || \"public\",\n    organizationTenancyCanonicalActivationEnabled:\n      settings.organizationTenancyCanonicalActivationEnabled,\n  } as const;\n  const controlPlaneAuth = resolveNatsControlPlaneAuth(settings);\n  let bus: Awaited<ReturnType<typeof createNatsEventBus>> | undefined;\n  try {\n    await retryStartupDependency(\n      \"PostgreSQL runtime posture\",\n      () => assertRuntimeDatabasePosture(dbClient.db, databasePosture),\n      { ...retryOptions, onRetry, shouldRetry: isRetryableRuntimeDatabaseStartupError },\n    );\n    bus = await retryStartupDependency(\n      \"NATS\",\n      () =>\n        createNatsEventBus(\n          settings.natsUrl,\n          controlPlaneAuth\n            ? { user: controlPlaneAuth.user, pass: controlPlaneAuth.password }\n            : undefined,\n          observabilityEventBusOptions(observability),\n        ),\n      { ...retryOptions, onRetry },\n    );\n    await runOpenGeniWorker({\n      role,\n      settings,\n      databasePosture,\n      http: { readinessDb: readinessDbClient.db },\n      activityDependencies: {\n        observability,\n        db: dbClient.db,\n        bus,\n      },\n    });\n  } finally {\n    await Promise.allSettled([bus?.close(), readinessDbClient.close(), dbClient.close()]);\n    disposeUnhandledRejectionBoundary();\n  }\n}\n\nif (import.meta.main) {\n  // `bun --watch` keeps its supervisor alive after the application consumes\n  // SIGINT. Once the worker, NATS, DB, and Temporal resources have all closed,\n  // explicitly terminate that supervisor too; otherwise a later file edit can\n  // resurrect this stopped process as a duplicate worker with stale env/code.\n  let interrupted = false;\n  const markInterrupted = () => {\n    interrupted = true;\n  };\n  process.once(\"SIGINT\", markInterrupted);\n  try {\n    await startWorker();\n  } finally {\n    process.off(\"SIGINT\", markInterrupted);\n    if (interrupted) process.exit(0);\n  }\n}\n","import {\n  ActivityCancellationType,\n  ActivityFailure,\n  ApplicationFailure,\n  proxyActivities,\n} from \"@temporalio/workflow\";\nimport type * as activities from \"../activities\";\nimport {\n  KNOWLEDGE_SOURCE_SYNC_ACTIVITY_HEARTBEAT_TIMEOUT_MS,\n  KNOWLEDGE_SOURCE_SYNC_ACTIVITY_MAXIMUM_ATTEMPTS,\n} from \"../knowledge-source-sync-activity-policy\";\n\ntype WorkflowControlActivities = Pick<\n  typeof activities,\n  | \"enqueueGoalRetryWake\"\n  | \"expireSessionHumanInput\"\n  | \"expireSessionInteractionIntervention\"\n  | \"expireScheduledRunHumanWait\"\n  | \"failSessionAttempt\"\n  | \"getCodexCapacityWait\"\n  | \"markSessionIdle\"\n  | \"peekSessionWork\"\n  | \"persistSessionAttemptQuiescence\"\n  | \"reconcileSessionAttemptQuiescence\"\n  | \"reconcileCodexCapacityWait\"\n  | \"recoverDispatch\"\n  | \"recoverEscapedMcpTimeout\"\n  | \"settleSessionInterruptions\"\n  | \"settleSessionInputWait\"\n>;\n\n/**\n * Session/schedule workflow control activities are bounded, idempotent database\n * and provider-metadata operations. They must not inherit the agent turn's\n * 30-day attempt: Temporal cannot otherwise detect that the pod which accepted\n * a non-heartbeating control activity disappeared, leaving the workflow pinned\n * to a dead worker for the full 30 days. A bounded attempt plus an unbounded\n * Temporal retry keeps the durable workflow alive across rollout, node loss, or\n * transient database/network failure; retries re-run on a healthy control pod.\n */\nexport const activity = proxyActivities<WorkflowControlActivities>({\n  startToCloseTimeout: \"2 minutes\",\n  retry: {\n    initialInterval: \"1 second\",\n    backoffCoefficient: 2,\n    maximumInterval: \"30 seconds\",\n  },\n});\n\n/** One schedule occurrence is bounded. Transient control-plane failures get a\n * short retry window, but a revoked binding or other permanent task error must\n * not leave a Temporal activity retrying forever; the next scheduled occurrence\n * is an independent workflow and will re-evaluate current state. */\nexport const scheduledTaskActivity = proxyActivities<\n  Pick<typeof activities, \"dispatchScheduledTaskRun\">\n>({\n  startToCloseTimeout: \"2 minutes\",\n  retry: {\n    initialInterval: \"1 second\",\n    backoffCoefficient: 2,\n    maximumInterval: \"30 seconds\",\n    maximumAttempts: 5,\n  },\n});\n\nexport const automationActivity = proxyActivities<Pick<typeof activities, \"dispatchAutomationRun\">>(\n  {\n    startToCloseTimeout: \"2 minutes\",\n    retry: {\n      initialInterval: \"1 second\",\n      backoffCoefficient: 2,\n      maximumInterval: \"30 seconds\",\n      maximumAttempts: 5,\n    },\n  },\n);\n\n/** Dispatch has a bounded retry window, but an accepted automation event must\n * not remain durably `dispatching` after that window closes. This compensating\n * database write is idempotent and retries without a cap until the run reaches\n * a terminal state (or is observed as already dispatched). */\nexport const automationFailureActivity = proxyActivities<\n  Pick<typeof activities, \"settleAutomationRunFailure\">\n>({\n  startToCloseTimeout: \"2 minutes\",\n  retry: {\n    initialInterval: \"1 second\",\n    backoffCoefficient: 2,\n    maximumInterval: \"30 seconds\",\n  },\n});\n\n/** Goal continuation evaluates a durable Postgres obligation at an idle\n * boundary. A transient failure gets a short retry window, then records an\n * explicit delayed outbox wake instead of relying on an unrelated mutation or\n * keeping workflow history alive with polling. */\nexport const goalActivity = proxyActivities<Pick<typeof activities, \"maybeContinueGoal\">>({\n  startToCloseTimeout: \"30 seconds\",\n  retry: {\n    initialInterval: \"1 second\",\n    backoffCoefficient: 2,\n    maximumInterval: \"5 seconds\",\n    maximumAttempts: 3,\n  },\n});\n\nexport function turnTaskQueue(baseTaskQueue: string): string {\n  return `${baseTaskQueue}-turns`;\n}\n\nexport function turnActivityForTaskQueue(baseTaskQueue: string, receiptGatedCancellation = true) {\n  return proxyActivities<Pick<typeof activities, \"runAgentTurn\">>({\n    taskQueue: turnTaskQueue(baseTaskQueue),\n    // Agent segments legitimately run for days. A started turn heartbeats;\n    // queued activities remain queued truthfully until a capped turn worker\n    // accepts them and performs the atomic claim.\n    startToCloseTimeout: \"30 days\",\n    heartbeatTimeout: \"2 minutes\",\n    // Pause/Steer first closes the exact attempt in Postgres, then asks\n    // Temporal to deliver cancellation. The workflow must not wait for the\n    // Temporal activity promise: a provider cleanup promise can outlive the\n    // fenced activity body, and Temporal terminalization is not proof that\n    // sandbox tools or processes are physically quiescent. The activity owns\n    // that proof and writes an exact receipt after its hard tool fence; the\n    // receipt transaction wakes the workflow to admit a replacement.\n    cancellationType: receiptGatedCancellation\n      ? ActivityCancellationType.TRY_CANCEL\n      : ActivityCancellationType.WAIT_CANCELLATION_COMPLETED,\n    retry: { maximumAttempts: 1 },\n  });\n}\n\nexport function videoGenerationActivityForTaskQueue(baseTaskQueue: string) {\n  return proxyActivities<Pick<typeof activities, \"reconcileVideoGenerationOperation\">>({\n    taskQueue: turnTaskQueue(baseTaskQueue),\n    startToCloseTimeout: \"20 minutes\",\n    retry: {\n      initialInterval: \"1 second\",\n      backoffCoefficient: 2,\n      maximumInterval: \"30 seconds\",\n      maximumAttempts: 3,\n    },\n  });\n}\n\nexport const documentActivity = proxyActivities<Pick<typeof activities, \"indexDocument\">>({\n  startToCloseTimeout: \"30 minutes\",\n  retry: { maximumAttempts: 1 },\n});\n\n/** Connector inventory/download/index batches are provider-I/O activities. The\n * implementation heartbeats between bounded items and owns its resumable\n * checkpoint; Temporal retries therefore repeat only idempotent source/object\n * operations and never invoke the agent runtime. */\nexport const knowledgeSourceSyncActivity = proxyActivities<\n  Pick<typeof activities, \"runKnowledgeSourceSyncBatch\">\n>({\n  startToCloseTimeout: \"1 hour\",\n  heartbeatTimeout: KNOWLEDGE_SOURCE_SYNC_ACTIVITY_HEARTBEAT_TIMEOUT_MS,\n  retry: {\n    initialInterval: \"2 seconds\",\n    backoffCoefficient: 2,\n    maximumInterval: \"1 minute\",\n    maximumAttempts: KNOWLEDGE_SOURCE_SYNC_ACTIVITY_MAXIMUM_ATTEMPTS,\n  },\n});\n\nexport function workflowFailureMessage(error: unknown): string {\n  if (\n    error instanceof ActivityFailure &&\n    error.activityType === \"runAgentTurn\" &&\n    error.cause instanceof ApplicationFailure &&\n    error.cause.type === \"TurnExecutionPolicyDefinitionMismatchError\"\n  ) {\n    return error.cause.message;\n  }\n  if (error instanceof Error) {\n    return error.message;\n  }\n  return String(error);\n}\n","export const KNOWLEDGE_SOURCE_SYNC_ACTIVITY_HEARTBEAT_TIMEOUT_MS = 120_000;\nexport const KNOWLEDGE_SOURCE_SYNC_ACTIVITY_MAXIMUM_ATTEMPTS = 1;\n","import type { Settings } from \"@opengeni/config\";\nimport {\n  assertRuntimeDatabasePosture,\n  dbSql,\n  type Database,\n  type RuntimeDatabasePostureOptions,\n} from \"@opengeni/db\";\nimport { requireSessionEventDurableFanoutCapability, type EventBus } from \"@opengeni/events\";\nimport { githubAppBotIdentityWarnings } from \"@opengeni/github\";\nimport type { Observability } from \"@opengeni/observability\";\n\nexport type ReadinessCheckName = \"db\" | \"nats\" | \"temporal\";\nexport type ReadinessChecks = Record<ReadinessCheckName, () => Promise<void> | void>;\n\nexport type ReadinessResult = {\n  ok: boolean;\n  state?: WorkerLifecycleState;\n  checks: Record<ReadinessCheckName, { ok: boolean; error?: string }>;\n};\n\nexport type WorkerLifecycleState = \"starting\" | \"ready\" | \"draining\" | \"stopped\" | \"failed\";\n\nexport type WorkerHttpLifecycle = {\n  role: \"control\" | \"turn\";\n  state: () => WorkerLifecycleState;\n};\n\nexport type WorkerHttpServerInput = {\n  settings: Settings;\n  observability: Observability;\n  checks: ReadinessChecks;\n  timeoutMs?: number;\n  lifecycle?: WorkerHttpLifecycle;\n};\n\nexport function createWorkerHttpHandler(\n  input: WorkerHttpServerInput,\n): (request: Request) => Promise<Response> {\n  const { settings, observability, checks, lifecycle } = input;\n  const timeoutMs = input.timeoutMs ?? 2_000;\n  return async (request) => {\n    const url = new URL(request.url);\n    if (request.method !== \"GET\") {\n      return Response.json({ error: \"method_not_allowed\" }, { status: 405 });\n    }\n    if (url.pathname === \"/healthz\") {\n      const state = lifecycle?.state();\n      const ok = state !== \"failed\" && state !== \"stopped\";\n      const warnings = githubAppBotIdentityWarnings(settings);\n      return Response.json(\n        {\n          service: settings.serviceName,\n          environment: settings.environment,\n          deploymentRevision: settings.deploymentRevision,\n          ...(lifecycle ? { role: lifecycle.role, state } : {}),\n          ...(warnings.length > 0 ? { warnings } : {}),\n          ok,\n        },\n        { status: ok ? 200 : 503 },\n      );\n    }\n    if (url.pathname === \"/metrics\") {\n      return new Response(await observability.prometheusMetrics(), {\n        status: 200,\n        headers: { \"content-type\": \"text/plain; version=0.0.4; charset=utf-8\" },\n      });\n    }\n    if (url.pathname === \"/readyz\") {\n      const state = lifecycle?.state();\n      const result =\n        state && state !== \"ready\"\n          ? {\n              ok: false,\n              state,\n              checks: Object.fromEntries(\n                (Object.keys(checks) as ReadinessCheckName[]).map((name) => [\n                  name,\n                  { ok: false, error: \"worker_not_ready\" },\n                ]),\n              ) as ReadinessResult[\"checks\"],\n            }\n          : { ...(await runReadinessChecks(checks, timeoutMs)), ...(state ? { state } : {}) };\n      return Response.json(result, { status: result.ok ? 200 : 503 });\n    }\n    return Response.json({ error: \"not_found\" }, { status: 404 });\n  };\n}\n\nexport function startWorkerHttpServer(input: WorkerHttpServerInput): ReturnType<typeof Bun.serve> {\n  return Bun.serve({\n    hostname: \"0.0.0.0\",\n    port: input.settings.workerHttpPort,\n    fetch: createWorkerHttpHandler(input),\n  });\n}\n\nexport async function runReadinessChecks(\n  checks: ReadinessChecks,\n  timeoutMs = 2_000,\n): Promise<ReadinessResult> {\n  const entries = await Promise.all(\n    (Object.entries(checks) as Array<[ReadinessCheckName, () => Promise<void> | void]>).map(\n      async ([name, check]) => {\n        try {\n          await withTimeout(Promise.resolve().then(check), timeoutMs);\n          return [name, { ok: true }] as const;\n        } catch {\n          return [name, { ok: false, error: \"dependency_unavailable\" }] as const;\n        }\n      },\n    ),\n  );\n  const result = Object.fromEntries(entries) as ReadinessResult[\"checks\"];\n  return {\n    ok: Object.values(result).every((check) => check.ok),\n    checks: result,\n  };\n}\n\nexport function dbReadyCheck(\n  db: Database,\n  posture?: RuntimeDatabasePostureOptions,\n): () => Promise<void> {\n  let inFlight: Promise<void> | undefined;\n  return () => {\n    // The HTTP timeout cannot cancel a driver query. Reuse an outstanding\n    // attempt so repeated kubelet probes cannot queue an unbounded tail behind\n    // one slow or disconnected database connection.\n    if (inFlight) return inFlight;\n    inFlight = (async () => {\n      if (posture) {\n        await assertRuntimeDatabasePosture(db, posture);\n        return;\n      }\n      await db.execute(dbSql`select 1`);\n    })().finally(() => {\n      inFlight = undefined;\n    });\n    return inFlight;\n  };\n}\n\nexport function natsReadyCheck(bus: EventBus): () => void {\n  return () => {\n    requireSessionEventDurableFanoutCapability(bus);\n    if (bus.isConnected && !bus.isConnected()) {\n      throw new Error(\"NATS is not connected\");\n    }\n  };\n}\n\nexport function temporalReadyCheck(\n  connection: Pick<\n    import(\"@temporalio/worker\").NativeConnection,\n    \"workflowService\" | \"withDeadline\"\n  >,\n): () => Promise<void> {\n  return async () => {\n    await connection.withDeadline(Date.now() + 2_000, () =>\n      connection.workflowService.getSystemInfo({}),\n    );\n  };\n}\n\nasync function withTimeout<T>(promise: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<never>((_, reject) => {\n        timer = setTimeout(\n          () => reject(new Error(`readiness check timed out after ${timeoutMs}ms`)),\n          timeoutMs,\n        );\n      }),\n    ]);\n  } finally {\n    if (timer) {\n      clearTimeout(timer);\n    }\n  }\n}\n","import type { Observability } from \"@opengeni/observability\";\nimport type { WorkerLifecycleState } from \"./http\";\n\nexport async function constructWithOwnedConnection<Connection, Result>(\n  connect: () => Promise<Connection>,\n  construct: (connection: Connection) => Promise<Result>,\n  close: (connection: Connection) => Promise<void>,\n): Promise<Result> {\n  const connection = await connect();\n  try {\n    return await construct(connection);\n  } catch (error) {\n    await close(connection).catch(() => undefined);\n    throw error;\n  }\n}\n\nexport type WorkerRunTarget = {\n  run(): Promise<void>;\n  shutdown(): void;\n};\n\n/** One process may poll several disjoint Temporal queues, but it still has one\n * host lifecycle. Start and stop every poller as a unit; a failed poller drains\n * its siblings and preserves the original failure. */\nexport function combineWorkerRunTargets(targets: readonly WorkerRunTarget[]): WorkerRunTarget {\n  if (targets.length === 0) {\n    throw new Error(\"a worker service requires at least one Temporal poller\");\n  }\n  let runPromise: Promise<void> | undefined;\n  const shutdown = (): void => {\n    let firstError: unknown;\n    for (const target of targets) {\n      try {\n        target.shutdown();\n      } catch (error) {\n        firstError ??= error;\n      }\n    }\n    if (firstError !== undefined) throw firstError;\n  };\n  return {\n    run: () => {\n      runPromise ??= (async () => {\n        const runs = targets.map((target) => {\n          try {\n            return target.run();\n          } catch (error) {\n            return Promise.reject(error);\n          }\n        });\n        try {\n          await Promise.all(runs);\n        } catch (error) {\n          try {\n            shutdown();\n          } catch {\n            // Preserve the poller failure. Every sibling still received its\n            // shutdown request even when one request itself failed.\n          }\n          await Promise.allSettled(runs);\n          throw error;\n        }\n      })();\n      return runPromise;\n    },\n    shutdown,\n  };\n}\n\nexport type WorkerServiceLifecycle = {\n  state(): WorkerLifecycleState;\n  run(): Promise<void>;\n  drain(reason?: string): boolean;\n  close(): Promise<void>;\n};\n\nexport function createWorkerServiceLifecycle(input: {\n  role: \"control\" | \"turn\";\n  worker: WorkerRunTarget;\n  observability: Observability;\n  closeOwnedResources: () => Promise<void>;\n  onReady?: () => void;\n}): WorkerServiceLifecycle {\n  let state: WorkerLifecycleState = \"starting\";\n  let runPromise: Promise<void> | undefined;\n  let resourcesClosed: Promise<void> | undefined;\n  const closeOwnedResources = () => {\n    resourcesClosed ??= input.closeOwnedResources();\n    return resourcesClosed;\n  };\n\n  const lifecycle: WorkerServiceLifecycle = {\n    state: () => state,\n    run: () => {\n      if (!runPromise && state === \"draining\") {\n        runPromise = (async () => {\n          state = \"stopped\";\n          await closeOwnedResources();\n        })();\n        return runPromise;\n      }\n      if (!runPromise && (state === \"stopped\" || state === \"failed\")) {\n        return Promise.reject(new Error(`cannot run a worker service that is ${state}`));\n      }\n      runPromise ??= (async () => {\n        if (state === \"starting\") {\n          state = \"ready\";\n        }\n        input.onReady?.();\n        try {\n          await input.worker.run();\n          state = \"stopped\";\n        } catch (error) {\n          state = \"failed\";\n          throw error;\n        } finally {\n          await closeOwnedResources();\n        }\n      })();\n      return runPromise;\n    },\n    drain: (_reason = \"host request\") => {\n      if (state === \"draining\" || state === \"stopped\" || state === \"failed\") {\n        return true;\n      }\n      const previousState = state;\n      safeLifecycleLog(() =>\n        input.observability.info(\"OpenGeni worker draining (graceful shutdown)\", {\n          role: input.role,\n          errorClass: \"WorkerLifecycleOperation\",\n          errorCode: \"worker_draining\",\n          origin: \"worker-lifecycle\",\n        }),\n      );\n      state = \"draining\";\n      try {\n        input.worker.shutdown();\n        return true;\n      } catch {\n        state = previousState;\n        safeLifecycleLog(() =>\n          input.observability.warn(\"worker shutdown request failed\", {\n            errorClass: \"WorkerLifecycleOperationError\",\n            errorCode: \"worker_shutdown_request_failed\",\n            origin: \"worker-lifecycle\",\n          }),\n        );\n        return false;\n      }\n    },\n    close: async () => {\n      if (!lifecycle.drain(\"service close\")) {\n        throw new Error(\"worker shutdown request failed\");\n      }\n      if (runPromise) {\n        await runPromise.catch(() => undefined);\n      } else {\n        state = \"stopped\";\n        await closeOwnedResources();\n      }\n    },\n  };\n\n  return lifecycle;\n}\n\nfunction safeLifecycleLog(log: () => void): void {\n  try {\n    log();\n  } catch {\n    // Telemetry cannot change worker lifecycle state or shutdown delivery.\n  }\n}\n","import { readFileSync } from \"node:fs\";\nimport { freemem, totalmem } from \"node:os\";\nimport { posix } from \"node:path\";\nimport type { Settings } from \"@opengeni/config\";\nimport type { Observability } from \"@opengeni/observability\";\n\nexport type TurnWorkerMemoryScope = \"host\" | \"cgroup\";\n\nexport type TurnWorkerMemoryScopeSnapshot = {\n  scope: TurnWorkerMemoryScope;\n  usedBytes: number;\n  limitBytes: number;\n};\n\nexport type TurnWorkerMemoryPressureSnapshot = {\n  processRssBytes: number;\n  processHeapUsedBytes: number;\n  processExternalBytes: number;\n  processArrayBuffersBytes: number;\n  scopes: TurnWorkerMemoryScopeSnapshot[];\n};\n\nexport type TurnWorkerMemoryPressureGuard = {\n  sampleNow(): void;\n  close(): void;\n};\n\ntype GuardSettings = Pick<\n  Settings,\n  | \"turnWorkerConcurrencyMode\"\n  | \"turnWorkerTargetMemoryUsage\"\n  | \"turnWorkerEmergencyMemoryUsage\"\n  | \"turnWorkerMemoryGuardIntervalMs\"\n  | \"turnWorkerMemoryGuardSustainMs\"\n>;\n\ntype GuardDependencies = {\n  now?: () => number;\n  sample?: () => TurnWorkerMemoryPressureSnapshot;\n  setInterval?: typeof setInterval;\n  clearInterval?: typeof clearInterval;\n  gc?: () => void;\n};\n\ntype SnapshotDependencies = {\n  readText?: (path: string) => string | null;\n  hostTotalBytes?: () => number;\n  hostAvailableBytes?: () => number;\n  processMemoryUsage?: () => Pick<\n    NodeJS.MemoryUsage,\n    \"rss\" | \"heapUsed\" | \"external\" | \"arrayBuffers\"\n  >;\n};\n\nexport type ProcessCgroupMembership = {\n  v2Path: string | null;\n  v1MemoryPath: string | null;\n};\n\nexport type CgroupMemoryFilePair = {\n  currentPath: string;\n  maxPath: string;\n};\n\nconst CGROUP_V2_MOUNT = \"/sys/fs/cgroup\";\nconst CGROUP_V1_MEMORY_MOUNT = \"/sys/fs/cgroup/memory\";\n\nexport function parseLinuxMeminfo(\n  value: string,\n): { totalBytes: number; availableBytes: number } | null {\n  const fields = new Map<string, number>();\n  for (const line of value.split(\"\\n\")) {\n    const match = /^([A-Za-z_()]+):\\s+(\\d+)\\s+kB$/.exec(line.trim());\n    if (!match) continue;\n    fields.set(match[1] as string, Number(match[2]) * 1024);\n  }\n  const totalBytes = fields.get(\"MemTotal\");\n  const availableBytes = fields.get(\"MemAvailable\");\n  if (\n    totalBytes === undefined ||\n    availableBytes === undefined ||\n    !Number.isFinite(totalBytes) ||\n    !Number.isFinite(availableBytes) ||\n    totalBytes <= 0 ||\n    availableBytes < 0\n  ) {\n    return null;\n  }\n  return { totalBytes, availableBytes: Math.min(totalBytes, availableBytes) };\n}\n\nexport function parseFiniteCgroupMemoryLimit(value: string): number | null {\n  const trimmed = value.trim();\n  if (!trimmed || trimmed === \"max\") return null;\n  const parsed = Number(trimmed);\n  // cgroup v1 represents \"unlimited\" with a near-int64 sentinel. Treat only\n  // realistic finite limits as authority; host headroom remains the fallback.\n  if (!Number.isSafeInteger(parsed) || parsed <= 0 || parsed >= 2 ** 60) return null;\n  return parsed;\n}\n\nexport function parseProcessCgroupMembership(value: string): ProcessCgroupMembership {\n  let v2Path: string | null = null;\n  let v1MemoryPath: string | null = null;\n  for (const line of value.split(\"\\n\")) {\n    const firstSeparator = line.indexOf(\":\");\n    const secondSeparator = line.indexOf(\":\", firstSeparator + 1);\n    if (firstSeparator <= 0 || secondSeparator < 0) continue;\n    const hierarchyId = line.slice(0, firstSeparator);\n    const controllers = line.slice(firstSeparator + 1, secondSeparator);\n    const path = normalizeCgroupPath(line.slice(secondSeparator + 1));\n    if (!path) continue;\n    if (hierarchyId === \"0\" && controllers === \"\") {\n      v2Path = path;\n    }\n    if (controllers.split(\",\").includes(\"memory\")) {\n      v1MemoryPath = path;\n    }\n  }\n  return { v2Path, v1MemoryPath };\n}\n\nexport function cgroupMemoryFilePairs(membership: ProcessCgroupMembership): CgroupMemoryFilePair[] {\n  const pairs: CgroupMemoryFilePair[] = [];\n  const seen = new Set<string>();\n  const appendHierarchy = (\n    mount: string,\n    path: string | null,\n    currentFilename: string,\n    maxFilename: string,\n  ) => {\n    for (const candidate of cgroupAncestorPaths(path ?? \"/\")) {\n      const relative = candidate === \"/\" ? \"\" : candidate.slice(1);\n      const currentPath = posix.join(mount, relative, currentFilename);\n      const maxPath = posix.join(mount, relative, maxFilename);\n      const key = `${currentPath}\\0${maxPath}`;\n      if (seen.has(key)) continue;\n      seen.add(key);\n      pairs.push({ currentPath, maxPath });\n    }\n  };\n\n  appendHierarchy(CGROUP_V2_MOUNT, membership.v2Path, \"memory.current\", \"memory.max\");\n  appendHierarchy(\n    CGROUP_V1_MEMORY_MOUNT,\n    membership.v1MemoryPath,\n    \"memory.usage_in_bytes\",\n    \"memory.limit_in_bytes\",\n  );\n  return pairs;\n}\n\nexport function readTurnWorkerMemoryPressureSnapshot(\n  dependencies: SnapshotDependencies = {},\n): TurnWorkerMemoryPressureSnapshot {\n  const readText = dependencies.readText ?? readTextOrNull;\n  const linux = parseLinuxMeminfo(readText(\"/proc/meminfo\") ?? \"\");\n  const hostTotalBytes = linux?.totalBytes ?? (dependencies.hostTotalBytes ?? totalmem)();\n  const hostAvailableBytes =\n    linux?.availableBytes ?? (dependencies.hostAvailableBytes ?? freemem)();\n  const host = {\n    scope: \"host\" as const,\n    usedBytes: Math.max(0, hostTotalBytes - Math.min(hostTotalBytes, hostAvailableBytes)),\n    limitBytes: hostTotalBytes,\n  };\n  const cgroup = readCgroupMemoryScope(readText);\n  // A finite process cgroup is the pod's actual admission boundary. Host\n  // pressure includes unrelated workloads and must not make every replica\n  // drain simultaneously; use it only when no finite cgroup authority exists.\n  const processMemory = (dependencies.processMemoryUsage ?? process.memoryUsage)();\n\n  return {\n    processRssBytes: processMemory.rss,\n    processHeapUsedBytes: processMemory.heapUsed,\n    processExternalBytes: processMemory.external,\n    processArrayBuffersBytes: processMemory.arrayBuffers,\n    scopes: [cgroup ?? host],\n  };\n}\n\nexport function turnWorkerMemoryPressureGuardEnabled(\n  role: \"control\" | \"turn\",\n  settings: Pick<Settings, \"turnWorkerConcurrencyMode\">,\n): boolean {\n  return role === \"turn\" && settings.turnWorkerConcurrencyMode === \"resource-based\";\n}\n\nexport function createTurnWorkerMemoryPressureGuard(input: {\n  settings: GuardSettings;\n  observability: Observability;\n  drain: () => void;\n  dependencies?: GuardDependencies;\n}): TurnWorkerMemoryPressureGuard {\n  const now = input.dependencies?.now ?? Date.now;\n  const sample = input.dependencies?.sample ?? readTurnWorkerMemoryPressureSnapshot;\n  const schedule = input.dependencies?.setInterval ?? setInterval;\n  const cancel = input.dependencies?.clearInterval ?? clearInterval;\n  const collectGarbage = input.dependencies?.gc ?? (() => Bun.gc(false));\n  const breachStartedAt = new Map<TurnWorkerMemoryScope, number>();\n  let lastGcAt = Number.NEGATIVE_INFINITY;\n  let drainRequested = false;\n  let closed = false;\n\n  const sampleNow = () => {\n    if (closed) return;\n    const observedAt = now();\n    let snapshot: TurnWorkerMemoryPressureSnapshot;\n    try {\n      snapshot = sample();\n    } catch {\n      breachStartedAt.clear();\n      safeIncrementCounter(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_sample_failures_total\",\n        help: \"Turn-worker memory pressure guard samples that could not be read.\",\n      });\n      return;\n    }\n\n    const validScopes = snapshot.scopes.filter(\n      ({ usedBytes, limitBytes }) =>\n        Number.isFinite(usedBytes) &&\n        Number.isFinite(limitBytes) &&\n        usedBytes >= 0 &&\n        limitBytes > 0,\n    );\n    if (validScopes.length === 0) {\n      breachStartedAt.clear();\n      safeIncrementCounter(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_sample_failures_total\",\n        help: \"Turn-worker memory pressure guard samples that could not be read.\",\n      });\n      return;\n    }\n\n    const sustainedBreaches: Array<{\n      scope: TurnWorkerMemoryScope;\n      utilizationRatio: number;\n      breachSeconds: number;\n    }> = [];\n    for (const [kind, value] of [\n      [\"rss\", snapshot.processRssBytes],\n      [\"heap_used\", snapshot.processHeapUsedBytes],\n      [\"external\", snapshot.processExternalBytes],\n      [\"array_buffers\", snapshot.processArrayBuffersBytes],\n    ] as const) {\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_process_memory_bytes\",\n        help: \"Turn-worker process memory by runtime-reported category.\",\n        labels: { kind },\n        value: Number.isFinite(value) && value >= 0 ? value : 0,\n      });\n    }\n    let shouldCollectGarbage = false;\n    for (const scope of validScopes) {\n      const utilizationRatio = scope.usedBytes / scope.limitBytes;\n      const processRssRatio = snapshot.processRssBytes / scope.limitBytes;\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_utilization_ratio\",\n        help: \"Observed memory utilization ratio used by the turn-worker pressure guard.\",\n        labels: { scope: scope.scope },\n        value: utilizationRatio,\n      });\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_target_ratio\",\n        help: \"Memory admission target enforced by the Temporal resource tuner.\",\n        labels: { scope: scope.scope },\n        value: input.settings.turnWorkerTargetMemoryUsage,\n      });\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_emergency_ratio\",\n        help: \"Emergency memory threshold enforced by the turn-worker pressure guard.\",\n        labels: { scope: scope.scope },\n        value: input.settings.turnWorkerEmergencyMemoryUsage,\n      });\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_available_bytes\",\n        help: \"Memory headroom remaining in the turn-worker pressure guard scope.\",\n        labels: { scope: scope.scope },\n        value: Math.max(0, scope.limitBytes - scope.usedBytes),\n      });\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_process_rss_ratio\",\n        help: \"Turn-worker RSS as a ratio of the observed host or finite cgroup memory scope.\",\n        labels: { scope: scope.scope },\n        value: processRssRatio,\n      });\n      shouldCollectGarbage ||= processRssRatio >= input.settings.turnWorkerTargetMemoryUsage;\n\n      if (utilizationRatio < input.settings.turnWorkerEmergencyMemoryUsage) {\n        breachStartedAt.delete(scope.scope);\n        safeSetGauge(input.observability, {\n          name: \"opengeni_turn_worker_memory_guard_breach_seconds\",\n          help: \"Seconds the turn-worker emergency threshold has remained continuously breached.\",\n          labels: { scope: scope.scope },\n          value: 0,\n        });\n        continue;\n      }\n\n      const startedAt = breachStartedAt.get(scope.scope) ?? observedAt;\n      breachStartedAt.set(scope.scope, startedAt);\n      const breachMs = Math.max(0, observedAt - startedAt);\n      const breachSeconds = breachMs / 1_000;\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_breach_seconds\",\n        help: \"Seconds the turn-worker emergency threshold has remained continuously breached.\",\n        labels: { scope: scope.scope },\n        value: breachSeconds,\n      });\n      if (breachMs >= input.settings.turnWorkerMemoryGuardSustainMs) {\n        sustainedBreaches.push({ scope: scope.scope, utilizationRatio, breachSeconds });\n      }\n    }\n\n    // Large request buffers can become unreachable well before JSC's ordinary\n    // heap trigger notices native/external pressure. Nudge an asynchronous GC\n    // at most once per sustain window before escalating to a worker drain.\n    const sustainedBreachesHadGcOpportunity =\n      sustainedBreaches.length > 0 &&\n      sustainedBreaches.every(({ scope }) => {\n        const breachStarted = breachStartedAt.get(scope);\n        return breachStarted !== undefined && lastGcAt >= breachStarted && lastGcAt < observedAt;\n      });\n    let collectedGarbageThisSample = false;\n    if (\n      shouldCollectGarbage &&\n      observedAt - lastGcAt >= input.settings.turnWorkerMemoryGuardSustainMs &&\n      (sustainedBreaches.length === 0 || !sustainedBreachesHadGcOpportunity)\n    ) {\n      lastGcAt = observedAt;\n      try {\n        collectGarbage();\n        collectedGarbageThisSample = true;\n        safeIncrementCounter(input.observability, {\n          name: \"opengeni_turn_worker_memory_guard_gc_total\",\n          help: \"Proactive garbage-collection nudges under process memory pressure.\",\n        });\n      } catch {\n        safeIncrementCounter(input.observability, {\n          name: \"opengeni_turn_worker_memory_guard_gc_failures_total\",\n          help: \"Proactive memory-pressure garbage-collection nudges that failed.\",\n        });\n      }\n    }\n\n    // The nudge is asynchronous. Give it one sampling interval to make the\n    // reclaimed RSS visible before deciding that process recycling is needed.\n    if (\n      (collectedGarbageThisSample && !sustainedBreachesHadGcOpportunity) ||\n      drainRequested ||\n      sustainedBreaches.length === 0\n    ) {\n      return;\n    }\n\n    const primaryBreach = sustainedBreaches.sort(\n      (left, right) => right.utilizationRatio - left.utilizationRatio,\n    )[0];\n    if (!primaryBreach) return;\n\n    drainRequested = true;\n    safeIncrementCounter(input.observability, {\n      name: \"opengeni_turn_worker_memory_guard_drains_total\",\n      help: \"Graceful turn-worker drains requested after sustained memory pressure.\",\n      labels: { scope: primaryBreach.scope },\n    });\n    safeWarn(input.observability, \"turn worker memory guard requested graceful drain\", {\n      errorClass: \"WorkerLifecycleOperation\",\n      errorCode: \"worker_draining\",\n      origin: \"worker-lifecycle\",\n      reason: `memory pressure (${primaryBreach.scope}, ${boundedRatio(primaryBreach.utilizationRatio)} >= ${input.settings.turnWorkerEmergencyMemoryUsage}, ${primaryBreach.breachSeconds}s)`,\n    });\n    try {\n      input.drain();\n    } catch {\n      drainRequested = false;\n      safeIncrementCounter(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_drain_failures_total\",\n        help: \"Turn-worker memory pressure guard drain requests that failed synchronously.\",\n        labels: { scope: primaryBreach.scope },\n      });\n      safeWarn(input.observability, \"turn worker memory guard drain request failed\", {\n        errorClass: \"WorkerLifecycleOperationError\",\n        errorCode: \"worker_shutdown_request_failed\",\n        origin: \"worker-lifecycle\",\n      });\n    }\n  };\n\n  const timer = schedule(sampleNow, input.settings.turnWorkerMemoryGuardIntervalMs);\n  timer.unref?.();\n  sampleNow();\n\n  return {\n    sampleNow,\n    close: () => {\n      if (closed) return;\n      closed = true;\n      cancel(timer);\n    },\n  };\n}\n\nfunction readCgroupMemoryScope(\n  readText: (path: string) => string | null,\n): TurnWorkerMemoryScopeSnapshot | null {\n  const membership = parseProcessCgroupMembership(readText(\"/proc/self/cgroup\") ?? \"\");\n  let mostPressured: TurnWorkerMemoryScopeSnapshot | null = null;\n  for (const { currentPath, maxPath } of cgroupMemoryFilePairs(membership)) {\n    const currentRaw = readText(currentPath);\n    const maxRaw = readText(maxPath);\n    if (currentRaw === null || maxRaw === null) continue;\n    const current = Number(currentRaw.trim());\n    const limit = parseFiniteCgroupMemoryLimit(maxRaw);\n    if (!Number.isFinite(current) || current < 0 || limit === null) continue;\n    const candidate = { scope: \"cgroup\" as const, usedBytes: current, limitBytes: limit };\n    if (\n      !mostPressured ||\n      candidate.usedBytes / candidate.limitBytes >\n        mostPressured.usedBytes / mostPressured.limitBytes\n    ) {\n      mostPressured = candidate;\n    }\n  }\n  return mostPressured;\n}\n\nfunction readTextOrNull(path: string): string | null {\n  try {\n    return readFileSync(path, \"utf8\");\n  } catch {\n    return null;\n  }\n}\n\nfunction boundedRatio(value: number): number {\n  return Math.round(Math.max(0, Math.min(value, 10)) * 1_000_000) / 1_000_000;\n}\n\nfunction normalizeCgroupPath(value: string): string | null {\n  const trimmed = value.trim();\n  if (!trimmed.startsWith(\"/\") || trimmed.includes(\"\\0\")) return null;\n  if (trimmed.split(\"/\").includes(\"..\")) return null;\n  return posix.normalize(trimmed);\n}\n\nfunction cgroupAncestorPaths(path: string): string[] {\n  const ancestors: string[] = [];\n  let current = path;\n  while (true) {\n    ancestors.push(current);\n    if (current === \"/\") return ancestors;\n    current = posix.dirname(current);\n  }\n}\n\nfunction safeSetGauge(\n  observability: Observability,\n  input: Parameters<Observability[\"setGauge\"]>[0],\n): void {\n  try {\n    observability.setGauge(input);\n  } catch {\n    // Telemetry cannot disable the memory-safety action.\n  }\n}\n\nfunction safeIncrementCounter(\n  observability: Observability,\n  input: Parameters<Observability[\"incrementCounter\"]>[0],\n): void {\n  try {\n    observability.incrementCounter(input);\n  } catch {\n    // Telemetry cannot disable the memory-safety action.\n  }\n}\n\nfunction safeWarn(\n  observability: Observability,\n  message: string,\n  attributes: Parameters<Observability[\"warn\"]>[1],\n): void {\n  try {\n    observability.warn(message, attributes);\n  } catch {\n    // Telemetry cannot disable the memory-safety action.\n  }\n}\n","export type WorkerUnhandledRejectionProcess = {\n  on: (event: \"unhandledRejection\", listener: (reason: unknown) => void) => void;\n  off: (event: \"unhandledRejection\", listener: (reason: unknown) => void) => void;\n};\n\nexport type WorkerUnhandledRejectionClassification =\n  | \"detached_runtime_mcp_lifecycle\"\n  | \"detached_unknown\";\n\ntype RuntimeMcpLifecycleError = {\n  name: \"McpLifecycleError\";\n  code: \"mcp_connect_failed\" | \"mcp_close_failed\";\n  origin: \"runtime\";\n  serverId: string;\n};\n\n/**\n * The Agents SDK owns MCP connect promises and also installs a process-global\n * unhandled-rejection listener. A best-effort lifecycle rejection can surface\n * twice under concurrent teardown: once through the awaited MCP result and once\n * through the SDK's detached worker promise. The first path already records and\n * degrades the server; the second must not terminate the whole turn-worker pod.\n */\nexport function isDetachedRuntimeMcpLifecycleRejection(\n  reason: unknown,\n): reason is RuntimeMcpLifecycleError {\n  try {\n    if (!reason || typeof reason !== \"object\") return false;\n    const candidate = reason as Partial<RuntimeMcpLifecycleError>;\n    return (\n      candidate.name === \"McpLifecycleError\" &&\n      (candidate.code === \"mcp_connect_failed\" || candidate.code === \"mcp_close_failed\") &&\n      candidate.origin === \"runtime\" &&\n      typeof candidate.serverId === \"string\" &&\n      candidate.serverId.length > 0\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction reportIsolatedUnhandledRejection(\n  classification: WorkerUnhandledRejectionClassification,\n): void {\n  // Never render the rejection itself: provider and transport errors can carry\n  // request bodies or credentials. The durable activity path owns exact errors.\n  console.error(\"[worker] isolated detached unhandled rejection\", { classification });\n}\n\n/**\n * Keep process-global promise rejection handling observational. Turn activities\n * have their own durable failure/lease boundary; killing the shared worker here\n * converts one detached SDK/transport promise into unrelated lease losses across\n * every session assigned to the pod. The Agents SDK also checks for a consumer\n * listener before applying its own process.exit(1), so this boundary must never\n * reintroduce that fail-fast behavior for an unknown rejection shape.\n */\nexport function installWorkerUnhandledRejectionBoundary(\n  runtimeProcess: WorkerUnhandledRejectionProcess = process,\n  report: (\n    classification: WorkerUnhandledRejectionClassification,\n  ) => void = reportIsolatedUnhandledRejection,\n): () => void {\n  const onUnhandledRejection = (reason: unknown): void => {\n    report(\n      isDetachedRuntimeMcpLifecycleRejection(reason)\n        ? \"detached_runtime_mcp_lifecycle\"\n        : \"detached_unknown\",\n    );\n  };\n  runtimeProcess.on(\"unhandledRejection\", onUnhandledRejection);\n  return () => runtimeProcess.off(\"unhandledRejection\", onUnhandledRejection);\n}\n","export const BROWSER_DEADLINE_CHECKPOINT_SWEEP_ID = \"opengeni-browser-deadline-checkpoints-v1\";\nconst QUEUE_SUFFIX = \"-browser-checkpoint-v1\";\nexport function browserDeadlineCheckpointTaskQueue(base: string): string {\n  return base.endsWith(QUEUE_SUFFIX) ? base : `${base}${QUEUE_SUFFIX}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE,gCAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA,8CAAAC;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,OACK;AACP,SAAS,kBAAkB,cAAyC;AACpE,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;;;ACvC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACLA,IAAM,sDAAsD;AAC5D,IAAM,kDAAkD;;;ADuCxD,IAAM,WAAW,gBAA2C;AAAA,EACjE,qBAAqB;AAAA,EACrB,OAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AACF,CAAC;AAMM,IAAM,wBAAwB,gBAEnC;AAAA,EACA,qBAAqB;AAAA,EACrB,OAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AACF,CAAC;AAEM,IAAM,qBAAqB;AAAA,EAChC;AAAA,IACE,qBAAqB;AAAA,IACrB,OAAO;AAAA,MACL,iBAAiB;AAAA,MACjB,oBAAoB;AAAA,MACpB,iBAAiB;AAAA,MACjB,iBAAiB;AAAA,IACnB;AAAA,EACF;AACF;AAMO,IAAM,4BAA4B,gBAEvC;AAAA,EACA,qBAAqB;AAAA,EACrB,OAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AACF,CAAC;AAMM,IAAM,eAAe,gBAA8D;AAAA,EACxF,qBAAqB;AAAA,EACrB,OAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AACF,CAAC;AAEM,SAAS,cAAc,eAA+B;AAC3D,SAAO,GAAG,aAAa;AACzB;AAqCO,IAAM,mBAAmB,gBAA0D;AAAA,EACxF,qBAAqB;AAAA,EACrB,OAAO,EAAE,iBAAiB,EAAE;AAC9B,CAAC;AAMM,IAAM,8BAA8B,gBAEzC;AAAA,EACA,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,OAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AACF,CAAC;;;AEpKD;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,kDAAiE;AAC1E,SAAS,oCAAoC;AA2BtC,SAAS,wBACd,OACyC;AACzC,QAAM,EAAE,UAAU,eAAe,QAAQ,UAAU,IAAI;AACvD,QAAM,YAAY,MAAM,aAAa;AACrC,SAAO,OAAO,YAAY;AACxB,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAI,QAAQ,WAAW,OAAO;AAC5B,aAAO,SAAS,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AACA,QAAI,IAAI,aAAa,YAAY;AAC/B,YAAM,QAAQ,WAAW,MAAM;AAC/B,YAAM,KAAK,UAAU,YAAY,UAAU;AAC3C,YAAM,WAAW,6BAA6B,QAAQ;AACtD,aAAO,SAAS;AAAA,QACd;AAAA,UACE,SAAS,SAAS;AAAA,UAClB,aAAa,SAAS;AAAA,UACtB,oBAAoB,SAAS;AAAA,UAC7B,GAAI,YAAY,EAAE,MAAM,UAAU,MAAM,MAAM,IAAI,CAAC;AAAA,UACnD,GAAI,SAAS,SAAS,IAAI,EAAE,SAAS,IAAI,CAAC;AAAA,UAC1C;AAAA,QACF;AAAA,QACA,EAAE,QAAQ,KAAK,MAAM,IAAI;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,IAAI,aAAa,YAAY;AAC/B,aAAO,IAAI,SAAS,MAAM,cAAc,kBAAkB,GAAG;AAAA,QAC3D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,2CAA2C;AAAA,MACxE,CAAC;AAAA,IACH;AACA,QAAI,IAAI,aAAa,WAAW;AAC9B,YAAM,QAAQ,WAAW,MAAM;AAC/B,YAAM,SACJ,SAAS,UAAU,UACf;AAAA,QACE,IAAI;AAAA,QACJ;AAAA,QACA,QAAQ,OAAO;AAAA,UACZ,OAAO,KAAK,MAAM,EAA2B,IAAI,CAAC,SAAS;AAAA,YAC1D;AAAA,YACA,EAAE,IAAI,OAAO,OAAO,mBAAmB;AAAA,UACzC,CAAC;AAAA,QACH;AAAA,MACF,IACA,EAAE,GAAI,MAAM,mBAAmB,QAAQ,SAAS,GAAI,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AACtF,aAAO,SAAS,KAAK,QAAQ,EAAE,QAAQ,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,IAChE;AACA,WAAO,SAAS,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,SAAS,sBAAsB,OAA4D;AAChG,SAAO,IAAI,MAAM;AAAA,IACf,UAAU;AAAA,IACV,MAAM,MAAM,SAAS;AAAA,IACrB,OAAO,wBAAwB,KAAK;AAAA,EACtC,CAAC;AACH;AAEA,eAAsB,mBACpB,QACA,YAAY,KACc;AAC1B,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC3B,OAAO,QAAQ,MAAM,EAA8D;AAAA,MAClF,OAAO,CAAC,MAAM,KAAK,MAAM;AACvB,YAAI;AACF,gBAAM,YAAY,QAAQ,QAAQ,EAAE,KAAK,KAAK,GAAG,SAAS;AAC1D,iBAAO,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC;AAAA,QAC5B,QAAQ;AACN,iBAAO,CAAC,MAAM,EAAE,IAAI,OAAO,OAAO,yBAAyB,CAAC;AAAA,QAC9D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,OAAO,YAAY,OAAO;AACzC,SAAO;AAAA,IACL,IAAI,OAAO,OAAO,MAAM,EAAE,MAAM,CAAC,UAAU,MAAM,EAAE;AAAA,IACnD,QAAQ;AAAA,EACV;AACF;AAEO,SAAS,aACd,IACA,SACqB;AACrB,MAAI;AACJ,SAAO,MAAM;AAIX,QAAI,SAAU,QAAO;AACrB,gBAAY,YAAY;AACtB,UAAI,SAAS;AACX,cAAM,6BAA6B,IAAI,OAAO;AAC9C;AAAA,MACF;AACA,YAAM,GAAG,QAAQ,eAAe;AAAA,IAClC,GAAG,EAAE,QAAQ,MAAM;AACjB,iBAAW;AAAA,IACb,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEO,SAAS,eAAe,KAA2B;AACxD,SAAO,MAAM;AACX,+CAA2C,GAAG;AAC9C,QAAI,IAAI,eAAe,CAAC,IAAI,YAAY,GAAG;AACzC,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAAA,EACF;AACF;AAEO,SAAS,mBACd,YAIqB;AACrB,SAAO,YAAY;AACjB,UAAM,WAAW;AAAA,MAAa,KAAK,IAAI,IAAI;AAAA,MAAO,MAChD,WAAW,gBAAgB,cAAc,CAAC,CAAC;AAAA,IAC7C;AAAA,EACF;AACF;AAEA,eAAe,YAAe,SAAqB,WAA+B;AAChF,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK;AAAA,MACxB;AAAA,MACA,IAAI,QAAe,CAAC,GAAG,WAAW;AAChC,gBAAQ;AAAA,UACN,MAAM,OAAO,IAAI,MAAM,mCAAmC,SAAS,IAAI,CAAC;AAAA,UACxE;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH,UAAE;AACA,QAAI,OAAO;AACT,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF;AACF;;;AHhHA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;AIxEP,eAAsB,6BACpB,SACA,WACA,OACiB;AACjB,QAAM,aAAa,MAAM,QAAQ;AACjC,MAAI;AACF,WAAO,MAAM,UAAU,UAAU;AAAA,EACnC,SAAS,OAAO;AACd,UAAM,MAAM,UAAU,EAAE,MAAM,MAAM,MAAS;AAC7C,UAAM;AAAA,EACR;AACF;AAUO,SAAS,wBAAwB,SAAsD;AAC5F,MAAI,QAAQ,WAAW,GAAG;AACxB,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,MAAI;AACJ,QAAM,WAAW,MAAY;AAC3B,QAAI;AACJ,eAAW,UAAU,SAAS;AAC5B,UAAI;AACF,eAAO,SAAS;AAAA,MAClB,SAAS,OAAO;AACd,uBAAe;AAAA,MACjB;AAAA,IACF;AACA,QAAI,eAAe,OAAW,OAAM;AAAA,EACtC;AACA,SAAO;AAAA,IACL,KAAK,MAAM;AACT,sBAAgB,YAAY;AAC1B,cAAM,OAAO,QAAQ,IAAI,CAAC,WAAW;AACnC,cAAI;AACF,mBAAO,OAAO,IAAI;AAAA,UACpB,SAAS,OAAO;AACd,mBAAO,QAAQ,OAAO,KAAK;AAAA,UAC7B;AAAA,QACF,CAAC;AACD,YAAI;AACF,gBAAM,QAAQ,IAAI,IAAI;AAAA,QACxB,SAAS,OAAO;AACd,cAAI;AACF,qBAAS;AAAA,UACX,QAAQ;AAAA,UAGR;AACA,gBAAM,QAAQ,WAAW,IAAI;AAC7B,gBAAM;AAAA,QACR;AAAA,MACF,GAAG;AACH,aAAO;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AASO,SAAS,6BAA6B,OAMlB;AACzB,MAAI,QAA8B;AAClC,MAAI;AACJ,MAAI;AACJ,QAAM,sBAAsB,MAAM;AAChC,wBAAoB,MAAM,oBAAoB;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,YAAoC;AAAA,IACxC,OAAO,MAAM;AAAA,IACb,KAAK,MAAM;AACT,UAAI,CAAC,cAAc,UAAU,YAAY;AACvC,sBAAc,YAAY;AACxB,kBAAQ;AACR,gBAAM,oBAAoB;AAAA,QAC5B,GAAG;AACH,eAAO;AAAA,MACT;AACA,UAAI,CAAC,eAAe,UAAU,aAAa,UAAU,WAAW;AAC9D,eAAO,QAAQ,OAAO,IAAI,MAAM,uCAAuC,KAAK,EAAE,CAAC;AAAA,MACjF;AACA,sBAAgB,YAAY;AAC1B,YAAI,UAAU,YAAY;AACxB,kBAAQ;AAAA,QACV;AACA,cAAM,UAAU;AAChB,YAAI;AACF,gBAAM,MAAM,OAAO,IAAI;AACvB,kBAAQ;AAAA,QACV,SAAS,OAAO;AACd,kBAAQ;AACR,gBAAM;AAAA,QACR,UAAE;AACA,gBAAM,oBAAoB;AAAA,QAC5B;AAAA,MACF,GAAG;AACH,aAAO;AAAA,IACT;AAAA,IACA,OAAO,CAAC,UAAU,mBAAmB;AACnC,UAAI,UAAU,cAAc,UAAU,aAAa,UAAU,UAAU;AACrE,eAAO;AAAA,MACT;AACA,YAAM,gBAAgB;AACtB;AAAA,QAAiB,MACf,MAAM,cAAc,KAAK,gDAAgD;AAAA,UACvE,MAAM,MAAM;AAAA,UACZ,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AACA,cAAQ;AACR,UAAI;AACF,cAAM,OAAO,SAAS;AACtB,eAAO;AAAA,MACT,QAAQ;AACN,gBAAQ;AACR;AAAA,UAAiB,MACf,MAAM,cAAc,KAAK,kCAAkC;AAAA,YACzD,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,OAAO,YAAY;AACjB,UAAI,CAAC,UAAU,MAAM,eAAe,GAAG;AACrC,cAAM,IAAI,MAAM,gCAAgC;AAAA,MAClD;AACA,UAAI,YAAY;AACd,cAAM,WAAW,MAAM,MAAM,MAAS;AAAA,MACxC,OAAO;AACL,gBAAQ;AACR,cAAM,oBAAoB;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,KAAuB;AAC/C,MAAI;AACF,QAAI;AAAA,EACN,QAAQ;AAAA,EAER;AACF;;;AC7KA,SAAS,oBAAoB;AAC7B,SAAS,SAAS,gBAAgB;AAClC,SAAS,aAAa;AA8DtB,IAAM,kBAAkB;AACxB,IAAM,yBAAyB;AAExB,SAAS,kBACd,OACuD;AACvD,QAAM,SAAS,oBAAI,IAAoB;AACvC,aAAW,QAAQ,MAAM,MAAM,IAAI,GAAG;AACpC,UAAM,QAAQ,iCAAiC,KAAK,KAAK,KAAK,CAAC;AAC/D,QAAI,CAAC,MAAO;AACZ,WAAO,IAAI,MAAM,CAAC,GAAa,OAAO,MAAM,CAAC,CAAC,IAAI,IAAI;AAAA,EACxD;AACA,QAAM,aAAa,OAAO,IAAI,UAAU;AACxC,QAAM,iBAAiB,OAAO,IAAI,cAAc;AAChD,MACE,eAAe,UACf,mBAAmB,UACnB,CAAC,OAAO,SAAS,UAAU,KAC3B,CAAC,OAAO,SAAS,cAAc,KAC/B,cAAc,KACd,iBAAiB,GACjB;AACA,WAAO;AAAA,EACT;AACA,SAAO,EAAE,YAAY,gBAAgB,KAAK,IAAI,YAAY,cAAc,EAAE;AAC5E;AAEO,SAAS,6BAA6B,OAA8B;AACzE,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,WAAW,YAAY,MAAO,QAAO;AAC1C,QAAM,SAAS,OAAO,OAAO;AAG7B,MAAI,CAAC,OAAO,cAAc,MAAM,KAAK,UAAU,KAAK,UAAU,KAAK,GAAI,QAAO;AAC9E,SAAO;AACT;AAEO,SAAS,6BAA6B,OAAwC;AACnF,MAAI,SAAwB;AAC5B,MAAI,eAA8B;AAClC,aAAW,QAAQ,MAAM,MAAM,IAAI,GAAG;AACpC,UAAM,iBAAiB,KAAK,QAAQ,GAAG;AACvC,UAAM,kBAAkB,KAAK,QAAQ,KAAK,iBAAiB,CAAC;AAC5D,QAAI,kBAAkB,KAAK,kBAAkB,EAAG;AAChD,UAAM,cAAc,KAAK,MAAM,GAAG,cAAc;AAChD,UAAM,cAAc,KAAK,MAAM,iBAAiB,GAAG,eAAe;AAClE,UAAM,OAAO,oBAAoB,KAAK,MAAM,kBAAkB,CAAC,CAAC;AAChE,QAAI,CAAC,KAAM;AACX,QAAI,gBAAgB,OAAO,gBAAgB,IAAI;AAC7C,eAAS;AAAA,IACX;AACA,QAAI,YAAY,MAAM,GAAG,EAAE,SAAS,QAAQ,GAAG;AAC7C,qBAAe;AAAA,IACjB;AAAA,EACF;AACA,SAAO,EAAE,QAAQ,aAAa;AAChC;AAEO,SAAS,sBAAsB,YAA6D;AACjG,QAAM,QAAgC,CAAC;AACvC,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,kBAAkB,CACtB,OACA,MACA,iBACA,gBACG;AACH,eAAW,aAAa,oBAAoB,QAAQ,GAAG,GAAG;AACxD,YAAM,WAAW,cAAc,MAAM,KAAK,UAAU,MAAM,CAAC;AAC3D,YAAM,cAAc,MAAM,KAAK,OAAO,UAAU,eAAe;AAC/D,YAAM,UAAU,MAAM,KAAK,OAAO,UAAU,WAAW;AACvD,YAAM,MAAM,GAAG,WAAW,KAAK,OAAO;AACtC,UAAI,KAAK,IAAI,GAAG,EAAG;AACnB,WAAK,IAAI,GAAG;AACZ,YAAM,KAAK,EAAE,aAAa,QAAQ,CAAC;AAAA,IACrC;AAAA,EACF;AAEA,kBAAgB,iBAAiB,WAAW,QAAQ,kBAAkB,YAAY;AAClF;AAAA,IACE;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,qCACd,eAAqC,CAAC,GACJ;AAClC,QAAM,WAAW,aAAa,YAAY;AAC1C,QAAM,QAAQ,kBAAkB,SAAS,eAAe,KAAK,EAAE;AAC/D,QAAM,iBAAiB,OAAO,eAAe,aAAa,kBAAkB,UAAU;AACtF,QAAM,qBACJ,OAAO,mBAAmB,aAAa,sBAAsB,SAAS;AACxE,QAAM,OAAO;AAAA,IACX,OAAO;AAAA,IACP,WAAW,KAAK,IAAI,GAAG,iBAAiB,KAAK,IAAI,gBAAgB,kBAAkB,CAAC;AAAA,IACpF,YAAY;AAAA,EACd;AACA,QAAM,SAAS,sBAAsB,QAAQ;AAI7C,QAAM,iBAAiB,aAAa,sBAAsB,QAAQ,aAAa;AAE/E,SAAO;AAAA,IACL,iBAAiB,cAAc;AAAA,IAC/B,sBAAsB,cAAc;AAAA,IACpC,sBAAsB,cAAc;AAAA,IACpC,0BAA0B,cAAc;AAAA,IACxC,QAAQ,CAAC,UAAU,IAAI;AAAA,EACzB;AACF;AAEO,SAAS,qCACd,MACA,UACS;AACT,SAAO,SAAS,UAAU,SAAS,8BAA8B;AACnE;AAEO,SAAS,oCAAoC,OAKlB;AAChC,QAAM,MAAM,MAAM,cAAc,OAAO,KAAK;AAC5C,QAAM,SAAS,MAAM,cAAc,UAAU;AAC7C,QAAM,WAAW,MAAM,cAAc,eAAe;AACpD,QAAM,SAAS,MAAM,cAAc,iBAAiB;AACpD,QAAM,iBAAiB,MAAM,cAAc,OAAO,MAAM,IAAI,GAAG,KAAK;AACpE,QAAM,kBAAkB,oBAAI,IAAmC;AAC/D,MAAI,WAAW,OAAO;AACtB,MAAI,iBAAiB;AACrB,MAAI,SAAS;AAEb,QAAM,YAAY,MAAM;AACtB,QAAI,OAAQ;AACZ,UAAM,aAAa,IAAI;AACvB,QAAI;AACJ,QAAI;AACF,iBAAW,OAAO;AAAA,IACpB,QAAQ;AACN,sBAAgB,MAAM;AACtB,2BAAqB,MAAM,eAAe;AAAA,QACxC,MAAM;AAAA,QACN,MAAM;AAAA,MACR,CAAC;AACD;AAAA,IACF;AAEA,UAAM,cAAc,SAAS,OAAO;AAAA,MAClC,CAAC,EAAE,WAAW,WAAW,MACvB,OAAO,SAAS,SAAS,KACzB,OAAO,SAAS,UAAU,KAC1B,aAAa,KACb,aAAa;AAAA,IACjB;AACA,QAAI,YAAY,WAAW,GAAG;AAC5B,sBAAgB,MAAM;AACtB,2BAAqB,MAAM,eAAe;AAAA,QACxC,MAAM;AAAA,QACN,MAAM;AAAA,MACR,CAAC;AACD;AAAA,IACF;AAEA,UAAM,oBAID,CAAC;AACN,eAAW,CAAC,MAAM,KAAK,KAAK;AAAA,MAC1B,CAAC,OAAO,SAAS,eAAe;AAAA,MAChC,CAAC,aAAa,SAAS,oBAAoB;AAAA,MAC3C,CAAC,YAAY,SAAS,oBAAoB;AAAA,MAC1C,CAAC,iBAAiB,SAAS,wBAAwB;AAAA,IACrD,GAAY;AACV,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,KAAK;AAAA,QACf,OAAO,OAAO,SAAS,KAAK,KAAK,SAAS,IAAI,QAAQ;AAAA,MACxD,CAAC;AAAA,IACH;AACA,QAAI,uBAAuB;AAC3B,eAAW,SAAS,aAAa;AAC/B,YAAM,mBAAmB,MAAM,YAAY,MAAM;AACjD,YAAM,kBAAkB,SAAS,kBAAkB,MAAM;AACzD,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO;AAAA,MACT,CAAC;AACD,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO,MAAM,SAAS;AAAA,MACxB,CAAC;AACD,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO,MAAM,SAAS;AAAA,MACxB,CAAC;AACD,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO,KAAK,IAAI,GAAG,MAAM,aAAa,MAAM,SAAS;AAAA,MACvD,CAAC;AACD,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO;AAAA,MACT,CAAC;AACD,+BAAyB,mBAAmB,MAAM,SAAS;AAE3D,UAAI,mBAAmB,MAAM,SAAS,gCAAgC;AACpE,wBAAgB,OAAO,MAAM,KAAK;AAClC,qBAAa,MAAM,eAAe;AAAA,UAChC,MAAM;AAAA,UACN,MAAM;AAAA,UACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,UAC7B,OAAO;AAAA,QACT,CAAC;AACD;AAAA,MACF;AAEA,YAAM,YAAY,gBAAgB,IAAI,MAAM,KAAK,KAAK;AACtD,sBAAgB,IAAI,MAAM,OAAO,SAAS;AAC1C,YAAM,WAAW,KAAK,IAAI,GAAG,aAAa,SAAS;AACnD,YAAM,gBAAgB,WAAW;AACjC,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO;AAAA,MACT,CAAC;AACD,UAAI,YAAY,MAAM,SAAS,gCAAgC;AAC7D,0BAAkB,KAAK,EAAE,OAAO,MAAM,OAAO,kBAAkB,cAAc,CAAC;AAAA,MAChF;AAAA,IACF;AAKA,UAAM,oCACJ,kBAAkB,SAAS,KAC3B,kBAAkB,MAAM,CAAC,EAAE,MAAM,MAAM;AACrC,YAAM,gBAAgB,gBAAgB,IAAI,KAAK;AAC/C,aAAO,kBAAkB,UAAa,YAAY,iBAAiB,WAAW;AAAA,IAChF,CAAC;AACH,QAAI,6BAA6B;AACjC,QACE,wBACA,aAAa,YAAY,MAAM,SAAS,mCACvC,kBAAkB,WAAW,KAAK,CAAC,oCACpC;AACA,iBAAW;AACX,UAAI;AACF,uBAAe;AACf,qCAA6B;AAC7B,6BAAqB,MAAM,eAAe;AAAA,UACxC,MAAM;AAAA,UACN,MAAM;AAAA,QACR,CAAC;AAAA,MACH,QAAQ;AACN,6BAAqB,MAAM,eAAe;AAAA,UACxC,MAAM;AAAA,UACN,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AAIA,QACG,8BAA8B,CAAC,qCAChC,kBACA,kBAAkB,WAAW,GAC7B;AACA;AAAA,IACF;AAEA,UAAM,gBAAgB,kBAAkB;AAAA,MACtC,CAAC,MAAM,UAAU,MAAM,mBAAmB,KAAK;AAAA,IACjD,EAAE,CAAC;AACH,QAAI,CAAC,cAAe;AAEpB,qBAAiB;AACjB,yBAAqB,MAAM,eAAe;AAAA,MACxC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ,EAAE,OAAO,cAAc,MAAM;AAAA,IACvC,CAAC;AACD,aAAS,MAAM,eAAe,qDAAqD;AAAA,MACjF,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,QAAQ,oBAAoB,cAAc,KAAK,KAAK,aAAa,cAAc,gBAAgB,CAAC,OAAO,MAAM,SAAS,8BAA8B,KAAK,cAAc,aAAa;AAAA,IACtL,CAAC;AACD,QAAI;AACF,YAAM,MAAM;AAAA,IACd,QAAQ;AACN,uBAAiB;AACjB,2BAAqB,MAAM,eAAe;AAAA,QACxC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,cAAc,MAAM;AAAA,MACvC,CAAC;AACD,eAAS,MAAM,eAAe,iDAAiD;AAAA,QAC7E,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,QAAQ,SAAS,WAAW,MAAM,SAAS,+BAA+B;AAChF,QAAM,QAAQ;AACd,YAAU;AAEV,SAAO;AAAA,IACL;AAAA,IACA,OAAO,MAAM;AACX,UAAI,OAAQ;AACZ,eAAS;AACT,aAAO,KAAK;AAAA,IACd;AAAA,EACF;AACF;AAEA,SAAS,sBACP,UACsC;AACtC,QAAM,aAAa,6BAA6B,SAAS,mBAAmB,KAAK,EAAE;AACnF,MAAI,gBAAsD;AAC1D,aAAW,EAAE,aAAa,QAAQ,KAAK,sBAAsB,UAAU,GAAG;AACxE,UAAM,aAAa,SAAS,WAAW;AACvC,UAAM,SAAS,SAAS,OAAO;AAC/B,QAAI,eAAe,QAAQ,WAAW,KAAM;AAC5C,UAAM,UAAU,OAAO,WAAW,KAAK,CAAC;AACxC,UAAM,QAAQ,6BAA6B,MAAM;AACjD,QAAI,CAAC,OAAO,SAAS,OAAO,KAAK,UAAU,KAAK,UAAU,KAAM;AAChE,UAAM,YAAY,EAAE,OAAO,UAAmB,WAAW,SAAS,YAAY,MAAM;AACpF,QACE,CAAC,iBACD,UAAU,YAAY,UAAU,aAC9B,cAAc,YAAY,cAAc,YAC1C;AACA,sBAAgB;AAAA,IAClB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,MAA6B;AACnD,MAAI;AACF,WAAO,aAAa,MAAM,MAAM;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,aAAa,OAAuB;AAC3C,SAAO,KAAK,MAAM,KAAK,IAAI,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,IAAI,GAAS,IAAI;AACpE;AAEA,SAAS,oBAAoB,OAA8B;AACzD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,IAAI,EAAG,QAAO;AAC/D,MAAI,QAAQ,MAAM,GAAG,EAAE,SAAS,IAAI,EAAG,QAAO;AAC9C,SAAO,MAAM,UAAU,OAAO;AAChC;AAEA,SAAS,oBAAoB,MAAwB;AACnD,QAAM,YAAsB,CAAC;AAC7B,MAAI,UAAU;AACd,SAAO,MAAM;AACX,cAAU,KAAK,OAAO;AACtB,QAAI,YAAY,IAAK,QAAO;AAC5B,cAAU,MAAM,QAAQ,OAAO;AAAA,EACjC;AACF;AAEA,SAAS,aACP,eACA,OACM;AACN,MAAI;AACF,kBAAc,SAAS,KAAK;AAAA,EAC9B,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,qBACP,eACA,OACM;AACN,MAAI;AACF,kBAAc,iBAAiB,KAAK;AAAA,EACtC,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,SACP,eACA,SACA,YACM;AACN,MAAI;AACF,kBAAc,KAAK,SAAS,UAAU;AAAA,EACxC,QAAQ;AAAA,EAER;AACF;;;ACjdO,SAAS,uCACd,QACoC;AACpC,MAAI;AACF,QAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,UAAM,YAAY;AAClB,WACE,UAAU,SAAS,wBAClB,UAAU,SAAS,wBAAwB,UAAU,SAAS,uBAC/D,UAAU,WAAW,aACrB,OAAO,UAAU,aAAa,YAC9B,UAAU,SAAS,SAAS;AAAA,EAEhC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iCACP,gBACM;AAGN,UAAQ,MAAM,kDAAkD,EAAE,eAAe,CAAC;AACpF;AAUO,SAAS,wCACd,iBAAkD,SAClD,SAEY,kCACA;AACZ,QAAM,uBAAuB,CAAC,WAA0B;AACtD;AAAA,MACE,uCAAuC,MAAM,IACzC,mCACA;AAAA,IACN;AAAA,EACF;AACA,iBAAe,GAAG,sBAAsB,oBAAoB;AAC5D,SAAO,MAAM,eAAe,IAAI,sBAAsB,oBAAoB;AAC5E;;;ACxEO,IAAM,uCAAuC;AACpD,IAAM,eAAe;AACd,SAAS,mCAAmC,MAAsB;AACvE,SAAO,KAAK,SAAS,YAAY,IAAI,OAAO,GAAG,IAAI,GAAG,YAAY;AACpE;;;AP2HA,IAAM,6BAA6B;AAC5B,IAAM,iCAAiC;AACvC,IAAM,+BAA+B;AACrC,IAAM,iCAAiC;AACvC,IAAM,+BAA+B,KAAK,KAAK;AAC/C,IAAM,oCAAoC;AAC1C,IAAM,kCAAkC,KAAK;AAoBpD,SAAS,eACP,OACe;AACf,MAAI,OAAO,YAAY,UAAa,MAAM,YAAY,KAAM,QAAO;AACnE,SAAO,OAAO,OAAO,MAAM,OAAO,CAAC,IAAI,MAAQ,KAAK,OAAO,MAAM,SAAS,KAAK,GAAS;AAC1F;AAEO,SAAS,6BACd,SACA,QAAQ,KAAK,IAAI,GACR;AACT,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,cACJ,eAAe,QAAQ,iBAAiB,KAAK,eAAe,QAAQ,eAAe;AACrF,QAAM,qBAAqB,eAAe,QAAQ,iBAAiB,gBAAgB;AACnF,SACE,gBAAgB,QAAQ,uBAAuB,QAAQ,SAAS,cAAc;AAElF;AAGO,SAAS,kCAAkC,OAAyB;AAGzE,SAAO,mBAAmB,KAAK,KAAK,MAAM,SAAS;AACrD;AAKA,eAAsB,8BACpB,MACA,eAAqC,CAAC,GACtC;AACA,SAAO,SAAS,aACX,MAAM,OAAO,kCAAsB,GAAG,wBAAwB,YAAY,KAC1E,MAAM,OAAO,+BAAmB,GAAG,qBAAqB,YAAY;AAC3E;AAYO,SAAS,kCACd,YAAoB,YAAY,KACN;AAC1B,QAAM,aAAa,cAAc,SAAS,EAAE,WAAW,MAAM,GAAG;AAChE,MAAI,WAAW,SAAS,eAAe,GAAG;AACxC,WAAO,EAAE,eAAe,cAAc,IAAI,IAAI,kBAAkB,SAAS,CAAC,EAAE;AAAA,EAC9E;AACA,QAAM,WAAW,cAAc,IAAI,IAAI,wBAAwB,SAAS,CAAC;AACzE,MAAI,CAAC,WAAW,QAAQ,GAAG;AACzB,UAAM,IAAI;AAAA,MACR,0CAA0C,QAAQ;AAAA,IACpD;AAAA,EACF;AACA,SAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE;AACxC;AAEO,SAAS,2CAA2C;AACzD,SAAO;AAAA,IACL,8BAA8B;AAAA,IAC9B,kCAAkC;AAAA,EACpC;AACF;AAEA,eAAsB,qBAAqB,SAGxC;AACD,QAAM,WAAW,QAAQ,YAAY,YAAY;AACjD,MAAI,QAAQ,SAAS,WAAW;AAI9B,uCAAmC,QAAQ;AAAA,EAC7C;AACA,QAAM,gBACJ,QAAQ,sBAAsB,iBAC9B,oBAAoB,UAAU,EAAE,WAAW,UAAU,QAAQ,IAAI,GAAG,CAAC;AACvE,iCAA+B,aAAa;AAC5C,MAAI,QAAQ,SAAS,QAAQ;AAC3B,uCAAmC,aAAa;AAAA,EAClD;AACA,MAAI,QAAQ,SAAS,UAAU,QAAQ,gBAAgB;AACrD,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AAMA,MAAI,QAAQ,SAAS,QAAQ;AAC3B,UAAM,EAAE,yBAAyB,IAAI,MAAM,OAAO,2BAA2B;AAC7E,UAAM;AAAA,MACJ;AAAA,MACA,MAAM,yBAAyB,QAAQ;AAAA,MACvC;AAAA,QACE,GAAG,oBAAoB,QAAQ;AAAA,QAC/B,SAAS,CAAC,UAAU,0BAA0B,eAAe,KAAK;AAAA,MACpE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,MACE;AAAA,MACE;AAAA,MACA,MAAM,iBAAiB,QAAQ,0BAA0B,QAAQ,CAAC;AAAA,MAClE;AAAA,QACE,GAAG,oBAAoB,QAAQ;AAAA,QAC/B,SAAS,CAAC,UAAU,0BAA0B,eAAe,KAAK;AAAA,MACpE;AAAA,IACF;AAAA,IACF,OAAO,eAAe;AACpB,YAAM,uBAAuB;AAAA,QAC3B,GAAG,QAAQ;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA,YAAM,aACJ,QAAQ,cACP,MAAM,8BAA8B,QAAQ,MAAM,oBAAoB;AACzE,YAAM,kBACJ,QAAQ,SAAS,SACb,gCAAgC,UAAU,EAAE,cAAc,CAAC,IAC3D;AACN,YAAM,qBACJ,QAAQ,SAAS,YACb,QAAQ,iBACN,EAAE,gBAAgB,QAAQ,eAAe,IACzC,kCAAkC,IACpC,CAAC;AACP,YAAM,sBAAsB;AAAA,QAC1B;AAAA,QACA,WAAW,SAAS;AAAA,QACpB;AAAA;AAAA;AAAA;AAAA;AAAA,QAKA,GAAG,yCAAyC;AAAA;AAAA;AAAA;AAAA,QAI5C,mBAAmB;AAAA;AAAA,QAEnB,mBAAmB;AAAA,MACrB;AACA,YAAM,SAAS,MAAM,OAAO,OAAO;AAAA,QACjC,GAAG;AAAA,QACH,WACE,QAAQ,SAAS,YACb,SAAS,oBACT,cAAc,SAAS,iBAAiB;AAAA,QAC9C,GAAI,QAAQ,SAAS,YACjB;AAAA,UACE,GAAG;AAAA,UACH,gBAAgB;AAAA,UAChB,wBAAwB;AAAA,UACxB,oBAAoB;AAAA,UACpB,qCAAqC;AAAA,UACrC,qCAAqC;AAAA,QACvC,IACA,gBAAiB;AAAA,MACvB,CAAC;AACD,UAAI,QAAQ,SAAS,WAAW;AAC9B,yBAAiB,WAAW,wBAAwB;AACpD,eAAO,EAAE,QAAQ,WAAW;AAAA,MAC9B;AAEA,YAAM,eAAe,CAAC,MAAM;AAC5B,UAAI;AAGF,mBAAW,aAAa;AAAA,UACtB,0BAA0B,SAAS,iBAAiB;AAAA,UACpD,mCAAmC,SAAS,iBAAiB;AAAA,QAC/D,GAAG;AACD,gBAAM,kBAAkB,MAAM,OAAO,OAAO;AAAA,YAC1C,GAAG;AAAA,YACH,GAAG;AAAA,YACH;AAAA,YACA,gBAAgB;AAAA,YAChB,wBAAwB;AAAA,YACxB,oBAAoB;AAAA,YACpB,qCAAqC;AAAA,YACrC,qCAAqC;AAAA,UACvC,CAAC;AACD,uBAAa,KAAK,eAAe;AAAA,QACnC;AACA,eAAO;AAAA,UACL,QAAQ,wBAAwB,YAAY;AAAA,UAC5C;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,mBAAW,eAAe,cAAc;AACtC,cAAI;AACF,wBAAY,SAAS;AAAA,UACvB,QAAQ;AAAA,UAIR;AAAA,QACF;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,CAAC,eAAe,WAAW,MAAM;AAAA,EACnC;AACF;AAOA,eAAsB,6BACpB,UACA,IAWC;AACD,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,SAAO;AAAA,IACL,qBAAqB,OAAO;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,MAAM;AACJ,UAAI,uBAAuB;AACzB,cAAM,SAAS,SAAS,gBAAgB,mBAAmB;AAAA,UACzD,WAAW,SAAS;AAAA,UACpB;AAAA,UACA,uBAAuB;AAAA,UACvB,MAAM,CAAC,EAAE,WAAW,aAAa,UAAU,CAAC;AAAA,UAC5C,QAAQ;AAAA,UACR,YAAY,CAAC;AAAA,QACf,CAAC;AAAA,MACH,OAAO;AACL,cAAM,SAAS,SAAS,gBAAgB,mBAAmB;AAAA,UACzD,WAAW,SAAS;AAAA,UACpB;AAAA,UACA,uBAAuB;AAAA,UACvB,MAAM,CAAC,EAAE,WAAW,aAAa,UAAU,CAAC;AAAA,UAC5C,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AACA,yBAAmB;AACnB,aAAO,MAAM,iCAAiC,IAAI;AAAA,QAChD;AAAA,QACA;AAAA,QACA;AAAA,QACA,oBAAoB;AAAA,QACpB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,8BAA8B,OAAO,UAAU;AAC7C,YAAM,SAAS,SAAS,gBAAgB,mBAAmB;AAAA,QACzD,WAAW,SAAS;AAAA,QACpB,YAAY,MAAM;AAAA,QAClB,uBAAuB;AAAA,QACvB,MAAM;AAAA,UACJ;AAAA,YACE,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,WAAW,MAAM;AAAA,UACnB;AAAA,QACF;AAAA,QACA,QAAQ;AAAA,QACR,YAAY,CAAC,KAAK;AAAA,MACpB,CAAC;AAAA,IAIH;AAAA,IACA,+BAA+B,OAAO,EAAE,YAAY,eAAe,WAAW,MAAM;AAClF,UAAI;AACJ,UAAI;AACF,sBAAc,MAAM,WAAW,gBAAgB,0BAA0B;AAAA,UACvE,WAAW,SAAS;AAAA,UACpB,WAAW,EAAE,YAAY,OAAO,cAAc;AAAA,QAChD,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,kCAAkC,KAAK,EAAG,QAAO;AACrD,cAAM;AAAA,MACR;AACA,YAAM,UAAU,YAAY,mBAAmB;AAAA,QAC7C,CAACC,cAAaA,UAAS,eAAe;AAAA,MACxC;AACA,aAAO,6BAA6B,OAAO,IAAI,YAAY;AAAA,IAC7D;AAAA,IACA,6BAA6B,OAAO;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,MAAM;AACJ,YAAM,SAAS,SAAS,gBAAgB,mBAAmB;AAAA,QACzD,WAAW,SAAS;AAAA,QACpB;AAAA,QACA,uBAAuB;AAAA,QACvB,MAAM,CAAC,EAAE,WAAW,aAAa,UAAU,CAAC;AAAA,QAC5C,QAAQ;AAAA,QACR,YAAY,CAAC,YAAY;AAAA,MAC3B,CAAC;AAAA,IAIH;AAAA,IACA,uBAAuB,YAAY;AACjC,YAAM,WAAW,MAAM,WAAW,gBAAgB,kBAAkB;AAAA,QAClE,WAAW,SAAS;AAAA,QACpB,WAAW,EAAE,MAAM,cAAc,SAAS,iBAAiB,EAAE;AAAA;AAAA;AAAA;AAAA,QAI7D,eAAe;AAAA,QACf,aAAa;AAAA,MACf,CAAC;AACD,aAAO,4BAA4B,SAAS,KAAK;AAAA,IACnD;AAAA,IACA,4BAA4B,YAAY;AAGtC,YAAM,SAAS,MAAM,QAAQ,WAAW;AAAA,QACtC,SAAS,SAAS,MAAM,2BAA2B;AAAA,UACjD,WAAW,0BAA0B,SAAS,iBAAiB;AAAA,UAC/D,YAAY;AAAA,UACZ,uBAAuB;AAAA,UACvB,MAAM,CAAC;AAAA,QACT,CAAC;AAAA,QACD,SAAS,SAAS,MAAM,0CAA0C;AAAA,UAChE,WAAW,mCAAmC,SAAS,iBAAiB;AAAA,UACxE,YAAY;AAAA,UACZ,uBAAuB;AAAA,UACvB,MAAM,CAAC;AAAA,QACT,CAAC;AAAA,MACH,CAAC;AACD,iBAAW,SAAS,QAAQ;AAC1B,YACE,MAAM,WAAW,cACjB,EAAE,MAAM,kBAAkB,uCAC1B;AAGA,gBAAM,MAAM;AAAA,QACd;AAAA,MACF;AACA,aAAO,OAAO,CAAC,EAAE,WAAW,cAAc,YAAY;AAAA,IACxD;AAAA,IACA,8BAA8B,OAAO,EAAE,WAAW,aAAa,YAAY,MAAM;AAC/E,UAAI;AACF,cAAM,SAAS,SAAS,MAAM,2BAA2B;AAAA,UACvD,WAAW,SAAS;AAAA,UACpB,YAAY,oBAAoB,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,UAK3C,uBAAuB;AAAA,UACvB,MAAM;AAAA,YACJ;AAAA,cACE;AAAA,cACA;AAAA,cACA;AAAA,cACA,eAAe,SAAS;AAAA,YAC1B;AAAA,UACF;AAAA,QACF,CAAC;AACD,eAAO;AAAA,MACT,SAAS,OAAO;AACd,YAAI,iBAAiB,sCAAsC;AACzD,iBAAO;AAAA,QACT;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,OAAO,YAAY;AACjB,YAAM,WAAW,gBAAgB,cAAc,CAAC,CAAC;AAAA,IACnD;AAAA,IACA,OAAO,YAAY;AACjB,YAAM,WAAW,MAAM;AAAA,IACzB;AAAA,EACF;AACF;AAoBA,eAAsB,8BACpB,UACA,eAC8D;AAC9D,qCAAmC,QAAQ;AAC3C,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,QAAM,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,SAAS,2BAA2B,CAAC,EAAE;AAC3E,QAAM,SAAS;AAAA,IACb,MAAM;AAAA,IACN,cAAc;AAAA,IACd,WAAW,SAAS;AAAA,IACpB,MAAM,CAAC;AAAA,EACT;AACA,QAAM,WAAW;AAAA,IACf,SAAS,sBAAsB;AAAA,IAC/B,eAAe;AAAA,IACf,gBAAgB;AAAA,EAClB;AACA,MAAI;AACF,UAAM,SAAS,SAAS,OAAO;AAAA,MAC7B,YAAY;AAAA;AAAA;AAAA;AAAA,MAIZ;AAAA,MACA;AAAA;AAAA;AAAA,MAGA;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,uDAAuD;AAAA,MACxE,YAAY;AAAA,MACZ,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO;AAAA,MACL,YAAY;AAAA,MACZ,OAAO,YAAY;AACjB,cAAM,WAAW,MAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAI3C,YAAM,SAAS,SAAS,UAAU,0BAA0B,EAAE,OAAO,CAAC,cAAc;AAAA,QAClF;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO;AAAA,UACL,QAAQ,SAAS,MAAM;AAAA,UACvB,GAAI,SAAS,MAAM,OAAO,EAAE,MAAM,SAAS,MAAM,KAAK,IAAI,CAAC;AAAA,UAC3D,GAAI,SAAS,MAAM,qBAAqB,SACpC,EAAE,kBAAkB,SAAS,MAAM,iBAAiB,IACpD,CAAC;AAAA,QACP;AAAA,MACF,EAAE;AACF,oBAAc,KAAK,uDAAuD;AAAA,QACxE,YAAY;AAAA,QACZ,mBAAmB,OAAO;AAAA,MAC5B,CAAC;AACD,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,OAAO,YAAY;AACjB,gBAAM,WAAW,MAAM;AAAA,QACzB;AAAA,MACF;AAAA,IACF;AACA,UAAM,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAGA,eAAsB,kCACpB,UACA,eAC8D;AAC9D,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,MAAI;AACF,UAAM,SAAS,SAAS,OAAO;AAAA,MAC7B,YAAY;AAAA,MACZ,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,6BAA6B,CAAC,EAAE;AAAA,MAC7D,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA,QACd,WAAW,SAAS;AAAA,QACpB,MAAM,CAAC;AAAA,MACT;AAAA,MACA,UAAU;AAAA,QACR,SAAS,sBAAsB;AAAA,QAC/B,eAAe;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,oDAAoD;AAAA,MACrE,YAAY;AAAA,MACZ,kBAAkB;AAAA,IACpB,CAAC;AACD,WAAO,EAAE,YAAY,MAAM,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,EACnE,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,oBAAc,KAAK,wDAAwD;AAAA,QACzE,YAAY;AAAA,MACd,CAAC;AACD,aAAO,EAAE,YAAY,OAAO,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAQA,eAAsB,iCACpB,UACA,eAC8D;AAC9D,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,MAAI;AACF,UAAM,SAAS,SAAS,OAAO;AAAA,MAC7B,YAAY;AAAA,MACZ,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,6BAA6B,CAAC,EAAE;AAAA,MAC7D,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA,QACd,WAAW,SAAS;AAAA,QACpB,MAAM,CAAC;AAAA,MACT;AAAA,MACA,UAAU;AAAA,QACR,SAAS,sBAAsB;AAAA,QAC/B,eAAe;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,qDAAqD;AAAA,MACtE,YAAY;AAAA,MACZ,gBAAgB;AAAA,IAClB,CAAC;AACD,WAAO,EAAE,YAAY,MAAM,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,EACnE,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,oBAAc,KAAK,yDAAyD;AAAA,QAC1E,YAAY;AAAA,MACd,CAAC;AACD,aAAO,EAAE,YAAY,OAAO,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAKA,eAAsB,oCACpB,UACA,eAC8D;AAC9D,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,MAAI;AACF,UAAM,SAAS,SAAS,OAAO;AAAA,MAC7B,YAAY;AAAA,MACZ,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,gCAAgC,CAAC,EAAE;AAAA,MAChE,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA,QACd,WAAW,SAAS;AAAA,QACpB,MAAM,CAAC;AAAA,MACT;AAAA,MACA,UAAU;AAAA,QACR,SAAS,sBAAsB;AAAA,QAC/B,eAAe;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,wDAAwD;AAAA,MACzE,YAAY;AAAA,MACZ,qBAAqB;AAAA,IACvB,CAAC;AACD,WAAO,EAAE,YAAY,MAAM,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,EACnE,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,oBAAc,KAAK,4DAA4D;AAAA,QAC7E,YAAY;AAAA,MACd,CAAC;AACD,aAAO,EAAE,YAAY,OAAO,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAOA,eAAsB,8CACpB,UACA,eAC8D;AAC9D,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,MAAI;AACF,UAAM,SAAS,SAAS,OAAO;AAAA,MAC7B,YAAY;AAAA,MACZ,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,2CAA2C,CAAC,EAAE;AAAA,MAC3E,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA,QACd,WAAW,SAAS;AAAA,QACpB,MAAM,CAAC;AAAA,MACT;AAAA,MACA,UAAU;AAAA,QACR,SAAS,sBAAsB;AAAA,QAC/B,eAAe;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,4DAA4D;AAAA,MAC7E,YAAY;AAAA,MACZ,UAAU;AAAA,IACZ,CAAC;AACD,WAAO,EAAE,YAAY,MAAM,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,EACnE,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,oBAAc,KAAK,gEAAgE;AAAA,QACjF,YAAY;AAAA,MACd,CAAC;AACD,aAAO,EAAE,YAAY,OAAO,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAmCO,SAAS,4BACd,MACA,SAA4D,gBACnD;AACT,SAAO,SAAS,aAAa,WAAW;AAC1C;AAQA,eAAsB,4BACpB,SACgC;AAChC,EAAAC,4CAA2C,QAAQ,qBAAqB,GAAG;AAC3E,QAAM,WAAW,QAAQ,YAAY,YAAY;AACjD,QAAM,gBACJ,QAAQ,qBAAqB,iBAC7B,oBAAoB,UAAU,EAAE,WAAW,UAAU,QAAQ,IAAI,GAAG,CAAC;AACvE,QAAM,eAAe,oBAAoB,QAAQ;AACjD,QAAM,UAAU,CAAC,UACf,0BAA0B,eAAe,KAAK;AAChD,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AAGJ,QAAM,YAAmD,CAAC;AAC1D,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,UAAM,kBAAkB,MAAM;AAAA,MAC5B;AAAA,MACA,MAAM,uBAAuB,QAAQ,qBAAqB,IAAI,QAAQ;AAAA,MACtE,EAAE,GAAG,cAAc,QAAQ;AAAA,IAC7B;AACA,kBAAc,KAAK,mCAAmC;AAAA,MACpD,MAAM,QAAQ;AAAA,MACd,eAAe,gBAAgB;AAAA,MAC/B,gBAAgB,gBAAgB;AAAA,IAClC,CAAC;AACD,UAAM,gBACJ,QAAQ,SAAS,UACjB,CAAC,QAAQ,qBAAqB,uBAC9B,CAAC,QAAQ,qBAAqB,gCAC9B,CAAC,QAAQ,qBAAqB,iCAC9B,CAAC,QAAQ,qBAAqB,+BAC9B,CAAC,QAAQ,qBAAqB,8BAC9B,CAAC,QAAQ,qBAAqB;AAChC,QAAI,eAAe;AACjB,iBAAW,MAAM;AAAA,QACf;AAAA,QACA,MAAM,6BAA6B,UAAU,QAAQ,qBAAqB,EAAE;AAAA,QAC5E,EAAE,GAAG,cAAc,QAAQ;AAAA,MAC7B;AAAA,IACF;AACA,UAAM,sBACJ,QAAQ,qBAAqB,uBAAuB,UAAU;AAChE,UAAM,+BACJ,QAAQ,qBAAqB,gCAC7B,UAAU;AACZ,UAAM,gCACJ,QAAQ,qBAAqB,iCAC7B,UAAU;AACZ,UAAM,8BACJ,QAAQ,qBAAqB,+BAC7B,UAAU;AACZ,UAAM,6BACJ,QAAQ,qBAAqB,8BAC7B,UAAU;AACZ,UAAM,+BACJ,QAAQ,qBAAqB,gCAC7B,UAAU;AACZ,QACE,CAAC,uBACD,CAAC,gCACD,CAAC,iCACD,CAAC,+BACD,CAAC,8BACD,CAAC,8BACD;AACA,YAAM,IAAI,MAAM,oEAAoE;AAAA,IACtF;AACA,mBAAe,MAAM,qBAAqB;AAAA,MACxC,MAAM,QAAQ;AAAA,MACd;AAAA,MACA,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,MAC/D,GAAI,QAAQ,iBAAiB,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;AAAA,MAC3E,sBAAsB;AAAA,QACpB,GAAG,QAAQ;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AAED,QAAI,QAAQ,SAAS,QAAQ;AAC3B,UAAI,CAAC,UAAU;AACb,cAAM,IAAI,MAAM,0EAA0E;AAAA,MAC5F;AACA,4BAAsB,yBAAyB;AAAA,QAC7C;AAAA,QACA,MAAM,SAAS;AAAA,MACjB,CAAC;AAAA,IACH,OAAO;AACL,+BAAyB,4BAA4B;AAAA,QACnD;AAAA,QACA,MAAM,YAAY,MAAM,4BAA4B,QAAQ,qBAAqB,EAAE;AAAA,MACrF,CAAC;AACD,wCAAkC,qCAAqC;AAAA,QACrE;AAAA,QACA,MAAM,YAAY,MAAM,mCAAmC,QAAQ,qBAAqB,EAAE;AAAA,MAC5F,CAAC;AAAA,IACH;AAEA,QAAI,4BAA4B,QAAQ,MAAM,QAAQ,iBAAiB,GAAG;AACxE,gBAAU;AAAA,QACR,MAAM;AAAA,UACJ;AAAA,UACA,MAAM,8BAA8B,UAAU,aAAa;AAAA,UAC3D,EAAE,GAAG,cAAc,QAAQ;AAAA,QAC7B;AAAA,MACF;AACA,gBAAU;AAAA,QACR,MAAM;AAAA,UACJ;AAAA,UACA,MAAM,kCAAkC,UAAU,aAAa;AAAA,UAC/D,EAAE,GAAG,cAAc,QAAQ;AAAA,QAC7B;AAAA,MACF;AACA,gBAAU;AAAA,QACR,MAAM;AAAA,UACJ;AAAA,UACA,MAAM,iCAAiC,UAAU,aAAa;AAAA,UAC9D,EAAE,GAAG,cAAc,QAAQ;AAAA,QAC7B;AAAA,MACF;AACA,gBAAU;AAAA,QACR,MAAM;AAAA,UACJ;AAAA,UACA,MAAM,oCAAoC,UAAU,aAAa;AAAA,UACjE,EAAE,GAAG,cAAc,QAAQ;AAAA,QAC7B;AAAA,MACF;AACA,gBAAU;AAAA,QACR,MAAM;AAAA,UACJ;AAAA,UACA,MAAM,8CAA8C,UAAU,aAAa;AAAA,UAC3E,EAAE,GAAG,cAAc,QAAQ;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,SAAS,OAAO;AAC1B,YAAM,gBAAgB;AAAA,QACpB,QAAQ,MAAM,eAAe,QAAQ,qBAAqB;AAAA,QAC1D,QAAQ;AAAA,MACV;AACA,mBAAa,sBAAsB;AAAA,QACjC;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,UACN,IAAI,YAAY;AACd,kBAAM,cAAc;AACpB,kBAAM,uBAAuB,QAAQ,qBAAqB,IAAI,QAAQ;AAAA,UACxE;AAAA,UACA,MAAM,eAAe,QAAQ,qBAAqB,GAAG;AAAA,UACrD,UAAU,mBAAmB,aAAa,UAAU;AAAA,QACtD;AAAA,QACA,GAAI,QAAQ,MAAM,qBAAqB,EAAE,WAAW,QAAQ,KAAK,mBAAmB,IAAI,CAAC;AAAA,QACzF,WAAW,EAAE,MAAM,QAAQ,MAAM,OAAO,MAAM,WAAW,MAAM,KAAK,WAAW;AAAA,MACjF,CAAC;AAAA,IACH;AAAA,EACF,SAAS,OAAO;AACd,gBAAY,KAAK,IAAI;AACrB,UAAM,QAAQ,WAAW;AAAA,MACvB,qBAAqB,MAAM;AAAA,MAC3B,wBAAwB,MAAM;AAAA,MAC9B,iCAAiC,MAAM;AAAA,MACvC,cAAc,WAAW,MAAM;AAAA,MAC/B,UAAU,MAAM;AAAA,MAChB,GAAG,UAAU,IAAI,CAAC,aAAa,SAAS,MAAM,CAAC;AAAA,IACjD,CAAC;AACD,UAAM;AAAA,EACR;AAEA,QAAM,qBAAqB;AAC3B,QAAM,iBAAiB;AACvB,MAAI,CAAC,oBAAoB;AACvB,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AAEA,cAAY,6BAA6B;AAAA,IACvC,MAAM,QAAQ;AAAA,IACd,QAAQ,mBAAmB;AAAA,IAC3B;AAAA,IACA,qBAAqB,YAAY;AAC/B,2BAAqB,MAAM;AAC3B,kBAAY,KAAK,IAAI;AACrB,YAAM,QAAQ,WAAW;AAAA,QACvB,qBAAqB,MAAM;AAAA,QAC3B,wBAAwB,MAAM;AAAA,QAC9B,iCAAiC,MAAM;AAAA,QACvC,mBAAmB,WAAW,MAAM;AAAA,QACpC,gBAAgB,MAAM;AAAA,QACtB,GAAG,UAAU,IAAI,CAAC,aAAa,SAAS,MAAM,CAAC;AAAA,MACjD,CAAC;AAAA,IACH;AAAA,IACA,SAAS,MAAM;AACb,oBAAc,KAAK,6BAA6B;AAAA,QAC9C,MAAM,QAAQ;AAAA,QACd,mBACE,QAAQ,SAAS,YACb,SAAS,oBACT,cAAc,SAAS,iBAAiB;AAAA,QAC9C,GAAI,QAAQ,SAAS,SACjB,+BAA+B,QAAQ,IACvC;AAAA,UACE,iBAAiB;AAAA,UACjB,oBAAoB;AAAA,UACpB,gBAAgB;AAAA,UAChB,mBAAmB;AAAA,QACrB;AAAA,QACJ,qCACE,QAAQ,SAAS,YAAY,+CAA+C;AAAA,QAC9E,oBAAoB,QAAQ,SAAS,YAAY,sCAAsC;AAAA,QACvF,UAAU,QAAQ,SAAS,QAAQ,OAAO,SAAS;AAAA,MACrD,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACD,QAAM,kBAAkB;AAExB,MAAI,qCAAqC,QAAQ,MAAM,QAAQ,GAAG;AAChE,QAAI;AACF,4BAAsB,oCAAoC;AAAA,QACxD;AAAA,QACA;AAAA,QACA,OAAO,MAAM;AACX,cAAI,CAAC,gBAAgB,MAAM,uBAAuB,GAAG;AACnD,kBAAM,IAAI,MAAM,gCAAgC;AAAA,UAClD;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,gBAAgB,MAAM;AAC5B,YAAM;AAAA,IACR;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,QAAQ;AAAA,IACd,QAAQ,mBAAmB;AAAA,IAC3B,YAAY,mBAAmB;AAAA,IAC/B,OAAO,gBAAgB;AAAA,IACvB,KAAK,gBAAgB;AAAA,IACrB,OAAO,CAAC,WAAW;AACjB,sBAAgB,MAAM,MAAM;AAAA,IAC9B;AAAA,IACA,OAAO,gBAAgB;AAAA,EACzB;AACF;AAQA,eAAsB,kBAAkB,SAAkD;AACxF,QAAM,UAAU,MAAM,4BAA4B,OAAO;AACzD,QAAM,UACJ,QAAQ,oBAAoB,QAAQ,CAAC,IAAK,QAAQ,mBAAmB,CAAC,WAAW,QAAQ;AAC3F,QAAM,WAAW,QAAQ,IAAI,CAAC,WAAW;AACvC,UAAM,UAAU,MAAM,QAAQ,MAAM,MAAM;AAC1C,YAAQ,GAAG,QAAQ,OAAO;AAC1B,WAAO,EAAE,QAAQ,QAAQ;AAAA,EAC3B,CAAC;AACD,MAAI;AACF,UAAM,QAAQ,IAAI;AAAA,EACpB,UAAE;AACA,eAAW,EAAE,QAAQ,QAAQ,KAAK,UAAU;AAC1C,cAAQ,IAAI,QAAQ,OAAO;AAAA,IAC7B;AACA,UAAM,QAAQ,MAAM;AAAA,EACtB;AACF;AAEA,eAAsB,cAAc;AAClC,QAAM,OAAO,QAAQ,IAAI;AACzB,MAAI,SAAS,aAAa,SAAS,QAAQ;AACzC,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,QAAM,WAAW,YAAY;AAC7B,QAAM,gBAAgB,oBAAoB,UAAU,EAAE,WAAW,UAAU,IAAI,GAAG,CAAC;AAKnF,QAAM,oCAAoC,wCAAwC;AAClF,QAAM,eAAe,oBAAoB,QAAQ;AACjD,QAAM,UAAU,CAAC,UACf,0BAA0B,eAAe,KAAK;AAChD,QAAM,aAAa,aAAa,QAAQ;AACxC,QAAM,WAAW,SAAS,SAAS,aAAa;AAAA,IAC9C,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACnC,aAAa,SAAS;AAAA,EACxB,CAAC;AAMD,QAAM,oBAAoB,SAAS,SAAS,aAAa;AAAA,IACvD,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACnC,aAAa,SAAS;AAAA,IACtB,KAAK;AAAA,EACP,CAAC;AACD,QAAM,kBAAkB;AAAA,IACtB,aAAa,SAAS;AAAA,IACtB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS,SAAS,KAAK,KAAK;AAAA,IAC1C,+CACE,SAAS;AAAA,EACb;AACA,QAAM,mBAAmB,4BAA4B,QAAQ;AAC7D,MAAI;AACJ,MAAI;AACF,UAAM;AAAA,MACJ;AAAA,MACA,MAAMC,8BAA6B,SAAS,IAAI,eAAe;AAAA,MAC/D,EAAE,GAAG,cAAc,SAAS,aAAa,uCAAuC;AAAA,IAClF;AACA,UAAM,MAAM;AAAA,MACV;AAAA,MACA,MACE;AAAA,QACE,SAAS;AAAA,QACT,mBACI,EAAE,MAAM,iBAAiB,MAAM,MAAM,iBAAiB,SAAS,IAC/D;AAAA,QACJ,6BAA6B,aAAa;AAAA,MAC5C;AAAA,MACF,EAAE,GAAG,cAAc,QAAQ;AAAA,IAC7B;AACA,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,EAAE,aAAa,kBAAkB,GAAG;AAAA,MAC1C,sBAAsB;AAAA,QACpB;AAAA,QACA,IAAI,SAAS;AAAA,QACb;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,UAAE;AACA,UAAM,QAAQ,WAAW,CAAC,KAAK,MAAM,GAAG,kBAAkB,MAAM,GAAG,SAAS,MAAM,CAAC,CAAC;AACpF,sCAAkC;AAAA,EACpC;AACF;AAEA,IAAI,YAAY,MAAM;AAKpB,MAAI,cAAc;AAClB,QAAM,kBAAkB,MAAM;AAC5B,kBAAc;AAAA,EAChB;AACA,UAAQ,KAAK,UAAU,eAAe;AACtC,MAAI;AACF,UAAM,YAAY;AAAA,EACpB,UAAE;AACA,YAAQ,IAAI,UAAU,eAAe;AACrC,QAAI,YAAa,SAAQ,KAAK,CAAC;AAAA,EACjC;AACF;","names":["assertRuntimeDatabasePosture","requireSessionEventDurableFanoutCapability","activity","requireSessionEventDurableFanoutCapability","assertRuntimeDatabasePosture"]}
+{"version":3,"sources":["../src/index.ts","../src/workflows/activities.ts","../src/knowledge-source-sync-activity-policy.ts","../src/http.ts","../src/worker-service-lifecycle.ts","../src/memory-pressure-guard.ts","../src/unhandled-rejection-boundary.ts","../src/browser-deadline-checkpoint-contract.ts"],"sourcesContent":["import {\n  dbSearchPath,\n  getSettings,\n  resolveNatsControlPlaneAuth,\n  retryStartupDependency,\n  startupRetryOptions,\n  temporalConnectionOptions,\n  type Settings,\n} from \"@opengeni/config\";\nimport {\n  assertRuntimeDatabasePosture,\n  isRetryableRuntimeDatabaseStartupError,\n  countSessionRecoveryBacklog,\n  createDb,\n  getContextCompactionPendingSummary,\n  markSessionWorkflowWakeDelivered,\n  type Database,\n  type RuntimeDatabasePostureOptions,\n} from \"@opengeni/db\";\nimport {\n  createNatsEventBus,\n  requireSessionEventDurableFanoutCapability,\n  type EventBus,\n} from \"@opengeni/events\";\nimport {\n  createObservability,\n  logStartupDependencyRetry,\n  type Observability,\n} from \"@opengeni/observability\";\nimport {\n  Connection,\n  isGrpcServiceError,\n  ScheduleAlreadyRunning,\n  ScheduleOverlapPolicy,\n  Client as TemporalClient,\n  WorkflowExecutionAlreadyStartedError,\n} from \"@temporalio/client\";\nimport { NativeConnection, Worker, type WorkflowBundleOption } from \"@temporalio/worker\";\nimport { existsSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport type { createControlActivities } from \"./activities-control\";\nimport type { createTurnActivities } from \"./activities-turn\";\nimport type { ActivityDependencies } from \"./activities/types\";\nimport type {\n  InspectSessionAttemptActivity,\n  SignalCodexCapacityWorkflow,\n  SignalSessionAttemptQuiesced,\n  StartSandboxReaperWorkflow,\n  StartVideoGenerationWorkflow,\n  WakeSessionWorkflowSignal,\n} from \"./activities/types\";\nimport { turnTaskQueue } from \"./workflows/activities\";\nimport {\n  dbReadyCheck,\n  natsReadyCheck,\n  startWorkerHttpServer,\n  temporalReadyCheck,\n  type WorkerLifecycleState,\n} from \"./http\";\nimport {\n  initializeContextCompactionMetrics,\n  initializeWorkerOutcomeMetrics,\n  normalizeTurnTaskQueueStats,\n  observabilityEventBusOptions,\n  startContextCompactionPendingMonitor,\n  startSessionRecoveryMonitor,\n  startTurnCapacityMonitor,\n  type TurnTaskQueueStats,\n} from \"./observability-metrics\";\nimport {\n  resolveCatalogSettings,\n  SESSION_WORKFLOW_WAKE_DISPATCHER_PERIOD_MS,\n  SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID,\n  SESSION_WORKFLOW_WAKE_DISPATCHER_WORKFLOW_TYPE,\n  TURN_ACTIVITY_CANCELLATION_HEARTBEAT_INTERVAL_MS,\n} from \"@opengeni/core\";\nimport {\n  CONTROL_WORKER_MAX_CACHED_WORKFLOWS,\n  CONTROL_WORKER_MAX_CONCURRENT_ACTIVITIES,\n  CONTROL_WORKER_MAX_CONCURRENT_WORKFLOW_TASKS,\n  createTurnWorkerConcurrencyPlan,\n  turnWorkerConcurrencyLogFields,\n} from \"./concurrency\";\nimport {\n  combineWorkerRunTargets,\n  constructWithOwnedConnection,\n  createWorkerServiceLifecycle,\n  createWorkerCleanupContainment,\n  type WorkerServiceLifecycle,\n  type WorkerRunTarget,\n} from \"./worker-service-lifecycle\";\nimport {\n  createTurnWorkerMemoryPressureGuard,\n  turnWorkerMemoryPressureGuardEnabled,\n  type TurnWorkerMemoryPressureGuard,\n} from \"./memory-pressure-guard\";\nimport { assertSandboxReaperActivityTimeout } from \"./sandbox-reaper-timeout\";\nimport { installWorkerUnhandledRejectionBoundary } from \"./unhandled-rejection-boundary\";\nimport {\n  SANDBOX_REAPER_V2_WORKFLOW_ID,\n  sandboxLifecycleTaskQueue,\n} from \"./sandbox-reaper-contract\";\nimport {\n  BROWSER_DEADLINE_CHECKPOINT_SWEEP_ID,\n  browserDeadlineCheckpointTaskQueue,\n} from \"./browser-deadline-checkpoint-contract\";\n\nexport {\n  createHostExportPump,\n  type HostExportDrainResult,\n  type HostExportPump,\n  type HostExportPumpOptions,\n  type HostEventExport,\n  type HostEventExportBatch,\n  type HostEventSink,\n  type HostLifecycleFactExport,\n  type HostLifecycleFactExportBatch,\n  type HostLifecycleFactSink,\n  type HostUsageExport,\n  type HostUsageExportBatch,\n  type HostUsageSink,\n} from \"./host-export\";\n\n// The deterministic id of the ONE global reaper Schedule. A single id means\n// create() is idempotent across every worker in the pool: the first worker to\n// boot creates it, all others collide on this id (ScheduleAlreadyRunning) and\n// no-op — so the Schedule is registered EXACTLY ONCE per deployment regardless\n// of replica count.\nconst SANDBOX_REAPER_SCHEDULE_ID = \"opengeni-sandbox-lease-reaper\";\nexport const KNOWLEDGE_INDEXING_SCHEDULE_ID = \"opengeni-knowledge-indexing\";\nexport const KNOWLEDGE_INDEXING_PERIOD_MS = 15_000;\nexport const FILE_UPLOAD_REAPER_SCHEDULE_ID = \"opengeni-file-upload-reaper\";\nexport const FILE_UPLOAD_REAPER_PERIOD_MS = 15 * 60 * 1_000;\nexport const SITE_AUTH_MAINTENANCE_SCHEDULE_ID = \"opengeni-site-auth-maintenance\";\nexport const SITE_AUTH_MAINTENANCE_PERIOD_MS = 60 * 1_000;\nexport type OpenGeniWorkerRole = \"control\" | \"turn\";\n\nexport type WorkerOptions = {\n  role: OpenGeniWorkerRole;\n  settings?: Settings;\n  activities?: ReturnType<typeof createControlActivities> | ReturnType<typeof createTurnActivities>;\n  activityDependencies?: ActivityDependencies;\n  /** Override the release-coherent workflow artifact. Most hosts should omit this. */\n  workflowBundle?: WorkflowBundleOption;\n};\n\ntype TemporalActivityLease = {\n  lastHeartbeatTime?: { seconds?: unknown; nanos?: number | null } | null;\n  lastStartedTime?: { seconds?: unknown; nanos?: number | null } | null;\n  activityOptions?: {\n    heartbeatTimeout?: { seconds?: unknown; nanos?: number | null } | null;\n  } | null;\n};\n\nfunction temporalTimeMs(\n  value: { seconds?: unknown; nanos?: number | null } | null | undefined,\n): number | null {\n  if (value?.seconds === undefined || value.seconds === null) return null;\n  return Number(String(value.seconds)) * 1_000 + Math.floor((value.nanos ?? 0) / 1_000_000);\n}\n\nexport function temporalActivityLeaseSettled(\n  pending: TemporalActivityLease | null | undefined,\n  nowMs = Date.now(),\n): boolean {\n  if (!pending) return true;\n  const heartbeatAt =\n    temporalTimeMs(pending.lastHeartbeatTime) ?? temporalTimeMs(pending.lastStartedTime);\n  const heartbeatTimeoutMs = temporalTimeMs(pending.activityOptions?.heartbeatTimeout);\n  return (\n    heartbeatAt !== null && heartbeatTimeoutMs !== null && nowMs >= heartbeatAt + heartbeatTimeoutMs\n  );\n}\n\n/** The exact Temporal workflow run is absent, so it cannot retain an activity. */\nexport function temporalWorkflowExecutionNotFound(error: unknown): boolean {\n  // gRPC status code 5 is NOT_FOUND. The typed guard prevents unrelated\n  // provider/HTTP errors carrying a numeric code from proving quiescence.\n  return isGrpcServiceError(error) && error.code === 5;\n}\n\n/** Load exactly one role's activity graph. Exported for embedded hosts and the\n * process-RSS conformance benchmark; construction remains side-effect free\n * until an activity first resolves its injected services. */\nexport async function createDefaultWorkerActivities(\n  role: OpenGeniWorkerRole,\n  dependencies: ActivityDependencies = {},\n) {\n  return role === \"control\"\n    ? (await import(\"./activities-control\")).createControlActivities(dependencies)\n    : (await import(\"./activities-turn\")).createTurnActivities(dependencies);\n}\n\ntype WorkerWorkflowDefinition =\n  | { workflowBundle: WorkflowBundleOption }\n  | { workflowsPath: string };\n\n/**\n * Resolve the deterministic workflow graph without asking installed hosts to\n * transpile or relocate package TypeScript. Monorepo source execution retains\n * the source path for the local development loop; published dist execution\n * fails closed unless the build-generated sibling artifact is present.\n */\nexport function resolveOpenGeniWorkflowDefinition(\n  moduleUrl: string = import.meta.url,\n): WorkerWorkflowDefinition {\n  const modulePath = fileURLToPath(moduleUrl).replaceAll(\"\\\\\", \"/\");\n  if (modulePath.endsWith(\"/src/index.ts\")) {\n    return { workflowsPath: fileURLToPath(new URL(\"./workflows.ts\", moduleUrl)) };\n  }\n  const codePath = fileURLToPath(new URL(\"./workflow-bundle.js\", moduleUrl));\n  if (!existsSync(codePath)) {\n    throw new Error(\n      `OpenGeni workflow bundle is missing at ${codePath}; rebuild or reinstall @opengeni/worker-bundle`,\n    );\n  }\n  return { workflowBundle: { codePath } };\n}\n\nexport function turnCancellationHeartbeatThrottleOptions() {\n  return {\n    maxHeartbeatThrottleInterval: TURN_ACTIVITY_CANCELLATION_HEARTBEAT_INTERVAL_MS,\n    defaultHeartbeatThrottleInterval: TURN_ACTIVITY_CANCELLATION_HEARTBEAT_INTERVAL_MS,\n  } as const;\n}\n\nexport async function createOpenGeniWorker(options: WorkerOptions): Promise<{\n  worker: WorkerRunTarget;\n  connection: NativeConnection;\n}> {\n  const settings = options.settings ?? getSettings();\n  if (options.role === \"control\") {\n    // The exported lower-level factory is itself poll-capable. Validate here so\n    // embedded hosts cannot bypass the reaper budget contract by omitting the\n    // higher-level service and its Schedule-registration lifecycle.\n    assertSandboxReaperActivityTimeout(settings);\n  }\n  const observability =\n    options.activityDependencies?.observability ??\n    createObservability(settings, { component: `worker-${options.role}` });\n  initializeWorkerOutcomeMetrics(observability);\n  if (options.role === \"turn\") {\n    initializeContextCompactionMetrics(observability);\n  }\n  if (options.role === \"turn\" && options.workflowBundle) {\n    throw new Error(\"workflowBundle is valid only for the control worker role\");\n  }\n  // Pre-resolve a PRIVATE-registry sandbox image before any turn creates a box.\n  // A provider-native OPENGENI_MODAL_IMAGE_ID intentionally bypasses this\n  // registry path and is resolved by ModalImageSelector.fromId at create time.\n  // Otherwise this is a no-op unless the registry secret + logical ref are both\n  // set. Memoized in the provider, so it runs once per process.\n  if (options.role === \"turn\") {\n    const { ensureModalRegistryImage } = await import(\"@opengeni/runtime/sandbox\");\n    await retryStartupDependency(\n      \"Modal private-registry image\",\n      () => ensureModalRegistryImage(settings),\n      {\n        ...startupRetryOptions(settings),\n        onRetry: (event) => logStartupDependencyRetry(observability, event),\n      },\n    );\n  }\n  return constructWithOwnedConnection(\n    () =>\n      retryStartupDependency(\n        \"Temporal\",\n        () => NativeConnection.connect(temporalConnectionOptions(settings)),\n        {\n          ...startupRetryOptions(settings),\n          onRetry: (event) => logStartupDependencyRetry(observability, event),\n        },\n      ),\n    async (connection) => {\n      let turnWorker: Worker | undefined;\n      let cleanupDrainRequested = false;\n      const activityDependencies = {\n        ...options.activityDependencies,\n        settings,\n        observability,\n        requestWorkerDrain:\n          options.activityDependencies?.requestWorkerDrain ??\n          (() => {\n            if (cleanupDrainRequested) return;\n            if (!turnWorker) throw new Error(\"turn worker lifecycle is not initialized\");\n            turnWorker.shutdown();\n            cleanupDrainRequested = true;\n          }),\n      };\n      const activities =\n        options.activities ??\n        (await createDefaultWorkerActivities(options.role, activityDependencies));\n      const turnConcurrency =\n        options.role === \"turn\"\n          ? createTurnWorkerConcurrencyPlan(settings, { observability })\n          : null;\n      const workflowDefinition =\n        options.role === \"control\"\n          ? options.workflowBundle\n            ? { workflowBundle: options.workflowBundle }\n            : resolveOpenGeniWorkflowDefinition()\n          : {};\n      const sharedWorkerOptions = {\n        connection,\n        namespace: settings.temporalNamespace,\n        activities,\n        // Cancellation is delivered through an activity heartbeat. Keep the SDK\n        // throttle aligned with runAgentTurn's local heartbeat cadence so the\n        // four-second control contract still has time for physical writer drain\n        // and exact receipt-gated replacement admission.\n        ...turnCancellationHeartbeatThrottleOptions(),\n        // GRACEFUL DEPLOY SHUTDOWN (with the SIGTERM handler in startWorker):\n        // after shutdown() stops polling, in-flight activities get this long to\n        // finish naturally; the rest are then CANCELLED with WORKER_SHUTDOWN.\n        shutdownGraceTime: \"5s\",\n        // Hard ceiling inside the pod's termination grace period.\n        shutdownForceTime: \"100s\",\n      } as const;\n      const worker = await Worker.create({\n        ...sharedWorkerOptions,\n        taskQueue:\n          options.role === \"control\"\n            ? settings.temporalTaskQueue\n            : turnTaskQueue(settings.temporalTaskQueue),\n        ...(options.role === \"control\"\n          ? {\n              ...workflowDefinition,\n              reuseV8Context: true,\n              workflowThreadPoolSize: 1,\n              maxCachedWorkflows: CONTROL_WORKER_MAX_CACHED_WORKFLOWS,\n              maxConcurrentWorkflowTaskExecutions: CONTROL_WORKER_MAX_CONCURRENT_WORKFLOW_TASKS,\n              maxConcurrentActivityTaskExecutions: CONTROL_WORKER_MAX_CONCURRENT_ACTIVITIES,\n            }\n          : turnConcurrency!.options),\n      });\n      if (options.role !== \"control\") {\n        turnWorker = worker;\n        turnConcurrency?.admission?.finalizeStartupBaseline();\n        return { worker, connection };\n      }\n\n      const ownedWorkers = [worker];\n      try {\n        // The new activity type has its own queue. Retain the V1 poller so old\n        // drain histories finish; old binaries never receive checkpoint work.\n        for (const taskQueue of [\n          sandboxLifecycleTaskQueue(settings.temporalTaskQueue),\n          browserDeadlineCheckpointTaskQueue(settings.temporalTaskQueue),\n        ]) {\n          const lifecycleWorker = await Worker.create({\n            ...sharedWorkerOptions,\n            ...workflowDefinition,\n            taskQueue,\n            reuseV8Context: true,\n            workflowThreadPoolSize: 1,\n            maxCachedWorkflows: CONTROL_WORKER_MAX_CACHED_WORKFLOWS,\n            maxConcurrentWorkflowTaskExecutions: CONTROL_WORKER_MAX_CONCURRENT_WORKFLOW_TASKS,\n            maxConcurrentActivityTaskExecutions: CONTROL_WORKER_MAX_CONCURRENT_ACTIVITIES,\n          });\n          ownedWorkers.push(lifecycleWorker);\n        }\n        return {\n          worker: combineWorkerRunTargets(ownedWorkers),\n          connection,\n        };\n      } catch (error) {\n        for (const ownedWorker of ownedWorkers) {\n          try {\n            ownedWorker.shutdown();\n          } catch {\n            // Preserve the lifecycle worker construction failure. The base poller\n            // still received its shutdown request; a secondary synchronous\n            // shutdown error must not replace the startup root cause.\n          }\n        }\n        throw error;\n      }\n    },\n    (connection) => connection.close(),\n  );\n}\n\n// A signalWithStart capability so a worker activity can wake a PARENT\n// session's workflow when a spawned worker completes (the parent may have\n// idled and let its run finish, so a plain signal would not start one).\n// Separate from the worker's NativeConnection: the @temporalio/client\n// Connection is what exposes workflow.signalWithStart.\nexport async function createWorkerWorkflowSignaler(\n  settings: Settings,\n  db: Database,\n): Promise<{\n  wakeSessionWorkflow: WakeSessionWorkflowSignal;\n  signalSessionAttemptQuiesced: SignalSessionAttemptQuiesced;\n  inspectSessionAttemptActivity: InspectSessionAttemptActivity;\n  signalCodexCapacityWorkflow: SignalCodexCapacityWorkflow;\n  getTurnTaskQueueStats: () => Promise<TurnTaskQueueStats>;\n  startSandboxReaperWorkflow: StartSandboxReaperWorkflow;\n  startVideoGenerationWorkflow: StartVideoGenerationWorkflow;\n  check: () => Promise<void>;\n  close: () => Promise<void>;\n}> {\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  return {\n    wakeSessionWorkflow: async ({\n      accountId,\n      workspaceId,\n      sessionId,\n      workflowId,\n      wakeRevision,\n      interruptionRequested,\n      onSignalAccepted,\n    }) => {\n      if (interruptionRequested) {\n        await temporal.workflow.signalWithStart(\"sessionWorkflow\", {\n          taskQueue: settings.temporalTaskQueue,\n          workflowId,\n          workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n          args: [{ accountId, workspaceId, sessionId }],\n          signal: \"sessionControl\",\n          signalArgs: [],\n        });\n      } else {\n        await temporal.workflow.signalWithStart(\"sessionWorkflow\", {\n          taskQueue: settings.temporalTaskQueue,\n          workflowId,\n          workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n          args: [{ accountId, workspaceId, sessionId }],\n          signal: \"queueChanged\",\n        });\n      }\n      onSignalAccepted?.();\n      return await markSessionWorkflowWakeDelivered(db, {\n        accountId,\n        workspaceId,\n        sessionId,\n        temporalWorkflowId: workflowId,\n        wakeRevision,\n      });\n    },\n    signalSessionAttemptQuiesced: async (proof) => {\n      await temporal.workflow.signalWithStart(\"sessionWorkflow\", {\n        taskQueue: settings.temporalTaskQueue,\n        workflowId: proof.workflowId,\n        workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n        args: [\n          {\n            accountId: proof.accountId,\n            workspaceId: proof.workspaceId,\n            sessionId: proof.sessionId,\n          },\n        ],\n        signal: \"sessionAttemptQuiesced\",\n        signalArgs: [proof],\n      });\n      // No wake-outbox row exists yet: the direct receipt transaction failed.\n      // The signalled workflow's DB-only control activity owns committing the\n      // receipt and its exact wake revision atomically.\n    },\n    inspectSessionAttemptActivity: async ({ workflowId, workflowRunId, activityId }) => {\n      let description;\n      try {\n        description = await connection.workflowService.describeWorkflowExecution({\n          namespace: settings.temporalNamespace,\n          execution: { workflowId, runId: workflowRunId },\n        });\n      } catch (error) {\n        if (temporalWorkflowExecutionNotFound(error)) return \"settled\";\n        throw error;\n      }\n      const pending = description.pendingActivities?.find(\n        (activity) => activity.activityId === activityId,\n      );\n      return temporalActivityLeaseSettled(pending) ? \"settled\" : \"pending\";\n    },\n    signalCodexCapacityWorkflow: async ({\n      accountId,\n      workspaceId,\n      sessionId,\n      workflowId,\n      wakeRevision,\n    }) => {\n      await temporal.workflow.signalWithStart(\"sessionWorkflow\", {\n        taskQueue: settings.temporalTaskQueue,\n        workflowId,\n        workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n        args: [{ accountId, workspaceId, sessionId }],\n        signal: \"codexCapacityChanged\",\n        signalArgs: [wakeRevision],\n      });\n      // A typed capacity signal cannot acknowledge the generic outbox row:\n      // another producer may have advanced it with a Pause/Steer that requires\n      // sessionControl. The global dispatcher owns that acknowledgement.\n    },\n    getTurnTaskQueueStats: async () => {\n      const response = await connection.workflowService.describeTaskQueue({\n        namespace: settings.temporalNamespace,\n        taskQueue: { name: turnTaskQueue(settings.temporalTaskQueue) },\n        // temporal.api.enums.v1.TASK_QUEUE_TYPE_ACTIVITY. Keep this request in\n        // the supported DEFAULT mode; `stats.approximateBacklogCount` is the\n        // server-documented scaling signal.\n        taskQueueType: 2,\n        reportStats: true,\n      });\n      return normalizeTurnTaskQueueStats(response.stats);\n    },\n    startSandboxReaperWorkflow: async () => {\n      // Same backend tick, no additional schedule. A bounded independent\n      // inventory cannot prevent the existing per-box drain from starting.\n      const starts = await Promise.allSettled([\n        temporal.workflow.start(\"sandboxReaperWorkflowV2\", {\n          taskQueue: sandboxLifecycleTaskQueue(settings.temporalTaskQueue),\n          workflowId: SANDBOX_REAPER_V2_WORKFLOW_ID,\n          workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n          args: [],\n        }),\n        temporal.workflow.start(\"browserDeadlineCheckpointSweepWorkflow\", {\n          taskQueue: browserDeadlineCheckpointTaskQueue(settings.temporalTaskQueue),\n          workflowId: BROWSER_DEADLINE_CHECKPOINT_SWEEP_ID,\n          workflowIdReusePolicy: \"ALLOW_DUPLICATE\",\n          args: [],\n        }),\n      ]);\n      for (const start of starts) {\n        if (\n          start.status === \"rejected\" &&\n          !(start.reason instanceof WorkflowExecutionAlreadyStartedError)\n        ) {\n          // The other start already settled. Retry the router without losing\n          // ordinary draining or silently omitting the checkpoint sweep.\n          throw start.reason;\n        }\n      }\n      return starts[0].status === \"fulfilled\" ? \"started\" : \"already_running\";\n    },\n    startVideoGenerationWorkflow: async ({ accountId, workspaceId, operationId }) => {\n      try {\n        await temporal.workflow.start(\"videoGenerationWorkflow\", {\n          taskQueue: settings.temporalTaskQueue,\n          workflowId: `video-generation:${operationId}`,\n          // Reject a concurrent or already-completed run, but allow the repair\n          // sweep to restart this exact operation if the workflow itself failed.\n          // Every provider/storage transition remains CAS/idempotency fenced in\n          // Postgres, so recovery never creates a second logical operation.\n          workflowIdReusePolicy: \"ALLOW_DUPLICATE_FAILED_ONLY\",\n          args: [\n            {\n              accountId,\n              workspaceId,\n              operationId,\n              baseTaskQueue: settings.temporalTaskQueue,\n            },\n          ],\n        });\n        return \"started\";\n      } catch (error) {\n        if (error instanceof WorkflowExecutionAlreadyStartedError) {\n          return \"already_running\";\n        }\n        throw error;\n      }\n    },\n    check: async () => {\n      await connection.workflowService.getSystemInfo({});\n    },\n    close: async () => {\n      await connection.close();\n    },\n  };\n}\n\n/**\n * Register the ONE global reaper Temporal Schedule (the sole liveness/GC/cost-stop\n * driver — P1.3 / OD-3) and durable system-update outbox repair cadence. With\n * sandbox ownership off the activity performs bounded DB outbox repair and\n * read-only observability projections; it never mutates or terminates sandbox leases.\n *\n * The Schedule permanently fires sandboxReaperWorkflow on the legacy/base queue\n * every settings.sandboxLeaseReaperPeriodMs (the SAME cadence the boot invariant\n * `reaperPeriod < viewerHolderTTL` and `reaperPeriod + idleGrace < providerLifetime`\n * validates in packages/config — wiring the schedule period to it). SKIP overlap means a slow\n * sweep never overlaps itself. Idempotent: a duplicate scheduleId across the\n * worker pool collides on ScheduleAlreadyRunning and reconciles the same\n * definition. New workers route onto the versioned lifecycle queue; old workers\n * can still run the legacy action during rollout or a full binary rollback.\n *\n * Returns a `close()` for the dedicated client connection (separate from the\n * worker's NativeConnection — the Schedule client is a @temporalio/client).\n */\nexport async function registerSandboxReaperSchedule(\n  settings: Settings,\n  observability: Observability,\n): Promise<{ registered: boolean; close: () => Promise<void> }> {\n  assertSandboxReaperActivityTimeout(settings);\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  const spec = { intervals: [{ every: settings.sandboxLeaseReaperPeriodMs }] };\n  const action = {\n    type: \"startWorkflow\" as const,\n    workflowType: \"sandboxReaperWorkflow\",\n    taskQueue: settings.temporalTaskQueue,\n    args: [] as [],\n  };\n  const policies = {\n    overlap: ScheduleOverlapPolicy.SKIP,\n    catchupWindow: \"1m\",\n    pauseOnFailure: false,\n  } as const;\n  try {\n    await temporal.schedule.create({\n      scheduleId: SANDBOX_REAPER_SCHEDULE_ID,\n      // @every-style interval: fire once per reaper period. The boot invariant\n      // guarantees reaperPeriod < viewerHolderTTL and\n      // reaperPeriod + idleGrace < providerLifetime.\n      spec,\n      action,\n      // The base workflow is a short router on new binaries; legacy binaries\n      // still execute the pre-refactor composite under this same overlap fence.\n      policies,\n    });\n    observability.info(\"Registered the global sandbox-lease reaper Schedule\", {\n      scheduleId: SANDBOX_REAPER_SCHEDULE_ID,\n      reaperPeriodMs: settings.sandboxLeaseReaperPeriodMs,\n    });\n    return {\n      registered: true,\n      close: async () => {\n        await connection.close();\n      },\n    };\n  } catch (error) {\n    if (error instanceof ScheduleAlreadyRunning) {\n      // Never move this action off the base queue: doing so would leave a full\n      // rollback with no worker polling the only reaper Schedule. The workflow\n      // implementation itself owns the forward-compatible queue handoff.\n      await temporal.schedule.getHandle(SANDBOX_REAPER_SCHEDULE_ID).update((previous) => ({\n        spec,\n        action,\n        policies,\n        state: {\n          paused: previous.state.paused,\n          ...(previous.state.note ? { note: previous.state.note } : {}),\n          ...(previous.state.remainingActions !== undefined\n            ? { remainingActions: previous.state.remainingActions }\n            : {}),\n        },\n      }));\n      observability.info(\"Reconciled the global sandbox-lease reaper Schedule\", {\n        scheduleId: SANDBOX_REAPER_SCHEDULE_ID,\n        temporalTaskQueue: action.taskQueue,\n      });\n      return {\n        registered: false,\n        close: async () => {\n          await connection.close();\n        },\n      };\n    }\n    await connection.close().catch(() => undefined);\n    throw error;\n  }\n}\n\n/** Register the deployment-wide worker for rebuildable Knowledge search projections. */\nexport async function registerKnowledgeIndexingSchedule(\n  settings: Settings,\n  observability: Observability,\n): Promise<{ registered: boolean; close: () => Promise<void> }> {\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  try {\n    await temporal.schedule.create({\n      scheduleId: KNOWLEDGE_INDEXING_SCHEDULE_ID,\n      spec: { intervals: [{ every: KNOWLEDGE_INDEXING_PERIOD_MS }] },\n      action: {\n        type: \"startWorkflow\",\n        workflowType: \"knowledgeIndexingWorkflow\",\n        taskQueue: settings.temporalTaskQueue,\n        args: [],\n      },\n      policies: {\n        overlap: ScheduleOverlapPolicy.SKIP,\n        catchupWindow: \"1m\",\n        pauseOnFailure: false,\n      },\n    });\n    observability.info(\"Registered the global Knowledge indexer Schedule\", {\n      scheduleId: KNOWLEDGE_INDEXING_SCHEDULE_ID,\n      indexingPeriodMs: KNOWLEDGE_INDEXING_PERIOD_MS,\n    });\n    return { registered: true, close: async () => connection.close() };\n  } catch (error) {\n    if (error instanceof ScheduleAlreadyRunning) {\n      observability.info(\"Global Knowledge indexer Schedule already registered\", {\n        scheduleId: KNOWLEDGE_INDEXING_SCHEDULE_ID,\n      });\n      return { registered: false, close: async () => connection.close() };\n    }\n    await connection.close().catch(() => undefined);\n    throw error;\n  }\n}\n\n/**\n * Register the one provider-neutral expired direct-upload cleanup Schedule.\n * Unlike sandbox GC this is always registered: file uploads can be enabled in\n * deployments where sandbox ownership is disabled. The activity is a cheap\n * no-op when object storage is not configured.\n */\nexport async function registerFileUploadReaperSchedule(\n  settings: Settings,\n  observability: Observability,\n): Promise<{ registered: boolean; close: () => Promise<void> }> {\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  try {\n    await temporal.schedule.create({\n      scheduleId: FILE_UPLOAD_REAPER_SCHEDULE_ID,\n      spec: { intervals: [{ every: FILE_UPLOAD_REAPER_PERIOD_MS }] },\n      action: {\n        type: \"startWorkflow\",\n        workflowType: \"fileUploadReaperWorkflow\",\n        taskQueue: settings.temporalTaskQueue,\n        args: [],\n      },\n      policies: {\n        overlap: ScheduleOverlapPolicy.SKIP,\n        catchupWindow: \"1m\",\n        pauseOnFailure: false,\n      },\n    });\n    observability.info(\"Registered the global file-upload reaper Schedule\", {\n      scheduleId: FILE_UPLOAD_REAPER_SCHEDULE_ID,\n      reaperPeriodMs: FILE_UPLOAD_REAPER_PERIOD_MS,\n    });\n    return { registered: true, close: async () => connection.close() };\n  } catch (error) {\n    if (error instanceof ScheduleAlreadyRunning) {\n      observability.info(\"Global file-upload reaper Schedule already registered\", {\n        scheduleId: FILE_UPLOAD_REAPER_SCHEDULE_ID,\n      });\n      return { registered: false, close: async () => connection.close() };\n    }\n    await connection.close().catch(() => undefined);\n    throw error;\n  }\n}\n\n/** Register the deployment-wide maintained-auth dispatcher. Its one-minute\n * cadence matches the minimum public policy interval; DB claims own overlap,\n * crash recovery, and exact session idempotency. */\nexport async function registerSiteAuthMaintenanceSchedule(\n  settings: Settings,\n  observability: Observability,\n): Promise<{ registered: boolean; close: () => Promise<void> }> {\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  try {\n    await temporal.schedule.create({\n      scheduleId: SITE_AUTH_MAINTENANCE_SCHEDULE_ID,\n      spec: { intervals: [{ every: SITE_AUTH_MAINTENANCE_PERIOD_MS }] },\n      action: {\n        type: \"startWorkflow\",\n        workflowType: \"siteAuthMaintenanceWorkflow\",\n        taskQueue: settings.temporalTaskQueue,\n        args: [],\n      },\n      policies: {\n        overlap: ScheduleOverlapPolicy.SKIP,\n        catchupWindow: \"1m\",\n        pauseOnFailure: false,\n      },\n    });\n    observability.info(\"Registered the global site-auth maintenance Schedule\", {\n      scheduleId: SITE_AUTH_MAINTENANCE_SCHEDULE_ID,\n      maintenancePeriodMs: SITE_AUTH_MAINTENANCE_PERIOD_MS,\n    });\n    return { registered: true, close: async () => connection.close() };\n  } catch (error) {\n    if (error instanceof ScheduleAlreadyRunning) {\n      observability.info(\"Global site-auth maintenance Schedule already registered\", {\n        scheduleId: SITE_AUTH_MAINTENANCE_SCHEDULE_ID,\n      });\n      return { registered: false, close: async () => connection.close() };\n    }\n    await connection.close().catch(() => undefined);\n    throw error;\n  }\n}\n\n/**\n * Register the one repair cadence for committed workflow-wake revisions. The\n * activity only reads the transactional outbox and sends revision-scoped\n * signals; it is independent of sandbox ownership and child-agent features.\n */\nexport async function registerSessionWorkflowWakeDispatcherSchedule(\n  settings: Settings,\n  observability: Observability,\n): Promise<{ registered: boolean; close: () => Promise<void> }> {\n  const connection = await Connection.connect(temporalConnectionOptions(settings));\n  const temporal = new TemporalClient({ connection, namespace: settings.temporalNamespace });\n  try {\n    await temporal.schedule.create({\n      scheduleId: SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID,\n      spec: { intervals: [{ every: SESSION_WORKFLOW_WAKE_DISPATCHER_PERIOD_MS }] },\n      action: {\n        type: \"startWorkflow\",\n        workflowType: SESSION_WORKFLOW_WAKE_DISPATCHER_WORKFLOW_TYPE,\n        taskQueue: settings.temporalTaskQueue,\n        args: [],\n      },\n      policies: {\n        overlap: ScheduleOverlapPolicy.SKIP,\n        catchupWindow: \"1m\",\n        pauseOnFailure: false,\n      },\n    });\n    observability.info(\"Registered the session-workflow wake dispatcher Schedule\", {\n      scheduleId: SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID,\n      periodMs: SESSION_WORKFLOW_WAKE_DISPATCHER_PERIOD_MS,\n    });\n    return { registered: true, close: async () => connection.close() };\n  } catch (error) {\n    if (error instanceof ScheduleAlreadyRunning) {\n      observability.info(\"Session-workflow wake dispatcher Schedule already registered\", {\n        scheduleId: SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID,\n      });\n      return { registered: false, close: async () => connection.close() };\n    }\n    await connection.close().catch(() => undefined);\n    throw error;\n  }\n}\n\nexport type OpenGeniWorkerServiceOptions = Omit<WorkerOptions, \"activityDependencies\"> & {\n  activityDependencies: ActivityDependencies & { db: Database; bus: EventBus };\n  /** Host-owned final containment after a stalled cleanup has drained peers.\n   * The standalone process exits; embedded hosts own their termination policy. */\n  terminateWorker?: () => void;\n  /**\n   * Exact catalog posture required by the standalone runtime. Embedded hosts\n   * may omit this when they own an equivalent database isolation contract.\n   */\n  databasePosture?: RuntimeDatabasePostureOptions;\n  /**\n   * `role-default` registers OpenGeni's internal maintenance schedules on a\n   * control worker only. These are engine maintenance schedules, not a host's\n   * product-level scheduled-agent jobs. Use `none` when another control worker\n   * in the same deployment owns them.\n   */\n  internalSchedules?: \"role-default\" | \"none\";\n  /**\n   * Set false only when the host exposes equivalent lifecycle endpoints itself.\n   * A dedicated readiness database prevents ordinary activity-pool saturation\n   * from making an otherwise healthy Temporal worker fail Kubernetes readiness.\n   * The embedding host retains ownership of this handle.\n   */\n  http?: false | { readinessTimeoutMs?: number; readinessDb?: Database };\n};\n\nexport type OpenGeniWorkerService = {\n  readonly role: OpenGeniWorkerRole;\n  readonly worker: WorkerRunTarget;\n  readonly connection: NativeConnection;\n  state(): WorkerLifecycleState;\n  run(): Promise<void>;\n  drain(reason?: string): void;\n  close(): Promise<void>;\n};\n\nexport function workerOwnsInternalSchedules(\n  role: OpenGeniWorkerRole,\n  policy: OpenGeniWorkerServiceOptions[\"internalSchedules\"] = \"role-default\",\n): boolean {\n  return role === \"control\" && policy !== \"none\";\n}\n\n/**\n * Construct one role-specific worker process around the lower-level Temporal\n * worker factory. The service owns every Temporal client and HTTP listener it\n * creates. The embedding host retains ownership of its injected DB and EventBus\n * handles and closes those only after this service has drained.\n */\nexport async function createOpenGeniWorkerService(\n  options: OpenGeniWorkerServiceOptions,\n): Promise<OpenGeniWorkerService> {\n  requireSessionEventDurableFanoutCapability(options.activityDependencies.bus);\n  const settings = options.settings ?? getSettings();\n  const observability =\n    options.activityDependencies.observability ??\n    createObservability(settings, { component: `worker-${options.role}` });\n  const retryOptions = startupRetryOptions(settings);\n  const onRetry = (event: Parameters<typeof logStartupDependencyRetry>[1]) =>\n    logStartupDependencyRetry(observability, event);\n  let lifecycle: WorkerServiceLifecycle | undefined;\n  let cleanupContainment: ReturnType<typeof createWorkerCleanupContainment> | undefined;\n  let signaler: Awaited<ReturnType<typeof createWorkerWorkflowSignaler>> | undefined;\n  let workerBundle: Awaited<ReturnType<typeof createOpenGeniWorker>> | undefined;\n  let turnCapacityMonitor: ReturnType<typeof startTurnCapacityMonitor> | undefined;\n  let sessionRecoveryMonitor: ReturnType<typeof startSessionRecoveryMonitor> | undefined;\n  let contextCompactionPendingMonitor:\n    | ReturnType<typeof startContextCompactionPendingMonitor>\n    | undefined;\n  const schedules: Array<{ close: () => Promise<void> }> = [];\n  let httpServer: ReturnType<typeof startWorkerHttpServer> | undefined;\n  let memoryPressureGuard: TurnWorkerMemoryPressureGuard | undefined;\n\n  try {\n    const resolvedCatalog = await retryStartupDependency(\n      \"model catalog\",\n      () => resolveCatalogSettings(options.activityDependencies.db, settings),\n      { ...retryOptions, onRetry },\n    );\n    observability.info(\"OpenGeni model catalog resolved\", {\n      role: options.role,\n      catalogSource: resolvedCatalog.source,\n      catalogVersion: resolvedCatalog.version,\n    });\n    const needsSignaler =\n      options.role === \"turn\" ||\n      !options.activityDependencies.wakeSessionWorkflow ||\n      !options.activityDependencies.signalSessionAttemptQuiesced ||\n      !options.activityDependencies.inspectSessionAttemptActivity ||\n      !options.activityDependencies.signalCodexCapacityWorkflow ||\n      !options.activityDependencies.startSandboxReaperWorkflow ||\n      !options.activityDependencies.startVideoGenerationWorkflow;\n    if (needsSignaler) {\n      signaler = await retryStartupDependency(\n        \"Temporal client\",\n        () => createWorkerWorkflowSignaler(settings, options.activityDependencies.db),\n        { ...retryOptions, onRetry },\n      );\n    }\n    const wakeSessionWorkflow =\n      options.activityDependencies.wakeSessionWorkflow ?? signaler?.wakeSessionWorkflow;\n    const signalSessionAttemptQuiesced =\n      options.activityDependencies.signalSessionAttemptQuiesced ??\n      signaler?.signalSessionAttemptQuiesced;\n    const inspectSessionAttemptActivity =\n      options.activityDependencies.inspectSessionAttemptActivity ??\n      signaler?.inspectSessionAttemptActivity;\n    const signalCodexCapacityWorkflow =\n      options.activityDependencies.signalCodexCapacityWorkflow ??\n      signaler?.signalCodexCapacityWorkflow;\n    const startSandboxReaperWorkflow =\n      options.activityDependencies.startSandboxReaperWorkflow ??\n      signaler?.startSandboxReaperWorkflow;\n    const startVideoGenerationWorkflow =\n      options.activityDependencies.startVideoGenerationWorkflow ??\n      signaler?.startVideoGenerationWorkflow;\n    if (\n      !wakeSessionWorkflow ||\n      !signalSessionAttemptQuiesced ||\n      !inspectSessionAttemptActivity ||\n      !signalCodexCapacityWorkflow ||\n      !startSandboxReaperWorkflow ||\n      !startVideoGenerationWorkflow\n    ) {\n      throw new Error(\"OpenGeni worker lifecycle could not resolve its workflow signalers\");\n    }\n    workerBundle = await createOpenGeniWorker({\n      role: options.role,\n      settings,\n      ...(options.activities ? { activities: options.activities } : {}),\n      ...(options.workflowBundle ? { workflowBundle: options.workflowBundle } : {}),\n      activityDependencies: {\n        ...options.activityDependencies,\n        settings,\n        observability,\n        wakeSessionWorkflow,\n        signalSessionAttemptQuiesced,\n        inspectSessionAttemptActivity,\n        signalCodexCapacityWorkflow,\n        startSandboxReaperWorkflow,\n        startVideoGenerationWorkflow,\n        requestWorkerDrain: () => {\n          if (!cleanupContainment) throw new Error(\"worker cleanup containment is not initialized\");\n          cleanupContainment.request();\n        },\n      },\n    });\n\n    if (options.role === \"turn\") {\n      if (!signaler) {\n        throw new Error(\"Turn worker capacity monitor could not resolve its Temporal stats client\");\n      }\n      turnCapacityMonitor = startTurnCapacityMonitor({\n        observability,\n        read: signaler.getTurnTaskQueueStats,\n      });\n    } else {\n      sessionRecoveryMonitor = startSessionRecoveryMonitor({\n        observability,\n        read: async () => await countSessionRecoveryBacklog(options.activityDependencies.db),\n      });\n      contextCompactionPendingMonitor = startContextCompactionPendingMonitor({\n        observability,\n        read: async () => await getContextCompactionPendingSummary(options.activityDependencies.db),\n      });\n    }\n\n    if (workerOwnsInternalSchedules(options.role, options.internalSchedules)) {\n      schedules.push(\n        await retryStartupDependency(\n          \"Temporal schedule (sandbox reaper)\",\n          () => registerSandboxReaperSchedule(settings, observability),\n          { ...retryOptions, onRetry },\n        ),\n      );\n      schedules.push(\n        await retryStartupDependency(\n          \"Temporal schedule (Knowledge indexing)\",\n          () => registerKnowledgeIndexingSchedule(settings, observability),\n          { ...retryOptions, onRetry },\n        ),\n      );\n      schedules.push(\n        await retryStartupDependency(\n          \"Temporal schedule (file upload reaper)\",\n          () => registerFileUploadReaperSchedule(settings, observability),\n          { ...retryOptions, onRetry },\n        ),\n      );\n      schedules.push(\n        await retryStartupDependency(\n          \"Temporal schedule (site auth maintenance)\",\n          () => registerSiteAuthMaintenanceSchedule(settings, observability),\n          { ...retryOptions, onRetry },\n        ),\n      );\n      schedules.push(\n        await retryStartupDependency(\n          \"Temporal schedule (session-workflow wake dispatcher)\",\n          () => registerSessionWorkflowWakeDispatcherSchedule(settings, observability),\n          { ...retryOptions, onRetry },\n        ),\n      );\n    }\n\n    if (options.http !== false) {\n      const readinessDb = options.http?.readinessDb ?? options.activityDependencies.db;\n      const databaseReady = dbReadyCheck(readinessDb, options.databasePosture, async () => {\n        await resolveCatalogSettings(readinessDb, settings);\n      });\n      httpServer = startWorkerHttpServer({\n        settings,\n        observability,\n        checks: {\n          db: databaseReady,\n          nats: natsReadyCheck(options.activityDependencies.bus),\n          temporal: temporalReadyCheck(workerBundle.connection),\n        },\n        ...(options.http?.readinessTimeoutMs ? { timeoutMs: options.http.readinessTimeoutMs } : {}),\n        lifecycle: { role: options.role, state: () => lifecycle?.state() ?? \"starting\" },\n      });\n    }\n  } catch (error) {\n    httpServer?.stop(true);\n    await Promise.allSettled([\n      turnCapacityMonitor?.close(),\n      sessionRecoveryMonitor?.close(),\n      contextCompactionPendingMonitor?.close(),\n      workerBundle?.connection.close(),\n      signaler?.close(),\n      ...schedules.map((schedule) => schedule.close()),\n    ]);\n    throw error;\n  }\n\n  const activeWorkerBundle = workerBundle;\n  const activeSignaler = signaler;\n  if (!activeWorkerBundle) {\n    throw new Error(\"OpenGeni worker service initialization did not complete\");\n  }\n\n  cleanupContainment = createWorkerCleanupContainment({\n    drain: () => lifecycle?.drain(\"stalled turn finalization\") ?? false,\n    ...(options.terminateWorker ? { terminate: options.terminateWorker } : {}),\n    observability,\n  });\n  const activeCleanupContainment = cleanupContainment;\n  lifecycle = createWorkerServiceLifecycle({\n    role: options.role,\n    worker: {\n      shutdown: () => activeWorkerBundle.worker.shutdown(),\n      run: async () => {\n        await activeWorkerBundle.worker.run();\n        activeCleanupContainment.finished();\n      },\n    },\n    observability,\n    closeOwnedResources: async () => {\n      memoryPressureGuard?.close();\n      httpServer?.stop(true);\n      await Promise.allSettled([\n        turnCapacityMonitor?.close(),\n        sessionRecoveryMonitor?.close(),\n        contextCompactionPendingMonitor?.close(),\n        activeWorkerBundle.connection.close(),\n        activeSignaler?.close(),\n        ...schedules.map((schedule) => schedule.close()),\n      ]);\n    },\n    onReady: () => {\n      observability.info(\"OpenGeni worker listening\", {\n        role: options.role,\n        temporalTaskQueue:\n          options.role === \"control\"\n            ? settings.temporalTaskQueue\n            : turnTaskQueue(settings.temporalTaskQueue),\n        ...(options.role === \"turn\"\n          ? turnWorkerConcurrencyLogFields(settings)\n          : {\n              concurrencyMode: \"fixed\",\n              maxConcurrentTurns: CONTROL_WORKER_MAX_CONCURRENT_ACTIVITIES,\n              targetCpuUsage: null,\n              targetMemoryUsage: null,\n            }),\n        maxConcurrentWorkflowTaskExecutions:\n          options.role === \"control\" ? CONTROL_WORKER_MAX_CONCURRENT_WORKFLOW_TASKS : 0,\n        maxCachedWorkflows: options.role === \"control\" ? CONTROL_WORKER_MAX_CACHED_WORKFLOWS : 0,\n        httpPort: options.http === false ? null : settings.workerHttpPort,\n      });\n    },\n  });\n  const activeLifecycle = lifecycle;\n\n  if (turnWorkerMemoryPressureGuardEnabled(options.role, settings)) {\n    try {\n      memoryPressureGuard = createTurnWorkerMemoryPressureGuard({\n        settings,\n        observability,\n        drain: () => {\n          if (!activeLifecycle.drain(\"memory pressure guard\")) {\n            throw new Error(\"worker shutdown request failed\");\n          }\n        },\n      });\n    } catch (error) {\n      await activeLifecycle.close();\n      throw error;\n    }\n  }\n\n  return {\n    role: options.role,\n    worker: activeWorkerBundle.worker,\n    connection: activeWorkerBundle.connection,\n    state: activeLifecycle.state,\n    run: activeLifecycle.run,\n    drain: (reason) => {\n      activeLifecycle.drain(reason);\n    },\n    close: activeLifecycle.close,\n  };\n}\n\nexport type RunOpenGeniWorkerOptions = OpenGeniWorkerServiceOptions & {\n  /** Defaults to SIGTERM and SIGINT. Pass false when the host owns process signals. */\n  shutdownSignals?: false | ReadonlyArray<\"SIGTERM\" | \"SIGINT\">;\n};\n\n/** Start, drain, and close one embedded worker process. */\nexport async function runOpenGeniWorker(options: RunOpenGeniWorkerOptions): Promise<void> {\n  const service = await createOpenGeniWorkerService(options);\n  const signals =\n    options.shutdownSignals === false ? [] : (options.shutdownSignals ?? [\"SIGTERM\", \"SIGINT\"]);\n  const handlers = signals.map((signal) => {\n    const handler = () => service.drain(signal);\n    process.on(signal, handler);\n    return { signal, handler };\n  });\n  try {\n    await service.run();\n  } finally {\n    for (const { signal, handler } of handlers) {\n      process.off(signal, handler);\n    }\n    await service.close();\n  }\n}\n\nexport async function startWorker() {\n  const role = process.env.OPENGENI_WORKER_ROLE;\n  if (role !== \"control\" && role !== \"turn\") {\n    throw new Error(\"OPENGENI_WORKER_ROLE must be explicitly set to 'control' or 'turn'\");\n  }\n  const settings = getSettings();\n  const observability = createObservability(settings, { component: `worker-${role}` });\n  // The Agents SDK also listens for unhandled rejections and exits the process.\n  // Keep detached SDK/transport promises observational here: durable turn\n  // activity boundaries own failures, while process exit causes cross-session\n  // lease loss for every turn assigned to this shared worker pod.\n  const disposeUnhandledRejectionBoundary = installWorkerUnhandledRejectionBoundary();\n  const retryOptions = startupRetryOptions(settings);\n  const onRetry = (event: Parameters<typeof logStartupDependencyRetry>[1]) =>\n    logStartupDependencyRetry(observability, event);\n  const searchPath = dbSearchPath(settings);\n  const dbClient = createDb(settings.databaseUrl, {\n    ...(searchPath ? { searchPath } : {}),\n    rlsStrategy: settings.rlsStrategy,\n  });\n  // Readiness must prove PostgreSQL independently of activity demand. Sharing\n  // the default application pool makes the probe wait behind live turns when\n  // all ten slots are occupied, even while PostgreSQL itself is healthy. Since\n  // Kubernetes readiness cannot stop Temporal polling, that false negative\n  // only wedges rollouts and service health; reserve one probe connection.\n  const readinessDbClient = createDb(settings.databaseUrl, {\n    ...(searchPath ? { searchPath } : {}),\n    rlsStrategy: settings.rlsStrategy,\n    max: 1,\n  });\n  const databasePosture = {\n    rlsStrategy: settings.rlsStrategy,\n    expectedRole: settings.runtimeDatabaseRole,\n    targetSchema: settings.dbSchema.trim() || \"public\",\n    organizationTenancyCanonicalActivationEnabled:\n      settings.organizationTenancyCanonicalActivationEnabled,\n  } as const;\n  const controlPlaneAuth = resolveNatsControlPlaneAuth(settings);\n  let bus: Awaited<ReturnType<typeof createNatsEventBus>> | undefined;\n  try {\n    await retryStartupDependency(\n      \"PostgreSQL runtime posture\",\n      () => assertRuntimeDatabasePosture(dbClient.db, databasePosture),\n      { ...retryOptions, onRetry, shouldRetry: isRetryableRuntimeDatabaseStartupError },\n    );\n    bus = await retryStartupDependency(\n      \"NATS\",\n      () =>\n        createNatsEventBus(\n          settings.natsUrl,\n          controlPlaneAuth\n            ? { user: controlPlaneAuth.user, pass: controlPlaneAuth.password }\n            : undefined,\n          observabilityEventBusOptions(observability),\n        ),\n      { ...retryOptions, onRetry },\n    );\n    await runOpenGeniWorker({\n      role,\n      terminateWorker: () => process.exit(1),\n      settings,\n      databasePosture,\n      http: { readinessDb: readinessDbClient.db },\n      activityDependencies: {\n        observability,\n        db: dbClient.db,\n        bus,\n      },\n    });\n  } finally {\n    await Promise.allSettled([bus?.close(), readinessDbClient.close(), dbClient.close()]);\n    disposeUnhandledRejectionBoundary();\n  }\n}\n\nif (import.meta.main) {\n  // `bun --watch` keeps its supervisor alive after the application consumes\n  // SIGINT. Once the worker, NATS, DB, and Temporal resources have all closed,\n  // explicitly terminate that supervisor too; otherwise a later file edit can\n  // resurrect this stopped process as a duplicate worker with stale env/code.\n  let interrupted = false;\n  const markInterrupted = () => {\n    interrupted = true;\n  };\n  process.once(\"SIGINT\", markInterrupted);\n  try {\n    await startWorker();\n  } finally {\n    process.off(\"SIGINT\", markInterrupted);\n    if (interrupted) process.exit(0);\n  }\n}\n","import {\n  ActivityCancellationType,\n  ActivityFailure,\n  ApplicationFailure,\n  proxyActivities,\n} from \"@temporalio/workflow\";\nimport type * as activities from \"../activities\";\nimport {\n  KNOWLEDGE_SOURCE_SYNC_ACTIVITY_HEARTBEAT_TIMEOUT_MS,\n  KNOWLEDGE_SOURCE_SYNC_ACTIVITY_MAXIMUM_ATTEMPTS,\n} from \"../knowledge-source-sync-activity-policy\";\n\ntype WorkflowControlActivities = Pick<\n  typeof activities,\n  | \"enqueueGoalRetryWake\"\n  | \"expireSessionHumanInput\"\n  | \"expireSessionInteractionIntervention\"\n  | \"expireScheduledRunHumanWait\"\n  | \"failSessionAttempt\"\n  | \"getCodexCapacityWait\"\n  | \"markSessionIdle\"\n  | \"peekSessionWork\"\n  | \"persistSessionAttemptQuiescence\"\n  | \"reconcileSessionAttemptQuiescence\"\n  | \"reconcileCodexCapacityWait\"\n  | \"recoverDispatch\"\n  | \"recoverEscapedMcpTimeout\"\n  | \"settleSessionInterruptions\"\n  | \"settleSessionInputWait\"\n>;\n\n/**\n * Session/schedule workflow control activities are bounded, idempotent database\n * and provider-metadata operations. They must not inherit the agent turn's\n * 30-day attempt: Temporal cannot otherwise detect that the pod which accepted\n * a non-heartbeating control activity disappeared, leaving the workflow pinned\n * to a dead worker for the full 30 days. A bounded attempt plus an unbounded\n * Temporal retry keeps the durable workflow alive across rollout, node loss, or\n * transient database/network failure; retries re-run on a healthy control pod.\n */\nexport const activity = proxyActivities<WorkflowControlActivities>({\n  startToCloseTimeout: \"2 minutes\",\n  retry: {\n    initialInterval: \"1 second\",\n    backoffCoefficient: 2,\n    maximumInterval: \"30 seconds\",\n  },\n});\n\n/** One schedule occurrence is bounded. Transient control-plane failures get a\n * short retry window, but a revoked binding or other permanent task error must\n * not leave a Temporal activity retrying forever; the next scheduled occurrence\n * is an independent workflow and will re-evaluate current state. */\nexport const scheduledTaskActivity = proxyActivities<\n  Pick<typeof activities, \"dispatchScheduledTaskRun\">\n>({\n  startToCloseTimeout: \"2 minutes\",\n  retry: {\n    initialInterval: \"1 second\",\n    backoffCoefficient: 2,\n    maximumInterval: \"30 seconds\",\n    maximumAttempts: 5,\n  },\n});\n\nexport const automationActivity = proxyActivities<Pick<typeof activities, \"dispatchAutomationRun\">>(\n  {\n    startToCloseTimeout: \"2 minutes\",\n    retry: {\n      initialInterval: \"1 second\",\n      backoffCoefficient: 2,\n      maximumInterval: \"30 seconds\",\n      maximumAttempts: 5,\n    },\n  },\n);\n\n/** Dispatch has a bounded retry window, but an accepted automation event must\n * not remain durably `dispatching` after that window closes. This compensating\n * database write is idempotent and retries without a cap until the run reaches\n * a terminal state (or is observed as already dispatched). */\nexport const automationFailureActivity = proxyActivities<\n  Pick<typeof activities, \"settleAutomationRunFailure\">\n>({\n  startToCloseTimeout: \"2 minutes\",\n  retry: {\n    initialInterval: \"1 second\",\n    backoffCoefficient: 2,\n    maximumInterval: \"30 seconds\",\n  },\n});\n\n/** Goal continuation evaluates a durable Postgres obligation at an idle\n * boundary. A transient failure gets a short retry window, then records an\n * explicit delayed outbox wake instead of relying on an unrelated mutation or\n * keeping workflow history alive with polling. */\nexport const goalActivity = proxyActivities<Pick<typeof activities, \"maybeContinueGoal\">>({\n  startToCloseTimeout: \"30 seconds\",\n  retry: {\n    initialInterval: \"1 second\",\n    backoffCoefficient: 2,\n    maximumInterval: \"5 seconds\",\n    maximumAttempts: 3,\n  },\n});\n\nexport function turnTaskQueue(baseTaskQueue: string): string {\n  return `${baseTaskQueue}-turns`;\n}\n\nexport function turnActivityForTaskQueue(baseTaskQueue: string, receiptGatedCancellation = true) {\n  return proxyActivities<Pick<typeof activities, \"runAgentTurn\">>({\n    taskQueue: turnTaskQueue(baseTaskQueue),\n    // Agent segments legitimately run for days. A started turn heartbeats;\n    // queued activities remain queued truthfully until a capped turn worker\n    // accepts them and performs the atomic claim.\n    startToCloseTimeout: \"30 days\",\n    heartbeatTimeout: \"2 minutes\",\n    // Pause/Steer first closes the exact attempt in Postgres, then asks\n    // Temporal to deliver cancellation. The workflow must not wait for the\n    // Temporal activity promise: a provider cleanup promise can outlive the\n    // fenced activity body, and Temporal terminalization is not proof that\n    // sandbox tools or processes are physically quiescent. The activity owns\n    // that proof and writes an exact receipt after its hard tool fence; the\n    // receipt transaction wakes the workflow to admit a replacement.\n    cancellationType: receiptGatedCancellation\n      ? ActivityCancellationType.TRY_CANCEL\n      : ActivityCancellationType.WAIT_CANCELLATION_COMPLETED,\n    retry: { maximumAttempts: 1 },\n  });\n}\n\nexport function videoGenerationActivityForTaskQueue(baseTaskQueue: string) {\n  return proxyActivities<Pick<typeof activities, \"reconcileVideoGenerationOperation\">>({\n    taskQueue: turnTaskQueue(baseTaskQueue),\n    startToCloseTimeout: \"20 minutes\",\n    retry: {\n      initialInterval: \"1 second\",\n      backoffCoefficient: 2,\n      maximumInterval: \"30 seconds\",\n      maximumAttempts: 3,\n    },\n  });\n}\n\nexport const documentActivity = proxyActivities<Pick<typeof activities, \"indexDocument\">>({\n  startToCloseTimeout: \"30 minutes\",\n  retry: { maximumAttempts: 1 },\n});\n\n/** Connector inventory/download/index batches are provider-I/O activities. The\n * implementation heartbeats between bounded items and owns its resumable\n * checkpoint; Temporal retries therefore repeat only idempotent source/object\n * operations and never invoke the agent runtime. */\nexport const knowledgeSourceSyncActivity = proxyActivities<\n  Pick<typeof activities, \"runKnowledgeSourceSyncBatch\">\n>({\n  startToCloseTimeout: \"1 hour\",\n  heartbeatTimeout: KNOWLEDGE_SOURCE_SYNC_ACTIVITY_HEARTBEAT_TIMEOUT_MS,\n  retry: {\n    initialInterval: \"2 seconds\",\n    backoffCoefficient: 2,\n    maximumInterval: \"1 minute\",\n    maximumAttempts: KNOWLEDGE_SOURCE_SYNC_ACTIVITY_MAXIMUM_ATTEMPTS,\n  },\n});\n\nexport function workflowFailureMessage(error: unknown): string {\n  if (\n    error instanceof ActivityFailure &&\n    error.activityType === \"runAgentTurn\" &&\n    error.cause instanceof ApplicationFailure &&\n    error.cause.type === \"TurnExecutionPolicyDefinitionMismatchError\"\n  ) {\n    return error.cause.message;\n  }\n  if (error instanceof Error) {\n    return error.message;\n  }\n  return String(error);\n}\n","export const KNOWLEDGE_SOURCE_SYNC_ACTIVITY_HEARTBEAT_TIMEOUT_MS = 120_000;\nexport const KNOWLEDGE_SOURCE_SYNC_ACTIVITY_MAXIMUM_ATTEMPTS = 1;\n","import type { Settings } from \"@opengeni/config\";\nimport {\n  assertRuntimeDatabasePosture,\n  dbSql,\n  type Database,\n  type RuntimeDatabasePostureOptions,\n} from \"@opengeni/db\";\nimport { requireSessionEventDurableFanoutCapability, type EventBus } from \"@opengeni/events\";\nimport { githubAppBotIdentityWarnings } from \"@opengeni/github\";\nimport type { Observability } from \"@opengeni/observability\";\n\nexport type ReadinessCheckName = \"db\" | \"nats\" | \"temporal\";\nexport type ReadinessChecks = Record<ReadinessCheckName, () => Promise<void> | void>;\n\nexport type ReadinessResult = {\n  ok: boolean;\n  state?: WorkerLifecycleState;\n  checks: Record<ReadinessCheckName, { ok: boolean; error?: string }>;\n};\n\nexport type WorkerLifecycleState = \"starting\" | \"ready\" | \"draining\" | \"stopped\" | \"failed\";\n\nexport type WorkerHttpLifecycle = {\n  role: \"control\" | \"turn\";\n  state: () => WorkerLifecycleState;\n};\n\nexport type WorkerHttpServerInput = {\n  settings: Settings;\n  observability: Observability;\n  checks: ReadinessChecks;\n  timeoutMs?: number;\n  lifecycle?: WorkerHttpLifecycle;\n};\n\nexport function createWorkerHttpHandler(\n  input: WorkerHttpServerInput,\n): (request: Request) => Promise<Response> {\n  const { settings, observability, checks, lifecycle } = input;\n  const timeoutMs = input.timeoutMs ?? 2_000;\n  return async (request) => {\n    const url = new URL(request.url);\n    if (request.method !== \"GET\") {\n      return Response.json({ error: \"method_not_allowed\" }, { status: 405 });\n    }\n    if (url.pathname === \"/healthz\") {\n      const state = lifecycle?.state();\n      const ok = state !== \"failed\" && state !== \"stopped\";\n      const warnings = githubAppBotIdentityWarnings(settings);\n      return Response.json(\n        {\n          service: settings.serviceName,\n          environment: settings.environment,\n          deploymentRevision: settings.deploymentRevision,\n          ...(lifecycle ? { role: lifecycle.role, state } : {}),\n          ...(warnings.length > 0 ? { warnings } : {}),\n          ok,\n        },\n        { status: ok ? 200 : 503 },\n      );\n    }\n    if (url.pathname === \"/metrics\") {\n      return new Response(await observability.prometheusMetrics(), {\n        status: 200,\n        headers: { \"content-type\": \"text/plain; version=0.0.4; charset=utf-8\" },\n      });\n    }\n    if (url.pathname === \"/readyz\") {\n      const state = lifecycle?.state();\n      const result =\n        state && state !== \"ready\"\n          ? {\n              ok: false,\n              state,\n              checks: Object.fromEntries(\n                (Object.keys(checks) as ReadinessCheckName[]).map((name) => [\n                  name,\n                  { ok: false, error: \"worker_not_ready\" },\n                ]),\n              ) as ReadinessResult[\"checks\"],\n            }\n          : { ...(await runReadinessChecks(checks, timeoutMs)), ...(state ? { state } : {}) };\n      return Response.json(result, { status: result.ok ? 200 : 503 });\n    }\n    return Response.json({ error: \"not_found\" }, { status: 404 });\n  };\n}\n\nexport function startWorkerHttpServer(input: WorkerHttpServerInput): ReturnType<typeof Bun.serve> {\n  return Bun.serve({\n    hostname: \"0.0.0.0\",\n    port: input.settings.workerHttpPort,\n    fetch: createWorkerHttpHandler(input),\n  });\n}\n\nexport async function runReadinessChecks(\n  checks: ReadinessChecks,\n  timeoutMs = 2_000,\n): Promise<ReadinessResult> {\n  const entries = await Promise.all(\n    (Object.entries(checks) as Array<[ReadinessCheckName, () => Promise<void> | void]>).map(\n      async ([name, check]) => {\n        try {\n          await withTimeout(Promise.resolve().then(check), timeoutMs);\n          return [name, { ok: true }] as const;\n        } catch {\n          return [name, { ok: false, error: \"dependency_unavailable\" }] as const;\n        }\n      },\n    ),\n  );\n  const result = Object.fromEntries(entries) as ReadinessResult[\"checks\"];\n  return {\n    ok: Object.values(result).every((check) => check.ok),\n    checks: result,\n  };\n}\n\nexport function dbReadyCheck(\n  db: Database,\n  posture?: RuntimeDatabasePostureOptions,\n  afterDatabaseReady?: () => Promise<void>,\n): () => Promise<void> {\n  let inFlight: Promise<void> | undefined;\n  return () => {\n    // The HTTP timeout cannot cancel a driver query. Reuse an outstanding\n    // attempt so repeated kubelet probes cannot queue an unbounded tail behind\n    // one slow or disconnected database connection.\n    if (inFlight) return inFlight;\n    inFlight = (async () => {\n      if (posture) {\n        await assertRuntimeDatabasePosture(db, posture);\n      } else {\n        await db.execute(dbSql`select 1`);\n      }\n      await afterDatabaseReady?.();\n    })().finally(() => {\n      inFlight = undefined;\n    });\n    return inFlight;\n  };\n}\n\nexport function natsReadyCheck(bus: EventBus): () => void {\n  return () => {\n    requireSessionEventDurableFanoutCapability(bus);\n    if (bus.isConnected && !bus.isConnected()) {\n      throw new Error(\"NATS is not connected\");\n    }\n  };\n}\n\nexport function temporalReadyCheck(\n  connection: Pick<\n    import(\"@temporalio/worker\").NativeConnection,\n    \"workflowService\" | \"withDeadline\"\n  >,\n): () => Promise<void> {\n  return async () => {\n    await connection.withDeadline(Date.now() + 2_000, () =>\n      connection.workflowService.getSystemInfo({}),\n    );\n  };\n}\n\nasync function withTimeout<T>(promise: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<never>((_, reject) => {\n        timer = setTimeout(\n          () => reject(new Error(`readiness check timed out after ${timeoutMs}ms`)),\n          timeoutMs,\n        );\n      }),\n    ]);\n  } finally {\n    if (timer) {\n      clearTimeout(timer);\n    }\n  }\n}\n","import type { Observability } from \"@opengeni/observability\";\nimport type { WorkerLifecycleState } from \"./http\";\n\nexport async function constructWithOwnedConnection<Connection, Result>(\n  connect: () => Promise<Connection>,\n  construct: (connection: Connection) => Promise<Result>,\n  close: (connection: Connection) => Promise<void>,\n): Promise<Result> {\n  const connection = await connect();\n  try {\n    return await construct(connection);\n  } catch (error) {\n    await close(connection).catch(() => undefined);\n    throw error;\n  }\n}\n\nexport type WorkerRunTarget = {\n  run(): Promise<void>;\n  shutdown(): void;\n};\n\n/** One process may poll several disjoint Temporal queues, but it still has one\n * host lifecycle. Start and stop every poller as a unit; a failed poller drains\n * its siblings and preserves the original failure. */\nexport function combineWorkerRunTargets(targets: readonly WorkerRunTarget[]): WorkerRunTarget {\n  if (targets.length === 0) {\n    throw new Error(\"a worker service requires at least one Temporal poller\");\n  }\n  let runPromise: Promise<void> | undefined;\n  const shutdown = (): void => {\n    let firstError: unknown;\n    for (const target of targets) {\n      try {\n        target.shutdown();\n      } catch (error) {\n        firstError ??= error;\n      }\n    }\n    if (firstError !== undefined) throw firstError;\n  };\n  return {\n    run: () => {\n      runPromise ??= (async () => {\n        const runs = targets.map((target) => {\n          try {\n            return target.run();\n          } catch (error) {\n            return Promise.reject(error);\n          }\n        });\n        try {\n          await Promise.all(runs);\n        } catch (error) {\n          try {\n            shutdown();\n          } catch {\n            // Preserve the poller failure. Every sibling still received its\n            // shutdown request even when one request itself failed.\n          }\n          await Promise.allSettled(runs);\n          throw error;\n        }\n      })();\n      return runPromise;\n    },\n    shutdown,\n  };\n}\n\nexport type WorkerServiceLifecycle = {\n  state(): WorkerLifecycleState;\n  run(): Promise<void>;\n  drain(reason?: string): boolean;\n  close(): Promise<void>;\n};\n\nexport function createWorkerServiceLifecycle(input: {\n  role: \"control\" | \"turn\";\n  worker: WorkerRunTarget;\n  observability: Observability;\n  closeOwnedResources: () => Promise<void>;\n  onReady?: () => void;\n}): WorkerServiceLifecycle {\n  let state: WorkerLifecycleState = \"starting\";\n  let runPromise: Promise<void> | undefined;\n  let resourcesClosed: Promise<void> | undefined;\n  const closeOwnedResources = () => {\n    resourcesClosed ??= input.closeOwnedResources();\n    return resourcesClosed;\n  };\n\n  const lifecycle: WorkerServiceLifecycle = {\n    state: () => state,\n    run: () => {\n      if (!runPromise && state === \"draining\") {\n        runPromise = (async () => {\n          state = \"stopped\";\n          await closeOwnedResources();\n        })();\n        return runPromise;\n      }\n      if (!runPromise && (state === \"stopped\" || state === \"failed\")) {\n        return Promise.reject(new Error(`cannot run a worker service that is ${state}`));\n      }\n      runPromise ??= (async () => {\n        if (state === \"starting\") {\n          state = \"ready\";\n        }\n        input.onReady?.();\n        try {\n          await input.worker.run();\n          state = \"stopped\";\n        } catch (error) {\n          state = \"failed\";\n          throw error;\n        } finally {\n          await closeOwnedResources();\n        }\n      })();\n      return runPromise;\n    },\n    drain: (_reason = \"host request\") => {\n      if (state === \"draining\" || state === \"stopped\" || state === \"failed\") {\n        return true;\n      }\n      const previousState = state;\n      safeLifecycleLog(() =>\n        input.observability.info(\"OpenGeni worker draining (graceful shutdown)\", {\n          role: input.role,\n          errorClass: \"WorkerLifecycleOperation\",\n          errorCode: \"worker_draining\",\n          origin: \"worker-lifecycle\",\n        }),\n      );\n      state = \"draining\";\n      try {\n        input.worker.shutdown();\n        return true;\n      } catch {\n        state = previousState;\n        safeLifecycleLog(() =>\n          input.observability.warn(\"worker shutdown request failed\", {\n            errorClass: \"WorkerLifecycleOperationError\",\n            errorCode: \"worker_shutdown_request_failed\",\n            origin: \"worker-lifecycle\",\n          }),\n        );\n        return false;\n      }\n    },\n    close: async () => {\n      if (!lifecycle.drain(\"service close\")) {\n        throw new Error(\"worker shutdown request failed\");\n      }\n      if (runPromise) {\n        await runPromise.catch(() => undefined);\n      } else {\n        state = \"stopped\";\n        await closeOwnedResources();\n      }\n    },\n  };\n\n  return lifecycle;\n}\n\nfunction safeLifecycleLog(log: () => void): void {\n  try {\n    log();\n  } catch {\n    // Telemetry cannot change worker lifecycle state or shutdown delivery.\n  }\n}\n\n/** A cleanup stall first drains peers through WORKER_SHUTDOWN. The standalone\n * process owns the final exit, because Temporal cannot kill JavaScript writers.\n * Embedded hosts may supply their own termination policy at this same edge. */\nexport function createWorkerCleanupContainment(input: {\n  drain: () => boolean;\n  terminate?: () => void;\n  observability: Observability;\n  timeoutMs?: number;\n}) {\n  let requested = false;\n  let finished = false;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  return {\n    request() {\n      if (requested || finished) return;\n      requested = true;\n      if (input.terminate) {\n        timer = setTimeout(() => {\n          safeLifecycleLog(() =>\n            input.observability.error(\"worker cleanup drain exhausted; terminating host\", {\n              errorClass: \"WorkerLifecycleOperationError\",\n              errorCode: \"worker_cleanup_drain_exhausted\",\n              origin: \"worker-lifecycle\",\n            }),\n          );\n          input.terminate?.();\n        }, input.timeoutMs ?? 100_000);\n        timer.unref?.();\n      }\n      let accepted = false;\n      try {\n        accepted = input.drain();\n      } catch {\n        /* The host backstop remains armed. */\n      }\n      if (!accepted)\n        safeLifecycleLog(() =>\n          input.observability.error(\"worker cleanup drain request failed\", {\n            errorClass: \"WorkerLifecycleOperationError\",\n            errorCode: \"worker_shutdown_request_failed\",\n            origin: \"worker-lifecycle\",\n          }),\n        );\n    },\n    finished() {\n      // Call only after Worker.run resolves. ForceShutdownError does not prove\n      // its activity promises stopped, so rejection must retain the backstop.\n      finished = true;\n      clearTimeout(timer);\n    },\n  };\n}\n","import { readFileSync } from \"node:fs\";\nimport { freemem, totalmem } from \"node:os\";\nimport { posix } from \"node:path\";\nimport type { Settings } from \"@opengeni/config\";\nimport type { Observability } from \"@opengeni/observability\";\n\nexport type TurnWorkerMemoryScope = \"host\" | \"cgroup\";\n\nexport type TurnWorkerMemoryScopeSnapshot = {\n  scope: TurnWorkerMemoryScope;\n  usedBytes: number;\n  limitBytes: number;\n};\n\nexport type TurnWorkerMemoryPressureSnapshot = {\n  processRssBytes: number;\n  processHeapUsedBytes: number;\n  processExternalBytes: number;\n  processArrayBuffersBytes: number;\n  scopes: TurnWorkerMemoryScopeSnapshot[];\n};\n\nexport type TurnWorkerMemoryPressureGuard = {\n  sampleNow(): void;\n  close(): void;\n};\n\ntype GuardSettings = Pick<\n  Settings,\n  | \"turnWorkerConcurrencyMode\"\n  | \"turnWorkerTargetMemoryUsage\"\n  | \"turnWorkerEmergencyMemoryUsage\"\n  | \"turnWorkerMemoryGuardIntervalMs\"\n  | \"turnWorkerMemoryGuardSustainMs\"\n>;\n\ntype GuardDependencies = {\n  now?: () => number;\n  sample?: () => TurnWorkerMemoryPressureSnapshot;\n  setInterval?: typeof setInterval;\n  clearInterval?: typeof clearInterval;\n  gc?: () => void;\n};\n\ntype SnapshotDependencies = {\n  readText?: (path: string) => string | null;\n  hostTotalBytes?: () => number;\n  hostAvailableBytes?: () => number;\n  processMemoryUsage?: () => Pick<\n    NodeJS.MemoryUsage,\n    \"rss\" | \"heapUsed\" | \"external\" | \"arrayBuffers\"\n  >;\n};\n\nexport type ProcessCgroupMembership = {\n  v2Path: string | null;\n  v1MemoryPath: string | null;\n};\n\nexport type CgroupMemoryFilePair = {\n  currentPath: string;\n  maxPath: string;\n};\n\nconst CGROUP_V2_MOUNT = \"/sys/fs/cgroup\";\nconst CGROUP_V1_MEMORY_MOUNT = \"/sys/fs/cgroup/memory\";\n\nexport function parseLinuxMeminfo(\n  value: string,\n): { totalBytes: number; availableBytes: number } | null {\n  const fields = new Map<string, number>();\n  for (const line of value.split(\"\\n\")) {\n    const match = /^([A-Za-z_()]+):\\s+(\\d+)\\s+kB$/.exec(line.trim());\n    if (!match) continue;\n    fields.set(match[1] as string, Number(match[2]) * 1024);\n  }\n  const totalBytes = fields.get(\"MemTotal\");\n  const availableBytes = fields.get(\"MemAvailable\");\n  if (\n    totalBytes === undefined ||\n    availableBytes === undefined ||\n    !Number.isFinite(totalBytes) ||\n    !Number.isFinite(availableBytes) ||\n    totalBytes <= 0 ||\n    availableBytes < 0\n  ) {\n    return null;\n  }\n  return { totalBytes, availableBytes: Math.min(totalBytes, availableBytes) };\n}\n\nexport function parseFiniteCgroupMemoryLimit(value: string): number | null {\n  const trimmed = value.trim();\n  if (!trimmed || trimmed === \"max\") return null;\n  const parsed = Number(trimmed);\n  // cgroup v1 represents \"unlimited\" with a near-int64 sentinel. Treat only\n  // realistic finite limits as authority; host headroom remains the fallback.\n  if (!Number.isSafeInteger(parsed) || parsed <= 0 || parsed >= 2 ** 60) return null;\n  return parsed;\n}\n\nexport function parseProcessCgroupMembership(value: string): ProcessCgroupMembership {\n  let v2Path: string | null = null;\n  let v1MemoryPath: string | null = null;\n  for (const line of value.split(\"\\n\")) {\n    const firstSeparator = line.indexOf(\":\");\n    const secondSeparator = line.indexOf(\":\", firstSeparator + 1);\n    if (firstSeparator <= 0 || secondSeparator < 0) continue;\n    const hierarchyId = line.slice(0, firstSeparator);\n    const controllers = line.slice(firstSeparator + 1, secondSeparator);\n    const path = normalizeCgroupPath(line.slice(secondSeparator + 1));\n    if (!path) continue;\n    if (hierarchyId === \"0\" && controllers === \"\") {\n      v2Path = path;\n    }\n    if (controllers.split(\",\").includes(\"memory\")) {\n      v1MemoryPath = path;\n    }\n  }\n  return { v2Path, v1MemoryPath };\n}\n\nexport function cgroupMemoryFilePairs(membership: ProcessCgroupMembership): CgroupMemoryFilePair[] {\n  const pairs: CgroupMemoryFilePair[] = [];\n  const seen = new Set<string>();\n  const appendHierarchy = (\n    mount: string,\n    path: string | null,\n    currentFilename: string,\n    maxFilename: string,\n  ) => {\n    for (const candidate of cgroupAncestorPaths(path ?? \"/\")) {\n      const relative = candidate === \"/\" ? \"\" : candidate.slice(1);\n      const currentPath = posix.join(mount, relative, currentFilename);\n      const maxPath = posix.join(mount, relative, maxFilename);\n      const key = `${currentPath}\\0${maxPath}`;\n      if (seen.has(key)) continue;\n      seen.add(key);\n      pairs.push({ currentPath, maxPath });\n    }\n  };\n\n  appendHierarchy(CGROUP_V2_MOUNT, membership.v2Path, \"memory.current\", \"memory.max\");\n  appendHierarchy(\n    CGROUP_V1_MEMORY_MOUNT,\n    membership.v1MemoryPath,\n    \"memory.usage_in_bytes\",\n    \"memory.limit_in_bytes\",\n  );\n  return pairs;\n}\n\nexport function readTurnWorkerMemoryPressureSnapshot(\n  dependencies: SnapshotDependencies = {},\n): TurnWorkerMemoryPressureSnapshot {\n  const readText = dependencies.readText ?? readTextOrNull;\n  const linux = parseLinuxMeminfo(readText(\"/proc/meminfo\") ?? \"\");\n  const hostTotalBytes = linux?.totalBytes ?? (dependencies.hostTotalBytes ?? totalmem)();\n  const hostAvailableBytes =\n    linux?.availableBytes ?? (dependencies.hostAvailableBytes ?? freemem)();\n  const host = {\n    scope: \"host\" as const,\n    usedBytes: Math.max(0, hostTotalBytes - Math.min(hostTotalBytes, hostAvailableBytes)),\n    limitBytes: hostTotalBytes,\n  };\n  const cgroup = readCgroupMemoryScope(readText);\n  // A finite process cgroup is the pod's actual admission boundary. Host\n  // pressure includes unrelated workloads and must not make every replica\n  // drain simultaneously; use it only when no finite cgroup authority exists.\n  const processMemory = (dependencies.processMemoryUsage ?? process.memoryUsage)();\n\n  return {\n    processRssBytes: processMemory.rss,\n    processHeapUsedBytes: processMemory.heapUsed,\n    processExternalBytes: processMemory.external,\n    processArrayBuffersBytes: processMemory.arrayBuffers,\n    scopes: [cgroup ?? host],\n  };\n}\n\nexport function turnWorkerMemoryPressureGuardEnabled(\n  role: \"control\" | \"turn\",\n  settings: Pick<Settings, \"turnWorkerConcurrencyMode\">,\n): boolean {\n  return role === \"turn\" && settings.turnWorkerConcurrencyMode === \"resource-based\";\n}\n\nexport function createTurnWorkerMemoryPressureGuard(input: {\n  settings: GuardSettings;\n  observability: Observability;\n  drain: () => void;\n  dependencies?: GuardDependencies;\n}): TurnWorkerMemoryPressureGuard {\n  const now = input.dependencies?.now ?? Date.now;\n  const sample = input.dependencies?.sample ?? readTurnWorkerMemoryPressureSnapshot;\n  const schedule = input.dependencies?.setInterval ?? setInterval;\n  const cancel = input.dependencies?.clearInterval ?? clearInterval;\n  const collectGarbage = input.dependencies?.gc ?? (() => Bun.gc(false));\n  const breachStartedAt = new Map<TurnWorkerMemoryScope, number>();\n  let lastGcAt = Number.NEGATIVE_INFINITY;\n  let drainRequested = false;\n  let closed = false;\n\n  const sampleNow = () => {\n    if (closed) return;\n    const observedAt = now();\n    let snapshot: TurnWorkerMemoryPressureSnapshot;\n    try {\n      snapshot = sample();\n    } catch {\n      breachStartedAt.clear();\n      safeIncrementCounter(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_sample_failures_total\",\n        help: \"Turn-worker memory pressure guard samples that could not be read.\",\n      });\n      return;\n    }\n\n    const validScopes = snapshot.scopes.filter(\n      ({ usedBytes, limitBytes }) =>\n        Number.isFinite(usedBytes) &&\n        Number.isFinite(limitBytes) &&\n        usedBytes >= 0 &&\n        limitBytes > 0,\n    );\n    if (validScopes.length === 0) {\n      breachStartedAt.clear();\n      safeIncrementCounter(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_sample_failures_total\",\n        help: \"Turn-worker memory pressure guard samples that could not be read.\",\n      });\n      return;\n    }\n\n    const sustainedBreaches: Array<{\n      scope: TurnWorkerMemoryScope;\n      utilizationRatio: number;\n      breachSeconds: number;\n    }> = [];\n    for (const [kind, value] of [\n      [\"rss\", snapshot.processRssBytes],\n      [\"heap_used\", snapshot.processHeapUsedBytes],\n      [\"external\", snapshot.processExternalBytes],\n      [\"array_buffers\", snapshot.processArrayBuffersBytes],\n    ] as const) {\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_process_memory_bytes\",\n        help: \"Turn-worker process memory by runtime-reported category.\",\n        labels: { kind },\n        value: Number.isFinite(value) && value >= 0 ? value : 0,\n      });\n    }\n    let shouldCollectGarbage = false;\n    for (const scope of validScopes) {\n      const utilizationRatio = scope.usedBytes / scope.limitBytes;\n      const processRssRatio = snapshot.processRssBytes / scope.limitBytes;\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_utilization_ratio\",\n        help: \"Observed memory utilization ratio used by the turn-worker pressure guard.\",\n        labels: { scope: scope.scope },\n        value: utilizationRatio,\n      });\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_target_ratio\",\n        help: \"Memory admission target enforced by the Temporal resource tuner.\",\n        labels: { scope: scope.scope },\n        value: input.settings.turnWorkerTargetMemoryUsage,\n      });\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_emergency_ratio\",\n        help: \"Emergency memory threshold enforced by the turn-worker pressure guard.\",\n        labels: { scope: scope.scope },\n        value: input.settings.turnWorkerEmergencyMemoryUsage,\n      });\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_available_bytes\",\n        help: \"Memory headroom remaining in the turn-worker pressure guard scope.\",\n        labels: { scope: scope.scope },\n        value: Math.max(0, scope.limitBytes - scope.usedBytes),\n      });\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_process_rss_ratio\",\n        help: \"Turn-worker RSS as a ratio of the observed host or finite cgroup memory scope.\",\n        labels: { scope: scope.scope },\n        value: processRssRatio,\n      });\n      shouldCollectGarbage ||= processRssRatio >= input.settings.turnWorkerTargetMemoryUsage;\n\n      if (utilizationRatio < input.settings.turnWorkerEmergencyMemoryUsage) {\n        breachStartedAt.delete(scope.scope);\n        safeSetGauge(input.observability, {\n          name: \"opengeni_turn_worker_memory_guard_breach_seconds\",\n          help: \"Seconds the turn-worker emergency threshold has remained continuously breached.\",\n          labels: { scope: scope.scope },\n          value: 0,\n        });\n        continue;\n      }\n\n      const startedAt = breachStartedAt.get(scope.scope) ?? observedAt;\n      breachStartedAt.set(scope.scope, startedAt);\n      const breachMs = Math.max(0, observedAt - startedAt);\n      const breachSeconds = breachMs / 1_000;\n      safeSetGauge(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_breach_seconds\",\n        help: \"Seconds the turn-worker emergency threshold has remained continuously breached.\",\n        labels: { scope: scope.scope },\n        value: breachSeconds,\n      });\n      if (breachMs >= input.settings.turnWorkerMemoryGuardSustainMs) {\n        sustainedBreaches.push({ scope: scope.scope, utilizationRatio, breachSeconds });\n      }\n    }\n\n    // Large request buffers can become unreachable well before JSC's ordinary\n    // heap trigger notices native/external pressure. Nudge an asynchronous GC\n    // at most once per sustain window before escalating to a worker drain.\n    const sustainedBreachesHadGcOpportunity =\n      sustainedBreaches.length > 0 &&\n      sustainedBreaches.every(({ scope }) => {\n        const breachStarted = breachStartedAt.get(scope);\n        return breachStarted !== undefined && lastGcAt >= breachStarted && lastGcAt < observedAt;\n      });\n    let collectedGarbageThisSample = false;\n    if (\n      shouldCollectGarbage &&\n      observedAt - lastGcAt >= input.settings.turnWorkerMemoryGuardSustainMs &&\n      (sustainedBreaches.length === 0 || !sustainedBreachesHadGcOpportunity)\n    ) {\n      lastGcAt = observedAt;\n      try {\n        collectGarbage();\n        collectedGarbageThisSample = true;\n        safeIncrementCounter(input.observability, {\n          name: \"opengeni_turn_worker_memory_guard_gc_total\",\n          help: \"Proactive garbage-collection nudges under process memory pressure.\",\n        });\n      } catch {\n        safeIncrementCounter(input.observability, {\n          name: \"opengeni_turn_worker_memory_guard_gc_failures_total\",\n          help: \"Proactive memory-pressure garbage-collection nudges that failed.\",\n        });\n      }\n    }\n\n    // The nudge is asynchronous. Give it one sampling interval to make the\n    // reclaimed RSS visible before deciding that process recycling is needed.\n    if (\n      (collectedGarbageThisSample && !sustainedBreachesHadGcOpportunity) ||\n      drainRequested ||\n      sustainedBreaches.length === 0\n    ) {\n      return;\n    }\n\n    const primaryBreach = sustainedBreaches.sort(\n      (left, right) => right.utilizationRatio - left.utilizationRatio,\n    )[0];\n    if (!primaryBreach) return;\n\n    drainRequested = true;\n    safeIncrementCounter(input.observability, {\n      name: \"opengeni_turn_worker_memory_guard_drains_total\",\n      help: \"Graceful turn-worker drains requested after sustained memory pressure.\",\n      labels: { scope: primaryBreach.scope },\n    });\n    safeWarn(input.observability, \"turn worker memory guard requested graceful drain\", {\n      errorClass: \"WorkerLifecycleOperation\",\n      errorCode: \"worker_draining\",\n      origin: \"worker-lifecycle\",\n      reason: `memory pressure (${primaryBreach.scope}, ${boundedRatio(primaryBreach.utilizationRatio)} >= ${input.settings.turnWorkerEmergencyMemoryUsage}, ${primaryBreach.breachSeconds}s)`,\n    });\n    try {\n      input.drain();\n    } catch {\n      drainRequested = false;\n      safeIncrementCounter(input.observability, {\n        name: \"opengeni_turn_worker_memory_guard_drain_failures_total\",\n        help: \"Turn-worker memory pressure guard drain requests that failed synchronously.\",\n        labels: { scope: primaryBreach.scope },\n      });\n      safeWarn(input.observability, \"turn worker memory guard drain request failed\", {\n        errorClass: \"WorkerLifecycleOperationError\",\n        errorCode: \"worker_shutdown_request_failed\",\n        origin: \"worker-lifecycle\",\n      });\n    }\n  };\n\n  const timer = schedule(sampleNow, input.settings.turnWorkerMemoryGuardIntervalMs);\n  timer.unref?.();\n  sampleNow();\n\n  return {\n    sampleNow,\n    close: () => {\n      if (closed) return;\n      closed = true;\n      cancel(timer);\n    },\n  };\n}\n\nfunction readCgroupMemoryScope(\n  readText: (path: string) => string | null,\n): TurnWorkerMemoryScopeSnapshot | null {\n  const membership = parseProcessCgroupMembership(readText(\"/proc/self/cgroup\") ?? \"\");\n  let mostPressured: TurnWorkerMemoryScopeSnapshot | null = null;\n  for (const { currentPath, maxPath } of cgroupMemoryFilePairs(membership)) {\n    const currentRaw = readText(currentPath);\n    const maxRaw = readText(maxPath);\n    if (currentRaw === null || maxRaw === null) continue;\n    const current = Number(currentRaw.trim());\n    const limit = parseFiniteCgroupMemoryLimit(maxRaw);\n    if (!Number.isFinite(current) || current < 0 || limit === null) continue;\n    const candidate = { scope: \"cgroup\" as const, usedBytes: current, limitBytes: limit };\n    if (\n      !mostPressured ||\n      candidate.usedBytes / candidate.limitBytes >\n        mostPressured.usedBytes / mostPressured.limitBytes\n    ) {\n      mostPressured = candidate;\n    }\n  }\n  return mostPressured;\n}\n\nfunction readTextOrNull(path: string): string | null {\n  try {\n    return readFileSync(path, \"utf8\");\n  } catch {\n    return null;\n  }\n}\n\nfunction boundedRatio(value: number): number {\n  return Math.round(Math.max(0, Math.min(value, 10)) * 1_000_000) / 1_000_000;\n}\n\nfunction normalizeCgroupPath(value: string): string | null {\n  const trimmed = value.trim();\n  if (!trimmed.startsWith(\"/\") || trimmed.includes(\"\\0\")) return null;\n  if (trimmed.split(\"/\").includes(\"..\")) return null;\n  return posix.normalize(trimmed);\n}\n\nfunction cgroupAncestorPaths(path: string): string[] {\n  const ancestors: string[] = [];\n  let current = path;\n  while (true) {\n    ancestors.push(current);\n    if (current === \"/\") return ancestors;\n    current = posix.dirname(current);\n  }\n}\n\nfunction safeSetGauge(\n  observability: Observability,\n  input: Parameters<Observability[\"setGauge\"]>[0],\n): void {\n  try {\n    observability.setGauge(input);\n  } catch {\n    // Telemetry cannot disable the memory-safety action.\n  }\n}\n\nfunction safeIncrementCounter(\n  observability: Observability,\n  input: Parameters<Observability[\"incrementCounter\"]>[0],\n): void {\n  try {\n    observability.incrementCounter(input);\n  } catch {\n    // Telemetry cannot disable the memory-safety action.\n  }\n}\n\nfunction safeWarn(\n  observability: Observability,\n  message: string,\n  attributes: Parameters<Observability[\"warn\"]>[1],\n): void {\n  try {\n    observability.warn(message, attributes);\n  } catch {\n    // Telemetry cannot disable the memory-safety action.\n  }\n}\n","export type WorkerUnhandledRejectionProcess = {\n  on: (event: \"unhandledRejection\", listener: (reason: unknown) => void) => void;\n  off: (event: \"unhandledRejection\", listener: (reason: unknown) => void) => void;\n};\n\nexport type WorkerUnhandledRejectionClassification =\n  | \"detached_runtime_mcp_lifecycle\"\n  | \"detached_unknown\";\n\ntype RuntimeMcpLifecycleError = {\n  name: \"McpLifecycleError\";\n  code: \"mcp_connect_failed\" | \"mcp_close_failed\";\n  origin: \"runtime\";\n  serverId: string;\n};\n\n/**\n * The Agents SDK owns MCP connect promises and also installs a process-global\n * unhandled-rejection listener. A best-effort lifecycle rejection can surface\n * twice under concurrent teardown: once through the awaited MCP result and once\n * through the SDK's detached worker promise. The first path already records and\n * degrades the server; the second must not terminate the whole turn-worker pod.\n */\nexport function isDetachedRuntimeMcpLifecycleRejection(\n  reason: unknown,\n): reason is RuntimeMcpLifecycleError {\n  try {\n    if (!reason || typeof reason !== \"object\") return false;\n    const candidate = reason as Partial<RuntimeMcpLifecycleError>;\n    return (\n      candidate.name === \"McpLifecycleError\" &&\n      (candidate.code === \"mcp_connect_failed\" || candidate.code === \"mcp_close_failed\") &&\n      candidate.origin === \"runtime\" &&\n      typeof candidate.serverId === \"string\" &&\n      candidate.serverId.length > 0\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction reportIsolatedUnhandledRejection(\n  classification: WorkerUnhandledRejectionClassification,\n): void {\n  // Never render the rejection itself: provider and transport errors can carry\n  // request bodies or credentials. The durable activity path owns exact errors.\n  console.error(\"[worker] isolated detached unhandled rejection\", { classification });\n}\n\n/**\n * Keep process-global promise rejection handling observational. Turn activities\n * have their own durable failure/lease boundary; killing the shared worker here\n * converts one detached SDK/transport promise into unrelated lease losses across\n * every session assigned to the pod. The Agents SDK also checks for a consumer\n * listener before applying its own process.exit(1), so this boundary must never\n * reintroduce that fail-fast behavior for an unknown rejection shape.\n */\nexport function installWorkerUnhandledRejectionBoundary(\n  runtimeProcess: WorkerUnhandledRejectionProcess = process,\n  report: (\n    classification: WorkerUnhandledRejectionClassification,\n  ) => void = reportIsolatedUnhandledRejection,\n): () => void {\n  const onUnhandledRejection = (reason: unknown): void => {\n    report(\n      isDetachedRuntimeMcpLifecycleRejection(reason)\n        ? \"detached_runtime_mcp_lifecycle\"\n        : \"detached_unknown\",\n    );\n  };\n  runtimeProcess.on(\"unhandledRejection\", onUnhandledRejection);\n  return () => runtimeProcess.off(\"unhandledRejection\", onUnhandledRejection);\n}\n","export const BROWSER_DEADLINE_CHECKPOINT_SWEEP_ID = \"opengeni-browser-deadline-checkpoints-v1\";\nconst QUEUE_SUFFIX = \"-browser-checkpoint-v1\";\nexport function browserDeadlineCheckpointTaskQueue(base: string): string {\n  return base.endsWith(QUEUE_SUFFIX) ? base : `${base}${QUEUE_SUFFIX}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE,gCAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA,8CAAAC;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,OACK;AACP,SAAS,kBAAkB,cAAyC;AACpE,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;;;ACvC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACLA,IAAM,sDAAsD;AAC5D,IAAM,kDAAkD;;;ADuCxD,IAAM,WAAW,gBAA2C;AAAA,EACjE,qBAAqB;AAAA,EACrB,OAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AACF,CAAC;AAMM,IAAM,wBAAwB,gBAEnC;AAAA,EACA,qBAAqB;AAAA,EACrB,OAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AACF,CAAC;AAEM,IAAM,qBAAqB;AAAA,EAChC;AAAA,IACE,qBAAqB;AAAA,IACrB,OAAO;AAAA,MACL,iBAAiB;AAAA,MACjB,oBAAoB;AAAA,MACpB,iBAAiB;AAAA,MACjB,iBAAiB;AAAA,IACnB;AAAA,EACF;AACF;AAMO,IAAM,4BAA4B,gBAEvC;AAAA,EACA,qBAAqB;AAAA,EACrB,OAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AACF,CAAC;AAMM,IAAM,eAAe,gBAA8D;AAAA,EACxF,qBAAqB;AAAA,EACrB,OAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AACF,CAAC;AAEM,SAAS,cAAc,eAA+B;AAC3D,SAAO,GAAG,aAAa;AACzB;AAqCO,IAAM,mBAAmB,gBAA0D;AAAA,EACxF,qBAAqB;AAAA,EACrB,OAAO,EAAE,iBAAiB,EAAE;AAC9B,CAAC;AAMM,IAAM,8BAA8B,gBAEzC;AAAA,EACA,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,OAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AACF,CAAC;;;AEpKD;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,kDAAiE;AAC1E,SAAS,oCAAoC;AA2BtC,SAAS,wBACd,OACyC;AACzC,QAAM,EAAE,UAAU,eAAe,QAAQ,UAAU,IAAI;AACvD,QAAM,YAAY,MAAM,aAAa;AACrC,SAAO,OAAO,YAAY;AACxB,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAI,QAAQ,WAAW,OAAO;AAC5B,aAAO,SAAS,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvE;AACA,QAAI,IAAI,aAAa,YAAY;AAC/B,YAAM,QAAQ,WAAW,MAAM;AAC/B,YAAM,KAAK,UAAU,YAAY,UAAU;AAC3C,YAAM,WAAW,6BAA6B,QAAQ;AACtD,aAAO,SAAS;AAAA,QACd;AAAA,UACE,SAAS,SAAS;AAAA,UAClB,aAAa,SAAS;AAAA,UACtB,oBAAoB,SAAS;AAAA,UAC7B,GAAI,YAAY,EAAE,MAAM,UAAU,MAAM,MAAM,IAAI,CAAC;AAAA,UACnD,GAAI,SAAS,SAAS,IAAI,EAAE,SAAS,IAAI,CAAC;AAAA,UAC1C;AAAA,QACF;AAAA,QACA,EAAE,QAAQ,KAAK,MAAM,IAAI;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,IAAI,aAAa,YAAY;AAC/B,aAAO,IAAI,SAAS,MAAM,cAAc,kBAAkB,GAAG;AAAA,QAC3D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,2CAA2C;AAAA,MACxE,CAAC;AAAA,IACH;AACA,QAAI,IAAI,aAAa,WAAW;AAC9B,YAAM,QAAQ,WAAW,MAAM;AAC/B,YAAM,SACJ,SAAS,UAAU,UACf;AAAA,QACE,IAAI;AAAA,QACJ;AAAA,QACA,QAAQ,OAAO;AAAA,UACZ,OAAO,KAAK,MAAM,EAA2B,IAAI,CAAC,SAAS;AAAA,YAC1D;AAAA,YACA,EAAE,IAAI,OAAO,OAAO,mBAAmB;AAAA,UACzC,CAAC;AAAA,QACH;AAAA,MACF,IACA,EAAE,GAAI,MAAM,mBAAmB,QAAQ,SAAS,GAAI,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AACtF,aAAO,SAAS,KAAK,QAAQ,EAAE,QAAQ,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,IAChE;AACA,WAAO,SAAS,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,SAAS,sBAAsB,OAA4D;AAChG,SAAO,IAAI,MAAM;AAAA,IACf,UAAU;AAAA,IACV,MAAM,MAAM,SAAS;AAAA,IACrB,OAAO,wBAAwB,KAAK;AAAA,EACtC,CAAC;AACH;AAEA,eAAsB,mBACpB,QACA,YAAY,KACc;AAC1B,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC3B,OAAO,QAAQ,MAAM,EAA8D;AAAA,MAClF,OAAO,CAAC,MAAM,KAAK,MAAM;AACvB,YAAI;AACF,gBAAM,YAAY,QAAQ,QAAQ,EAAE,KAAK,KAAK,GAAG,SAAS;AAC1D,iBAAO,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC;AAAA,QAC5B,QAAQ;AACN,iBAAO,CAAC,MAAM,EAAE,IAAI,OAAO,OAAO,yBAAyB,CAAC;AAAA,QAC9D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,OAAO,YAAY,OAAO;AACzC,SAAO;AAAA,IACL,IAAI,OAAO,OAAO,MAAM,EAAE,MAAM,CAAC,UAAU,MAAM,EAAE;AAAA,IACnD,QAAQ;AAAA,EACV;AACF;AAEO,SAAS,aACd,IACA,SACA,oBACqB;AACrB,MAAI;AACJ,SAAO,MAAM;AAIX,QAAI,SAAU,QAAO;AACrB,gBAAY,YAAY;AACtB,UAAI,SAAS;AACX,cAAM,6BAA6B,IAAI,OAAO;AAAA,MAChD,OAAO;AACL,cAAM,GAAG,QAAQ,eAAe;AAAA,MAClC;AACA,YAAM,qBAAqB;AAAA,IAC7B,GAAG,EAAE,QAAQ,MAAM;AACjB,iBAAW;AAAA,IACb,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEO,SAAS,eAAe,KAA2B;AACxD,SAAO,MAAM;AACX,+CAA2C,GAAG;AAC9C,QAAI,IAAI,eAAe,CAAC,IAAI,YAAY,GAAG;AACzC,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAAA,EACF;AACF;AAEO,SAAS,mBACd,YAIqB;AACrB,SAAO,YAAY;AACjB,UAAM,WAAW;AAAA,MAAa,KAAK,IAAI,IAAI;AAAA,MAAO,MAChD,WAAW,gBAAgB,cAAc,CAAC,CAAC;AAAA,IAC7C;AAAA,EACF;AACF;AAEA,eAAe,YAAe,SAAqB,WAA+B;AAChF,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK;AAAA,MACxB;AAAA,MACA,IAAI,QAAe,CAAC,GAAG,WAAW;AAChC,gBAAQ;AAAA,UACN,MAAM,OAAO,IAAI,MAAM,mCAAmC,SAAS,IAAI,CAAC;AAAA,UACxE;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH,UAAE;AACA,QAAI,OAAO;AACT,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF;AACF;;;AHlHA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;AIxEP,eAAsB,6BACpB,SACA,WACA,OACiB;AACjB,QAAM,aAAa,MAAM,QAAQ;AACjC,MAAI;AACF,WAAO,MAAM,UAAU,UAAU;AAAA,EACnC,SAAS,OAAO;AACd,UAAM,MAAM,UAAU,EAAE,MAAM,MAAM,MAAS;AAC7C,UAAM;AAAA,EACR;AACF;AAUO,SAAS,wBAAwB,SAAsD;AAC5F,MAAI,QAAQ,WAAW,GAAG;AACxB,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,MAAI;AACJ,QAAM,WAAW,MAAY;AAC3B,QAAI;AACJ,eAAW,UAAU,SAAS;AAC5B,UAAI;AACF,eAAO,SAAS;AAAA,MAClB,SAAS,OAAO;AACd,uBAAe;AAAA,MACjB;AAAA,IACF;AACA,QAAI,eAAe,OAAW,OAAM;AAAA,EACtC;AACA,SAAO;AAAA,IACL,KAAK,MAAM;AACT,sBAAgB,YAAY;AAC1B,cAAM,OAAO,QAAQ,IAAI,CAAC,WAAW;AACnC,cAAI;AACF,mBAAO,OAAO,IAAI;AAAA,UACpB,SAAS,OAAO;AACd,mBAAO,QAAQ,OAAO,KAAK;AAAA,UAC7B;AAAA,QACF,CAAC;AACD,YAAI;AACF,gBAAM,QAAQ,IAAI,IAAI;AAAA,QACxB,SAAS,OAAO;AACd,cAAI;AACF,qBAAS;AAAA,UACX,QAAQ;AAAA,UAGR;AACA,gBAAM,QAAQ,WAAW,IAAI;AAC7B,gBAAM;AAAA,QACR;AAAA,MACF,GAAG;AACH,aAAO;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AASO,SAAS,6BAA6B,OAMlB;AACzB,MAAI,QAA8B;AAClC,MAAI;AACJ,MAAI;AACJ,QAAM,sBAAsB,MAAM;AAChC,wBAAoB,MAAM,oBAAoB;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,YAAoC;AAAA,IACxC,OAAO,MAAM;AAAA,IACb,KAAK,MAAM;AACT,UAAI,CAAC,cAAc,UAAU,YAAY;AACvC,sBAAc,YAAY;AACxB,kBAAQ;AACR,gBAAM,oBAAoB;AAAA,QAC5B,GAAG;AACH,eAAO;AAAA,MACT;AACA,UAAI,CAAC,eAAe,UAAU,aAAa,UAAU,WAAW;AAC9D,eAAO,QAAQ,OAAO,IAAI,MAAM,uCAAuC,KAAK,EAAE,CAAC;AAAA,MACjF;AACA,sBAAgB,YAAY;AAC1B,YAAI,UAAU,YAAY;AACxB,kBAAQ;AAAA,QACV;AACA,cAAM,UAAU;AAChB,YAAI;AACF,gBAAM,MAAM,OAAO,IAAI;AACvB,kBAAQ;AAAA,QACV,SAAS,OAAO;AACd,kBAAQ;AACR,gBAAM;AAAA,QACR,UAAE;AACA,gBAAM,oBAAoB;AAAA,QAC5B;AAAA,MACF,GAAG;AACH,aAAO;AAAA,IACT;AAAA,IACA,OAAO,CAAC,UAAU,mBAAmB;AACnC,UAAI,UAAU,cAAc,UAAU,aAAa,UAAU,UAAU;AACrE,eAAO;AAAA,MACT;AACA,YAAM,gBAAgB;AACtB;AAAA,QAAiB,MACf,MAAM,cAAc,KAAK,gDAAgD;AAAA,UACvE,MAAM,MAAM;AAAA,UACZ,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AACA,cAAQ;AACR,UAAI;AACF,cAAM,OAAO,SAAS;AACtB,eAAO;AAAA,MACT,QAAQ;AACN,gBAAQ;AACR;AAAA,UAAiB,MACf,MAAM,cAAc,KAAK,kCAAkC;AAAA,YACzD,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,OAAO,YAAY;AACjB,UAAI,CAAC,UAAU,MAAM,eAAe,GAAG;AACrC,cAAM,IAAI,MAAM,gCAAgC;AAAA,MAClD;AACA,UAAI,YAAY;AACd,cAAM,WAAW,MAAM,MAAM,MAAS;AAAA,MACxC,OAAO;AACL,gBAAQ;AACR,cAAM,oBAAoB;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,KAAuB;AAC/C,MAAI;AACF,QAAI;AAAA,EACN,QAAQ;AAAA,EAER;AACF;AAKO,SAAS,+BAA+B,OAK5C;AACD,MAAI,YAAY;AAChB,MAAI,WAAW;AACf,MAAI;AACJ,SAAO;AAAA,IACL,UAAU;AACR,UAAI,aAAa,SAAU;AAC3B,kBAAY;AACZ,UAAI,MAAM,WAAW;AACnB,gBAAQ,WAAW,MAAM;AACvB;AAAA,YAAiB,MACf,MAAM,cAAc,MAAM,oDAAoD;AAAA,cAC5E,YAAY;AAAA,cACZ,WAAW;AAAA,cACX,QAAQ;AAAA,YACV,CAAC;AAAA,UACH;AACA,gBAAM,YAAY;AAAA,QACpB,GAAG,MAAM,aAAa,GAAO;AAC7B,cAAM,QAAQ;AAAA,MAChB;AACA,UAAI,WAAW;AACf,UAAI;AACF,mBAAW,MAAM,MAAM;AAAA,MACzB,QAAQ;AAAA,MAER;AACA,UAAI,CAAC;AACH;AAAA,UAAiB,MACf,MAAM,cAAc,MAAM,uCAAuC;AAAA,YAC/D,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AAAA,IACJ;AAAA,IACA,WAAW;AAGT,iBAAW;AACX,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF;AACF;;;AClOA,SAAS,oBAAoB;AAC7B,SAAS,SAAS,gBAAgB;AAClC,SAAS,aAAa;AA8DtB,IAAM,kBAAkB;AACxB,IAAM,yBAAyB;AAExB,SAAS,kBACd,OACuD;AACvD,QAAM,SAAS,oBAAI,IAAoB;AACvC,aAAW,QAAQ,MAAM,MAAM,IAAI,GAAG;AACpC,UAAM,QAAQ,iCAAiC,KAAK,KAAK,KAAK,CAAC;AAC/D,QAAI,CAAC,MAAO;AACZ,WAAO,IAAI,MAAM,CAAC,GAAa,OAAO,MAAM,CAAC,CAAC,IAAI,IAAI;AAAA,EACxD;AACA,QAAM,aAAa,OAAO,IAAI,UAAU;AACxC,QAAM,iBAAiB,OAAO,IAAI,cAAc;AAChD,MACE,eAAe,UACf,mBAAmB,UACnB,CAAC,OAAO,SAAS,UAAU,KAC3B,CAAC,OAAO,SAAS,cAAc,KAC/B,cAAc,KACd,iBAAiB,GACjB;AACA,WAAO;AAAA,EACT;AACA,SAAO,EAAE,YAAY,gBAAgB,KAAK,IAAI,YAAY,cAAc,EAAE;AAC5E;AAEO,SAAS,6BAA6B,OAA8B;AACzE,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,WAAW,YAAY,MAAO,QAAO;AAC1C,QAAM,SAAS,OAAO,OAAO;AAG7B,MAAI,CAAC,OAAO,cAAc,MAAM,KAAK,UAAU,KAAK,UAAU,KAAK,GAAI,QAAO;AAC9E,SAAO;AACT;AAEO,SAAS,6BAA6B,OAAwC;AACnF,MAAI,SAAwB;AAC5B,MAAI,eAA8B;AAClC,aAAW,QAAQ,MAAM,MAAM,IAAI,GAAG;AACpC,UAAM,iBAAiB,KAAK,QAAQ,GAAG;AACvC,UAAM,kBAAkB,KAAK,QAAQ,KAAK,iBAAiB,CAAC;AAC5D,QAAI,kBAAkB,KAAK,kBAAkB,EAAG;AAChD,UAAM,cAAc,KAAK,MAAM,GAAG,cAAc;AAChD,UAAM,cAAc,KAAK,MAAM,iBAAiB,GAAG,eAAe;AAClE,UAAM,OAAO,oBAAoB,KAAK,MAAM,kBAAkB,CAAC,CAAC;AAChE,QAAI,CAAC,KAAM;AACX,QAAI,gBAAgB,OAAO,gBAAgB,IAAI;AAC7C,eAAS;AAAA,IACX;AACA,QAAI,YAAY,MAAM,GAAG,EAAE,SAAS,QAAQ,GAAG;AAC7C,qBAAe;AAAA,IACjB;AAAA,EACF;AACA,SAAO,EAAE,QAAQ,aAAa;AAChC;AAEO,SAAS,sBAAsB,YAA6D;AACjG,QAAM,QAAgC,CAAC;AACvC,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,kBAAkB,CACtB,OACA,MACA,iBACA,gBACG;AACH,eAAW,aAAa,oBAAoB,QAAQ,GAAG,GAAG;AACxD,YAAM,WAAW,cAAc,MAAM,KAAK,UAAU,MAAM,CAAC;AAC3D,YAAM,cAAc,MAAM,KAAK,OAAO,UAAU,eAAe;AAC/D,YAAM,UAAU,MAAM,KAAK,OAAO,UAAU,WAAW;AACvD,YAAM,MAAM,GAAG,WAAW,KAAK,OAAO;AACtC,UAAI,KAAK,IAAI,GAAG,EAAG;AACnB,WAAK,IAAI,GAAG;AACZ,YAAM,KAAK,EAAE,aAAa,QAAQ,CAAC;AAAA,IACrC;AAAA,EACF;AAEA,kBAAgB,iBAAiB,WAAW,QAAQ,kBAAkB,YAAY;AAClF;AAAA,IACE;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,qCACd,eAAqC,CAAC,GACJ;AAClC,QAAM,WAAW,aAAa,YAAY;AAC1C,QAAM,QAAQ,kBAAkB,SAAS,eAAe,KAAK,EAAE;AAC/D,QAAM,iBAAiB,OAAO,eAAe,aAAa,kBAAkB,UAAU;AACtF,QAAM,qBACJ,OAAO,mBAAmB,aAAa,sBAAsB,SAAS;AACxE,QAAM,OAAO;AAAA,IACX,OAAO;AAAA,IACP,WAAW,KAAK,IAAI,GAAG,iBAAiB,KAAK,IAAI,gBAAgB,kBAAkB,CAAC;AAAA,IACpF,YAAY;AAAA,EACd;AACA,QAAM,SAAS,sBAAsB,QAAQ;AAI7C,QAAM,iBAAiB,aAAa,sBAAsB,QAAQ,aAAa;AAE/E,SAAO;AAAA,IACL,iBAAiB,cAAc;AAAA,IAC/B,sBAAsB,cAAc;AAAA,IACpC,sBAAsB,cAAc;AAAA,IACpC,0BAA0B,cAAc;AAAA,IACxC,QAAQ,CAAC,UAAU,IAAI;AAAA,EACzB;AACF;AAEO,SAAS,qCACd,MACA,UACS;AACT,SAAO,SAAS,UAAU,SAAS,8BAA8B;AACnE;AAEO,SAAS,oCAAoC,OAKlB;AAChC,QAAM,MAAM,MAAM,cAAc,OAAO,KAAK;AAC5C,QAAM,SAAS,MAAM,cAAc,UAAU;AAC7C,QAAM,WAAW,MAAM,cAAc,eAAe;AACpD,QAAM,SAAS,MAAM,cAAc,iBAAiB;AACpD,QAAM,iBAAiB,MAAM,cAAc,OAAO,MAAM,IAAI,GAAG,KAAK;AACpE,QAAM,kBAAkB,oBAAI,IAAmC;AAC/D,MAAI,WAAW,OAAO;AACtB,MAAI,iBAAiB;AACrB,MAAI,SAAS;AAEb,QAAM,YAAY,MAAM;AACtB,QAAI,OAAQ;AACZ,UAAM,aAAa,IAAI;AACvB,QAAI;AACJ,QAAI;AACF,iBAAW,OAAO;AAAA,IACpB,QAAQ;AACN,sBAAgB,MAAM;AACtB,2BAAqB,MAAM,eAAe;AAAA,QACxC,MAAM;AAAA,QACN,MAAM;AAAA,MACR,CAAC;AACD;AAAA,IACF;AAEA,UAAM,cAAc,SAAS,OAAO;AAAA,MAClC,CAAC,EAAE,WAAW,WAAW,MACvB,OAAO,SAAS,SAAS,KACzB,OAAO,SAAS,UAAU,KAC1B,aAAa,KACb,aAAa;AAAA,IACjB;AACA,QAAI,YAAY,WAAW,GAAG;AAC5B,sBAAgB,MAAM;AACtB,2BAAqB,MAAM,eAAe;AAAA,QACxC,MAAM;AAAA,QACN,MAAM;AAAA,MACR,CAAC;AACD;AAAA,IACF;AAEA,UAAM,oBAID,CAAC;AACN,eAAW,CAAC,MAAM,KAAK,KAAK;AAAA,MAC1B,CAAC,OAAO,SAAS,eAAe;AAAA,MAChC,CAAC,aAAa,SAAS,oBAAoB;AAAA,MAC3C,CAAC,YAAY,SAAS,oBAAoB;AAAA,MAC1C,CAAC,iBAAiB,SAAS,wBAAwB;AAAA,IACrD,GAAY;AACV,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,KAAK;AAAA,QACf,OAAO,OAAO,SAAS,KAAK,KAAK,SAAS,IAAI,QAAQ;AAAA,MACxD,CAAC;AAAA,IACH;AACA,QAAI,uBAAuB;AAC3B,eAAW,SAAS,aAAa;AAC/B,YAAM,mBAAmB,MAAM,YAAY,MAAM;AACjD,YAAM,kBAAkB,SAAS,kBAAkB,MAAM;AACzD,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO;AAAA,MACT,CAAC;AACD,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO,MAAM,SAAS;AAAA,MACxB,CAAC;AACD,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO,MAAM,SAAS;AAAA,MACxB,CAAC;AACD,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO,KAAK,IAAI,GAAG,MAAM,aAAa,MAAM,SAAS;AAAA,MACvD,CAAC;AACD,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO;AAAA,MACT,CAAC;AACD,+BAAyB,mBAAmB,MAAM,SAAS;AAE3D,UAAI,mBAAmB,MAAM,SAAS,gCAAgC;AACpE,wBAAgB,OAAO,MAAM,KAAK;AAClC,qBAAa,MAAM,eAAe;AAAA,UAChC,MAAM;AAAA,UACN,MAAM;AAAA,UACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,UAC7B,OAAO;AAAA,QACT,CAAC;AACD;AAAA,MACF;AAEA,YAAM,YAAY,gBAAgB,IAAI,MAAM,KAAK,KAAK;AACtD,sBAAgB,IAAI,MAAM,OAAO,SAAS;AAC1C,YAAM,WAAW,KAAK,IAAI,GAAG,aAAa,SAAS;AACnD,YAAM,gBAAgB,WAAW;AACjC,mBAAa,MAAM,eAAe;AAAA,QAChC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,MAAM,MAAM;AAAA,QAC7B,OAAO;AAAA,MACT,CAAC;AACD,UAAI,YAAY,MAAM,SAAS,gCAAgC;AAC7D,0BAAkB,KAAK,EAAE,OAAO,MAAM,OAAO,kBAAkB,cAAc,CAAC;AAAA,MAChF;AAAA,IACF;AAKA,UAAM,oCACJ,kBAAkB,SAAS,KAC3B,kBAAkB,MAAM,CAAC,EAAE,MAAM,MAAM;AACrC,YAAM,gBAAgB,gBAAgB,IAAI,KAAK;AAC/C,aAAO,kBAAkB,UAAa,YAAY,iBAAiB,WAAW;AAAA,IAChF,CAAC;AACH,QAAI,6BAA6B;AACjC,QACE,wBACA,aAAa,YAAY,MAAM,SAAS,mCACvC,kBAAkB,WAAW,KAAK,CAAC,oCACpC;AACA,iBAAW;AACX,UAAI;AACF,uBAAe;AACf,qCAA6B;AAC7B,6BAAqB,MAAM,eAAe;AAAA,UACxC,MAAM;AAAA,UACN,MAAM;AAAA,QACR,CAAC;AAAA,MACH,QAAQ;AACN,6BAAqB,MAAM,eAAe;AAAA,UACxC,MAAM;AAAA,UACN,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AAIA,QACG,8BAA8B,CAAC,qCAChC,kBACA,kBAAkB,WAAW,GAC7B;AACA;AAAA,IACF;AAEA,UAAM,gBAAgB,kBAAkB;AAAA,MACtC,CAAC,MAAM,UAAU,MAAM,mBAAmB,KAAK;AAAA,IACjD,EAAE,CAAC;AACH,QAAI,CAAC,cAAe;AAEpB,qBAAiB;AACjB,yBAAqB,MAAM,eAAe;AAAA,MACxC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ,EAAE,OAAO,cAAc,MAAM;AAAA,IACvC,CAAC;AACD,aAAS,MAAM,eAAe,qDAAqD;AAAA,MACjF,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,QAAQ,oBAAoB,cAAc,KAAK,KAAK,aAAa,cAAc,gBAAgB,CAAC,OAAO,MAAM,SAAS,8BAA8B,KAAK,cAAc,aAAa;AAAA,IACtL,CAAC;AACD,QAAI;AACF,YAAM,MAAM;AAAA,IACd,QAAQ;AACN,uBAAiB;AACjB,2BAAqB,MAAM,eAAe;AAAA,QACxC,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ,EAAE,OAAO,cAAc,MAAM;AAAA,MACvC,CAAC;AACD,eAAS,MAAM,eAAe,iDAAiD;AAAA,QAC7E,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,QAAQ,SAAS,WAAW,MAAM,SAAS,+BAA+B;AAChF,QAAM,QAAQ;AACd,YAAU;AAEV,SAAO;AAAA,IACL;AAAA,IACA,OAAO,MAAM;AACX,UAAI,OAAQ;AACZ,eAAS;AACT,aAAO,KAAK;AAAA,IACd;AAAA,EACF;AACF;AAEA,SAAS,sBACP,UACsC;AACtC,QAAM,aAAa,6BAA6B,SAAS,mBAAmB,KAAK,EAAE;AACnF,MAAI,gBAAsD;AAC1D,aAAW,EAAE,aAAa,QAAQ,KAAK,sBAAsB,UAAU,GAAG;AACxE,UAAM,aAAa,SAAS,WAAW;AACvC,UAAM,SAAS,SAAS,OAAO;AAC/B,QAAI,eAAe,QAAQ,WAAW,KAAM;AAC5C,UAAM,UAAU,OAAO,WAAW,KAAK,CAAC;AACxC,UAAM,QAAQ,6BAA6B,MAAM;AACjD,QAAI,CAAC,OAAO,SAAS,OAAO,KAAK,UAAU,KAAK,UAAU,KAAM;AAChE,UAAM,YAAY,EAAE,OAAO,UAAmB,WAAW,SAAS,YAAY,MAAM;AACpF,QACE,CAAC,iBACD,UAAU,YAAY,UAAU,aAC9B,cAAc,YAAY,cAAc,YAC1C;AACA,sBAAgB;AAAA,IAClB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,MAA6B;AACnD,MAAI;AACF,WAAO,aAAa,MAAM,MAAM;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,aAAa,OAAuB;AAC3C,SAAO,KAAK,MAAM,KAAK,IAAI,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,IAAI,GAAS,IAAI;AACpE;AAEA,SAAS,oBAAoB,OAA8B;AACzD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,IAAI,EAAG,QAAO;AAC/D,MAAI,QAAQ,MAAM,GAAG,EAAE,SAAS,IAAI,EAAG,QAAO;AAC9C,SAAO,MAAM,UAAU,OAAO;AAChC;AAEA,SAAS,oBAAoB,MAAwB;AACnD,QAAM,YAAsB,CAAC;AAC7B,MAAI,UAAU;AACd,SAAO,MAAM;AACX,cAAU,KAAK,OAAO;AACtB,QAAI,YAAY,IAAK,QAAO;AAC5B,cAAU,MAAM,QAAQ,OAAO;AAAA,EACjC;AACF;AAEA,SAAS,aACP,eACA,OACM;AACN,MAAI;AACF,kBAAc,SAAS,KAAK;AAAA,EAC9B,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,qBACP,eACA,OACM;AACN,MAAI;AACF,kBAAc,iBAAiB,KAAK;AAAA,EACtC,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,SACP,eACA,SACA,YACM;AACN,MAAI;AACF,kBAAc,KAAK,SAAS,UAAU;AAAA,EACxC,QAAQ;AAAA,EAER;AACF;;;ACjdO,SAAS,uCACd,QACoC;AACpC,MAAI;AACF,QAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,UAAM,YAAY;AAClB,WACE,UAAU,SAAS,wBAClB,UAAU,SAAS,wBAAwB,UAAU,SAAS,uBAC/D,UAAU,WAAW,aACrB,OAAO,UAAU,aAAa,YAC9B,UAAU,SAAS,SAAS;AAAA,EAEhC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iCACP,gBACM;AAGN,UAAQ,MAAM,kDAAkD,EAAE,eAAe,CAAC;AACpF;AAUO,SAAS,wCACd,iBAAkD,SAClD,SAEY,kCACA;AACZ,QAAM,uBAAuB,CAAC,WAA0B;AACtD;AAAA,MACE,uCAAuC,MAAM,IACzC,mCACA;AAAA,IACN;AAAA,EACF;AACA,iBAAe,GAAG,sBAAsB,oBAAoB;AAC5D,SAAO,MAAM,eAAe,IAAI,sBAAsB,oBAAoB;AAC5E;;;ACxEO,IAAM,uCAAuC;AACpD,IAAM,eAAe;AACd,SAAS,mCAAmC,MAAsB;AACvE,SAAO,KAAK,SAAS,YAAY,IAAI,OAAO,GAAG,IAAI,GAAG,YAAY;AACpE;;;AP4HA,IAAM,6BAA6B;AAC5B,IAAM,iCAAiC;AACvC,IAAM,+BAA+B;AACrC,IAAM,iCAAiC;AACvC,IAAM,+BAA+B,KAAK,KAAK;AAC/C,IAAM,oCAAoC;AAC1C,IAAM,kCAAkC,KAAK;AAoBpD,SAAS,eACP,OACe;AACf,MAAI,OAAO,YAAY,UAAa,MAAM,YAAY,KAAM,QAAO;AACnE,SAAO,OAAO,OAAO,MAAM,OAAO,CAAC,IAAI,MAAQ,KAAK,OAAO,MAAM,SAAS,KAAK,GAAS;AAC1F;AAEO,SAAS,6BACd,SACA,QAAQ,KAAK,IAAI,GACR;AACT,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,cACJ,eAAe,QAAQ,iBAAiB,KAAK,eAAe,QAAQ,eAAe;AACrF,QAAM,qBAAqB,eAAe,QAAQ,iBAAiB,gBAAgB;AACnF,SACE,gBAAgB,QAAQ,uBAAuB,QAAQ,SAAS,cAAc;AAElF;AAGO,SAAS,kCAAkC,OAAyB;AAGzE,SAAO,mBAAmB,KAAK,KAAK,MAAM,SAAS;AACrD;AAKA,eAAsB,8BACpB,MACA,eAAqC,CAAC,GACtC;AACA,SAAO,SAAS,aACX,MAAM,OAAO,kCAAsB,GAAG,wBAAwB,YAAY,KAC1E,MAAM,OAAO,+BAAmB,GAAG,qBAAqB,YAAY;AAC3E;AAYO,SAAS,kCACd,YAAoB,YAAY,KACN;AAC1B,QAAM,aAAa,cAAc,SAAS,EAAE,WAAW,MAAM,GAAG;AAChE,MAAI,WAAW,SAAS,eAAe,GAAG;AACxC,WAAO,EAAE,eAAe,cAAc,IAAI,IAAI,kBAAkB,SAAS,CAAC,EAAE;AAAA,EAC9E;AACA,QAAM,WAAW,cAAc,IAAI,IAAI,wBAAwB,SAAS,CAAC;AACzE,MAAI,CAAC,WAAW,QAAQ,GAAG;AACzB,UAAM,IAAI;AAAA,MACR,0CAA0C,QAAQ;AAAA,IACpD;AAAA,EACF;AACA,SAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE;AACxC;AAEO,SAAS,2CAA2C;AACzD,SAAO;AAAA,IACL,8BAA8B;AAAA,IAC9B,kCAAkC;AAAA,EACpC;AACF;AAEA,eAAsB,qBAAqB,SAGxC;AACD,QAAM,WAAW,QAAQ,YAAY,YAAY;AACjD,MAAI,QAAQ,SAAS,WAAW;AAI9B,uCAAmC,QAAQ;AAAA,EAC7C;AACA,QAAM,gBACJ,QAAQ,sBAAsB,iBAC9B,oBAAoB,UAAU,EAAE,WAAW,UAAU,QAAQ,IAAI,GAAG,CAAC;AACvE,iCAA+B,aAAa;AAC5C,MAAI,QAAQ,SAAS,QAAQ;AAC3B,uCAAmC,aAAa;AAAA,EAClD;AACA,MAAI,QAAQ,SAAS,UAAU,QAAQ,gBAAgB;AACrD,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AAMA,MAAI,QAAQ,SAAS,QAAQ;AAC3B,UAAM,EAAE,yBAAyB,IAAI,MAAM,OAAO,2BAA2B;AAC7E,UAAM;AAAA,MACJ;AAAA,MACA,MAAM,yBAAyB,QAAQ;AAAA,MACvC;AAAA,QACE,GAAG,oBAAoB,QAAQ;AAAA,QAC/B,SAAS,CAAC,UAAU,0BAA0B,eAAe,KAAK;AAAA,MACpE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,MACE;AAAA,MACE;AAAA,MACA,MAAM,iBAAiB,QAAQ,0BAA0B,QAAQ,CAAC;AAAA,MAClE;AAAA,QACE,GAAG,oBAAoB,QAAQ;AAAA,QAC/B,SAAS,CAAC,UAAU,0BAA0B,eAAe,KAAK;AAAA,MACpE;AAAA,IACF;AAAA,IACF,OAAO,eAAe;AACpB,UAAI;AACJ,UAAI,wBAAwB;AAC5B,YAAM,uBAAuB;AAAA,QAC3B,GAAG,QAAQ;AAAA,QACX;AAAA,QACA;AAAA,QACA,oBACE,QAAQ,sBAAsB,uBAC7B,MAAM;AACL,cAAI,sBAAuB;AAC3B,cAAI,CAAC,WAAY,OAAM,IAAI,MAAM,0CAA0C;AAC3E,qBAAW,SAAS;AACpB,kCAAwB;AAAA,QAC1B;AAAA,MACJ;AACA,YAAM,aACJ,QAAQ,cACP,MAAM,8BAA8B,QAAQ,MAAM,oBAAoB;AACzE,YAAM,kBACJ,QAAQ,SAAS,SACb,gCAAgC,UAAU,EAAE,cAAc,CAAC,IAC3D;AACN,YAAM,qBACJ,QAAQ,SAAS,YACb,QAAQ,iBACN,EAAE,gBAAgB,QAAQ,eAAe,IACzC,kCAAkC,IACpC,CAAC;AACP,YAAM,sBAAsB;AAAA,QAC1B;AAAA,QACA,WAAW,SAAS;AAAA,QACpB;AAAA;AAAA;AAAA;AAAA;AAAA,QAKA,GAAG,yCAAyC;AAAA;AAAA;AAAA;AAAA,QAI5C,mBAAmB;AAAA;AAAA,QAEnB,mBAAmB;AAAA,MACrB;AACA,YAAM,SAAS,MAAM,OAAO,OAAO;AAAA,QACjC,GAAG;AAAA,QACH,WACE,QAAQ,SAAS,YACb,SAAS,oBACT,cAAc,SAAS,iBAAiB;AAAA,QAC9C,GAAI,QAAQ,SAAS,YACjB;AAAA,UACE,GAAG;AAAA,UACH,gBAAgB;AAAA,UAChB,wBAAwB;AAAA,UACxB,oBAAoB;AAAA,UACpB,qCAAqC;AAAA,UACrC,qCAAqC;AAAA,QACvC,IACA,gBAAiB;AAAA,MACvB,CAAC;AACD,UAAI,QAAQ,SAAS,WAAW;AAC9B,qBAAa;AACb,yBAAiB,WAAW,wBAAwB;AACpD,eAAO,EAAE,QAAQ,WAAW;AAAA,MAC9B;AAEA,YAAM,eAAe,CAAC,MAAM;AAC5B,UAAI;AAGF,mBAAW,aAAa;AAAA,UACtB,0BAA0B,SAAS,iBAAiB;AAAA,UACpD,mCAAmC,SAAS,iBAAiB;AAAA,QAC/D,GAAG;AACD,gBAAM,kBAAkB,MAAM,OAAO,OAAO;AAAA,YAC1C,GAAG;AAAA,YACH,GAAG;AAAA,YACH;AAAA,YACA,gBAAgB;AAAA,YAChB,wBAAwB;AAAA,YACxB,oBAAoB;AAAA,YACpB,qCAAqC;AAAA,YACrC,qCAAqC;AAAA,UACvC,CAAC;AACD,uBAAa,KAAK,eAAe;AAAA,QACnC;AACA,eAAO;AAAA,UACL,QAAQ,wBAAwB,YAAY;AAAA,UAC5C;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,mBAAW,eAAe,cAAc;AACtC,cAAI;AACF,wBAAY,SAAS;AAAA,UACvB,QAAQ;AAAA,UAIR;AAAA,QACF;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,CAAC,eAAe,WAAW,MAAM;AAAA,EACnC;AACF;AAOA,eAAsB,6BACpB,UACA,IAWC;AACD,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,SAAO;AAAA,IACL,qBAAqB,OAAO;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,MAAM;AACJ,UAAI,uBAAuB;AACzB,cAAM,SAAS,SAAS,gBAAgB,mBAAmB;AAAA,UACzD,WAAW,SAAS;AAAA,UACpB;AAAA,UACA,uBAAuB;AAAA,UACvB,MAAM,CAAC,EAAE,WAAW,aAAa,UAAU,CAAC;AAAA,UAC5C,QAAQ;AAAA,UACR,YAAY,CAAC;AAAA,QACf,CAAC;AAAA,MACH,OAAO;AACL,cAAM,SAAS,SAAS,gBAAgB,mBAAmB;AAAA,UACzD,WAAW,SAAS;AAAA,UACpB;AAAA,UACA,uBAAuB;AAAA,UACvB,MAAM,CAAC,EAAE,WAAW,aAAa,UAAU,CAAC;AAAA,UAC5C,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AACA,yBAAmB;AACnB,aAAO,MAAM,iCAAiC,IAAI;AAAA,QAChD;AAAA,QACA;AAAA,QACA;AAAA,QACA,oBAAoB;AAAA,QACpB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,8BAA8B,OAAO,UAAU;AAC7C,YAAM,SAAS,SAAS,gBAAgB,mBAAmB;AAAA,QACzD,WAAW,SAAS;AAAA,QACpB,YAAY,MAAM;AAAA,QAClB,uBAAuB;AAAA,QACvB,MAAM;AAAA,UACJ;AAAA,YACE,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,WAAW,MAAM;AAAA,UACnB;AAAA,QACF;AAAA,QACA,QAAQ;AAAA,QACR,YAAY,CAAC,KAAK;AAAA,MACpB,CAAC;AAAA,IAIH;AAAA,IACA,+BAA+B,OAAO,EAAE,YAAY,eAAe,WAAW,MAAM;AAClF,UAAI;AACJ,UAAI;AACF,sBAAc,MAAM,WAAW,gBAAgB,0BAA0B;AAAA,UACvE,WAAW,SAAS;AAAA,UACpB,WAAW,EAAE,YAAY,OAAO,cAAc;AAAA,QAChD,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,kCAAkC,KAAK,EAAG,QAAO;AACrD,cAAM;AAAA,MACR;AACA,YAAM,UAAU,YAAY,mBAAmB;AAAA,QAC7C,CAACC,cAAaA,UAAS,eAAe;AAAA,MACxC;AACA,aAAO,6BAA6B,OAAO,IAAI,YAAY;AAAA,IAC7D;AAAA,IACA,6BAA6B,OAAO;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,MAAM;AACJ,YAAM,SAAS,SAAS,gBAAgB,mBAAmB;AAAA,QACzD,WAAW,SAAS;AAAA,QACpB;AAAA,QACA,uBAAuB;AAAA,QACvB,MAAM,CAAC,EAAE,WAAW,aAAa,UAAU,CAAC;AAAA,QAC5C,QAAQ;AAAA,QACR,YAAY,CAAC,YAAY;AAAA,MAC3B,CAAC;AAAA,IAIH;AAAA,IACA,uBAAuB,YAAY;AACjC,YAAM,WAAW,MAAM,WAAW,gBAAgB,kBAAkB;AAAA,QAClE,WAAW,SAAS;AAAA,QACpB,WAAW,EAAE,MAAM,cAAc,SAAS,iBAAiB,EAAE;AAAA;AAAA;AAAA;AAAA,QAI7D,eAAe;AAAA,QACf,aAAa;AAAA,MACf,CAAC;AACD,aAAO,4BAA4B,SAAS,KAAK;AAAA,IACnD;AAAA,IACA,4BAA4B,YAAY;AAGtC,YAAM,SAAS,MAAM,QAAQ,WAAW;AAAA,QACtC,SAAS,SAAS,MAAM,2BAA2B;AAAA,UACjD,WAAW,0BAA0B,SAAS,iBAAiB;AAAA,UAC/D,YAAY;AAAA,UACZ,uBAAuB;AAAA,UACvB,MAAM,CAAC;AAAA,QACT,CAAC;AAAA,QACD,SAAS,SAAS,MAAM,0CAA0C;AAAA,UAChE,WAAW,mCAAmC,SAAS,iBAAiB;AAAA,UACxE,YAAY;AAAA,UACZ,uBAAuB;AAAA,UACvB,MAAM,CAAC;AAAA,QACT,CAAC;AAAA,MACH,CAAC;AACD,iBAAW,SAAS,QAAQ;AAC1B,YACE,MAAM,WAAW,cACjB,EAAE,MAAM,kBAAkB,uCAC1B;AAGA,gBAAM,MAAM;AAAA,QACd;AAAA,MACF;AACA,aAAO,OAAO,CAAC,EAAE,WAAW,cAAc,YAAY;AAAA,IACxD;AAAA,IACA,8BAA8B,OAAO,EAAE,WAAW,aAAa,YAAY,MAAM;AAC/E,UAAI;AACF,cAAM,SAAS,SAAS,MAAM,2BAA2B;AAAA,UACvD,WAAW,SAAS;AAAA,UACpB,YAAY,oBAAoB,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,UAK3C,uBAAuB;AAAA,UACvB,MAAM;AAAA,YACJ;AAAA,cACE;AAAA,cACA;AAAA,cACA;AAAA,cACA,eAAe,SAAS;AAAA,YAC1B;AAAA,UACF;AAAA,QACF,CAAC;AACD,eAAO;AAAA,MACT,SAAS,OAAO;AACd,YAAI,iBAAiB,sCAAsC;AACzD,iBAAO;AAAA,QACT;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,OAAO,YAAY;AACjB,YAAM,WAAW,gBAAgB,cAAc,CAAC,CAAC;AAAA,IACnD;AAAA,IACA,OAAO,YAAY;AACjB,YAAM,WAAW,MAAM;AAAA,IACzB;AAAA,EACF;AACF;AAoBA,eAAsB,8BACpB,UACA,eAC8D;AAC9D,qCAAmC,QAAQ;AAC3C,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,QAAM,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,SAAS,2BAA2B,CAAC,EAAE;AAC3E,QAAM,SAAS;AAAA,IACb,MAAM;AAAA,IACN,cAAc;AAAA,IACd,WAAW,SAAS;AAAA,IACpB,MAAM,CAAC;AAAA,EACT;AACA,QAAM,WAAW;AAAA,IACf,SAAS,sBAAsB;AAAA,IAC/B,eAAe;AAAA,IACf,gBAAgB;AAAA,EAClB;AACA,MAAI;AACF,UAAM,SAAS,SAAS,OAAO;AAAA,MAC7B,YAAY;AAAA;AAAA;AAAA;AAAA,MAIZ;AAAA,MACA;AAAA;AAAA;AAAA,MAGA;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,uDAAuD;AAAA,MACxE,YAAY;AAAA,MACZ,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO;AAAA,MACL,YAAY;AAAA,MACZ,OAAO,YAAY;AACjB,cAAM,WAAW,MAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAI3C,YAAM,SAAS,SAAS,UAAU,0BAA0B,EAAE,OAAO,CAAC,cAAc;AAAA,QAClF;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO;AAAA,UACL,QAAQ,SAAS,MAAM;AAAA,UACvB,GAAI,SAAS,MAAM,OAAO,EAAE,MAAM,SAAS,MAAM,KAAK,IAAI,CAAC;AAAA,UAC3D,GAAI,SAAS,MAAM,qBAAqB,SACpC,EAAE,kBAAkB,SAAS,MAAM,iBAAiB,IACpD,CAAC;AAAA,QACP;AAAA,MACF,EAAE;AACF,oBAAc,KAAK,uDAAuD;AAAA,QACxE,YAAY;AAAA,QACZ,mBAAmB,OAAO;AAAA,MAC5B,CAAC;AACD,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,OAAO,YAAY;AACjB,gBAAM,WAAW,MAAM;AAAA,QACzB;AAAA,MACF;AAAA,IACF;AACA,UAAM,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAGA,eAAsB,kCACpB,UACA,eAC8D;AAC9D,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,MAAI;AACF,UAAM,SAAS,SAAS,OAAO;AAAA,MAC7B,YAAY;AAAA,MACZ,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,6BAA6B,CAAC,EAAE;AAAA,MAC7D,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA,QACd,WAAW,SAAS;AAAA,QACpB,MAAM,CAAC;AAAA,MACT;AAAA,MACA,UAAU;AAAA,QACR,SAAS,sBAAsB;AAAA,QAC/B,eAAe;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,oDAAoD;AAAA,MACrE,YAAY;AAAA,MACZ,kBAAkB;AAAA,IACpB,CAAC;AACD,WAAO,EAAE,YAAY,MAAM,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,EACnE,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,oBAAc,KAAK,wDAAwD;AAAA,QACzE,YAAY;AAAA,MACd,CAAC;AACD,aAAO,EAAE,YAAY,OAAO,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAQA,eAAsB,iCACpB,UACA,eAC8D;AAC9D,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,MAAI;AACF,UAAM,SAAS,SAAS,OAAO;AAAA,MAC7B,YAAY;AAAA,MACZ,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,6BAA6B,CAAC,EAAE;AAAA,MAC7D,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA,QACd,WAAW,SAAS;AAAA,QACpB,MAAM,CAAC;AAAA,MACT;AAAA,MACA,UAAU;AAAA,QACR,SAAS,sBAAsB;AAAA,QAC/B,eAAe;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,qDAAqD;AAAA,MACtE,YAAY;AAAA,MACZ,gBAAgB;AAAA,IAClB,CAAC;AACD,WAAO,EAAE,YAAY,MAAM,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,EACnE,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,oBAAc,KAAK,yDAAyD;AAAA,QAC1E,YAAY;AAAA,MACd,CAAC;AACD,aAAO,EAAE,YAAY,OAAO,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAKA,eAAsB,oCACpB,UACA,eAC8D;AAC9D,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,MAAI;AACF,UAAM,SAAS,SAAS,OAAO;AAAA,MAC7B,YAAY;AAAA,MACZ,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,gCAAgC,CAAC,EAAE;AAAA,MAChE,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA,QACd,WAAW,SAAS;AAAA,QACpB,MAAM,CAAC;AAAA,MACT;AAAA,MACA,UAAU;AAAA,QACR,SAAS,sBAAsB;AAAA,QAC/B,eAAe;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,wDAAwD;AAAA,MACzE,YAAY;AAAA,MACZ,qBAAqB;AAAA,IACvB,CAAC;AACD,WAAO,EAAE,YAAY,MAAM,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,EACnE,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,oBAAc,KAAK,4DAA4D;AAAA,QAC7E,YAAY;AAAA,MACd,CAAC;AACD,aAAO,EAAE,YAAY,OAAO,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAOA,eAAsB,8CACpB,UACA,eAC8D;AAC9D,QAAM,aAAa,MAAM,WAAW,QAAQ,0BAA0B,QAAQ,CAAC;AAC/E,QAAM,WAAW,IAAI,eAAe,EAAE,YAAY,WAAW,SAAS,kBAAkB,CAAC;AACzF,MAAI;AACF,UAAM,SAAS,SAAS,OAAO;AAAA,MAC7B,YAAY;AAAA,MACZ,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,2CAA2C,CAAC,EAAE;AAAA,MAC3E,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,cAAc;AAAA,QACd,WAAW,SAAS;AAAA,QACpB,MAAM,CAAC;AAAA,MACT;AAAA,MACA,UAAU;AAAA,QACR,SAAS,sBAAsB;AAAA,QAC/B,eAAe;AAAA,QACf,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,4DAA4D;AAAA,MAC7E,YAAY;AAAA,MACZ,UAAU;AAAA,IACZ,CAAC;AACD,WAAO,EAAE,YAAY,MAAM,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,EACnE,SAAS,OAAO;AACd,QAAI,iBAAiB,wBAAwB;AAC3C,oBAAc,KAAK,gEAAgE;AAAA,QACjF,YAAY;AAAA,MACd,CAAC;AACD,aAAO,EAAE,YAAY,OAAO,OAAO,YAAY,WAAW,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAC9C,UAAM;AAAA,EACR;AACF;AAsCO,SAAS,4BACd,MACA,SAA4D,gBACnD;AACT,SAAO,SAAS,aAAa,WAAW;AAC1C;AAQA,eAAsB,4BACpB,SACgC;AAChC,EAAAC,4CAA2C,QAAQ,qBAAqB,GAAG;AAC3E,QAAM,WAAW,QAAQ,YAAY,YAAY;AACjD,QAAM,gBACJ,QAAQ,qBAAqB,iBAC7B,oBAAoB,UAAU,EAAE,WAAW,UAAU,QAAQ,IAAI,GAAG,CAAC;AACvE,QAAM,eAAe,oBAAoB,QAAQ;AACjD,QAAM,UAAU,CAAC,UACf,0BAA0B,eAAe,KAAK;AAChD,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AAGJ,QAAM,YAAmD,CAAC;AAC1D,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,UAAM,kBAAkB,MAAM;AAAA,MAC5B;AAAA,MACA,MAAM,uBAAuB,QAAQ,qBAAqB,IAAI,QAAQ;AAAA,MACtE,EAAE,GAAG,cAAc,QAAQ;AAAA,IAC7B;AACA,kBAAc,KAAK,mCAAmC;AAAA,MACpD,MAAM,QAAQ;AAAA,MACd,eAAe,gBAAgB;AAAA,MAC/B,gBAAgB,gBAAgB;AAAA,IAClC,CAAC;AACD,UAAM,gBACJ,QAAQ,SAAS,UACjB,CAAC,QAAQ,qBAAqB,uBAC9B,CAAC,QAAQ,qBAAqB,gCAC9B,CAAC,QAAQ,qBAAqB,iCAC9B,CAAC,QAAQ,qBAAqB,+BAC9B,CAAC,QAAQ,qBAAqB,8BAC9B,CAAC,QAAQ,qBAAqB;AAChC,QAAI,eAAe;AACjB,iBAAW,MAAM;AAAA,QACf;AAAA,QACA,MAAM,6BAA6B,UAAU,QAAQ,qBAAqB,EAAE;AAAA,QAC5E,EAAE,GAAG,cAAc,QAAQ;AAAA,MAC7B;AAAA,IACF;AACA,UAAM,sBACJ,QAAQ,qBAAqB,uBAAuB,UAAU;AAChE,UAAM,+BACJ,QAAQ,qBAAqB,gCAC7B,UAAU;AACZ,UAAM,gCACJ,QAAQ,qBAAqB,iCAC7B,UAAU;AACZ,UAAM,8BACJ,QAAQ,qBAAqB,+BAC7B,UAAU;AACZ,UAAM,6BACJ,QAAQ,qBAAqB,8BAC7B,UAAU;AACZ,UAAM,+BACJ,QAAQ,qBAAqB,gCAC7B,UAAU;AACZ,QACE,CAAC,uBACD,CAAC,gCACD,CAAC,iCACD,CAAC,+BACD,CAAC,8BACD,CAAC,8BACD;AACA,YAAM,IAAI,MAAM,oEAAoE;AAAA,IACtF;AACA,mBAAe,MAAM,qBAAqB;AAAA,MACxC,MAAM,QAAQ;AAAA,MACd;AAAA,MACA,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,MAC/D,GAAI,QAAQ,iBAAiB,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;AAAA,MAC3E,sBAAsB;AAAA,QACpB,GAAG,QAAQ;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,oBAAoB,MAAM;AACxB,cAAI,CAAC,mBAAoB,OAAM,IAAI,MAAM,+CAA+C;AACxF,6BAAmB,QAAQ;AAAA,QAC7B;AAAA,MACF;AAAA,IACF,CAAC;AAED,QAAI,QAAQ,SAAS,QAAQ;AAC3B,UAAI,CAAC,UAAU;AACb,cAAM,IAAI,MAAM,0EAA0E;AAAA,MAC5F;AACA,4BAAsB,yBAAyB;AAAA,QAC7C;AAAA,QACA,MAAM,SAAS;AAAA,MACjB,CAAC;AAAA,IACH,OAAO;AACL,+BAAyB,4BAA4B;AAAA,QACnD;AAAA,QACA,MAAM,YAAY,MAAM,4BAA4B,QAAQ,qBAAqB,EAAE;AAAA,MACrF,CAAC;AACD,wCAAkC,qCAAqC;AAAA,QACrE;AAAA,QACA,MAAM,YAAY,MAAM,mCAAmC,QAAQ,qBAAqB,EAAE;AAAA,MAC5F,CAAC;AAAA,IACH;AAEA,QAAI,4BAA4B,QAAQ,MAAM,QAAQ,iBAAiB,GAAG;AACxE,gBAAU;AAAA,QACR,MAAM;AAAA,UACJ;AAAA,UACA,MAAM,8BAA8B,UAAU,aAAa;AAAA,UAC3D,EAAE,GAAG,cAAc,QAAQ;AAAA,QAC7B;AAAA,MACF;AACA,gBAAU;AAAA,QACR,MAAM;AAAA,UACJ;AAAA,UACA,MAAM,kCAAkC,UAAU,aAAa;AAAA,UAC/D,EAAE,GAAG,cAAc,QAAQ;AAAA,QAC7B;AAAA,MACF;AACA,gBAAU;AAAA,QACR,MAAM;AAAA,UACJ;AAAA,UACA,MAAM,iCAAiC,UAAU,aAAa;AAAA,UAC9D,EAAE,GAAG,cAAc,QAAQ;AAAA,QAC7B;AAAA,MACF;AACA,gBAAU;AAAA,QACR,MAAM;AAAA,UACJ;AAAA,UACA,MAAM,oCAAoC,UAAU,aAAa;AAAA,UACjE,EAAE,GAAG,cAAc,QAAQ;AAAA,QAC7B;AAAA,MACF;AACA,gBAAU;AAAA,QACR,MAAM;AAAA,UACJ;AAAA,UACA,MAAM,8CAA8C,UAAU,aAAa;AAAA,UAC3E,EAAE,GAAG,cAAc,QAAQ;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,SAAS,OAAO;AAC1B,YAAM,cAAc,QAAQ,MAAM,eAAe,QAAQ,qBAAqB;AAC9E,YAAM,gBAAgB,aAAa,aAAa,QAAQ,iBAAiB,YAAY;AACnF,cAAM,uBAAuB,aAAa,QAAQ;AAAA,MACpD,CAAC;AACD,mBAAa,sBAAsB;AAAA,QACjC;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,UACN,IAAI;AAAA,UACJ,MAAM,eAAe,QAAQ,qBAAqB,GAAG;AAAA,UACrD,UAAU,mBAAmB,aAAa,UAAU;AAAA,QACtD;AAAA,QACA,GAAI,QAAQ,MAAM,qBAAqB,EAAE,WAAW,QAAQ,KAAK,mBAAmB,IAAI,CAAC;AAAA,QACzF,WAAW,EAAE,MAAM,QAAQ,MAAM,OAAO,MAAM,WAAW,MAAM,KAAK,WAAW;AAAA,MACjF,CAAC;AAAA,IACH;AAAA,EACF,SAAS,OAAO;AACd,gBAAY,KAAK,IAAI;AACrB,UAAM,QAAQ,WAAW;AAAA,MACvB,qBAAqB,MAAM;AAAA,MAC3B,wBAAwB,MAAM;AAAA,MAC9B,iCAAiC,MAAM;AAAA,MACvC,cAAc,WAAW,MAAM;AAAA,MAC/B,UAAU,MAAM;AAAA,MAChB,GAAG,UAAU,IAAI,CAAC,aAAa,SAAS,MAAM,CAAC;AAAA,IACjD,CAAC;AACD,UAAM;AAAA,EACR;AAEA,QAAM,qBAAqB;AAC3B,QAAM,iBAAiB;AACvB,MAAI,CAAC,oBAAoB;AACvB,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AAEA,uBAAqB,+BAA+B;AAAA,IAClD,OAAO,MAAM,WAAW,MAAM,2BAA2B,KAAK;AAAA,IAC9D,GAAI,QAAQ,kBAAkB,EAAE,WAAW,QAAQ,gBAAgB,IAAI,CAAC;AAAA,IACxE;AAAA,EACF,CAAC;AACD,QAAM,2BAA2B;AACjC,cAAY,6BAA6B;AAAA,IACvC,MAAM,QAAQ;AAAA,IACd,QAAQ;AAAA,MACN,UAAU,MAAM,mBAAmB,OAAO,SAAS;AAAA,MACnD,KAAK,YAAY;AACf,cAAM,mBAAmB,OAAO,IAAI;AACpC,iCAAyB,SAAS;AAAA,MACpC;AAAA,IACF;AAAA,IACA;AAAA,IACA,qBAAqB,YAAY;AAC/B,2BAAqB,MAAM;AAC3B,kBAAY,KAAK,IAAI;AACrB,YAAM,QAAQ,WAAW;AAAA,QACvB,qBAAqB,MAAM;AAAA,QAC3B,wBAAwB,MAAM;AAAA,QAC9B,iCAAiC,MAAM;AAAA,QACvC,mBAAmB,WAAW,MAAM;AAAA,QACpC,gBAAgB,MAAM;AAAA,QACtB,GAAG,UAAU,IAAI,CAAC,aAAa,SAAS,MAAM,CAAC;AAAA,MACjD,CAAC;AAAA,IACH;AAAA,IACA,SAAS,MAAM;AACb,oBAAc,KAAK,6BAA6B;AAAA,QAC9C,MAAM,QAAQ;AAAA,QACd,mBACE,QAAQ,SAAS,YACb,SAAS,oBACT,cAAc,SAAS,iBAAiB;AAAA,QAC9C,GAAI,QAAQ,SAAS,SACjB,+BAA+B,QAAQ,IACvC;AAAA,UACE,iBAAiB;AAAA,UACjB,oBAAoB;AAAA,UACpB,gBAAgB;AAAA,UAChB,mBAAmB;AAAA,QACrB;AAAA,QACJ,qCACE,QAAQ,SAAS,YAAY,+CAA+C;AAAA,QAC9E,oBAAoB,QAAQ,SAAS,YAAY,sCAAsC;AAAA,QACvF,UAAU,QAAQ,SAAS,QAAQ,OAAO,SAAS;AAAA,MACrD,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACD,QAAM,kBAAkB;AAExB,MAAI,qCAAqC,QAAQ,MAAM,QAAQ,GAAG;AAChE,QAAI;AACF,4BAAsB,oCAAoC;AAAA,QACxD;AAAA,QACA;AAAA,QACA,OAAO,MAAM;AACX,cAAI,CAAC,gBAAgB,MAAM,uBAAuB,GAAG;AACnD,kBAAM,IAAI,MAAM,gCAAgC;AAAA,UAClD;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,gBAAgB,MAAM;AAC5B,YAAM;AAAA,IACR;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,QAAQ;AAAA,IACd,QAAQ,mBAAmB;AAAA,IAC3B,YAAY,mBAAmB;AAAA,IAC/B,OAAO,gBAAgB;AAAA,IACvB,KAAK,gBAAgB;AAAA,IACrB,OAAO,CAAC,WAAW;AACjB,sBAAgB,MAAM,MAAM;AAAA,IAC9B;AAAA,IACA,OAAO,gBAAgB;AAAA,EACzB;AACF;AAQA,eAAsB,kBAAkB,SAAkD;AACxF,QAAM,UAAU,MAAM,4BAA4B,OAAO;AACzD,QAAM,UACJ,QAAQ,oBAAoB,QAAQ,CAAC,IAAK,QAAQ,mBAAmB,CAAC,WAAW,QAAQ;AAC3F,QAAM,WAAW,QAAQ,IAAI,CAAC,WAAW;AACvC,UAAM,UAAU,MAAM,QAAQ,MAAM,MAAM;AAC1C,YAAQ,GAAG,QAAQ,OAAO;AAC1B,WAAO,EAAE,QAAQ,QAAQ;AAAA,EAC3B,CAAC;AACD,MAAI;AACF,UAAM,QAAQ,IAAI;AAAA,EACpB,UAAE;AACA,eAAW,EAAE,QAAQ,QAAQ,KAAK,UAAU;AAC1C,cAAQ,IAAI,QAAQ,OAAO;AAAA,IAC7B;AACA,UAAM,QAAQ,MAAM;AAAA,EACtB;AACF;AAEA,eAAsB,cAAc;AAClC,QAAM,OAAO,QAAQ,IAAI;AACzB,MAAI,SAAS,aAAa,SAAS,QAAQ;AACzC,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,QAAM,WAAW,YAAY;AAC7B,QAAM,gBAAgB,oBAAoB,UAAU,EAAE,WAAW,UAAU,IAAI,GAAG,CAAC;AAKnF,QAAM,oCAAoC,wCAAwC;AAClF,QAAM,eAAe,oBAAoB,QAAQ;AACjD,QAAM,UAAU,CAAC,UACf,0BAA0B,eAAe,KAAK;AAChD,QAAM,aAAa,aAAa,QAAQ;AACxC,QAAM,WAAW,SAAS,SAAS,aAAa;AAAA,IAC9C,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACnC,aAAa,SAAS;AAAA,EACxB,CAAC;AAMD,QAAM,oBAAoB,SAAS,SAAS,aAAa;AAAA,IACvD,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACnC,aAAa,SAAS;AAAA,IACtB,KAAK;AAAA,EACP,CAAC;AACD,QAAM,kBAAkB;AAAA,IACtB,aAAa,SAAS;AAAA,IACtB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS,SAAS,KAAK,KAAK;AAAA,IAC1C,+CACE,SAAS;AAAA,EACb;AACA,QAAM,mBAAmB,4BAA4B,QAAQ;AAC7D,MAAI;AACJ,MAAI;AACF,UAAM;AAAA,MACJ;AAAA,MACA,MAAMC,8BAA6B,SAAS,IAAI,eAAe;AAAA,MAC/D,EAAE,GAAG,cAAc,SAAS,aAAa,uCAAuC;AAAA,IAClF;AACA,UAAM,MAAM;AAAA,MACV;AAAA,MACA,MACE;AAAA,QACE,SAAS;AAAA,QACT,mBACI,EAAE,MAAM,iBAAiB,MAAM,MAAM,iBAAiB,SAAS,IAC/D;AAAA,QACJ,6BAA6B,aAAa;AAAA,MAC5C;AAAA,MACF,EAAE,GAAG,cAAc,QAAQ;AAAA,IAC7B;AACA,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA,iBAAiB,MAAM,QAAQ,KAAK,CAAC;AAAA,MACrC;AAAA,MACA;AAAA,MACA,MAAM,EAAE,aAAa,kBAAkB,GAAG;AAAA,MAC1C,sBAAsB;AAAA,QACpB;AAAA,QACA,IAAI,SAAS;AAAA,QACb;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,UAAE;AACA,UAAM,QAAQ,WAAW,CAAC,KAAK,MAAM,GAAG,kBAAkB,MAAM,GAAG,SAAS,MAAM,CAAC,CAAC;AACpF,sCAAkC;AAAA,EACpC;AACF;AAEA,IAAI,YAAY,MAAM;AAKpB,MAAI,cAAc;AAClB,QAAM,kBAAkB,MAAM;AAC5B,kBAAc;AAAA,EAChB;AACA,UAAQ,KAAK,UAAU,eAAe;AACtC,MAAI;AACF,UAAM,YAAY;AAAA,EACpB,UAAE;AACA,YAAQ,IAAI,UAAU,eAAe;AACrC,QAAI,YAAa,SAAQ,KAAK,CAAC;AAAA,EACjC;AACF;","names":["assertRuntimeDatabasePosture","requireSessionEventDurableFanoutCapability","activity","requireSessionEventDurableFanoutCapability","assertRuntimeDatabasePosture"]}