@opengeni/worker-bundle 2.3.1 → 2.3.2-canary.37090756480001

package/dist/chunk-3K3ULWEE.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/activity-services.ts","../src/personal-github-git-credentials.ts","../src/pr-review-credentials.ts","../src/activities/codex-capacity.ts","../src/activities/xai-quota.ts","../src/activities/xai-auth.ts","../src/activities/codex-rotation.ts","../src/activities/documents.ts","../src/activities/goals.ts","../src/activities/agent-run-admission.ts","../src/activities/agent-turn/credential-restriction.ts","../src/activities/knowledge-source-sync.ts","../src/activities/google-drive-provider.ts","../src/activities/google-drive-changes.ts","../src/activities/sandbox-images.ts","../src/activities/streaming.ts","../src/sandbox-snapshot-diagnostics.ts","../src/sandbox-archive-storage.ts","../src/sandbox-routing.ts","../src/sandbox-resume.ts","../src/warm-capture-holder.ts","../src/activities/parent-wake.ts","../src/activities/common.ts","../src/activities/incident-telemetry-preflight.ts","../src/activities/incident-telemetry-authority.ts","../src/activities/agent-turn/provider-dispatch-barrier.ts","../src/activities/agent-turn/sandbox-provision.ts","../src/activities/agent-turn/quiescence.ts","../src/activities/agent-turn/errors.ts","../src/activities/run-input.ts","../src/activities/agent-turn/codex-plan-entitlement.ts","../src/activities/types.ts"],"sourcesContent":["import {\n  codeSearchDeploymentPolicy,\n  dbSearchPath,\n  getSettings,\n  resolveNatsControlPlaneAuth,\n} from \"@opengeni/config\";\nimport {\n  configureChildLifecycleNotices,\n  configureCodeSearchDeploymentPolicy,\n  createDb,\n} from \"@opengeni/db\";\nimport { createNatsEventBus } from \"@opengeni/events\";\nimport { createObservability } from \"@opengeni/observability\";\nimport { resolveCatalogSettings } from \"@opengeni/core\";\nimport { createObjectStorage } from \"@opengeni/storage\";\nimport type { ActivityDependencies, SharedActivityServices } from \"./activities/types\";\nimport { observabilityEventBusOptions } from \"./observability-metrics\";\nimport { buildPersonalGitHubGitCredentials } from \"./personal-github-git-credentials\";\nimport { createStandaloneConnectionCredentialsPort } from \"./pr-review-credentials\";\n\n/**\n * Build the dependency graph common to both worker roles exactly once.\n *\n * This module deliberately has no import edge to @opengeni/runtime or\n * @opengeni/documents. Those graphs are added by the role-specific factories,\n * preventing an idle process from retaining an unused model SDK or parser\n * stack for its entire lifetime.\n */\nexport function createSharedActivityServices(\n  dependencies: ActivityDependencies,\n): () => Promise<SharedActivityServices> {\n  let servicesPromise: Promise<SharedActivityServices> | null = null;\n\n  return async function services(): Promise<SharedActivityServices> {\n    servicesPromise ??= (async () => {\n      const settings = dependencies.settings ?? getSettings();\n      const observability =\n        dependencies.observability ?? createObservability(settings, { component: \"worker\" });\n      const searchPath = dbSearchPath(settings);\n      const dbClient = dependencies.db\n        ? null\n        : createDb(settings.databaseUrl, {\n            ...(searchPath ? { searchPath } : {}),\n            rlsStrategy: settings.rlsStrategy,\n          });\n      const controlPlaneAuth = resolveNatsControlPlaneAuth(settings);\n      const db = dependencies.db ?? dbClient!.db;\n      const resolvedSettings = (await resolveCatalogSettings(db, settings)).settings;\n      // Child lifecycle notice producers are process-global in @opengeni/db;\n      // install the boot-validated rollout flag once for this worker.\n      configureChildLifecycleNotices({ enabled: settings.childLifecycleNoticesEnabled });\n      // Child, scheduled and automation sessions created here freeze their\n      // code_search decision from the same deployment policy as the API.\n      configureCodeSearchDeploymentPolicy(codeSearchDeploymentPolicy(settings));\n      return {\n        settings: resolvedSettings,\n        catalogSourceSettings: settings,\n        db,\n        bus:\n          dependencies.bus ??\n          (await createNatsEventBus(\n            settings.natsUrl,\n            controlPlaneAuth\n              ? { user: controlPlaneAuth.user, pass: controlPlaneAuth.password }\n              : undefined,\n            observabilityEventBusOptions(observability),\n          )),\n        objectStorage: dependencies.objectStorage ?? createObjectStorage(settings),\n        observability,\n        wakeSessionWorkflow: dependencies.wakeSessionWorkflow ?? null,\n        signalSessionAttemptQuiesced: dependencies.signalSessionAttemptQuiesced ?? null,\n        inspectSessionAttemptActivity: dependencies.inspectSessionAttemptActivity ?? null,\n        signalCodexCapacityWorkflow: dependencies.signalCodexCapacityWorkflow ?? null,\n        startSandboxReaperWorkflow: dependencies.startSandboxReaperWorkflow ?? null,\n        startVideoGenerationWorkflow: dependencies.startVideoGenerationWorkflow ?? null,\n        entitlements: dependencies.entitlements ?? null,\n        connectionCredentials:\n          dependencies.connectionCredentials ??\n          createStandaloneConnectionCredentialsPort(settings, db),\n        personalGitHubCredentials:\n          dependencies.personalGitHubCredentials ?? buildPersonalGitHubGitCredentials(db, settings),\n      };\n    })();\n    return await servicesPromise;\n  };\n}\n","import type { Settings } from \"@opengeni/config\";\nimport {\n  type ConnectionCredentialsPort,\n  type GitCredentialRepositoryRef,\n  type McpPersonalConnectionDelegation,\n} from \"@opengeni/contracts\";\nimport {\n  isPersonalGitHubConnection,\n  PersonalGitHubConnectionMetadata,\n} from \"@opengeni/contracts/personal-github\";\nimport {\n  getConnectionMetadata,\n  getPersonalGitHubRepositorySelectionState,\n  getSessionAuthorityProjection,\n  getSessionTurnForAttempt,\n  resolveAcceptedConnectionUse,\n  type Database,\n} from \"@opengeni/db\";\nimport {\n  PERSONAL_GITHUB_GIT_BROKER_TOKEN_TTL_SECONDS,\n  personalGitHubGitBrokerRouteId,\n  sealPersonalGitHubGitBrokerClaims,\n  type PersonalGitHubGitBrokerClaims,\n  type PersonalGitHubGitBrokerRepositoryClaim,\n} from \"@opengeni/github\";\nimport { randomBytes, randomUUID } from \"node:crypto\";\nimport { execFileSync } from \"node:child_process\";\nimport { isIP } from \"node:net\";\nimport { isDeepStrictEqual } from \"node:util\";\n\nconst PERSONAL_GITHUB_SERVER_ID = \"github:personal\";\n\n/**\n * Build the standalone personal-GitHub credential consumer. It returns only an\n * OpenGeni broker bearer: the broad provider OAuth token remains encrypted in\n * the API/database process and never crosses into a sandbox or worker result.\n */\nexport function buildPersonalGitHubGitCredentials(\n  db: Database,\n  settings: Settings,\n): NonNullable<ConnectionCredentialsPort[\"gitCredentials\"]> | null {\n  if (!settings.githubPersonalOauthEnabled) return null;\n  const secret = settings.integrationsStateSecret?.trim();\n  const publicOrigin = personalGitBrokerOrigin(settings);\n  if (!secret || !publicOrigin) {\n    throw new Error(\"personal GitHub Git broker configuration is unavailable\");\n  }\n\n  return async (request) => {\n    if (request.provider && request.provider !== \"github\") {\n      throw new Error(\"personal GitHub Git broker accepts only GitHub repositories\");\n    }\n    if (!request.credentialBindingId || !request.repositoryRefs?.length) {\n      throw new Error(\"personal GitHub Git broker requires one exact credential binding\");\n    }\n    const turn = await getSessionTurnForAttempt(\n      db,\n      request.workspaceId,\n      request.sessionId,\n      request.attemptId,\n    );\n    const session = await getSessionAuthorityProjection(db, request.workspaceId, request.sessionId);\n    if (\n      !turn ||\n      !session ||\n      turn.id !== request.turnId ||\n      turn.executionGeneration !== request.executionGeneration ||\n      !isDeepStrictEqual(turn.initiator, request.initiator) ||\n      !isDeepStrictEqual(turn.initiatorContext, request.initiatorContext) ||\n      session.rootSessionId !== request.rootSessionId\n    ) {\n      throw new Error(\"personal GitHub Git credential authority is no longer current\");\n    }\n    const delegation = exactPersonalGitHubDelegation(\n      turn.personalConnectionDelegations,\n      request.credentialBindingId,\n    );\n    const snapshot = delegation.personalGitHubRepositorySelection!;\n    const repositories = exactRequestedRepositories(\n      request.repositoryRefs,\n      snapshot.credentialBindingId,\n      snapshot.repositories,\n    );\n\n    const resolution = await resolveAcceptedConnectionUse(db, {\n      accountId: request.accountId,\n      workspaceId: request.workspaceId,\n      sessionId: request.sessionId,\n      turnId: request.turnId,\n      attemptId: request.attemptId,\n      executionGeneration: request.executionGeneration,\n      physicalRequestId: randomUUID(),\n      usePhase: \"credential_resolution\",\n      serverId: PERSONAL_GITHUB_SERVER_ID,\n      connectionId: delegation.connectionId,\n      providerDomain: \"github.com\",\n      connectionKind: \"oauth2\",\n      subjectScope: \"subject\",\n      ownerSubjectId: delegation.ownerSubjectId,\n    });\n    if (\n      resolution.status !== \"authorized\" ||\n      resolution.originWorkspaceId !== delegation.originWorkspaceId ||\n      resolution.attribution.connectionId !== delegation.connectionId ||\n      resolution.attribution.connectionGeneration !== snapshot.connectionAuthorityGeneration ||\n      resolution.attribution.ownerSubjectId !== delegation.ownerSubjectId\n    ) {\n      throw new Error(\"personal GitHub Git connection authority is no longer current\");\n    }\n\n    const connection = await getConnectionMetadata(\n      db,\n      delegation.originWorkspaceId!,\n      delegation.connectionId,\n      delegation.ownerSubjectId,\n    );\n    if (\n      !connection ||\n      connection.accountId !== request.accountId ||\n      connection.workspaceId !== delegation.originWorkspaceId ||\n      connection.subjectId !== delegation.ownerSubjectId ||\n      connection.status !== \"active\" ||\n      // connections.version is credential-refresh CAS, not use authority.\n      // resolveAcceptedConnectionUse above fences the independent common\n      // connection-authority generation carried by the accepted snapshot.\n      connection.grantedScopes.length !== 1 ||\n      connection.grantedScopes[0] !== \"repo\" ||\n      !isPersonalGitHubConnection(connection)\n    ) {\n      throw new Error(\"personal GitHub Git connection is unavailable\");\n    }\n    const metadata = PersonalGitHubConnectionMetadata.parse(connection.metadata);\n    const currentSelection = await getPersonalGitHubRepositorySelectionState(db, {\n      accountId: request.accountId,\n      originWorkspaceId: delegation.originWorkspaceId!,\n      subjectId: delegation.ownerSubjectId,\n      connectionId: delegation.connectionId,\n    });\n    if (\n      !currentSelection ||\n      currentSelection.connectionAuthorityGeneration !== snapshot.connectionAuthorityGeneration ||\n      currentSelection.selectionGeneration !== snapshot.selectionGeneration ||\n      currentSelection.credentialBindingId !== snapshot.credentialBindingId ||\n      currentSelection.credentialBindingId !== metadata.credentialBindingId ||\n      currentSelection.providerPrincipalId !== metadata.providerPrincipalId ||\n      metadata.githubUserId !== metadata.providerPrincipalId\n    ) {\n      throw new Error(\"personal GitHub repository authority changed\");\n    }\n    const currentById = new Map(\n      currentSelection.repositories.map((repository) => [repository.repositoryId, repository]),\n    );\n    for (const repository of repositories) {\n      const current = currentById.get(repository.repositoryId);\n      if (\n        !current ||\n        current.fullName !== repository.fullName ||\n        current.canonicalUrl !== repository.canonicalUrl ||\n        current.selectionGeneration !== repository.selectionGeneration ||\n        current.disabled ||\n        (repository.access === \"write\" &&\n          (current.selectedAccess !== \"write\" ||\n            current.archived ||\n            !personalGitHubCanWrite(current.permissions))) ||\n        !personalGitHubCanRead(current.permissions)\n      ) {\n        throw new Error(\"personal GitHub repository authority changed\");\n      }\n    }\n\n    const identity = {\n      name: metadata.githubLogin,\n      email: `${metadata.githubUserId}+${metadata.githubLogin}@users.noreply.github.com`,\n    };\n    if (request.purpose === \"identity\") {\n      return {\n        workspaceId: request.workspaceId,\n        credentialBindingId: request.credentialBindingId,\n        provider: \"github\",\n        providerHost: \"github.com\",\n        identity,\n      };\n    }\n\n    const now = Math.floor(Date.now() / 1_000);\n    const baseClaims = {\n      version: 1 as const,\n      accountId: request.accountId,\n      workspaceId: request.workspaceId,\n      sessionId: request.sessionId,\n      rootSessionId: request.rootSessionId,\n      turnId: request.turnId,\n      attemptId: request.attemptId,\n      executionGeneration: request.executionGeneration,\n      originWorkspaceId: delegation.originWorkspaceId!,\n      connectionId: delegation.connectionId,\n      connectionAuthorityGeneration: snapshot.connectionAuthorityGeneration,\n      ownerSubjectId: delegation.ownerSubjectId,\n      credentialBindingId: snapshot.credentialBindingId,\n      selectionGeneration: snapshot.selectionGeneration,\n    };\n    const repositoryClaims: PersonalGitHubGitBrokerRepositoryClaim[] = repositories.map(\n      (repository) => ({\n        ...repository,\n        routeId: personalGitHubGitBrokerRouteId(secret, {\n          ...baseClaims,\n          repository,\n        }),\n      }),\n    );\n    const claims: PersonalGitHubGitBrokerClaims = {\n      ...baseClaims,\n      nonce: randomBytes(24).toString(\"base64url\"),\n      issuedAt: now,\n      expiresAt: now + PERSONAL_GITHUB_GIT_BROKER_TOKEN_TTL_SECONDS,\n    };\n    return {\n      token: sealPersonalGitHubGitBrokerClaims(secret, claims),\n      expiresAt: new Date(claims.expiresAt * 1_000).toISOString(),\n      workspaceId: request.workspaceId,\n      credentialBindingId: request.credentialBindingId,\n      provider: \"github\",\n      providerHost: \"github.com\",\n      identity,\n      transport: {\n        kind: \"http_broker\",\n        repositories: repositoryClaims.map((repository) => ({\n          repositoryUri: repository.canonicalUrl,\n          brokerUri: `${publicOrigin}/v1/git/personal/${repository.routeId}`,\n        })),\n      },\n    };\n  };\n}\n\nfunction personalGitHubCanRead(permissions: {\n  pull: boolean;\n  triage: boolean;\n  push: boolean;\n  maintain: boolean;\n  admin: boolean;\n}): boolean {\n  return (\n    permissions.pull ||\n    permissions.triage ||\n    permissions.push ||\n    permissions.maintain ||\n    permissions.admin\n  );\n}\n\nfunction personalGitHubCanWrite(permissions: {\n  push: boolean;\n  maintain: boolean;\n  admin: boolean;\n}): boolean {\n  return permissions.push || permissions.maintain || permissions.admin;\n}\n\nlet cachedDockerBridgeGateway: string | null | undefined;\n\nfunction dockerBridgeGateway(): string | null {\n  if (cachedDockerBridgeGateway !== undefined) return cachedDockerBridgeGateway;\n  try {\n    const value = execFileSync(\n      \"docker\",\n      [\"network\", \"inspect\", \"bridge\", \"--format\", \"{{(index .IPAM.Config 0).Gateway}}\"],\n      { encoding: \"utf8\", timeout: 2_000, maxBuffer: 16 * 1024 },\n    ).trim();\n    cachedDockerBridgeGateway = isIP(value) ? value : null;\n  } catch {\n    cachedDockerBridgeGateway = null;\n  }\n  return cachedDockerBridgeGateway;\n}\n\nexport function personalGitBrokerOrigin(settings: Settings): string | null {\n  const value =\n    settings.opengeniMcpUrl ??\n    (settings.sandboxBackend === \"docker\"\n      ? `http://host.docker.internal:${settings.apiPort}`\n      : settings.sandboxBackend === \"local\" || settings.sandboxBackend === \"none\"\n        ? `http://127.0.0.1:${settings.apiPort}`\n        : settings.publicBaseUrl);\n  if (!value) return null;\n  const url = new URL(value);\n  if (\n    settings.sandboxBackend === \"docker\" &&\n    (url.hostname === \"127.0.0.1\" || url.hostname === \"localhost\")\n  ) {\n    url.hostname = dockerBridgeGateway() ?? \"host.docker.internal\";\n  }\n  const dockerPrivateOrigin =\n    settings.sandboxBackend === \"docker\" &&\n    (url.hostname === \"host.docker.internal\" ||\n      url.hostname === cachedDockerBridgeGateway ||\n      /^[a-z][a-z0-9-]{0,62}$/iu.test(url.hostname));\n  // The `local` and `test` environments accept any origin, which covers the\n  // local launcher's Linux Docker sandbox route on the Compose network gateway.\n  const privateExecutionOrigin =\n    (url.protocol === \"http:\" &&\n      (url.hostname === \"127.0.0.1\" || url.hostname === \"localhost\" || dockerPrivateOrigin)) ||\n    [\"local\", \"test\"].includes(settings.environment);\n  if (\n    (url.protocol !== \"https:\" && !privateExecutionOrigin) ||\n    url.username ||\n    url.password ||\n    url.search ||\n    url.hash\n  ) {\n    return null;\n  }\n  url.pathname = \"/\";\n  return url.origin;\n}\n\nfunction exactPersonalGitHubDelegation(\n  delegations: McpPersonalConnectionDelegation[],\n  credentialBindingId: string,\n): McpPersonalConnectionDelegation {\n  const matches = delegations.filter(\n    (delegation) =>\n      delegation.serverId === PERSONAL_GITHUB_SERVER_ID &&\n      delegation.connectionType === \"github_personal\" &&\n      delegation.personalGitHubRepositorySelection?.credentialBindingId === credentialBindingId,\n  );\n  const delegation = matches[0];\n  if (\n    matches.length !== 1 ||\n    !delegation ||\n    delegation.providerDomain !== \"github.com\" ||\n    delegation.kind !== \"oauth2\" ||\n    !delegation.originWorkspaceId ||\n    !delegation.personalGitHubRepositorySelection\n  ) {\n    throw new Error(\"personal GitHub Git delegation is unavailable\");\n  }\n  return delegation;\n}\n\nfunction exactRequestedRepositories(\n  refs: GitCredentialRepositoryRef[],\n  credentialBindingId: string,\n  snapshots: NonNullable<\n    McpPersonalConnectionDelegation[\"personalGitHubRepositorySelection\"]\n  >[\"repositories\"],\n): Array<Omit<PersonalGitHubGitBrokerRepositoryClaim, \"routeId\">> {\n  if (refs.length !== snapshots.length) {\n    throw new Error(\"personal GitHub Git request does not match the accepted repository set\");\n  }\n  const byCanonicalUrl = new Map(\n    snapshots.map((repository) => [repository.canonicalUrl, repository]),\n  );\n  const seen = new Set<string>();\n  return refs.map((ref) => {\n    const snapshot = byCanonicalUrl.get(ref.uri);\n    if (\n      !snapshot ||\n      seen.has(ref.uri) ||\n      ref.provider !== \"github\" ||\n      ref.credentialBindingId !== credentialBindingId ||\n      ref.connectionId !== undefined ||\n      ref.installationId !== undefined ||\n      String(ref.repositoryId) !== snapshot.repositoryId ||\n      ref.ref !== snapshot.ref ||\n      ref.access !== snapshot.access\n    ) {\n      throw new Error(\"personal GitHub Git request exceeds the accepted repository authority\");\n    }\n    seen.add(ref.uri);\n    return snapshot;\n  });\n}\n","import { environmentsEncryptionKeyBytes, type Settings } from \"@opengeni/config\";\nimport type {\n  ConnectionCredentialsPort,\n  GitCredentials,\n  GitCredentialsRequest,\n} from \"@opengeni/contracts\";\nimport { prReviewRegistrationIdFromCredentialBinding } from \"@opengeni/core\";\nimport { decryptVariableSetValue, resolvePrReviewGitCredential, type Database } from \"@opengeni/db\";\nimport {\n  createGitHubAppInstallationTokenWithExpiry,\n  createGitHubAppInstallationTokenWithSigningSettings,\n} from \"@opengeni/github\";\n\n/** Standalone credential broker for PR Review plus the existing GitHub App path.\n * Embedded hosts keep precedence by supplying their own connectionCredentials. */\nexport function createStandaloneConnectionCredentialsPort(\n  settings: Settings,\n  db: Database,\n): ConnectionCredentialsPort {\n  return {\n    gitCredentials: async (request) => await resolveStandaloneGitCredentials(settings, db, request),\n  };\n}\n\nasync function resolveStandaloneGitCredentials(\n  settings: Settings,\n  db: Database,\n  request: GitCredentialsRequest,\n): Promise<GitCredentials> {\n  const provider = request.provider ?? \"github\";\n  const registrationId = request.credentialBindingId\n    ? prReviewRegistrationIdFromCredentialBinding(request.credentialBindingId)\n    : null;\n  if (!registrationId) {\n    if (provider !== \"github\") {\n      throw new Error(`${provider} Git credentials require an explicit PR Review or host binding`);\n    }\n    if (request.purpose === \"identity\") {\n      return { workspaceId: request.workspaceId };\n    }\n    const minted = await createGitHubAppInstallationTokenWithExpiry(settings, {\n      installationId: request.installationId,\n      repositoryIds: request.repositoryIds,\n    });\n    return {\n      token: minted.token,\n      workspaceId: request.workspaceId,\n      ...(minted.expiresAt ? { expiresAt: minted.expiresAt } : {}),\n    };\n  }\n\n  const authority = await resolvePrReviewGitCredential(db, {\n    accountId: request.accountId,\n    workspaceId: request.workspaceId,\n    registrationId,\n    provider,\n    sessionId: request.sessionId,\n    rootSessionId: request.rootSessionId,\n    turnId: request.turnId,\n    attemptId: request.attemptId,\n    executionGeneration: request.executionGeneration,\n    repositoryRefs: (request.repositoryRefs ?? []).map((reference) => ({\n      uri: reference.uri,\n      ...(reference.expectedCommitSha !== undefined\n        ? { expectedCommitSha: reference.expectedCommitSha }\n        : {}),\n      ...(reference.repositoryId !== undefined ? { repositoryId: reference.repositoryId } : {}),\n      ...(reference.installationId !== undefined\n        ? { installationId: reference.installationId }\n        : {}),\n      ...(reference.projectId !== undefined ? { projectId: reference.projectId } : {}),\n    })),\n  });\n  const echoes = {\n    workspaceId: request.workspaceId,\n    ...(request.credentialBindingId ? { credentialBindingId: request.credentialBindingId } : {}),\n    provider,\n    ...(request.providerHost ? { providerHost: request.providerHost } : {}),\n  };\n  if (request.purpose === \"identity\") {\n    return authority.credentialKind === \"github_app\" ||\n      authority.credentialKind === \"managed_github_app\"\n      ? {\n          ...echoes,\n          identity: {\n            name: \"pr-review[bot]\",\n            email: `${authority.appId ?? \"pr-review\"}+pr-review[bot]@users.noreply.github.com`,\n          },\n        }\n      : echoes;\n  }\n  if (\n    authority.credentialKind === \"github_app\" ||\n    authority.credentialKind === \"managed_github_app\"\n  ) {\n    assertGitHubMintMatchesRepositoryRefs(request);\n    if (!authority.appId) {\n      throw new Error(\"PR Review GitHub App credential is unavailable\");\n    }\n    const signingSettings =\n      authority.credentialKind === \"managed_github_app\"\n        ? {\n            githubAppId: settings.prReviewGithubAppId,\n            githubAppPrivateKey: settings.prReviewGithubAppPrivateKey,\n          }\n        : manualPrReviewGitHubSigningSettings(settings, {\n            appId: authority.appId,\n            credentialEncrypted: authority.credentialEncrypted,\n          });\n    if (\n      authority.credentialKind === \"managed_github_app\" &&\n      settings.prReviewGithubAppId !== authority.appId\n    ) {\n      throw new Error(\"OpenGeni Lens App identity no longer matches this registration\");\n    }\n    const minted = await createGitHubAppInstallationTokenWithSigningSettings(signingSettings, {\n      installationId: request.installationId,\n      repositoryIds: request.repositoryIds,\n      permissions: { contents: \"read\", pull_requests: \"write\" },\n    });\n    return {\n      ...echoes,\n      token: minted.token,\n      ...(minted.expiresAt ? { expiresAt: minted.expiresAt } : {}),\n    };\n  }\n  if (authority.expiresAt && Date.parse(authority.expiresAt) <= Date.now()) {\n    throw new Error(`PR Review ${provider} provider credential has expired`);\n  }\n  const encryptionKey = environmentsEncryptionKeyBytes(settings);\n  if (!encryptionKey || !authority.credentialEncrypted) {\n    throw new Error(`PR Review ${provider} provider credential is unavailable`);\n  }\n  return {\n    ...echoes,\n    token: decryptVariableSetValue(encryptionKey, authority.credentialEncrypted),\n    ...(authority.expiresAt ? { expiresAt: authority.expiresAt } : {}),\n  };\n}\n\nfunction manualPrReviewGitHubSigningSettings(\n  settings: Settings,\n  authority: { appId: string; credentialEncrypted: string | null },\n) {\n  const encryptionKey = environmentsEncryptionKeyBytes(settings);\n  if (!encryptionKey || !authority.credentialEncrypted) {\n    throw new Error(\"PR Review GitHub App credential is unavailable\");\n  }\n  return {\n    githubAppId: authority.appId,\n    githubAppPrivateKey: decryptVariableSetValue(encryptionKey, authority.credentialEncrypted),\n  };\n}\n\nfunction assertGitHubMintMatchesRepositoryRefs(request: GitCredentialsRequest): void {\n  const refs = request.repositoryRefs ?? [];\n  const repositoryIds = refs.map((reference) => positiveInteger(reference.repositoryId));\n  const installationIds = refs.map((reference) => positiveInteger(reference.installationId));\n  if (\n    repositoryIds.some((value) => value === null) ||\n    installationIds.some((value) => value === null)\n  ) {\n    throw new Error(\"PR Review GitHub credential request lacks exact repository authority\");\n  }\n  const exactRepositoryIds = [...new Set(repositoryIds as number[])].sort(\n    (left, right) => left - right,\n  );\n  const requestedRepositoryIds = [...new Set(request.repositoryIds)].sort(\n    (left, right) => left - right,\n  );\n  const exactInstallationIds = [...new Set(installationIds as number[])];\n  if (\n    exactInstallationIds.length !== 1 ||\n    exactInstallationIds[0] !== request.installationId ||\n    exactRepositoryIds.length !== request.repositoryIds.length ||\n    exactRepositoryIds.some((value, index) => value !== requestedRepositoryIds[index])\n  ) {\n    throw new Error(\n      \"PR Review GitHub token mint authority does not match its repository resources\",\n    );\n  }\n}\n\nfunction positiveInteger(value: unknown): number | null {\n  if (typeof value === \"number\" && Number.isSafeInteger(value) && value > 0) return value;\n  if (typeof value === \"string\" && /^\\d+$/.test(value)) {\n    const parsed = Number(value);\n    return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;\n  }\n  return null;\n}\n","import {\n  armCodexCapacityWait,\n  fetchCodexUsageForAccount,\n  getCodexCapacityWaitForSession,\n  getXaiCapacityWaitForSession,\n  resolveXaiWaiterSubject,\n  listCodexAccountStatuses,\n  listPendingCodexCapacityWakeTargets,\n  reconcileCodexCapacityWait as reconcileCodexCapacityWaitDb,\n  reconcileXaiCapacityWait as reconcileXaiCapacityWaitDb,\n  type CodexCapacityWakeTarget,\n  type CodexCapacitySelectionContext,\n} from \"@opengeni/db\";\nimport { publishDurableSessionEvents } from \"@opengeni/events\";\nimport { refreshExhaustedXaiQuota } from \"./xai-quota\";\nimport {\n  authoritativeCodexCapacityResetAt,\n  codexAccountNeedsLiveCapacityRefresh,\n  codexAccountServesModel,\n  isCodexCredentialEligible,\n  isCodexCredentialHealthy,\n  selectCodexCredentialLeaseForTurn,\n} from \"./codex-rotation\";\nimport type {\n  ControlActivityServices,\n  GetCodexCapacityWaitInput,\n  ReconcileCodexCapacityWaitInput,\n  ReconcileCodexCapacityWaitResult,\n} from \"./types\";\n\ntype CodexCapacitySignalServices = {\n  signalCodexCapacityWorkflow?:\n    | NonNullable<ControlActivityServices[\"signalCodexCapacityWorkflow\"]>\n    | null\n    | undefined;\n  wakeSessionWorkflow: ControlActivityServices[\"wakeSessionWorkflow\"];\n};\n\n/**\n * Run a bounded set of usage refreshes, then repair every committed waiter\n * revision even when an individual provider refresh failed. The database\n * outbox remains authoritative; this helper only guarantees that every worker\n * refresh path reaches the same post-commit delivery seam.\n */\nexport async function refreshCodexUsageAndRepairCapacityWaiters(\n  refreshes: readonly (() => Promise<unknown>)[],\n  repairPendingWakes: () => Promise<void>,\n): Promise<void> {\n  await Promise.all(refreshes.map((refresh) => refresh().catch(() => undefined)));\n  await repairPendingWakes();\n}\n\n/** Deliver committed waiter revisions; Postgres remains the repairable outbox. */\nexport async function signalCodexCapacityWakeTargets(\n  services: CodexCapacitySignalServices,\n  targets: readonly CodexCapacityWakeTarget[],\n): Promise<void> {\n  await Promise.allSettled(\n    targets.map((target) =>\n      services.signalCodexCapacityWorkflow\n        ? services.signalCodexCapacityWorkflow({\n            accountId: target.accountId,\n            workspaceId: target.workspaceId,\n            sessionId: target.sessionId,\n            workflowId: target.workflowId,\n            wakeRevision: target.wakeRevision,\n          })\n        : services.wakeSessionWorkflow\n          ? services.wakeSessionWorkflow({\n              accountId: target.accountId,\n              workspaceId: target.workspaceId,\n              sessionId: target.sessionId,\n              workflowId: target.workflowId,\n              wakeRevision: target.workflowWakeRevision,\n            })\n          : Promise.resolve(),\n    ),\n  );\n}\n\n/** Repair a commit/signal crash edge by redelivering every pending revision. */\nexport async function signalPendingCodexCapacityWakeTargets(\n  services: CodexCapacitySignalServices & { db: ControlActivityServices[\"db\"] },\n  workspaceId: string,\n): Promise<void> {\n  const targets = await listPendingCodexCapacityWakeTargets(services.db, workspaceId).catch(\n    () => [],\n  );\n  await signalCodexCapacityWakeTargets(services, targets);\n}\n\nexport function codexCapacityDecision<TPolicyScope = never, TUnavailableDiagnostic = never>(\n  context: CodexCapacitySelectionContext<TPolicyScope, TUnavailableDiagnostic>,\n  now = new Date(),\n): ReturnType<Parameters<typeof reconcileCodexCapacityWaitDb>[2]> {\n  context = {\n    ...context,\n    accounts: context.accounts.filter(\n      (account) => !context.modelId || codexAccountServesModel(account, context.modelId, now),\n    ),\n  };\n  const selected = selectCodexCredentialLeaseForTurn({\n    context,\n    sessionId: context.sessionId,\n    sessionPinnedCredentialId: context.sessionPinnedCredentialId,\n    sessionPinSource: context.sessionPinSource,\n    sessionLastCredentialId: context.sessionLastCredentialId,\n    now,\n  });\n  const selectedAccount = selected.credentialId\n    ? context.accounts.find((account) => account.id === selected.credentialId)\n    : undefined;\n  const selectedIsAvailable =\n    selectedAccount !== undefined &&\n    (selectedAccount.id === context.existingCredentialId\n      ? isCodexCredentialHealthy(selectedAccount, now)\n      : isCodexCredentialEligible(selectedAccount, now));\n  if (selected.credentialId && selectedIsAvailable) {\n    return {\n      kind: \"available\",\n      credentialId: selected.credentialId,\n      diagnostic: {\n        connectedCount: context.accounts.length,\n        eligibleCount: context.accounts.filter(\n          (account) =>\n            (account.id === selected.credentialId ||\n              !context.failedCredentialIds?.includes(account.id)) &&\n            isCodexCredentialEligible(account, now),\n        ).length,\n      },\n    };\n  }\n  const policyCredentialId =\n    context.sessionPinSource === \"manual\" && context.sessionPinnedCredentialId\n      ? context.sessionPinnedCredentialId\n      : !context.rotationEnabled\n        ? context.activeCredentialId\n        : null;\n  const capacityAccounts = policyCredentialId\n    ? context.accounts.filter((account) => account.id === policyCredentialId)\n    : context.accounts;\n  const authoritativeReset = authoritativeCodexCapacityResetAt(capacityAccounts, now);\n  const hasReconcilableQuotaCooldown = capacityAccounts.some(\n    (account) =>\n      account.status === \"active\" &&\n      account.allocatorEnabled &&\n      account.exhaustedKind === \"quota\" &&\n      account.exhaustedUntil !== null,\n  );\n  const policyAccount = capacityAccounts[0] ?? null;\n  const mutationOnlyStatusBlock =\n    (policyAccount != null &&\n      (!policyAccount.allocatorEnabled || policyAccount.status !== \"active\")) ||\n    (authoritativeReset === null &&\n      capacityAccounts.length > 0 &&\n      capacityAccounts.every(\n        (account) => !account.allocatorEnabled || account.status !== \"active\",\n      ));\n  const noneReason =\n    selected.decision.kind === \"none\"\n      ? context.sessionPinSource === \"manual\" && context.sessionPinnedCredentialId !== null\n        ? \"manual_pin_missing\"\n        : !context.rotationEnabled && context.activeCredentialId === null\n          ? \"rotation_off_active_pointer_missing\"\n          : context.policyScope !== null && context.accounts.length === 0\n            ? \"policy_filtered_pool_empty\"\n            : context.accounts.length === 0\n              ? \"no_connected_credentials\"\n              : \"no_eligible_credential\"\n      : null;\n  return {\n    kind: \"unavailable\",\n    earliestResetAt: authoritativeReset,\n    resetKind:\n      (selected.decision.kind === \"none\" && !hasReconcilableQuotaCooldown && !authoritativeReset) ||\n      selected.decision.kind === \"allocatorDisabled\" ||\n      mutationOnlyStatusBlock\n        ? \"mutation_only\"\n        : authoritativeReset && !hasReconcilableQuotaCooldown\n          ? \"authoritative\"\n          : \"bounded_refresh\",\n    diagnostic: {\n      connectedCount: context.accounts.length,\n      allocatorEnabledCount: context.accounts.filter((account) => account.allocatorEnabled).length,\n      policyHash: context.policyHash,\n      ...(noneReason ? { reason: noneReason } : {}),\n    },\n  };\n}\n\n/**\n * Arm a durable Codex waiter and immediately re-evaluate it under the\n * allocator lock. A capacity mutation that commits just before the waiter is\n * inserted cannot signal a row that does not exist yet, so every arm site must\n * close that edge before returning an hours-away reset timer to the workflow.\n * Mutations after the arm commit still advance the waiter's wake revision.\n */\nexport async function armAndReconcileCodexCapacityWait(\n  services: Pick<ControlActivityServices, \"db\" | \"bus\">,\n  input: Parameters<typeof armCodexCapacityWait>[1],\n  options: { onArmed?: () => void } = {},\n) {\n  const armed = await armCodexCapacityWait(services.db, input);\n  if (armed.action === \"stopped\") {\n    options.onArmed?.();\n    await publishDurableSessionEvents(\n      services.bus,\n      input.workspaceId,\n      input.sessionId,\n      armed.events,\n    );\n    return armed;\n  }\n  if (armed.action !== \"waiting\") return armed;\n\n  options.onArmed?.();\n  await publishDurableSessionEvents(services.bus, input.workspaceId, input.sessionId, armed.events);\n  const evaluated = await reconcileCodexCapacityWaitDb(\n    services.db,\n    {\n      accountId: input.accountId,\n      workspaceId: input.workspaceId,\n      sessionId: input.sessionId,\n      waiterId: armed.waiter.id,\n      generation: armed.waiter.generation,\n      ...(input.now ? { now: input.now } : {}),\n    },\n    (context) => codexCapacityDecision(context),\n  );\n  await publishDurableSessionEvents(\n    services.bus,\n    input.workspaceId,\n    input.sessionId,\n    evaluated.events,\n  );\n  return evaluated;\n}\n\nasync function refreshCapacityMetadata(\n  services: ControlActivityServices,\n  workspaceId: string,\n  turnId: string,\n): Promise<void> {\n  const accounts = await listCodexAccountStatuses(services.db, workspaceId, turnId).catch(() => []);\n  const now = new Date();\n  const stale = accounts.filter(\n    (account) =>\n      account.allocatorEnabled &&\n      account.status === \"active\" &&\n      (codexAccountNeedsLiveCapacityRefresh(account, now) || account.usageCheckedAt === null),\n  );\n  await refreshCodexUsageAndRepairCapacityWaiters(\n    stale.map(\n      (account) => () =>\n        fetchCodexUsageForAccount(\n          services.db,\n          services.settings,\n          workspaceId,\n          account.id,\n          undefined,\n          turnId,\n        ),\n    ),\n    () => signalPendingCodexCapacityWakeTargets(services, workspaceId),\n  );\n}\n\nexport function createCodexCapacityActivities(services: () => Promise<ControlActivityServices>) {\n  async function getCodexCapacityWait(input: GetCodexCapacityWaitInput) {\n    const { db } = await services();\n    const codexWaiter = await getCodexCapacityWaitForSession(\n      db,\n      input.workspaceId,\n      input.sessionId,\n    );\n    const xaiWaiter = codexWaiter\n      ? null\n      : await getXaiCapacityWaitForSession(db, input.workspaceId, input.sessionId);\n    const waiter = codexWaiter ?? xaiWaiter;\n    return waiter\n      ? {\n          ...(xaiWaiter ? { provider: \"xai\" as const } : {}),\n          waiterId: waiter.id,\n          generation: waiter.generation,\n          // A capacity mutation may have committed while its Temporal signal\n          // was lost or while the workflow continued-as-new. Reconstruct that\n          // outbox edge as an immediate re-evaluation rather than waiting for\n          // the older timer.\n          nextCheckAt:\n            waiter.wakeRevision > waiter.observedWakeRevision\n              ? new Date(0).toISOString()\n              : waiter.nextCheckAt.toISOString(),\n          wakeRevision: waiter.wakeRevision,\n        }\n      : null;\n  }\n\n  async function reconcileCodexCapacityWait(\n    input: ReconcileCodexCapacityWaitInput,\n  ): Promise<ReconcileCodexCapacityWaitResult> {\n    const resolved = await services();\n    if (input.provider === \"xai\") {\n      const current = await getXaiCapacityWaitForSession(\n        resolved.db,\n        input.workspaceId,\n        input.sessionId,\n      );\n      if (!current || current.id !== input.waiterId || current.generation !== input.generation) {\n        return { action: \"stale\" };\n      }\n      const authority = await resolveXaiWaiterSubject(\n        resolved.db,\n        input.workspaceId,\n        input.sessionId,\n      );\n      if (authority)\n        await refreshExhaustedXaiQuota({\n          db: resolved.db,\n          settings: resolved.settings,\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          sessionId: input.sessionId,\n          turnId: authority.turnId,\n          subjectId: authority.subjectId,\n          authoritySnapshot: authority.snapshot,\n        });\n      const result = await reconcileXaiCapacityWaitDb(resolved.db, {\n        accountId: input.accountId,\n        workspaceId: input.workspaceId,\n        sessionId: input.sessionId,\n        waiterId: input.waiterId,\n        generation: input.generation,\n      });\n      if (result.events.length > 0) {\n        try {\n          await resolved.bus.publish(input.workspaceId, input.sessionId, result.events);\n        } catch {\n          // Postgres is authoritative; SSE replay/gap fill repairs missed fanout.\n        }\n      }\n      if (result.action === \"resumed\") return { action: \"resumed\" };\n      if (result.action === \"waiting\") {\n        return {\n          action: \"waiting\",\n          provider: \"xai\",\n          waiterId: result.waiter.id,\n          generation: result.waiter.generation,\n          nextCheckAt: result.waiter.nextCheckAt.toISOString(),\n          wakeRevision: result.waiter.wakeRevision,\n        };\n      }\n      return { action: result.action };\n    }\n    const current = await getCodexCapacityWaitForSession(\n      resolved.db,\n      input.workspaceId,\n      input.sessionId,\n    );\n    if (!current || current.id !== input.waiterId || current.generation !== input.generation) {\n      return { action: \"stale\" };\n    }\n    const boundedRefreshAttempted =\n      current.resetKind === \"bounded_refresh\" &&\n      input.cause === \"timer\" &&\n      current.nextCheckAt.getTime() <= Date.now();\n    if (boundedRefreshAttempted) {\n      // This is a bounded secret-safe control-plane quota refresh. It creates no\n      // turn, model call, user message, schedule, or entitlement action.\n      await refreshCapacityMetadata(resolved, input.workspaceId, current.blockedTurnId);\n    }\n    const result = await reconcileCodexCapacityWaitDb(\n      resolved.db,\n      {\n        accountId: input.accountId,\n        workspaceId: input.workspaceId,\n        sessionId: input.sessionId,\n        waiterId: input.waiterId,\n        generation: input.generation,\n        boundedRefreshAttempted,\n      },\n      (context) => codexCapacityDecision(context),\n    );\n    if (result.events.length > 0) {\n      try {\n        await resolved.bus.publish(input.workspaceId, input.sessionId, result.events);\n      } catch {\n        // Postgres is authoritative; SSE replay/gap fill repairs missed fanout.\n      }\n    }\n    if (result.action === \"resumed\") {\n      return { action: \"resumed\" };\n    }\n    if (result.action === \"waiting\") {\n      return {\n        action: \"waiting\",\n        waiterId: result.waiter.id,\n        generation: result.waiter.generation,\n        nextCheckAt: result.waiter.nextCheckAt.toISOString(),\n        wakeRevision: result.waiter.wakeRevision,\n      };\n    }\n    return { action: result.action };\n  }\n\n  return { getCodexCapacityWait, reconcileCodexCapacityWait };\n}\n","import { listXaiSubscriptionAccountsMetadata, updateXaiQuotaMetadata } from \"@opengeni/db\";\nimport { fetchXaiSubscriptionQuota } from \"@opengeni/xai-subscription\";\nimport { buildXaiTurnRequestAuthorization } from \"./xai-auth\";\n\n/** Refresh billing, never inference, before treating cached exhaustion as current. */\nexport async function refreshExhaustedXaiQuota(\n  input: Omit<Parameters<typeof buildXaiTurnRequestAuthorization>[0], \"credentialId\">,\n) {\n  const accounts = await listXaiSubscriptionAccountsMetadata(input.db, input);\n  for (const account of accounts) {\n    if (account.status !== \"active\" || !account.allocatorEnabled || !account.exhaustedUntil)\n      continue;\n    if (account.quotaCheckedAt && Date.now() - account.quotaCheckedAt.getTime() < 30_000) continue;\n    try {\n      const auth = await buildXaiTurnRequestAuthorization({ ...input, credentialId: account.id });\n      const quota = await fetchXaiSubscriptionQuota({ context: auth.context });\n      // Unknown billing is not evidence that a refusal has cleared.\n      if (quota.usedPercent === null) continue;\n      await updateXaiQuotaMetadata(input.db, {\n        workspaceId: input.workspaceId,\n        subjectId: input.subjectId,\n        credentialId: account.id,\n        quotaUsedPercent: quota.usedPercent,\n        quotaResetAt: quota.period?.end ?? null,\n        quotaCheckedAt: quota.checkedAt,\n        expectedExhaustedUntil: account.exhaustedUntil,\n        expectedQuotaCheckedAt: account.quotaCheckedAt,\n        exhaustedUntil:\n          quota.usedPercent < 100 ? null : (quota.period?.end ?? account.exhaustedUntil),\n      });\n    } catch {\n      // Preserve provider refusal on refresh failure; the durable timer retries.\n    }\n  }\n}\n","import { environmentsEncryptionKeyBytes, type Settings } from \"@opengeni/config\";\nimport {\n  materializeXaiCredentialForRun,\n  refreshXaiSubscriptionCredentialSerialized,\n  type Database,\n} from \"@opengeni/db\";\nimport type { XaiProviderAccountAuthoritySnapshotV1 } from \"@opengeni/contracts\";\nimport {\n  refreshXaiToken,\n  XAI_CLIENT_VERSION,\n  XAI_SUBSCRIPTION_MODEL_ID_PREFIX,\n  XaiSubscriptionReloginRequired,\n  xaiAccessTokenExpiry,\n  type XaiFetch,\n  type XaiSubscriptionRequestContext,\n  type XaiSubscriptionTokenSnapshot,\n} from \"@opengeni/xai-subscription\";\n\nexport type XaiTurnRequestAuthorization = {\n  context: XaiSubscriptionRequestContext;\n  credentialId: string;\n};\n\nexport async function buildXaiTurnRequestAuthorization(input: {\n  db: Database;\n  settings: Settings;\n  accountId: string;\n  workspaceId: string;\n  subjectId: string;\n  sessionId: string;\n  turnId: string;\n  credentialId: string;\n  authoritySnapshot: XaiProviderAccountAuthoritySnapshotV1;\n  fetch?: XaiFetch;\n  hostedSearch?: XaiSubscriptionRequestContext[\"hostedSearch\"];\n  onFinalContextUsage?: XaiSubscriptionRequestContext[\"onFinalContextUsage\"];\n  nextRequestId?: XaiSubscriptionRequestContext[\"nextRequestId\"];\n  streamIdleTimeoutMs?: XaiSubscriptionRequestContext[\"streamIdleTimeoutMs\"];\n  onModelRequestDiagnostic?: XaiSubscriptionRequestContext[\"onModelRequestDiagnostic\"];\n  onModelRequestEvent?: XaiSubscriptionRequestContext[\"onModelRequestEvent\"];\n}): Promise<XaiTurnRequestAuthorization> {\n  const encryptionKey = environmentsEncryptionKeyBytes(input.settings);\n  if (!encryptionKey) {\n    throw new Error(\"SuperGrok subscriptions require OPENGENI_ENVIRONMENTS_ENCRYPTION_KEY\");\n  }\n  let credential = await materializeXaiCredentialForRun(input.db, {\n    workspaceId: input.workspaceId,\n    subjectId: input.subjectId,\n    credentialId: input.credentialId,\n    authoritySnapshot: input.authoritySnapshot,\n    encryptionKey,\n  });\n\n  const tokenSnapshot = (): XaiSubscriptionTokenSnapshot => {\n    const accessToken = credential.secret.accessToken;\n    const userId = credential.providerAccountId;\n    if (!accessToken || !userId) {\n      throw new XaiSubscriptionReloginRequired(\n        \"The SuperGrok connection is missing a verified token identity. Reconnect the account.\",\n      );\n    }\n    return { accessToken, userId };\n  };\n\n  const refresh = async (): Promise<XaiSubscriptionTokenSnapshot> => {\n    const observedAccessToken = credential.secret.accessToken;\n    const observedRefreshToken = credential.secret.refreshToken;\n    if (!observedRefreshToken) {\n      throw new XaiSubscriptionReloginRequired(\n        \"The SuperGrok connection cannot be refreshed. Reconnect the account.\",\n      );\n    }\n    const result = await refreshXaiSubscriptionCredentialSerialized(input.db, {\n      accountId: input.accountId,\n      workspaceId: input.workspaceId,\n      subjectId: input.subjectId,\n      credentialId: input.credentialId,\n      authoritySnapshot: input.authoritySnapshot,\n      encryptionKey,\n      observedAccessToken,\n      observedRefreshToken,\n      refresh: async (current) => {\n        const refreshToken = current.secret.refreshToken;\n        if (!refreshToken) {\n          throw new XaiSubscriptionReloginRequired(\n            \"The SuperGrok connection cannot be refreshed. Reconnect the account.\",\n          );\n        }\n        const tokens = await refreshXaiToken(refreshToken, {\n          ...(input.fetch ? { fetch: input.fetch } : {}),\n        });\n        return {\n          secret: {\n            version: 1,\n            accessToken: tokens.accessToken,\n            refreshToken: tokens.refreshToken,\n          },\n          expiresAt:\n            xaiAccessTokenExpiry(tokens.accessToken) ??\n            new Date(Date.now() + tokens.expiresInSeconds * 1_000),\n        };\n      },\n    });\n    credential = result.credential;\n    return tokenSnapshot();\n  };\n\n  return {\n    credentialId: input.credentialId,\n    context: {\n      clientVersion: XAI_CLIENT_VERSION,\n      sessionId: input.sessionId,\n      turnId: input.turnId,\n      getToken: async () => tokenSnapshot(),\n      refresh,\n      resolveModel: (model) =>\n        model.startsWith(XAI_SUBSCRIPTION_MODEL_ID_PREFIX)\n          ? model.slice(XAI_SUBSCRIPTION_MODEL_ID_PREFIX.length)\n          : model,\n      ...(input.hostedSearch ? { hostedSearch: input.hostedSearch } : {}),\n      ...(input.onFinalContextUsage ? { onFinalContextUsage: input.onFinalContextUsage } : {}),\n      ...(input.nextRequestId ? { nextRequestId: input.nextRequestId } : {}),\n      ...(input.streamIdleTimeoutMs ? { streamIdleTimeoutMs: input.streamIdleTimeoutMs } : {}),\n      ...(input.onModelRequestDiagnostic\n        ? { onModelRequestDiagnostic: input.onModelRequestDiagnostic }\n        : {}),\n      ...(input.onModelRequestEvent ? { onModelRequestEvent: input.onModelRequestEvent } : {}),\n    },\n  };\n}\n","// Multi-account P3 — the PURE rotation ranker. Zero I/O: no provider calls, no\n// decrypts, no db. It consumes the already-loaded, metadata-only account list\n// (cached usage columns + the exhausted_until cooldown column) and returns the\n// account a turn should run on. The two call sites (turn-start pre-emption and\n// the reactive 429 catch in agent-turn.ts) feed its result into the unchanged\n// `selectCodexCredentialForTurn` precedence gate (pin > active). Keeping the\n// decision pure makes the whole rotation correctness story unit-testable in\n// isolation (see codex-rotation.test.ts).\nimport type {\n  CodexAccountStatus,\n  CodexCredentialLeaseSelectionContext,\n  CodexLeaseAccountStatus,\n  CodexPinSource,\n} from \"@opengeni/db\";\nimport { codexPlanExcludesModel, connectionModelAllowed } from \"@opengeni/db\";\n\nexport type CodexRotationAccount = CodexAccountStatus | CodexLeaseAccountStatus;\n\n/**\n * Model-scoped allocation filter: user connection policy plus proven plan\n * entitlement. A plan exclusion applies only until it expires (one request\n * then re-probes the account) or a different plan is observed.\n */\nexport function codexAccountServesModel(\n  account: Pick<CodexRotationAccount, \"allowedModelIds\" | \"planType\" | \"planEntitlementExclusion\">,\n  modelId: string,\n  now: Date,\n): boolean {\n  return (\n    connectionModelAllowed(account.allowedModelIds, modelId) &&\n    !codexPlanExcludesModel(account, modelId, now)\n  );\n}\n\n/** Capacity metadata worth an authoritative live read before/all through an idle. */\nexport function codexAccountNeedsLiveCapacityRefresh(\n  account: Pick<\n    CodexAccountStatus,\n    \"primaryUsedPercent\" | \"secondaryUsedPercent\" | \"exhaustedUntil\" | \"exhaustedKind\"\n  >,\n  _now: Date,\n): boolean {\n  return (\n    (account.primaryUsedPercent ?? 0) >= CODEX_USAGE_EXHAUSTED_PCT ||\n    (account.secondaryUsedPercent ?? 0) >= CODEX_USAGE_EXHAUSTED_PCT ||\n    (account.exhaustedKind === \"quota\" && account.exhaustedUntil !== null)\n  );\n}\n\nexport type CodexRotationStrategy =\n  | \"most_remaining\"\n  | \"round_robin\"\n  | \"drain_then_next\"\n  | \"sharded\";\n\n/**\n * The ONE strategy rotation-enabled workspaces run: sticky-sharded. The legacy\n * strategies are all strictly dominated post-cache-affinity — session\n * stickiness is worth ~half the prompt-cache hit rate, and round_robin /\n * most_remaining churn accounts per turn while drain_then_next concentrates\n * every concurrent session on ONE account (the measured concurrency-eviction\n * failure sharding replaced). Stored `rotation_strategy` values are therefore\n * NORMALIZED here at every read site: legacy values (and any future unknown\n * string) behave as \"sharded\". The column and the legacy branch code are kept\n * intact for old-binary rollback safety — they are simply unreachable through\n * this normalization. The API accepts-but-ignores strategy writes for the same\n * reason (no SDK caller breaks). User-facing choice is intentionally gone: the\n * remaining real intents are rotation on/off, per-account allocator\n * include/exclude, and manual pins — not algorithm selection.\n */\nexport function effectiveRotationStrategy(_stored: string): CodexRotationStrategy {\n  return \"sharded\";\n}\n\n/**\n * How a session's codex pin governs THIS turn's account selection (pure). Encodes the\n * policy-pin LIFECYCLE rule: a 'policy' pin is meaningful ONLY while the sharded policy\n * is active.\n *   • \"manual\"     — a manual pin: honored under EVERY strategy; never moved or cleared.\n *   • \"sharded\"    — the sharded policy is active and the pin is non-manual: assign / keep\n *                    / re-shard the deterministic home (covers an unpinned first turn AND\n *                    an existing policy pin).\n *   • \"clearStale\" — a 'policy' pin while the sharded policy is NOT active: IGNORE it\n *                    (never honor it as a sticky pin — that is the no-escape trap) and\n *                    clear it lazily so the session converges to the active strategy.\n *   • \"unpinned\"   — no pin (or none that applies): follow the active strategy / workspace\n *                    active pointer, unchanged.\n */\nexport type CodexPinDisposition = \"manual\" | \"sharded\" | \"clearStale\" | \"unpinned\";\n\n/** Classify a session's codex pin against the active rotation regime (see {@link CodexPinDisposition}). */\nexport function classifyCodexPin(args: {\n  pinnedCredentialId: string | null;\n  pinSource: CodexPinSource | null;\n  strategy: CodexRotationStrategy;\n  rotationEnabled: boolean;\n}): CodexPinDisposition {\n  const { pinnedCredentialId, pinSource, strategy, rotationEnabled } = args;\n  const pinned = pinnedCredentialId != null;\n  // A manual pin is sacrosanct under every strategy — checked FIRST so sharded never\n  // touches it. DEFENSE-IN-DEPTH (fail-safe toward sacredness): a pin whose source is\n  // anything OTHER than the explicit 'policy' — including a NULL source (a pre-backfill\n  // row, or any pin an unforeseen path wrote without labeling it) — is treated as\n  // MANUAL. An unlabeled pin must NEVER be policy-moved; only an explicitly-'policy' pin\n  // is re-shardable.\n  if (pinned && pinSource !== \"policy\") {\n    return \"manual\";\n  }\n  const shardedActive = rotationEnabled && effectiveRotationStrategy(strategy) === \"sharded\";\n  if (shardedActive) {\n    return \"sharded\";\n  }\n  // A policy pin outside the sharded regime is stale → clear it.\n  if (pinned && pinSource === \"policy\") {\n    return \"clearStale\";\n  }\n  return \"unpinned\";\n}\n\nexport type RotationDecision =\n  // The chosen account. `moved` ⇒ it differs from the current active pointer, so\n  // the caller must persist the pointer move (and the switch is a \"rotation\").\n  | { kind: \"active\"; credentialId: string; moved: boolean }\n  // Every eligible account is capped/cooling: idle until the soonest instant ANY\n  // account clears every blocking condition (the multi-account generalization of\n  // the single-account idle-until-reset).\n  | { kind: \"allCapped\"; earliestResetAt: Date }\n  // No connected accounts at all (preserves today's relogin-fail path).\n  | { kind: \"none\" };\n\nexport type CodexTurnLeaseDecision =\n  | RotationDecision\n  // The user's manual pin or rotation-off active pointer names a connected row\n  // that is disabled for NEW allocations. This is policy-constrained capacity,\n  // not a disconnected-account relogin failure: the accepted turn must wait\n  // until the row is re-enabled or the governing policy changes.\n  | { kind: \"allocatorDisabled\"; credentialId: string };\n\nexport type CodexTurnLeaseSelection = {\n  credentialId: string | null;\n  decision: CodexTurnLeaseDecision;\n  /** Policy/manual homes never move the workspace-global legacy pointer. */\n  advanceActivePointer?: boolean;\n};\n\n// Invariant 4 (NO THRASH / BOUNDED) safety floors. An all-capped idle MUST be a\n// positive, bounded wait — a null / elapsed / unknown reset can NEVER collapse it\n// into a 0 or a past instant (which the caller would turn into a 0 continueDelayMs\n// and a tight re-dispatch loop that hammers CPU/DB and never runs the model, so the\n// stale usage cache never self-heals).\n/** The minimum all-capped idle: continueDelayMs is clamped to at least this (never 0). */\nexport const MIN_IDLE_MS = 60_000; // 60s\n/**\n * Cooldown applied to an exhausted account whose cached reset is null / unknown\n * / already-elapsed (the turn hot path never refreshes usage, so a capped window's\n * reset reads stale). Treating it as \"available after a default cooldown\" keeps\n * availableAt — and therefore earliestReset — ALWAYS in the future.\n */\nexport const DEFAULT_RESET_COOLDOWN_MS = 60_000; // 60s\n/** Cached provider usage becomes unavailable only at actual exhaustion. */\nexport const CODEX_USAGE_EXHAUSTED_PCT = 100;\n\nfunction effectiveWindowUsed(usedPercent: number | null, resetAt: Date | null, now: Date): number {\n  // A completed provider window is eligible immediately even if its last cache\n  // sample still says 100%. This is the five-hour reset boundary—not a TTL\n  // heuristic—and avoids stranding a reset subscription while another remains\n  // healthy. A future/unknown reset keeps the cached percentage authoritative.\n  return resetAt && resetAt.getTime() <= now.getTime() ? 0 : (usedPercent ?? 0);\n}\n\n/** The worse live window: weekly binds as hard as 5h. */\nfunction bindingUsedPct(acct: CodexRotationAccount, now: Date): number {\n  return Math.max(\n    effectiveWindowUsed(acct.primaryUsedPercent, acct.primaryResetAt, now),\n    effectiveWindowUsed(acct.secondaryUsedPercent, acct.secondaryResetAt, now),\n  );\n}\n\n/**\n * Remaining quota across the binding window — the P3 rotation key. Mirrors\n * buildCodexUsageWindowFromCache's `remaining = 100 - percent`, taking the MIN\n * across both windows (the scarcer of 5h/weekly). null percent ⇒ 100 remaining.\n */\nfunction bindingRemaining(acct: CodexRotationAccount, now: Date): number {\n  const primaryRemaining =\n    100 - effectiveWindowUsed(acct.primaryUsedPercent, acct.primaryResetAt, now);\n  const secondaryRemaining =\n    100 - effectiveWindowUsed(acct.secondaryUsedPercent, acct.secondaryResetAt, now);\n  return Math.min(primaryRemaining, secondaryRemaining);\n}\n\nfunction cooling(acct: CodexRotationAccount, now: Date): boolean {\n  return acct.exhaustedUntil != null && acct.exhaustedUntil.getTime() > now.getTime();\n}\n\n/**\n * Healthy for an already-leased/in-flight turn = connected/usable (status\n * \"active\", excludes needs_relogin/error), not cooling, and not exhausted in\n * either provider window. Allocator eligibility is\n * deliberately separate so disabling NEW work cannot break an existing live lease.\n */\nexport function isCodexCredentialHealthy(acct: CodexRotationAccount, now: Date): boolean {\n  return (\n    acct.status === \"active\" &&\n    !cooling(acct, now) &&\n    bindingUsedPct(acct, now) < CODEX_USAGE_EXHAUSTED_PCT\n  );\n}\n\n/** New automatic allocation requires both health and explicit allocator eligibility. */\nexport function isCodexCredentialEligible(acct: CodexRotationAccount, now: Date): boolean {\n  return acct.allocatorEnabled && isCodexCredentialHealthy(acct, now);\n}\n\n/**\n * Public eligibility predicate (same definition as the private `eligible`): an\n * account is usable this turn iff it is connected/active, not cooling, and below\n * actual exhaustion on both windows. The worker's sharded home\n * health-check uses this to decide whether a session's existing policy pin is still\n * a valid home or must be re-sharded.\n */\nexport function isCodexAccountEligible(acct: CodexRotationAccount, now: Date): boolean {\n  return isCodexCredentialEligible(acct, now);\n}\n\n/** Deterministic 32-bit FNV-1a over a UTF-16 code-unit stream. Pure, allocation-free. */\nfunction fnv1a32(input: string): number {\n  let hash = 0x811c9dc5;\n  for (let i = 0; i < input.length; i++) {\n    hash ^= input.charCodeAt(i);\n    // 32-bit FNV prime multiply via Math.imul; `>>> 0` keeps it unsigned.\n    hash = Math.imul(hash, 0x01000193);\n  }\n  return hash >>> 0;\n}\n\n/**\n * Session-sharded HOME account (AM-6): the deterministic account a session runs on\n * under the \"sharded\" strategy — `stableAccountList[ hash(sessionId) % N ]` over the\n * ELIGIBLE (connected, not cooling, not exhausted) accounts in stable created_at\n * order (`listCodexAccountStatuses`).\n *\n * Why deterministic hash over \"least-loaded by session count\" (AM-6): it needs ZERO\n * coordination — every worker computes the same home for a given (sessionId,\n * eligible-set), so a burst of concurrent first-turns can't all read the same\n * \"least-loaded\" account and stampede it (read-then-write skew), and there is no\n * shared round-robin cursor to contend on. It is balanced in expectation.\n *\n * Re-shard (AM-5): pass the just-capped account as already-cooling (or simply let it\n * fall over its threshold) and this reshuffles the SURVIVORS deterministically — the\n * sessions that shared a capped account spread across the remaining pool by their own\n * hashes instead of all re-concentrating on one first-eligible failover.\n *\n * Returns null when NO account is eligible (the caller idles until reset).\n */\nexport function shardCredentialForSession(args: {\n  sessionId: string;\n  accounts: CodexRotationAccount[];\n  now: Date;\n}): string | null {\n  const { sessionId, accounts, now } = args;\n  const eligibles = accounts.filter((acct) => isCodexCredentialEligible(acct, now));\n  if (eligibles.length === 0) {\n    return null;\n  }\n  const index = fnv1a32(sessionId) % eligibles.length;\n  return eligibles[index]!.id;\n}\n\n/** earliestResetAt across ALL connected accounts — exported for the sharded all-capped idle. */\nexport function earliestCodexReset(accounts: CodexRotationAccount[], now: Date): Date {\n  return earliestReset(accounts, now);\n}\n\n/**\n * The proactive SHARDED home decision (pure — zero I/O, like {@link chooseRotationActive}).\n * Decides the account a session should run on THIS turn under the \"sharded\" strategy,\n * given its current POLICY pin (null on the first turn) and the accounts snapshot:\n *\n *  - keepPin: the current policy pin is still ELIGIBLE → run there, no rewrite. This\n *    is the steady-state cache-warm path (a session stays on its one home account).\n *  - reshard: no policy pin yet (first-turn lazy assignment, AM-7) OR the policy pin\n *    is capped/ineligible (proactive re-shard, AM-4) → deterministically shard over the\n *    ELIGIBLE set (AM-6) and durably (re)write the pin (`rewritePin:true`, AM-3/AM-5).\n *  - allCapped: no account is eligible → the caller idles until the earliest reset.\n *\n * A MANUAL pin is handled by the CALLER (it never reaches here); this function only\n * governs policy homes. Pure so the assignment/re-shard/keep logic is unit-testable\n * without a worker/db env; the caller wraps it with a self-heal usage refresh between\n * two evaluations exactly like chooseRotationActive's allCapped path.\n */\nexport function chooseShardedHome(args: {\n  sessionId: string;\n  currentPolicyPin: string | null;\n  accounts: CodexRotationAccount[];\n  now: Date;\n}):\n  | { kind: \"home\"; credentialId: string; rewritePin: boolean }\n  | { kind: \"allCapped\"; earliestResetAt: Date } {\n  const { sessionId, currentPolicyPin, accounts, now } = args;\n  const pinRow = currentPolicyPin\n    ? (accounts.find((acct) => acct.id === currentPolicyPin) ?? null)\n    : null;\n  if (pinRow && isCodexCredentialEligible(pinRow, now)) {\n    return { kind: \"home\", credentialId: currentPolicyPin!, rewritePin: false };\n  }\n  const home = shardCredentialForSession({ sessionId, accounts, now });\n  if (home == null) {\n    return { kind: \"allCapped\", earliestResetAt: earliestReset(accounts, now) };\n  }\n  return { kind: \"home\", credentialId: home, rewritePin: true };\n}\n\n/**\n * The soonest instant `acct` clears EVERY blocking condition: its cooldown end,\n * and each window's reset (only when that window is at/over the threshold). The\n * literal multi-account generalization of #143's single-account resetsInSeconds.\n *\n * GUARANTEE (invariant 4): the result is ALWAYS in the future. A blocking window\n * whose cached reset is null / unknown / already-elapsed does NOT contribute a past\n * instant (the old EPOCH0 seed bug that made earliestReset land in 1970 → a 0\n * continueDelayMs → a tight idle loop). Such a window is treated as clearing after a\n * default cooldown (now + DEFAULT_RESET_COOLDOWN_MS), so the caller always idles a\n * bounded positive time and re-checks (which refreshes usage and self-heals).\n */\nexport function availableAt(acct: CodexRotationAccount, now: Date): Date {\n  const nowMs = now.getTime();\n  // An unknown/elapsed block clears after a default cooldown, never in the past.\n  const defaultClear = new Date(nowMs + DEFAULT_RESET_COOLDOWN_MS);\n  const candidates: Date[] = [];\n  // An active cooldown only blocks while it is still in the future; a past cooldown\n  // self-clears (matches `cooling()`), so it must not pin availableAt to the past.\n  if (acct.exhaustedUntil != null && acct.exhaustedUntil.getTime() > nowMs) {\n    candidates.push(acct.exhaustedUntil);\n  }\n  const windowClear = (over: boolean, resetAt: Date | null | undefined) => {\n    if (!over) return;\n    // Over-threshold window: wait for its KNOWN future reset; a null/elapsed cached\n    // reset is unknown → default cooldown (never a past instant).\n    candidates.push(resetAt != null && resetAt.getTime() > nowMs ? resetAt : defaultClear);\n  };\n  windowClear(\n    effectiveWindowUsed(acct.primaryUsedPercent, acct.primaryResetAt, now) >=\n      CODEX_USAGE_EXHAUSTED_PCT,\n    acct.primaryResetAt,\n  );\n  windowClear(\n    effectiveWindowUsed(acct.secondaryUsedPercent, acct.secondaryResetAt, now) >=\n      CODEX_USAGE_EXHAUSTED_PCT,\n    acct.secondaryResetAt,\n  );\n  // Ineligible for a non-quota reason (needs_relogin / error) with no known block, or\n  // a cleared cooldown: still idle a bounded cooldown before re-check — never the past.\n  if (candidates.length === 0) {\n    return defaultClear;\n  }\n  // Clears EVERY blocking condition ⇒ the MAX of the per-condition clear instants.\n  return candidates.reduce((a, b) => (b.getTime() > a.getTime() ? b : a));\n}\n\n/** earliestResetAt across ALL connected accounts (min of each account's availableAt). */\nfunction earliestReset(accounts: CodexRotationAccount[], now: Date): Date {\n  return accounts\n    .map((acct) => availableAt(acct, now))\n    .reduce((a, b) => (b.getTime() < a.getTime() ? b : a));\n}\n\n/**\n * Earliest provider/cooldown timestamp that is actually authoritative. The\n * ranker's `availableAt` deliberately synthesizes a positive default for\n * unknown/stale state; durable capacity waits must distinguish that bounded\n * refresh backoff from a real provider reset timer.\n */\nexport function authoritativeCodexCapacityResetAt(\n  accounts: CodexRotationAccount[],\n  now: Date,\n): Date | null {\n  const future: Date[] = [];\n  for (const account of accounts) {\n    if (!account.allocatorEnabled || account.status !== \"active\") continue;\n    if (account.exhaustedUntil && account.exhaustedUntil.getTime() > now.getTime()) {\n      future.push(account.exhaustedUntil);\n    }\n    if (\n      (account.primaryUsedPercent ?? 0) >= CODEX_USAGE_EXHAUSTED_PCT &&\n      account.primaryResetAt &&\n      account.primaryResetAt.getTime() > now.getTime()\n    ) {\n      future.push(account.primaryResetAt);\n    }\n    if (\n      (account.secondaryUsedPercent ?? 0) >= CODEX_USAGE_EXHAUSTED_PCT &&\n      account.secondaryResetAt &&\n      account.secondaryResetAt.getTime() > now.getTime()\n    ) {\n      future.push(account.secondaryResetAt);\n    }\n  }\n  if (future.length === 0) return null;\n  return future.reduce((earliest, candidate) =>\n    candidate.getTime() < earliest.getTime() ? candidate : earliest,\n  );\n}\n\n/**\n * The bounded all-capped idle delay: clamp(earliestResetAt − now) into\n * [MIN_IDLE_MS, maxMs]. NEVER 0 and NEVER negative, so a null / elapsed / unknown\n * reset cannot collapse the hold into a tight re-dispatch loop (invariant 4). The two\n * agent-turn call sites (proactive turn-start + reactive 429) feed allCapped's\n * earliestResetAt through this before returning continueDelayMs.\n */\nexport function computeIdleDelayMs(earliestResetAt: Date, now: Date, maxMs: number): number {\n  const delta = earliestResetAt.getTime() - now.getTime();\n  return Math.min(Math.max(delta, MIN_IDLE_MS), maxMs);\n}\n\n/**\n * THE pure rotation ranker. `accounts` arrives in stable created_at order\n * (listCodexAccountStatuses), which deterministically breaks ranking ties.\n */\nexport function chooseRotationActive(args: {\n  rotationStrategy: CodexRotationStrategy;\n  activeCredentialId: string | null;\n  priorCredentialId: string | null;\n  accounts: CodexRotationAccount[];\n  now: Date;\n}): RotationDecision {\n  const { activeCredentialId, priorCredentialId, accounts, now } = args;\n  // Normalize at the entry point: rotation-enabled ALWAYS behaves as sharded\n  // (see effectiveRotationStrategy). args keeps the field so call sites and\n  // tests can still express stored legacy values.\n  const rotationStrategy = effectiveRotationStrategy(args.rotationStrategy);\n  const allocatableAccounts = accounts.filter((account) => account.allocatorEnabled);\n\n  if (allocatableAccounts.length === 0) {\n    return { kind: \"none\" };\n  }\n\n  const eligibles = allocatableAccounts.filter((acct) => isCodexCredentialEligible(acct, now));\n\n  // The active pointer is a cursor/manual preference, NOT a sticky lease. In\n  // particular, most_remaining must rank the whole eligible pool every turn;\n  // keeping a healthy active account sticky was the production monopolization\n  // defect fixed by credential allocator. drain_then_next remains the one explicitly sticky\n  // strategy, and a manual pin is handled by the caller as explicit policy.\n  const decide = (chosen: CodexRotationAccount | undefined): RotationDecision => {\n    if (!chosen) {\n      return {\n        kind: \"allCapped\",\n        earliestResetAt: earliestReset(allocatableAccounts, now),\n      };\n    }\n    return {\n      kind: \"active\",\n      credentialId: chosen.id,\n      moved: chosen.id !== activeCredentialId,\n    };\n  };\n\n  if (rotationStrategy === \"round_robin\") {\n    // Next eligible AFTER the prior account in list order (wrap around). When the\n    // prior account isn't found, start from the head.\n    if (eligibles.length === 0) {\n      return {\n        kind: \"allCapped\",\n        earliestResetAt: earliestReset(allocatableAccounts, now),\n      };\n    }\n    const priorIdx = priorCredentialId\n      ? allocatableAccounts.findIndex((acct) => acct.id === priorCredentialId)\n      : -1;\n    const ordered =\n      priorIdx >= 0\n        ? [\n            ...allocatableAccounts.slice(priorIdx + 1),\n            ...allocatableAccounts.slice(0, priorIdx + 1),\n          ]\n        : allocatableAccounts;\n    const chosen = ordered.find((acct) => isCodexCredentialEligible(acct, now));\n    return decide(chosen);\n  }\n\n  if (rotationStrategy === \"drain_then_next\") {\n    // Stay on the prior account while it is eligible (drain it), else first eligible.\n    const priorRow = priorCredentialId\n      ? accounts.find((acct) => acct.id === priorCredentialId)\n      : undefined;\n    if (priorRow && isCodexCredentialEligible(priorRow, now)) {\n      return decide(priorRow);\n    }\n    return decide(eligibles[0]);\n  }\n\n  // most_remaining (default + the correctness path). Across the eligible set:\n  //   1. least active leases (concurrent turns spread before quota metadata moves),\n  //   2. most remaining binding quota,\n  //   3. fewest historical selections,\n  //   4. least-recently selected, then stable created_at/id input order.\n  // Base CodexAccountStatus values (pure legacy tests/reactive rank) default the\n  // lease/cursor metadata to zero/null, preserving deterministic stable ties.\n  const activeLeases = (acct: CodexRotationAccount): number =>\n    \"activeLeaseCount\" in acct ? acct.activeLeaseCount : 0;\n  const selections = (acct: CodexRotationAccount): number =>\n    \"selectionCount\" in acct ? acct.selectionCount : 0;\n  const lastSelected = (acct: CodexRotationAccount): number =>\n    \"lastSelectedAt\" in acct && acct.lastSelectedAt ? acct.lastSelectedAt.getTime() : 0;\n  const chosen = eligibles.reduce<CodexRotationAccount | undefined>((best, acct) => {\n    if (!best) {\n      return acct;\n    }\n    if (activeLeases(acct) !== activeLeases(best)) {\n      return activeLeases(acct) < activeLeases(best) ? acct : best;\n    }\n    if (bindingRemaining(acct, now) !== bindingRemaining(best, now)) {\n      return bindingRemaining(acct, now) > bindingRemaining(best, now) ? acct : best;\n    }\n    if (selections(acct) !== selections(best)) {\n      return selections(acct) < selections(best) ? acct : best;\n    }\n    return lastSelected(acct) < lastSelected(best) ? acct : best;\n  }, undefined);\n  return decide(chosen);\n}\n\n/**\n * Full pure policy at the transaction boundary. A live same-turn lease is\n * idempotent; manual and rotation-off policy preserve pin>pointer behavior; a\n * healthy pin wins only while eligible, so quota/auth quarantine cannot trap a\n * session on one subscription.\n */\nexport function selectCodexCredentialLeaseForTurn<\n  TPolicyScope = never,\n  TUnavailableDiagnostic = never,\n>(args: {\n  context: CodexCredentialLeaseSelectionContext<TPolicyScope, TUnavailableDiagnostic>;\n  sessionId: string;\n  sessionPinnedCredentialId: string | null;\n  sessionPinSource: CodexPinSource | null;\n  sessionLastCredentialId: string | null;\n  now: Date;\n}): CodexTurnLeaseSelection {\n  const { activeCredentialId, rotationEnabled, rotationStrategy, existingCredentialId } =\n    args.context;\n  if (args.context.failoverExhausted) {\n    return { credentialId: null, decision: { kind: \"none\" }, advanceActivePointer: false };\n  }\n  // User model policy and proven plan entitlement both remove an account for\n  // this model only. A plan exclusion is provider truth, never user policy; it\n  // becomes inert when a different plan is observed or its TTL elapses.\n  const accounts = args.context.modelId\n    ? args.context.accounts.filter((account) =>\n        codexAccountServesModel(account, args.context.modelId!, args.now),\n      )\n    : args.context.accounts;\n  const failedCredentialIds = new Set(args.context.failedCredentialIds ?? []);\n  // Normalized: rotation-enabled always behaves as sharded (see\n  // effectiveRotationStrategy); the stored value is only ever legacy residue.\n  const strategy = effectiveRotationStrategy(rotationStrategy);\n  const existing = existingCredentialId\n    ? accounts.find((account) => account.id === existingCredentialId)\n    : undefined;\n  if (\n    existing &&\n    !failedCredentialIds.has(existing.id) &&\n    isCodexCredentialHealthy(existing, args.now)\n  ) {\n    return {\n      credentialId: existing.id,\n      advanceActivePointer: false,\n      decision: {\n        kind: \"active\",\n        credentialId: existing.id,\n        moved: existing.id !== activeCredentialId,\n      },\n    };\n  }\n\n  const pinDisposition = classifyCodexPin({\n    pinnedCredentialId: args.sessionPinnedCredentialId,\n    pinSource: args.sessionPinSource,\n    strategy,\n    rotationEnabled,\n  });\n\n  // A manual pin is user intent, not a policy hint. Never silently fail it over.\n  // We still reject allocator-disabled rows for a NEW turn; a healthy live\n  // same-turn lease already returned above before this admission filter.\n  if (pinDisposition === \"manual\" && args.sessionPinnedCredentialId) {\n    const pinned = accounts.find((account) => account.id === args.sessionPinnedCredentialId);\n    if (!pinned) {\n      return { credentialId: null, decision: { kind: \"none\" }, advanceActivePointer: false };\n    }\n    if (failedCredentialIds.has(pinned.id)) {\n      return { credentialId: null, decision: { kind: \"none\" }, advanceActivePointer: false };\n    }\n    if (!pinned.allocatorEnabled) {\n      return {\n        credentialId: null,\n        decision: { kind: \"allocatorDisabled\", credentialId: pinned.id },\n        advanceActivePointer: false,\n      };\n    }\n    if (isCodexCredentialHealthy(pinned, args.now)) {\n      return {\n        credentialId: pinned.id,\n        decision: { kind: \"active\", credentialId: pinned.id, moved: false },\n        advanceActivePointer: false,\n      };\n    }\n    return {\n      credentialId: null,\n      decision: {\n        kind: \"allCapped\",\n        earliestResetAt: availableAt(pinned, args.now),\n      },\n      advanceActivePointer: false,\n    };\n  }\n\n  // Pin-policy homes compose with the credential allocator by sharding only the candidate list\n  // handed to this selector. A future policy filter may therefore choose one\n  // primary/fallback pool before this ranker runs; accounts from different pools\n  // are never union-ranked here.\n  if (pinDisposition === \"sharded\") {\n    const unattemptedAccounts = accounts.filter((account) => !failedCredentialIds.has(account.id));\n    if (unattemptedAccounts.length === 0) {\n      return { credentialId: null, decision: { kind: \"none\" }, advanceActivePointer: false };\n    }\n    const shard = chooseShardedHome({\n      sessionId: args.sessionId,\n      currentPolicyPin: args.sessionPinSource === \"policy\" ? args.sessionPinnedCredentialId : null,\n      accounts: unattemptedAccounts,\n      now: args.now,\n    });\n    if (shard.kind === \"allCapped\") {\n      return {\n        credentialId: null,\n        decision: shard,\n        advanceActivePointer: false,\n      };\n    }\n    return {\n      credentialId: shard.credentialId,\n      decision: {\n        kind: \"active\",\n        credentialId: shard.credentialId,\n        moved: shard.credentialId !== activeCredentialId,\n      },\n      advanceActivePointer: false,\n    };\n  }\n\n  // A stale policy pin is intentionally ignored here and cleared by the caller\n  // after the atomic selection. Rotation-off/unpinned behavior otherwise keeps\n  // the pre-lease pin > active-pointer contract. The pointer is preference, not\n  // proof of capacity: rotation-off must wait on a capped pointer rather than\n  // falsely admitting it or silently failing over to another subscription.\n  if (!rotationEnabled) {\n    const active = activeCredentialId\n      ? accounts.find((account) => account.id === activeCredentialId)\n      : undefined;\n    if (!active) {\n      return { credentialId: null, decision: { kind: \"none\" }, advanceActivePointer: false };\n    }\n    if (failedCredentialIds.has(active.id)) {\n      return { credentialId: null, decision: { kind: \"none\" }, advanceActivePointer: false };\n    }\n    if (!active.allocatorEnabled) {\n      return {\n        credentialId: null,\n        decision: { kind: \"allocatorDisabled\", credentialId: active.id },\n        advanceActivePointer: false,\n      };\n    }\n    if (!isCodexCredentialHealthy(active, args.now)) {\n      return {\n        credentialId: null,\n        decision: { kind: \"allCapped\", earliestResetAt: availableAt(active, args.now) },\n        advanceActivePointer: false,\n      };\n    }\n    return {\n      credentialId: active.id,\n      decision: { kind: \"active\", credentialId: active.id, moved: false },\n      advanceActivePointer: false,\n    };\n  }\n\n  const priorId = args.sessionLastCredentialId ?? activeCredentialId;\n  const unattemptedAccounts = accounts.filter((account) => !failedCredentialIds.has(account.id));\n  const decision = chooseRotationActive({\n    rotationStrategy: strategy,\n    activeCredentialId,\n    // Per-session continuity is the round-robin/drain cursor. Falling back to\n    // the workspace pointer is only correct when this session has never run.\n    priorCredentialId: priorId,\n    accounts: unattemptedAccounts,\n    now: args.now,\n  });\n  return {\n    credentialId: decision.kind === \"active\" ? decision.credentialId : null,\n    decision,\n  };\n}\n","import type { DocumentServices } from \"@opengeni/documents\";\nimport {\n  resolveDocumentIndexAuthority,\n  rlsContextForWorkspace,\n  withSessionRlsActorContext,\n  withWorkspaceUsageLock,\n} from \"@opengeni/db\";\nimport type { ControlActivityServices, IndexDocumentInput } from \"./types\";\n\nexport function createDocumentActivities(\n  services: () => Promise<ControlActivityServices>,\n  resolveDocumentServices?: () => Promise<DocumentServices>,\n) {\n  return {\n    indexDocument: async (input: IndexDocumentInput) => {\n      const { db, objectStorage } = await services();\n      if (!objectStorage) {\n        throw new Error(\"object storage is not configured\");\n      }\n      if (!resolveDocumentServices) {\n        throw new Error(\"document services are not configured\");\n      }\n      const [{ getDocumentForIndexing, indexDocumentNow }, documentServices] = await Promise.all([\n        import(\"@opengeni/documents\"),\n        resolveDocumentServices(),\n      ]);\n      const context = await rlsContextForWorkspace(db, input.workspaceId);\n      if (context.accountId !== input.accountId) {\n        throw new Error(\"document account/workspace authority mismatch\");\n      }\n      return await withWorkspaceUsageLock(db, input.workspaceId, async (lockedDb) => {\n        const storedAuthority = await resolveDocumentIndexAuthority(lockedDb, input);\n        if (!storedAuthority) {\n          throw new Error(\"document authority was not found before indexing\");\n        }\n        const suppliedAuthorityFields = [\n          \"authorityKind\",\n          \"authorityWorkspaceId\",\n          \"authoritySubjectId\",\n        ] as const;\n        const suppliedCount = suppliedAuthorityFields.filter((field) =>\n          Object.prototype.hasOwnProperty.call(input, field),\n        ).length;\n        const suppliedMismatch =\n          (Object.prototype.hasOwnProperty.call(input, \"authorityKind\") &&\n            input.authorityKind !== storedAuthority.authorityKind) ||\n          (Object.prototype.hasOwnProperty.call(input, \"authorityWorkspaceId\") &&\n            input.authorityWorkspaceId !== storedAuthority.authorityWorkspaceId) ||\n          (Object.prototype.hasOwnProperty.call(input, \"authoritySubjectId\") &&\n            input.authoritySubjectId !== storedAuthority.authoritySubjectId);\n        if (suppliedMismatch) {\n          throw new Error(\"document authority changed before indexing\");\n        }\n        if (suppliedCount !== 0 && suppliedCount !== suppliedAuthorityFields.length) {\n          throw new Error(\"document authority tuple is partial\");\n        }\n        const claimedDocument = await getDocumentForIndexing(\n          lockedDb,\n          input.workspaceId,\n          input.documentId,\n        );\n        if (\n          !claimedDocument ||\n          claimedDocument.authorityKind !== storedAuthority.authorityKind ||\n          claimedDocument.authorityWorkspaceId !== storedAuthority.authorityWorkspaceId ||\n          claimedDocument.authoritySubjectId !== storedAuthority.authoritySubjectId\n        ) {\n          throw new Error(\"document authority changed before indexing\");\n        }\n        const document = await withSessionRlsActorContext(\n          {\n            subjectId: \"service:document-preparation\",\n            privateFileOwnerSubjectId:\n              storedAuthority.authorityKind === \"personal\"\n                ? storedAuthority.authoritySubjectId\n                : null,\n          },\n          () =>\n            indexDocumentNow(\n              lockedDb,\n              objectStorage,\n              input.workspaceId,\n              input.documentId,\n              documentServices,\n              { viewerSubjectId: storedAuthority.authoritySubjectId },\n            ),\n        );\n        if (\n          document.authorityKind !== storedAuthority.authorityKind ||\n          document.authorityWorkspaceId !== storedAuthority.authorityWorkspaceId ||\n          document.authoritySubjectId !== storedAuthority.authoritySubjectId\n        ) {\n          throw new Error(\"document authority changed before indexing\");\n        }\n        return document;\n      });\n    },\n  };\n}\n","import {\n  allowedFirstPartyMcpToolsForSession,\n  configuredStaticUsageLimits,\n  isModelAvailableForNewSelection,\n  policyProviderIdForModel,\n  resolveModelProvider,\n  resolveTurnExecutionPolicyV1,\n  withCodexCatalogProvider,\n  withXaiSubscriptionCatalogProvider,\n  WORKSPACE_GATEWAY_MODEL_ID_PREFIX,\n  WORKSPACE_OPENROUTER_MODEL_ID_PREFIX,\n  type Settings,\n} from \"@opengeni/config\";\nimport {\n  evaluateWorkspaceModelPolicy,\n  mergeToolRefs,\n  readTurnExecutionPolicyV1,\n  type SessionGoal,\n  type ToolRef,\n} from \"@opengeni/contracts\";\nimport { isCodexBilledModel } from \"@opengeni/codex\";\nimport {\n  enqueueSessionWorkflowWakeIfRunnable,\n  getWorkspaceModelPolicy,\n  getSessionGoal,\n  getSessionTurn,\n  materializeGoalContinuation,\n  requireSession,\n} from \"@opengeni/db\";\nimport type {\n  ControlActivityServices,\n  MaybeContinueGoalInput,\n  MaybeContinueGoalResult,\n} from \"./types\";\nimport {\n  modelFundingForAdmission,\n  resolveCatalogSettings,\n  resolveWorkspaceCatalogSettings,\n} from \"@opengeni/core\";\nimport { agentRunAdmissionDenial } from \"./agent-run-admission\";\nimport { turnCredentialRestriction } from \"./agent-turn/credential-restriction\";\n\nexport function createGoalActivities(services: () => Promise<ControlActivityServices>) {\n  async function enqueueGoalRetryWake(input: MaybeContinueGoalInput): Promise<void> {\n    const { db } = await services();\n    await enqueueSessionWorkflowWakeIfRunnable(db, {\n      accountId: input.accountId,\n      workspaceId: input.workspaceId,\n      sessionId: input.sessionId,\n      temporalWorkflowId: input.workflowId,\n      reason: \"goal_retry\",\n      // A permanently invalid goal must not become a tight workflow loop. One\n      // durable retry after a short delay preserves liveness without scanning.\n      notBefore: new Date(Date.now() + 30_000),\n    });\n  }\n\n  async function maybeContinueGoal(\n    input: MaybeContinueGoalInput,\n  ): Promise<MaybeContinueGoalResult> {\n    const service = await services();\n    const { db, bus } = service;\n    const catalogSourceSettings = service.catalogSourceSettings ?? service.settings;\n    // Cheap pre-read: the common goal-less session skips the budget queries.\n    const existingGoal = await getSessionGoal(db, input.workspaceId, input.sessionId);\n    if (!existingGoal || existingGoal.status !== \"active\") {\n      return { action: \"none\" };\n    }\n    // Loaded before the budget check so the codex-billed predicate and the\n    // synthesized turn use the SAME effective policy. An explicit per-turn\n    // model can differ from the persisted session default; follow-up goal work\n    // follows effective defaults: a started turn or a newer explicit settings\n    // boundary. Admission-rejected turns cannot poison that projection.\n    // Kept below the goal-less fast path so a non-goal session still skips the\n    // reads entirely.\n    const session = await requireSession(db, input.workspaceId, input.sessionId);\n    // Terminal sessions retain their goal for human recovery, but cannot\n    // continue. Do not validate an obsolete model before the locked guard gets\n    // the chance to reject that work; otherwise a deterministic error retries.\n    if (session.status === \"failed\" || session.status === \"cancelled\") {\n      return { action: \"none\" };\n    }\n    let settings = (await resolveCatalogSettings(db, catalogSourceSettings)).settings;\n    const inheritedContinuationModel = session.model;\n    let continuationModel = inheritedContinuationModel;\n    const continuationReasoningEffort = session.reasoningEffort;\n    const continuationLatencyMode = session.latencyMode;\n    const workspaceModelPolicy = await getWorkspaceModelPolicy(db, input.workspaceId);\n    if (\n      inheritedContinuationModel.startsWith(WORKSPACE_GATEWAY_MODEL_ID_PREFIX) ||\n      inheritedContinuationModel.startsWith(WORKSPACE_OPENROUTER_MODEL_ID_PREFIX) ||\n      session.model.startsWith(WORKSPACE_GATEWAY_MODEL_ID_PREFIX) ||\n      session.model.startsWith(WORKSPACE_OPENROUTER_MODEL_ID_PREFIX)\n    ) {\n      settings = (\n        await resolveWorkspaceCatalogSettings(db, catalogSourceSettings, {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          retainedProductModelIds: [inheritedContinuationModel, session.model],\n        })\n      ).settings;\n    }\n    const modelDecision = goalContinuationModelDecision({\n      settings,\n      workspaceModelPolicy,\n      inheritedModel: inheritedContinuationModel,\n    });\n    continuationModel = modelDecision.model;\n    let modelPolicyBlocked = modelDecision.blocked;\n    // remote_v2 sessions may only continue on Codex models — refuse synthesis\n    // that would leave the portable/non-Codex path (and mixed history shapes).\n    if (\n      !modelPolicyBlocked &&\n      session.codexCompactionMode === \"remote_v2\" &&\n      !isCodexBilledModel(continuationModel)\n    ) {\n      modelPolicyBlocked = `session is locked to Codex remote compaction v2; model \"${continuationModel}\" is not a Codex subscription model`;\n    }\n    const turnExecutionPolicy = modelPolicyBlocked\n      ? undefined\n      : resolveTurnExecutionPolicyV1(settings, {\n          modelId: continuationModel,\n          requestedModelId: null,\n          modelSource: \"continuation\",\n          reasoningEffort: continuationReasoningEffort,\n          reasoningSource: \"continuation\",\n          latencyMode: continuationLatencyMode,\n          latencyModeSource: \"continuation\",\n        });\n    const continuationPolicy: NonNullable<\n      Parameters<typeof materializeGoalContinuation>[1][\"policy\"]\n    > = {\n      model: continuationModel,\n      reasoningEffort: continuationReasoningEffort,\n      latencyMode: continuationLatencyMode,\n      ...(turnExecutionPolicy ? { turnExecutionPolicy } : {}),\n      tools: withFirstPartyTools(settings, session.tools),\n      sandboxBackend: session.sandboxBackend,\n    };\n    const decision = await materializeGoalContinuation(db, {\n      accountId: input.accountId,\n      workspaceId: input.workspaceId,\n      sessionId: input.sessionId,\n      workflowId: input.workflowId,\n      defaultMaxAutoContinuations: settings.goalMaxAutoContinuations ?? null,\n      // Pacing between consecutive no-input continuations (never a cap). The\n      // materializer re-arms a delayed outbox wake and returns `deferred`.\n      idleBackoff: {\n        scheduleMs: settings.goalIdleBackoffMs,\n        maxMs: settings.goalIdleBackoffMaxMs,\n      },\n      // A model-policy block takes precedence: it is deterministic (a budget\n      // pause can clear on its own; a policy pause needs a model/policy change)\n      // and rides the same visible-pause channel.\n      admission: async (tx, causalTurn) => {\n        // The materializer selects this exact causal row under its session/goal\n        // locks and freezes policy only after admission returns. Never infer\n        // credential authority from the generated continuation's payload.\n        const sourceTurn = causalTurn\n          ? await getSessionTurn(tx, input.workspaceId, causalTurn.id)\n          : null;\n        if (causalTurn && (!sourceTurn || sourceTurn.sessionId !== input.sessionId)) {\n          throw new Error(\"Goal continuation source turn is unavailable\");\n        }\n        const sourcePolicy = readTurnExecutionPolicyV1(sourceTurn?.metadata);\n        if (turnExecutionPolicy) {\n          const credentialRestriction = turnCredentialRestriction(\n            sourcePolicy.kind === \"valid\" ? sourcePolicy.policy : turnExecutionPolicy,\n            session.metadata,\n          );\n          continuationPolicy.turnExecutionPolicy = credentialRestriction\n            ? { ...turnExecutionPolicy, credentialRestriction }\n            : turnExecutionPolicy;\n        }\n        const budgetBlocked = modelPolicyBlocked\n          ? null\n          : await goalRunBudgetBlocked(\n              { ...service, settings, db: tx },\n              {\n                accountId: input.accountId,\n                workspaceId: input.workspaceId,\n                model: continuationModel,\n                initiatingHumanSubjectId: causalTurn?.initiatingHumanSubjectId ?? null,\n              },\n            );\n        return {\n          budgetBlocked: modelPolicyBlocked ?? budgetBlocked?.message ?? null,\n          budgetPausedReason: modelPolicyBlocked\n            ? \"limits\"\n            : (budgetBlocked?.pausedReason ?? \"limits\"),\n        };\n      },\n      policy: continuationPolicy,\n      // Long-wait guidance is only given when `wait_for_input` is actually in this\n      // session's effective first-party selection (the same source the worker\n      // signs into the delegated token and the API uses to register tools), so\n      // a pre-existing narrowed selection is never told to call a missing tool.\n      prompt: (goal, autoContinuation, cap) => {\n        const effectiveFirstPartyTools = allowedFirstPartyMcpToolsForSession(\n          settings,\n          session.firstPartyMcpTools,\n        );\n        return goalContinuationPrompt(goal, autoContinuation, cap, {\n          inputWaitAvailable: effectiveFirstPartyTools.includes(\"wait_for_input\"),\n          humanInputRespondAvailable: effectiveFirstPartyTools.includes(\n            \"session_human_input_respond\",\n          ),\n        });\n      },\n    });\n    if (decision.events.length > 0) {\n      await bus.publish(input.workspaceId, input.sessionId, decision.events);\n    }\n    return { action: decision.action };\n  }\n\n  return {\n    enqueueGoalRetryWake,\n    maybeContinueGoal,\n  };\n}\n\nexport function goalContinuationModelDecision(input: {\n  settings: Settings;\n  workspaceModelPolicy: Awaited<ReturnType<typeof getWorkspaceModelPolicy>>;\n  inheritedModel: string;\n}): { model: string; blocked: string | null } {\n  const catalogSettings = input.settings.supergrokSubscriptionEnabled\n    ? withXaiSubscriptionCatalogProvider(\n        input.settings.codexSubscriptionEnabled\n          ? withCodexCatalogProvider(input.settings)\n          : input.settings,\n      )\n    : input.settings.codexSubscriptionEnabled\n      ? withCodexCatalogProvider(input.settings)\n      : input.settings;\n  const policyBlocks = (modelId: string): boolean =>\n    input.workspaceModelPolicy !== null &&\n    !evaluateWorkspaceModelPolicy(input.workspaceModelPolicy, {\n      providerId: policyProviderIdForModel(catalogSettings, modelId),\n      modelId,\n    }).allowed;\n  if (!resolveModelProvider(catalogSettings, input.inheritedModel)) {\n    return {\n      model: input.inheritedModel,\n      blocked: `model \"${input.inheritedModel}\" is no longer in the deployment or workspace catalog; choose an available model before resuming the goal`,\n    };\n  }\n  if (!isModelAvailableForNewSelection(catalogSettings, input.inheritedModel)) {\n    return {\n      model: input.inheritedModel,\n      blocked: `model \"${input.inheritedModel}\" is retired from new selection; choose an available model before resuming the goal`,\n    };\n  }\n  if (!policyBlocks(input.inheritedModel)) {\n    return { model: input.inheritedModel, blocked: null };\n  }\n  return {\n    model: input.inheritedModel,\n    blocked: `workspace model policy blocks model \"${input.inheritedModel}\"; pick an allowed model or change the workspace model policy`,\n  };\n}\n\nexport function goalContinuationFundedWithoutCredits(\n  settings: Settings,\n  model: string,\n  codexBilled: boolean,\n): boolean {\n  return modelFundingForAdmission(settings, model, codexBilled).fundedWithoutCredits;\n}\n\nexport function goalContinuationPrompt(\n  _goal: SessionGoal,\n  _autoContinuation: number,\n  _cap: number | null,\n  options: { inputWaitAvailable?: boolean; humanInputRespondAvailable?: boolean } = {},\n): string {\n  const waitingGuidance = options.inputWaitAvailable\n    ? [\n        \"Waiting on child sessions, background commands, or external events:\",\n        \"- When further progress depends on work already in flight, do not sleep, loop, or poll session or command state repeatedly.\",\n        \"- If progress depends on work already in flight and the wait is long or uncertain, call opengeni__wait_for_input with a concrete reason and timeoutSeconds, then end your turn immediately. A preliminary status check is not required. Relevant session input or the safety deadline will start a new turn, and this goal stays active.\",\n        \"- No short execution wait is required first. Choose the safety deadline for the dependency or a meaningful monitoring cadence; an out-of-turn wait may span hours or days within the tool's limits. Do not schedule model wakeups merely to repeat reassurance. Honor explicit user/task/Skill check or update cadences within existing authority.\",\n        \"- If the immediately preceding user-facing update already reported this same unchanged wait, do not restate it or produce another equivalent final answer. Call opengeni__wait_for_input and end the turn. Report only material new state or a newly discovered blocker, unless an explicit user/task/Skill update cadence calls for an update.\",\n        \"- If you are blocked on a human decision, use opengeni__goal_pause under the blocked audit below instead.\",\n        \"\",\n      ]\n    : [];\n  const childNoticeGuidance = [\n    \"Child lifecycle notices:\",\n    \"- A `child_requires_action` update means a worker you spawned is blocked on a question or a tool approval and will not progress until it is answered. \" +\n      (options.humanInputRespondAvailable\n        ? \"If you know the answer to its question, answer it with opengeni__session_human_input_respond (pass the worker's sessionId, the requestId from the notice, and a response). \"\n        : \"\") +\n      \"Tool approvals can only be decided by a human. If you cannot resolve the blocker yourself, report the exact blocker (worker session id, the question); if it prevents further goal progress, pause under the blocked audit instead of retrying the worker or treating a human decision as an in-flight wait.\",\n    \"- `child_requires_action_resolved`, `child_paused`, `child_waiting_capacity`, and `child_progress` updates are informational: a resolved notice means the worker is moving again; a paused worker needs a human or you to resume it; a capacity wait resumes by itself; a progress note needs no action.\",\n    \"\",\n  ];\n  return [\n    \"Automatic goal continuation (generated input, not a new user request or grant of authority). Resume established work toward the full applied objective and verify its requested end state.\",\n    \"\",\n    \"Goal recovery:\",\n    \"- Use the current applied goal frozen for this turn, including its success criteria, root constraints, and report requirements, as the authoritative objective. Pending proposals and older goal revisions do not replace it; change it only through the authorized goal-mutation controls, without widening authority.\",\n    \"- Treat this continuation as re-entry into the full objective, not as a request to perform one step and stop.\",\n    \"- Resume from established work and relevant evidence rather than restarting discovery or a full reconciliation on every turn. Perform full reconciliation or a comprehensive audit when the goal, user, or applicable Skill calls for it, when uncertainty or recovery warrants it, or when required by risk or a gate.\",\n    \"- Do not rely on previous assistant claims of progress or completion; use them only to locate authoritative evidence.\",\n    \"- If authoritative evidence already proves the full objective, call opengeni__goal_complete instead of manufacturing more work.\",\n    \"- Before repeating a state-setting action, verify whether its desired state already holds, using relevant evidence that remains valid or a fresh check when needed. If it does, do not repeat it; continue the overall goal.\",\n    \"\",\n    \"Continuation behavior:\",\n    \"- This goal persists across turns. A runtime boundary can end one turn without shrinking the objective; the next continuation resumes the same full objective.\",\n    \"- Keep working until the requested end state is true and verified. Do not end the turn merely because one useful action completed, and do not redefine success around a smaller or easier task.\",\n    \"- An incomplete-status report is not a substitute for continuing the work. If the remaining problem can be investigated or addressed within your current authority, continue that work in this turn rather than returning another equivalent status-only final.\",\n    \"- Distinguish unfinished work from a blocker that actually requires human input or external change; use the existing waiting and blocked audits only when their conditions hold.\",\n    \"- Temporary rough edges are acceptable while the work is moving in the right direction. Completion still requires the requested end state to be true and verified.\",\n    \"\",\n    \"Work from evidence:\",\n    \"Use authoritative workspace and external evidence, including prior tool results that remain relevant and valid. Reuse evidence only for the requirement, scope, version, and state it actually establishes; recheck changed, stale, uncertain, or insufficient evidence. Conversation summaries and assistant claims are pointers, not proof. Do not infer progress or evidence validity merely from this continuation. Improve, replace, or remove existing work as needed within authority to satisfy the actual objective.\",\n    \"\",\n    \"Progress visibility:\",\n    \"If a planning tool is available and the next work is meaningfully multi-step, use it to show a concise plan tied to the real objective. Keep the plan current as steps complete or the next best action changes. Skip planning overhead for trivial one-step progress, and do not treat a plan update as a substitute for doing the work.\",\n    \"\",\n    \"Fidelity:\",\n    \"- Optimize each turn for movement toward the requested end state, not for the smallest stable-looking subset or easiest passing change.\",\n    \"- Do not substitute a narrower, safer, smaller, merely compatible, or easier-to-test solution because it is more likely to pass current tests.\",\n    \"- Treat alignment as movement toward the requested end state. An edit is aligned only if it makes the requested final state more true; useful-looking behavior that preserves a different end state is misaligned.\",\n    \"\",\n    \"Completion audit:\",\n    \"Before deciding that the goal is achieved, treat completion as unproven and verify it against the actual current state. This full completion audit is required even when ordinary continuation did not need full reconciliation; reuse still-valid authoritative evidence, but refresh it when the requirement or gate requires a fresh check:\",\n    \"- Derive concrete requirements from the objective and any referenced files, plans, specifications, issues, or user instructions.\",\n    \"- Preserve the applied objective's scope; do not redefine success around the work that already exists.\",\n    \"- For every explicit requirement, named artifact, command, test, gate, invariant, and deliverable, identify and inspect the authoritative evidence that would prove it.\",\n    \"- Match verification scope to requirement scope. Treat uncertain, indirect, incomplete, or missing evidence as not achieved and continue working.\",\n    \"- The audit must prove completion, not merely fail to find obvious remaining work.\",\n    \"- For document report deliverables (a document the user asked for, or a large report meant to be kept or shared), follow the Documents Skill: create the durable native document first, inspect its relevant final head after the last edit, and provide the returned artifact reference. Declare report requirements through the available goal tools before authoring and satisfy every persisted report requirement with verified artifact delivery evidence before completion. Sandbox paths and raw file IDs do not prove report delivery. If artifact tooling or access is unavailable, keep that deliverable incomplete and state the blocker; never invent proof or silently substitute a local report. Ordinary chat answers, short progress updates, source-code links, and explicitly requested local-file work remain outside this report contract.\",\n    \"\",\n    \"Do not rely on intent, partial progress, memory of earlier work, or a plausible final answer as proof of completion. Call opengeni__goal_complete with concrete evidence only when the full objective is actually achieved and no required work remains.\",\n    \"Goal evidence is a short proof for the ledger, not the deliverable. After goal_complete succeeds, finish this same turn with the requested user-facing answer, or a concise summary and retained artifact link. Goal completion stops future automatic continuations; it does not send the answer or end this turn. Never compress a report into evidence or omit the final reply.\",\n    \"Goal progress notes are short human-readable milestone statuses, not raw transcripts or continuation instructions. Keep normal spaces and summarize detail instead of squeezing words into a ledger field. The text and successCriteria fields each allow 8192 UTF-8 bytes, progressNote allows 8192 UTF-8 bytes, rationale allows 2048 UTF-8 bytes, and evidence allows 8192 characters.\",\n    \"\",\n    ...waitingGuidance,\n    ...childNoticeGuidance,\n    \"Blocked audit:\",\n    \"- Base persistence on evidence, not a fixed number of turns or retries. Investigate recoverable failures and try plausible safe alternatives within current authority when they could materially advance the goal; do not exhaust every imaginable alternative or repeat an unchanged failure without a reason to expect progress.\",\n    \"- A definitive missing permission, required human decision, or external prerequisite with no actionable authorized path can justify pausing immediately. State the concrete blocker, relevant evidence or attempted alternatives, and what must change to resume. Tool approvals remain human-only.\",\n    \"- If progress depends on work already in flight or a meaningful timed recheck, use the available waiting mechanism rather than pausing the goal; continue any independent authorized work first.\",\n    \"- Do not pause merely because the work is hard, slow, uncertain, incomplete, or would benefit from clarification.\",\n    \"- When no meaningful authorized progress remains and the blocker requires human input or an external change that cannot be handled by an available wait or monitoring mechanism, call opengeni__goal_pause with the concrete blocker instead of repeatedly reporting it while leaving the goal active.\",\n    \"\",\n    \"Do not call opengeni__goal_complete or opengeni__goal_pause unless the corresponding audit above is satisfied.\",\n  ].join(\"\\n\");\n}\n\n/**\n * Ensures a session/turn carries the first-party \"opengeni\" MCP server, which\n * hosts set_session_title, the goal tools, and the permission-gated\n * orchestration/environment/github tools. Attached to EVERY session/turn (not\n * just goal-bearing ones); built-in tool refs are not auto-added to empty tool\n * lists anywhere else in the pipeline. No-op when the server is not configured.\n */\nexport function withFirstPartyTools(settings: Settings, tools: ToolRef[]): ToolRef[] {\n  if (!settings.mcpServers.some((server) => server.id === \"opengeni\")) {\n    return tools;\n  }\n  return mergeToolRefs(tools, [{ kind: \"mcp\", id: \"opengeni\" }]);\n}\n\n/**\n * Goals share scheduled admission and pause visibly without synthesizing work.\n */\nexport async function goalRunBudgetBlocked(\n  services: Parameters<typeof agentRunAdmissionDenial>[0],\n  input: Omit<Parameters<typeof agentRunAdmissionDenial>[1], \"requestedAgentRuns\">,\n): Promise<{ pausedReason: \"limits\" | \"allowance\"; message: string } | null> {\n  const denial = await agentRunAdmissionDenial(services, { ...input, requestedAgentRuns: 1 });\n  if (denial === null) return null;\n  if (denial === \"allowance_exhausted\") {\n    return { pausedReason: \"allowance\", message: \"OpenGeni usage allowance exhausted\" };\n  }\n  const limits = configuredStaticUsageLimits(services.settings);\n  const messages = {\n    insufficient_credits: \"insufficient OpenGeni credits\",\n    monthly_model_cost_limit: `monthly model cost limit reached (${limits.maxMonthlyCostMicrosPerAccount} micros)`,\n    monthly_agent_run_limit: `monthly agent run limit reached (${limits.maxMonthlyAgentRunsPerWorkspace})`,\n  };\n  return { pausedReason: \"limits\", message: messages[denial] };\n}\n","import { configuredStaticUsageLimits, type Settings } from \"@opengeni/config\";\nimport { modelFundingForAdmission } from \"@opengeni/core\";\nimport {\n  checkWorkspaceAllowance,\n  getBillingBalance,\n  isCodexBilledTurn,\n  sumUsageQuantity,\n} from \"@opengeni/db\";\nimport type { ControlActivityServices } from \"./types\";\n\nexport type AgentRunAdmissionDenial =\n  | \"insufficient_credits\"\n  | \"allowance_exhausted\"\n  | \"monthly_model_cost_limit\"\n  | \"monthly_agent_run_limit\";\n\n/** One worker-side admission boundary for service-authored agent runs. */\nexport async function agentRunAdmissionDenial(\n  services: Pick<ControlActivityServices, \"db\" | \"entitlements\"> & { settings: Settings },\n  input: {\n    accountId: string;\n    workspaceId: string;\n    model: string;\n    requestedAgentRuns: number;\n    /** The accepted work's causal human, not the scheduler/service caller. */\n    initiatingHumanSubjectId?: string | null;\n  },\n): Promise<AgentRunAdmissionDenial | null> {\n  const codexBilled = await isCodexBilledTurn({\n    db: services.db,\n    settings: services.settings,\n    workspaceId: input.workspaceId,\n    model: input.model,\n  });\n  const externallyBilled = modelFundingForAdmission(\n    services.settings,\n    input.model,\n    codexBilled,\n  ).fundedWithoutCredits;\n  if (\n    !externallyBilled &&\n    (services.settings.billingMode === \"stripe\" || services.settings.usageLimitsMode === \"managed\")\n  ) {\n    if (services.entitlements) {\n      const decision = await services.entitlements.admitRun({\n        accountId: input.accountId,\n        workspaceId: input.workspaceId,\n        action: \"agent_run:create\",\n        quantity: input.requestedAgentRuns,\n      });\n      if (!decision.allowed) return \"insufficient_credits\";\n    } else {\n      const balance = await getBillingBalance(services.db, input.accountId);\n      if (balance.balanceMicros <= 0) return \"insufficient_credits\";\n    }\n  }\n  if (!externallyBilled) {\n    const refusal = await checkWorkspaceAllowance(services.db, {\n      accountId: input.accountId,\n      workspaceId: input.workspaceId,\n      subjectId: input.initiatingHumanSubjectId ?? null,\n    });\n    if (refusal) return refusal.code;\n  }\n  if (\n    services.settings.usageLimitsMode !== \"static\" &&\n    services.settings.usageLimitsMode !== \"managed\"\n  ) {\n    return null;\n  }\n  const limits = configuredStaticUsageLimits(services.settings);\n  if (!externallyBilled && limits.maxMonthlyCostMicrosPerAccount) {\n    const used = await sumUsageQuantity(services.db, {\n      accountId: input.accountId,\n      eventType: \"model.cost\",\n      since: startOfUtcMonth(),\n    });\n    if (used >= limits.maxMonthlyCostMicrosPerAccount) {\n      return \"monthly_model_cost_limit\";\n    }\n  }\n  if (limits.maxMonthlyAgentRunsPerWorkspace) {\n    const used = await sumUsageQuantity(services.db, {\n      workspaceId: input.workspaceId,\n      eventType: \"agent_run.created\",\n      since: startOfUtcMonth(),\n    });\n    if (used + input.requestedAgentRuns > limits.maxMonthlyAgentRunsPerWorkspace) {\n      return \"monthly_agent_run_limit\";\n    }\n  }\n  return null;\n}\n\nfunction startOfUtcMonth(): Date {\n  const now = new Date();\n  return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1));\n}\n","import { readTurnExecutionPolicyV1, type TurnExecutionPolicyV1 } from \"@opengeni/contracts\";\n\n/** Only accepted policies establish the ceiling; ordinary metadata is not authority. */\nexport function turnCredentialRestriction(\n  acceptedPolicy: TurnExecutionPolicyV1,\n  initialSessionMetadata: unknown,\n): \"developer_setup\" | undefined {\n  const initialPolicy = readTurnExecutionPolicyV1(initialSessionMetadata);\n  return acceptedPolicy.credentialRestriction === \"developer_setup\" ||\n    (initialPolicy.kind === \"valid\" &&\n      initialPolicy.policy.credentialRestriction === \"developer_setup\")\n    ? \"developer_setup\"\n    : undefined;\n}\n","import { isDeepStrictEqual } from \"node:util\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\nimport { scheduledTaskKnowledgeSource } from \"@opengeni/contracts\";\nimport {\n  freezeAgentLearningPolicy,\n  getScheduledTaskRunAcceptedExecution,\n  ensureKnowledgeSourceSyncState,\n  recordKnowledgeSourceSyncWake,\n} from \"@opengeni/db\";\nimport { createHash } from \"node:crypto\";\nimport { heartbeat } from \"@temporalio/activity\";\nimport {\n  googleDriveProviderRetryOptions,\n  type GoogleDriveProviderRetryOptions,\n  type Settings,\n} from \"@opengeni/config\";\nimport {\n  KnowledgeSourceSyncRunSummary,\n  type ScheduledTask,\n  type ScopedKnowledgeScope,\n} from \"@opengeni/contracts\";\nimport {\n  ATLASSIAN_PROVIDER_DOMAIN,\n  AtlassianConnectionMetadata,\n  atlassianScopesAllowRead,\n  type AtlassianSelectedSource,\n} from \"@opengeni/contracts/atlassian\";\nimport {\n  GoogleDriveConnectionMetadata,\n  GOOGLE_DRIVE_PROVIDER_DOMAIN,\n  googleDriveScopesAllowCapability,\n  type GoogleDriveSelectedSource,\n} from \"@opengeni/contracts/google-drive\";\nimport {\n  googleDriveKnowledgeScope,\n  inventoryGoogleDriveSource,\n  type GoogleDriveInventoryEntry,\n  type GoogleDriveInventoryCheckpoint,\n  type GoogleDriveInventoryPage,\n  type GoogleDriveInventoryProviderItem,\n  type GoogleDriveInventoryStopReason,\n} from \"@opengeni/documents/google-drive\";\nimport {\n  atlassianKnowledgeScope,\n  inventoryAtlassianSource,\n  type AtlassianInventoryEntry,\n  type AtlassianInventoryPage,\n  type AtlassianInventoryStopReason,\n} from \"@opengeni/documents/atlassian\";\nimport { addDocumentToBase, ensureDefaultBase, getDocumentBase } from \"@opengeni/documents\";\nimport {\n  appendKnowledgeDocumentVersion,\n  appendKnowledgeSourceAclVersion,\n  beginKnowledgeSyncRun,\n  beginGoogleDriveObjectAclRefresh,\n  buildConnectionTokenResolver,\n  checkpointKnowledgeSourceSync,\n  claimKnowledgeSourceSyncLease,\n  compareCanonicalDecimalProviderRevisions,\n  completeKnowledgeSyncRun,\n  completeKnowledgeSourceSyncWakeWithoutLease,\n  deauthorizeKnowledgeSourceRetrieval,\n  enqueueKnowledgeSourceSyncIndexObligation,\n  ensureKnowledgeSourceBlobFile,\n  getConnectionMetadata,\n  getKnowledgeDocumentVersionObservationForSyncAuthority,\n  getKnowledgeSyncRunForSyncAuthority,\n  getKnowledgeSourceAclForSyncAuthority,\n  getKnowledgeSourceForSyncAuthority,\n  getKnowledgeSourceObjectForSyncAuthority,\n  getKnowledgeSourceSyncIndexObligationForVersion,\n  getScheduledTask,\n  listObservedKnowledgeSourceSyncExternalObjectIds,\n  KnowledgeSourceSyncObservationFenceError,\n  reconcileKnowledgeSourceSyncCompleteScan,\n  reconcileKnowledgeSourceSyncLiveGeneration,\n  recordGoogleDriveObjectAclEvidence,\n  recordKnowledgeSourceSyncItemOutcomes,\n  recordKnowledgeSourceSyncObjectObservations,\n  recordUsageEvent,\n  releaseKnowledgeSourceSyncLeaseForRetry,\n  restoreKnowledgeSourceObject,\n  retryKnowledgeSourceSyncIndexObligation,\n  scopedKnowledgeScopeKey,\n  settleKnowledgeSourceSyncLease,\n  settleKnowledgeSourceSyncIndexObligation,\n  updateKnowledgeSourceDocumentObservationMetadata,\n  updateScheduledTaskRun,\n  upsertKnowledgeSourceObject,\n  type Database,\n  type KnowledgeSourceSyncObjectObservationResult,\n  type KnowledgeSourceSyncObservationFloor,\n} from \"@opengeni/db\";\nimport { readResponseJsonBounded } from \"@opengeni/network\";\nimport type { Observability } from \"@opengeni/observability\";\nimport { createDocumentActivities } from \"./documents\";\nimport {\n  fetchGoogleDriveProvider,\n  GoogleDriveProviderTransportError,\n  type GoogleDriveProviderOperation,\n} from \"./google-drive-provider\";\nimport type {\n  ControlActivityServices,\n  RunKnowledgeSourceSyncBatchInput,\n  RunKnowledgeSourceSyncBatchResult,\n} from \"./types\";\nimport type {\n  KnowledgeSourceSyncAclEvidence,\n  KnowledgeSourceSyncDriver,\n} from \"./knowledge-source-sync-driver\";\nimport {\n  advanceGoogleDriveChangesCursor,\n  buildGoogleDriveChangesCursor,\n  drainGoogleDriveChanges,\n  GoogleDriveChangesProtocolError,\n  GoogleDriveCursorInvalidError,\n  googleDriveFullReconciliationDue,\n  parseGoogleDriveChangesCheckpoint,\n  parseGoogleDriveChangesCursor,\n  resolveGoogleDriveChangesBoundaryId,\n  type GoogleDriveChangesCheckpoint,\n  type GoogleDriveChangesPage,\n  type GoogleDriveSyncBudget,\n} from \"./google-drive-changes\";\n\n// Carries exact-attempt liveness into every physical request, including provider retries.\nconst sourceRequestAuthority = new AsyncLocalStorage<() => Promise<unknown>>();\nconst sourceFetch: typeof fetch = Object.assign(\n  async (...args: Parameters<typeof fetch>) => {\n    await sourceRequestAuthority.getStore()?.();\n    return fetch(...args);\n  },\n  { preconnect: fetch.preconnect },\n);\n\nconst DRIVE_API_BASE = \"https://www.googleapis.com/drive/v3\";\nconst DRIVE_JSON_MAX_BYTES = 2 * 1024 * 1024;\nconst GOOGLE_DRIVE_FULL_RECONCILIATION_INTERVAL_MS = 24 * 60 * 60 * 1_000;\nconst GOOGLE_DRIVE_SYNC_INVOCATION_SLICE_MS = 30_000;\nconst GOOGLE_DRIVE_EXECUTION_CHECKPOINT_MAX_BYTES = 2 * 1024 * 1024;\nconst GOOGLE_DRIVE_ACL_FRESHNESS_MS = 26 * 60 * 60 * 1_000;\nconst GOOGLE_DRIVE_ACL_MAX_PRINCIPALS = 1_000;\nconst ATLASSIAN_API_BASE = \"https://api.atlassian.com\";\nconst ATLASSIAN_JSON_MAX_BYTES = 4 * 1024 * 1024;\n\ntype KnowledgeSyncEntry = GoogleDriveInventoryEntry | AtlassianInventoryEntry;\ntype KnowledgeSyncStopReason = GoogleDriveInventoryStopReason | AtlassianInventoryStopReason;\n\ntype GoogleDrivePermission = {\n  id: string;\n  type: \"user\" | \"group\" | \"domain\" | \"anyone\";\n  role: \"owner\" | \"organizer\" | \"fileOrganizer\" | \"writer\" | \"commenter\" | \"reader\";\n  emailAddress: string | null;\n  domain: string | null;\n  allowFileDiscovery: boolean | null;\n  expirationTime: string | null;\n  inherited: boolean;\n};\n\ntype GoogleDrivePermissionsPage = {\n  permissions: GoogleDrivePermission[];\n  nextPageToken: string | null;\n  denied: boolean;\n};\n\nexport function knowledgeSyncObservationPolicy(kind: \"google_drive\" | \"atlassian\") {\n  return kind === \"google_drive\"\n    ? { revisionOrdering: \"canonical_decimal\" as const, filterWithDriveDurability: true }\n    : { revisionOrdering: \"first_observation\" as const, filterWithDriveDurability: false };\n}\n\nexport function createKnowledgeSourceSyncActivities(\n  services: () => Promise<ControlActivityServices>,\n  resolveDocumentServices?: () => Promise<import(\"@opengeni/documents\").DocumentServices>,\n) {\n  const documentActivities = createDocumentActivities(services, resolveDocumentServices);\n  return {\n    runKnowledgeSourceSyncBatch: async (\n      input: RunKnowledgeSourceSyncBatchInput,\n    ): Promise<RunKnowledgeSourceSyncBatchResult> => {\n      const { settings, db, objectStorage, observability } = await services();\n      if (!objectStorage) throw new Error(\"object storage is not configured\");\n      // A control workflow cannot fetch sources. Only the exact ordinary\n      // agent run carrying the immutable source binding can use this adapter.\n      if (!input.agent)\n        return { action: \"failed\", bufferedWake: false, errorCode: \"accepted_agent_required\" };\n      const context = {\n        accountId: input.accountId,\n        workspaceId: input.workspaceId,\n        actor: input.agent,\n      };\n      let boundSource: ReturnType<typeof scheduledTaskKnowledgeSource> = null;\n      const authorize = async () => {\n        const policy = await freezeAgentLearningPolicy(db, context);\n        if (policy.scheduledTaskRunId !== input.scheduledTaskRunId)\n          throw new Error(\"Source fetch does not belong to this accepted agent run\");\n        if (boundSource) {\n          const [currentTask, connection] = await Promise.all([\n            getScheduledTask(db, input.workspaceId, input.taskId),\n            getConnectionMetadata(\n              db,\n              input.workspaceId,\n              boundSource.connection.connectionId,\n              boundSource.initiatingSubjectId,\n            ),\n          ]);\n          const control = currentTask?.metadata.knowledgeSourceSync as\n            | Record<string, unknown>\n            | undefined;\n          if (\n            !currentTask ||\n            currentTask.status !== \"active\" ||\n            control?.sourceEnabled === false ||\n            control?.connectionPaused === true ||\n            !isDeepStrictEqual(scheduledTaskKnowledgeSource(currentTask), boundSource) ||\n            !connection ||\n            connection.status !== \"active\" ||\n            connection.version !== boundSource.connection.connectionVersion ||\n            connection.subjectId !== boundSource.connection.ownerSubjectId\n          )\n            throw new SyncFailure(\"authority_changed\", false);\n        }\n        return policy;\n      };\n      await authorize();\n      const accepted = await getScheduledTaskRunAcceptedExecution(db, {\n        workspaceId: input.workspaceId,\n        runId: input.scheduledTaskRunId,\n      });\n      const task = accepted?.task;\n      const action = task ? scheduledTaskKnowledgeSource(task) : null;\n      const liveTask = await getScheduledTask(db, input.workspaceId, input.taskId);\n      if (\n        !task ||\n        !action ||\n        !liveTask ||\n        liveTask.status !== \"active\" ||\n        task.id !== input.taskId ||\n        task.accountId !== input.accountId ||\n        task.action.kind !== \"agent_turn\" ||\n        action.sourceId !== input.sourceId ||\n        accepted.causalHumanSubjectId !== action.initiatingSubjectId\n      ) {\n        return { action: \"failed\", bufferedWake: false };\n      }\n      boundSource = action;\n      await authorize();\n      await ensureKnowledgeSourceSyncState(db, task);\n      await recordKnowledgeSourceSyncWake(db, {\n        accountId: input.accountId,\n        workspaceId: input.workspaceId,\n        sourceId: input.sourceId,\n        scheduledTaskId: task.id,\n        scheduledTaskRunId: input.scheduledTaskRunId,\n        cause: \"scheduled\",\n        producerKey: `agent-source:${input.scheduledTaskRunId}`,\n        sourceConfigGeneration: action.sourceConfigGeneration,\n        sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n      });\n      const providerLabel =\n        action.connection.providerDomain === ATLASSIAN_PROVIDER_DOMAIN\n          ? \"atlassian\"\n          : \"google_drive\";\n      if (\n        action.controlWorkspaceId !== input.workspaceId ||\n        action.sourceConfigGeneration <= 0 ||\n        !action.providerCoordinationKey\n      ) {\n        return await failWithoutProvider(\"authority_changed\");\n      }\n      const lease = await claimKnowledgeSourceSyncLease(db, {\n        ...input,\n        overlapPolicy: input.overlapPolicy,\n      });\n      if (lease.action !== \"claimed\") {\n        observability.incrementCounter({\n          name: \"opengeni_knowledge_source_sync_runs_total\",\n          labels: { provider: providerLabel, outcome: lease.action },\n        });\n        return { action: lease.action };\n      }\n\n      let knowledgeRunId: string | null = null;\n      let activeSourceSyncGeneration: number | null = null;\n      const startedAt = Date.now();\n      const summary: KnowledgeSourceSyncRunSummary = {\n        phase: \"queued\",\n        scanned: 0,\n        imported: 0,\n        unchanged: 0,\n        skipped: 0,\n        failed: 0,\n        bytes: 0,\n        providerRequests: 0,\n        elapsedMs: 0,\n        indexed: 0,\n        aclPending: 0,\n        retryable: false,\n        limitReached: null as\n          | \"items\"\n          | \"bytes\"\n          | \"file_bytes\"\n          | \"provider_requests\"\n          | \"elapsed_time\"\n          | null,\n        checkpointed: false,\n        reconnectRequired: false,\n        failures: [],\n      };\n      observability.info(\"Knowledge source sync started\", {\n        provider: providerLabel,\n        outcome: \"started\",\n      });\n      try {\n        summary.phase = \"inventory\";\n        const resolved = await getKnowledgeSourceForSyncAuthority(db, {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          sourceId: input.sourceId,\n          initiatingSubjectId: action.initiatingSubjectId,\n        });\n        if (!resolved || resolved.source.lifecycleState !== \"active\") {\n          throw new SyncFailure(\"authority_changed\", false);\n        }\n        if (\n          scopedKnowledgeScopeKey(resolved.source.scope) !==\n          scopedKnowledgeScopeKey(action.destination)\n        ) {\n          throw new SyncFailure(\"authority_changed\", false);\n        }\n        const liveState = await reconcileKnowledgeSourceSyncLiveGeneration(db, {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          sourceId: input.sourceId,\n          scheduledTaskRunId: input.scheduledTaskRunId,\n          initiatingSubjectId: action.initiatingSubjectId,\n          sourceConfigGeneration: action.sourceConfigGeneration,\n          sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n          liveSourceSyncGeneration: resolved.source.syncGeneration,\n        });\n        activeSourceSyncGeneration = resolved.source.syncGeneration;\n        const syncOperationId = `scheduled-task-run:${input.scheduledTaskRunId}`;\n        const replayedRun = await getKnowledgeSyncRunForSyncAuthority(db, {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          sourceId: input.sourceId,\n          operationId: syncOperationId,\n          initiatingSubjectId: action.initiatingSubjectId,\n        });\n        if (replayedRun && replayedRun.state !== \"started\") {\n          const replayedSummary = KnowledgeSourceSyncRunSummary.parse(replayedRun.metadata);\n          const settlementInput: Parameters<typeof settleKnowledgeSourceSyncLease>[1] = {\n            accountId: input.accountId,\n            workspaceId: input.workspaceId,\n            sourceId: input.sourceId,\n            scheduledTaskRunId: input.scheduledTaskRunId,\n            knowledgeSyncRunId: replayedRun.id,\n            status: replayedRun.state === \"succeeded\" ? \"succeeded\" : \"failed\",\n            summary: replayedSummary,\n            error: replayedRun.errorCode,\n            sourceConfigGeneration: action.sourceConfigGeneration,\n            sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n            sourceSyncGeneration: replayedRun.inputSyncGeneration,\n            completedSourceSyncGeneration:\n              replayedRun.state === \"succeeded\" ? replayedRun.inputSyncGeneration + 1 : null,\n            ...(replayedRun.state === \"succeeded\" &&\n            replayedRun.metadata.providerCursor &&\n            typeof replayedRun.metadata.providerCursor === \"object\"\n              ? {\n                  providerCursor: replayedRun.metadata.providerCursor as Record<string, unknown>,\n                }\n              : {}),\n          };\n          const settled =\n            replayedRun.state === \"failed\" && replayedSummary.reconnectRequired\n              ? await deauthorizeAndSettleKnowledgeSourceSyncFailure(db, {\n                  deauthorization: {\n                    accountId: input.accountId,\n                    workspaceId: input.workspaceId,\n                    sourceId: input.sourceId,\n                    audience: action.destination,\n                    operationId: `knowledge-sync-deauthorize:${input.sourceId}:${action.connection.connectionVersion}:${replayedRun.errorCode ?? \"connection_reconnect_required\"}`,\n                    reasonCode: \"connection_reconnect_required\",\n                    actor: {\n                      kind: \"service\",\n                      subjectId: \"knowledge-source-sync\",\n                      initiatingHumanSubjectId: action.initiatingSubjectId,\n                    },\n                  },\n                  settlement: settlementInput,\n                })\n              : await settleKnowledgeSourceSyncLease(db, settlementInput);\n          await recordConnectorUsage(\"completed\", replayedSummary.scanned, \"item\");\n          await recordConnectorUsage(\"items\", replayedSummary.imported, \"item\");\n          await recordConnectorUsage(\"bytes\", replayedSummary.bytes, \"byte\");\n          return {\n            action: replayedRun.state === \"succeeded\" ? \"complete\" : \"failed\",\n            summary: replayedSummary,\n            ...(replayedRun.errorCode ? { errorCode: replayedRun.errorCode } : {}),\n            bufferedWake: settled.bufferedWake,\n            bufferedScheduledTaskRunId: settled.bufferedScheduledTaskRunId,\n          };\n        }\n        const provider = await resolveKnowledgeSyncProvider({\n          db,\n          settings,\n          observability,\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          action,\n          sourceId: input.sourceId,\n          externalSourceId: resolved.source.externalSourceId,\n        });\n        const selectedDestination = provider.selectedDestination;\n        const observationPolicy = knowledgeSyncObservationPolicy(provider.kind);\n\n        let aclGeneration = resolved.source.currentAclGeneration;\n        let acl = aclGeneration\n          ? await getKnowledgeSourceAclForSyncAuthority(db, {\n              accountId: input.accountId,\n              workspaceId: input.workspaceId,\n              sourceId: input.sourceId,\n              generation: aclGeneration,\n              initiatingSubjectId: action.initiatingSubjectId,\n            })\n          : null;\n        const actor = {\n          kind: \"service\" as const,\n          subjectId: \"knowledge-source-sync\",\n          initiatingHumanSubjectId: action.initiatingSubjectId,\n        };\n        if (!acl) {\n          acl = await appendKnowledgeSourceAclVersion(db, {\n            accountId: input.accountId,\n            workspaceId: input.workspaceId,\n            sourceId: input.sourceId,\n            audience: action.destination,\n            expectedSourceLifecycleGeneration: resolved.source.lifecycleGeneration,\n            expectedAclGeneration: 0,\n            aclVersion: \"opengeni-destination-v1\",\n            agentAccess: false,\n            operationId: `source-initial-acl:${input.sourceId}`,\n            reasonCode: \"initial_destination_acl\",\n            actor,\n          });\n          aclGeneration = acl.generation;\n        }\n\n        const knowledgeRun =\n          replayedRun ??\n          (await beginKnowledgeSyncRun(db, {\n            accountId: input.accountId,\n            workspaceId: input.workspaceId,\n            sourceId: input.sourceId,\n            expectedSourceLifecycleGeneration: resolved.source.lifecycleGeneration,\n            expectedSyncGeneration: resolved.source.syncGeneration,\n            inputCursor: null,\n            operationId: syncOperationId,\n            actor,\n          }));\n        knowledgeRunId = knowledgeRun.id;\n\n        const originalDriver = provider.driver;\n        const readAcl = originalDriver.readAcl;\n        const driver = {\n          ...originalDriver,\n          inventory: (...args: Parameters<typeof originalDriver.inventory>) =>\n            sourceRequestAuthority.run(authorize, () => originalDriver.inventory(...args)),\n          fetchContent: (...args: Parameters<typeof originalDriver.fetchContent>) =>\n            sourceRequestAuthority.run(authorize, () => originalDriver.fetchContent(...args)),\n          ...(readAcl\n            ? {\n                readAcl: (...args: Parameters<typeof readAcl>) =>\n                  sourceRequestAuthority.run(authorize, () => readAcl(...args)),\n              }\n            : {}),\n        };\n        await authorize();\n        const inventory = await driver.inventory(\n          lease.state.executionCheckpoint,\n          lease.state.providerCursor,\n        );\n        summary.providerRequests = inventory.providerRequests;\n        summary.elapsedMs = inventory.elapsedMs;\n\n        const base = selectedDestination.collectionId\n          ? await getDocumentBase(db, input.workspaceId, selectedDestination.collectionId)\n          : await ensureDefaultBase(db, {\n              accountId: input.accountId,\n              workspaceId: input.workspaceId,\n            });\n        if (!base) throw new SyncFailure(\"authority_changed\", false);\n\n        const durableObservations = await recordKnowledgeSourceSyncObjectObservations(db, {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          sourceId: input.sourceId,\n          scheduledTaskRunId: input.scheduledTaskRunId,\n          initiatingSubjectId: action.initiatingSubjectId,\n          scanGeneration: liveState.activeScanGeneration,\n          executionCheckpointGeneration: lease.state.executionCheckpointGeneration,\n          revisionOrdering: observationPolicy.revisionOrdering,\n          observations: inventory.entries.map((entry) => ({\n            externalObjectId: entry.externalObjectId,\n            providerRevision: entry.externalVersionId,\n            metadataHash: entryMetadataHash(entry),\n          })),\n        });\n        const entriesToProcess = observationPolicy.filterWithDriveDurability\n          ? inventory.entries.filter((entry, index) =>\n              shouldProcessGoogleDriveDurableObservation({\n                entry,\n                observation: durableObservations[index]!,\n                sourceLifecycleGeneration: resolved.source.lifecycleGeneration,\n                aclGeneration: aclGeneration!,\n              }),\n            )\n          : inventory.entries;\n        const observationFloorsById = new Map<string, KnowledgeSourceSyncObservationFloor>();\n        for (const observation of durableObservations) {\n          observationFloorsById.set(observation.externalObjectId, {\n            externalObjectId: observation.externalObjectId,\n            providerRevision: observation.providerRevision,\n            metadataHash: observation.metadataHash,\n          });\n        }\n        const observationFloors = [...observationFloorsById.values()];\n        const executionCheckpoint = mergeGoogleDriveDurableObservationFloors(\n          inventory.checkpoint,\n          observationFloors,\n          action.limits.maxItems,\n        );\n\n        const ensureVersionIndexed = async (details: {\n          entry: KnowledgeSyncEntry;\n          object: {\n            id: string;\n            lifecycleGeneration: number;\n          };\n          version: {\n            id: string;\n            versionGeneration: number;\n            documentId: string | null;\n          };\n          indexRequired: boolean;\n          obligation?: Awaited<ReturnType<typeof getKnowledgeSourceSyncIndexObligationForVersion>>;\n        }) => {\n          if (!details.version.documentId) {\n            throw new SyncFailure(\"authority_changed\", false);\n          }\n          let obligation =\n            details.obligation ??\n            (await getKnowledgeSourceSyncIndexObligationForVersion(db, {\n              accountId: input.accountId,\n              workspaceId: input.workspaceId,\n              knowledgeDocumentVersionId: details.version.id,\n              initiatingSubjectId: action.initiatingSubjectId,\n            }));\n          if (!obligation) {\n            obligation = await enqueueKnowledgeSourceSyncIndexObligation(db, {\n              accountId: input.accountId,\n              workspaceId: input.workspaceId,\n              scheduledTaskRunId: input.scheduledTaskRunId,\n              sourceId: input.sourceId,\n              sourceSyncGeneration: knowledgeRun.inputSyncGeneration,\n              initiatingSubjectId: action.initiatingSubjectId,\n              externalObjectId: details.entry.externalObjectId,\n              knowledgeSourceObjectId: details.object.id,\n              knowledgeDocumentVersionId: details.version.id,\n              documentId: details.version.documentId,\n              sourceConfigGeneration: action.sourceConfigGeneration,\n              sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n              objectLifecycleGeneration: details.object.lifecycleGeneration,\n              objectVersionGeneration: details.version.versionGeneration,\n              citationLocator: driver.citationLocator(details.entry),\n            });\n          }\n          if (obligation.documentId !== details.version.documentId) {\n            throw new SyncFailure(\"authority_changed\", false);\n          }\n          if (obligation.status === \"indexed\" && !details.indexRequired) return obligation;\n          if (obligation.status === \"indexed\" && details.indexRequired) {\n            summary.phase = \"index\";\n            try {\n              const indexedDocument = await documentActivities.indexDocument({\n                accountId: input.accountId,\n                workspaceId: input.workspaceId,\n                documentId: details.version.documentId,\n                authorityKind: action.destination.kind,\n                authorityWorkspaceId: action.destination.workspaceId,\n                authoritySubjectId: action.destination.subjectId,\n              });\n              if (indexedDocument.status !== \"ready\") {\n                throw new Error(\"document indexing did not complete\");\n              }\n            } catch {\n              throw new SyncFailure(\"indexing_failed\", true);\n            }\n            return obligation;\n          }\n          if (obligation.status === \"failed\") {\n            const retried = await retryKnowledgeSourceSyncIndexObligation(db, {\n              accountId: input.accountId,\n              workspaceId: input.workspaceId,\n              obligationId: obligation.id,\n              scheduledTaskRunId: input.scheduledTaskRunId,\n            });\n            if (retried === \"invalidated\") {\n              throw new SyncFailure(\"authority_changed\", false);\n            }\n            obligation = { ...obligation, status: retried };\n            if (retried === \"indexed\") return obligation;\n          }\n          if (obligation.status !== \"pending\") {\n            throw new SyncFailure(\"authority_changed\", false);\n          }\n          if (details.indexRequired) {\n            summary.phase = \"index\";\n            try {\n              const indexedDocument = await documentActivities.indexDocument({\n                accountId: input.accountId,\n                workspaceId: input.workspaceId,\n                documentId: details.version.documentId,\n                authorityKind: action.destination.kind,\n                authorityWorkspaceId: action.destination.workspaceId,\n                authoritySubjectId: action.destination.subjectId,\n              });\n              if (indexedDocument.status !== \"ready\") {\n                throw new Error(\"document indexing did not complete\");\n              }\n            } catch {\n              await settleKnowledgeSourceSyncIndexObligation(db, {\n                accountId: input.accountId,\n                workspaceId: input.workspaceId,\n                obligationId: obligation.id,\n                status: \"failed\",\n                failureCode: \"indexing_failed\",\n              }).catch(() => undefined);\n              throw new SyncFailure(\"indexing_failed\", true);\n            }\n          }\n          const settlement = await settleKnowledgeSourceSyncIndexObligation(db, {\n            accountId: input.accountId,\n            workspaceId: input.workspaceId,\n            obligationId: obligation.id,\n            status: \"indexed\",\n          });\n          if (settlement === \"invalidated\") {\n            throw new SyncFailure(\"authority_changed\", false);\n          }\n          return { ...obligation, status: \"indexed\" };\n        };\n\n        const recordEntryAcl = async (details: {\n          entry: KnowledgeSyncEntry;\n          object: { id: string; lifecycleGeneration: number };\n          version: { id: string; versionGeneration: number };\n          obligation: { id: string; sourceSyncGeneration: number };\n        }): Promise<{\n          aclEligibility: \"pending\" | \"eligible\" | \"denied\";\n          aclEvidence: Record<string, unknown> | null;\n        }> => {\n          if (!driver.readAcl || !provider.aclAuthority) {\n            return { aclEligibility: \"pending\", aclEvidence: null };\n          }\n          await beginGoogleDriveObjectAclRefresh(db, {\n            accountId: input.accountId,\n            workspaceId: input.workspaceId,\n            obligationId: details.obligation.id,\n            sourceSyncGeneration: details.obligation.sourceSyncGeneration,\n            sourceConfigGeneration: action.sourceConfigGeneration,\n            sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n            objectLifecycleGeneration: details.object.lifecycleGeneration,\n            objectVersionGeneration: details.version.versionGeneration,\n          });\n          const remainingProviderRequests =\n            action.limits.maxProviderRequests - summary.providerRequests;\n          if (remainingProviderRequests < 1) {\n            throw new SyncFailure(\"resource_limit\", false);\n          }\n          await authorize();\n          const evidence = await driver.readAcl(details.entry, remainingProviderRequests);\n          summary.providerRequests += evidence.providerRequests;\n          if (summary.providerRequests > action.limits.maxProviderRequests) {\n            throw new SyncFailure(\"resource_limit\", false);\n          }\n          const recorded = await recordGoogleDriveObjectAclEvidence(db, {\n            accountId: input.accountId,\n            workspaceId: input.workspaceId,\n            obligationId: details.obligation.id,\n            connectionId: provider.aclAuthority.connectionId,\n            connectionVersion: provider.aclAuthority.connectionVersion,\n            sourceGooglePermissionId: provider.aclAuthority.sourceGooglePermissionId,\n            sourceSyncGeneration: details.obligation.sourceSyncGeneration,\n            sourceConfigGeneration: action.sourceConfigGeneration,\n            sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n            objectLifecycleGeneration: details.object.lifecycleGeneration,\n            objectVersionGeneration: details.version.versionGeneration,\n            providerRevision: evidence.providerRevision,\n            driveId: evidence.driveId,\n            aclRevision: evidence.aclRevision,\n            eligibility: evidence.eligibility,\n            observedAt: evidence.observedAt,\n            expiresAt: evidence.expiresAt,\n            citationLocator: driver.citationLocator(details.entry),\n            operationId: `drive-acl:${details.obligation.id}:${evidence.aclRevision}`,\n            principals: evidence.principals,\n          });\n          return {\n            aclEligibility: evidence.eligibility,\n            aclEvidence: {\n              version: 1,\n              provider: \"google_drive\",\n              evidenceId: recorded.evidenceId,\n              aclRevision: evidence.aclRevision,\n              aclHash: recorded.aclHash,\n              observedAt: evidence.observedAt,\n              expiresAt: evidence.expiresAt,\n            },\n          };\n        };\n\n        const outcomes = [];\n        for (const entry of entriesToProcess) {\n          await authorize();\n          heartbeat({ sourceId: input.sourceId, externalObjectId: entry.externalObjectId });\n          const observationFloor = observationFloorsById.get(entry.externalObjectId);\n          if (!observationFloor) throw new SyncFailure(\"provider_payload_invalid\", false);\n          const syncObservation = {\n            scheduledTaskRunId: input.scheduledTaskRunId,\n            scanGeneration: liveState.activeScanGeneration,\n            providerRevision: observationFloor.providerRevision,\n            metadataHash: observationFloor.metadataHash,\n          };\n          summary.scanned += 1;\n          if (entry.transfer.action === \"skip\") {\n            summary.skipped += 1;\n            outcomes.push({\n              externalObjectId: entry.externalObjectId,\n              outcome: \"skipped\" as const,\n              reasonCode: entry.transfer.reason,\n            });\n            continue;\n          }\n          if (entry.transfer.action === \"traverse\") continue;\n          try {\n            const existingObject = await getKnowledgeSourceObjectForSyncAuthority(db, {\n              accountId: input.accountId,\n              workspaceId: input.workspaceId,\n              sourceId: input.sourceId,\n              externalObjectId: entry.externalObjectId,\n              initiatingSubjectId: action.initiatingSubjectId,\n            });\n            let object =\n              existingObject ??\n              (await upsertKnowledgeSourceObject(db, {\n                accountId: input.accountId,\n                workspaceId: input.workspaceId,\n                sourceId: input.sourceId,\n                externalObjectId: entry.externalObjectId,\n                operationId: `source-object:${input.sourceId}:${entry.externalObjectId}`,\n                actor,\n              }));\n            if (object.lifecycleState !== \"active\") {\n              const restored = await restoreKnowledgeSourceObject(db, {\n                accountId: input.accountId,\n                workspaceId: input.workspaceId,\n                targetId: object.id,\n                expectedGeneration: object.lifecycleGeneration,\n                operationId: `knowledge-sync-object-restore:${object.id}:${liveState.activeScanGeneration}`,\n                reasonCode: \"authoritative_scan_observed\",\n                actor,\n              });\n              object = {\n                ...object,\n                lifecycleState: \"active\",\n                lifecycleGeneration: restored.lifecycleGeneration,\n              };\n            }\n            const currentObservation = object.currentVersionId\n              ? await getKnowledgeDocumentVersionObservationForSyncAuthority(db, {\n                  accountId: input.accountId,\n                  workspaceId: input.workspaceId,\n                  versionId: object.currentVersionId,\n                  initiatingSubjectId: action.initiatingSubjectId,\n                })\n              : null;\n            const currentVersion = currentObservation?.version ?? null;\n            const metadataHash = entryMetadataHash(entry);\n            const observedProviderRevision =\n              typeof currentObservation?.sourceMetadata.providerRevision === \"string\"\n                ? currentObservation.sourceMetadata.providerRevision\n                : null;\n            const observedMetadataHash =\n              typeof currentObservation?.sourceMetadata.metadataHash === \"string\"\n                ? currentObservation.sourceMetadata.metadataHash\n                : null;\n            const observedSourceLifecycleGeneration = Number(\n              currentObservation?.sourceMetadata.sourceLifecycleGeneration ?? 0,\n            );\n            const observedObjectLifecycleGeneration = Number(\n              currentObservation?.sourceMetadata.objectLifecycleGeneration ?? 0,\n            );\n            const currentObligation = currentVersion\n              ? await getKnowledgeSourceSyncIndexObligationForVersion(db, {\n                  accountId: input.accountId,\n                  workspaceId: input.workspaceId,\n                  knowledgeDocumentVersionId: currentVersion.id,\n                  initiatingSubjectId: action.initiatingSubjectId,\n                })\n              : null;\n            if (\n              currentVersion &&\n              currentVersion.documentId &&\n              observedProviderRevision === entry.externalVersionId &&\n              observedMetadataHash === metadataHash &&\n              currentVersion.aclGeneration === aclGeneration &&\n              observedSourceLifecycleGeneration === resolved.source.lifecycleGeneration &&\n              observedObjectLifecycleGeneration === object.lifecycleGeneration &&\n              currentObligation?.status !== \"invalidated\"\n            ) {\n              await updateKnowledgeSourceDocumentObservationMetadata(db, {\n                accountId: input.accountId,\n                workspaceId: input.workspaceId,\n                initiatingSubjectId: action.initiatingSubjectId,\n                sourceId: input.sourceId,\n                expectedSourceLifecycleGeneration: resolved.source.lifecycleGeneration,\n                objectId: object.id,\n                expectedObjectLifecycleGeneration: object.lifecycleGeneration,\n                versionId: currentVersion.id,\n                documentId: currentVersion.documentId,\n                title: entry.title,\n                sourceUri: entry.sourceUri,\n                sourceVersion: entry.externalVersionId ?? currentVersion.contentSha256,\n                sourceUpdatedAt: entry.modifiedTime,\n                syncObservation,\n              });\n              const obligation = await ensureVersionIndexed({\n                entry,\n                object,\n                version: currentVersion,\n                indexRequired: (currentObservation?.documentChunkCount ?? 0) === 0,\n                obligation: currentObligation,\n              });\n              const objectAcl = await recordEntryAcl({\n                entry,\n                object,\n                version: currentVersion,\n                obligation,\n              });\n              summary.unchanged += 1;\n              outcomes.push({\n                externalObjectId: entry.externalObjectId,\n                outcome: \"unchanged\" as const,\n                contentSha256: currentVersion.contentSha256,\n                providerRevision: entry.externalVersionId,\n                metadataHash,\n                aclEligibility: objectAcl.aclEligibility,\n                aclEvidence: objectAcl.aclEvidence,\n                indexObligationId: obligation.id,\n              });\n              continue;\n            }\n            summary.phase = \"transfer\";\n            await authorize();\n            const bytes = await driver.fetchContent(entry, action.limits.maxFileBytes);\n            const contentSha256 = createHash(\"sha256\").update(bytes).digest(\"hex\");\n            const observationKey = createHash(\"sha256\")\n              .update(\n                JSON.stringify({\n                  externalObjectId: entry.externalObjectId,\n                  providerRevision: entry.externalVersionId,\n                  metadataHash,\n                  contentSha256,\n                  aclGeneration,\n                  sourceLifecycleGeneration: resolved.source.lifecycleGeneration,\n                  objectLifecycleGeneration: object.lifecycleGeneration,\n                }),\n              )\n              .digest(\"hex\");\n            if (\n              currentVersion?.contentSha256 === contentSha256 &&\n              currentVersion.documentId &&\n              currentVersion.fileId\n            ) {\n              const version = await appendKnowledgeDocumentVersion(db, {\n                accountId: input.accountId,\n                workspaceId: input.workspaceId,\n                objectId: object.id,\n                expectedSourceLifecycleGeneration: resolved.source.lifecycleGeneration,\n                expectedObjectLifecycleGeneration: object.lifecycleGeneration,\n                expectedVersionGeneration: object.versionGeneration,\n                externalVersionId: entry.externalVersionId ?? contentSha256,\n                contentSha256,\n                ingestionKey: `${entry.externalObjectId}:${observationKey}`,\n                sourceCursor: null,\n                sourceMetadata: {\n                  title: entry.title,\n                  mimeType: entry.mimeType,\n                  driveId: entry.driveId,\n                  providerRevision: entry.externalVersionId,\n                  metadataHash,\n                  aclEligibility: \"pending\",\n                  sourceLifecycleGeneration: resolved.source.lifecycleGeneration,\n                  objectLifecycleGeneration: object.lifecycleGeneration,\n                },\n                sourceCreatedAt: entry.createdTime,\n                sourceUpdatedAt: entry.modifiedTime,\n                aclVersionId: acl.id,\n                aclGeneration: aclGeneration!,\n                documentId: currentVersion.documentId,\n                fileId: currentVersion.fileId,\n                locationMetadata: { sourceUri: entry.sourceUri },\n                documentObservationMetadata: {\n                  title: entry.title,\n                  sourceUri: entry.sourceUri,\n                  sourceVersion: entry.externalVersionId ?? contentSha256,\n                  sourceUpdatedAt: entry.modifiedTime,\n                },\n                syncObservation,\n                operationId: `document-observation:${object.id}:${observationKey}`,\n                reasonCode: \"source_metadata_observed\",\n                actor,\n              });\n              await updateKnowledgeSourceDocumentObservationMetadata(db, {\n                accountId: input.accountId,\n                workspaceId: input.workspaceId,\n                initiatingSubjectId: action.initiatingSubjectId,\n                sourceId: input.sourceId,\n                expectedSourceLifecycleGeneration: resolved.source.lifecycleGeneration,\n                objectId: object.id,\n                expectedObjectLifecycleGeneration: object.lifecycleGeneration,\n                versionId: version.id,\n                documentId: currentVersion.documentId,\n                title: entry.title,\n                sourceUri: entry.sourceUri,\n                sourceVersion: entry.externalVersionId ?? contentSha256,\n                sourceUpdatedAt: entry.modifiedTime,\n                syncObservation,\n              });\n              const obligation = await ensureVersionIndexed({\n                entry,\n                object,\n                version,\n                indexRequired: (currentObservation?.documentChunkCount ?? 0) === 0,\n              });\n              const objectAcl = await recordEntryAcl({ entry, object, version, obligation });\n              summary.unchanged += 1;\n              summary.indexed += 1;\n              if (objectAcl.aclEligibility === \"pending\") summary.aclPending += 1;\n              outcomes.push({\n                externalObjectId: entry.externalObjectId,\n                outcome: \"unchanged\" as const,\n                contentSha256,\n                sizeBytes: bytes.byteLength,\n                providerRevision: entry.externalVersionId,\n                metadataHash,\n                aclEligibility: objectAcl.aclEligibility,\n                aclEvidence: objectAcl.aclEvidence,\n                indexObligationId: obligation.id,\n              });\n              continue;\n            }\n            const fileId = deterministicUuid(\n              `knowledge-blob:${input.accountId}:${input.workspaceId}:${contentSha256}`,\n            );\n            const objectKey = `workspaces/${input.workspaceId}/knowledge/blobs/${contentSha256}`;\n            await objectStorage.putObject({\n              key: objectKey,\n              contentType: entry.transfer.contentType,\n              body: bytes,\n              sha256: contentSha256,\n            });\n            const file = await ensureKnowledgeSourceBlobFile(db, {\n              accountId: input.accountId,\n              workspaceId: input.workspaceId,\n              fileId,\n              filename: entry.transfer.filename,\n              safeFilename: safeFilename(entry.transfer.filename),\n              contentType: entry.transfer.contentType,\n              sizeBytes: bytes.byteLength,\n              sha256: contentSha256,\n              bucket: objectStorage.bucket,\n              objectKey,\n            });\n            const document = await addDocumentToBase(db, {\n              accountId: input.accountId,\n              workspaceId: input.workspaceId,\n              baseId: base.id,\n              fileId: file.id,\n              title: entry.title,\n              sourceKind: \"document\",\n              sourceUri: entry.sourceUri,\n              sourceExternalId: entry.externalObjectId,\n              sourceTitle: entry.title,\n              sourceCreatedAt: entry.createdTime ?? undefined,\n              sourceUpdatedAt: entry.modifiedTime ?? undefined,\n              sourceVersion: entry.externalVersionId ?? contentSha256,\n              knowledgeSourceIdentity: deterministicUuid(\n                `knowledge-source-version:${object.id}:${observationKey}`,\n              ),\n              authorityKind: action.destination.kind,\n              createdBy: action.initiatingSubjectId,\n              initiatingSubjectId: action.initiatingSubjectId,\n              organizationAuthorityGranted: action.destination.kind === \"organization\",\n              agentAccess: false,\n              curationStatus: \"none\",\n              access: { viewerSubjectId: action.initiatingSubjectId },\n            });\n            const version = await appendKnowledgeDocumentVersion(db, {\n              accountId: input.accountId,\n              workspaceId: input.workspaceId,\n              objectId: object.id,\n              expectedSourceLifecycleGeneration: resolved.source.lifecycleGeneration,\n              expectedObjectLifecycleGeneration: object.lifecycleGeneration,\n              expectedVersionGeneration: object.versionGeneration,\n              externalVersionId: entry.externalVersionId ?? contentSha256,\n              contentSha256,\n              ingestionKey: `${entry.externalObjectId}:${observationKey}`,\n              sourceCursor: null,\n              sourceMetadata: {\n                title: entry.title,\n                mimeType: entry.mimeType,\n                driveId: entry.driveId,\n                providerRevision: entry.externalVersionId,\n                metadataHash,\n                aclEligibility: \"pending\",\n                sourceLifecycleGeneration: resolved.source.lifecycleGeneration,\n                objectLifecycleGeneration: object.lifecycleGeneration,\n              },\n              sourceCreatedAt: entry.createdTime,\n              sourceUpdatedAt: entry.modifiedTime,\n              aclVersionId: acl.id,\n              aclGeneration: aclGeneration!,\n              documentId: document.id,\n              fileId: file.id,\n              locationMetadata: { sourceUri: entry.sourceUri },\n              syncObservation,\n              operationId: `document-version:${object.id}:${observationKey}`,\n              reasonCode: \"source_content_observed\",\n              actor,\n            });\n            const obligation = await ensureVersionIndexed({\n              entry,\n              object,\n              version,\n              indexRequired: true,\n            });\n            const objectAcl = await recordEntryAcl({ entry, object, version, obligation });\n            summary.indexed += 1;\n            summary.imported += 1;\n            if (objectAcl.aclEligibility === \"pending\") summary.aclPending += 1;\n            summary.bytes += bytes.byteLength;\n            outcomes.push({\n              externalObjectId: entry.externalObjectId,\n              outcome: \"imported\" as const,\n              contentSha256,\n              sizeBytes: bytes.byteLength,\n              providerRevision: entry.externalVersionId,\n              metadataHash,\n              aclEligibility: objectAcl.aclEligibility,\n              aclEvidence: objectAcl.aclEvidence,\n              indexObligationId: obligation.id,\n            });\n          } catch (error) {\n            if (error instanceof KnowledgeSourceSyncObservationFenceError) {\n              throw new SyncFailure(\"provider_payload_invalid\", false);\n            }\n            const message = boundedError(error);\n            const itemFailure =\n              error instanceof SyncFailure\n                ? error\n                : new SyncFailure(\"item_processing_failed\", false);\n            summary.failed += 1;\n            summary.retryable ||= itemFailure.retryable;\n            if (summary.failures.length < action.limits.maxFailureDetails) {\n              summary.failures.push({\n                externalObjectId: entry.externalObjectId,\n                code: itemFailure.code,\n                retryable: itemFailure.retryable,\n                message,\n              });\n            }\n            outcomes.push({\n              externalObjectId: entry.externalObjectId,\n              outcome: \"failed\" as const,\n              reasonCode: itemFailure.code,\n              detail: message,\n              providerRevision: entry.externalVersionId,\n              metadataHash: entryMetadataHash(entry),\n              aclEligibility: \"pending\" as const,\n            });\n          }\n        }\n        await recordKnowledgeSourceSyncItemOutcomes(db, {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          scheduledTaskRunId: input.scheduledTaskRunId,\n          knowledgeSyncRunId: knowledgeRun.id,\n          sourceId: input.sourceId,\n          sourceConfigGeneration: action.sourceConfigGeneration,\n          sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n          outcomes,\n        });\n\n        if (inventory.status === \"paused\" && inventory.checkpoint) {\n          if (\n            inventory.stopReason === \"provider_error\" ||\n            inventory.stopReason === \"incomplete_search\"\n          ) {\n            throw new SyncFailure(\n              inventory.stopReason === \"provider_error\"\n                ? \"provider_unavailable\"\n                : \"provider_payload_invalid\",\n              inventory.stopReason === \"provider_error\",\n            );\n          }\n          if (inventory.hardLimitReached) {\n            summary.limitReached = inventoryLimit(inventory.stopReason);\n            throw new SyncFailure(\"resource_limit\", false);\n          }\n          if (inventory.stopReason !== \"elapsed_time_limit\") {\n            summary.limitReached = inventoryLimit(inventory.stopReason);\n            throw new SyncFailure(\"resource_limit\", false);\n          }\n          summary.checkpointed = true;\n          summary.phase = \"checkpoint\";\n          await checkpointKnowledgeSourceSync(db, {\n            accountId: input.accountId,\n            workspaceId: input.workspaceId,\n            sourceId: input.sourceId,\n            scheduledTaskRunId: input.scheduledTaskRunId,\n            sourceConfigGeneration: action.sourceConfigGeneration,\n            sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n            executionCheckpoint: executionCheckpoint as Record<string, unknown>,\n            observationFence: {\n              initiatingSubjectId: action.initiatingSubjectId,\n              scanGeneration: liveState.activeScanGeneration,\n              executionCheckpointGeneration: lease.state.executionCheckpointGeneration,\n              observations: observationFloors,\n            },\n          });\n          return { action: \"continue\", summary };\n        }\n\n        const tombstonedExternalObjectIds = inventory.authoritativeFullScan\n          ? await reconcileKnowledgeSourceSyncCompleteScan(db, {\n              accountId: input.accountId,\n              workspaceId: input.workspaceId,\n              sourceId: input.sourceId,\n              scheduledTaskRunId: input.scheduledTaskRunId,\n              initiatingSubjectId: action.initiatingSubjectId,\n              sourceSyncGeneration: knowledgeRun.inputSyncGeneration,\n              sourceConfigGeneration: action.sourceConfigGeneration,\n              sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n              scanGeneration: liveState.activeScanGeneration,\n            })\n          : [];\n        if (tombstonedExternalObjectIds.length > 0) {\n          summary.skipped += tombstonedExternalObjectIds.length;\n          await recordKnowledgeSourceSyncItemOutcomes(db, {\n            accountId: input.accountId,\n            workspaceId: input.workspaceId,\n            scheduledTaskRunId: input.scheduledTaskRunId,\n            knowledgeSyncRunId: knowledgeRun.id,\n            sourceId: input.sourceId,\n            sourceConfigGeneration: action.sourceConfigGeneration,\n            sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n            outcomes: tombstonedExternalObjectIds.map((externalObjectId) => ({\n              externalObjectId,\n              outcome: \"tombstoned\" as const,\n              reasonCode: \"authoritative_scan_absent\",\n              aclEligibility: \"denied\" as const,\n            })),\n          });\n        }\n\n        await completeKnowledgeSyncRun(db, {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          initiatingSubjectId: action.initiatingSubjectId,\n          runId: knowledgeRun.id,\n          state: \"succeeded\",\n          outputCursor: null,\n          watermark: new Date().toISOString(),\n          metadata: { ...summary, providerCursor: inventory.providerCursor },\n          reasonCode: \"scheduled_source_sync\",\n        });\n        summary.phase = \"completed\";\n        summary.elapsedMs = Date.now() - startedAt;\n        const settled = await settleKnowledgeSourceSyncLease(db, {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          sourceId: input.sourceId,\n          scheduledTaskRunId: input.scheduledTaskRunId,\n          knowledgeSyncRunId: knowledgeRun.id,\n          status: \"succeeded\",\n          summary,\n          sourceConfigGeneration: action.sourceConfigGeneration,\n          sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n          sourceSyncGeneration: knowledgeRun.inputSyncGeneration,\n          completedSourceSyncGeneration: knowledgeRun.inputSyncGeneration + 1,\n          providerCursor: inventory.providerCursor,\n          observationFence: {\n            initiatingSubjectId: action.initiatingSubjectId,\n            scanGeneration: liveState.activeScanGeneration,\n            executionCheckpointGeneration: lease.state.executionCheckpointGeneration,\n            observations: observationFloors,\n          },\n        });\n        await recordConnectorUsage(\"completed\", summary.scanned, \"item\");\n        await recordConnectorUsage(\"items\", summary.imported, \"item\");\n        await recordConnectorUsage(\"bytes\", summary.bytes, \"byte\");\n        observability.incrementCounter({\n          name: \"opengeni_knowledge_source_sync_runs_total\",\n          labels: { provider: providerLabel, outcome: \"succeeded\" },\n        });\n        observability.incrementCounter({\n          name: \"opengeni_knowledge_source_sync_items_total\",\n          labels: { provider: providerLabel, outcome: \"imported\" },\n          amount: summary.imported,\n        });\n        for (const outcome of [\"unchanged\", \"skipped\", \"failed\"] as const) {\n          observability.incrementCounter({\n            name: \"opengeni_knowledge_source_sync_items_total\",\n            labels: { provider: providerLabel, outcome },\n            amount: summary[outcome],\n          });\n        }\n        observability.incrementCounter({\n          name: \"opengeni_knowledge_source_sync_bytes_total\",\n          labels: { provider: providerLabel },\n          amount: summary.bytes,\n        });\n        recordSyncHealthTelemetry(observability, providerLabel, summary, \"succeeded\");\n        return {\n          action: \"complete\",\n          summary,\n          bufferedWake: settled.bufferedWake,\n          bufferedScheduledTaskRunId: settled.bufferedScheduledTaskRunId,\n        };\n      } catch (error) {\n        const failure =\n          error instanceof SyncFailure ? error : new SyncFailure(\"internal_failure\", false);\n        summary.phase = \"failed\";\n        summary.retryable ||= failure.retryable;\n        summary.elapsedMs = Date.now() - startedAt;\n        summary.reconnectRequired = failure.reconnectRequired;\n        summary.failed = Math.max(summary.failed, 1);\n        if (summary.failures.length === 0) {\n          summary.failures.push({\n            externalObjectId: input.sourceId,\n            code: failure.code,\n            retryable: failure.retryable,\n            message: boundedError(error),\n          });\n        }\n        if (knowledgeRunId) {\n          await completeKnowledgeSyncRun(db, {\n            accountId: input.accountId,\n            workspaceId: input.workspaceId,\n            initiatingSubjectId: action.initiatingSubjectId,\n            runId: knowledgeRunId,\n            state: \"failed\",\n            metadata: summary,\n            errorCode: failure.code,\n            reasonCode: \"scheduled_source_sync_failed\",\n          }).catch(() => undefined);\n        }\n        const settlementInput: Parameters<typeof settleKnowledgeSourceSyncLease>[1] = {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          sourceId: input.sourceId,\n          scheduledTaskRunId: input.scheduledTaskRunId,\n          knowledgeSyncRunId: knowledgeRunId,\n          status: \"failed\",\n          summary,\n          error: failure.code,\n          sourceConfigGeneration: action.sourceConfigGeneration,\n          sourceLifecycleGeneration: action.sourceLifecycleGeneration,\n          sourceSyncGeneration: activeSourceSyncGeneration ?? lease.state.sourceSyncGeneration,\n          // Failed or incomplete provider walks are not authoritative scans.\n          // A later scheduled run must restart from the root under a fresh\n          // observation generation before it can infer object absence.\n          executionCheckpoint: null,\n        };\n        const settled = failure.reconnectRequired\n          ? await deauthorizeAndSettleKnowledgeSourceSyncFailure(db, {\n              deauthorization: {\n                accountId: input.accountId,\n                workspaceId: input.workspaceId,\n                sourceId: input.sourceId,\n                audience: action.destination,\n                operationId: `knowledge-sync-deauthorize:${input.sourceId}:${action.connection.connectionVersion}:${failure.code}`,\n                reasonCode: \"connection_reconnect_required\",\n                actor: {\n                  kind: \"service\",\n                  subjectId: \"knowledge-source-sync\",\n                  initiatingHumanSubjectId: action.initiatingSubjectId,\n                },\n              },\n              settlement: settlementInput,\n            })\n          : await settleKnowledgeSourceSyncLease(db, settlementInput);\n        await recordConnectorUsage(\"completed\", summary.scanned, \"item\");\n        await recordConnectorUsage(\"items\", summary.imported, \"item\");\n        await recordConnectorUsage(\"bytes\", summary.bytes, \"byte\");\n        observability.incrementCounter({\n          name: \"opengeni_knowledge_source_sync_runs_total\",\n          labels: { provider: providerLabel, outcome: \"failed\" },\n        });\n        for (const outcome of [\"imported\", \"unchanged\", \"skipped\", \"failed\"] as const) {\n          observability.incrementCounter({\n            name: \"opengeni_knowledge_source_sync_items_total\",\n            labels: { provider: providerLabel, outcome },\n            amount: summary[outcome],\n          });\n        }\n        observability.incrementCounter({\n          name: \"opengeni_knowledge_source_sync_bytes_total\",\n          labels: { provider: providerLabel },\n          amount: summary.bytes,\n        });\n        recordSyncHealthTelemetry(observability, providerLabel, summary, \"failed\", failure);\n        return {\n          action: \"failed\",\n          summary,\n          errorCode: failure.code,\n          bufferedWake: settled.bufferedWake,\n          bufferedScheduledTaskRunId: settled.bufferedScheduledTaskRunId,\n        };\n      }\n\n      async function failWithoutProvider(code: string): Promise<RunKnowledgeSourceSyncBatchResult> {\n        const terminalSummary = {\n          phase: \"failed\" as const,\n          scanned: 0,\n          imported: 0,\n          unchanged: 0,\n          skipped: 0,\n          failed: 1,\n          bytes: 0,\n          providerRequests: 0,\n          elapsedMs: 0,\n          indexed: 0,\n          aclPending: 0,\n          retryable: false,\n          limitReached: null,\n          checkpointed: false,\n          reconnectRequired: false,\n          failures: [\n            {\n              externalObjectId: input.sourceId,\n              code: \"authority_changed\" as const,\n              retryable: false,\n              message: code,\n            },\n          ],\n        };\n        await updateScheduledTaskRun(db, input.workspaceId, input.scheduledTaskRunId, {\n          knowledgeSummary: terminalSummary,\n        }).catch(() => undefined);\n        await completeKnowledgeSourceSyncWakeWithoutLease(db, {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          sourceId: input.sourceId,\n          scheduledTaskRunId: input.scheduledTaskRunId,\n        }).catch(() => undefined);\n        await recordConnectorUsage(\"completed\", 0, \"item\").catch(() => undefined);\n        observability.incrementCounter({\n          name: \"opengeni_knowledge_source_sync_runs_total\",\n          labels: { provider: \"unknown\", outcome: \"failed_preflight\" },\n        });\n        return { action: \"failed\", bufferedWake: false, summary: terminalSummary, errorCode: code };\n      }\n\n      async function recordConnectorUsage(\n        kind: \"completed\" | \"items\" | \"bytes\",\n        quantity: number,\n        unit: string,\n      ) {\n        if (quantity === 0 && kind !== \"completed\") return;\n        await recordUsageEvent(db, {\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          eventType: `knowledge_source_sync.${kind}`,\n          quantity: kind === \"completed\" ? 1 : quantity,\n          unit,\n          sourceResourceType: \"scheduled_task_run\",\n          sourceResourceId: input.scheduledTaskRunId,\n          initiator: { kind: \"service\", subjectId: \"knowledge-source-sync\" },\n          initiatorContext: {\n            scheduledTaskId: input.taskId,\n            scheduledTaskRunId: input.scheduledTaskRunId,\n          },\n          origin: \"scheduled_task\",\n          idempotencyKey: `usage:knowledge_source_sync.${kind}:${input.scheduledTaskRunId}`,\n        });\n      }\n    },\n  };\n}\n\n/**\n * Permission loss must fail closed, while the exact source lease must never be\n * stranded by a deauthorization error. If deauthorization fails, release the\n * lease without settling the wake/run and surface the error so Temporal retries\n * this DB-only safety obligation. Terminal settlement is allowed only after\n * deauthorization succeeds.\n */\nexport async function deauthorizeAndSettleKnowledgeSourceSyncFailure(\n  db: Database,\n  input: {\n    deauthorization: Parameters<typeof deauthorizeKnowledgeSourceRetrieval>[1];\n    settlement: Parameters<typeof settleKnowledgeSourceSyncLease>[1];\n  },\n): Promise<Awaited<ReturnType<typeof settleKnowledgeSourceSyncLease>>> {\n  try {\n    await deauthorizeKnowledgeSourceRetrieval(db, input.deauthorization);\n  } catch (error) {\n    await releaseKnowledgeSourceSyncLeaseForRetry(db, {\n      accountId: input.settlement.accountId,\n      workspaceId: input.settlement.workspaceId,\n      sourceId: input.settlement.sourceId,\n      scheduledTaskRunId: input.settlement.scheduledTaskRunId,\n    });\n    throw error;\n  }\n  return await settleKnowledgeSourceSyncLease(db, input.settlement);\n}\n\nexport type GoogleDriveSyncProviderPort = {\n  now?: () => number;\n  getStartPageToken: (driveId: string | null) => Promise<string>;\n  listChanges: (\n    pageToken: string,\n    driveId: string | null,\n    pageSize: number,\n  ) => Promise<GoogleDriveChangesPage>;\n  getFile: (fileId: string) => Promise<GoogleDriveInventoryProviderItem | null>;\n  listChildren: (input: {\n    folderId: string;\n    driveId: string | null;\n    pageToken: string | null;\n    pageSize: number;\n  }) => Promise<GoogleDriveInventoryPage>;\n  listPermissions?: (input: {\n    fileId: string;\n    pageToken: string | null;\n    pageSize: number;\n  }) => Promise<GoogleDrivePermissionsPage>;\n};\n\nasync function resolveKnowledgeSyncProvider(input: {\n  db: Database;\n  settings: Settings;\n  observability: Observability;\n  accountId: string;\n  workspaceId: string;\n  action: Extract<ScheduledTask[\"action\"], { kind: \"knowledge_source_sync\" }>;\n  sourceId: string;\n  externalSourceId: string;\n}): Promise<{\n  kind: \"google_drive\" | \"atlassian\";\n  selectedDestination: NonNullable<\n    GoogleDriveSelectedSource[\"destination\"] | AtlassianSelectedSource[\"destination\"]\n  >;\n  driver: KnowledgeSourceSyncDriver<KnowledgeSyncEntry, KnowledgeSyncStopReason>;\n  aclAuthority: {\n    connectionId: string;\n    connectionVersion: number;\n    sourceGooglePermissionId: string;\n  } | null;\n}> {\n  const { action } = input;\n  const connection = await getConnectionMetadata(\n    input.db,\n    input.workspaceId,\n    action.connection.connectionId,\n    action.initiatingSubjectId,\n  );\n  if (\n    !connection ||\n    connection.accountId !== input.accountId ||\n    connection.subjectId !== action.connection.ownerSubjectId ||\n    connection.providerDomain.toLowerCase() !== action.connection.providerDomain.toLowerCase() ||\n    connection.kind !== action.connection.kind ||\n    connection.version < action.connection.connectionVersion ||\n    connection.status !== \"active\"\n  ) {\n    throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  }\n\n  const googleInitial =\n    connection.providerDomain === GOOGLE_DRIVE_PROVIDER_DOMAIN\n      ? GoogleDriveConnectionMetadata.safeParse(connection.metadata)\n      : null;\n  const atlassianInitial =\n    connection.providerDomain === ATLASSIAN_PROVIDER_DOMAIN\n      ? AtlassianConnectionMetadata.safeParse(connection.metadata)\n      : null;\n  const initialAtlassianMetadata = atlassianInitial?.success ? atlassianInitial.data : null;\n  if (!googleInitial?.success && !initialAtlassianMetadata) {\n    throw new SyncFailure(\"provider_rejected\", false);\n  }\n  if (\n    googleInitial?.success &&\n    !googleDriveScopesAllowCapability(connection.grantedScopes, \"recursive_source_sync\")\n  ) {\n    throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  }\n  if (atlassianInitial?.success && !atlassianScopesAllowRead(connection.grantedScopes)) {\n    throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  }\n  const initialLifecycle = googleInitial?.success\n    ? googleInitial.data.lifecycle\n    : initialAtlassianMetadata!.lifecycle;\n  if (initialLifecycle?.state && initialLifecycle.state !== \"active\") {\n    throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  }\n  const initialSource = googleInitial?.success\n    ? selectedDriveSource(googleInitial.data, input.externalSourceId)\n    : selectedAtlassianSource(initialAtlassianMetadata!, input.externalSourceId);\n  if (\n    !initialSource ||\n    !initialSource.syncEnabled ||\n    initialSource.configGeneration !== action.sourceConfigGeneration ||\n    !initialSource.destination ||\n    scopedKnowledgeScopeKey(\n      googleInitial?.success\n        ? googleDriveKnowledgeScope(initialSource.destination)\n        : atlassianKnowledgeScope(initialSource.destination),\n    ) !== scopedKnowledgeScopeKey(action.destination)\n  ) {\n    throw new SyncFailure(\"authority_changed\", false);\n  }\n\n  const token = await buildConnectionTokenResolver(\n    input.db,\n    input.settings,\n  )({\n    workspaceId: input.workspaceId,\n    subjectId: action.initiatingSubjectId,\n    serverId: \"knowledge-source-sync\",\n    connectionRef: {\n      connectionId: connection.id,\n      providerDomain: connection.providerDomain,\n      kind: connection.kind,\n      subjectScope: \"subject\",\n    },\n    destinationUrl:\n      connection.providerDomain === ATLASSIAN_PROVIDER_DOMAIN\n        ? ATLASSIAN_API_BASE\n        : \"https://www.googleapis.com\",\n  });\n  if (token.status !== \"ok\") {\n    throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  }\n  const resolvedConnection = await getConnectionMetadata(\n    input.db,\n    input.workspaceId,\n    action.connection.connectionId,\n    action.initiatingSubjectId,\n  );\n  if (\n    !resolvedConnection ||\n    resolvedConnection.accountId !== input.accountId ||\n    resolvedConnection.subjectId !== action.connection.ownerSubjectId ||\n    resolvedConnection.providerDomain.toLowerCase() !==\n      action.connection.providerDomain.toLowerCase() ||\n    resolvedConnection.kind !== action.connection.kind ||\n    resolvedConnection.version !== token.connectionVersion ||\n    resolvedConnection.status !== \"active\"\n  ) {\n    throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  }\n  const authorization = token.headers.Authorization ?? token.headers.authorization;\n  if (resolvedConnection.providerDomain === GOOGLE_DRIVE_PROVIDER_DOMAIN) {\n    const metadata = GoogleDriveConnectionMetadata.parse(resolvedConnection.metadata);\n    if (\n      !googleDriveSyncProviderAccessAllowed({\n        connectionVersion: resolvedConnection.version,\n        resolvedConnectionVersion: token.connectionVersion,\n        connectionStatus: resolvedConnection.status,\n        lifecycleState: metadata.lifecycle?.state,\n        grantedScopes: resolvedConnection.grantedScopes,\n      })\n    ) {\n      throw new SyncFailure(\"connection_reconnect_required\", true, true);\n    }\n    const source = selectedDriveSource(metadata, input.externalSourceId);\n    if (!validSelectedSource(source, action, googleDriveKnowledgeScope)) {\n      throw new SyncFailure(\"authority_changed\", false);\n    }\n    return {\n      kind: \"google_drive\",\n      selectedDestination: source.destination!,\n      aclAuthority: {\n        connectionId: resolvedConnection.id,\n        connectionVersion: resolvedConnection.version,\n        sourceGooglePermissionId: metadata.googlePermissionId,\n      },\n      driver: googleDriveSyncDriver({\n        actionProviderCoordinationKey: action.providerCoordinationKey,\n        metadata,\n        selectedSource: source,\n        accountId: input.accountId,\n        workspaceId: input.workspaceId,\n        initiatingSubjectId: action.initiatingSubjectId,\n        authorization,\n        retry: googleDriveProviderRetryOptions(input.settings),\n        observability: input.observability,\n        limits: action.limits,\n        connectionId: resolvedConnection.id,\n        fullReconciliationIntervalMs: GOOGLE_DRIVE_FULL_RECONCILIATION_INTERVAL_MS,\n        observedExternalObjectIds: async (externalObjectIds) =>\n          await listObservedKnowledgeSourceSyncExternalObjectIds(input.db, {\n            accountId: input.accountId,\n            workspaceId: input.workspaceId,\n            sourceId: input.sourceId,\n            externalObjectIds,\n          }),\n      }) as unknown as KnowledgeSourceSyncDriver<KnowledgeSyncEntry, KnowledgeSyncStopReason>,\n    };\n  }\n  if (resolvedConnection.providerDomain === ATLASSIAN_PROVIDER_DOMAIN) {\n    const metadata = AtlassianConnectionMetadata.parse(resolvedConnection.metadata);\n    if (\n      metadata.lifecycle?.state !== \"active\" ||\n      !atlassianScopesAllowRead(resolvedConnection.grantedScopes)\n    ) {\n      throw new SyncFailure(\"connection_reconnect_required\", true, true);\n    }\n    const source = selectedAtlassianSource(metadata, input.externalSourceId);\n    if (!validSelectedSource(source, action, atlassianKnowledgeScope)) {\n      throw new SyncFailure(\"authority_changed\", false);\n    }\n    return {\n      kind: \"atlassian\",\n      selectedDestination: source.destination!,\n      aclAuthority: null,\n      driver: atlassianSyncDriver({\n        actionProviderCoordinationKey: action.providerCoordinationKey,\n        metadata,\n        selectedSource: source,\n        authorization,\n        limits: action.limits,\n      }) as unknown as KnowledgeSourceSyncDriver<KnowledgeSyncEntry, KnowledgeSyncStopReason>,\n    };\n  }\n  throw new SyncFailure(\"provider_rejected\", false);\n}\n\nfunction validSelectedSource<Source extends GoogleDriveSelectedSource | AtlassianSelectedSource>(\n  source: Source | null,\n  action: Extract<ScheduledTask[\"action\"], { kind: \"knowledge_source_sync\" }>,\n  scope: (destination: NonNullable<Source[\"destination\"]>) => ScopedKnowledgeScope,\n): source is Source & { destination: NonNullable<Source[\"destination\"]> } {\n  return Boolean(\n    source &&\n    source.syncEnabled &&\n    source.configGeneration === action.sourceConfigGeneration &&\n    source.destination &&\n    scopedKnowledgeScopeKey(scope(source.destination)) ===\n      scopedKnowledgeScopeKey(action.destination),\n  );\n}\n\nfunction selectedAtlassianSource(\n  metadata: ReturnType<typeof AtlassianConnectionMetadata.parse>,\n  externalSourceId: string,\n): AtlassianSelectedSource | null {\n  return metadata.selectedSources.find((source) => source.id === externalSourceId) ?? null;\n}\n\nfunction atlassianSyncDriver(input: {\n  actionProviderCoordinationKey: string;\n  metadata: ReturnType<typeof AtlassianConnectionMetadata.parse>;\n  selectedSource: AtlassianSelectedSource;\n  authorization: string | undefined;\n  limits: {\n    maxItems: number;\n    maxBytes: number;\n    maxFileBytes: number;\n    maxProviderRequests: number;\n    maxElapsedSeconds: number;\n  };\n}): KnowledgeSourceSyncDriver<AtlassianInventoryEntry, AtlassianInventoryStopReason> {\n  return {\n    providerKey: \"atlassian\",\n    providerDomain: ATLASSIAN_PROVIDER_DOMAIN,\n    providerCoordinationKey: input.actionProviderCoordinationKey,\n    inventory: async (checkpoint) => {\n      const inventory = await inventoryAtlassianSource({\n        cloudId: input.selectedSource.cloudId,\n        source: input.selectedSource,\n        limits: {\n          maxItems: input.limits.maxItems,\n          maxApiRequests: input.limits.maxProviderRequests,\n          maxElapsedMs: input.limits.maxElapsedSeconds * 1_000,\n          pageSize: Math.min(input.limits.maxItems, 100),\n        },\n        checkpoint,\n        listPage: async (cursor, pageSize) =>\n          await listAtlassianItems(input.selectedSource, cursor, pageSize, input.authorization),\n      });\n      return {\n        ...inventory,\n        providerCursor: null,\n        authoritativeFullScan: inventory.status === \"complete\",\n        cursorInvalidated: false,\n        hardLimitReached:\n          inventory.status === \"paused\" &&\n          inventory.stopReason !== \"elapsed_time_limit\" &&\n          inventory.stopReason !== \"provider_error\",\n      };\n    },\n    fetchContent: async (entry, maxBytes) =>\n      await fetchAtlassianContent(input.selectedSource, entry, input.authorization, maxBytes),\n    citationLocator: (entry) => ({\n      version: 1,\n      providerKey: \"atlassian\",\n      providerCoordinationKey: input.actionProviderCoordinationKey,\n      cloudId: input.selectedSource.cloudId,\n      sourceKind: input.selectedSource.kind,\n      externalObjectId: entry.externalObjectId,\n      sourceUri: entry.sourceUri,\n    }),\n  };\n}\n\nexport function googleDriveSyncDriver(input: {\n  actionProviderCoordinationKey: string;\n  metadata: ReturnType<typeof GoogleDriveConnectionMetadata.parse>;\n  selectedSource: GoogleDriveSelectedSource;\n  connectionId: string;\n  accountId: string;\n  workspaceId: string;\n  initiatingSubjectId: string;\n  authorization: string | undefined;\n  retry: GoogleDriveProviderRetryOptions;\n  observability: Observability;\n  fullReconciliationIntervalMs: number;\n  observedExternalObjectIds: (ids: string[]) => Promise<Set<string>>;\n  provider?: GoogleDriveSyncProviderPort;\n  limits: {\n    maxItems: number;\n    maxBytes: number;\n    maxFileBytes: number;\n    maxProviderRequests: number;\n    maxElapsedSeconds: number;\n  };\n}): KnowledgeSourceSyncDriver<GoogleDriveInventoryEntry, GoogleDriveInventoryStopReason> {\n  const maxElapsedMs = input.limits.maxElapsedSeconds * 1_000;\n  const provider: GoogleDriveSyncProviderPort = input.provider ?? {\n    getStartPageToken: async (driveId) =>\n      await getDriveStartPageToken(driveId, input.authorization, input.retry, input.observability),\n    listChanges: async (pageToken, driveId, pageSize) =>\n      await listDriveChanges(\n        pageToken,\n        driveId,\n        pageSize,\n        input.authorization,\n        input.retry,\n        input.observability,\n      ),\n    getFile: async (fileId) =>\n      await getDriveFile(fileId, input.authorization, input.retry, input.observability),\n    listChildren: async (request) =>\n      await listDriveChildren(request, input.authorization, input.retry, input.observability),\n    listPermissions: async (request) =>\n      await listDrivePermissions(request, input.authorization, input.retry, input.observability),\n  };\n  const clock = provider.now ?? Date.now;\n  const budgetLimits = {\n    maxItems: input.limits.maxItems,\n    maxProviderRequests: input.limits.maxProviderRequests,\n    maxElapsedMs,\n  };\n  return {\n    providerKey: \"google_drive\",\n    providerDomain: GOOGLE_DRIVE_PROVIDER_DOMAIN,\n    providerCoordinationKey: input.actionProviderCoordinationKey,\n    inventory: async (executionCheckpoint, providerCursor) => {\n      const expectedCursor = {\n        connectionId: input.connectionId,\n        googlePermissionId: input.metadata.googlePermissionId,\n        sourceId: input.selectedSource.id,\n        driveId: input.selectedSource.driveId,\n      };\n      const legacyFullCheckpoint = isLegacyGoogleDriveFullReconciliationCheckpoint(\n        executionCheckpoint,\n        expectedCursor,\n      );\n      const cursor = parseGoogleDriveChangesCursor(providerCursor, expectedCursor);\n      const checkpoint = parseGoogleDriveExecutionCheckpoint(\n        executionCheckpoint,\n        expectedCursor,\n        budgetLimits,\n      );\n      const now = new Date(clock());\n\n      const runFullReconciliation = async (full: {\n        boundaryId: string;\n        startPageToken: string;\n        cursorInvalidated: boolean;\n        budgetBeforeInventory: GoogleDriveSyncBudget;\n        inventoryElapsedMs: number;\n        inventoryCheckpoint: GoogleDriveInventoryCheckpoint | null;\n        revisionFloors: GoogleDriveRevisionFloor[];\n      }) => {\n        const inventoryItems = full.inventoryCheckpoint?.totals.itemCount ?? 0;\n        const inventoryProviderRequests = full.inventoryCheckpoint?.totals.apiRequestCount ?? 0;\n        const budgetBeforeInvocation = {\n          examinedItems: full.budgetBeforeInventory.examinedItems + inventoryItems,\n          providerRequests: full.budgetBeforeInventory.providerRequests + inventoryProviderRequests,\n          elapsedMs: full.budgetBeforeInventory.elapsedMs + full.inventoryElapsedMs,\n        } satisfies GoogleDriveSyncBudget;\n        const hardStopReason = googleDriveHardLimitReason(budgetBeforeInvocation, budgetLimits);\n        const fullCheckpoint = buildGoogleDriveFullReconciliationCheckpoint({\n          ...expectedCursor,\n          ...full,\n        });\n        if (hardStopReason) {\n          return {\n            status: \"paused\" as const,\n            stopReason: hardStopReason,\n            entries: [],\n            checkpoint: fullCheckpoint,\n            providerCursor,\n            authoritativeFullScan: false,\n            cursorInvalidated: full.cursorInvalidated,\n            providerRequests: budgetBeforeInvocation.providerRequests,\n            elapsedMs: budgetBeforeInvocation.elapsedMs,\n            hardLimitReached: true,\n          };\n        }\n\n        const phaseMaxItems = input.limits.maxItems - full.budgetBeforeInventory.examinedItems;\n        const phaseMaxProviderRequests =\n          input.limits.maxProviderRequests - full.budgetBeforeInventory.providerRequests;\n        const remainingElapsedMs = maxElapsedMs - budgetBeforeInvocation.elapsedMs;\n        const inventory = await inventoryGoogleDriveSource({\n          googlePermissionId: input.metadata.googlePermissionId,\n          googleEmail: input.metadata.googleEmail,\n          source: input.selectedSource,\n          accountId: input.accountId,\n          workspaceId: input.workspaceId,\n          connectionSubjectId: input.initiatingSubjectId,\n          limits: {\n            maxItems: phaseMaxItems,\n            maxKnownBytes: input.limits.maxBytes,\n            maxApiRequests: phaseMaxProviderRequests,\n            maxElapsedMs: Math.min(GOOGLE_DRIVE_SYNC_INVOCATION_SLICE_MS, remainingElapsedMs),\n            maxFileBytes: input.limits.maxFileBytes,\n            maxFolders: Math.min(phaseMaxItems * 2, 2_000),\n            pageSize: Math.min(phaseMaxItems, 100),\n          },\n          checkpoint: full.inventoryCheckpoint,\n          listChildren: provider.listChildren,\n          now: clock,\n        });\n        const inventoryElapsedMs = full.inventoryElapsedMs + inventory.run.elapsedMs;\n        const budget = {\n          examinedItems: full.budgetBeforeInventory.examinedItems + inventory.totals.itemCount,\n          providerRequests:\n            full.budgetBeforeInventory.providerRequests + inventory.totals.apiRequestCount,\n          elapsedMs: full.budgetBeforeInventory.elapsedMs + inventoryElapsedMs,\n        } satisfies GoogleDriveSyncBudget;\n        const reconciled = reconcileGoogleDriveRevisionFloors(\n          inventory.entries,\n          full.revisionFloors,\n          input.limits.maxItems,\n        );\n        if (reconciled.conflict) {\n          return {\n            status: \"paused\" as const,\n            stopReason: \"incomplete_search\" as const,\n            entries: [],\n            checkpoint: fullCheckpoint,\n            providerCursor,\n            authoritativeFullScan: false,\n            cursorInvalidated: full.cursorInvalidated,\n            providerRequests: budget.providerRequests,\n            elapsedMs: budget.elapsedMs,\n            hardLimitReached: false,\n          };\n        }\n        const nextCursor =\n          inventory.status === \"complete\"\n            ? buildGoogleDriveChangesCursor({\n                ...expectedCursor,\n                boundaryId: full.boundaryId,\n                pageToken: full.startPageToken,\n                previousGeneration: cursor?.cursorGeneration ?? 0,\n                reconciledAt: now,\n                fullReconciliationIntervalMs: input.fullReconciliationIntervalMs,\n              })\n            : providerCursor;\n        return {\n          status: inventory.status,\n          stopReason: inventory.stopReason,\n          entries: reconciled.entries,\n          checkpoint:\n            inventory.status === \"paused\" && inventory.checkpoint\n              ? buildGoogleDriveFullReconciliationCheckpoint({\n                  ...expectedCursor,\n                  boundaryId: full.boundaryId,\n                  startPageToken: full.startPageToken,\n                  cursorInvalidated: full.cursorInvalidated,\n                  budgetBeforeInventory: full.budgetBeforeInventory,\n                  inventoryElapsedMs,\n                  inventoryCheckpoint: inventory.checkpoint,\n                  revisionFloors: reconciled.revisionFloors,\n                })\n              : null,\n          providerCursor: nextCursor,\n          authoritativeFullScan: inventory.status === \"complete\",\n          cursorInvalidated: full.cursorInvalidated,\n          providerRequests: budget.providerRequests,\n          elapsedMs: budget.elapsedMs,\n          hardLimitReached:\n            inventory.status === \"paused\" &&\n            googleDriveInventoryStopIsHard(inventory.stopReason, budget, budgetLimits),\n        };\n      };\n\n      const acquireFullReconciliation = async (details: {\n        budget: GoogleDriveSyncBudget;\n        boundaryId: string | null;\n        cursorInvalidated: boolean;\n      }) => {\n        const acquisitionStartedAt = clock();\n        const initialElapsedMs = details.budget.elapsedMs;\n        const budget = { ...details.budget };\n        const refreshElapsed = () => {\n          budget.elapsedMs = initialElapsedMs + Math.max(0, clock() - acquisitionStartedAt);\n        };\n        const requireProviderCapacity = () => {\n          refreshElapsed();\n          if (googleDriveHardLimitReason(budget, budgetLimits)) {\n            throw new SyncFailure(\"resource_limit\", false);\n          }\n          budget.providerRequests += 1;\n        };\n\n        requireProviderCapacity();\n        const startPageToken = await provider.getStartPageToken(input.selectedSource.driveId);\n        refreshElapsed();\n\n        let boundaryId = details.boundaryId;\n        if (!boundaryId) {\n          if (input.selectedSource.id === \"root\" && input.selectedSource.driveId === null) {\n            requireProviderCapacity();\n            try {\n              boundaryId = await resolveGoogleDriveChangesBoundaryId({\n                source: input.selectedSource,\n                getFile: provider.getFile,\n              });\n            } catch (error) {\n              if (error instanceof GoogleDriveChangesProtocolError) {\n                throw new SyncFailure(\"provider_payload_invalid\", false);\n              }\n              throw error;\n            }\n            refreshElapsed();\n          } else {\n            boundaryId = input.selectedSource.id;\n          }\n        }\n\n        return {\n          boundaryId,\n          startPageToken,\n          cursorInvalidated: details.cursorInvalidated,\n          budgetBeforeInventory: budget,\n          inventoryElapsedMs: 0,\n          inventoryCheckpoint: null,\n          revisionFloors: [],\n        };\n      };\n\n      if (checkpoint?.kind === \"google_drive_full_reconciliation\") {\n        return await runFullReconciliation(checkpoint);\n      }\n      if (!cursor) {\n        const budget =\n          checkpoint?.kind === \"google_drive_changes\"\n            ? checkpoint.changesCheckpoint.budget\n            : emptyGoogleDriveSyncBudget();\n        return await runFullReconciliation(\n          await acquireFullReconciliation({\n            budget,\n            boundaryId: null,\n            cursorInvalidated: providerCursor !== null,\n          }),\n        );\n      }\n      if (!checkpoint && !legacyFullCheckpoint && googleDriveFullReconciliationDue(cursor, now)) {\n        return await runFullReconciliation(\n          await acquireFullReconciliation({\n            budget: emptyGoogleDriveSyncBudget(),\n            boundaryId: cursor.boundaryId,\n            cursorInvalidated: false,\n          }),\n        );\n      }\n\n      try {\n        const forceFullReconciliation =\n          legacyFullCheckpoint || googleDriveFullReconciliationDue(cursor, now);\n        const changesCheckpoint =\n          checkpoint?.kind === \"google_drive_changes\"\n            ? {\n                ...checkpoint.changesCheckpoint,\n                requiresFullReconciliation:\n                  checkpoint.changesCheckpoint.requiresFullReconciliation ||\n                  forceFullReconciliation,\n              }\n            : null;\n        const changes = await drainGoogleDriveChanges({\n          source: input.selectedSource,\n          cursor,\n          checkpoint: changesCheckpoint,\n          maxItems: input.limits.maxItems,\n          maxProviderRequests: input.limits.maxProviderRequests,\n          maxElapsedMs,\n          maxInvocationElapsedMs: Math.min(GOOGLE_DRIVE_SYNC_INVOCATION_SLICE_MS, maxElapsedMs),\n          maxFileBytes: input.limits.maxFileBytes,\n          listChanges: async (pageToken, pageSize) =>\n            await provider.listChanges(pageToken, input.selectedSource.driveId, pageSize),\n          getFile: provider.getFile,\n          observedExternalObjectIds: input.observedExternalObjectIds,\n          now: clock,\n        });\n        if (changes.status === \"paused\" && changes.checkpoint) {\n          return {\n            status: \"paused\" as const,\n            stopReason: changes.stopReason,\n            entries: changes.entries,\n            checkpoint: {\n              version: 2,\n              kind: \"google_drive_changes\",\n              ...expectedCursor,\n              changesCheckpoint: {\n                ...changes.checkpoint,\n                requiresFullReconciliation:\n                  changes.checkpoint.requiresFullReconciliation || forceFullReconciliation,\n              },\n            } satisfies GoogleDriveExecutionCheckpoint,\n            providerCursor,\n            authoritativeFullScan: false,\n            cursorInvalidated: false,\n            providerRequests: changes.providerRequests,\n            elapsedMs: changes.elapsedMs,\n            hardLimitReached: changes.hardLimitReached,\n          };\n        }\n        if (!changes.newStartPageToken) throw new Error(\"google_drive_changes_cursor_missing\");\n        if (changes.requiresFullReconciliation || forceFullReconciliation) {\n          const hardStopReason = googleDriveHardLimitReason(changes.budget, budgetLimits);\n          return {\n            status: \"paused\" as const,\n            stopReason: hardStopReason ?? (\"elapsed_time_limit\" as const),\n            entries: changes.entries,\n            checkpoint: buildGoogleDriveFullReconciliationCheckpoint({\n              ...expectedCursor,\n              boundaryId: cursor.boundaryId,\n              startPageToken: changes.newStartPageToken,\n              cursorInvalidated: false,\n              budgetBeforeInventory: changes.budget,\n              inventoryElapsedMs: 0,\n              inventoryCheckpoint: null,\n              revisionFloors: revisionFloorsForEntries(changes.entries, input.limits.maxItems),\n            }),\n            providerCursor,\n            authoritativeFullScan: false,\n            cursorInvalidated: false,\n            providerRequests: changes.providerRequests,\n            elapsedMs: changes.elapsedMs,\n            hardLimitReached: hardStopReason !== null,\n          };\n        }\n        return {\n          status: \"complete\" as const,\n          stopReason: null,\n          entries: changes.entries,\n          checkpoint: null,\n          providerCursor: advanceGoogleDriveChangesCursor(cursor, changes.newStartPageToken),\n          authoritativeFullScan: false,\n          cursorInvalidated: false,\n          providerRequests: changes.providerRequests,\n          elapsedMs: changes.elapsedMs,\n          hardLimitReached: false,\n        };\n      } catch (error) {\n        if (error instanceof GoogleDriveChangesProtocolError) {\n          throw new SyncFailure(\"provider_payload_invalid\", false);\n        }\n        if (!(error instanceof GoogleDriveCursorInvalidError)) throw error;\n        const full = await acquireFullReconciliation({\n          budget: error.budget ?? emptyGoogleDriveSyncBudget(),\n          boundaryId: cursor.boundaryId,\n          cursorInvalidated: true,\n        });\n        const hardStopReason = googleDriveHardLimitReason(full.budgetBeforeInventory, budgetLimits);\n        return {\n          status: \"paused\" as const,\n          stopReason: hardStopReason ?? (\"elapsed_time_limit\" as const),\n          entries: [],\n          checkpoint: buildGoogleDriveFullReconciliationCheckpoint({\n            ...expectedCursor,\n            ...full,\n          }),\n          providerCursor,\n          authoritativeFullScan: false,\n          cursorInvalidated: true,\n          providerRequests: full.budgetBeforeInventory.providerRequests,\n          elapsedMs: full.budgetBeforeInventory.elapsedMs,\n          hardLimitReached: hardStopReason !== null,\n        };\n      }\n    },\n    fetchContent: async (entry, maxBytes) =>\n      await fetchDriveBytes(entry, input.authorization, maxBytes, input.retry, input.observability),\n    readAcl: async (entry, maxProviderRequests) => {\n      if (!provider.listPermissions) {\n        throw new SyncFailure(\"provider_rejected\", false);\n      }\n      return await collectGoogleDriveAclEvidence({\n        entry,\n        maxProviderRequests,\n        listPermissions: provider.listPermissions,\n        getFile: provider.getFile,\n        now: clock,\n      });\n    },\n    citationLocator: (entry) => ({\n      version: 2,\n      providerKey: \"google-drive\",\n      providerCoordinationKey: input.actionProviderCoordinationKey,\n      externalObjectId: entry.externalObjectId,\n      providerRevision: entry.externalVersionId,\n      driveId: entry.driveId,\n      sourceUri: entry.sourceUri,\n    }),\n  };\n}\n\ntype GoogleDriveCheckpointIdentity = {\n  connectionId: string;\n  googlePermissionId: string;\n  sourceId: string;\n  driveId: string | null;\n};\n\ntype GoogleDriveRevisionFloor = [externalObjectId: string, providerRevision: string | null];\n\ntype GoogleDriveFullReconciliationCheckpoint = GoogleDriveCheckpointIdentity & {\n  version: 3;\n  kind: \"google_drive_full_reconciliation\";\n  boundaryId: string;\n  startPageToken: string;\n  cursorInvalidated: boolean;\n  budgetBeforeInventory: GoogleDriveSyncBudget;\n  inventoryElapsedMs: number;\n  inventoryCheckpoint: GoogleDriveInventoryCheckpoint | null;\n  revisionFloors: GoogleDriveRevisionFloor[];\n};\n\ntype GoogleDriveExecutionCheckpoint = GoogleDriveCheckpointIdentity &\n  (\n    | {\n        version: 2;\n        kind: \"google_drive_changes\";\n        changesCheckpoint: GoogleDriveChangesCheckpoint;\n      }\n    | GoogleDriveFullReconciliationCheckpoint\n  );\n\nfunction isLegacyGoogleDriveFullReconciliationCheckpoint(\n  value: Record<string, unknown> | null,\n  expected: GoogleDriveCheckpointIdentity,\n): boolean {\n  return (\n    value?.version === 2 &&\n    value.kind === \"google_drive_full_reconciliation\" &&\n    value.connectionId === expected.connectionId &&\n    value.googlePermissionId === expected.googlePermissionId &&\n    value.sourceId === expected.sourceId &&\n    value.driveId === expected.driveId &&\n    encodedJsonBytes(value) <= GOOGLE_DRIVE_EXECUTION_CHECKPOINT_MAX_BYTES\n  );\n}\n\nfunction parseGoogleDriveExecutionCheckpoint(\n  value: Record<string, unknown> | null,\n  expected: GoogleDriveCheckpointIdentity,\n  limits: { maxItems: number; maxProviderRequests: number; maxElapsedMs: number },\n): GoogleDriveExecutionCheckpoint | null {\n  if (\n    !value ||\n    value.connectionId !== expected.connectionId ||\n    value.googlePermissionId !== expected.googlePermissionId ||\n    value.sourceId !== expected.sourceId ||\n    value.driveId !== expected.driveId ||\n    encodedJsonBytes(value) > GOOGLE_DRIVE_EXECUTION_CHECKPOINT_MAX_BYTES\n  ) {\n    return null;\n  }\n  if (value.version === 2 && value.kind === \"google_drive_changes\") {\n    const changesCheckpoint = parseGoogleDriveChangesCheckpoint(value.changesCheckpoint, limits);\n    return changesCheckpoint\n      ? ({ ...value, changesCheckpoint } as GoogleDriveExecutionCheckpoint)\n      : null;\n  }\n  if (value.version === 3 && value.kind === \"google_drive_full_reconciliation\") {\n    const budgetBeforeInventory = parseGoogleDriveSyncBudget(value.budgetBeforeInventory, limits);\n    const revisionFloors = parseGoogleDriveRevisionFloors(value.revisionFloors, limits.maxItems);\n    if (\n      typeof value.boundaryId !== \"string\" ||\n      value.boundaryId.length < 1 ||\n      value.boundaryId.length > 1024 ||\n      typeof value.startPageToken !== \"string\" ||\n      value.startPageToken.length < 1 ||\n      value.startPageToken.length > 4096 ||\n      typeof value.cursorInvalidated !== \"boolean\" ||\n      !budgetBeforeInventory ||\n      !revisionFloors ||\n      !Number.isSafeInteger(value.inventoryElapsedMs) ||\n      Number(value.inventoryElapsedMs) < 0 ||\n      Number(value.inventoryElapsedMs) > limits.maxElapsedMs ||\n      budgetBeforeInventory.elapsedMs + Number(value.inventoryElapsedMs) > limits.maxElapsedMs ||\n      (value.inventoryCheckpoint !== null &&\n        (!value.inventoryCheckpoint ||\n          typeof value.inventoryCheckpoint !== \"object\" ||\n          Array.isArray(value.inventoryCheckpoint)))\n    ) {\n      return null;\n    }\n    return {\n      ...value,\n      budgetBeforeInventory,\n      inventoryElapsedMs: Number(value.inventoryElapsedMs),\n      revisionFloors,\n    } as GoogleDriveExecutionCheckpoint;\n  }\n  return null;\n}\n\nfunction buildGoogleDriveFullReconciliationCheckpoint(\n  input: Omit<GoogleDriveFullReconciliationCheckpoint, \"version\" | \"kind\">,\n): GoogleDriveFullReconciliationCheckpoint {\n  const checkpoint = {\n    version: 3,\n    kind: \"google_drive_full_reconciliation\",\n    ...input,\n    revisionFloors: input.revisionFloors.map((floor) => [...floor]),\n  } satisfies GoogleDriveFullReconciliationCheckpoint;\n  if (encodedJsonBytes(checkpoint) > GOOGLE_DRIVE_EXECUTION_CHECKPOINT_MAX_BYTES) {\n    throw new SyncFailure(\"resource_limit\", false);\n  }\n  return checkpoint;\n}\n\nfunction parseGoogleDriveRevisionFloors(\n  value: unknown,\n  maxItems: number,\n): GoogleDriveRevisionFloor[] | null {\n  if (!Array.isArray(value) || value.length > maxItems) return null;\n  const floors: GoogleDriveRevisionFloor[] = [];\n  const seen = new Set<string>();\n  for (const floor of value) {\n    if (\n      !Array.isArray(floor) ||\n      floor.length !== 2 ||\n      typeof floor[0] !== \"string\" ||\n      floor[0].trim().length < 1 ||\n      floor[0].length > 1024 ||\n      (floor[1] !== null &&\n        (typeof floor[1] !== \"string\" || floor[1].length < 1 || floor[1].length > 256)) ||\n      seen.has(floor[0])\n    ) {\n      return null;\n    }\n    seen.add(floor[0]);\n    floors.push([floor[0], floor[1]]);\n  }\n  return floors;\n}\n\nfunction revisionFloorsForEntries(\n  entries: GoogleDriveInventoryEntry[],\n  maxItems: number,\n): GoogleDriveRevisionFloor[] {\n  const reconciled = reconcileGoogleDriveRevisionFloors(entries, [], maxItems);\n  if (reconciled.conflict) throw new SyncFailure(\"provider_payload_invalid\", false);\n  return reconciled.revisionFloors;\n}\n\nexport function shouldProcessGoogleDriveDurableObservation(input: {\n  entry: Pick<GoogleDriveInventoryEntry, \"externalObjectId\">;\n  observation: KnowledgeSourceSyncObjectObservationResult;\n  sourceLifecycleGeneration: number;\n  aclGeneration: number;\n}): boolean {\n  if (input.observation.externalObjectId !== input.entry.externalObjectId) {\n    throw new SyncFailure(\"provider_payload_invalid\", false);\n  }\n  if (\n    input.observation.disposition === \"accepted\" ||\n    input.observation.disposition === \"replayed\"\n  ) {\n    return true;\n  }\n  if (input.observation.disposition === \"conflict\") {\n    throw new SyncFailure(\"provider_payload_invalid\", false);\n  }\n  const current = input.observation.currentVersion;\n  const comparison = current\n    ? compareCanonicalDecimalProviderRevisions(\n        current.providerRevision,\n        input.observation.providerRevision,\n      )\n    : null;\n  const fullyProcessed =\n    current !== null &&\n    current.objectLifecycleState === \"active\" &&\n    current.sourceLifecycleGeneration === input.sourceLifecycleGeneration &&\n    current.objectLifecycleGeneration === current.currentObjectLifecycleGeneration &&\n    current.aclGeneration === input.aclGeneration &&\n    current.indexObligationStatus === \"indexed\" &&\n    comparison !== null &&\n    comparison >= 0 &&\n    (comparison > 0 || current.metadataHash === input.observation.metadataHash);\n  if (!fullyProcessed) throw new SyncFailure(\"provider_payload_invalid\", false);\n  return false;\n}\n\nexport function mergeGoogleDriveDurableObservationFloors(\n  checkpoint: Record<string, unknown> | null,\n  observations: KnowledgeSourceSyncObservationFloor[],\n  maxItems: number,\n): Record<string, unknown> | null {\n  if (\n    !checkpoint ||\n    checkpoint.version !== 3 ||\n    checkpoint.kind !== \"google_drive_full_reconciliation\"\n  ) {\n    return checkpoint;\n  }\n  const parsedFloors = parseGoogleDriveRevisionFloors(checkpoint.revisionFloors, maxItems);\n  if (!parsedFloors) throw new SyncFailure(\"provider_payload_invalid\", false);\n  const floors = new Map<string, string | null>(parsedFloors);\n  for (const observation of observations) {\n    floors.set(observation.externalObjectId, observation.providerRevision);\n  }\n  if (floors.size > maxItems) throw new SyncFailure(\"resource_limit\", false);\n  const merged = {\n    ...checkpoint,\n    revisionFloors: [...floors],\n  };\n  if (encodedJsonBytes(merged) > GOOGLE_DRIVE_EXECUTION_CHECKPOINT_MAX_BYTES) {\n    throw new SyncFailure(\"resource_limit\", false);\n  }\n  return merged;\n}\n\nfunction reconcileGoogleDriveRevisionFloors(\n  entries: GoogleDriveInventoryEntry[],\n  existingFloors: GoogleDriveRevisionFloor[],\n  maxItems: number,\n): {\n  entries: GoogleDriveInventoryEntry[];\n  revisionFloors: GoogleDriveRevisionFloor[];\n  conflict: boolean;\n} {\n  const floors = new Map<string, string | null>(existingFloors);\n  const accepted: GoogleDriveInventoryEntry[] = [];\n  for (const entry of entries) {\n    if (!floors.has(entry.externalObjectId)) {\n      floors.set(entry.externalObjectId, entry.externalVersionId);\n      accepted.push(entry);\n    } else {\n      const comparison = compareCanonicalDecimalProviderRevisions(\n        entry.externalVersionId,\n        floors.get(entry.externalObjectId) ?? null,\n      );\n      if (comparison === null) {\n        return {\n          entries: [],\n          revisionFloors: [...floors],\n          conflict: true,\n        };\n      }\n      if (comparison > 0) {\n        floors.set(entry.externalObjectId, entry.externalVersionId);\n        accepted.push(entry);\n      }\n    }\n    if (floors.size > maxItems) throw new SyncFailure(\"resource_limit\", false);\n  }\n  return {\n    entries: accepted,\n    revisionFloors: [...floors],\n    conflict: false,\n  };\n}\n\nfunction encodedJsonBytes(value: unknown): number {\n  try {\n    return new TextEncoder().encode(JSON.stringify(value)).byteLength;\n  } catch {\n    return Number.POSITIVE_INFINITY;\n  }\n}\n\nfunction parseGoogleDriveSyncBudget(\n  value: unknown,\n  limits: { maxItems: number; maxProviderRequests: number; maxElapsedMs: number },\n): GoogleDriveSyncBudget | null {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n  const row = value as Record<string, unknown>;\n  for (const [key, maximum] of [\n    [\"examinedItems\", limits.maxItems],\n    [\"providerRequests\", limits.maxProviderRequests],\n    [\"elapsedMs\", limits.maxElapsedMs],\n  ] as const) {\n    const budgetValue = row[key];\n    if (\n      !Number.isSafeInteger(budgetValue) ||\n      Number(budgetValue) < 0 ||\n      Number(budgetValue) > maximum\n    ) {\n      return null;\n    }\n  }\n  return value as GoogleDriveSyncBudget;\n}\n\nfunction emptyGoogleDriveSyncBudget(): GoogleDriveSyncBudget {\n  return { examinedItems: 0, providerRequests: 0, elapsedMs: 0 };\n}\n\nfunction googleDriveHardLimitReason(\n  budget: GoogleDriveSyncBudget,\n  limits: { maxItems: number; maxProviderRequests: number; maxElapsedMs: number },\n): Extract<\n  GoogleDriveInventoryStopReason,\n  \"api_request_limit\" | \"elapsed_time_limit\" | \"item_limit\"\n> | null {\n  if (budget.examinedItems >= limits.maxItems) return \"item_limit\";\n  if (budget.providerRequests >= limits.maxProviderRequests) return \"api_request_limit\";\n  if (budget.elapsedMs >= limits.maxElapsedMs) return \"elapsed_time_limit\";\n  return null;\n}\n\nfunction googleDriveInventoryStopIsHard(\n  reason: GoogleDriveInventoryStopReason | null,\n  budget: GoogleDriveSyncBudget,\n  limits: { maxItems: number; maxProviderRequests: number; maxElapsedMs: number },\n): boolean {\n  if (reason === \"api_request_limit\" || reason === \"item_limit\" || reason === \"known_byte_limit\") {\n    return true;\n  }\n  return reason === \"elapsed_time_limit\" && budget.elapsedMs >= limits.maxElapsedMs;\n}\n\nasync function getDriveStartPageToken(\n  driveId: string | null,\n  authorization: string | undefined,\n  retry: GoogleDriveProviderRetryOptions,\n  observability: Observability,\n): Promise<string> {\n  if (!authorization) throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  const url = new URL(`${DRIVE_API_BASE}/changes/startPageToken`);\n  url.searchParams.set(\"supportsAllDrives\", \"true\");\n  if (driveId) url.searchParams.set(\"driveId\", driveId);\n  const response = await requestGoogleDrive(\n    url,\n    { headers: { authorization, accept: \"application/json\" } },\n    \"start_page_token\",\n    retry,\n    observability,\n  );\n  if (!response.ok) throwGoogleDriveResponse(response);\n  const payload = (await readResponseJsonBounded(\n    response,\n    DRIVE_JSON_MAX_BYTES,\n    \"Google Drive start page token\",\n  )) as Record<string, unknown>;\n  return requiredString(payload.startPageToken, \"start_page_token\");\n}\n\nasync function listDriveChanges(\n  pageToken: string,\n  driveId: string | null,\n  pageSize: number,\n  authorization: string | undefined,\n  retry: GoogleDriveProviderRetryOptions,\n  observability: Observability,\n): Promise<GoogleDriveChangesPage> {\n  if (!authorization) throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  const url = new URL(`${DRIVE_API_BASE}/changes`);\n  url.searchParams.set(\"pageToken\", pageToken);\n  url.searchParams.set(\"pageSize\", String(pageSize));\n  url.searchParams.set(\"supportsAllDrives\", \"true\");\n  url.searchParams.set(\"includeItemsFromAllDrives\", \"true\");\n  url.searchParams.set(\"spaces\", \"drive\");\n  url.searchParams.set(\n    \"fields\",\n    \"nextPageToken,newStartPageToken,changes(fileId,removed,time,driveId,file(id,name,mimeType,driveId,parents,modifiedTime,createdTime,version,md5Checksum,size,webViewLink,trashed))\",\n  );\n  if (driveId) url.searchParams.set(\"driveId\", driveId);\n  const response = await requestGoogleDrive(\n    url,\n    { headers: { authorization, accept: \"application/json\" } },\n    \"list_changes\",\n    retry,\n    observability,\n  );\n  if (response.status === 410) throw new GoogleDriveCursorInvalidError();\n  if (!response.ok) throwGoogleDriveResponse(response);\n  const payload = (await readResponseJsonBounded(\n    response,\n    DRIVE_JSON_MAX_BYTES,\n    \"Google Drive changes list\",\n  )) as Record<string, unknown>;\n  const changes = Array.isArray(payload.changes) ? payload.changes : [];\n  return {\n    changes: changes.map((value) => {\n      const row = value && typeof value === \"object\" ? (value as Record<string, unknown>) : {};\n      const fileId = requiredString(row.fileId, \"change_file_id\");\n      return {\n        fileId,\n        removed: row.removed === true,\n        file: row.file && typeof row.file === \"object\" ? parseDriveProviderItem(row.file) : null,\n      };\n    }),\n    nextPageToken: optionalString(payload.nextPageToken),\n    newStartPageToken: optionalString(payload.newStartPageToken),\n  };\n}\n\nasync function getDriveFile(\n  fileId: string,\n  authorization: string | undefined,\n  retry: GoogleDriveProviderRetryOptions,\n  observability: Observability,\n): Promise<GoogleDriveInventoryProviderItem | null> {\n  if (!authorization) throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  const url = new URL(`${DRIVE_API_BASE}/files/${encodeURIComponent(fileId)}`);\n  url.searchParams.set(\"supportsAllDrives\", \"true\");\n  url.searchParams.set(\n    \"fields\",\n    \"id,name,mimeType,driveId,parents,modifiedTime,createdTime,version,md5Checksum,size,webViewLink,trashed\",\n  );\n  const response = await requestGoogleDrive(\n    url,\n    { headers: { authorization, accept: \"application/json\" } },\n    \"get_file\",\n    retry,\n    observability,\n  );\n  if (response.status === 404) return null;\n  if (!response.ok) throwGoogleDriveResponse(response);\n  return parseDriveProviderItem(\n    await readResponseJsonBounded(response, DRIVE_JSON_MAX_BYTES, \"Google Drive file metadata\"),\n  );\n}\n\nasync function listDrivePermissions(\n  input: { fileId: string; pageToken: string | null; pageSize: number },\n  authorization: string | undefined,\n  retry: GoogleDriveProviderRetryOptions,\n  observability: Observability,\n): Promise<GoogleDrivePermissionsPage> {\n  if (!authorization) throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  const url = new URL(`${DRIVE_API_BASE}/files/${encodeURIComponent(input.fileId)}/permissions`);\n  url.searchParams.set(\"supportsAllDrives\", \"true\");\n  url.searchParams.set(\"pageSize\", String(input.pageSize));\n  url.searchParams.set(\n    \"fields\",\n    \"nextPageToken,permissions(id,type,emailAddress,domain,role,allowFileDiscovery,expirationTime,deleted,permissionDetails(inherited))\",\n  );\n  if (input.pageToken) url.searchParams.set(\"pageToken\", input.pageToken);\n  const response = await requestGoogleDrive(\n    url,\n    { headers: { authorization, accept: \"application/json\" } },\n    \"list_permissions\",\n    retry,\n    observability,\n  );\n  if (response.status === 403 || response.status === 404) {\n    return { permissions: [], nextPageToken: null, denied: true };\n  }\n  if (!response.ok) throwGoogleDriveResponse(response);\n  const payload = (await readResponseJsonBounded(\n    response,\n    DRIVE_JSON_MAX_BYTES,\n    \"Google Drive permission list\",\n  )) as Record<string, unknown>;\n  const rawPermissions = Array.isArray(payload.permissions) ? payload.permissions : null;\n  if (!rawPermissions) throw new SyncFailure(\"provider_payload_invalid\", false);\n  return {\n    permissions: rawPermissions.map(parseDrivePermission),\n    nextPageToken: optionalString(payload.nextPageToken),\n    denied: false,\n  };\n}\n\nexport async function collectGoogleDriveAclEvidence(input: {\n  entry: Pick<GoogleDriveInventoryEntry, \"externalObjectId\" | \"externalVersionId\" | \"driveId\">;\n  maxProviderRequests: number;\n  listPermissions: NonNullable<GoogleDriveSyncProviderPort[\"listPermissions\"]>;\n  getFile?: GoogleDriveSyncProviderPort[\"getFile\"];\n  now?: () => number;\n}): Promise<KnowledgeSourceSyncAclEvidence> {\n  if (!Number.isSafeInteger(input.maxProviderRequests) || input.maxProviderRequests < 1) {\n    throw new SyncFailure(\"resource_limit\", false);\n  }\n  const now = input.now ?? Date.now;\n  const observedAt = new Date(now());\n  if (!Number.isFinite(observedAt.getTime())) {\n    throw new SyncFailure(\"provider_payload_invalid\", false);\n  }\n  const permissions: GoogleDrivePermission[] = [];\n  const seenTokens = new Set<string>();\n  let pageToken: string | null = null;\n  let providerRequests = 0;\n  let permissionListDenied = false;\n  do {\n    if (providerRequests >= input.maxProviderRequests) {\n      throw new SyncFailure(\"resource_limit\", false);\n    }\n    providerRequests += 1;\n    const page = await input.listPermissions({\n      fileId: input.entry.externalObjectId,\n      pageToken,\n      pageSize: Math.min(100, GOOGLE_DRIVE_ACL_MAX_PRINCIPALS - permissions.length),\n    });\n    if (page.denied) {\n      permissionListDenied = true;\n      break;\n    }\n    permissions.push(...page.permissions);\n    if (permissions.length > GOOGLE_DRIVE_ACL_MAX_PRINCIPALS) {\n      throw new SyncFailure(\"resource_limit\", false);\n    }\n    pageToken = page.nextPageToken;\n    if (pageToken) {\n      if (pageToken.length > 4096 || seenTokens.has(pageToken)) {\n        throw new SyncFailure(\"provider_payload_invalid\", false);\n      }\n      seenTokens.add(pageToken);\n    }\n  } while (pageToken);\n\n  if (permissionListDenied) {\n    if (!input.getFile || providerRequests >= input.maxProviderRequests) {\n      return googleDriveDeniedAclEvidence(input.entry, observedAt, providerRequests);\n    }\n    providerRequests += 1;\n    const current = await input.getFile(input.entry.externalObjectId);\n    if (!current || current.trashed) {\n      return googleDriveDeniedAclEvidence(input.entry, observedAt, providerRequests);\n    }\n    const aclRevision = createHash(\"sha256\")\n      .update(\n        JSON.stringify({\n          version: 1,\n          mode: \"source_owner_only\",\n          externalObjectId: input.entry.externalObjectId,\n          providerRevision: input.entry.externalVersionId,\n        }),\n      )\n      .digest(\"hex\");\n    return {\n      eligibility: \"eligible\",\n      providerRevision: input.entry.externalVersionId,\n      driveId: input.entry.driveId,\n      aclRevision,\n      observedAt: observedAt.toISOString(),\n      expiresAt: new Date(observedAt.getTime() + GOOGLE_DRIVE_ACL_FRESHNESS_MS).toISOString(),\n      providerRequests,\n      principals: [],\n    };\n  }\n\n  const canonicalPermissions = permissions\n    .map((permission) => ({\n      id: permission.id,\n      type: permission.type,\n      role: permission.role,\n      emailAddress: permission.emailAddress,\n      domain: permission.domain,\n      allowFileDiscovery: permission.allowFileDiscovery,\n      expirationTime: permission.expirationTime,\n      inherited: permission.inherited,\n    }))\n    .sort((left, right) => JSON.stringify(left).localeCompare(JSON.stringify(right)));\n  const aclRevision = createHash(\"sha256\")\n    .update(\n      JSON.stringify({\n        version: 1,\n        externalObjectId: input.entry.externalObjectId,\n        providerRevision: input.entry.externalVersionId,\n        permissions: canonicalPermissions,\n      }),\n    )\n    .digest(\"hex\");\n  return {\n    eligibility: \"eligible\",\n    providerRevision: input.entry.externalVersionId,\n    driveId: input.entry.driveId,\n    aclRevision,\n    observedAt: observedAt.toISOString(),\n    expiresAt: new Date(observedAt.getTime() + GOOGLE_DRIVE_ACL_FRESHNESS_MS).toISOString(),\n    providerRequests,\n    principals: canonicalPermissions.map((permission) => ({\n      type: permission.type,\n      permissionId: permission.id,\n      emailAddress: permission.emailAddress,\n      domain: permission.domain,\n      role: permission.role,\n      inherited: permission.inherited,\n      allowFileDiscovery: permission.allowFileDiscovery,\n      expirationTime: permission.expirationTime,\n    })),\n  };\n}\n\nfunction googleDriveDeniedAclEvidence(\n  entry: Pick<GoogleDriveInventoryEntry, \"externalObjectId\" | \"externalVersionId\" | \"driveId\">,\n  observedAt: Date,\n  providerRequests: number,\n) {\n  return {\n    eligibility: \"denied\" as const,\n    providerRevision: entry.externalVersionId,\n    driveId: entry.driveId,\n    aclRevision: createHash(\"sha256\")\n      .update(\n        JSON.stringify({\n          version: 1,\n          mode: \"provider_denied\",\n          externalObjectId: entry.externalObjectId,\n          providerRevision: entry.externalVersionId,\n        }),\n      )\n      .digest(\"hex\"),\n    observedAt: observedAt.toISOString(),\n    expiresAt: new Date(observedAt.getTime() + GOOGLE_DRIVE_ACL_FRESHNESS_MS).toISOString(),\n    providerRequests,\n    principals: [],\n  };\n}\n\nfunction parseDrivePermission(value: unknown): GoogleDrivePermission {\n  const row = objectRecord(value);\n  if (row.deleted === true) throw new SyncFailure(\"provider_payload_invalid\", false);\n  const type = requiredString(row.type, \"permission.type\");\n  if (type !== \"user\" && type !== \"group\" && type !== \"domain\" && type !== \"anyone\") {\n    throw new SyncFailure(\"provider_payload_invalid\", false);\n  }\n  const role = requiredString(row.role, \"permission.role\");\n  if (\n    role !== \"owner\" &&\n    role !== \"organizer\" &&\n    role !== \"fileOrganizer\" &&\n    role !== \"writer\" &&\n    role !== \"commenter\" &&\n    role !== \"reader\"\n  ) {\n    throw new SyncFailure(\"provider_payload_invalid\", false);\n  }\n  const permissionDetails = Array.isArray(row.permissionDetails) ? row.permissionDetails : [];\n  return {\n    id: requiredString(row.id, \"permission.id\"),\n    type,\n    role,\n    emailAddress: optionalString(row.emailAddress),\n    domain: optionalString(row.domain),\n    allowFileDiscovery: typeof row.allowFileDiscovery === \"boolean\" ? row.allowFileDiscovery : null,\n    expirationTime: optionalExactProviderTimestamp(row.expirationTime),\n    inherited: permissionDetails.some((detail) => objectRecord(detail).inherited === true),\n  };\n}\n\nfunction optionalExactProviderTimestamp(value: unknown): string | null {\n  const timestamp = optionalString(value);\n  if (!timestamp) return null;\n  const parsed = new Date(timestamp);\n  if (!Number.isFinite(parsed.getTime())) throw new SyncFailure(\"provider_payload_invalid\", false);\n  return parsed.toISOString();\n}\n\nfunction throwGoogleDriveResponse(response: Response): never {\n  if (response.status === 401 || response.status === 403) {\n    throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  }\n  throw new SyncFailure(\n    response.status >= 500 || response.status === 429\n      ? \"provider_unavailable\"\n      : \"provider_rejected\",\n    response.status >= 500 || response.status === 429,\n  );\n}\n\nasync function requestGoogleDrive(\n  url: URL,\n  init: RequestInit,\n  operation: GoogleDriveProviderOperation,\n  retry: GoogleDriveProviderRetryOptions,\n  observability: Observability,\n): Promise<Response> {\n  try {\n    return await fetchGoogleDriveProvider({\n      fetchImpl: sourceFetch,\n      url,\n      init,\n      operation,\n      policy: retry,\n      observability,\n      heartbeat: (details) => heartbeat({ provider: \"google_drive\", ...details }),\n    });\n  } catch (error) {\n    if (error instanceof GoogleDriveProviderTransportError) {\n      throw new SyncFailure(\"provider_unavailable\", true);\n    }\n    throw error;\n  }\n}\n\nfunction selectedDriveSource(\n  metadata: ReturnType<typeof GoogleDriveConnectionMetadata.parse>,\n  externalSourceId: string,\n): GoogleDriveSelectedSource | null {\n  const sources =\n    metadata.selectedSources ?? (metadata.selectedSource ? [metadata.selectedSource] : []);\n  return sources.find((source) => source.id === externalSourceId) ?? null;\n}\n\nexport function googleDriveSyncProviderAccessAllowed(input: {\n  connectionVersion: number;\n  resolvedConnectionVersion: number | undefined;\n  connectionStatus: string;\n  lifecycleState: string | undefined;\n  grantedScopes: string[];\n}): boolean {\n  return (\n    input.resolvedConnectionVersion !== undefined &&\n    input.connectionVersion === input.resolvedConnectionVersion &&\n    input.connectionStatus === \"active\" &&\n    (input.lifecycleState === undefined || input.lifecycleState === \"active\") &&\n    googleDriveScopesAllowCapability(input.grantedScopes, \"recursive_source_sync\")\n  );\n}\n\nasync function listDriveChildren(\n  input: { folderId: string; driveId: string | null; pageToken: string | null; pageSize: number },\n  authorization: string | undefined,\n  retry: GoogleDriveProviderRetryOptions,\n  observability: Observability,\n): Promise<GoogleDriveInventoryPage> {\n  if (!authorization) throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  const url = new URL(`${DRIVE_API_BASE}/files`);\n  url.searchParams.set(\n    \"q\",\n    `'${input.folderId.replaceAll(\"'\", \"\\\\'\")}' in parents and trashed = false`,\n  );\n  url.searchParams.set(\"pageSize\", String(input.pageSize));\n  url.searchParams.set(\"supportsAllDrives\", \"true\");\n  url.searchParams.set(\"includeItemsFromAllDrives\", \"true\");\n  url.searchParams.set(\n    \"fields\",\n    \"nextPageToken,incompleteSearch,files(id,name,mimeType,driveId,parents,modifiedTime,createdTime,version,md5Checksum,size,webViewLink,trashed)\",\n  );\n  if (input.pageToken) url.searchParams.set(\"pageToken\", input.pageToken);\n  if (input.driveId) {\n    url.searchParams.set(\"corpora\", \"drive\");\n    url.searchParams.set(\"driveId\", input.driveId);\n  }\n  const response = await requestGoogleDrive(\n    url,\n    { headers: { authorization, accept: \"application/json\" } },\n    \"list_children\",\n    retry,\n    observability,\n  );\n  if (!response.ok) {\n    if (response.status === 401 || response.status === 403) {\n      throw new SyncFailure(\"connection_reconnect_required\", true, true);\n    }\n    throw new SyncFailure(\n      \"provider_unavailable\",\n      response.status >= 500 || response.status === 429,\n    );\n  }\n  const payload = (await readResponseJsonBounded(\n    response,\n    DRIVE_JSON_MAX_BYTES,\n    \"Google Drive file list\",\n  )) as Record<string, unknown>;\n  const rawFiles = Array.isArray(payload.files) ? payload.files : [];\n  return {\n    items: rawFiles.map(parseDriveProviderItem),\n    nextPageToken: typeof payload.nextPageToken === \"string\" ? payload.nextPageToken : null,\n    incompleteSearch: payload.incompleteSearch === true,\n  };\n}\n\nfunction parseDriveProviderItem(value: unknown): GoogleDriveInventoryProviderItem {\n  const row = value && typeof value === \"object\" ? (value as Record<string, unknown>) : {};\n  return {\n    id: requiredString(row.id, \"id\"),\n    name: requiredString(row.name, \"name\"),\n    mimeType: requiredString(row.mimeType, \"mimeType\"),\n    driveId: optionalString(row.driveId),\n    parents: Array.isArray(row.parents)\n      ? row.parents.filter((item): item is string => typeof item === \"string\")\n      : [],\n    modifiedTime: optionalString(row.modifiedTime),\n    createdTime: optionalString(row.createdTime),\n    version: optionalString(row.version),\n    md5Checksum: optionalString(row.md5Checksum),\n    size: optionalString(row.size),\n    webViewLink: optionalString(row.webViewLink),\n    trashed: row.trashed === true,\n  };\n}\n\nasync function fetchDriveBytes(\n  entry: GoogleDriveInventoryEntry,\n  authorization: string | undefined,\n  maxBytes: number,\n  retry: GoogleDriveProviderRetryOptions,\n  observability: Observability,\n): Promise<Uint8Array> {\n  if (!authorization) throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  const url =\n    entry.transfer.action === \"export\"\n      ? new URL(`${DRIVE_API_BASE}/files/${encodeURIComponent(entry.externalObjectId)}/export`)\n      : new URL(`${DRIVE_API_BASE}/files/${encodeURIComponent(entry.externalObjectId)}`);\n  if (entry.transfer.action === \"export\") {\n    url.searchParams.set(\"mimeType\", entry.transfer.contentType);\n  } else {\n    url.searchParams.set(\"alt\", \"media\");\n    url.searchParams.set(\"supportsAllDrives\", \"true\");\n  }\n  const response = await requestGoogleDrive(\n    url,\n    { headers: { authorization } },\n    entry.transfer.action === \"export\" ? \"export\" : \"download\",\n    retry,\n    observability,\n  );\n  if (!response.ok) {\n    if (response.status === 401 || response.status === 403) {\n      throw new SyncFailure(\"connection_reconnect_required\", true, true);\n    }\n    throw new SyncFailure(\n      \"provider_unavailable\",\n      response.status >= 500 || response.status === 429,\n    );\n  }\n  const declared = Number(response.headers.get(\"content-length\") ?? \"0\");\n  if (Number.isFinite(declared) && declared > maxBytes) {\n    throw new SyncFailure(\"content_too_large\", false);\n  }\n  if (!response.body) {\n    const bytes = new Uint8Array(await response.arrayBuffer());\n    if (bytes.byteLength > maxBytes) throw new SyncFailure(\"content_too_large\", false);\n    return bytes;\n  }\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    total += value.byteLength;\n    if (total > maxBytes) {\n      await reader.cancel();\n      throw new SyncFailure(\"content_too_large\", false);\n    }\n    chunks.push(value);\n  }\n  const bytes = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return bytes;\n}\n\nasync function listAtlassianItems(\n  source: AtlassianSelectedSource,\n  cursor: string | null,\n  pageSize: number,\n  authorization: string | undefined,\n): Promise<AtlassianInventoryPage> {\n  if (!authorization) throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  if (source.kind === \"jira_project\") {\n    const url = new URL(\n      `${ATLASSIAN_API_BASE}/ex/jira/${encodeURIComponent(source.cloudId)}/rest/api/3/search/jql`,\n    );\n    url.searchParams.set(\n      \"jql\",\n      `project = \"${source.key.replaceAll('\"', '\\\\\"')}\" ORDER BY key ASC`,\n    );\n    url.searchParams.set(\"maxResults\", String(pageSize));\n    url.searchParams.set(\"fields\", \"summary,created,updated\");\n    if (cursor) url.searchParams.set(\"nextPageToken\", cursor);\n    const payload = objectRecord(await atlassianJsonRequest(url, authorization, \"Jira issue list\"));\n    const issues = Array.isArray(payload.issues) ? payload.issues : [];\n    return {\n      items: issues.map((raw) => {\n        const row = objectRecord(raw);\n        const fields = objectRecord(row.fields);\n        const id = requiredAtlassianString(row.id, \"issue.id\");\n        const key = requiredAtlassianString(row.key, \"issue.key\");\n        const updatedAt = optionalString(fields.updated);\n        return {\n          id,\n          key,\n          title: requiredAtlassianString(fields.summary, \"issue.summary\"),\n          version: updatedAt,\n          createdAt: optionalString(fields.created),\n          updatedAt,\n          webUrl: new URL(`/browse/${encodeURIComponent(key)}`, source.siteUrl).toString(),\n        };\n      }),\n      nextCursor: optionalString(payload.nextPageToken),\n    };\n  }\n\n  const url = new URL(\n    `${ATLASSIAN_API_BASE}/ex/confluence/${encodeURIComponent(source.cloudId)}/wiki/api/v2/spaces/${encodeURIComponent(source.resourceId)}/pages`,\n  );\n  url.searchParams.set(\"limit\", String(pageSize));\n  url.searchParams.set(\"sort\", \"id\");\n  if (cursor) url.searchParams.set(\"cursor\", cursor);\n  const payload = objectRecord(\n    await atlassianJsonRequest(url, authorization, \"Confluence page list\"),\n  );\n  const pages = Array.isArray(payload.results) ? payload.results : [];\n  return {\n    items: pages.map((raw) => {\n      const row = objectRecord(raw);\n      const version = objectRecord(row.version);\n      const id = requiredAtlassianString(row.id, \"page.id\");\n      const webUi = optionalString(objectRecord(row._links).webui);\n      const versionNumber = numberValue(version.number);\n      return {\n        id,\n        key: id,\n        title: requiredAtlassianString(row.title, \"page.title\"),\n        version: versionNumber === undefined ? null : String(versionNumber),\n        createdAt: optionalString(row.createdAt),\n        updatedAt: optionalString(version.createdAt),\n        webUrl: webUi\n          ? new URL(webUi.startsWith(\"/wiki/\") ? webUi : `/wiki${webUi}`, source.siteUrl).toString()\n          : new URL(\n              `/wiki/spaces/${encodeURIComponent(source.key)}/pages/${encodeURIComponent(id)}`,\n              source.siteUrl,\n            ).toString(),\n      };\n    }),\n    nextCursor: confluenceCursor(objectRecord(payload._links).next),\n  };\n}\n\nasync function fetchAtlassianContent(\n  source: AtlassianSelectedSource,\n  entry: AtlassianInventoryEntry,\n  authorization: string | undefined,\n  maxBytes: number,\n): Promise<Uint8Array> {\n  if (!authorization) throw new SyncFailure(\"connection_reconnect_required\", true, true);\n  const objectId = entry.externalObjectId.slice(entry.externalObjectId.indexOf(\":\") + 1);\n  const markdown =\n    source.kind === \"jira_project\"\n      ? await jiraIssueMarkdown(source, objectId, entry, authorization)\n      : await confluencePageMarkdown(source, objectId, entry, authorization);\n  const bytes = new TextEncoder().encode(markdown);\n  if (bytes.byteLength > maxBytes) throw new SyncFailure(\"content_too_large\", false);\n  return bytes;\n}\n\nasync function jiraIssueMarkdown(\n  source: AtlassianSelectedSource,\n  issueId: string,\n  entry: AtlassianInventoryEntry,\n  authorization: string,\n): Promise<string> {\n  const issueUrl = new URL(\n    `${ATLASSIAN_API_BASE}/ex/jira/${encodeURIComponent(source.cloudId)}/rest/api/3/issue/${encodeURIComponent(issueId)}`,\n  );\n  issueUrl.searchParams.set(\n    \"fields\",\n    \"summary,description,status,issuetype,priority,assignee,reporter,labels,created,updated\",\n  );\n  const issue = objectRecord(await atlassianJsonRequest(issueUrl, authorization, \"Jira issue\"));\n  const fields = objectRecord(issue.fields);\n  const lines = [\n    `# ${entry.title}`,\n    \"\",\n    `- Key: ${optionalString(issue.key) ?? entry.title}`,\n    `- Type: ${optionalString(objectRecord(fields.issuetype).name) ?? \"Unknown\"}`,\n    `- Status: ${optionalString(objectRecord(fields.status).name) ?? \"Unknown\"}`,\n    `- Priority: ${optionalString(objectRecord(fields.priority).name) ?? \"None\"}`,\n    `- Assignee: ${optionalString(objectRecord(fields.assignee).displayName) ?? \"Unassigned\"}`,\n    `- Reporter: ${optionalString(objectRecord(fields.reporter).displayName) ?? \"Unknown\"}`,\n    `- Updated: ${optionalString(fields.updated) ?? \"Unknown\"}`,\n    `- Source: ${entry.sourceUri}`,\n    \"\",\n    \"## Description\",\n    \"\",\n    adfToMarkdown(fields.description) || \"No description.\",\n  ];\n  const labels = Array.isArray(fields.labels)\n    ? fields.labels.filter((value): value is string => typeof value === \"string\")\n    : [];\n  if (labels.length > 0) lines.splice(9, 0, `- Labels: ${labels.join(\", \")}`);\n  const comments = await jiraComments(source, issueId, authorization);\n  if (comments.length > 0) {\n    lines.push(\"\", \"## Comments\", \"\");\n    for (const comment of comments) {\n      const row = objectRecord(comment);\n      const author = optionalString(objectRecord(row.author).displayName) ?? \"Unknown author\";\n      const created = optionalString(row.created) ?? \"Unknown date\";\n      lines.push(`### ${author} · ${created}`, \"\", adfToMarkdown(row.body), \"\");\n    }\n  }\n  return lines.join(\"\\n\");\n}\n\nasync function jiraComments(\n  source: AtlassianSelectedSource,\n  issueId: string,\n  authorization: string,\n): Promise<unknown[]> {\n  const comments: unknown[] = [];\n  let startAt = 0;\n  for (let page = 0; page < 20; page += 1) {\n    const url = new URL(\n      `${ATLASSIAN_API_BASE}/ex/jira/${encodeURIComponent(source.cloudId)}/rest/api/3/issue/${encodeURIComponent(issueId)}/comment`,\n    );\n    url.searchParams.set(\"startAt\", String(startAt));\n    url.searchParams.set(\"maxResults\", \"100\");\n    url.searchParams.set(\"orderBy\", \"created\");\n    const payload = objectRecord(await atlassianJsonRequest(url, authorization, \"Jira comments\"));\n    const pageComments = Array.isArray(payload.comments) ? payload.comments : [];\n    comments.push(...pageComments);\n    const total = numberValue(payload.total) ?? comments.length;\n    if (comments.length >= total || pageComments.length === 0) break;\n    startAt += pageComments.length;\n  }\n  return comments;\n}\n\nasync function confluencePageMarkdown(\n  source: AtlassianSelectedSource,\n  pageId: string,\n  entry: AtlassianInventoryEntry,\n  authorization: string,\n): Promise<string> {\n  const pageUrl = new URL(\n    `${ATLASSIAN_API_BASE}/ex/confluence/${encodeURIComponent(source.cloudId)}/wiki/api/v2/pages/${encodeURIComponent(pageId)}`,\n  );\n  pageUrl.searchParams.set(\"body-format\", \"storage\");\n  const page = objectRecord(await atlassianJsonRequest(pageUrl, authorization, \"Confluence page\"));\n  const storage = objectRecord(objectRecord(page.body).storage);\n  const lines = [\n    `# ${entry.title}`,\n    \"\",\n    `- Space: ${source.name} (${source.key})`,\n    `- Updated: ${entry.modifiedTime ?? \"Unknown\"}`,\n    `- Source: ${entry.sourceUri}`,\n    \"\",\n    \"## Content\",\n    \"\",\n    optionalString(storage.value) ?? \"No content.\",\n  ];\n  const comments = await confluenceFooterComments(source, pageId, authorization);\n  if (comments.length > 0) {\n    lines.push(\"\", \"## Comments\", \"\");\n    for (const comment of comments) {\n      const row = objectRecord(comment);\n      const body = objectRecord(objectRecord(row.body).storage);\n      const version = objectRecord(row.version);\n      lines.push(\n        `### Comment · ${optionalString(version.createdAt) ?? \"Unknown date\"}`,\n        \"\",\n        optionalString(body.value) ?? \"\",\n        \"\",\n      );\n    }\n  }\n  return lines.join(\"\\n\");\n}\n\nasync function confluenceFooterComments(\n  source: AtlassianSelectedSource,\n  pageId: string,\n  authorization: string,\n): Promise<unknown[]> {\n  const comments: unknown[] = [];\n  let cursor: string | null = null;\n  for (let page = 0; page < 20; page += 1) {\n    const url = new URL(\n      `${ATLASSIAN_API_BASE}/ex/confluence/${encodeURIComponent(source.cloudId)}/wiki/api/v2/pages/${encodeURIComponent(pageId)}/footer-comments`,\n    );\n    url.searchParams.set(\"body-format\", \"storage\");\n    url.searchParams.set(\"limit\", \"100\");\n    if (cursor) url.searchParams.set(\"cursor\", cursor);\n    const payload = objectRecord(\n      await atlassianJsonRequest(url, authorization, \"Confluence page comments\"),\n    );\n    const results = Array.isArray(payload.results) ? payload.results : [];\n    comments.push(...results);\n    cursor = confluenceCursor(objectRecord(payload._links).next);\n    if (!cursor) break;\n  }\n  return comments;\n}\n\nasync function atlassianJsonRequest(\n  url: URL,\n  authorization: string,\n  label: string,\n): Promise<unknown> {\n  const response = await sourceFetch(url, {\n    headers: { authorization, accept: \"application/json\" },\n    redirect: \"error\",\n    signal: AbortSignal.timeout(20_000),\n  });\n  if (!response.ok) {\n    await response.body?.cancel().catch(() => undefined);\n    if (response.status === 401 || response.status === 403) {\n      throw new SyncFailure(\"connection_reconnect_required\", true, true);\n    }\n    throw new SyncFailure(\n      \"provider_unavailable\",\n      response.status >= 500 || response.status === 429,\n    );\n  }\n  return await readResponseJsonBounded(response, ATLASSIAN_JSON_MAX_BYTES, label);\n}\n\nexport function confluenceCursor(value: unknown): string | null {\n  const next = optionalString(value);\n  if (!next) return null;\n  const url = new URL(next, ATLASSIAN_API_BASE);\n  const cursor = url.searchParams.get(\"cursor\");\n  if (!cursor || cursor.length > 4_096 || /[\\u0000-\\u001f]/.test(cursor)) {\n    throw new Error(\"invalid Confluence cursor\");\n  }\n  return cursor;\n}\n\nexport function adfToMarkdown(value: unknown): string {\n  const node = objectRecord(value);\n  const type = optionalString(node.type);\n  const children = Array.isArray(node.content) ? node.content.map(adfToMarkdown).join(\"\") : \"\";\n  if (type === \"text\") {\n    let text = typeof node.text === \"string\" ? node.text : \"\";\n    const marks = Array.isArray(node.marks) ? node.marks : [];\n    for (const rawMark of marks) {\n      const mark = objectRecord(rawMark);\n      const markType = optionalString(mark.type);\n      if (markType === \"code\") text = `\\`${text}\\``;\n      if (markType === \"strong\") text = `**${text}**`;\n      if (markType === \"em\") text = `*${text}*`;\n      if (markType === \"strike\") text = `~~${text}~~`;\n      if (markType === \"link\") {\n        const href = optionalString(objectRecord(mark.attrs).href);\n        if (href) text = `[${text}](${href})`;\n      }\n    }\n    return text;\n  }\n  if (type === \"paragraph\") return `${children}\\n\\n`;\n  if (type === \"heading\") {\n    const level = Math.min(Math.max(numberValue(objectRecord(node.attrs).level) ?? 2, 1), 6);\n    return `${\"#\".repeat(level)} ${children.trim()}\\n\\n`;\n  }\n  if (type === \"hardBreak\") return \"  \\n\";\n  if (type === \"rule\") return \"---\\n\\n\";\n  if (type === \"blockquote\") {\n    return `${children\n      .trim()\n      .split(\"\\n\")\n      .map((line) => `> ${line}`)\n      .join(\"\\n\")}\\n\\n`;\n  }\n  if (type === \"bulletList\") {\n    return `${children.trimEnd()}\\n`;\n  }\n  if (type === \"orderedList\") {\n    return `${children.trimEnd()}\\n`;\n  }\n  if (type === \"listItem\") {\n    return `- ${children.trim().replaceAll(\"\\n\", \"\\n  \")}\\n`;\n  }\n  if (type === \"codeBlock\") return `\\`\\`\\`\\n${children.trimEnd()}\\n\\`\\`\\`\\n\\n`;\n  if (type === \"mention\") return `@${optionalString(objectRecord(node.attrs).text) ?? \"user\"}`;\n  if (type === \"emoji\") return optionalString(objectRecord(node.attrs).text) ?? \"\";\n  if (type === \"inlineCard\") {\n    const url = optionalString(objectRecord(node.attrs).url);\n    return url ? `[${url}](${url})` : \"\";\n  }\n  return children;\n}\n\nfunction objectRecord(value: unknown): Record<string, unknown> {\n  return value && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : {};\n}\n\nfunction requiredAtlassianString(value: unknown, label: string): string {\n  if (typeof value !== \"string\" || !value.trim()) throw new Error(`invalid_atlassian_${label}`);\n  return value;\n}\n\nfunction deterministicUuid(value: string): string {\n  const bytes = createHash(\"sha256\").update(value).digest().subarray(0, 16);\n  bytes[6] = (bytes[6]! & 0x0f) | 0x50;\n  bytes[8] = (bytes[8]! & 0x3f) | 0x80;\n  const hex = bytes.toString(\"hex\");\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n\nfunction safeFilename(value: string): string {\n  const normalized = value\n    .normalize(\"NFKC\")\n    .replace(/[\\\\/:*?\"<>|\\0-\\x1f]/g, \"_\")\n    .trim();\n  return (normalized || \"document\").slice(0, 240);\n}\n\nfunction requiredString(value: unknown, label: string): string {\n  if (typeof value !== \"string\" || !value.trim()) throw new Error(`invalid_google_drive_${label}`);\n  return value;\n}\n\nfunction optionalString(value: unknown): string | null {\n  return typeof value === \"string\" && value.length > 0 ? value : null;\n}\n\nfunction numberValue(value: unknown): number | undefined {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : undefined;\n}\n\nfunction boundedError(error: unknown): string {\n  return (error instanceof Error ? error.message : String(error)).slice(0, 1000);\n}\n\nfunction entryMetadataHash(entry: KnowledgeSyncEntry): string {\n  return createHash(\"sha256\")\n    .update(\n      JSON.stringify({\n        externalObjectId: entry.externalObjectId,\n        externalVersionId: entry.externalVersionId,\n        title: entry.title,\n        mimeType: entry.mimeType,\n        driveId: entry.driveId,\n        modifiedTime: entry.modifiedTime,\n        createdTime: entry.createdTime,\n        sourceUri: entry.sourceUri,\n      }),\n    )\n    .digest(\"hex\");\n}\n\nfunction inventoryLimit(\n  reason: GoogleDriveInventoryStopReason | null,\n): KnowledgeSourceSyncRunSummary[\"limitReached\"] {\n  if (reason === \"api_request_limit\") return \"provider_requests\";\n  if (reason === \"elapsed_time_limit\") return \"elapsed_time\";\n  if (reason === \"item_limit\") return \"items\";\n  if (reason === \"known_byte_limit\") return \"bytes\";\n  return null;\n}\n\nfunction recordSyncHealthTelemetry(\n  observability: Observability,\n  provider: \"google_drive\" | \"atlassian\",\n  summary: KnowledgeSourceSyncRunSummary,\n  outcome: \"succeeded\" | \"failed\",\n  failure?: SyncFailure,\n): void {\n  observability.observeHistogram({\n    name: \"opengeni_knowledge_source_sync_terminal_batch_duration_seconds\",\n    help: \"Terminal knowledge-source activity batch duration by provider and outcome.\",\n    labels: { provider, outcome },\n    value: Math.max(0, summary.elapsedMs) / 1_000,\n  });\n  if (summary.providerRequests > 0) {\n    observability.incrementCounter({\n      name: \"opengeni_knowledge_source_sync_provider_requests_total\",\n      help: \"Logical provider requests consumed by knowledge-source synchronization.\",\n      labels: { provider, outcome },\n      amount: summary.providerRequests,\n    });\n  }\n  if (summary.limitReached) {\n    observability.incrementCounter({\n      name: \"opengeni_knowledge_source_sync_limit_hits_total\",\n      help: \"Knowledge-source synchronization runs stopped by an explicit resource budget.\",\n      labels: { provider, limit: summary.limitReached },\n    });\n  }\n  if (summary.reconnectRequired) {\n    observability.incrementCounter({\n      name: \"opengeni_knowledge_source_sync_reconnect_required_total\",\n      help: \"Knowledge-source synchronization failures requiring connector reconnection.\",\n      labels: { provider },\n    });\n  }\n  if (failure) {\n    observability.incrementCounter({\n      name: \"opengeni_knowledge_source_sync_failures_total\",\n      help: \"Knowledge-source synchronization terminal failures by bounded reason.\",\n      labels: {\n        provider,\n        reason: failure.code,\n        retryable: failure.retryable ? \"true\" : \"false\",\n      },\n    });\n    observability.warn(\"Knowledge source sync failed\", {\n      provider,\n      outcome: failure.retryable ? \"retryable_failed\" : \"failed\",\n      reason: failure.code,\n      durationMs: summary.elapsedMs,\n    });\n    return;\n  }\n  observability.info(\"Knowledge source sync completed\", {\n    provider,\n    outcome: \"succeeded\",\n    durationMs: summary.elapsedMs,\n  });\n}\n\ntype SyncFailureCode = KnowledgeSourceSyncRunSummary[\"failures\"][number][\"code\"];\n\nclass SyncFailure extends Error {\n  constructor(\n    readonly code: SyncFailureCode,\n    readonly retryable: boolean,\n    readonly reconnectRequired = false,\n  ) {\n    super(code);\n    this.name = \"KnowledgeSourceSyncFailure\";\n  }\n}\n","import type { GoogleDriveProviderRetryOptions } from \"@opengeni/config\";\nimport type { FetchLike } from \"@opengeni/network\";\nimport type { Observability } from \"@opengeni/observability\";\n\nexport type GoogleDriveProviderOperation =\n  | \"start_page_token\"\n  | \"list_changes\"\n  | \"get_file\"\n  | \"list_children\"\n  | \"list_permissions\"\n  | \"download\"\n  | \"export\";\n\nexport type GoogleDriveProviderHeartbeat = (details: {\n  operation: GoogleDriveProviderOperation;\n  attempt: number;\n  phase: \"request_start\" | \"request_end\" | \"retry_delay_start\" | \"retry_delay_end\";\n}) => void;\n\nexport class GoogleDriveProviderTransportError extends Error {\n  constructor() {\n    super(\"google_drive_provider_transport_failed\");\n    this.name = \"GoogleDriveProviderTransportError\";\n  }\n}\n\n/**\n * Absorb only short, explicitly retryable Drive failures inside one bounded\n * activity. Provider bodies, URLs, headers, and credentials never enter logs\n * or metric labels. The caller's logical sync-request accounting remains\n * unchanged; this helper exposes physical attempts separately as telemetry.\n */\nexport async function fetchGoogleDriveProvider(input: {\n  fetchImpl: FetchLike;\n  url: string | URL;\n  init: RequestInit;\n  operation: GoogleDriveProviderOperation;\n  policy: GoogleDriveProviderRetryOptions;\n  observability: Observability;\n  heartbeat?: GoogleDriveProviderHeartbeat;\n  now?: () => number;\n  sleep?: (delayMs: number) => Promise<void>;\n}): Promise<Response> {\n  const now = input.now ?? Date.now;\n  const sleep = input.sleep ?? Bun.sleep;\n  let retryDelaySpentMs = 0;\n\n  for (let attempt = 1; attempt <= input.policy.attempts; attempt += 1) {\n    let response: Response;\n    input.heartbeat?.({ operation: input.operation, attempt, phase: \"request_start\" });\n    try {\n      response = await input.fetchImpl(input.url, {\n        ...input.init,\n        redirect: \"error\",\n        signal: AbortSignal.timeout(input.policy.requestTimeoutMs),\n      });\n    } catch {\n      input.heartbeat?.({ operation: input.operation, attempt, phase: \"request_end\" });\n      recordRequest(input.observability, input.operation, \"retryable_error\");\n      const delayMs = retryDelayMs(input.policy, attempt, null);\n      if (!canRetry(input.policy, attempt, retryDelaySpentMs, delayMs)) {\n        throw new GoogleDriveProviderTransportError();\n      }\n      recordRetry(input.observability, input.operation, \"transport\", attempt, delayMs);\n      retryDelaySpentMs += delayMs;\n      input.heartbeat?.({ operation: input.operation, attempt, phase: \"retry_delay_start\" });\n      await sleep(delayMs);\n      input.heartbeat?.({ operation: input.operation, attempt, phase: \"retry_delay_end\" });\n      continue;\n    }\n    input.heartbeat?.({ operation: input.operation, attempt, phase: \"request_end\" });\n\n    if (!isRetryableStatus(response.status)) {\n      recordRequest(\n        input.observability,\n        input.operation,\n        response.ok ? \"succeeded\" : \"terminal_error\",\n      );\n      return response;\n    }\n\n    recordRequest(input.observability, input.operation, \"retryable_error\");\n    const delayMs = retryDelayMs(\n      input.policy,\n      attempt,\n      retryAfterDelayMs(response.headers.get(\"retry-after\"), now()),\n    );\n    if (!canRetry(input.policy, attempt, retryDelaySpentMs, delayMs)) return response;\n    await response.body?.cancel().catch(() => undefined);\n    recordRetry(\n      input.observability,\n      input.operation,\n      response.status === 429 ? \"rate_limited\" : \"provider_unavailable\",\n      attempt,\n      delayMs,\n    );\n    retryDelaySpentMs += delayMs;\n    input.heartbeat?.({ operation: input.operation, attempt, phase: \"retry_delay_start\" });\n    await sleep(delayMs);\n    input.heartbeat?.({ operation: input.operation, attempt, phase: \"retry_delay_end\" });\n  }\n\n  throw new GoogleDriveProviderTransportError();\n}\n\nfunction canRetry(\n  policy: GoogleDriveProviderRetryOptions,\n  attempt: number,\n  retryDelaySpentMs: number,\n  delayMs: number,\n): boolean {\n  return attempt < policy.attempts && retryDelaySpentMs + delayMs <= policy.budgetMs;\n}\n\nfunction retryDelayMs(\n  policy: GoogleDriveProviderRetryOptions,\n  attempt: number,\n  retryAfterMs: number | null,\n): number {\n  const exponential = Math.min(\n    policy.maxDelayMs,\n    policy.initialDelayMs * 2 ** Math.max(0, attempt - 1),\n  );\n  return Math.min(policy.maxDelayMs, Math.max(exponential, retryAfterMs ?? 0));\n}\n\nfunction retryAfterDelayMs(value: string | null, nowMs: number): number | null {\n  if (!value) return null;\n  const seconds = Number(value);\n  if (Number.isFinite(seconds) && seconds >= 0) return Math.round(seconds * 1_000);\n  const timestamp = Date.parse(value);\n  return Number.isFinite(timestamp) ? Math.max(0, timestamp - nowMs) : null;\n}\n\nfunction isRetryableStatus(status: number): boolean {\n  return status === 429 || status >= 500;\n}\n\nfunction recordRequest(\n  observability: Observability,\n  operation: GoogleDriveProviderOperation,\n  outcome: \"succeeded\" | \"retryable_error\" | \"terminal_error\",\n): void {\n  observability.incrementCounter({\n    name: \"opengeni_google_drive_provider_requests_total\",\n    help: \"Google Drive provider request attempts by operation and bounded outcome.\",\n    labels: { operation, outcome },\n  });\n}\n\nfunction recordRetry(\n  observability: Observability,\n  operation: GoogleDriveProviderOperation,\n  reason: \"transport\" | \"rate_limited\" | \"provider_unavailable\",\n  attempt: number,\n  delayMs: number,\n): void {\n  observability.incrementCounter({\n    name: \"opengeni_google_drive_provider_retries_total\",\n    help: \"Bounded Google Drive provider retries by operation and reason.\",\n    labels: { operation, reason },\n  });\n  observability.observeHistogram({\n    name: \"opengeni_google_drive_provider_retry_delay_seconds\",\n    help: \"Delay applied before a bounded Google Drive provider retry.\",\n    labels: { operation, reason },\n    value: delayMs / 1_000,\n    buckets: [0.1, 0.25, 0.5, 1, 2, 5, 10, 30, 60],\n  });\n  observability.warn(\"Google Drive provider request retry scheduled\", {\n    provider: \"google_drive\",\n    operation,\n    outcome: \"retry_scheduled\",\n    reason,\n    attempt,\n    delayMs,\n  });\n}\n","import { createHash } from \"node:crypto\";\nimport type { GoogleDriveSelectedSource } from \"@opengeni/contracts/google-drive\";\nimport {\n  GOOGLE_DRIVE_FOLDER_MIME_TYPE,\n  planGoogleDriveTransfer,\n  type GoogleDriveInventoryEntry,\n  type GoogleDriveInventoryProviderItem,\n} from \"@opengeni/documents/google-drive\";\n\nconst MAX_TOKEN_CHARS = 4096;\nconst MAX_BOUNDARY_ID_CHARS = 1024;\nconst MAX_ANCESTOR_DEPTH = 100;\n\nexport type GoogleDriveSyncBudget = {\n  examinedItems: number;\n  providerRequests: number;\n  elapsedMs: number;\n};\n\nexport type GoogleDriveChangesCursor = {\n  version: 1;\n  kind: \"google_drive_changes\";\n  connectionId: string;\n  googlePermissionId: string;\n  sourceId: string;\n  driveId: string | null;\n  boundaryId: string;\n  pageToken: string;\n  cursorGeneration: number;\n  lastFullReconciliationAt: string;\n  nextFullReconciliationAt: string;\n};\n\nexport type GoogleDriveChangesCheckpoint = {\n  version: 2;\n  pageToken: string;\n  requiresFullReconciliation: boolean;\n  seenPageTokenHashes: string[];\n  budget: GoogleDriveSyncBudget;\n};\n\nexport type GoogleDriveChange = {\n  fileId: string;\n  removed: boolean;\n  file: GoogleDriveInventoryProviderItem | null;\n};\n\nexport type GoogleDriveChangesPage = {\n  changes: GoogleDriveChange[];\n  nextPageToken: string | null;\n  newStartPageToken: string | null;\n};\n\nexport type GoogleDriveChangesStopReason =\n  | \"item_limit\"\n  | \"api_request_limit\"\n  | \"elapsed_time_limit\";\n\nexport type GoogleDriveChangesDrainResult = {\n  status: \"complete\" | \"paused\";\n  stopReason: GoogleDriveChangesStopReason | null;\n  entries: GoogleDriveInventoryEntry[];\n  checkpoint: GoogleDriveChangesCheckpoint | null;\n  newStartPageToken: string | null;\n  requiresFullReconciliation: boolean;\n  providerRequests: number;\n  elapsedMs: number;\n  budget: GoogleDriveSyncBudget;\n  hardLimitReached: boolean;\n};\n\nexport function parseGoogleDriveChangesCursor(\n  value: Record<string, unknown> | null,\n  expected: {\n    connectionId: string;\n    googlePermissionId: string;\n    sourceId: string;\n    driveId: string | null;\n  },\n): GoogleDriveChangesCursor | null {\n  if (!value || value.version !== 1 || value.kind !== \"google_drive_changes\") return null;\n  if (\n    value.connectionId !== expected.connectionId ||\n    value.googlePermissionId !== expected.googlePermissionId ||\n    value.sourceId !== expected.sourceId ||\n    value.driveId !== expected.driveId ||\n    typeof value.boundaryId !== \"string\" ||\n    value.boundaryId.length < 1 ||\n    value.boundaryId.length > MAX_BOUNDARY_ID_CHARS ||\n    typeof value.pageToken !== \"string\" ||\n    value.pageToken.length < 1 ||\n    value.pageToken.length > MAX_TOKEN_CHARS ||\n    typeof value.cursorGeneration !== \"number\" ||\n    !Number.isSafeInteger(value.cursorGeneration) ||\n    value.cursorGeneration < 1 ||\n    typeof value.lastFullReconciliationAt !== \"string\" ||\n    !Number.isFinite(Date.parse(value.lastFullReconciliationAt)) ||\n    typeof value.nextFullReconciliationAt !== \"string\" ||\n    !Number.isFinite(Date.parse(value.nextFullReconciliationAt))\n  ) {\n    return null;\n  }\n  return value as GoogleDriveChangesCursor;\n}\n\nexport function buildGoogleDriveChangesCursor(input: {\n  connectionId: string;\n  googlePermissionId: string;\n  sourceId: string;\n  driveId: string | null;\n  boundaryId: string;\n  pageToken: string;\n  previousGeneration: number;\n  reconciledAt: Date;\n  fullReconciliationIntervalMs: number;\n}): GoogleDriveChangesCursor {\n  return {\n    version: 1,\n    kind: \"google_drive_changes\",\n    connectionId: input.connectionId,\n    googlePermissionId: input.googlePermissionId,\n    sourceId: input.sourceId,\n    driveId: input.driveId,\n    boundaryId: boundedBoundaryId(input.boundaryId),\n    pageToken: boundedToken(input.pageToken),\n    cursorGeneration: input.previousGeneration + 1,\n    lastFullReconciliationAt: input.reconciledAt.toISOString(),\n    nextFullReconciliationAt: new Date(\n      input.reconciledAt.getTime() + input.fullReconciliationIntervalMs,\n    ).toISOString(),\n  };\n}\n\nexport function advanceGoogleDriveChangesCursor(\n  cursor: GoogleDriveChangesCursor,\n  pageToken: string,\n): GoogleDriveChangesCursor {\n  return {\n    ...cursor,\n    pageToken: boundedToken(pageToken),\n    cursorGeneration: cursor.cursorGeneration + 1,\n  };\n}\n\nexport function googleDriveFullReconciliationDue(cursor: GoogleDriveChangesCursor, now: Date) {\n  return Date.parse(cursor.nextFullReconciliationAt) <= now.getTime();\n}\n\nexport async function resolveGoogleDriveChangesBoundaryId(input: {\n  source: GoogleDriveSelectedSource;\n  getFile: (fileId: string) => Promise<GoogleDriveInventoryProviderItem | null>;\n}): Promise<string> {\n  if (input.source.id !== \"root\" || input.source.driveId !== null) {\n    return boundedBoundaryId(input.source.id);\n  }\n  const root = await input.getFile(\"root\");\n  if (!root || root.mimeType !== GOOGLE_DRIVE_FOLDER_MIME_TYPE || root.trashed) {\n    throw new GoogleDriveChangesProtocolError(\"google_drive_root_boundary_invalid\");\n  }\n  return boundedBoundaryId(root.id);\n}\n\nexport function parseGoogleDriveChangesCheckpoint(\n  value: unknown,\n  limits: { maxItems: number; maxProviderRequests: number; maxElapsedMs: number },\n): GoogleDriveChangesCheckpoint | null {\n  try {\n    return validatedCheckpoint(value, limits);\n  } catch {\n    return null;\n  }\n}\n\nexport async function drainGoogleDriveChanges(input: {\n  source: GoogleDriveSelectedSource;\n  cursor: GoogleDriveChangesCursor;\n  checkpoint: GoogleDriveChangesCheckpoint | null;\n  maxItems: number;\n  maxProviderRequests: number;\n  maxElapsedMs: number;\n  maxInvocationElapsedMs: number;\n  maxFileBytes: number;\n  listChanges: (pageToken: string, pageSize: number) => Promise<GoogleDriveChangesPage>;\n  getFile: (fileId: string) => Promise<GoogleDriveInventoryProviderItem | null>;\n  observedExternalObjectIds: (ids: string[]) => Promise<Set<string>>;\n  now?: () => number;\n}): Promise<GoogleDriveChangesDrainResult> {\n  const now = input.now ?? Date.now;\n  const startedAt = now();\n  const checkpoint = input.checkpoint ? validatedCheckpoint(input.checkpoint, input) : null;\n  let pageToken = boundedToken(checkpoint?.pageToken ?? input.cursor.pageToken);\n  let requiresFullReconciliation = checkpoint?.requiresFullReconciliation ?? false;\n  const seenPageTokenHashes = new Set(checkpoint?.seenPageTokenHashes ?? []);\n  const initialBudget = checkpoint?.budget ?? emptyBudget();\n  const budget = { ...initialBudget };\n  const entries = new Map<string, GoogleDriveInventoryEntry>();\n\n  while (true) {\n    const invocationElapsedMs = Math.max(0, now() - startedAt);\n    budget.elapsedMs = initialBudget.elapsedMs + invocationElapsedMs;\n    const stopReason = limitReason(budget, input, invocationElapsedMs);\n    if (stopReason) {\n      return {\n        status: \"paused\",\n        stopReason,\n        entries: [...entries.values()],\n        checkpoint: {\n          version: 2,\n          pageToken,\n          requiresFullReconciliation,\n          seenPageTokenHashes: [...seenPageTokenHashes],\n          budget: { ...budget },\n        },\n        newStartPageToken: null,\n        requiresFullReconciliation,\n        providerRequests: budget.providerRequests,\n        elapsedMs: budget.elapsedMs,\n        budget: { ...budget },\n        hardLimitReached:\n          stopReason !== \"elapsed_time_limit\" || budget.elapsedMs >= input.maxElapsedMs,\n      };\n    }\n\n    const pageTokenHash = createHash(\"sha256\").update(pageToken).digest(\"hex\");\n    if (seenPageTokenHashes.has(pageTokenHash)) {\n      throw new GoogleDriveChangesProtocolError(\"google_drive_changes_page_token_cycle\");\n    }\n    seenPageTokenHashes.add(pageTokenHash);\n    budget.providerRequests += 1;\n    const pageSize = Math.min(100, input.maxItems - budget.examinedItems);\n    let page: GoogleDriveChangesPage;\n    try {\n      page = await input.listChanges(pageToken, pageSize);\n    } catch (error) {\n      budget.elapsedMs = initialBudget.elapsedMs + Math.max(0, now() - startedAt);\n      if (error instanceof GoogleDriveCursorInvalidError) error.budget = { ...budget };\n      throw error;\n    }\n    if (page.changes.length > pageSize) {\n      throw new GoogleDriveChangesProtocolError(\"google_drive_changes_page_exceeds_item_budget\");\n    }\n    budget.examinedItems += page.changes.length;\n\n    const repairCandidates = new Set<string>();\n    for (const change of page.changes) {\n      if (change.removed || !change.file || change.file.trashed) {\n        repairCandidates.add(change.fileId);\n        continue;\n      }\n      const membership = await isInsideSource({\n        file: change.file,\n        boundaryId: input.cursor.boundaryId,\n        getFile: async (fileId) => {\n          const ancestryElapsedMs = Math.max(0, now() - startedAt);\n          budget.elapsedMs = initialBudget.elapsedMs + ancestryElapsedMs;\n          if (\n            budget.providerRequests >= input.maxProviderRequests ||\n            budget.elapsedMs >= input.maxElapsedMs ||\n            ancestryElapsedMs >= input.maxInvocationElapsedMs\n          ) {\n            return null;\n          }\n          budget.providerRequests += 1;\n          const parent = await input.getFile(fileId);\n          budget.elapsedMs = initialBudget.elapsedMs + Math.max(0, now() - startedAt);\n          return parent;\n        },\n      });\n      if (change.file.mimeType === GOOGLE_DRIVE_FOLDER_MIME_TYPE) {\n        entries.delete(change.fileId);\n        if (membership !== \"outside\") requiresFullReconciliation = true;\n        else repairCandidates.add(change.fileId);\n        continue;\n      }\n      if (membership === \"inside\") {\n        entries.set(change.fileId, toInventoryEntry(change.file, input.source, input.maxFileBytes));\n      } else if (membership === \"unknown\") {\n        entries.delete(change.fileId);\n        requiresFullReconciliation = true;\n      } else {\n        repairCandidates.add(change.fileId);\n      }\n    }\n    if (repairCandidates.size > 0) {\n      for (const fileId of repairCandidates) {\n        if (entries.delete(fileId)) requiresFullReconciliation = true;\n      }\n      const observed = await input.observedExternalObjectIds([...repairCandidates]);\n      if (observed.size > 0) requiresFullReconciliation = true;\n    }\n    if (page.nextPageToken) {\n      pageToken = boundedToken(page.nextPageToken);\n      continue;\n    }\n    if (!page.newStartPageToken) {\n      throw new GoogleDriveChangesProtocolError(\"google_drive_changes_terminal_token_missing\");\n    }\n    budget.elapsedMs = initialBudget.elapsedMs + Math.max(0, now() - startedAt);\n    return {\n      status: \"complete\",\n      stopReason: null,\n      entries: [...entries.values()],\n      checkpoint: null,\n      newStartPageToken: boundedToken(page.newStartPageToken),\n      requiresFullReconciliation,\n      providerRequests: budget.providerRequests,\n      elapsedMs: budget.elapsedMs,\n      budget: { ...budget },\n      hardLimitReached: false,\n    };\n  }\n}\n\nasync function isInsideSource(input: {\n  file: GoogleDriveInventoryProviderItem;\n  boundaryId: string;\n  getFile: (fileId: string) => Promise<GoogleDriveInventoryProviderItem | null>;\n}): Promise<\"inside\" | \"outside\" | \"unknown\"> {\n  if (input.file.id === input.boundaryId) return \"inside\";\n  let parents = input.file.parents;\n  const seen = new Set<string>([input.file.id]);\n  for (let depth = 0; depth < MAX_ANCESTOR_DEPTH; depth += 1) {\n    if (parents.includes(input.boundaryId)) return \"inside\";\n    const next = parents.find((parent) => !seen.has(parent));\n    if (!next) return \"outside\";\n    seen.add(next);\n    const parent = await input.getFile(next);\n    if (!parent) return \"unknown\";\n    parents = parent.parents;\n  }\n  return \"unknown\";\n}\n\nfunction toInventoryEntry(\n  file: GoogleDriveInventoryProviderItem,\n  source: GoogleDriveSelectedSource,\n  maxFileBytes: number,\n): GoogleDriveInventoryEntry {\n  return {\n    externalObjectId: file.id,\n    externalVersionId: file.version ?? file.modifiedTime ?? file.md5Checksum,\n    sourceId: source.id,\n    parentFolderId: file.parents[0] ?? source.id,\n    driveId: file.driveId ?? source.driveId,\n    title: file.name,\n    mimeType: file.mimeType,\n    modifiedTime: file.modifiedTime,\n    createdTime: file.createdTime,\n    sourceUri:\n      file.webViewLink ?? `https://drive.google.com/open?id=${encodeURIComponent(file.id)}`,\n    transfer: planGoogleDriveTransfer(file, maxFileBytes),\n  };\n}\n\nfunction validatedCheckpoint(\n  value: unknown,\n  limits: { maxItems: number; maxProviderRequests: number; maxElapsedMs: number },\n): GoogleDriveChangesCheckpoint {\n  if (!value || typeof value !== \"object\") {\n    throw new Error(\"google_drive_changes_checkpoint_invalid\");\n  }\n  const checkpoint = value as Record<string, unknown>;\n  const budget = checkpoint.budget;\n  if (\n    checkpoint.version !== 2 ||\n    typeof checkpoint.requiresFullReconciliation !== \"boolean\" ||\n    !Array.isArray(checkpoint.seenPageTokenHashes) ||\n    checkpoint.seenPageTokenHashes.some((hash) => !/^[a-f0-9]{64}$/.test(hash)) ||\n    new Set(checkpoint.seenPageTokenHashes).size !== checkpoint.seenPageTokenHashes.length ||\n    checkpoint.seenPageTokenHashes.length > limits.maxProviderRequests ||\n    !budget ||\n    typeof budget !== \"object\"\n  ) {\n    throw new Error(\"google_drive_changes_checkpoint_invalid\");\n  }\n  if (typeof checkpoint.pageToken !== \"string\") {\n    throw new Error(\"google_drive_changes_checkpoint_invalid\");\n  }\n  boundedToken(checkpoint.pageToken);\n  const budgetRow = budget as Record<string, unknown>;\n  for (const [key, maximum] of [\n    [\"examinedItems\", limits.maxItems],\n    [\"providerRequests\", limits.maxProviderRequests],\n    [\"elapsedMs\", limits.maxElapsedMs],\n  ] as const) {\n    const budgetValue = budgetRow[key];\n    if (\n      !Number.isSafeInteger(budgetValue) ||\n      Number(budgetValue) < 0 ||\n      Number(budgetValue) > maximum\n    ) {\n      throw new Error(\"google_drive_changes_checkpoint_budget_invalid\");\n    }\n  }\n  if (checkpoint.seenPageTokenHashes.length > Number(budgetRow.providerRequests)) {\n    throw new Error(\"google_drive_changes_checkpoint_request_history_invalid\");\n  }\n  return value as GoogleDriveChangesCheckpoint;\n}\n\nfunction limitReason(\n  budget: GoogleDriveSyncBudget,\n  input: {\n    maxItems: number;\n    maxProviderRequests: number;\n    maxElapsedMs: number;\n    maxInvocationElapsedMs: number;\n  },\n  invocationElapsedMs: number,\n): GoogleDriveChangesStopReason | null {\n  if (budget.examinedItems >= input.maxItems) return \"item_limit\";\n  if (budget.providerRequests >= input.maxProviderRequests) return \"api_request_limit\";\n  if (\n    budget.elapsedMs >= input.maxElapsedMs ||\n    invocationElapsedMs >= input.maxInvocationElapsedMs\n  ) {\n    return \"elapsed_time_limit\";\n  }\n  return null;\n}\n\nfunction emptyBudget(): GoogleDriveSyncBudget {\n  return { examinedItems: 0, providerRequests: 0, elapsedMs: 0 };\n}\n\nfunction boundedToken(value: string): string {\n  if (value.length < 1 || value.length > MAX_TOKEN_CHARS) {\n    throw new Error(\"google_drive_changes_token_invalid\");\n  }\n  return value;\n}\n\nfunction boundedBoundaryId(value: string): string {\n  if (value.length < 1 || value.length > MAX_BOUNDARY_ID_CHARS) {\n    throw new Error(\"google_drive_changes_boundary_invalid\");\n  }\n  return value;\n}\n\nexport class GoogleDriveCursorInvalidError extends Error {\n  budget: GoogleDriveSyncBudget | null = null;\n\n  constructor() {\n    super(\"google_drive_changes_cursor_invalid\");\n    this.name = \"GoogleDriveCursorInvalidError\";\n  }\n}\n\nexport class GoogleDriveChangesProtocolError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"GoogleDriveChangesProtocolError\";\n  }\n}\n","export {\n  resolveRigProviderImageSelection,\n  rigProviderImageSourceImage,\n  settingsWithRigImage,\n  settingsWithRigProviderImage,\n  type RigProviderImageSelectionReason,\n} from \"@opengeni/core\";\n","import type { SessionEventType } from \"@opengeni/contracts\";\nimport { TURN_ACTIVITY_CANCELLATION_HEARTBEAT_INTERVAL_MS } from \"@opengeni/core\";\nimport type { AppendEventInput } from \"@opengeni/db\";\nimport { Context } from \"@temporalio/activity\";\n\n// Trailing-flush window. A burst of coalesced deltas followed by model silence\n// must not sit in `pending` unbounded — without a timer, flush fires only on\n// the NEXT push. Matched to the 33ms coalesce window so the client-visible\n// latency added by batching is bounded to ~one window (imperceptible, and far\n// cheaper than the per-delta DB round-trip it replaces).\nconst TRAILING_FLUSH_MS = 33;\nconst MAX_BATCH_EVENTS = 50;\n// Keep model ingestion independent from a slow durable append, but never let a\n// provider outrun storage without bound. At the high-water mark `push` waits for\n// the serialized drain before consuming more provider output.\nconst MAX_BUFFERED_EVENTS = 1_000;\n\n/** Optional metrics seam for the batcher. `onFlush` fires once per flush (on both\n *  success and failure) with the coalesced event count and the flush duration, so\n *  the worker can meter batch shape without the batcher knowing about Observability.\n *  `now` is injectable for deterministic tests. Both are optional; absent ⇒ no-op. */\nexport type RuntimeBatcherOptions = {\n  onFlush?: (info: { events: number; durationSeconds: number }) => void;\n  now?: () => number;\n};\n\nexport function createRuntimeBatcher(\n  flushEvents: (events: AppendEventInput[]) => Promise<void>,\n  options: RuntimeBatcherOptions = {},\n) {\n  const now = options.now ?? (() => performance.now());\n  let pending: AppendEventInput[] = [];\n  let lastFlush = Date.now();\n  let trailingTimer: ReturnType<typeof setTimeout> | null = null;\n  let activeBatchSize = 0;\n  // One drain loop owns `flushEvents`, so DB-assigned sequence order always\n  // matches push order. Ordinary deltas do not await this promise; structural\n  // boundaries, explicit flushes, and the bounded high-water mark do.\n  let drainPromise: Promise<void> | null = null;\n  // A timer has no direct awaiter. Retain its failure so the next push or final\n  // flush terminates the turn instead of silently losing streamed evidence.\n  let flushFailed = false;\n  let flushFailure: unknown;\n  // The high-volume token deltas (agent.message.delta, agent.reasoning.delta,\n  // sandbox.command.output.delta) are DELIBERATELY NOT here: they coalesce\n  // under the 50-event / 33ms policy into one appendSessionEvents txn + one\n  // publish per flush, instead of one DB round-trip per token. Only events that\n  // must be delivered promptly stay structural (flush-immediately). PTY bytes\n  // stay structural on purpose — an interactive terminal is useless batched\n  // 33ms behind (P4.4).\n  const structural = new Set<SessionEventType>([\n    \"terminal.pty.output.delta\",\n    \"agent.toolCall.created\",\n    \"agent.toolCall.output\",\n    \"agent.message.completed\",\n    \"tool.auth_needed\",\n    \"credential.auth_needed\",\n    \"session.requiresAction\",\n    \"turn.completed\",\n    \"turn.failed\",\n    \"turn.cancelled\",\n  ]);\n  return {\n    push: async (event: { type: SessionEventType; payload: unknown }) => {\n      throwIfFlushFailed();\n      // Append BEFORE the structural check so a structural event's flush always\n      // carries any pending deltas in order (same flush, order preserved).\n      pending.push({ type: event.type, payload: event.payload });\n      const elapsed = Date.now() - lastFlush;\n      if (structural.has(event.type)) {\n        await flush();\n        return;\n      }\n      if (pending.length >= MAX_BATCH_EVENTS || elapsed >= TRAILING_FLUSH_MS) {\n        // Start the serialized drain, but keep consuming provider deltas while\n        // the append/publish round-trip is in flight. The active drain records\n        // any failure for the next awaited boundary.\n        void startDrain().catch(() => undefined);\n      }\n      if (activeBatchSize + pending.length >= MAX_BUFFERED_EVENTS) {\n        await flush();\n        return;\n      }\n      armTrailingTimer();\n    },\n    flush,\n  };\n\n  function armTrailingTimer() {\n    if (trailingTimer !== null) {\n      return;\n    }\n    trailingTimer = setTimeout(() => {\n      trailingTimer = null;\n      // A timer has no awaiter, so prevent an unhandled rejection. startDrain\n      // retains the exact error and the next push/final flush rethrows it.\n      void flush().catch(() => undefined);\n    }, TRAILING_FLUSH_MS);\n    if (\"unref\" in trailingTimer && typeof trailingTimer.unref === \"function\") {\n      trailingTimer.unref();\n    }\n  }\n\n  function clearTrailingTimer() {\n    if (trailingTimer !== null) {\n      clearTimeout(trailingTimer);\n      trailingTimer = null;\n    }\n  }\n\n  async function flush(): Promise<void> {\n    throwIfFlushFailed();\n    clearTrailingTimer();\n    await startDrain();\n    throwIfFlushFailed();\n  }\n\n  function startDrain(): Promise<void> {\n    if (drainPromise) {\n      return drainPromise;\n    }\n    if (flushFailed) {\n      return Promise.reject(flushFailure);\n    }\n    if (pending.length === 0) {\n      return Promise.resolve();\n    }\n    clearTrailingTimer();\n    const running = (async () => {\n      while (pending.length > 0) {\n        const events = pending.splice(0, MAX_BATCH_EVENTS);\n        activeBatchSize = events.length;\n        lastFlush = Date.now();\n        const startedAt = now();\n        try {\n          await flushEvents(events);\n        } catch (error) {\n          flushFailed = true;\n          flushFailure = error;\n          throw error;\n        } finally {\n          activeBatchSize = 0;\n          if (options.onFlush) {\n            try {\n              options.onFlush({\n                events: events.length,\n                durationSeconds: Math.max(0, (now() - startedAt) / 1000),\n              });\n            } catch {\n              // Metrics emission must never affect a flush.\n            }\n          }\n        }\n      }\n    })();\n    drainPromise = running.finally(() => {\n      drainPromise = null;\n    });\n    return drainPromise;\n  }\n\n  function throwIfFlushFailed(): void {\n    if (flushFailed) {\n      throw flushFailure;\n    }\n  }\n}\n\nexport function currentActivityContext(): Context | null {\n  try {\n    return Context.current();\n  } catch {\n    return null;\n  }\n}\n\nexport function startActivityHeartbeat(\n  context: Context | null,\n  details: Record<string, unknown>,\n  schedule: typeof setInterval = setInterval,\n): ReturnType<typeof setInterval> | null {\n  if (!context) {\n    return null;\n  }\n  const timer = schedule(() => {\n    context.heartbeat({ ...details, at: new Date().toISOString() });\n  }, TURN_ACTIVITY_CANCELLATION_HEARTBEAT_INTERVAL_MS);\n  if (\"unref\" in timer && typeof timer.unref === \"function\") {\n    timer.unref();\n  }\n  return timer;\n}\n\nexport async function nextStreamEvent<T>(\n  iterator: AsyncIterator<T>,\n  context: Context | null,\n): Promise<IteratorResult<T>> {\n  if (!context) {\n    return await iterator.next();\n  }\n  const signal = context.cancellationSignal;\n  if (signal.aborted) {\n    throw signal.reason;\n  }\n\n  // Context.cancelled never settles for a normally completed activity. Racing\n  // every token/event read against that lifetime promise leaves one losing\n  // Promise reaction attached for every event until the Context itself dies.\n  // Use the equivalent Temporal AbortSignal and remove each listener as soon as\n  // the iterator wins, so a long stream retains at most its one pending read.\n  return await new Promise<IteratorResult<T>>((resolve, reject) => {\n    let settled = false;\n    const settle = (complete: () => void) => {\n      if (settled) return;\n      settled = true;\n      signal.removeEventListener(\"abort\", onAbort);\n      complete();\n    };\n    const onAbort = () => settle(() => reject(signal.reason));\n\n    signal.addEventListener(\"abort\", onAbort, { once: true });\n    if (signal.aborted) {\n      onAbort();\n      return;\n    }\n\n    let next: PromiseLike<IteratorResult<T>>;\n    try {\n      next = iterator.next();\n    } catch (error) {\n      settle(() => reject(error));\n      return;\n    }\n    void Promise.resolve(next).then(\n      (result) => settle(() => resolve(result)),\n      (error) => settle(() => reject(error)),\n    );\n  });\n}\n","import { sandboxLeaseTelemetryKey, type Observability } from \"@opengeni/observability\";\n\ntype SafeSnapshotError = {\n  errorClass: \"SnapshotOperationError\";\n  errorCode: \"snapshot_operation_failed\";\n  status?: number;\n  origin: \"sandbox-resume\" | \"worker-lifecycle\";\n  causeName?: string;\n  integrityCode?: string;\n  providerErrorName?: string;\n  providerGrpcCode?: number;\n  providerHttpStatus?: number;\n  providerRetryable?: boolean;\n};\n\nexport function safeSnapshotError(\n  error: unknown,\n  origin: SafeSnapshotError[\"origin\"] = \"sandbox-resume\",\n): SafeSnapshotError {\n  const fields: SafeSnapshotError = {\n    errorClass: \"SnapshotOperationError\",\n    errorCode: \"snapshot_operation_failed\",\n    origin,\n  };\n  try {\n    if (error && typeof error === \"object\") {\n      const candidate = error as {\n        name?: unknown;\n        code?: unknown;\n        status?: unknown;\n        statusCode?: unknown;\n      };\n      if (\n        typeof candidate.name === \"string\" &&\n        /^[A-Z][A-Za-z0-9]{2,62}Error$/u.test(candidate.name)\n      ) {\n        fields.causeName = candidate.name;\n      }\n      if (typeof candidate.code === \"string\" && /^[a-z0-9_]{1,64}$/u.test(candidate.code)) {\n        fields.integrityCode = candidate.code;\n      }\n      const status = Number(candidate.status ?? candidate.statusCode);\n      if (Number.isInteger(status) && status >= 100 && status <= 599) fields.status = status;\n    }\n  } catch {\n    // Diagnostics must never replace the exact internal snapshot failure.\n  }\n  // The SDK wraps provider classification in details, not Error.cause. Never\n  // project free-form messages, causes, request IDs or payloads. Read fields\n  // independently so a hostile getter cannot hide other safe classifications.\n  const read = (value: unknown, key: string): unknown => {\n    try {\n      return value && typeof value === \"object\" ? Reflect.get(value, key) : undefined;\n    } catch {\n      return undefined;\n    }\n  };\n  const details = read(error, \"details\");\n  const providerName = read(details, \"errorName\");\n  if (\n    typeof providerName === \"string\" &&\n    [\n      \"ClientError\",\n      \"TimeoutError\",\n      \"ConnectionError\",\n      \"AuthError\",\n      \"NotFoundError\",\n      \"InvalidError\",\n      \"RemoteError\",\n      \"AbortError\",\n    ].includes(providerName)\n  )\n    fields.providerErrorName = providerName;\n  const grpcCode = read(details, \"errorCode\");\n  if (\n    providerName === \"ClientError\" &&\n    typeof grpcCode === \"number\" &&\n    Number.isInteger(grpcCode) &&\n    grpcCode >= 0 &&\n    grpcCode <= 16\n  )\n    fields.providerGrpcCode = grpcCode;\n  for (const key of [\"status\", \"httpStatus\", \"responseStatus\"]) {\n    const status = read(details, key);\n    if (typeof status === \"number\" && Number.isInteger(status) && status >= 100 && status <= 599) {\n      fields.providerHttpStatus = status;\n      break;\n    }\n  }\n  const retryable = read(error, \"retryable\");\n  if (typeof retryable === \"boolean\") fields.providerRetryable = retryable;\n  return fields;\n}\n\nexport function warnDrainSnapshotFailure(\n  observability: Pick<Observability, \"warn\">,\n  message: string,\n  error: unknown,\n  lease: { workspaceId?: string; sandboxGroupId: string; leaseEpoch: number },\n): void {\n  try {\n    observability.warn(message, {\n      ...safeSnapshotError(error, \"worker-lifecycle\"),\n      ...(lease.workspaceId\n        ? { sandboxLeaseKey: sandboxLeaseTelemetryKey(lease.workspaceId, lease.sandboxGroupId) }\n        : {}),\n      leaseEpoch: lease.leaseEpoch,\n    });\n  } catch {\n    // Logging cannot replace the provider failure or prevent claim release.\n  }\n}\n","import { uploadWorkspaceArchiveSpool, type ObjectStorage } from \"@opengeni/storage\";\nimport { randomUUID } from \"node:crypto\";\nimport type { VerifiedHostWorkspaceArchive } from \"@opengeni/runtime/sandbox\";\nimport {\n  parseWorkspaceArchiveObjectRef,\n  workspaceArchiveObjectKey,\n  type WorkspaceArchiveDescriptor,\n  type WorkspaceArchiveObjectRef,\n} from \"@opengeni/contracts\";\n\nexport class WorkspaceArchiveObjectStorageRequiredError extends Error {\n  readonly code = \"workspace_archive_object_storage_required\" as const;\n\n  constructor(backend: string) {\n    super(`${backend} workspace archives require object storage`);\n    this.name = \"WorkspaceArchiveObjectStorageRequiredError\";\n  }\n}\n\nexport function collectWorkspaceArchiveObjectKeys(\n  resumeState: Record<string, unknown> | null | undefined,\n): Set<string> {\n  const sessionState =\n    resumeState?.sessionState && typeof resumeState.sessionState === \"object\"\n      ? (resumeState.sessionState as Record<string, unknown>)\n      : null;\n  const keys = new Set<string>();\n  for (const value of [sessionState?.workspaceArchiveRef, sessionState?.workspaceArchivePrevRef]) {\n    const ref = parseWorkspaceArchiveObjectRef(value);\n    if (ref) keys.add(ref.key);\n  }\n  return keys;\n}\n\nexport async function putTarWorkspaceArchiveObject(input: {\n  objectStorage: ObjectStorage;\n  accountId: string;\n  workspaceId: string;\n  sandboxGroupId: string;\n  archive:\n    | { bytes: Uint8Array; descriptor: WorkspaceArchiveDescriptor }\n    | VerifiedHostWorkspaceArchive;\n}): Promise<WorkspaceArchiveObjectRef> {\n  // Snapshot caller-owned metadata before any provider callback can mutate it.\n  const descriptor = structuredClone(input.archive.descriptor);\n  if (descriptor.version !== 1) {\n    throw new Error(\"Object-storage workspace archives are portable tar only\");\n  }\n  const key = workspaceArchiveObjectKey({\n    accountId: input.accountId,\n    workspaceId: input.workspaceId,\n    sandboxGroupId: input.sandboxGroupId,\n    revision: descriptor.revision,\n    uploadId: randomUUID(),\n  });\n  const archive = input.archive;\n  if (\"spool\" in archive) {\n    if (\n      archive.spool.byteSize !== descriptor.archiveBytes ||\n      archive.spool.sha256 !== descriptor.archiveSha256\n    ) {\n      throw new Error(\"Workspace archive spool does not match its verified descriptor\");\n    }\n  }\n  const source =\n    \"spool\" in archive\n      ? archive.spool\n      : {\n          path: \"\",\n          byteSize: archive.bytes.byteLength,\n          sha256: descriptor.archiveSha256,\n          async *open() {\n            for (let offset = 0; offset < archive.bytes.length; offset += 1024 * 1024)\n              yield archive.bytes.subarray(offset, offset + 1024 * 1024);\n          },\n          async dispose() {},\n        };\n  try {\n    await uploadWorkspaceArchiveSpool(input.objectStorage, key, {\n      ...source,\n      byteSize: descriptor.archiveBytes,\n      sha256: descriptor.archiveSha256,\n      open: source.open.bind(source),\n    });\n  } catch (error) {\n    // This fresh locator has never been offered to database publication. An\n    // ambiguous provider upload can leave an orphan, never overwrite a retained\n    // archive or justify deleting another attempt's object.\n    await input.objectStorage.deleteObject(key).catch(() => undefined);\n    throw error;\n  }\n  return {\n    schema: \"sandbox_archive_object_v1\",\n    key,\n    sha256: descriptor.archiveSha256,\n    bytes: descriptor.archiveBytes,\n    backend: input.objectStorage.backend,\n  };\n}\n\n/** The caller owns a fresh candidate returned by this module. A thrown or lost\n * database response is UNKNOWN: it may have committed, so never delete on catch.\n * Only the transaction's exact candidate disposition can authorize cleanup. */\nexport async function persistWorkspaceArchiveCandidate<\n  T extends {\n    wrote: boolean;\n    candidateDisposition?: \"adopted\" | \"already_referenced\" | \"unused\";\n  },\n>(input: {\n  objectStorage?: ObjectStorage | null;\n  ref?: WorkspaceArchiveObjectRef;\n  persist: () => Promise<T>;\n}): Promise<T> {\n  const objectStorage = input.objectStorage;\n  const ref = input.ref ? { ...input.ref } : undefined;\n  const result = await input.persist();\n  if (objectStorage && ref && result.candidateDisposition === \"unused\") {\n    await deleteUnpublishedWorkspaceArchiveObject(objectStorage, ref);\n  }\n  return result;\n}\n\nexport async function putVersion1TarArchiveOrInline(input: {\n  backend: string;\n  objectStorage?: ObjectStorage | null | undefined;\n  accountId: string;\n  workspaceId: string;\n  sandboxGroupId: string;\n  archive:\n    | VerifiedHostWorkspaceArchive\n    | {\n        bytes: Uint8Array;\n        descriptor: WorkspaceArchiveDescriptor;\n        base64: string;\n      };\n  metrics?: {\n    onWorkspaceArchiveObject?: (input: {\n      outcome: \"put\" | \"put_failed\" | \"deleted_unpublished\";\n      backend: string;\n    }) => void;\n  };\n}): Promise<{\n  workspaceArchive?: string;\n  workspaceArchiveRef?: WorkspaceArchiveObjectRef;\n}> {\n  if (input.archive.descriptor.version !== 1) {\n    if (\"spool\" in input.archive) throw new Error(\"Native snapshots cannot use a portable spool\");\n    return { workspaceArchive: input.archive.base64 };\n  }\n  if (input.backend === \"opensandbox\" && !input.objectStorage) {\n    throw new WorkspaceArchiveObjectStorageRequiredError(\"opensandbox\");\n  }\n  if (!input.objectStorage) {\n    if (\"spool\" in input.archive)\n      throw new WorkspaceArchiveObjectStorageRequiredError(input.backend);\n    return { workspaceArchive: input.archive.base64 };\n  }\n  try {\n    const workspaceArchiveRef = await putTarWorkspaceArchiveObject({\n      objectStorage: input.objectStorage,\n      accountId: input.accountId,\n      workspaceId: input.workspaceId,\n      sandboxGroupId: input.sandboxGroupId,\n      archive: input.archive,\n    });\n    try {\n      input.metrics?.onWorkspaceArchiveObject?.({\n        outcome: \"put\",\n        backend: input.objectStorage.backend,\n      });\n    } catch {\n      /* metrics must not affect persist */\n    }\n    console.info(\"workspace archive object put\", {\n      key: workspaceArchiveRef.key,\n      bytes: workspaceArchiveRef.bytes,\n      sha256: workspaceArchiveRef.sha256,\n    });\n    return { workspaceArchiveRef };\n  } catch (error) {\n    try {\n      input.metrics?.onWorkspaceArchiveObject?.({\n        outcome: \"put_failed\",\n        backend: input.objectStorage.backend,\n      });\n    } catch {\n      /* metrics must not affect persist */\n    }\n    throw error;\n  }\n}\n\nexport async function deleteUnpublishedWorkspaceArchiveObject(\n  objectStorage: ObjectStorage | null | undefined,\n  ref: WorkspaceArchiveObjectRef | undefined,\n  metrics?: {\n    onWorkspaceArchiveObject?: (input: { outcome: \"deleted_unpublished\"; backend: string }) => void;\n  },\n): Promise<void> {\n  if (!objectStorage || !ref) return;\n  try {\n    await objectStorage.deleteObject(ref.key);\n    try {\n      metrics?.onWorkspaceArchiveObject?.({\n        outcome: \"deleted_unpublished\",\n        backend: objectStorage.backend,\n      });\n    } catch {\n      /* metrics must not affect persist */\n    }\n  } catch {\n    console.error(\"unpublished workspace archive object delete failed\", { key: ref.key });\n  }\n}\n\nexport async function deleteWorkspaceArchiveObjectKeys(\n  objectStorage: ObjectStorage,\n  keys: Iterable<string>,\n): Promise<void> {\n  for (const key of keys) {\n    await objectStorage.deleteObject(key);\n  }\n}\n","// apps/worker/src/sandbox-routing.ts — wire the agent-loop-free routing proxy\n// (`@opengeni/runtime` RoutingSandboxSession + makeActiveBackendResolver) to the\n// real DB pointer + the live NATS control plane for the WORKER TURN path (M7).\n//\n// The turn resumes its group box by id (resumeBoxForTurn) and injects it\n// NON-OWNED into the run. With hot-swap, the injected `session` must be the\n// STABLE routing proxy: the SDK binds to it ONCE and calls its\n// methods per tool call; the proxy re-reads `(active_sandbox_id, active_epoch)`\n// per op and dispatches to the currently-active backend (the group Modal box by\n// default, or a swap target — a sibling Modal box or a selfhosted machine).\n//\n// The glue here is the DB-coupled half the leaf cannot own (the leaf must stay\n// agent-loop-free + db-free): readActiveSandbox (the pointer), getSandbox (the\n// target lookup), and the selfhosted ControlRpc built over the events bus's NATS\n// request/reply connection.\n\nimport { sandboxLifecycleTransitionWaitMs, type Settings } from \"@opengeni/config\";\nimport {\n  createProviderCommandRetainer,\n  supervisedCommandProtocolReady,\n} from \"@opengeni/db/retained-provider-commands\";\nimport {\n  adoptConnectedMachineSessionBackgroundCommand,\n  adoptManagedSessionBackgroundCommand,\n  advanceWorkspaceGenerationForRetainedProcess,\n  retainedProviderCommandPersistence,\n  advanceWorkspaceGeneration,\n  getRetainedProcess,\n  retainWorkspaceMutationProcess,\n  retainedProcessSettlementIdentity,\n  settleConnectedMachineSessionBackgroundCommand,\n  settleRetainedProcess,\n  verifyRetainedProcessMutationSettlement,\n  verifyWorkspaceMutationSettlement,\n  getSandbox,\n  getLiveEnrollmentConnection,\n  markWarmLeaseInstanceLost,\n  readLease,\n  readActiveSandbox,\n  resolvePersonalMachineConnectionForAttempt,\n  SandboxRetainedProcessPromotionFencedError,\n  type Database,\n  type EnrollmentRecord,\n  type SandboxWorkspaceMutationAdmission,\n} from \"@opengeni/db\";\nimport { observeSessionBackgroundCommandCompletion } from \"@opengeni/db/session-background-commands\";\nimport { appendSessionCommandOutput } from \"@opengeni/db/session-command-output\";\nimport type { OpStreamOutputFrame } from \"@opengeni/runtime/sandbox\";\nimport type { EventBus } from \"@opengeni/events\";\nimport {\n  buildSelfhostedBackendSession,\n  ActiveBackendUnresolvableError,\n  establishSandboxSessionFromEnvelope,\n  isProviderSandboxGoneDuringRoutedOperation,\n  isProviderSandboxNotFoundError,\n  makeActiveBackendResolver,\n  NatsControlRpc,\n  NatsOpStreamTransport,\n  RoutingBackendRecoveryRequiredError,\n  RoutingSandboxSession,\n  resolveModalCheckpointProviderBindingForSession,\n  resolveConnectedMachineWorkspaceRoot,\n  sandboxProviderInstanceIdFromEnvelope,\n  sandboxBackendForSdkBackendId,\n  selectBackend,\n  verifySandboxExecReadiness,\n  type ControlRpc,\n  type EstablishedSandboxSession,\n  type NatsRequestConnection,\n  type RoutableBackendSession,\n  type RoutableSandbox,\n  type ResolvedActiveBackend,\n  type RoutingMutationSettlementResult,\n  type RoutingSandboxFirstOperationObserver,\n  type RoutingSandboxOperationObserver,\n  type RoutingSandboxCaptureWaitObserver,\n  type RoutingSandboxWaitObservation,\n  type RoutingRetainedProcess,\n  type RoutingRetainedProcessTerminalProof,\n  type SelfhostedOpObserver,\n  type SelfhostedConnectionBinding,\n  type SelfhostedRelayConfig,\n  type OpStreamJournal,\n  type SelfhostedOpStreamDeps,\n} from \"@opengeni/runtime\";\nimport { sandboxLeaseHolderIdForAttempt } from \"./sandbox-resume\";\n\nconst retainWorkspaceProviderCommand = createProviderCommandRetainer(\n  retainWorkspaceMutationProcess,\n  (error) => (error instanceof SandboxRetainedProcessPromotionFencedError ? error.process : null),\n);\n\ntype PersistableMutationAdmission = {\n  admission: SandboxWorkspaceMutationAdmission;\n  providerBinding: Awaited<\n    ReturnType<typeof resolveModalCheckpointProviderBindingForSession>\n  > | null;\n};\n\nfunction admittedCommandHandle(value: unknown): number | undefined {\n  if (!value || typeof value !== \"object\") return undefined;\n  return (value as PersistableMutationAdmission).admission?.workspaceGeneration;\n}\n\nexport type RoutingWiringServices = {\n  db: Database;\n  settings: Settings;\n  /** The events bus, for the selfhosted control-plane request/reply connection.\n   *  Optional: when absent (or NATS unconfigured) a selfhosted swap target\n   *  surfaces agent_offline on its first op rather than failing to build. */\n  bus?: EventBus;\n  /** The per-op observer wired into every selfhosted session this turn builds\n   *  (out-of-band telemetry — op metrics + machine.* events). Absent ⇒ no-op. */\n  onOp?: SelfhostedOpObserver;\n  /** Every physical routed provider call, across cloud and selfhosted homes. */\n  onSandboxOperation?: RoutingSandboxOperationObserver;\n  onSandboxCaptureWait?: RoutingSandboxCaptureWaitObserver;\n  /** The op-stream durable-resume journal (the Temporal adaptation from\n   *  op-journal.ts): attach generation + settled-frontier persistence. Absent ⇒\n   *  the runtime defaults (generation \"1\", no persistence) — tests / non-turn\n   *  callers. Only consulted when op-stream is actually enabled for the turn. */\n  opJournal?: OpStreamJournal;\n  /** Durable lifecycle notification emitted only by the observer that wins the\n   * exact warm-instance loss CAS. */\n  onHomeSandboxLost?: (input: {\n    sandboxGroupId: string;\n    instanceId: string;\n    leaseEpoch: number;\n  }) => Promise<void>;\n  /** Prepare and publish the worker's home handle. Rejection leaves the route\n   * unpublished; replacement preparation must settle before the first tool op. */\n  onHomeSandboxRebound?: (input: {\n    established: EstablishedSandboxSession;\n    leaseEpoch: number;\n  }) => void | Promise<void>;\n  /** Cancel bounded capture waits with the owning turn activity. */\n  waitSignal?: AbortSignal;\n};\n\n/** Worker-turn routing may final-ack streamed command output, so it must always\n * carry the turn's durable frontier journal. Non-turn helpers may still omit it\n * through the broader service shape above. */\ntype TurnRoutingWiringServices = RoutingWiringServices & {\n  opJournal: OpStreamJournal;\n};\n\nexport type RoutingWiringIds = {\n  workspaceId: string;\n  sessionId: string;\n  resourceAccountId?: string;\n  resourceSubjectId?: string;\n  /** Frozen initiating-human authority for personal Connected Machine use.\n   * Every routed operation reasserts this exact accepted attempt before the\n   * control-plane connection is resolved. */\n  personalMachineAttempt?: {\n    accountId: string;\n    subjectId: string;\n    turnId: string;\n    attemptId: string;\n    executionGeneration: number;\n  };\n  /** Canonical turn-attempt fence used to admit persistable-home mutations.\n   * Omit outside a running worker attempt; mutation hooks then remain disabled. */\n  workspaceMutationFence?: {\n    accountId: string;\n    turnId: string;\n    executionGeneration: number;\n    attemptId: string;\n  };\n  homeLease?: {\n    accountId: string;\n    sandboxGroupId: string;\n    leaseEpoch: number;\n    instanceId: string;\n    backend: string;\n  };\n  /**\n   * The run's declared sandbox environment — the SAME object the turn passes to\n   * `runtime.buildAgent`'s `sandboxEnvironment` and to `resumeBoxForTurn` (so the\n   * group box's manifest carries it too). Threaded into a selfhosted swap target's\n   * manifest so its `environment` EQUALS the turn's, making the SDK's per-turn\n   * provided-session manifest-env delta empty (validateNoEnvironmentDelta).\n   * WITHOUT this a pin-to-vm turn throws \"Live sandbox sessions cannot change\n   * manifest environment variables.\" Optional → the resolver defaults to `{}`.\n   */\n  environment?: Record<string, string>;\n  /** Attempt-local values projected only onto Connected Machine child execs. */\n  transientExecEnvironment?: () => Readonly<Record<string, string>>;\n  /**\n   * Stage D machine-primary: PIN the already-established turn SelfhostedSession\n   * (the `established` arg's session) for THIS machine pointer `(sandboxId, epoch)`\n   * so the per-op resolver returns that SAME instance instead of building a fresh\n   * one — the turn-start manifest write + per-op reads then hit ONE\n   * SelfhostedSession/manifest. Set ONLY by the machine-primary establish branch\n   * (where `established.session` is the SelfhostedSession bound to this pointer);\n   * the group-box/swap path omits it (the default is the modal group box, and a\n   * swap target is built fresh).\n   */\n  pinnedSelfhosted?: { sandboxId: string; epoch: number };\n  /**\n   * Whether the turn's `defaultBackend` IS the session's home (so the null pointer may\n   * resolve to it). Defaults to TRUE (omitted). Set explicitly FALSE on a machine-primary\n   * turn of a Modal-HOME session (pinned to a machine, no Modal group box established this\n   * turn): the routing resolver's null branch then throws a typed `home_unavailable_this_turn`\n   * error on a mid-turn clear-to-null instead of silently serving the pinned machine — the\n   * detach's pointer commit stands and takes effect next turn. A genuine machine-HOME turn\n   * (home IS the machine) passes true.\n   */\n  defaultIsHome?: boolean;\n};\n\n/** Map the deployment relay URL to the leaf's `SelfhostedRelayConfig` shape\n *  (host/port/tls). M8 wires the real relay; until then a configured/placeholder\n *  host yields a well-formed stream-URL shape behind `resolveExposedPort`. */\nexport function relayConfigFromSettings(settings: Settings): SelfhostedRelayConfig {\n  const raw = settings.selfhostedRelayUrl?.trim();\n  if (!raw) {\n    return { host: \"relay.opengeni.local\", port: 443, tls: true };\n  }\n  try {\n    const url = new URL(raw.includes(\"://\") ? raw : `wss://${raw}`);\n    const tls = url.protocol === \"wss:\" || url.protocol === \"https:\";\n    const port = url.port ? Number(url.port) : tls ? 443 : 80;\n    return { host: url.hostname, port, tls };\n  } catch {\n    return { host: raw, port: 443, tls: true };\n  }\n}\n\n/** The selfhosted CONTROL vs EXEC op deadlines for a turn, from settings. Control\n *  ops (ping/fs/desktop/pty) stay on the short timeout so machine liveness is never\n *  masked by a slow op; exec has its own setting and defaults to no duration wall.\n *  Threaded into every turn-path session build + resolver. */\nexport function selfhostedTimeoutsFromSettings(settings: Settings): {\n  timeoutMs: number;\n  execTimeoutMs: number;\n} {\n  return {\n    timeoutMs: settings.sandboxSelfhostedControlTimeoutMs,\n    execTimeoutMs: settings.sandboxSelfhostedExecTimeoutMs,\n  };\n}\n\n/** The same split deadlines shaped for `makeActiveBackendResolver`'s dep names\n *  (`selfhostedTimeoutMs` / `selfhostedExecTimeoutMs`), for a swap/pin target. */\nfunction selfhostedResolverTimeouts(settings: Settings): {\n  selfhostedTimeoutMs: number;\n  selfhostedExecTimeoutMs: number;\n} {\n  const { timeoutMs, execTimeoutMs } = selfhostedTimeoutsFromSettings(settings);\n  return {\n    selfhostedTimeoutMs: timeoutMs,\n    selfhostedExecTimeoutMs: execTimeoutMs,\n  };\n}\n\ntype HomeRouteLeaseIdentity = {\n  accountId: string;\n  sandboxGroupId: string;\n  backend: string;\n};\n\ntype HomeRouteResolutionIds = HomeRouteLeaseIdentity & {\n  workspaceId: string;\n  sessionId: string;\n};\n\ntype HomeRouteRecovery = \"pending\" | \"degraded\" | \"unrecoverable\" | \"superseded\";\n\n/**\n * Translate the durable lease/recovery state into the typed disposition the\n * routing proxy exposes when the home cannot be safely resumed. A route repair\n * must never fall back to the old in-memory provider handle when the lease is\n * warming, restoring, unverifiable, or otherwise inconsistent.\n */\nfunction homeRouteRecoveryDisposition(\n  lease: Awaited<ReturnType<typeof readLease>>,\n): HomeRouteRecovery {\n  if (!lease) return \"unrecoverable\";\n  if (lease.liveness === \"warming\") return \"pending\";\n  if (lease.liveness === \"draining\") return \"superseded\";\n  if (\n    lease.recovery.restore.status === \"pending\" ||\n    lease.recovery.restore.status === \"restoring\" ||\n    lease.recovery.restore.status === \"verifying\"\n  ) {\n    return \"pending\";\n  }\n  if (\n    lease.recovery.restore.status === \"degraded\" ||\n    lease.recovery.workspace.status === \"degraded\" ||\n    lease.recovery.archive.status === \"unverified\" ||\n    lease.recovery.archive.status === \"invalid\"\n  ) {\n    return \"degraded\";\n  }\n  return \"unrecoverable\";\n}\n\nfunction homeRouteRecoveryError(\n  lease: Awaited<ReturnType<typeof readLease>>,\n  fallbackEpoch: number,\n): RoutingBackendRecoveryRequiredError {\n  return new RoutingBackendRecoveryRequiredError(\n    \"resolve_home_backend\",\n    lease?.leaseEpoch ?? fallbackEpoch,\n    homeRouteRecoveryDisposition(lease),\n  );\n}\n\nexport function providerIdentityFromResumeState(\n  resumeState: Record<string, unknown>,\n): string | null {\n  return sandboxProviderInstanceIdFromEnvelope(resumeState);\n}\n\n/**\n * Resolve the current durable home identity after the route epoch changes.\n *\n * Same-target attach/repair can replace the provider instance while a worker\n * turn still holds the stable routing proxy. The proxy must therefore resume\n * the lease's CURRENT identity, not reuse the object captured at turn start.\n * This seam is deliberately resume-only: lease election/rematerialization is\n * owned by the API/lease state machine, and a routed tool call must never create\n * a rival provider or replay an ambiguous mutation.\n */\nasync function resolveCurrentHomeBackend(\n  services: RoutingWiringServices,\n  ids: HomeRouteResolutionIds,\n  established: EstablishedSandboxSession,\n): Promise<ResolvedActiveBackend> {\n  const lease = await readLease(services.db, ids.workspaceId, ids.sandboxGroupId);\n  const fallbackEpoch = lease?.leaseEpoch ?? 0;\n  if (\n    !lease ||\n    lease.liveness !== \"warm\" ||\n    lease.recovery.provider.status !== \"exists\" ||\n    lease.instanceId === null ||\n    lease.recovery.provider.instanceId !== lease.instanceId ||\n    lease.recovery.workspace.status !== \"ready\" ||\n    (lease.recovery.restore.status !== \"not_required\" && lease.recovery.restore.status !== \"ready\")\n  ) {\n    throw homeRouteRecoveryError(lease, fallbackEpoch);\n  }\n\n  // A route epoch can advance without a provider replacement. Reuse the exact\n  // established handle only when its identity still equals the durable one.\n  if (lease.instanceId === established.instanceId) {\n    await services.onHomeSandboxRebound?.({\n      established,\n      leaseEpoch: lease.leaseEpoch,\n    });\n    return {\n      session: established.session as RoutableBackendSession,\n      sandboxId: null,\n      kind: established.backendId,\n      leaseEpoch: lease.leaseEpoch,\n      providerInstanceId: lease.instanceId,\n    };\n  }\n\n  const resumeState = lease.resumeState;\n  const durableResumeBackend = lease.resumeBackendId ?? lease.backend ?? ids.backend;\n  const resumeBackend = sandboxBackendForSdkBackendId(durableResumeBackend) ?? durableResumeBackend;\n  if (\n    !resumeState ||\n    resumeBackend !== ids.backend ||\n    providerIdentityFromResumeState(resumeState) !== lease.instanceId\n  ) {\n    throw homeRouteRecoveryError(lease, lease.leaseEpoch);\n  }\n\n  let rebound: EstablishedSandboxSession;\n  try {\n    rebound = await establishSandboxSessionFromEnvelope(services.settings, resumeState, {\n      sessionId: ids.sessionId,\n      recovery: \"resume-only\",\n      backendOverride: resumeBackend as never,\n    });\n    // A resumed handle is not enough evidence for the route to use it. Keep the\n    // same bounded readiness gate used before publishing a Modal lease warm.\n    await verifySandboxExecReadiness(rebound);\n  } catch (error) {\n    if (!isProviderSandboxNotFoundError(resumeBackend, error)) {\n      // The durable identity is present, but a transient resume/provider error\n      // did not prove the box gone. Keep the lease untouched and make the next\n      // independent route operation retry the resume; never use the old handle.\n      throw new RoutingBackendRecoveryRequiredError(\n        \"resolve_home_backend\",\n        lease.leaseEpoch,\n        \"pending\",\n      );\n    }\n    const marked = await markWarmLeaseInstanceLost(services.db, {\n      accountId: ids.accountId,\n      workspaceId: ids.workspaceId,\n      sandboxGroupId: ids.sandboxGroupId,\n      expectedEpoch: lease.leaseEpoch,\n      expectedInstanceId: lease.instanceId,\n      expectedBackend: lease.backend,\n      diagnostic: \"provider_not_found_during_home_route_rebind\",\n    });\n    if (marked.status === \"marked\") {\n      await services.onHomeSandboxLost?.({\n        sandboxGroupId: ids.sandboxGroupId,\n        instanceId: lease.instanceId,\n        leaseEpoch: marked.lease.leaseEpoch,\n      });\n    }\n    throw new RoutingBackendRecoveryRequiredError(\n      \"resolve_home_backend\",\n      marked.lease?.leaseEpoch ?? lease.leaseEpoch,\n      marked.status === \"stale\" ? \"superseded\" : homeRouteRecoveryDisposition(marked.lease),\n    );\n  }\n\n  // The provider identity must agree with the exact durable lease row before\n  // any caller can publish or route through this rebound handle. A mismatch is\n  // unverifiable local state, not permission to try the old handle.\n  const reboundBackend = sandboxBackendForSdkBackendId(rebound.backendId) ?? rebound.backendId;\n  if (rebound.instanceId !== lease.instanceId || reboundBackend !== resumeBackend) {\n    throw homeRouteRecoveryError(lease, lease.leaseEpoch);\n  }\n  await services.onHomeSandboxRebound?.({\n    established: rebound,\n    leaseEpoch: lease.leaseEpoch,\n  });\n  // Keep the resolver's mutable home reference on the latest verified handle so\n  // a later route epoch does not resume the same replacement again. This is only\n  // a worker-side handle update; the SDK-facing RoutingSandboxSession remains the\n  // stable object returned below and is never replaced.\n  Object.assign(established, rebound);\n  return {\n    session: rebound.session as RoutableBackendSession,\n    sandboxId: null,\n    kind: rebound.backendId,\n    leaseEpoch: lease.leaseEpoch,\n    providerInstanceId: lease.instanceId,\n  };\n}\n\nfunction beforePersistableHomeMutation(\n  services: RoutingWiringServices,\n  ids: RoutingWiringIds,\n  home: { accountId: string; sandboxGroupId: string; backend: string } | undefined,\n):\n  | ((input: {\n      op: string;\n      backend: ResolvedActiveBackend;\n      onCaptureWait?: (observation: RoutingSandboxWaitObservation) => void;\n    }) => Promise<PersistableMutationAdmission | null>)\n  | undefined {\n  const fence = ids.workspaceMutationFence;\n  if (!home || !fence) return undefined;\n  return async ({ op, backend, onCaptureWait }) => {\n    // A connected-machine target is intentionally non-persistable: its writes\n    // do not dirty the session home's archive. Exact home identity metadata is\n    // present only on a verified durable home route.\n    if (\n      backend.sandboxId !== null ||\n      backend.leaseEpoch === undefined ||\n      backend.providerInstanceId === undefined\n    ) {\n      return null;\n    }\n    const providerBinding =\n      home.backend === \"modal\"\n        ? await resolveModalCheckpointProviderBindingForSession(services.settings, backend.session)\n        : null;\n    const admission = await advanceWorkspaceGeneration(services.db, {\n      accountId: fence.accountId,\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      turnId: fence.turnId,\n      executionGeneration: fence.executionGeneration,\n      attemptId: fence.attemptId,\n      holderId: sandboxLeaseHolderIdForAttempt(fence.attemptId),\n      sandboxGroupId: home.sandboxGroupId,\n      expectedEpoch: backend.leaseEpoch,\n      expectedInstanceId: backend.providerInstanceId,\n      operation: op,\n      captureWaitMs: sandboxLifecycleTransitionWaitMs(services.settings),\n      ...(services.waitSignal ? { waitSignal: services.waitSignal } : {}),\n      ...(onCaptureWait ? { onCaptureWait } : {}),\n    });\n    return { admission, providerBinding };\n  };\n}\n\nfunction afterPersistableHomeMutation(\n  services: RoutingWiringServices,\n  ids: RoutingWiringIds,\n  home: { accountId: string; sandboxGroupId: string; backend: string } | undefined,\n):\n  | ((input: {\n      op: string;\n      backend: ResolvedActiveBackend;\n      admission: unknown;\n      outcome: \"resolved\" | \"rejected\" | \"outcome_unknown\";\n      result?: unknown;\n      retainedProcess?: RoutingRetainedProcess;\n    }) => Promise<void | RoutingMutationSettlementResult>)\n  | undefined {\n  const fence = ids.workspaceMutationFence;\n  if (!home || !fence) return undefined;\n  return async ({ op, backend, admission, outcome, retainedProcess }) => {\n    if (\n      backend.sandboxId !== null ||\n      backend.leaseEpoch === undefined ||\n      backend.providerInstanceId === undefined ||\n      !admission ||\n      typeof admission !== \"object\"\n    ) {\n      return;\n    }\n    const boundAdmission = admission as Partial<PersistableMutationAdmission>;\n    const exactAdmission = boundAdmission.admission;\n    if (\n      !exactAdmission ||\n      typeof exactAdmission.id !== \"string\" ||\n      typeof exactAdmission.workspaceGeneration !== \"number\" ||\n      !(\"providerBinding\" in boundAdmission)\n    ) {\n      throw new Error(\"Persistable home mutation settlement lacked its bound admission\");\n    }\n    if ((outcome === \"resolved\" || outcome === \"outcome_unknown\") && retainedProcess) {\n      try {\n        await retainWorkspaceProviderCommand(services.db, {\n          accountId: fence.accountId,\n          workspaceId: ids.workspaceId,\n          sessionId: ids.sessionId,\n          processId: retainedProcess.id,\n          providerSessionId: retainedProcess.providerSessionId,\n          ...(retainedProcess.providerCommand\n            ? { providerCommand: retainedProcess.providerCommand }\n            : {}),\n          admissionId: exactAdmission.id,\n          admittedWorkspaceGeneration: exactAdmission.workspaceGeneration,\n          operation: op,\n          providerBinding: boundAdmission.providerBinding ?? null,\n          owner: {\n            kind: \"turn\",\n            turnId: fence.turnId,\n            executionGeneration: fence.executionGeneration,\n            attemptId: fence.attemptId,\n            holderId: sandboxLeaseHolderIdForAttempt(fence.attemptId),\n            sandboxGroupId: home.sandboxGroupId,\n            expectedEpoch: backend.leaseEpoch,\n            expectedInstanceId: backend.providerInstanceId,\n            routeKind: exactAdmission.routeKind,\n            routeTargetId: exactAdmission.routeTargetId,\n            routeEpoch: exactAdmission.routeEpoch,\n          },\n        });\n      } catch (error) {\n        if (!(error instanceof SandboxRetainedProcessPromotionFencedError)) throw error;\n        const durable = error.process;\n        if (\n          durable.id !== retainedProcess.id ||\n          durable.providerSessionId !== retainedProcess.providerSessionId ||\n          durable.sessionId !== ids.sessionId ||\n          durable.sandboxGroupId !== home.sandboxGroupId ||\n          durable.parentAdmissionId !== exactAdmission.id ||\n          durable.leaseEpoch !== backend.leaseEpoch ||\n          durable.providerInstanceId !== backend.providerInstanceId ||\n          durable.routeKind !== exactAdmission.routeKind ||\n          durable.routeTargetId !== exactAdmission.routeTargetId ||\n          durable.routeEpoch !== exactAdmission.routeEpoch ||\n          durable.state !== \"active\"\n        ) {\n          throw new Error(\"Durable retained-process promotion returned a mismatched identity\", {\n            cause: error,\n          });\n        }\n        return {\n          status: \"retained_process_durable_output_rejected\",\n          retainedProcess: {\n            id: durable.id,\n            providerSessionId: durable.providerSessionId,\n          },\n        };\n      }\n      return;\n    }\n    if (outcome === \"outcome_unknown\")\n      throw new Error(\"Outcome-unknown command settlement requires its exact retained invocation\");\n    await verifyWorkspaceMutationSettlement(services.db, {\n      accountId: fence.accountId,\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      turnId: fence.turnId,\n      executionGeneration: fence.executionGeneration,\n      attemptId: fence.attemptId,\n      holderId: sandboxLeaseHolderIdForAttempt(fence.attemptId),\n      sandboxGroupId: home.sandboxGroupId,\n      expectedEpoch: backend.leaseEpoch,\n      expectedInstanceId: backend.providerInstanceId,\n      admission: exactAdmission,\n      operation: op,\n      outcome,\n    });\n  };\n}\n\nfunction beforeRetainedProcessMutation(\n  services: RoutingWiringServices,\n  ids: RoutingWiringIds,\n):\n  | ((input: {\n      op: string;\n      backend: ResolvedActiveBackend;\n      process: RoutingRetainedProcess;\n    }) => Promise<SandboxWorkspaceMutationAdmission>)\n  | undefined {\n  const fence = ids.workspaceMutationFence;\n  if (!fence) return undefined;\n  return async ({ op, process }) =>\n    await advanceWorkspaceGenerationForRetainedProcess(services.db, {\n      accountId: fence.accountId,\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      processId: process.id,\n      operation: op,\n      captureWaitMs: sandboxLifecycleTransitionWaitMs(services.settings),\n      ...(services.waitSignal ? { waitSignal: services.waitSignal } : {}),\n    });\n}\n\nfunction afterRetainedProcessMutation(\n  services: RoutingWiringServices,\n  ids: RoutingWiringIds,\n):\n  | ((input: {\n      op: string;\n      backend: ResolvedActiveBackend;\n      process: RoutingRetainedProcess;\n      admission: unknown;\n      outcome: \"resolved\" | \"rejected\";\n      result?: unknown;\n    }) => Promise<void>)\n  | undefined {\n  const fence = ids.workspaceMutationFence;\n  if (!fence) return undefined;\n  return async ({ op, process, admission, outcome }) => {\n    if (\n      !admission ||\n      typeof admission !== \"object\" ||\n      typeof (admission as Partial<SandboxWorkspaceMutationAdmission>).id !== \"string\" ||\n      typeof (admission as Partial<SandboxWorkspaceMutationAdmission>).workspaceGeneration !==\n        \"number\"\n    ) {\n      throw new Error(\"Retained-process mutation settlement lacked its exact admission\");\n    }\n    await verifyRetainedProcessMutationSettlement(services.db, {\n      accountId: fence.accountId,\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      processId: process.id,\n      admission: admission as SandboxWorkspaceMutationAdmission,\n      operation: op,\n      outcome,\n    });\n  };\n}\n\nexport function captureConnectedCommandOutput(\n  db: Database,\n  ids: { accountId: string; workspaceId: string; sessionId: string },\n  bus?: EventBus,\n) {\n  return async (commandId: string, frames: OpStreamOutputFrame[]) => {\n    for (const frame of frames) {\n      const events = await appendSessionCommandOutput(db, {\n        ...ids,\n        commandId,\n        chunkId: `op-frame:${frame.sequence}`,\n        stream: frame.stream,\n        chunk: frame.chunk,\n      });\n      if (events.length && bus)\n        await bus.publish(ids.workspaceId, ids.sessionId, events).catch(() => undefined);\n    }\n  };\n}\n\nfunction captureRetainedProcessOutputForTurn(\n  services: RoutingWiringServices,\n  ids: RoutingWiringIds,\n) {\n  const accountId = ids.workspaceMutationFence?.accountId;\n  if (!accountId) return undefined;\n  return async ({\n    process,\n    chunkId,\n    chunk,\n    stream,\n    streamFidelity,\n  }: {\n    process: RoutingRetainedProcess;\n    chunkId: string;\n    chunk: string;\n    stream: \"stdout\" | \"stderr\";\n    streamFidelity: \"separate\" | \"merged\";\n  }) => {\n    const events = await appendSessionCommandOutput(services.db, {\n      accountId,\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      commandId: process.id,\n      chunkId,\n      chunk,\n      stream,\n      streamFidelity,\n    });\n    if (events.length && services.bus)\n      await services.bus.publish(ids.workspaceId, ids.sessionId, events).catch(() => undefined);\n  };\n}\n\nfunction observeRetainedProcessTerminalForTurn(\n  services: RoutingWiringServices,\n  ids: RoutingWiringIds,\n) {\n  const fence = ids.workspaceMutationFence;\n  if (!fence) return undefined;\n  return async ({ process }: { process: RoutingRetainedProcess }) => {\n    await observeSessionBackgroundCommandCompletion(services.db, {\n      accountId: fence.accountId,\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      commandId: process.id,\n    });\n  };\n}\n\nfunction settleRetainedProcessForTurn(\n  services: RoutingWiringServices,\n  ids: RoutingWiringIds,\n):\n  | ((input: {\n      backend: ResolvedActiveBackend;\n      process: RoutingRetainedProcess;\n      proof: RoutingRetainedProcessTerminalProof;\n    }) => Promise<void>)\n  | undefined {\n  const fence = ids.workspaceMutationFence;\n  if (!fence) return undefined;\n  return async ({ backend, process, proof }) => {\n    const durable = await getRetainedProcess(services.db, {\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      processId: process.id,\n    });\n    if (\n      !durable ||\n      durable.providerSessionId !== process.providerSessionId ||\n      durable.providerBackend !== (sandboxBackendForSdkBackendId(backend.kind) ?? backend.kind) ||\n      durable.providerInstanceId !== backend.providerInstanceId ||\n      durable.leaseEpoch !== backend.leaseEpoch ||\n      durable.routeKind !== (backend.sandboxId === null ? \"home\" : \"active\") ||\n      durable.routeTargetId !== backend.sandboxId ||\n      durable.routeEpoch !== backend.activeEpoch\n    ) {\n      throw new Error(\"Retained-process settlement lost its exact durable backend identity\");\n    }\n    const settlement = await settleRetainedProcess(services.db, {\n      accountId: fence.accountId,\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      processId: process.id,\n      expected: retainedProcessSettlementIdentity(durable),\n      outcome: proof.outcome,\n      exitCode: proof.exitCode,\n      reason: proof.reason,\n      idleGraceMs: services.settings.sandboxIdleGraceMs,\n    });\n    if (settlement.process.state === \"active\") {\n      throw new Error(\"Retained-process settlement returned an active durable process\");\n    }\n    if (settlement.backgroundCommandEvents.length > 0 && services.bus) {\n      await services.bus\n        .publish(ids.workspaceId, ids.sessionId, settlement.backgroundCommandEvents)\n        .catch(() => undefined);\n    }\n  };\n}\n\nfunction adoptRetainedProcessAsBackgroundCommandForTurn(\n  services: RoutingWiringServices,\n  ids: RoutingWiringIds,\n):\n  | ((input: {\n      backend: ResolvedActiveBackend;\n      process: RoutingRetainedProcess;\n      command?: string | undefined;\n    }) => Promise<void>)\n  | undefined {\n  const fence = ids.workspaceMutationFence;\n  if (!fence) return undefined;\n  return async ({ backend, process, command }) => {\n    const durable = await getRetainedProcess(services.db, {\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      processId: process.id,\n    });\n    if (\n      !durable ||\n      durable.providerSessionId !== process.providerSessionId ||\n      durable.providerBackend !== (sandboxBackendForSdkBackendId(backend.kind) ?? backend.kind) ||\n      durable.providerInstanceId !== backend.providerInstanceId ||\n      durable.leaseEpoch !== backend.leaseEpoch ||\n      durable.routeKind !== (backend.sandboxId === null ? \"home\" : \"active\") ||\n      durable.routeTargetId !== backend.sandboxId ||\n      durable.routeEpoch !== backend.activeEpoch\n    ) {\n      throw new Error(\"Background command adoption lost its exact retained-process identity\");\n    }\n    await adoptManagedSessionBackgroundCommand(services.db, {\n      accountId: fence.accountId,\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      turnId: fence.turnId,\n      executionGeneration: fence.executionGeneration,\n      attemptId: fence.attemptId,\n      processId: process.id,\n      expected: retainedProcessSettlementIdentity(durable),\n      command: command ?? \"Background command\",\n    });\n  };\n}\n\n/** Build the selfhosted `ControlRpc` over the events bus's request/reply\n *  connection. A null bus / unconfigured NATS yields a NatsControlRpc whose\n *  connection factory returns null → agent_offline on every op (never a throw). */\nfunction controlRpcFactory(bus: EventBus | undefined): () => ControlRpc {\n  return () =>\n    new NatsControlRpc(async (): Promise<NatsRequestConnection | null> => {\n      if (!bus) {\n        return null;\n      }\n      return bus.getRequestConnection();\n    });\n}\n\n/**\n * Wrap an established group-box session in a `RoutingSandboxSession` so a mid-turn\n * swap routes the NEXT tool call to the new active sandbox. Returns the SAME\n * established handle with its `session` replaced by the stable proxy; the\n * client/sessionState/instanceId/backendId are preserved (the lease still owns\n * the group box's lifecycle — the proxy is a routing veneer, not an owner).\n *\n * The DEFAULT pointer (active_sandbox_id == null) routes to the established group\n * session unchanged (backward-compat). A swap to a selfhosted machine routes to a\n * SelfhostedSession bound to the target's enrollment agentId, fenced under the\n * swap's active_epoch.\n */\nexport function wrapTurnBoxWithRouting(\n  services: TurnRoutingWiringServices,\n  ids: RoutingWiringIds,\n  established: EstablishedSandboxSession,\n): EstablishedSandboxSession {\n  const { db, settings, bus, onOp } = services;\n  const backgroundCommandAccountId = ids.workspaceMutationFence?.accountId;\n  const backgroundCommandAttempt = ids.workspaceMutationFence;\n  const beforeMutation = beforePersistableHomeMutation(services, ids, ids.homeLease);\n  const afterMutation = afterPersistableHomeMutation(services, ids, ids.homeLease);\n  const beforeProcessMutation = beforeRetainedProcessMutation(services, ids);\n  const afterProcessMutation = afterRetainedProcessMutation(services, ids);\n  const settleProcess = settleRetainedProcessForTurn(services, ids);\n  const adoptProcessAsBackgroundCommand = adoptRetainedProcessAsBackgroundCommandForTurn(\n    services,\n    ids,\n  );\n  const resolver = makeActiveBackendResolver({\n    workspaceId: ids.workspaceId,\n    defaultBackend: established.session as RoutableBackendSession,\n    defaultKind: established.backendId,\n    getSandbox: async (sandboxId): Promise<RoutableSandbox | null> => {\n      const sandbox = await getSandbox(\n        db,\n        ids.resourceAccountId && ids.resourceSubjectId\n          ? {\n              accountId: ids.resourceAccountId,\n              workspaceId: ids.workspaceId,\n              subjectId: ids.resourceSubjectId,\n            }\n          : ids.workspaceId,\n        sandboxId,\n      );\n      return sandbox\n        ? {\n            id: sandbox.id,\n            workspaceId: sandbox.workspaceId,\n            kind: sandbox.kind,\n            name: sandbox.name,\n            ...(sandbox.scope ? { scope: sandbox.scope } : {}),\n            enrollmentId: sandbox.enrollmentId,\n          }\n        : null;\n    },\n    controlRpcFactory: controlRpcFactory(bus),\n    resolveSelfhostedConnection: async (sandbox) => {\n      if (!sandbox.enrollmentId) return null;\n      const enrollment = await resolveRoutedMachineConnection(db, ids, sandbox);\n      return connectionBindingFor(services, enrollment);\n    },\n    relay: relayConfigFromSettings(settings),\n    // A selfhosted swap target runs real commands too, so give it the same split\n    // deadlines the machine-primary establish path uses (short control, long exec).\n    ...selfhostedResolverTimeouts(settings),\n    ...(onOp !== undefined ? { selfhostedOnOp: onOp } : {}),\n    ...(backgroundCommandAccountId && backgroundCommandAttempt\n      ? {\n          selfhostedAdoptBackgroundCommand: async (command) => {\n            const adopted = await adoptConnectedMachineSessionBackgroundCommand(db, {\n              accountId: backgroundCommandAccountId,\n              workspaceId: ids.workspaceId,\n              sessionId: ids.sessionId,\n              turnId: backgroundCommandAttempt.turnId,\n              executionGeneration: backgroundCommandAttempt.executionGeneration,\n              attemptId: backgroundCommandAttempt.attemptId,\n              commandId: crypto.randomUUID(),\n              controlWorkspaceId: command.controlWorkspaceId,\n              enrollmentId: command.enrollmentId,\n              connectionInstanceId: command.connectionInstanceId,\n              opId: command.opId,\n              command: command.command,\n            });\n            return { commandId: adopted.id };\n          },\n          selfhostedSettleBackgroundCommand: async (command) => {\n            const settlement = await settleConnectedMachineSessionBackgroundCommand(db, {\n              accountId: backgroundCommandAccountId,\n              workspaceId: ids.workspaceId,\n              sessionId: ids.sessionId,\n              commandId: command.commandId,\n              controlWorkspaceId: command.controlWorkspaceId,\n              enrollmentId: command.enrollmentId,\n              connectionInstanceId: command.connectionInstanceId,\n              opId: command.opId,\n              outcome: command.outcome,\n              exitCode: command.exitCode,\n              reason: command.reason,\n              ...(command.failure ? { failure: command.failure } : {}),\n            });\n            if (settlement && bus) {\n              await bus\n                .publish(ids.workspaceId, ids.sessionId, settlement.events)\n                .catch(() => undefined);\n            }\n          },\n          selfhostedCaptureBackgroundCommandOutput: captureConnectedCommandOutput(\n            db,\n            {\n              accountId: backgroundCommandAccountId,\n              workspaceId: ids.workspaceId,\n              sessionId: ids.sessionId,\n            },\n            bus,\n          ),\n        }\n      : {}),\n    // The turn's declared environment → a selfhosted swap target's manifest, so the\n    // SDK's per-turn manifest-env delta is empty (no \"cannot change manifest\n    // environment variables\" throw when the turn pins to a vm). Mirrors the group\n    // box, which is created WITH this same environment (resumeBoxForTurn).\n    ...(ids.environment !== undefined ? { environment: ids.environment } : {}),\n    ...(ids.transientExecEnvironment !== undefined\n      ? { transientExecEnvironment: ids.transientExecEnvironment }\n      : {}),\n    // Stage D machine-primary: pin THIS established SelfhostedSession for the machine\n    // pointer so the resolver returns the SAME instance (no two-instance manifest\n    // divergence). `established.session` is the SelfhostedSession the establish branch\n    // bound to (sandboxId, epoch).\n    ...(ids.pinnedSelfhosted\n      ? {\n          pinnedSelfhosted: {\n            sandboxId: ids.pinnedSelfhosted.sandboxId,\n            epoch: ids.pinnedSelfhosted.epoch,\n            session: established.session as RoutableBackendSession,\n          },\n        }\n      : {}),\n    // A modal swap target in the turn path would need its own lease resume-by-id;\n    // that is a future cross-group-box concern. Until then a modal swap target is\n    // unresolvable (the swap tool validates liveness, so this only triggers if a\n    // session points at a sibling modal box the turn cannot resume here) and the\n    // op surfaces unresolvable — never a silent wrong-box landing.\n    //\n    // For a machine-primary turn of a Modal-HOME session (pinned to a machine, no\n    // group box established this turn), a mid-turn clear-to-null must NOT fall back to\n    // the pinned machine — passing defaultIsHome:false makes the null branch throw typed\n    // `home_unavailable_this_turn` instead. Forward the explicit boolean (including false).\n    ...(ids.defaultIsHome !== undefined ? { defaultIsHome: ids.defaultIsHome } : {}),\n    ...(ids.homeLease\n      ? {\n          resolveDefaultBackend: () =>\n            resolveCurrentHomeBackend(\n              services,\n              {\n                workspaceId: ids.workspaceId,\n                sessionId: ids.sessionId,\n                accountId: ids.homeLease!.accountId,\n                sandboxGroupId: ids.homeLease!.sandboxGroupId,\n                backend: ids.homeLease!.backend,\n              },\n              established,\n            ),\n        }\n      : {}),\n  });\n\n  const proxy = new RoutingSandboxSession({\n    // Seed the DEFAULT backend (the established group box) at construction so\n    // `session.state` is the real backend's state object BEFORE the first op. The\n    // SDK reads `session.state.manifest` at turn START (and writes it back); an\n    // empty `{}` there crashes serializeManifestEnvironment /\n    // validateProvidedSessionManifestUpdate. This is byte-identical to what the\n    // resolver returns for the default pointer (`activeSandboxId === null`).\n    defaultResolved: {\n      session: established.session as RoutableBackendSession,\n      sandboxId: null,\n      kind: established.backendId,\n      ...(ids.homeLease\n        ? {\n            leaseEpoch: ids.homeLease.leaseEpoch,\n            providerInstanceId: ids.homeLease.instanceId,\n          }\n        : {}),\n    },\n    readPointer: async () => {\n      if (!routingEnabled(settings)) {\n        return { activeSandboxId: null, activeEpoch: 0 };\n      }\n      const pointer = await readActiveSandbox(db, ids.workspaceId, ids.sessionId);\n      return pointer ?? { activeSandboxId: null, activeEpoch: 0 };\n    },\n    resolveActiveBackend: resolver,\n    ...(services.onSandboxOperation ? { onOperation: services.onSandboxOperation } : {}),\n    ...(services.onSandboxCaptureWait ? { onCaptureWait: services.onSandboxCaptureWait } : {}),\n    providerCommandHandle: admittedCommandHandle,\n    providerSupervisionReady: async () =>\n      settings.modalCommandSupervisionEnabled && (await supervisedCommandProtocolReady(db)),\n    ...(ids.workspaceMutationFence\n      ? {\n          providerCommandPersistence: (process: RoutingRetainedProcess) =>\n            retainedProviderCommandPersistence(\n              db,\n              {\n                accountId: ids.workspaceMutationFence!.accountId,\n                workspaceId: ids.workspaceId,\n                sessionId: ids.sessionId,\n                processId: process.id,\n              },\n              services.bus\n                ? (events) => services.bus!.publish(ids.workspaceId, ids.sessionId, events)\n                : undefined,\n            ),\n        }\n      : {}),\n    ...(beforeMutation ? { beforeMutation } : {}),\n    ...(afterMutation ? { afterMutation } : {}),\n    ...(beforeProcessMutation ? { beforeProcessMutation } : {}),\n    ...(afterProcessMutation ? { afterProcessMutation } : {}),\n    ...(settleProcess ? { settleProcess } : {}),\n    ...(ids.workspaceMutationFence\n      ? { observeProcessTerminal: observeRetainedProcessTerminalForTurn(services, ids)! }\n      : {}),\n    ...(ids.workspaceMutationFence\n      ? { captureProcessOutput: captureRetainedProcessOutputForTurn(services, ids)! }\n      : {}),\n    ...(adoptProcessAsBackgroundCommand ? { adoptProcessAsBackgroundCommand } : {}),\n    ...(ids.homeLease\n      ? {\n          onDefaultBackendError: async ({\n            error,\n            backend,\n          }: {\n            error: unknown;\n            backend: ResolvedActiveBackend;\n          }) => {\n            const home = ids.homeLease!;\n            if (!isProviderSandboxGoneDuringRoutedOperation(home.backend, error)) return null;\n            const expectedEpoch = backend.leaseEpoch ?? home.leaseEpoch;\n            const expectedInstanceId = backend.providerInstanceId ?? home.instanceId;\n            const marked = await markWarmLeaseInstanceLost(db, {\n              accountId: home.accountId,\n              workspaceId: ids.workspaceId,\n              sandboxGroupId: home.sandboxGroupId,\n              expectedEpoch,\n              expectedInstanceId,\n              expectedBackend: home.backend,\n              diagnostic: \"provider_not_found_during_routed_operation\",\n            });\n            if (marked.status === \"marked\") {\n              await services.onHomeSandboxLost?.({\n                sandboxGroupId: home.sandboxGroupId,\n                instanceId: expectedInstanceId,\n                leaseEpoch: marked.lease.leaseEpoch,\n              });\n            }\n            const lease = marked.lease;\n            const restore = lease?.recovery.restore.status;\n            return {\n              leaseEpoch: lease?.leaseEpoch ?? expectedEpoch,\n              recovery:\n                marked.status === \"stale\"\n                  ? (\"superseded\" as const)\n                  : restore === \"pending\"\n                    ? (\"pending\" as const)\n                    : restore === \"degraded\"\n                      ? (\"degraded\" as const)\n                      : (\"unrecoverable\" as const),\n            };\n          },\n        }\n      : {}),\n  });\n\n  return { ...established, session: proxy };\n}\n\nexport function wrapLazyTurnBoxWithRouting(\n  services: TurnRoutingWiringServices,\n  ids: RoutingWiringIds,\n  args: {\n    client: EstablishedSandboxSession[\"client\"];\n    backendId: string;\n    agentDefaultManifest: unknown;\n    provisioner: {\n      get(): Promise<{\n        established: EstablishedSandboxSession;\n        leaseEpoch?: number;\n      }>;\n    };\n    homeLeaseIdentity?: {\n      accountId: string;\n      sandboxGroupId: string;\n      backend: string;\n    };\n    onFirstOperation?: RoutingSandboxFirstOperationObserver;\n  },\n): EstablishedSandboxSession {\n  const { db, settings, bus, onOp } = services;\n  const backgroundCommandAccountId = ids.workspaceMutationFence?.accountId;\n  const backgroundCommandAttempt = ids.workspaceMutationFence;\n  const beforeMutation = beforePersistableHomeMutation(services, ids, args.homeLeaseIdentity);\n  const afterMutation = afterPersistableHomeMutation(services, ids, args.homeLeaseIdentity);\n  const beforeProcessMutation = beforeRetainedProcessMutation(services, ids);\n  const afterProcessMutation = afterRetainedProcessMutation(services, ids);\n  const settleProcess = settleRetainedProcessForTurn(services, ids);\n  const adoptProcessAsBackgroundCommand = adoptRetainedProcessAsBackgroundCommandForTurn(\n    services,\n    ids,\n  );\n  const defaultBackend = sandboxBackendForSdkBackendId(args.backendId);\n  const defaultSupportsPty = defaultBackend\n    ? selectBackend(defaultBackend).capabilities.Terminal.pty\n    : false;\n  const syntheticSession: RoutableBackendSession = {\n    state: { manifest: args.agentDefaultManifest },\n    // The SDK binds shell tools synchronously before lazy provisioning. Preserve\n    // the authoritative descriptor's PTY shape so a Modal home exposes\n    // write_stdin on its first turn operation; the async cancellation transport\n    // below still resolves the exact live route before executing a command.\n    supportsPty: () => defaultSupportsPty,\n  };\n  const routedResolver = makeActiveBackendResolver({\n    workspaceId: ids.workspaceId,\n    defaultBackend: syntheticSession,\n    defaultKind: \"unprovisioned\",\n    getSandbox: async (sandboxId): Promise<RoutableSandbox | null> => {\n      const sandbox = await getSandbox(\n        db,\n        ids.resourceAccountId && ids.resourceSubjectId\n          ? {\n              accountId: ids.resourceAccountId,\n              workspaceId: ids.workspaceId,\n              subjectId: ids.resourceSubjectId,\n            }\n          : ids.workspaceId,\n        sandboxId,\n      );\n      return sandbox\n        ? {\n            id: sandbox.id,\n            workspaceId: sandbox.workspaceId,\n            kind: sandbox.kind,\n            name: sandbox.name,\n            ...(sandbox.scope ? { scope: sandbox.scope } : {}),\n            enrollmentId: sandbox.enrollmentId,\n          }\n        : null;\n    },\n    controlRpcFactory: controlRpcFactory(bus),\n    resolveSelfhostedConnection: async (sandbox) => {\n      if (!sandbox.enrollmentId) return null;\n      const enrollment = await resolveRoutedMachineConnection(db, ids, sandbox);\n      return connectionBindingFor(services, enrollment);\n    },\n    relay: relayConfigFromSettings(settings),\n    ...selfhostedResolverTimeouts(settings),\n    ...(onOp !== undefined ? { selfhostedOnOp: onOp } : {}),\n    ...(backgroundCommandAccountId && backgroundCommandAttempt\n      ? {\n          selfhostedAdoptBackgroundCommand: async (command) => {\n            const adopted = await adoptConnectedMachineSessionBackgroundCommand(db, {\n              accountId: backgroundCommandAccountId,\n              workspaceId: ids.workspaceId,\n              sessionId: ids.sessionId,\n              turnId: backgroundCommandAttempt.turnId,\n              executionGeneration: backgroundCommandAttempt.executionGeneration,\n              attemptId: backgroundCommandAttempt.attemptId,\n              commandId: crypto.randomUUID(),\n              controlWorkspaceId: command.controlWorkspaceId,\n              enrollmentId: command.enrollmentId,\n              connectionInstanceId: command.connectionInstanceId,\n              opId: command.opId,\n              command: command.command,\n            });\n            return { commandId: adopted.id };\n          },\n          selfhostedSettleBackgroundCommand: async (command) => {\n            const settlement = await settleConnectedMachineSessionBackgroundCommand(db, {\n              accountId: backgroundCommandAccountId,\n              workspaceId: ids.workspaceId,\n              sessionId: ids.sessionId,\n              commandId: command.commandId,\n              controlWorkspaceId: command.controlWorkspaceId,\n              enrollmentId: command.enrollmentId,\n              connectionInstanceId: command.connectionInstanceId,\n              opId: command.opId,\n              outcome: command.outcome,\n              exitCode: command.exitCode,\n              reason: command.reason,\n              ...(command.failure ? { failure: command.failure } : {}),\n            });\n            if (settlement && bus) {\n              await bus\n                .publish(ids.workspaceId, ids.sessionId, settlement.events)\n                .catch(() => undefined);\n            }\n          },\n          selfhostedCaptureBackgroundCommandOutput: captureConnectedCommandOutput(\n            db,\n            {\n              accountId: backgroundCommandAccountId,\n              workspaceId: ids.workspaceId,\n              sessionId: ids.sessionId,\n            },\n            bus,\n          ),\n        }\n      : {}),\n    ...(ids.environment !== undefined ? { environment: ids.environment } : {}),\n    ...(ids.transientExecEnvironment !== undefined\n      ? { transientExecEnvironment: ids.transientExecEnvironment }\n      : {}),\n  });\n\n  const proxy = new RoutingSandboxSession({\n    // Before the first op the SDK reads `state.manifest`; the synthetic backend\n    // points at agent.defaultManifest BY REFERENCE so the provided-session delta is\n    // empty. The first default-pointer op resolves the real box through the\n    // provisioner and `state` switches to that real backend by reference.\n    defaultResolved: {\n      session: syntheticSession,\n      sandboxId: null,\n      kind: \"unprovisioned\",\n    },\n    readPointer: async () => {\n      const pointer = await readActiveSandbox(db, ids.workspaceId, ids.sessionId);\n      return pointer ?? { activeSandboxId: null, activeEpoch: 0 };\n    },\n    resolveActiveBackend: async (pointer) => {\n      if (pointer.activeSandboxId === null || !routingEnabled(settings)) {\n        const provisioned = await args.provisioner.get();\n        if (args.homeLeaseIdentity && provisioned.leaseEpoch !== undefined) {\n          return resolveCurrentHomeBackend(\n            services,\n            {\n              workspaceId: ids.workspaceId,\n              sessionId: ids.sessionId,\n              accountId: args.homeLeaseIdentity.accountId,\n              sandboxGroupId: args.homeLeaseIdentity.sandboxGroupId,\n              backend: args.homeLeaseIdentity.backend,\n            },\n            provisioned.established,\n          );\n        }\n        return {\n          session: provisioned.established.session as RoutableBackendSession,\n          sandboxId: null,\n          kind: provisioned.established.backendId,\n        };\n      }\n      return routedResolver(pointer);\n    },\n    ...(services.onSandboxOperation ? { onOperation: services.onSandboxOperation } : {}),\n    ...(services.onSandboxCaptureWait ? { onCaptureWait: services.onSandboxCaptureWait } : {}),\n    ...(args.onFirstOperation ? { onFirstOperation: args.onFirstOperation } : {}),\n    providerCommandHandle: admittedCommandHandle,\n    providerSupervisionReady: async () =>\n      settings.modalCommandSupervisionEnabled && (await supervisedCommandProtocolReady(db)),\n    ...(ids.workspaceMutationFence\n      ? {\n          providerCommandPersistence: (process: RoutingRetainedProcess) =>\n            retainedProviderCommandPersistence(\n              db,\n              {\n                accountId: ids.workspaceMutationFence!.accountId,\n                workspaceId: ids.workspaceId,\n                sessionId: ids.sessionId,\n                processId: process.id,\n              },\n              services.bus\n                ? (events) => services.bus!.publish(ids.workspaceId, ids.sessionId, events)\n                : undefined,\n            ),\n        }\n      : {}),\n    ...(beforeMutation ? { beforeMutation } : {}),\n    ...(afterMutation ? { afterMutation } : {}),\n    ...(beforeProcessMutation ? { beforeProcessMutation } : {}),\n    ...(afterProcessMutation ? { afterProcessMutation } : {}),\n    ...(settleProcess ? { settleProcess } : {}),\n    ...(ids.workspaceMutationFence\n      ? { observeProcessTerminal: observeRetainedProcessTerminalForTurn(services, ids)! }\n      : {}),\n    ...(ids.workspaceMutationFence\n      ? { captureProcessOutput: captureRetainedProcessOutputForTurn(services, ids)! }\n      : {}),\n    ...(adoptProcessAsBackgroundCommand ? { adoptProcessAsBackgroundCommand } : {}),\n    ...(args.homeLeaseIdentity\n      ? {\n          onDefaultBackendError: async ({\n            error,\n            backend,\n          }: {\n            error: unknown;\n            backend: ResolvedActiveBackend;\n          }) => {\n            const home = args.homeLeaseIdentity!;\n            if (!isProviderSandboxGoneDuringRoutedOperation(home.backend, error)) return null;\n            if (backend.leaseEpoch === undefined || backend.providerInstanceId === undefined) {\n              return null;\n            }\n            const marked = await markWarmLeaseInstanceLost(db, {\n              accountId: home.accountId,\n              workspaceId: ids.workspaceId,\n              sandboxGroupId: home.sandboxGroupId,\n              expectedEpoch: backend.leaseEpoch,\n              expectedInstanceId: backend.providerInstanceId,\n              expectedBackend: home.backend,\n              diagnostic: \"provider_not_found_during_routed_operation\",\n            });\n            if (marked.status === \"marked\") {\n              await services.onHomeSandboxLost?.({\n                sandboxGroupId: home.sandboxGroupId,\n                instanceId: backend.providerInstanceId,\n                leaseEpoch: marked.lease.leaseEpoch,\n              });\n            }\n            const lease = marked.lease;\n            const restore = lease?.recovery.restore.status;\n            return {\n              leaseEpoch: lease?.leaseEpoch ?? backend.leaseEpoch,\n              recovery:\n                marked.status === \"stale\"\n                  ? (\"superseded\" as const)\n                  : restore === \"pending\"\n                    ? (\"pending\" as const)\n                    : restore === \"degraded\"\n                      ? (\"degraded\" as const)\n                      : (\"unrecoverable\" as const),\n            };\n          },\n        }\n      : {}),\n  });\n\n  return {\n    client: args.client,\n    session: proxy,\n    sessionState: undefined,\n    instanceId: \"unprovisioned\",\n    backendId: args.backendId,\n  };\n}\n\nexport type SelfhostedTurnSessionArgs = {\n  accountId: string;\n  /** Authorization/session workspace. */\n  workspaceId: string;\n  sessionId: string;\n  /** Physical machine-origin workspace used in control-plane routing. */\n  controlWorkspaceId?: string;\n  /** Exact launching attempt required before a live Connected Machine command\n   * can transfer into session ownership. Omitted by non-turn/test callers,\n   * which therefore cannot yield a durable background command. */\n  backgroundCommandAttempt?: Pick<\n    NonNullable<RoutingWiringIds[\"workspaceMutationFence\"]>,\n    \"turnId\" | \"executionGeneration\" | \"attemptId\"\n  >;\n  /** The target machine's enrollment id == the agent subject id. */\n  agentId: string;\n  /** Exact daemon process currently leased for the enrollment. */\n  connectionInstanceId: string;\n  /** Whether the target machine advertised Capabilities.op_stream in its latest\n   *  Hello. The runtime-side transport gate must still require the server flag. */\n  opStream: boolean;\n  /** Desired per-enrollment command policy and capability from the same live\n   * enrollment snapshot as the process identity. */\n  operationResourcePolicy: EnrollmentRecord[\"operationPolicy\"];\n  operationResourcePolicySupported: boolean;\n  operationCpuQuotaSupported: boolean;\n  /** Feature advertisement only; refreshed by exact live admission for each operation. */\n  transactionalFsWriteSupported?: boolean;\n  /** The active pointer's epoch — the control-op fence echoed to the agent. */\n  epoch: number;\n  /** The run's declared sandbox environment (the SAME object fed to buildAgent +\n   *  the manifest), threaded so the SDK's per-turn provided-session env delta is\n   *  empty. */\n  environment: Record<string, string>;\n  /** Attempt-local values projected only onto this machine's child execs. */\n  transientExecEnvironment?: () => Readonly<Record<string, string>>;\n  /** The session working directory (per-session pointer). Null ⇒ workspace_root. */\n  workingDir: string | null;\n  /** Effective absolute host-native root frozen for this attempt. */\n  workspaceRoot: string;\n  /** Present only for a user-owned machine. Every provider operation rechecks\n   * this frozen accepted-attempt authority immediately before dispatch. */\n  personalMachineAttempt?: NonNullable<RoutingWiringIds[\"personalMachineAttempt\"]> & {\n    sessionId: string;\n  };\n};\n\n/**\n * Stage D machine-primary establish: bind the live SelfhostedSession for a turn\n * whose ACTIVE sandbox is a connected machine — WITHOUT establishing or leasing a\n * phantom Modal home box. Reuses the SAME relay + ControlRpc wiring `wrapTurnBoxWithRouting`\n * builds (so the turn session and a later swap target dial the machine identically),\n * and the SAME `buildSelfhostedBackendSession` factory the routing resolver uses\n * (one build shape). Returns an `EstablishedSandboxSession` whose:\n *   - `client` is the SelfhostedSandboxClient (the OWNED-sandbox client the turn\n *     injects; its `serializeSessionState` round-trips `{agentId}`);\n *   - `session` is the live SelfhostedSession (the routing default + pin instance);\n *   - `backendId` is \"selfhosted\" (drives recording's desktopCapableBackend gate +\n *     the warm-rate keying) and `instanceId` is the enrollment/agent id.\n * No NATS round-trip happens here — `resume()` just re-addresses the subject — so a\n * headless/offline machine binds fine; its ops surface agent_offline lazily.\n */\n/**\n * The op-stream injection for a machine-primary turn: present iff the machine\n * advertised `Capabilities.op_stream` in its latest Hello AND the server flag\n * is on AND a bus exists to carry frames. The transport rides the SAME managed\n * NATS connection as the control rpc (the bus's op-stream accessor). A bus\n * without the accessor yields no stream; an unbounded exec then fails before\n * starting instead of silently degrading to request/reply. Swap targets resolve\n * the same enrollment capability through the injected backend-resolver seam.\n */\nfunction opStreamDepsFor(\n  services: RoutingWiringServices,\n  machineAdvertisesOpStream: boolean,\n): SelfhostedOpStreamDeps | undefined {\n  const { settings, bus, opJournal } = services;\n  if (!machineAdvertisesOpStream || settings.agentOpStreamEnabled !== true || !bus) {\n    return undefined;\n  }\n  return {\n    transport: new NatsOpStreamTransport(async () => bus.getOpStreamConnection?.() ?? null),\n    ...(opJournal !== undefined ? { journal: opJournal } : {}),\n  };\n}\n\n/** Project one enrollment read into one exact runtime route. Capability and\n * process identity must be taken from the same snapshot. */\nexport function connectionBindingFor(\n  services: RoutingWiringServices,\n  enrollment: EnrollmentRecord | null,\n): SelfhostedConnectionBinding | null {\n  if (!enrollment?.connectionInstanceId) return null;\n  const opStream = opStreamDepsFor(services, enrollment.opStream === true);\n  return {\n    workspaceId: enrollment.workspaceId,\n    connectionInstanceId: enrollment.connectionInstanceId,\n    workspaceRoot: enrollment.workspaceRoot,\n    ...(opStream !== undefined ? { opStream } : {}),\n    operationResourcePolicy: enrollment.operationPolicy,\n    operationResourcePolicySupported: enrollment.agentCapabilities.operationResourcePolicy === true,\n    operationCpuQuotaSupported: enrollment.agentCapabilities.operationCpuQuota === true,\n    transactionalFsWriteSupported: enrollment.agentCapabilities.transactionalFsWrite === true,\n  };\n}\n\n/** Personal-machine discovery is not execution authority. Recheck the frozen\n * initiating human, exact current attempt, immutable authorization snapshot,\n * and current visibility-keyed grant immediately before each routed operation\n * resolves a live control-plane connection. */\nasync function resolveRoutedMachineConnection(\n  db: Database,\n  ids: RoutingWiringIds,\n  sandbox: RoutableSandbox,\n): Promise<EnrollmentRecord | null> {\n  if (!sandbox.enrollmentId) return null;\n  if (sandbox.scope !== \"user\") {\n    return await getLiveEnrollmentConnection(\n      db,\n      ids.resourceAccountId && ids.resourceSubjectId\n        ? {\n            accountId: ids.resourceAccountId,\n            workspaceId: ids.workspaceId,\n            subjectId: ids.resourceSubjectId,\n          }\n        : sandbox.workspaceId,\n      sandbox.enrollmentId,\n    );\n  }\n  const authority = ids.personalMachineAttempt;\n  if (!authority) return null;\n  return await resolvePersonalMachineConnectionForAttempt(db, {\n    accountId: authority.accountId,\n    workspaceId: ids.workspaceId,\n    subjectId: authority.subjectId,\n    sessionId: ids.sessionId,\n    turnId: authority.turnId,\n    attemptId: authority.attemptId,\n    executionGeneration: authority.executionGeneration,\n    enrollmentId: sandbox.enrollmentId,\n    requireActiveSandbox: true,\n  });\n}\n\nexport async function establishSelfhostedTurnSession(\n  services: RoutingWiringServices,\n  args: SelfhostedTurnSessionArgs,\n): Promise<EstablishedSandboxSession> {\n  const { db, settings, bus, onOp } = services;\n  const { timeoutMs, execTimeoutMs } = selfhostedTimeoutsFromSettings(settings);\n  const opStream = opStreamDepsFor(services, args.opStream);\n  const { client, session } = await buildSelfhostedBackendSession({\n    workspaceId: args.workspaceId,\n    ...(args.controlWorkspaceId !== undefined\n      ? { controlWorkspaceId: args.controlWorkspaceId }\n      : {}),\n    agentId: args.agentId,\n    connectionInstanceId: args.connectionInstanceId,\n    workspaceRoot: args.workspaceRoot,\n    relay: relayConfigFromSettings(settings),\n    controlRpcFactory: controlRpcFactory(bus),\n    epoch: args.epoch,\n    environment: args.environment,\n    ...(args.transientExecEnvironment !== undefined\n      ? { transientExecEnvironment: args.transientExecEnvironment }\n      : {}),\n    // Give this turn's exec ops the long deadline (control ops stay short) so a real\n    // command is not killed at the control wall.\n    timeoutMs,\n    execTimeoutMs,\n    operationResourcePolicy: args.operationResourcePolicy,\n    operationResourcePolicySupported: args.operationResourcePolicySupported,\n    operationCpuQuotaSupported: args.operationCpuQuotaSupported,\n    transactionalFsWriteSupported: args.transactionalFsWriteSupported === true,\n    resolveOperationAdmission: async () => {\n      const enrollment = args.personalMachineAttempt\n        ? await resolvePersonalMachineConnectionForAttempt(db, {\n            accountId: args.personalMachineAttempt.accountId,\n            workspaceId: args.workspaceId,\n            subjectId: args.personalMachineAttempt.subjectId,\n            sessionId: args.personalMachineAttempt.sessionId,\n            turnId: args.personalMachineAttempt.turnId,\n            attemptId: args.personalMachineAttempt.attemptId,\n            executionGeneration: args.personalMachineAttempt.executionGeneration,\n            enrollmentId: args.agentId,\n            requireActiveSandbox: true,\n          })\n        : await getLiveEnrollmentConnection(\n            db,\n            args.controlWorkspaceId ?? args.workspaceId,\n            args.agentId,\n          );\n      const binding = connectionBindingFor(services, enrollment);\n      if (!binding) return null;\n      if (!binding.workspaceRoot) {\n        throw new ActiveBackendUnresolvableError(\n          \"workspace_root_unavailable\",\n          \"Connected Machine no longer has a reported workspace root\",\n        );\n      }\n      return {\n        ...binding,\n        workspaceRoot: resolveConnectedMachineWorkspaceRoot(binding.workspaceRoot, args.workingDir),\n      };\n    },\n    ...(args.backgroundCommandAttempt\n      ? {\n          adoptBackgroundCommand: async (command) => {\n            const adopted = await adoptConnectedMachineSessionBackgroundCommand(db, {\n              accountId: args.accountId,\n              workspaceId: args.workspaceId,\n              sessionId: args.sessionId,\n              turnId: args.backgroundCommandAttempt!.turnId,\n              executionGeneration: args.backgroundCommandAttempt!.executionGeneration,\n              attemptId: args.backgroundCommandAttempt!.attemptId,\n              commandId: crypto.randomUUID(),\n              controlWorkspaceId: command.controlWorkspaceId,\n              enrollmentId: command.enrollmentId,\n              connectionInstanceId: command.connectionInstanceId,\n              opId: command.opId,\n              command: command.command,\n            });\n            return { commandId: adopted.id };\n          },\n        }\n      : {}),\n    captureBackgroundCommandOutput: captureConnectedCommandOutput(\n      db,\n      {\n        accountId: args.accountId,\n        workspaceId: args.workspaceId,\n        sessionId: args.sessionId,\n      },\n      bus,\n    ),\n    settleBackgroundCommand: async (command) => {\n      const settlement = await settleConnectedMachineSessionBackgroundCommand(db, {\n        accountId: args.accountId,\n        workspaceId: args.workspaceId,\n        sessionId: args.sessionId,\n        commandId: command.commandId,\n        controlWorkspaceId: command.controlWorkspaceId,\n        enrollmentId: command.enrollmentId,\n        connectionInstanceId: command.connectionInstanceId,\n        opId: command.opId,\n        outcome: command.outcome,\n        exitCode: command.exitCode,\n        reason: command.reason,\n        ...(command.failure ? { failure: command.failure } : {}),\n      });\n      if (settlement && bus) {\n        await bus\n          .publish(args.workspaceId, args.sessionId, settlement.events)\n          .catch(() => undefined);\n      }\n    },\n    // Meter every control op (out-of-band telemetry) — no-op when unwired.\n    ...(onOp !== undefined ? { onOp } : {}),\n    // The streaming exec transport — present iff the machine advertised the\n    // capability AND the server flag is on. Connected Machine exec fails closed\n    // when it is absent; there is no request/reply downgrade.\n    ...(opStream !== undefined ? { opStream } : {}),\n  });\n  return {\n    client,\n    session,\n    sessionState: { agentId: args.agentId },\n    instanceId: args.agentId,\n    backendId: \"selfhosted\",\n  };\n}\n\n/** Whether the routing proxy should wrap the turn box: the hot-swap feature is\n *  gated by the selfhosted flag (the active pointer + swap tools are only\n *  meaningful when selfhosted is enabled). With the flag off the established\n *  group box is injected unchanged — byte-for-byte today. */\nexport function routingEnabled(settings: Settings): boolean {\n  return settings.sandboxSelfhostedEnabled === true;\n}\n\n/** Whether the turn should defer sandbox provisioning to the first dispatched op\n *  (the in-process single-flight provisioner behind the routing proxy's\n *  resolveActiveBackend). Lazy is a property of the OWNED path only — the SDK never\n *  creates/resumes an injected session, so we own establish timing — hence gated on\n *  BOTH flags. With either off the turn provisions eagerly at turn start, exactly as\n *  today. NB: under lazy the box is ALWAYS wrapped in the routing proxy (the proxy's\n *  resolver IS the establish seam), independent of `routingEnabled`. */\nexport function lazyProvisionEnabled(settings: Settings): boolean {\n  return settings.sandboxLazyProvisionEnabled === true && settings.sandboxOwnershipEnabled === true;\n}\n","// apps/worker/src/sandbox-resume.ts — the stateless per-turn resume-by-id path.\n//\n// This is the turn-side half of the P1.2 ownership inversion. There is NO class,\n// NO timers, NO per-session owner, NO Map<id, owner> — every turn is a\n// self-contained critical section run by ANY pool worker:\n//\n//   1. acquireLease (group-keyed) under the DB FOR UPDATE + cold->warming CAS —\n//      the SOLE double-spawn guard (P1.1).\n//   2. The cold->warming winner may create/restore. Every attached caller is\n//      resume-only; a missing provider box retires the exact warm epoch and\n//      re-enters admission instead of creating a rival.\n//   3. (spawner) commitWarmingToWarm (the lease_epoch++ fence + folds the resume\n//      envelope onto the lease). Optional desktop work is deliberately absent:\n//      viewers and managed ComputerSession operations initialize it lazily.\n//   4. the caller injects {client, session, sessionState} NON-OWNED into the run\n//      (the SDK never reaps it — the keystone), runs, then in `finally` calls the\n//      returned `release()` and drops the in-memory handle. NEVER provider-delete\n//      — the box rides the provider idle-timeout; the reaper (P1.3) stop()s it at\n//      refcount 0.\n//\n// Liveness between turns is the lease refcount; there is no keepalive loop.\n\nimport {\n  effectiveSandboxLifecycle,\n  sandboxArchiveCaptureTimeoutMs,\n  sandboxLifecycleTransitionWaitMs,\n  sandboxWarmRateMicrosPerSecond,\n  type Settings,\n} from \"@opengeni/config\";\nimport { randomUUID } from \"node:crypto\";\nimport { retainsHolderForWarmCapture } from \"./warm-capture-holder\";\nimport {\n  acquireLease,\n  adoptLegacyModalCheckpointArtifact,\n  beginSandboxRematerialization,\n  sessionHoldsFreshWorkspaceRecovery,\n  claimWorkspaceArchiveCapture,\n  commitWarmingToWarm,\n  failSandboxRematerialization,\n  failWarmingToCold,\n  beginModalProviderCreate,\n  getSandboxSessionEnvelope,\n  heartbeatLeaseHolderStatus,\n  markSandboxRestoreVerifying,\n  markWarmLeaseInstanceLost,\n  markSandboxCheckpointArtifactDeletePending,\n  persistWarmSnapshot,\n  readLease,\n  registerSandboxCheckpointArtifact,\n  recordWarmingSandboxCreated,\n  reinstateTurnLeaseHolder,\n  releaseWorkspaceArchiveCapture,\n  releaseLeaseHolder,\n  touchLeaseHolder,\n  SandboxLeaseRecoveryBlockedError,\n  SandboxLeaseSupersededError,\n  SandboxLeaseTransitionError,\n  type Database,\n  type LeaseHolderKind,\n} from \"@opengeni/db\";\nimport {\n  captureWorkspaceArchiveForStorage,\n  disposeWorkspaceArchive,\n  type VerifiedWorkspaceArchivePayload,\n  describeLegacyNativeSnapshotArchive,\n  inlineWorkspaceArchiveForRestore,\n  MODAL_EXEC_READINESS_TIMEOUT_MS,\n  SandboxExecReadinessError,\n  WorkspaceArchiveIntegrityError,\n  establishSandboxSessionFromEnvelope,\n  isProviderSandboxNotFoundError,\n  parseWorkspaceArchiveDescriptor,\n  providerWorkspaceCapturePolicy,\n  SandboxProviderContinuityUnavailableError,\n  requirePersistableReplacementSandboxEnvelope,\n  renewSandboxProviderExpiration,\n  modalSessionMatchesCheckpointProviderBinding,\n  resolveModalCheckpointProviderBindingForSession,\n  serializeReplacementSandboxEnvelope,\n  tagModalSandbox,\n  terminateUnpublishedSandboxSession,\n  verifySandboxExecReadiness,\n  withoutSandboxProviderIdentity,\n  type EstablishedSandboxSession,\n  type RuntimeMetricsHooks,\n  type SandboxReadinessReplacementOutcome,\n  type WorkspaceArchiveDescriptor,\n} from \"@opengeni/runtime\";\nimport {\n  downloadWorkspaceArchiveSpool,\n  WorkspaceArchiveStorageError,\n  type ObjectStorage,\n} from \"@opengeni/storage\";\nimport { sandboxLeaseTelemetryKey, type Observability } from \"@opengeni/observability\";\nimport { safeSnapshotError } from \"./sandbox-snapshot-diagnostics\";\nexport { safeSnapshotError } from \"./sandbox-snapshot-diagnostics\";\nimport { parseWorkspaceArchiveObjectRef } from \"@opengeni/contracts\";\nimport {\n  persistWorkspaceArchiveCandidate,\n  putVersion1TarArchiveOrInline,\n} from \"./sandbox-archive-storage\";\n\n// Re-exported for callers that just want the ack-kind union.\nexport type ResumeHolderKind = LeaseHolderKind;\n\n/**\n * The durable identity of a turn holding a shared sandbox lease.\n *\n * Temporal activity ids cannot satisfy this type: they are workflow-local\n * sequence numbers and collide across sessions that share a sandbox group.\n */\nexport type TurnSandboxLeaseHolderId = `turn-attempt:${string}`;\n\nexport function sandboxLeaseHolderIdForAttempt(attemptId: string): TurnSandboxLeaseHolderId {\n  const normalized = attemptId.trim();\n  if (!normalized) {\n    throw new Error(\"Sandbox lease holder requires a turn attempt id\");\n  }\n  return `turn-attempt:${normalized}`;\n}\n\nexport function isRetryableDegradedRestore(restore: {\n  status: string;\n  retryable?: boolean;\n}): boolean {\n  return restore.status === \"degraded\" && restore.retryable === true;\n}\n\n/** The minimal services surface resumeBoxForTurn needs. A subset of\n *  ActivityServices so a test (and the API later) can pass a lean bag. */\nexport type SandboxResumeServices = {\n  db: Database;\n  settings: Settings;\n  objectStorage?: ObjectStorage | null;\n\n  logicalFallbackSettings?: Settings;\n  sandboxMetrics?: RuntimeMetricsHooks;\n  /** Structured logger for lifecycle decisions (holder release reasons). Falls\n   * back to the console when a lean caller passes none. */\n  observability?: Pick<Observability, \"info\" | \"warn\">;\n  /** Test seam only: cadence of the private holder-liveness loop (default 10 s).\n   * Production keeps the default; the dead-worker reap horizon assumes it. */\n  holderLivenessIntervalMs?: number;\n  /**\n   * The logical turn-attempt lifetime, not merely the provider request lifetime.\n   * Some provider SDK calls cannot be interrupted. Aborting this signal still\n   * releases the durable holder immediately and fences any late provider result.\n   */\n  cancellationSignal?: AbortSignal;\n  /** Test seam for the attached/resumed path. Production uses the one runtime\n   * resume primitive; callers must not use this to create a replacement box. */\n  establishAttachedSandbox?: typeof establishSandboxSessionFromEnvelope;\n  /** Test seam for the bounded command-readiness proof performed before an\n   * attached provider box is handed to the agent. */\n  verifyAttachedSandboxReadiness?: (established: EstablishedSandboxSession) => Promise<void>;\n  /** Test seam for the bounded command-readiness proof the elected spawner runs\n   * on its freshly created box before publishing the lease warm. Production\n   * uses {@link waitForSandboxExecReadiness} with the shared 60 s budget. */\n  verifySpawnedSandboxReadiness?: (\n    established: EstablishedSandboxSession,\n    identity: { sandboxGroupId: string },\n  ) => Promise<void>;\n  /** Test seam for the jittered pause before the single fresh-box readiness\n   * replacement. Production uses {@link freshSandboxReadinessReplacementDelayMs}.\n   * It may be async so a test can observe the rolled-back lease in between. */\n  freshSandboxReadinessReplacementDelayMs?: () => number | Promise<number>;\n  /**\n   * The turn attempt's fresh-box readiness replacement budget. The lazy\n   * provisioner may call resumeBoxForTurn again after a typed lease\n   * supersession, so the turn creates the budget once and shares it with every\n   * call. Absent, the call gets its own single replacement.\n   */\n  freshSandboxReadinessReplacementBudget?: FreshSandboxReadinessReplacementBudget;\n  /** Called only by the observer that wins the exact warm->cold loss CAS. */\n  onSandboxLost?: (input: {\n    sandboxGroupId: string;\n    instanceId: string;\n    leaseEpoch: number;\n  }) => Promise<void>;\n};\n\nexport type ResumeBoxIds = {\n  accountId: string;\n  workspaceId: string;\n  sandboxGroupId: string;\n  /** The attributing session within the group (holders carry session_id for\n   *  disclosure/attribution). For a singleton group this == sandboxGroupId. */\n  sessionId: string;\n  /** The backend the box runs on (sessions.sandbox_backend). */\n  backend: Settings[\"sandboxBackend\"];\n  /** The OS axis (sessions.sandbox_os); default 'linux'. */\n  os?: string;\n  /**\n   * The FULL environment the agent will declare for this run (the SAME object\n   * passed to runtime.buildAgent's `sandboxEnvironment`). The box's manifest is\n   * created with this environment so that when the SDK applies the agent's\n   * manifest to this NON-OWNED provided session, the environments match exactly\n   * and `validateNoEnvironmentDelta` finds an empty delta (otherwise it throws\n   * \"Live sandbox sessions cannot change manifest environment variables\" and the\n   * turn dies). Omitted → the leaf falls back to collectSandboxEnvironment(settings)\n   * (the legacy default; only the resume/spawn-without-an-agent callers rely on it).\n   */\n  environment?: Record<string, string>;\n  /**\n   * IMAGE IS SHARED STATE (B3): the container image this run resolves (Modal image ref\n   * / docker image). Threaded to acquireLease, which stamps it on the cold-create and\n   * conflicts on a live box already running a DIFFERENT image (a solo holder requests\n   * capture-and-drain rotation; N-holders throw SandboxImageConflictError). Omitted ->\n   * image is not enforced (the selfhosted path never passes it; a legacy/null-image box\n   * never conflicts).\n   */\n  image?: string;\n  /** Deployment/workspace image pins apply only to new creates; an existing\n   * group keeps its image. Omission preserves explicit image matching (B3). */\n  imagePolicy?: \"require_match\" | \"new_creates_only\";\n  /**\n   * RIG IS SHARED STATE (M3): the frozen rig version this run rides. Threaded to\n   * acquireLease, which stamps it on the cold-create and conflicts on a live box\n   * set up under a DIFFERENT rig version (a solo holder requests capture-and-drain\n   * rotation; N-holders throw SandboxRigConflictError). Omitted for a rig-less\n   * session -> rig is never stamped or enforced (shares exactly as today).\n   */\n  rigVersionId?: string;\n};\n\n/** What resumeBoxForTurn returns: the live NON-OWNED session to inject, the\n *  fence token (lease_epoch) it was established under, and a release function\n *  the caller invokes in `finally` (idempotent delete-my-holder-row). */\nexport type ResumedTurnSandbox = {\n  /** The live, externally-owned session — inject {client, session, sessionState}\n   *  NON-OWNED into runStream's `ownedSandbox`; the SDK never reaps it. */\n  established: EstablishedSandboxSession;\n  /** The lease_epoch this turn holds; the heartbeat/fence token. */\n  leaseEpoch: number;\n  /** Staged idempotent release. The ordinary form immediately prevents a\n   * holder/timer leak. The quiesced form may be called later—even after the\n   * ordinary form—to repair null-outcome admissions only after every exact\n   * attempt-owned workspace writer has physically drained. NEVER stops the box. */\n  release: (options?: { workspaceWritersQuiesced?: boolean }) => Promise<void>;\n};\n\n/**\n * Structural ownership of the provider boundary that failed while establishing\n * a logical sandbox provision. Object errors retain their identity and receive\n * an out-of-band stage; primitive thrown values use a typed wrapper. In both\n * cases the source diagnostic is unchanged and the stage is never guessed from\n * prose.\n */\nexport type SandboxProvisionFailureStage = \"create\" | \"resume\" | \"archive_recovery\";\n\nexport class SandboxProvisionStageError extends Error {\n  readonly name = \"SandboxProvisionStageError\";\n\n  constructor(\n    public readonly stage: SandboxProvisionFailureStage,\n    public readonly source: unknown,\n  ) {\n    super(source instanceof Error ? source.message : String(source), { cause: source });\n  }\n}\n\nconst sandboxProvisionFailureStages = new WeakMap<object, SandboxProvisionFailureStage>();\n\nexport function sandboxProvisionFailureStage(error: unknown): SandboxProvisionFailureStage | null {\n  if (!error || typeof error !== \"object\") return null;\n  return (\n    sandboxProvisionFailureStages.get(error) ??\n    (error instanceof SandboxProvisionStageError ? error.stage : null)\n  );\n}\n\nfunction sandboxProvisionStageError(stage: SandboxProvisionFailureStage, error: unknown): unknown {\n  if (error && typeof error === \"object\") {\n    sandboxProvisionFailureStages.set(error, stage);\n    return error;\n  }\n  return new SandboxProvisionStageError(stage, error);\n}\n\nexport abstract class SandboxWarmingTimeoutError extends Error {\n  abstract readonly code: \"sandbox_exec_readiness_timeout\" | \"sandbox_sibling_warming_timeout\";\n\n  protected constructor(\n    public readonly backend: string,\n    public readonly timeoutMs: number,\n    public readonly stage: \"exec_readiness\" | \"sibling_warming\",\n    public readonly sandboxGroupId: string | null,\n    public readonly instanceId: string | null,\n  ) {\n    const timeoutSeconds = Math.ceil(timeoutMs / 1000);\n    const identity = [\n      sandboxGroupId ? `group ${sandboxGroupId}` : null,\n      instanceId ? `sandbox ${instanceId}` : null,\n    ]\n      .filter((part): part is string => part !== null)\n      .join(\", \");\n    const target = identity ? ` (${identity})` : \"\";\n    super(\n      stage === \"exec_readiness\"\n        ? `Sandbox backend \"${backend}\"${target} did not become command-ready within ${timeoutSeconds}s after creation or restore.`\n        : `Sandbox backend \"${backend}\"${target} did not finish warming within ${timeoutSeconds}s while waiting for the elected sandbox creator.`,\n    );\n    this.name = \"SandboxWarmingTimeoutError\";\n  }\n}\n\nexport class SandboxExecReadinessTimeoutError extends SandboxWarmingTimeoutError {\n  readonly code = \"sandbox_exec_readiness_timeout\" as const;\n\n  constructor(\n    backend: string,\n    timeoutMs: number,\n    identity: { sandboxGroupId?: string | null; instanceId?: string | null } = {},\n  ) {\n    super(\n      backend,\n      timeoutMs,\n      \"exec_readiness\",\n      identity.sandboxGroupId ?? null,\n      identity.instanceId ?? null,\n    );\n    this.name = \"SandboxExecReadinessTimeoutError\";\n  }\n}\n\nexport class SandboxSiblingWarmingTimeoutError extends SandboxWarmingTimeoutError {\n  readonly code = \"sandbox_sibling_warming_timeout\" as const;\n\n  constructor(\n    backend: string,\n    timeoutMs: number,\n    identity: { sandboxGroupId: string; instanceId?: string | null },\n  ) {\n    super(\n      backend,\n      timeoutMs,\n      \"sibling_warming\",\n      identity.sandboxGroupId,\n      identity.instanceId ?? null,\n    );\n    this.name = \"SandboxSiblingWarmingTimeoutError\";\n  }\n}\n\n/**\n * Out-of-band proof attached to one exact {@link SandboxExecReadinessTimeoutError}\n * thrown by the elected spawner: the box that missed its readiness budget was\n * freshly created by this caller (not an attached, resumed, or provider-continuity\n * box), it was never published warm, the provider terminated it, and the holder\n * was released. Only such an error may be replaced by re-entering admission.\n */\nconst disposedUnreadyFreshSandboxErrors = new WeakSet<object>();\n\n/** True only for a spawner readiness timeout whose unready fresh box is proven gone. */\nexport function isReplaceableFreshSandboxReadinessTimeout(error: unknown): boolean {\n  return (\n    error instanceof SandboxExecReadinessTimeoutError &&\n    disposedUnreadyFreshSandboxErrors.has(error)\n  );\n}\n\n/**\n * A burst of simultaneous turn starts can leave many freshly created provider\n * boxes command-unready at once. The single replacement re-enters admission\n * after a jittered pause so the replacement creates do not re-synchronize into\n * the same burst. Bounded to [2 s, 10 s).\n */\nexport const FRESH_SANDBOX_READINESS_REPLACEMENT_BASE_DELAY_MS = 2_000;\nexport const FRESH_SANDBOX_READINESS_REPLACEMENT_JITTER_MS = 8_000;\n\nexport function freshSandboxReadinessReplacementDelayMs(\n  random: () => number = Math.random,\n): number {\n  const sample = random();\n  const unit = Number.isFinite(sample) ? Math.min(Math.max(sample, 0), 1 - Number.EPSILON) : 0;\n  return (\n    FRESH_SANDBOX_READINESS_REPLACEMENT_BASE_DELAY_MS +\n    Math.floor(unit * FRESH_SANDBOX_READINESS_REPLACEMENT_JITTER_MS)\n  );\n}\n\n/** Replacements allowed per turn attempt, across every resumeBoxForTurn call. */\nexport const FRESH_SANDBOX_READINESS_REPLACEMENTS_PER_TURN_ATTEMPT = 1;\n\nexport type FreshSandboxReadinessReplacementBudget = { remaining: number };\n\nexport function createFreshSandboxReadinessReplacementBudget(): FreshSandboxReadinessReplacementBudget {\n  return { remaining: FRESH_SANDBOX_READINESS_REPLACEMENTS_PER_TURN_ATTEMPT };\n}\n\nfunction recordFreshSandboxReadinessReplacement(\n  metrics: RuntimeMetricsHooks | undefined,\n  backend: string,\n  outcome: SandboxReadinessReplacementOutcome,\n): void {\n  try {\n    metrics?.onSandboxReadinessReplacement?.({ backend, outcome });\n  } catch {\n    // Metrics emission must never affect sandbox recovery or error propagation.\n  }\n}\n\nasync function sleepUnlessCancelled(ms: number, signal: AbortSignal | undefined): Promise<boolean> {\n  if (signal?.aborted) return false;\n  if (ms <= 0) return true;\n  return await new Promise<boolean>((resolve) => {\n    const onAbort = () => {\n      clearTimeout(timer);\n      resolve(false);\n    };\n    const timer = setTimeout(() => {\n      signal?.removeEventListener(\"abort\", onAbort);\n      resolve(true);\n    }, ms);\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n  });\n}\n\n/** The exact attached caller that won warm->cold after proving the provider\n * instance gone. It is a lease supersession (the same logical turn recovers),\n * plus the lost id needed for one durable observability event. */\nexport class SandboxLeaseInstanceLostError extends SandboxLeaseSupersededError {\n  constructor(\n    sandboxGroupId: string,\n    leaseEpoch: number,\n    public readonly lostInstanceId: string,\n  ) {\n    super(sandboxGroupId, leaseEpoch);\n    this.name = \"SandboxLeaseInstanceLostError\";\n  }\n}\n\n// Bounded poll while a sibling spawner is mid cold-restore. The wait budget is\n// user-facing and separate from the lease TTL heartbeat/reaper horizon.\nconst WARMING_POLL_INTERVAL_MS = 250;\n\nasync function sleep(ms: number): Promise<void> {\n  await new Promise<void>((resolve) => setTimeout(resolve, ms));\n}\n\n/**\n * A remote provider may return a sandbox handle before its command router\n * accepts the first exec. The upstream session's yieldTimeMs starts only after\n * sandbox.exec() returns, so it cannot bound that initial RPC. Probe it before\n * publishing the lease as warm and enforce our own wall-clock deadline.\n */\nexport async function waitForSandboxExecReadiness(\n  established: EstablishedSandboxSession,\n  timeoutMs = MODAL_EXEC_READINESS_TIMEOUT_MS,\n  identity: { sandboxGroupId?: string | null } = {},\n  signal?: AbortSignal,\n): Promise<void> {\n  try {\n    await verifySandboxExecReadiness(established, timeoutMs, signal);\n  } catch (error) {\n    if (error instanceof SandboxExecReadinessError && error.code === \"exec_probe_timeout\") {\n      throw new SandboxExecReadinessTimeoutError(established.backendId, timeoutMs, {\n        sandboxGroupId: identity.sandboxGroupId ?? null,\n        instanceId: established.instanceId,\n      });\n    }\n    throw error;\n  }\n}\n\nclass SnapshotTimeoutError extends Error {\n  constructor(timeoutMs: number) {\n    super(`workspace snapshot timed out after ${timeoutMs}ms`);\n    this.name = \"SnapshotTimeoutError\";\n  }\n}\n\nexport async function waitForWarmSnapshot(\n  snapshot: Promise<unknown>,\n  timeoutMs: number,\n  signal?: AbortSignal,\n): Promise<boolean> {\n  if (signal?.aborted) return false;\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  let cancelListener: (() => void) | undefined;\n  try {\n    await Promise.race([\n      snapshot,\n      ...(signal\n        ? [\n            new Promise<never>((_resolve, reject) => {\n              cancelListener = () =>\n                reject(signal.reason ?? new Error(\"workspace snapshot wait cancelled\"));\n              signal.addEventListener(\"abort\", cancelListener, { once: true });\n              if (signal.aborted) cancelListener();\n            }),\n          ]\n        : []),\n      new Promise<never>((_, reject) => {\n        timeout = setTimeout(() => reject(new SnapshotTimeoutError(timeoutMs)), timeoutMs);\n        if (timeout && \"unref\" in timeout && typeof timeout.unref === \"function\") {\n          timeout.unref();\n        }\n      }),\n    ]);\n    return true;\n  } catch (error) {\n    if (signal?.aborted) return false;\n    if (error instanceof SnapshotTimeoutError) {\n      console.error(\n        \"mid-session workspace snapshot wait timed out (turn unaffected)\",\n        safeSnapshotError(error),\n      );\n      return false;\n    }\n    return true;\n  } finally {\n    if (timeout) {\n      clearTimeout(timeout);\n    }\n    if (cancelListener) signal?.removeEventListener(\"abort\", cancelListener);\n  }\n}\n\nasync function resolveModalCheckpointBindingBeforeCapture(\n  settings: SandboxResumeServices[\"settings\"],\n  session: unknown,\n  signal?: AbortSignal,\n): Promise<Awaited<ReturnType<typeof resolveModalCheckpointProviderBindingForSession>>> {\n  if (signal?.aborted) {\n    throw signal.reason ?? new Error(\"workspace snapshot identity lookup cancelled\");\n  }\n  const pending = resolveModalCheckpointProviderBindingForSession(settings, session);\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  let cancelListener: (() => void) | undefined;\n  try {\n    return await Promise.race([\n      pending,\n      ...(signal\n        ? [\n            new Promise<never>((_resolve, reject) => {\n              cancelListener = () =>\n                reject(signal.reason ?? new Error(\"workspace snapshot identity lookup cancelled\"));\n              signal.addEventListener(\"abort\", cancelListener, { once: true });\n              if (signal.aborted) cancelListener();\n            }),\n          ]\n        : []),\n      new Promise<never>((_resolve, reject) => {\n        timeout = setTimeout(\n          () => reject(new SnapshotTimeoutError(settings.sandboxSnapshotTimeoutMs)),\n          settings.sandboxSnapshotTimeoutMs,\n        );\n        timeout.unref?.();\n      }),\n    ]);\n  } finally {\n    if (timeout) clearTimeout(timeout);\n    if (cancelListener) signal?.removeEventListener(\"abort\", cancelListener);\n  }\n}\n\nasync function terminateEstablishedSandbox(\n  established: EstablishedSandboxSession | null,\n): Promise<boolean> {\n  if (!established) return true;\n  try {\n    await terminateUnpublishedSandboxSession(established);\n    return true;\n  } catch (error) {\n    if (isProviderSandboxNotFoundError(established.backendId, error)) {\n      return true;\n    }\n    // Best-effort cleanup. A provider-side orphan sweep is the backstop.\n    return false;\n  }\n}\n\nfunction recordSandboxWarmingTimeout(\n  metrics: RuntimeMetricsHooks | undefined,\n  error: unknown,\n): void {\n  if (!(error instanceof SandboxWarmingTimeoutError)) {\n    return;\n  }\n  try {\n    metrics?.onSandboxWarmingTimeout?.({ backend: error.backend, stage: error.stage });\n  } catch {\n    // Metrics emission must never affect sandbox recovery or error propagation.\n  }\n}\n\nfunction workspaceArchiveFieldsFromEnvelope(\n  envelope: Record<string, unknown> | null | undefined,\n): Record<string, unknown> | null {\n  const sessionState =\n    envelope && typeof envelope.sessionState === \"object\" && envelope.sessionState !== null\n      ? (envelope.sessionState as Record<string, unknown>)\n      : null;\n  const archive = sessionState?.workspaceArchive;\n  const archiveRef = parseWorkspaceArchiveObjectRef(sessionState?.workspaceArchiveRef);\n  const hasInline = typeof archive === \"string\" && archive.length > 0;\n  if (!hasInline && !archiveRef) {\n    return null;\n  }\n  const previous = sessionState?.workspaceArchivePrev;\n  const previousRef = parseWorkspaceArchiveObjectRef(sessionState?.workspaceArchivePrevRef);\n  const metadata = sessionState?.workspaceArchiveMeta;\n  const previousMetadata = sessionState?.workspaceArchivePrevMeta;\n  const capturedAt = sessionState?.workspaceArchiveAt;\n  return {\n    ...(hasInline && !archiveRef ? { workspaceArchive: archive } : {}),\n    ...(archiveRef ? { workspaceArchiveRef: archiveRef } : {}),\n    ...(metadata !== undefined ? { workspaceArchiveMeta: metadata } : {}),\n    ...(typeof previous === \"string\" && previous.length > 0 && !previousRef\n      ? { workspaceArchivePrev: previous }\n      : {}),\n    ...(previousRef ? { workspaceArchivePrevRef: previousRef } : {}),\n    ...(previousMetadata !== undefined ? { workspaceArchivePrevMeta: previousMetadata } : {}),\n    ...(typeof capturedAt === \"string\" && capturedAt.length > 0\n      ? { workspaceArchiveAt: capturedAt }\n      : {}),\n  };\n}\n\nasync function materializeSpawnEnvelopeArchive(\n  envelope: unknown,\n  objectStorage: ObjectStorage | null | undefined,\n): Promise<unknown> {\n  if (!envelope || typeof envelope !== \"object\") return envelope;\n  const record = envelope as Record<string, unknown>;\n  const sessionState =\n    record.sessionState &&\n    typeof record.sessionState === \"object\" &&\n    !Array.isArray(record.sessionState)\n      ? (record.sessionState as Record<string, unknown>)\n      : null;\n  if (!sessionState || !parseWorkspaceArchiveObjectRef(sessionState.workspaceArchiveRef)) {\n    return envelope;\n  }\n  if (!objectStorage) {\n    throw new WorkspaceArchiveIntegrityError(\n      \"archive_storage_unavailable\",\n      \"workspace archive object storage is not configured\",\n      { retryable: true },\n    );\n  }\n  const descriptor = parseWorkspaceArchiveDescriptor(sessionState.workspaceArchiveMeta);\n  if (\n    process.platform === \"linux\" &&\n    descriptor?.version === 1 &&\n    descriptor.workspace.projection === \"sdk_local_archive_v1\"\n  ) {\n    return envelope;\n  }\n  return {\n    ...record,\n    sessionState: await inlineWorkspaceArchiveForRestore(sessionState, (key) =>\n      objectStorage.getObjectBytes(key),\n    ),\n  };\n}\n\nfunction legacyNativeArchiveFromEnvelope(envelope: Record<string, unknown> | null | undefined) {\n  const sessionState =\n    envelope && typeof envelope.sessionState === \"object\" && envelope.sessionState !== null\n      ? (envelope.sessionState as Record<string, unknown>)\n      : null;\n  if (!sessionState) return null;\n  const existing = parseWorkspaceArchiveDescriptor(sessionState.workspaceArchiveMeta);\n  if (existing?.version === 2) return null;\n  return describeLegacyNativeSnapshotArchive(\n    sessionState.workspaceArchive,\n    existing?.version === 1 ? Date.parse(existing.capturedAt) : Date.now(),\n  );\n}\n\nexport type SandboxDeadlineRotationCheckpointResult = {\n  /** The exact established epoch still carries a requested rotation and a\n   * complete current-generation archive: the turn may abort orderly. */\n  checkpointed: boolean;\n  /** What the defense-in-depth holder step observed before the capture. */\n  holder: Awaited<ReturnType<typeof reinstateTurnLeaseHolder>>[\"status\"];\n  lease: Awaited<ReturnType<typeof readLease>>;\n};\n\n/**\n * The orderly provider-deadline rotation checkpoint for one running turn. The\n * turn-side lease heartbeat calls this once it observes a rotation-fenced lease\n * at its established epoch/instance; `checkpointed: true` licenses the\n * SandboxDeadlineRotationError abort that hands the same logical turn to the\n * cold successor.\n *\n * Defense in depth: the warm capture claim requires exactly this turn's holder.\n * If that holder was lost while the attempt is still the active writer (a stale\n * release, a reap race), `reinstateTurnLeaseHolder` puts it back under the\n * exact epoch/instance fence before the capture, so a lost holder cannot\n * silently disable the orderly abort and leave the reaper to terminate the box\n * under the running turn. Never captures when the epoch/instance changed.\n */\nexport async function persistSandboxDeadlineRotationCheckpoint(\n  services: SandboxResumeServices,\n  ids: {\n    accountId: string;\n    workspaceId: string;\n    sessionId: string;\n    turnId: string;\n    attemptId: string;\n    sandboxGroupId: string;\n  },\n  session: unknown,\n  expected: { leaseEpoch: number; instanceId: string },\n  signal?: AbortSignal,\n): Promise<SandboxDeadlineRotationCheckpointResult> {\n  const { db, settings } = services;\n  // A cancelled attempt must never briefly regain its holder: its eager\n  // cancellation listener may already have released it, and reinstating here\n  // would pin the lease behind an attempt that is being torn down.\n  if (signal?.aborted) {\n    return { checkpointed: false, holder: \"attempt_fenced\", lease: null };\n  }\n  const reinstated = await reinstateTurnLeaseHolder(db, {\n    accountId: ids.accountId,\n    workspaceId: ids.workspaceId,\n    sandboxGroupId: ids.sandboxGroupId,\n    sessionId: ids.sessionId,\n    attemptId: ids.attemptId,\n    expectedEpoch: expected.leaseEpoch,\n    expectedInstanceId: expected.instanceId,\n    leaseTtlMs: settings.sandboxLeaseTtlMs,\n  });\n  if (reinstated.status === \"reinstated\") {\n    const message = \"sandbox rotation checkpoint reinstated the live turn holder\";\n    const fields = {\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      sandboxGroupId: ids.sandboxGroupId,\n      leaseEpoch: expected.leaseEpoch,\n      liveness: reinstated.lease.liveness,\n    };\n    if (services.observability) services.observability.warn(message, fields);\n    else console.warn(message, fields);\n  }\n  if (reinstated.status !== \"present\" && reinstated.status !== \"reinstated\") {\n    return { checkpointed: false, holder: reinstated.status, lease: null };\n  }\n  await maybePersistWarmWorkspaceSnapshot(\n    services,\n    ids,\n    session,\n    expected.leaseEpoch,\n    signal,\n    true,\n  );\n  const lease = await readLease(db, ids.workspaceId, ids.sandboxGroupId);\n  const checkpointed =\n    lease?.leaseEpoch === expected.leaseEpoch &&\n    lease.instanceId === expected.instanceId &&\n    lease.rotationRequestedAt !== null &&\n    lease.archiveComplete &&\n    signal?.aborted !== true;\n  return { checkpointed, holder: reinstated.status, lease };\n}\n\n/**\n * MID-SESSION /workspace snapshot (sandbox-file-persistence). The reaper's\n * drain-persist only protects boxes the reaper itself kills; anything else —\n * Modal's hard creation-time timeout catching a session busy past it, provider\n * OOM/infra death — loses everything since the last clean drain (staging\n * session e644e8a8, 2026-07-06: mid-turn box termination cost an unpushed\n * branch + 2 commits). While a turn HOLDS the live box, this folds a fresh\n * snapshot onto the lease through persistWarmSnapshot (the warm sibling of the\n * drain seam: epoch-fenced CAS + atomic throttle re-check) and GCs the\n * superseded snapshot image, bounding worst-case loss of ANY unclean box death\n * to sandboxSnapshotIntervalMs.\n *\n * Never throws and never blocks turn progress semantics: every failure path\n * returns false (the snapshot is protection, not a turn dependency). No-ops\n * when the interval is 0, the backend has no persistWorkspace (selfhosted =\n * the user's machine IS the persistence), or a snapshot newer than the\n * interval already rides the lease.\n */\nexport type WarmWorkspaceSnapshotPromise = Promise<boolean> & {\n  /** Settles only after any provider capture continuation has published or\n   * failed and released its exact workspace-capture admission. */\n  readonly settled: Promise<void>;\n};\n\nexport function maybePersistWarmWorkspaceSnapshot(\n  services: SandboxResumeServices,\n  ids: {\n    accountId: string;\n    workspaceId: string;\n    sessionId: string;\n    turnId: string;\n    attemptId: string;\n    sandboxGroupId: string;\n  },\n  session: unknown,\n  leaseEpoch: number,\n  signal?: AbortSignal,\n  force = false,\n): WarmWorkspaceSnapshotPromise {\n  let continuationRegistered = false;\n  let resolvePhysicalSettlement: () => void = () => undefined;\n  const physicalSettlement = new Promise<void>((resolve) => {\n    resolvePhysicalSettlement = resolve;\n  });\n  const result = persistWarmWorkspaceSnapshot(\n    services,\n    ids,\n    session,\n    leaseEpoch,\n    signal,\n    force,\n    (continuation) => {\n      continuationRegistered = true;\n      void continuation.then(resolvePhysicalSettlement, resolvePhysicalSettlement);\n    },\n  );\n  void result.then(\n    () => {\n      if (!continuationRegistered) resolvePhysicalSettlement();\n    },\n    () => {\n      if (!continuationRegistered) resolvePhysicalSettlement();\n    },\n  );\n  return Object.assign(result, { settled: physicalSettlement });\n}\n\nasync function persistWarmWorkspaceSnapshot(\n  services: SandboxResumeServices,\n  ids: {\n    accountId: string;\n    workspaceId: string;\n    sessionId: string;\n    turnId: string;\n    attemptId: string;\n    sandboxGroupId: string;\n  },\n  session: unknown,\n  leaseEpoch: number,\n  signal: AbortSignal | undefined,\n  force: boolean,\n  registerOwnedContinuation: (continuation: Promise<void>) => void,\n): Promise<boolean> {\n  const { db, settings } = services;\n  const warnSnapshotFailure = (message: string, error: unknown): void => {\n    const fields = {\n      ...safeSnapshotError(error),\n      sandboxLeaseKey: sandboxLeaseTelemetryKey(ids.workspaceId, ids.sandboxGroupId),\n      leaseEpoch,\n    };\n    try {\n      if (services.observability) services.observability.warn(message, fields);\n      else console.warn(message, fields);\n    } catch {\n      // Diagnostics cannot change provider settlement or capture-gate cleanup.\n    }\n  };\n  const intervalMs = settings.sandboxSnapshotIntervalMs;\n  if (intervalMs <= 0 && !force) {\n    return false;\n  }\n  const persistable = session as {\n    persistWorkspace?: () => Promise<Uint8Array | undefined>;\n    persistWorkspaceTar?: () => Promise<Uint8Array | undefined>;\n    backendId?: unknown;\n    state?: {\n      workspacePersistence?: unknown;\n      providerState?: { workspacePersistence?: unknown };\n    };\n  };\n  if (\n    typeof persistable.persistWorkspace !== \"function\" &&\n    typeof persistable.persistWorkspaceTar !== \"function\"\n  ) {\n    console.error(\"mid-session workspace snapshot skipped (no persist primitive)\", {\n      backendId: typeof persistable.backendId === \"string\" ? persistable.backendId : null,\n    });\n    return false;\n  }\n  // Filesystem and directory snapshots create retained Images without\n  // terminating the source Sandbox. (Modal's termination warning applies to\n  // memory snapshots.) They are therefore the preferred warm-checkpoint path:\n  // the durable capture gate pauses OpenGeni commands while the provider reads\n  // the filesystem, then the same live instance continues serving the turn.\n  const workspacePersistence =\n    persistable.state?.workspacePersistence ??\n    persistable.state?.providerState?.workspacePersistence;\n  if (signal?.aborted) {\n    return false;\n  }\n  try {\n    // Resolve the provider namespace before taking the durable capture gate.\n    // This work cannot pause or mutate the box, so keeping it outside the claim\n    // minimizes the time that command admission must wait.\n    const lease = await readLease(db, ids.workspaceId, ids.sandboxGroupId);\n    const canWarmCapture =\n      lease?.liveness === \"warm\" && lease.instanceId !== null && lease.leaseEpoch === leaseEpoch;\n    const canForceDrainingCapture =\n      force === true &&\n      lease?.liveness === \"draining\" &&\n      lease.instanceId !== null &&\n      lease.leaseEpoch === leaseEpoch;\n    if (!lease || (!canWarmCapture && !canForceDrainingCapture)) {\n      console.error(\"mid-session workspace snapshot skipped (lease not warm)\", {\n        sandboxGroupId: ids.sandboxGroupId,\n        expectedEpoch: leaseEpoch,\n        liveness: lease?.liveness ?? null,\n        leaseEpoch: lease?.leaseEpoch ?? null,\n        hasInstance: lease?.instanceId !== null && lease?.instanceId !== undefined,\n      });\n      return false;\n    }\n    // A checkpoint of this exact mutation generation already protects every\n    // settled operation admitted so far. Capturing it again cannot improve the\n    // recovery point, even when the wall-clock interval has elapsed.\n    if (lease.archiveComplete) {\n      return false;\n    }\n    if (lease.instanceId === null) {\n      return false;\n    }\n    const instanceId = lease.instanceId;\n    const captureLiveness: \"warm\" | \"draining\" = canWarmCapture ? \"warm\" : \"draining\";\n    const capturePolicy = providerWorkspaceCapturePolicy(lease.backend, session);\n    if (!capturePolicy || capturePolicy.liveInstance !== \"preserved\") {\n      console.error(\"mid-session workspace snapshot skipped (capture policy)\", {\n        sandboxGroupId: ids.sandboxGroupId,\n        backend: lease.backend,\n        liveInstance: capturePolicy?.liveInstance ?? null,\n      });\n      return false;\n    }\n    const nativeModalPersistence =\n      workspacePersistence === \"snapshot_filesystem\" ||\n      workspacePersistence === \"snapshot_directory\";\n    const checkpointBinding = nativeModalPersistence\n      ? await resolveModalCheckpointBindingBeforeCapture(settings, persistable, signal)\n      : null;\n    if (signal?.aborted) return false;\n\n    const captureId = randomUUID();\n    const captureTimeoutMs = sandboxArchiveCaptureTimeoutMs(settings);\n    const claimed = await claimWorkspaceArchiveCapture(db, {\n      accountId: ids.accountId,\n      workspaceId: ids.workspaceId,\n      sandboxGroupId: ids.sandboxGroupId,\n      captureId,\n      expectedEpoch: leaseEpoch,\n      expectedInstanceId: instanceId,\n      liveness: captureLiveness,\n      captureTimeoutMs,\n      minIntervalMs: force ? 0 : intervalMs,\n      providerReplaySafe: capturePolicy.takeover === \"same_request\",\n      takeoverSafe: capturePolicy.takeover !== \"exclusive\",\n      ...(captureLiveness === \"warm\"\n        ? {\n            warmAttempt: {\n              sessionId: ids.sessionId,\n              turnId: ids.turnId,\n              attemptId: ids.attemptId,\n              holderId: sandboxLeaseHolderIdForAttempt(ids.attemptId),\n            },\n          }\n        : {}),\n    });\n    if (claimed.status !== \"claimed\") {\n      // A scheduled interval not being due is normal, including after a failed\n      // attempt. Do not turn every ten-second heartbeat into an error log.\n      if (claimed.status === \"throttled\") return false;\n      console.error(\"mid-session workspace snapshot skipped (capture claim)\", {\n        sandboxGroupId: ids.sandboxGroupId,\n        status: claimed.status,\n      });\n      return false;\n    }\n\n    let timeout: ReturnType<typeof setTimeout> | undefined;\n    // Stamp WHEN this capture started: persistWarmSnapshot orders warm snapshots\n    // by capture-initiation, not land time, so a slower heartbeat capture that\n    // started earlier can never overwrite a fresher turn-end capture that landed\n    // first (the bounded-wait race Bugbot flagged).\n    const capturedAtMs = Date.now();\n    const registerCandidate = async (\n      archive: VerifiedWorkspaceArchivePayload,\n    ): Promise<{ id: string } | null> => {\n      if (\n        archive.kind === \"host_spool\" ||\n        archive.descriptor.version !== 2 ||\n        (archive.descriptor.provider !== \"modal_snapshot_filesystem\" &&\n          archive.descriptor.provider !== \"modal_snapshot_directory\")\n      ) {\n        return null;\n      }\n      if (!checkpointBinding) {\n        throw new Error(\"Modal native snapshot has no exact session provider identity\");\n      }\n      return await registerSandboxCheckpointArtifact(db, {\n        accountId: ids.accountId,\n        workspaceId: ids.workspaceId,\n        sandboxGroupId: ids.sandboxGroupId,\n        sourceLeaseId: claimed.claim.leaseId,\n        sourceLeaseEpoch: leaseEpoch,\n        sourceInstanceId: instanceId,\n        sourceWorkspaceGeneration: claimed.claim.workspaceGeneration,\n        providerBindingKey: checkpointBinding.key,\n        providerBinding: checkpointBinding.binding,\n        workspaceArchive: archive.base64,\n        workspaceArchiveMeta: archive.descriptor,\n      });\n    };\n\n    const abandonCandidate = async (artifactId: string, reason: string): Promise<void> => {\n      await markSandboxCheckpointArtifactDeletePending(db, {\n        accountId: ids.accountId,\n        workspaceId: ids.workspaceId,\n        artifactId,\n        reason,\n      }).catch(() => undefined);\n    };\n    // The SDK capture itself is not cancellable. Keep one owned continuation\n    // alive through provider settlement even if this caller's bounded wait or\n    // turn signal resolves first. Its finally block is the only normal release\n    // of the exact admission gate; a late callback cannot release a successor.\n    const captureAndPublish = (async (): Promise<boolean> => {\n      const captureStarted = performance.now();\n      let captureOutcome: \"completed\" | \"failed\" = \"failed\";\n      let archive: VerifiedWorkspaceArchivePayload | undefined;\n      let candidate: { id: string } | null = null;\n      let publicationAttempted = false;\n      try {\n        archive = await captureWorkspaceArchiveForStorage(\n          session,\n          capturedAtMs,\n          {\n            requestId: claimed.claim.providerRequestId,\n            strategy: capturePolicy.strategy,\n          },\n          Boolean(services.objectStorage),\n        );\n        candidate = await registerCandidate(archive);\n        const archiveDescriptor = archive.descriptor;\n        const published = await putVersion1TarArchiveOrInline({\n          backend: lease.backend,\n          objectStorage: services.objectStorage,\n          accountId: ids.accountId,\n          workspaceId: ids.workspaceId,\n          sandboxGroupId: ids.sandboxGroupId,\n          archive,\n          ...(services.sandboxMetrics ? { metrics: services.sandboxMetrics } : {}),\n        });\n        publicationAttempted = true;\n        const { wrote } = await persistWorkspaceArchiveCandidate({\n          ...(services.objectStorage ? { objectStorage: services.objectStorage } : {}),\n          ...(published.workspaceArchiveRef ? { ref: published.workspaceArchiveRef } : {}),\n          persist: () =>\n            persistWarmSnapshot(db, {\n              accountId: ids.accountId,\n              workspaceId: ids.workspaceId,\n              sessionId: ids.sessionId,\n              turnId: ids.turnId,\n              attemptId: ids.attemptId,\n              sandboxGroupId: ids.sandboxGroupId,\n              expectedEpoch: leaseEpoch,\n              expectedInstanceId: instanceId,\n              expectedWorkspaceGeneration: claimed.claim.workspaceGeneration,\n              captureId,\n              workspaceArchiveMeta: archiveDescriptor,\n              ...published,\n              checkpointArtifactId: candidate?.id ?? null,\n              minIntervalMs: force ? 0 : intervalMs,\n              capturedAtMs,\n            }),\n        });\n        if (!wrote && candidate) {\n          await abandonCandidate(candidate.id, \"snapshot_publication_fenced\");\n        }\n        if (wrote) captureOutcome = \"completed\";\n        return wrote;\n      } catch (error) {\n        if (candidate && !publicationAttempted)\n          await abandonCandidate(candidate.id, \"snapshot_capture_failed\");\n        throw error;\n      } finally {\n        await disposeWorkspaceArchive(archive).catch(() => {\n          console.warn(\"workspace archive spool cleanup failed\");\n        });\n        await releaseWorkspaceArchiveCapture(db, {\n          accountId: ids.accountId,\n          workspaceId: ids.workspaceId,\n          sandboxGroupId: ids.sandboxGroupId,\n          captureId,\n          expectedEpoch: leaseEpoch,\n          expectedInstanceId: instanceId,\n        }).catch((error) => {\n          captureOutcome = \"failed\";\n          warnSnapshotFailure(\"mid-session workspace capture gate release failed\", error);\n        });\n        try {\n          services.sandboxMetrics?.onWorkspaceCapture?.({\n            backend: lease.backend,\n            outcome: captureOutcome,\n            durationSeconds: Math.max(0, performance.now() - captureStarted) / 1_000,\n          });\n        } catch {\n          // A completed capture and released gate cannot depend on telemetry.\n        }\n      }\n    })();\n    const settled = captureAndPublish.then(\n      (persisted) => ({ kind: \"settled\" as const, persisted }),\n      (error) => {\n        warnSnapshotFailure(\"mid-session workspace snapshot failed (turn unaffected)\", error);\n        return { kind: \"settled\" as const, persisted: false };\n      },\n    );\n    registerOwnedContinuation(settled.then(() => undefined));\n    let cancelListener: (() => void) | undefined;\n    const outcome = await Promise.race([\n      settled,\n      ...(signal\n        ? [\n            new Promise<{ kind: \"cancelled\" }>((resolve) => {\n              cancelListener = () => resolve({ kind: \"cancelled\" });\n              signal.addEventListener(\"abort\", cancelListener, { once: true });\n              if (signal.aborted) cancelListener();\n            }),\n          ]\n        : []),\n      new Promise<{ kind: \"timed_out\" }>((resolve) => {\n        timeout = setTimeout(\n          () => resolve({ kind: \"timed_out\" }),\n          settings.sandboxSnapshotTimeoutMs,\n        );\n      }),\n    ]).finally(() => {\n      if (timeout) clearTimeout(timeout);\n      if (cancelListener) signal?.removeEventListener(\"abort\", cancelListener);\n    });\n    // A timed-out/cancelled local waiter deliberately leaves the already-owned\n    // provider continuation running; `settled` has both rejection handling and\n    // exact claim cleanup, so it cannot leak an unhandled promise or artifact.\n    return outcome.kind === \"settled\" ? outcome.persisted : false;\n  } catch (error) {\n    // A failed snapshot does not fail the turn. Physical captures can still\n    // fence commands until their exact gate settles; the caller timeout is not\n    // permission to release that gate. The next eligible tick can retry.\n    warnSnapshotFailure(\"mid-session workspace snapshot failed (turn unaffected)\", error);\n    return false;\n  }\n}\n\n/**\n * Resume the one box for a single turn (or any worker-side resume op). Returns\n * the live non-owned session + the fence epoch + a release fn. The CALLER owns\n * the lifecycle: inject non-owned, run, then `await release()` and drop the\n * handle in `finally`.\n *\n * holderId is the globally unique durable turn-attempt id. It must not be a\n * Temporal activity id, because activity ids are only workflow-local and\n * collide when sibling sessions share one sandbox group.\n *\n * A freshly created box that misses its bounded command-readiness budget is\n * replaced at most once per turn attempt (the budget is shared by every call\n * the turn's provisioner makes). The first establish has already terminated that exact\n * unpublished box, rolled its exact warming epoch back to cold (advancing the\n * epoch), and released its holder, so the replacement is an ordinary new\n * admission: it re-runs the cold->warming CAS, persists its own provider\n * instance before readiness, and may instead attach to a sibling that won the\n * CAS first. Nothing model- or tool-visible ran on the discarded box, so no\n * side effect is replayed. A second readiness timeout fails the turn exactly\n * as before; attached/resumed boxes and unconfirmed terminations never\n * replace.\n */\nexport async function resumeBoxForTurn(\n  services: SandboxResumeServices,\n  ids: ResumeBoxIds,\n  kind: \"turn\",\n  holderId: TurnSandboxLeaseHolderId,\n): Promise<ResumedTurnSandbox> {\n  try {\n    return await resumeBoxForTurnOnce(services, ids, kind, holderId);\n  } catch (error) {\n    if (!isReplaceableFreshSandboxReadinessTimeout(error)) throw error;\n    const readiness = error as SandboxExecReadinessTimeoutError;\n    const warn = (message: string, fields: Parameters<Observability[\"warn\"]>[1]) => {\n      if (services.observability) services.observability.warn(message, fields);\n      else console.warn(message, fields);\n    };\n    const identity = {\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      sandboxGroupId: ids.sandboxGroupId,\n      backend: readiness.backend,\n      instanceId: readiness.instanceId,\n      readinessTimeoutMs: readiness.timeoutMs,\n    };\n    const budget =\n      services.freshSandboxReadinessReplacementBudget ??\n      createFreshSandboxReadinessReplacementBudget();\n    if (budget.remaining <= 0) {\n      recordFreshSandboxReadinessReplacement(\n        services.sandboxMetrics,\n        readiness.backend,\n        \"budget_spent\",\n      );\n      warn(\n        \"sandbox command-readiness timed out on a fresh box; this turn attempt already used its replacement\",\n        identity,\n      );\n      throw error;\n    }\n    budget.remaining -= 1;\n    const delayMs = await (\n      services.freshSandboxReadinessReplacementDelayMs ?? freshSandboxReadinessReplacementDelayMs\n    )();\n    warn(\"sandbox command-readiness timed out on a fresh box; replacing it once after jitter\", {\n      ...identity,\n      replacementDelayMs: delayMs,\n    });\n    if (!(await sleepUnlessCancelled(delayMs, services.cancellationSignal))) {\n      // Cancellation owns the turn boundary; surface the original typed\n      // readiness failure rather than starting a replacement.\n      recordFreshSandboxReadinessReplacement(\n        services.sandboxMetrics,\n        readiness.backend,\n        \"cancelled\",\n      );\n      throw error;\n    }\n    try {\n      const replaced = await resumeBoxForTurnOnce(services, ids, kind, holderId);\n      recordFreshSandboxReadinessReplacement(\n        services.sandboxMetrics,\n        readiness.backend,\n        \"replaced\",\n      );\n      return replaced;\n    } catch (replacementError) {\n      recordFreshSandboxReadinessReplacement(\n        services.sandboxMetrics,\n        readiness.backend,\n        services.cancellationSignal?.aborted\n          ? \"cancelled\"\n          : replacementError instanceof SandboxExecReadinessTimeoutError\n            ? \"failed_again\"\n            : \"replacement_failed\",\n      );\n      throw replacementError;\n    }\n  }\n}\n\nasync function resumeBoxForTurnOnce(\n  services: SandboxResumeServices,\n  ids: ResumeBoxIds,\n  kind: \"turn\",\n  holderId: TurnSandboxLeaseHolderId,\n): Promise<ResumedTurnSandbox> {\n  const { db, settings } = services;\n  const os = ids.os ?? \"linux\";\n  const leaseTtlMs = settings.sandboxLeaseTtlMs;\n  const cancellationSignal = services.cancellationSignal;\n\n  // The release closure is created eagerly so the caller can always release in\n  // finally, even if establish/commit throws after the holder was registered.\n  // It is also bound directly to the logical attempt signal: an uninterruptible\n  // provider promise must never keep its private warmup timer and holder alive\n  // after Temporal has abandoned the activity.\n  let releaseStarted = false;\n  let holderRelease: Promise<void> | null = null;\n  let quiescedRelease: Promise<void> | null = null;\n  let holderLivenessTimer: ReturnType<typeof setInterval> | undefined;\n  let cancellationListener: (() => void) | undefined;\n  const release = (options?: { workspaceWritersQuiesced?: boolean }): Promise<void> => {\n    const writersQuiesced = options?.workspaceWritersQuiesced === true;\n    // First invocation synchronously closes every in-memory liveness source.\n    // A later quiesced invocation is still allowed to enter the DB: cancellation\n    // commonly wins this race and drops the holder before the physical writer\n    // drain can prove that abandoned turn admissions are safe to settle.\n    if (!releaseStarted) {\n      releaseStarted = true;\n      if (cancellationListener) {\n        cancellationSignal?.removeEventListener(\"abort\", cancellationListener);\n        cancellationListener = undefined;\n      }\n      if (holderLivenessTimer) {\n        clearInterval(holderLivenessTimer);\n        holderLivenessTimer = undefined;\n      }\n    }\n    const persistRelease = async (workspaceWritersQuiesced: boolean): Promise<void> => {\n      await releaseLeaseHolder(db, {\n        accountId: ids.accountId,\n        workspaceId: ids.workspaceId,\n        sandboxGroupId: ids.sandboxGroupId,\n        kind,\n        holderId,\n        idleGraceMs: settings.sandboxIdleGraceMs,\n        ...(workspaceWritersQuiesced ? { workspaceWritersQuiesced: true } : {}),\n      });\n    };\n    if (writersQuiesced) {\n      if (!quiescedRelease) {\n        // Serialize behind an eager cancellation release when one exists. Its\n        // failure is intentionally swallowed only as a predecessor: this exact\n        // idempotent proof-bearing call retries both holder deletion and\n        // admission settlement in one transaction.\n        const predecessor = holderRelease;\n        const attempt = (predecessor ? predecessor.catch(() => undefined) : Promise.resolve()).then(\n          async () => await persistRelease(true),\n        );\n        const tracked = attempt.catch((error) => {\n          if (quiescedRelease === tracked) quiescedRelease = null;\n          throw error;\n        });\n        quiescedRelease = tracked;\n        holderRelease = tracked;\n      }\n      return quiescedRelease;\n    }\n    if (!holderRelease) {\n      const attempt = persistRelease(false);\n      const tracked = attempt.catch((error) => {\n        if (holderRelease === tracked) holderRelease = null;\n        throw error;\n      });\n      holderRelease = tracked;\n    }\n    return holderRelease;\n  };\n  const cancellationError = (): Error =>\n    cancellationSignal?.reason instanceof Error\n      ? cancellationSignal.reason\n      : new Error(\"Sandbox resume was cancelled with its owning turn attempt\");\n  const throwIfReleasedOrCancelled = (): void => {\n    if (releaseStarted || cancellationSignal?.aborted) {\n      throw cancellationError();\n    }\n  };\n\n  const acquired = await acquireLease(db, {\n    accountId: ids.accountId,\n    workspaceId: ids.workspaceId,\n    sandboxGroupId: ids.sandboxGroupId,\n    kind,\n    holderId,\n    subjectId: ids.sessionId,\n    backend: ids.backend,\n    warmBilling: {\n      mode: settings.sandboxWarmBillingMode,\n      rateMicrosPerSecond: sandboxWarmRateMicrosPerSecond(settings, ids.backend),\n    },\n    os,\n    // IMAGE IS SHARED STATE (B3): thread the resolved image so the lease stamps it +\n    // conflicts on a live box already running a different required image. A\n    // SandboxImageConflictError propagates while another holder is active; a\n    // solo change requests a capture-and-drain rotation and this attempt retries\n    // after the cold successor can safely stamp the new image.\n    ...(ids.image ? { image: ids.image } : {}),\n    ...(ids.imagePolicy ? { imagePolicy: ids.imagePolicy } : {}),\n    // RIG IS SHARED STATE (M3): thread the frozen rig version so the lease stamps it\n    // + conflicts on a live box under a different rig. A SandboxRigConflictError\n    // propagates while another holder is active; a solo change uses the same\n    // durable capture-and-drain rotation as an image change.\n    ...(ids.rigVersionId ? { rigVersionId: ids.rigVersionId } : {}),\n    leaseTtlMs,\n    warmingLeaseTtlMs: settings.sandboxLeaseWarmingTtlMs,\n    captureWaitMs: sandboxLifecycleTransitionWaitMs(settings),\n    ...(cancellationSignal ? { waitSignal: cancellationSignal } : {}),\n  });\n\n  if (cancellationSignal) {\n    cancellationListener = () => {\n      // release() flips `releaseStarted` and clears the timer synchronously\n      // before its first await. This eager form deliberately carries no writer-\n      // quiescence proof; the outer turn supplies that second stage after its\n      // physical drain. The detached rejection handler is intentional: the\n      // outer turn owns diagnostics, while this listener owns leak prevention.\n      void release().catch(() => undefined);\n    };\n    cancellationSignal.addEventListener(\"abort\", cancellationListener, { once: true });\n  }\n  if (cancellationSignal?.aborted) {\n    await release();\n    throw cancellationError();\n  }\n\n  // HOLDER-LIVENESS loop: refresh OUR holder every 10s from registration.\n  // registered until release. The dead-worker turn-holder reap judges liveness\n  // by last_heartbeat_at, and the full turn heartbeat (heartbeatLeaseHolder in\n  // agent-turn) only starts AFTER this function returns — while waitForWarm and\n  // establish/cold-restore can legitimately run for many minutes in here,\n  // COMPOUNDING past any fixed reap horizon. With this\n  // loop no live holder is ever silent for more than one tick, so the reap\n  // horizon is pure defense-in-depth, not a tuned guess about path lengths.\n  // The elected spawner also heartbeats the short rolling warming lease; this\n  // makes warming expiry a crash detector rather than a fixed upper bound on a\n  // legitimate provider create/restore. A warming waiter only touches its own\n  // holder so it cannot keep a dead spawner's lease alive. Once the box is warm,\n  // every owner uses the normal epoch-fenced lease heartbeat.\n  let holderLeaseHeartbeat: { expectedEpoch: number; leaseTtlMs: number } | null =\n    acquired.role === \"spawner\"\n      ? {\n          expectedEpoch: acquired.lease.leaseEpoch,\n          leaseTtlMs: settings.sandboxLeaseWarmingTtlMs,\n        }\n      : (acquired.role === \"attached\" || acquired.role === \"rearmed\") &&\n          acquired.lease.liveness === \"warm\"\n        ? { expectedEpoch: acquired.lease.leaseEpoch, leaseTtlMs }\n        : null;\n  let providerRenewalTarget: { backend: Settings[\"sandboxBackend\"]; instanceId: string } | null =\n    acquired.lease.liveness === \"warm\" && acquired.lease.instanceId\n      ? {\n          backend: ids.backend,\n          instanceId: acquired.lease.instanceId,\n        }\n      : null;\n  let providerRenewedAtMs = Date.now();\n  let providerRenewalInFlight: Promise<void> | null = null;\n  const maybeRenewProviderExpiration = async (force = false): Promise<void> => {\n    const target = providerRenewalTarget;\n    if (!target || providerRenewalInFlight) return;\n    const ttlSeconds = effectiveSandboxLifecycle(settings, target.backend).renewableTtlSeconds;\n    if (ttlSeconds === null) return;\n    const intervalMs = Math.max(10_000, Math.floor((ttlSeconds * 1000) / 3));\n    if (!force && Date.now() - providerRenewedAtMs < intervalMs) return;\n    providerRenewalInFlight = renewSandboxProviderExpiration({\n      backend: target.backend,\n      settings,\n      instanceId: target.instanceId,\n      ...(services.sandboxMetrics ? { metrics: services.sandboxMetrics } : {}),\n    })\n      .then(() => {\n        providerRenewedAtMs = Date.now();\n      })\n      .finally(() => {\n        providerRenewalInFlight = null;\n      });\n    await providerRenewalInFlight;\n  };\n  // Release ONLY on holder death. `heartbeatLeaseHolderStatus` separates \"this\n  // holder is gone / its attempt is no longer the active writer\" from \"the lease\n  // could not be extended\" (rotation requested, draining, another epoch). The\n  // second is NOT a reason to release: once a provider-deadline rotation is\n  // requested the turn-side heartbeat immediately preempts the attempt, whose\n  // finalizer retains this holder until every attempt-owned writer is physically\n  // drained. Dropping it here would let the reaper capture or terminate while a\n  // provider operation may still be mutating /workspace. Both loops therefore\n  // converge on \"holder alive -> never release\"; finalization performs the\n  // proof-bearing release.\n  const releaseDeadHolder = async (reason: string): Promise<void> => {\n    // Logical closure deliberately fences heartbeat authority. It is not proof\n    // that the already-admitted capture has physically settled: the finalizer\n    // owns that wait and the original deadline bounds dead-worker recovery.\n    // Match the reaper's retention rule without touching holder/lease TTLs.\n    if (reason === \"holder_gone\" && kind === \"turn\" && holderLeaseHeartbeat) {\n      const expectedEpoch = holderLeaseHeartbeat.expectedEpoch;\n      const lease = await readLease(db, ids.workspaceId, ids.sandboxGroupId);\n      if (retainsHolderForWarmCapture(lease, expectedEpoch)) return;\n    }\n    const message = \"sandbox resume holder released: holder no longer live\";\n    const fields = {\n      workspaceId: ids.workspaceId,\n      sessionId: ids.sessionId,\n      sandboxGroupId: ids.sandboxGroupId,\n      holderKind: kind,\n      reason,\n    };\n    if (services.observability) services.observability.warn(message, fields);\n    else console.warn(message, fields);\n    void release().catch(() => undefined);\n  };\n  holderLivenessTimer = setInterval(() => {\n    const heartbeat = holderLeaseHeartbeat;\n    if (heartbeat) {\n      void heartbeatLeaseHolderStatus(db, {\n        accountId: ids.accountId,\n        workspaceId: ids.workspaceId,\n        sandboxGroupId: ids.sandboxGroupId,\n        kind,\n        holderId,\n        expectedEpoch: heartbeat.expectedEpoch,\n        leaseTtlMs: heartbeat.leaseTtlMs,\n        billingMode: services.settings.sandboxWarmBillingMode,\n      })\n        .then(async (status) => {\n          if (heartbeat !== holderLeaseHeartbeat) return;\n          if (!status.holderAlive) {\n            // Reaped, released, or its exact attempt is no longer the active\n            // writer. Stop this otherwise-unbounded provider operation and\n            // idempotently drop any remaining holder state.\n            await releaseDeadHolder(status.fence);\n            return;\n          }\n          if (status.fence === \"epoch\") {\n            // The lease epoch never regresses: a newer epoch means the box this\n            // holder was registered against is definitively superseded (lost\n            // instance replaced, re-established by a later turn). The holder\n            // row is stale authority for an instance that no longer exists;\n            // drop it promptly instead of pinning a successor's lease.\n            await releaseDeadHolder(status.fence);\n            return;\n          }\n          // The box is still serving this live holder: keep the provider TTL\n          // renewed while the lease is ours (extended, or only rotation-fenced at\n          // the same epoch). A liveness fence (draining at our epoch) means the\n          // reaper now governs the instance; keep the holder but leave its\n          // expiry alone.\n          if (status.leaseExtended || status.fence === \"rotation_requested\") {\n            void maybeRenewProviderExpiration().catch(() => undefined);\n          }\n        })\n        .catch(() => undefined);\n      return;\n    }\n    void touchLeaseHolder(db, {\n      accountId: ids.accountId,\n      workspaceId: ids.workspaceId,\n      sandboxGroupId: ids.sandboxGroupId,\n      kind,\n      holderId,\n    })\n      .then(async (touched) => {\n        if (heartbeat !== holderLeaseHeartbeat) return;\n        // A canonical turn holder is rejected once its exact attempt is no\n        // longer the active writer (touch is attempt-fenced only; it never\n        // consults lease authority, so false here always means holder death).\n        if (!touched) {\n          await releaseDeadHolder(\"holder_gone\");\n          return;\n        }\n        void maybeRenewProviderExpiration().catch(() => undefined);\n      })\n      .catch(() => undefined);\n  }, services.holderLivenessIntervalMs ?? 10_000);\n  if (\"unref\" in holderLivenessTimer && typeof holderLivenessTimer.unref === \"function\") {\n    holderLivenessTimer.unref();\n  }\n\n  // FENCED: a newer epoch exists (a later turn re-established the box). Back off;\n  // NEVER create(). Release our (just-registered) holder so we don't pin a stale\n  // lease, then surface the supersession.\n  if (acquired.role === \"blocked\") {\n    await release();\n    throw new SandboxLeaseRecoveryBlockedError(\n      ids.sandboxGroupId,\n      acquired.lease.leaseEpoch,\n      acquired.code,\n      acquired.lease.recovery,\n    );\n  }\n  if (acquired.role === \"fenced\") {\n    await release();\n    if (acquired.reason !== \"superseded\") {\n      throw new SandboxLeaseTransitionError(\n        ids.sandboxGroupId,\n        acquired.lease.leaseEpoch,\n        acquired.reason,\n        acquired.lease.backend,\n        acquired.lease.instanceId,\n        acquired.lease.liveness,\n      );\n    }\n    throw new SandboxLeaseSupersededError(ids.sandboxGroupId, acquired.lease.leaseEpoch, {\n      backend: acquired.lease.backend,\n      instanceId: acquired.lease.instanceId,\n      liveness: acquired.lease.liveness,\n    });\n  }\n\n  // SPAWNER: we won the cold->warming CAS. Establish (cold-restore/create),\n  // then commit warm (lease_epoch++). Optional desktop setup is lazy.\n  if (acquired.role === \"spawner\") {\n    const expectedEpoch = acquired.lease.leaseEpoch;\n    let createdEstablished: EstablishedSandboxSession | null = null;\n    let providerCreateOperationId: string | undefined;\n    let providerCreateBindingKey: string | undefined;\n    let rematerialization: {\n      id: string;\n      selectedRevision: string;\n      workspaceGeneration: number;\n      providerBindingKey: string | null;\n      legacyCheckpoint: NonNullable<ReturnType<typeof legacyNativeArchiveFromEnvelope>> | null;\n      legacyProviderBinding: Awaited<\n        ReturnType<typeof resolveModalCheckpointProviderBindingForSession>\n      > | null;\n    } | null = null;\n    try {\n      // An audited decision to continue a definitively lost workspace on a new\n      // EMPTY box: hydrate nothing (not even a per-session legacy archive) and\n      // resume no prior provider identity. Every group member was already told\n      // the workspace is empty; the DB accepts only this exact publication.\n      const freshWorkspaceRecoveryId = acquired.lease.freshWorkspaceRecoveryId ?? null;\n      const envelope = freshWorkspaceRecoveryId\n        ? null\n        : await getSandboxSessionEnvelope(db, ids.workspaceId, ids.sessionId);\n      // The lease is authoritative. A legacy per-session fallback archive may\n      // only be used after beginSandboxRematerialization imports its archive\n      // fields under the warming-row lock and records one selected revision.\n      // Select the fallback only when the lease has no archive truth at all. A\n      // lease-carried unverified/invalid archive must fail closed rather than\n      // silently substituting another revision.\n      // Backstop: a session already told its workspace is empty never gets a\n      // legacy per-session archive back, even if the lease marker was lost.\n      const legacyFallbackRefused =\n        !freshWorkspaceRecoveryId &&\n        acquired.lease.recovery.archive.status === \"none\" &&\n        workspaceArchiveFieldsFromEnvelope(envelope) !== null &&\n        (await sessionHoldsFreshWorkspaceRecovery(db, ids.workspaceId, ids.sessionId));\n      const fallbackArchiveEnvelope =\n        !freshWorkspaceRecoveryId &&\n        !legacyFallbackRefused &&\n        acquired.lease.recovery.archive.status === \"none\" &&\n        workspaceArchiveFieldsFromEnvelope(envelope) !== null\n          ? withoutSandboxProviderIdentity(envelope)\n          : null;\n      let spawnEnvelope = freshWorkspaceRecoveryId\n        ? null\n        : legacyFallbackRefused\n          ? (acquired.lease.resumeState ?? null)\n          : (fallbackArchiveEnvelope ?? acquired.lease.resumeState ?? envelope);\n      const archiveSource =\n        acquired.lease.recovery.archive.status === \"none\"\n          ? fallbackArchiveEnvelope\n          : acquired.lease.resumeState;\n      const continuityRecovery = acquired.lease.recovery.continuity;\n      // A fresh-workspace spawn is deliberately archive-free; commitWarmingToWarm\n      // verifies the exact decision before publication.\n      if (\n        !freshWorkspaceRecoveryId &&\n        ((acquired.lease.recovery.archive.status === \"available\" &&\n          (acquired.lease.archiveComplete ||\n            acquired.lease.historicalRecoveryAuthorized === true)) ||\n          (acquired.lease.recovery.archive.status === \"none\" &&\n            workspaceArchiveFieldsFromEnvelope(archiveSource) !== null))\n      ) {\n        const rematerializationId = crypto.randomUUID();\n        const legacyNativeArchive = legacyNativeArchiveFromEnvelope(archiveSource);\n        const begun = await beginSandboxRematerialization(db, {\n          accountId: ids.accountId,\n          workspaceId: ids.workspaceId,\n          sandboxGroupId: ids.sandboxGroupId,\n          expectedEpoch,\n          rematerializationId,\n          archiveSource,\n          legacyNativeArchive,\n        });\n        if (begun.status !== \"started\") {\n          if (begun.code === \"stale_epoch\" || begun.code === \"attempt_conflict\") {\n            throw new SandboxLeaseSupersededError(\n              ids.sandboxGroupId,\n              begun.lease?.leaseEpoch ?? expectedEpoch,\n            );\n          }\n          throw new SandboxLeaseRecoveryBlockedError(\n            ids.sandboxGroupId,\n            begun.lease?.leaseEpoch ?? expectedEpoch,\n            begun.code === \"archive_unverified\" ? \"restore_degraded\" : \"restore_unrecoverable\",\n            begun.lease?.recovery ?? acquired.lease.recovery,\n          );\n        }\n        spawnEnvelope = begun.lease.resumeState ?? spawnEnvelope;\n        const selectedRevision = begun.lease.recovery.restore.selectedRevision;\n        if (!selectedRevision) {\n          throw new WorkspaceArchiveIntegrityError(\n            \"archive_metadata_invalid\",\n            \"sandbox rematerialization selected no durable archive revision\",\n          );\n        }\n        rematerialization = {\n          id: rematerializationId,\n          selectedRevision,\n          workspaceGeneration: begun.lease.workspaceGeneration,\n          providerBindingKey: begun.checkpointArtifact?.providerBindingKey ?? null,\n          legacyCheckpoint: begun.checkpointArtifact === null ? legacyNativeArchive : null,\n          legacyProviderBinding: null,\n        };\n      } else if (\n        !freshWorkspaceRecoveryId &&\n        acquired.lease.recovery.archive.status !== \"none\" &&\n        !continuityRecovery\n      ) {\n        throw new SandboxLeaseRecoveryBlockedError(\n          ids.sandboxGroupId,\n          expectedEpoch,\n          \"restore_degraded\",\n          acquired.lease.recovery,\n        );\n      }\n      // Prefer the COLD lease's preserved resume_state when it carries a persisted\n      // /workspace snapshot (confirmDrainCold keeps a minimal archive-only envelope\n      // across draining->cold for exactly this re-warm). establishSandboxSessionFromEnvelope\n      // cold-creates a fresh box and replays the archive via hydrateWorkspace, so\n      // /workspace survives box churn (sandbox-file-persistence). No archive ->\n      // the bare session envelope (a never-warmed cold start). Mirrors channel-a.ts's\n      // spawner branch: the lease's resume_state is authoritative; the session\n      // `_sandbox` envelope is the per-session fallback. Without this a turn-first\n      // re-warm after a drain->cold would ignore the archive and start an EMPTY box.\n      const providerCreateStartedAt = new Date();\n      const persistArchiveSource =\n        spawnEnvelope && typeof spawnEnvelope === \"object\"\n          ? (spawnEnvelope as Record<string, unknown>)\n          : null;\n      const hydrateEnvelopeRaw = await materializeSpawnEnvelopeArchive(\n        persistArchiveSource,\n        services.objectStorage,\n      );\n      const hydrateEnvelope =\n        hydrateEnvelopeRaw && typeof hydrateEnvelopeRaw === \"object\"\n          ? (hydrateEnvelopeRaw as Record<string, unknown>)\n          : null;\n      const established = await establishSandboxSessionFromEnvelope(settings, hydrateEnvelope, {\n        sessionId: ids.sessionId,\n        recovery: \"create-or-restore\",\n        ...(services.objectStorage\n          ? {\n              loadHostWorkspaceArchive: async (ref) => {\n                try {\n                  return await downloadWorkspaceArchiveSpool(services.objectStorage!, ref.key, {\n                    bytes: ref.bytes,\n                    sha256: ref.sha256,\n                  });\n                } catch (error) {\n                  if (error instanceof WorkspaceArchiveStorageError) {\n                    throw new WorkspaceArchiveIntegrityError(error.code, error.message, {\n                      retryable: error.retryable,\n                      cause: error,\n                    });\n                  }\n                  throw error;\n                }\n              },\n            }\n          : {}),\n        backendOverride: ids.backend as never,\n        ...(ids.environment ? { environment: ids.environment } : {}),\n        ...(services.sandboxMetrics ? { metrics: services.sandboxMetrics } : {}),\n        ...(services.logicalFallbackSettings\n          ? { logicalFallbackSettings: services.logicalFallbackSettings }\n          : {}),\n        onBeforeSandboxCreate: async (createSettings, intent, providerContext) => {\n          if (ids.backend !== \"modal\") return;\n          if (!intent || !providerContext)\n            throw new Error(\"Modal create requires the provider dispatch boundary\");\n          throwIfReleasedOrCancelled();\n          const binding = await resolveModalCheckpointProviderBindingForSession(\n            createSettings,\n            providerContext,\n          );\n          const operationId = intent.operationId;\n          await beginModalProviderCreate(db, {\n            accountId: ids.accountId,\n            workspaceId: ids.workspaceId,\n            sandboxGroupId: ids.sandboxGroupId,\n            expectedEpoch,\n            operationId,\n            providerBindingKey: binding.key,\n            rematerializationId: rematerialization?.id ?? null,\n            selectedRevision: rematerialization?.selectedRevision ?? null,\n            imageId: intent.imageId,\n            imageRef: createSettings.modalImageRef ?? null,\n            appId: intent.appId,\n            providerName: intent.name,\n            requestSha256: intent.requestSha256,\n          });\n          providerCreateOperationId = operationId;\n          providerCreateBindingKey = binding.key;\n        },\n        onSandboxCreated: async (created) => {\n          createdEstablished = created;\n          providerRenewalTarget = {\n            backend: ids.backend,\n            instanceId: created.instanceId,\n          };\n          providerRenewedAtMs = Date.now();\n          if (\n            providerCreateBindingKey &&\n            !(await modalSessionMatchesCheckpointProviderBinding(\n              settings,\n              created.session,\n              providerCreateBindingKey,\n            ))\n          ) {\n            throw new Error(\"Modal creation receipt crossed the fenced provider namespace\");\n          }\n          if (\n            rematerialization &&\n            (rematerialization.providerBindingKey || rematerialization.legacyCheckpoint)\n          ) {\n            if (created.backendId !== \"modal\") {\n              throw new WorkspaceArchiveIntegrityError(\n                \"native_snapshot_reference_invalid\",\n                \"Modal checkpoint restore resolved a non-Modal sandbox backend\",\n              );\n            }\n            if (rematerialization.providerBindingKey) {\n              if (\n                !(await modalSessionMatchesCheckpointProviderBinding(\n                  settings,\n                  created.session,\n                  rematerialization.providerBindingKey,\n                ))\n              ) {\n                throw new WorkspaceArchiveIntegrityError(\n                  \"native_snapshot_reference_invalid\",\n                  \"Modal checkpoint restore refused because the authenticated provider workspace changed\",\n                );\n              }\n            } else {\n              const resolved = await resolveModalCheckpointProviderBindingForSession(\n                settings,\n                created.session,\n              );\n              if (\n                rematerialization.legacyProviderBinding &&\n                rematerialization.legacyProviderBinding.key !== resolved.key\n              ) {\n                throw new WorkspaceArchiveIntegrityError(\n                  \"native_snapshot_reference_invalid\",\n                  \"Legacy Modal checkpoint restore crossed authenticated provider workspaces\",\n                );\n              }\n              rematerialization.legacyProviderBinding = resolved;\n            }\n          }\n          const resumeEnvelope = requirePersistableReplacementSandboxEnvelope(\n            await serializeReplacementSandboxEnvelope(created, persistArchiveSource),\n            created.backendId,\n          );\n          const recorded = await recordWarmingSandboxCreated(db, {\n            accountId: ids.accountId,\n            workspaceId: ids.workspaceId,\n            sandboxGroupId: ids.sandboxGroupId,\n            expectedEpoch,\n            rematerializationId: rematerialization?.id ?? null,\n            ...(providerCreateOperationId ? { providerCreateOperationId } : {}),\n            ...(created.providerContinuity\n              ? { continuityRecovery: created.providerContinuity }\n              : {}),\n            instanceId: created.instanceId,\n            resumeBackendId: created.backendId,\n            resumeState: resumeEnvelope,\n            ...(created.backendId === \"modal\"\n              ? {\n                  providerCreatedAt: providerCreateStartedAt,\n                  providerDeadlineAt: new Date(\n                    providerCreateStartedAt.getTime() + settings.modalTimeoutSeconds * 1000,\n                  ),\n                }\n              : {}),\n            leaseTtlMs,\n            // Keep the warming budget after create(): manifest setup and\n            // commitWarmingToWarm still run, and can exceed the 90s turn TTL.\n            warmingLeaseTtlMs: settings.sandboxLeaseWarmingTtlMs,\n          });\n          if (!recorded.recorded) {\n            throw new SandboxLeaseSupersededError(ids.sandboxGroupId, expectedEpoch);\n          }\n          if (created.backendId === \"modal\") {\n            await tagModalSandbox(settings, created.instanceId, {\n              leaseId: acquired.lease.id,\n              workspaceId: ids.workspaceId,\n              sandboxGroupId: ids.sandboxGroupId,\n            }).catch(() => undefined);\n          }\n          throwIfReleasedOrCancelled();\n        },\n        onWorkspaceRestoreVerifying: async (descriptor: WorkspaceArchiveDescriptor) => {\n          if (!rematerialization || descriptor.revision !== rematerialization.selectedRevision) {\n            throw new WorkspaceArchiveIntegrityError(\n              \"archive_metadata_invalid\",\n              `hydrated archive revision ${descriptor.revision} does not match the selected rematerialization revision`,\n            );\n          }\n          if (rematerialization.legacyCheckpoint) {\n            const binding = rematerialization.legacyProviderBinding;\n            if (!binding) {\n              throw new WorkspaceArchiveIntegrityError(\n                \"native_snapshot_reference_invalid\",\n                \"Legacy Modal checkpoint restore produced no authenticated provider identity\",\n              );\n            }\n            const adopted = await adoptLegacyModalCheckpointArtifact(db, {\n              accountId: ids.accountId,\n              workspaceId: ids.workspaceId,\n              sandboxGroupId: ids.sandboxGroupId,\n              leaseId: acquired.lease.id,\n              leaseEpoch: expectedEpoch,\n              workspaceGeneration: rematerialization.workspaceGeneration,\n              slot: \"current\",\n              archiveBase64: rematerialization.legacyCheckpoint.archiveBase64,\n              descriptor: rematerialization.legacyCheckpoint.descriptor,\n              providerBindingKey: binding.key,\n              providerBinding: binding.binding,\n              rematerializationId: rematerialization.id,\n            });\n            if (!adopted) {\n              throw new SandboxLeaseSupersededError(ids.sandboxGroupId, expectedEpoch);\n            }\n            rematerialization.providerBindingKey = binding.key;\n          }\n          const verifying = await markSandboxRestoreVerifying(db, {\n            accountId: ids.accountId,\n            workspaceId: ids.workspaceId,\n            sandboxGroupId: ids.sandboxGroupId,\n            expectedEpoch,\n            rematerializationId: rematerialization.id,\n          });\n          if (!verifying.wrote) {\n            throw new SandboxLeaseSupersededError(ids.sandboxGroupId, expectedEpoch);\n          }\n        },\n      });\n      createdEstablished = established;\n      throwIfReleasedOrCancelled();\n      // A sandbox handle is not sufficient evidence that an asynchronous\n      // provider's command router is live. Do not publish a warm lease until\n      // one bounded no-op exec works.\n      // On timeout the catch below terminates the box and rolls warming -> cold;\n      // resumeBoxForTurn may then replace a proven-terminated fresh box once.\n      if (services.verifySpawnedSandboxReadiness) {\n        await services.verifySpawnedSandboxReadiness(established, {\n          sandboxGroupId: ids.sandboxGroupId,\n        });\n      } else {\n        await waitForSandboxExecReadiness(\n          established,\n          MODAL_EXEC_READINESS_TIMEOUT_MS,\n          {\n            sandboxGroupId: ids.sandboxGroupId,\n          },\n          cancellationSignal,\n        );\n      }\n      await maybeRenewProviderExpiration(true);\n      throwIfReleasedOrCancelled();\n      // Fold the LIVE box into a re-resumable envelope and persist it as the\n      // lease's resume_state — exactly like the API-direct paths (channel-a.ts /\n      // viewer.ts). Without this the turn committed the ORIGINAL session manifest\n      // as resume_state, so every LATER op off this lease (Channel-A fs/git/\n      // terminal, the desktop viewer, the reaper) cold-restored a FRESH rival box\n      // and never saw the turn's live box. Historical state may contribute only\n      // durable archive pointers: if live serialization fails, publishing its\n      // dead provider identity would pair the replacement instance with the box\n      // that initiated recovery.\n      // A successful cold hydrate has already proved this archive usable and the\n      // replacement box now contains its files. Keep the current + fallback\n      // archive pointers on the committed live envelope until a later warm\n      // snapshot replaces them. Without this merge, serialization publishes only\n      // the new provider id; a second provider loss before the snapshot cadence\n      // fires would otherwise make truthful recovery impossible. Failed hydrate\n      // attempts terminate the replacement and fail closed; they never publish a\n      // clean or mixed workspace.\n      const resumeEnvelope = requirePersistableReplacementSandboxEnvelope(\n        await serializeReplacementSandboxEnvelope(established, persistArchiveSource),\n        established.backendId,\n      );\n      throwIfReleasedOrCancelled();\n      if (\n        rematerialization &&\n        !established.providerContinuity &&\n        established.restoredArchive?.revision !== rematerialization.selectedRevision\n      ) {\n        throw new WorkspaceArchiveIntegrityError(\n          \"workspace_fingerprint_mismatch\",\n          \"sandbox restore completed without the exact selected durable archive revision\",\n        );\n      }\n      const committed = await commitWarmingToWarm(db, {\n        accountId: ids.accountId,\n        workspaceId: ids.workspaceId,\n        sandboxGroupId: ids.sandboxGroupId,\n        expectedEpoch,\n        instanceId: established.instanceId,\n        // Viewer attach resolves and records the tunnel URL lazily. A headless\n        // turn must not touch the optional desktop data plane.\n        dataPlaneUrl: null,\n        resumeBackendId: established.backendId,\n        resumeState: resumeEnvelope,\n        ...(freshWorkspaceRecoveryId\n          ? { freshWorkspace: { operationId: freshWorkspaceRecoveryId } }\n          : established.providerContinuity\n            ? { continuityRecovery: established.providerContinuity }\n            : rematerialization\n              ? {\n                  rematerialization: {\n                    id: rematerialization.id,\n                    verifiedRevision: rematerialization.selectedRevision,\n                  },\n                }\n              : {}),\n        leaseTtlMs,\n      });\n      if (!committed.committed || !committed.lease) {\n        // A reaper reset our warming row (we were too slow) or a sibling\n        // re-established and bumped the epoch. Drop the handle; release our\n        // holder; surface supersession. This spawner created the box, so stop it\n        // before retrying to avoid an untracked running sandbox.\n        const terminated = await terminateEstablishedSandbox(established);\n        if (terminated && rematerialization && !established.providerContinuity) {\n          await failSandboxRematerialization(db, {\n            accountId: ids.accountId,\n            workspaceId: ids.workspaceId,\n            sandboxGroupId: ids.sandboxGroupId,\n            expectedEpoch,\n            rematerializationId: rematerialization.id,\n            failureCode: committed.reason ?? \"warm_commit_rejected\",\n            retryable: false,\n          });\n        } else if (terminated) {\n          await failWarmingToCold(db, {\n            accountId: ids.accountId,\n            workspaceId: ids.workspaceId,\n            sandboxGroupId: ids.sandboxGroupId,\n            expectedEpoch,\n          });\n        }\n        await release();\n        throw new SandboxLeaseSupersededError(ids.sandboxGroupId, expectedEpoch);\n      }\n      holderLeaseHeartbeat = {\n        expectedEpoch: committed.lease.leaseEpoch,\n        leaseTtlMs,\n      };\n      throwIfReleasedOrCancelled();\n      return { established, leaseEpoch: committed.lease.leaseEpoch, release };\n    } catch (error) {\n      if (error instanceof SandboxLeaseSupersededError) {\n        await terminateEstablishedSandbox(createdEstablished);\n        await release();\n        throw error;\n      }\n      const terminated = await terminateEstablishedSandbox(createdEstablished);\n      // Caught spawn failure: if the just-created sandbox was actually stopped,\n      // roll the warming row back to cold so a queued turn can re-acquire and\n      // re-spawn. If termination itself failed, keep the recorded instance_id on\n      // the warming row; the lease TTL/reaper and Modal orphan sweep are the\n      // tracked backstops, and we must not erase the only provider pointer.\n      if (terminated) {\n        const continuityUnavailable = error instanceof SandboxProviderContinuityUnavailableError;\n        if (rematerialization && !createdEstablished?.providerContinuity) {\n          await failSandboxRematerialization(db, {\n            accountId: ids.accountId,\n            workspaceId: ids.workspaceId,\n            sandboxGroupId: ids.sandboxGroupId,\n            expectedEpoch,\n            rematerializationId: rematerialization.id,\n            failureCode: continuityUnavailable\n              ? \"provider_continuity_unavailable\"\n              : error instanceof WorkspaceArchiveIntegrityError\n                ? error.code\n                : \"sandbox_rematerialization_failed\",\n            retryable: continuityUnavailable\n              ? error.retryable\n              : error instanceof WorkspaceArchiveIntegrityError\n                ? error.retryable\n                : true,\n            ...(continuityUnavailable ? { discardContinuity: true } : {}),\n          });\n        } else {\n          await failWarmingToCold(db, {\n            accountId: ids.accountId,\n            workspaceId: ids.workspaceId,\n            sandboxGroupId: ids.sandboxGroupId,\n            expectedEpoch,\n            ...(continuityUnavailable ? { discardContinuity: true } : {}),\n          });\n        }\n      }\n      await release();\n      recordSandboxWarmingTimeout(services.sandboxMetrics, error);\n      if (\n        terminated &&\n        createdEstablished &&\n        error instanceof SandboxExecReadinessTimeoutError &&\n        error.instanceId === createdEstablished.instanceId &&\n        (createdEstablished.origin === \"created\" || createdEstablished.origin === \"restored\") &&\n        !createdEstablished.providerContinuity\n      ) {\n        disposedUnreadyFreshSandboxErrors.add(error);\n      }\n      throw sandboxProvisionStageError(rematerialization ? \"archive_recovery\" : \"create\", error);\n    }\n  }\n\n  // ATTACHED / REARMED: the box is live (or a sibling is warming it). Resume it\n  // BY ID off the committed lease envelope. For an 'attached'-to-warming lease we\n  // first wait for the spawner to commit warm, bounded by the explicit warming\n  // budget. A cold reset means the spawner died; recover the same turn instead\n  // of trying to enter the spawner create path from the attached branch.\n  try {\n    let leaseEpoch = acquired.lease.leaseEpoch;\n    if (acquired.lease.liveness === \"warming\") {\n      leaseEpoch = (await waitForWarm(services, ids)).leaseEpoch;\n      holderLeaseHeartbeat = { expectedEpoch: leaseEpoch, leaseTtlMs };\n    }\n    throwIfReleasedOrCancelled();\n\n    // Prefer the lease's resume_state (the LIVE box the spawner committed) so we\n    // re-attach to the SAME box by id, not cold-restore the original session\n    // manifest into a rival. Fall back to the session envelope only when the\n    // lease carries no resume_state (matches channel-a.ts's attached branch).\n    const live = await readLease(db, ids.workspaceId, ids.sandboxGroupId);\n    if (\n      !live ||\n      live.liveness !== \"warm\" ||\n      live.leaseEpoch !== leaseEpoch ||\n      live.instanceId === null\n    ) {\n      throw new SandboxLeaseSupersededError(ids.sandboxGroupId, live?.leaseEpoch ?? leaseEpoch);\n    }\n    let established: EstablishedSandboxSession;\n    try {\n      const establish = services.establishAttachedSandbox ?? establishSandboxSessionFromEnvelope;\n      established = await establish(settings, live.resumeState, {\n        sessionId: ids.sessionId,\n        recovery: \"resume-only\",\n        backendOverride: ids.backend as never,\n        ...(ids.environment ? { environment: ids.environment } : {}),\n        ...(services.sandboxMetrics ? { metrics: services.sandboxMetrics } : {}),\n      });\n      throwIfReleasedOrCancelled();\n      // A durable `warm` row is an ownership assertion, not provider liveness.\n      // A provider may have ended the exact box while OpenGeni was idle. Prove\n      // the command router before handing the session to the\n      // agent so terminal evidence enters the atomic warm->cold recovery path\n      // below instead of surfacing inside a model-visible tool call.\n      if (services.verifyAttachedSandboxReadiness) {\n        await services.verifyAttachedSandboxReadiness(established);\n      } else {\n        await waitForSandboxExecReadiness(\n          established,\n          MODAL_EXEC_READINESS_TIMEOUT_MS,\n          {\n            sandboxGroupId: ids.sandboxGroupId,\n          },\n          cancellationSignal,\n        );\n      }\n      providerRenewalTarget = {\n        backend: ids.backend,\n        instanceId: established.instanceId,\n      };\n      await maybeRenewProviderExpiration(true);\n      throwIfReleasedOrCancelled();\n    } catch (error) {\n      if (!isProviderSandboxNotFoundError(ids.backend, error)) {\n        throw sandboxProvisionStageError(\"resume\", error);\n      }\n      const marked = await markWarmLeaseInstanceLost(db, {\n        accountId: ids.accountId,\n        workspaceId: ids.workspaceId,\n        sandboxGroupId: ids.sandboxGroupId,\n        expectedEpoch: leaseEpoch,\n        expectedInstanceId: live.instanceId,\n        expectedBackend: ids.backend,\n      });\n      if (marked.status === \"marked\") {\n        await services.onSandboxLost?.({\n          sandboxGroupId: ids.sandboxGroupId,\n          instanceId: live.instanceId,\n          leaseEpoch: marked.lease.leaseEpoch,\n        });\n        throw new SandboxLeaseInstanceLostError(\n          ids.sandboxGroupId,\n          marked.lease.leaseEpoch,\n          live.instanceId,\n        );\n      }\n      throw new SandboxLeaseSupersededError(\n        ids.sandboxGroupId,\n        marked.lease?.leaseEpoch ?? leaseEpoch,\n      );\n    }\n    throwIfReleasedOrCancelled();\n    return { established, leaseEpoch, release };\n  } catch (error) {\n    await release();\n    recordSandboxWarmingTimeout(services.sandboxMetrics, error);\n    throw error;\n  }\n}\n\n/**\n * Poll a warming lease until the spawner commits warm. If the warming row is\n * reset to cold (the spawner died and the reaper reset it), surface supersession\n * so the turn is re-dispatched and can enter the normal spawner branch from\n * acquireLease. Bounded by OPENGENI_SANDBOX_WARMING_TIMEOUT_MS, not the lease TTL.\n */\nasync function waitForWarm(\n  services: SandboxResumeServices,\n  ids: ResumeBoxIds,\n): Promise<{ leaseEpoch: number }> {\n  const { db, settings } = services;\n  const deadline = Date.now() + settings.sandboxWarmingTimeoutMs;\n  let instanceId: string | null = null;\n  while (Date.now() < deadline) {\n    await sleep(WARMING_POLL_INTERVAL_MS);\n    const lease = await readLease(db, ids.workspaceId, ids.sandboxGroupId);\n    if (!lease) {\n      // Lease vanished (cold-reaped). Re-dispatch from scratch.\n      throw new SandboxLeaseSupersededError(ids.sandboxGroupId, 0);\n    }\n    instanceId = lease.instanceId;\n    if (lease.liveness === \"warm\") {\n      return { leaseEpoch: lease.leaseEpoch };\n    }\n    if (lease.liveness === \"draining\") {\n      // The warming attempt either failed into drain or committed+released before\n      // this waiter observed it. Re-dispatch so acquireLease can re-arm or spawn\n      // through the normal path.\n      throw new SandboxLeaseSupersededError(ids.sandboxGroupId, lease.leaseEpoch);\n    }\n    if (lease.liveness === \"cold\") {\n      if (isRetryableDegradedRestore(lease.recovery.restore)) {\n        // The elected spawner hit a transient archive verification failure.\n        // Re-enter admission so one caller can become the next fenced spawner;\n        // the archive remains authoritative and must not become terminal.\n        throw new SandboxLeaseSupersededError(ids.sandboxGroupId, lease.leaseEpoch);\n      }\n      if (\n        lease.recovery.restore.status === \"degraded\" ||\n        lease.recovery.restore.status === \"unrecoverable\"\n      ) {\n        throw new SandboxLeaseRecoveryBlockedError(\n          ids.sandboxGroupId,\n          lease.leaseEpoch,\n          lease.recovery.restore.status === \"degraded\"\n            ? \"restore_degraded\"\n            : \"restore_unrecoverable\",\n          lease.recovery,\n        );\n      }\n      // The spawner died; re-dispatch so the normal acquireLease path can win\n      // cold->warming and run the full spawner branch.\n      throw new SandboxLeaseSupersededError(ids.sandboxGroupId, lease.leaseEpoch);\n    }\n    // still warming — keep polling.\n  }\n  throw new SandboxSiblingWarmingTimeoutError(ids.backend, settings.sandboxWarmingTimeoutMs, {\n    sandboxGroupId: ids.sandboxGroupId,\n    instanceId,\n  });\n}\n","import type { LeaseSnapshot } from \"@opengeni/db\";\n\n/** Physical capture retention is not permission to heartbeat or execute a closed turn. */\nexport function retainsHolderForWarmCapture(\n  lease: Pick<LeaseSnapshot, \"liveness\" | \"leaseEpoch\" | \"archiveCapture\"> | null,\n  expectedEpoch: number,\n  now = Date.now(),\n): boolean {\n  return Boolean(\n    lease?.liveness === \"warm\" &&\n    lease.leaseEpoch === expectedEpoch &&\n    lease.archiveCapture &&\n    lease.archiveCapture.deadlineAt.getTime() > now,\n  );\n}\n","import type { Settings } from \"@opengeni/config\";\nimport type { Session, SessionGoal, SessionSystemUpdatePayload } from \"@opengeni/contracts\";\nimport {\n  getSession,\n  getSessionGoal,\n  getSessionParentPersonalConnectionDelegations,\n  getSessionParentMcpAccountBindings,\n  getSessionParentXaiProviderAccountAuthority,\n  addSessionSystemUpdateWithSourceMutation,\n  claimPendingSessionSystemUpdateOutbox,\n  claimPendingSessionWorkflowWakes,\n  childRequiresActionDedupeKey,\n  getSessionSystemUpdateOutboxByDedupeKey,\n  getOrCreateSessionSystemUpdateOutbox,\n  claimAutomaticSessionTitleFanout,\n  markSessionWorkflowWakeFailed,\n  markSessionSystemUpdateOutboxDeliveredInTransaction,\n  markSessionSystemUpdateOutboxFailed,\n  markAutomaticSessionTitleFanoutDelivered,\n  markAutomaticSessionTitleFanoutFailed,\n  sessionSystemUpdateOutboxKindPayload,\n  type Database,\n  type SessionSystemUpdateOutboxDelivery,\n} from \"@opengeni/db\";\nimport { requireSessionEventDurableFanoutCapability, type EventBus } from \"@opengeni/events\";\nimport type { ActivityServices, WakeSessionWorkflowSignal } from \"./types\";\n\nexport type NotifyServices = {\n  db: Database;\n  bus: EventBus;\n  settings: Settings;\n  observability: ActivityServices[\"observability\"];\n  wakeSessionWorkflow: WakeSessionWorkflowSignal | null;\n};\n\nexport type ReconcileParentSystemUpdateOverrides = Partial<{\n  claimPendingSessionSystemUpdateOutbox: typeof claimPendingSessionSystemUpdateOutbox;\n}>;\n\nexport type ReconcileSessionWorkflowWakeOverrides = Partial<{\n  claimPendingSessionWorkflowWakes: typeof claimPendingSessionWorkflowWakes;\n}>;\n\nexport type ReconcileAutomaticSessionTitleFanoutOverrides = Partial<{\n  claimAutomaticSessionTitleFanout: typeof claimAutomaticSessionTitleFanout;\n  markAutomaticSessionTitleFanoutDelivered: typeof markAutomaticSessionTitleFanoutDelivered;\n  markAutomaticSessionTitleFanoutFailed: typeof markAutomaticSessionTitleFanoutFailed;\n}>;\n\n/**\n * Enrich and deliver the durable idle-boundary row committed by\n * settleSessionIdleWithParentOutbox. Idle has no single owning turn, so its\n * stable episode identity is the newest non-status event sequence.\n */\nexport async function notifyParentOfChildIdle(\n  svc: NotifyServices,\n  workspaceId: string,\n  childSessionId: string,\n  episodeKey: string,\n): Promise<void> {\n  try {\n    const child = await getSession(svc.db, workspaceId, childSessionId);\n    if (!child || !child.parentSessionId) {\n      return;\n    }\n    const goal = await getSessionGoal(svc.db, workspaceId, childSessionId);\n    const clientEventId = `child-completion:${childSessionId}:${episodeKey}`;\n    // The idle settlement committed this row with the child's frozen final\n    // answer. This adds the goal facts; the upsert keeps the frozen content.\n    const payload = childCompletionPayload(child, goal);\n    const personalConnectionDelegations = await getSessionParentPersonalConnectionDelegations(\n      svc.db,\n      workspaceId,\n      childSessionId,\n    );\n    const mcpAccountBindings = await getSessionParentMcpAccountBindings(\n      svc.db,\n      workspaceId,\n      childSessionId,\n    );\n    const xaiAuthority = await getSessionParentXaiProviderAccountAuthority(\n      svc.db,\n      workspaceId,\n      childSessionId,\n    );\n    const outbox = await getOrCreateSessionSystemUpdateOutbox(svc.db, {\n      accountId: child.accountId,\n      workspaceId,\n      sourceSessionId: child.id,\n      targetSessionId: child.parentSessionId,\n      kind: \"child_terminal_result\",\n      classification: goal?.status === \"paused\" ? \"action_required\" : \"success\",\n      sourceId: child.id,\n      dedupeKey: clientEventId,\n      summary: childCompletionSummary(child, goal, \"idle\"),\n      payload,\n      lineage: {\n        childSessionId: child.id,\n        parentSessionId: child.parentSessionId,\n        ...(xaiAuthority.subjectId ? { xaiAuthoritySubjectId: xaiAuthority.subjectId } : {}),\n      },\n      personalConnectionDelegations,\n      mcpAccountBindings,\n      xaiProviderAccountAuthoritySnapshot: xaiAuthority.snapshot,\n    });\n    if (outbox.status === \"delivered\") {\n      return;\n    }\n    await deliverParentSystemUpdateOutbox(svc, outbox);\n  } catch (error) {\n    // A durable pending outbox row survives this boundary. The global worker\n    // reaper retries it; child terminal settlement never depends on this turn.\n    svc.observability.error(\"Failed to wake parent session on worker idle boundary\", {\n      childSessionId,\n      error: error instanceof Error ? error.message : String(error),\n    });\n  }\n}\n\n/**\n * Deliver one exact child-lifecycle outbox row already committed by the\n * child's own lifecycle transaction (turn failure, requires_action freeze,\n * ...). This layer deliberately cannot create or rewrite the row: the\n * producing transaction is the sole owner of its payload and lineage, and the\n * global reconciler remains the recovery path if immediate delivery fails.\n */\nexport async function deliverChildLifecycleOutboxToParent(\n  svc: NotifyServices,\n  workspaceId: string,\n  childSessionId: string,\n  dedupeKey: string,\n  options: { requireRow?: boolean } = {},\n): Promise<void> {\n  try {\n    const child = await getSession(svc.db, workspaceId, childSessionId);\n    if (!child || !child.parentSessionId) return;\n    const outbox = await getSessionSystemUpdateOutboxByDedupeKey(svc.db, {\n      accountId: child.accountId,\n      workspaceId,\n      dedupeKey,\n    });\n    if (!outbox) {\n      if (options.requireRow === false) return;\n      throw new Error(`Committed child-lifecycle outbox disappeared: ${dedupeKey}`);\n    }\n    if (outbox.status === \"delivered\") return;\n    await deliverParentSystemUpdateOutbox(svc, outbox);\n  } catch (error) {\n    svc.observability.error(\"Failed to deliver committed child-lifecycle notice\", {\n      childSessionId,\n      dedupeKey,\n      error: error instanceof Error ? error.message : String(error),\n    });\n  }\n}\n\n/**\n * Deliver the exact failure row already committed by turn settlement. This\n * layer deliberately cannot create or rewrite the row: the settlement\n * transaction is the sole owner of the failed turn id, payload, and lineage.\n */\nexport async function deliverFailedChildTurnToParent(\n  svc: NotifyServices,\n  workspaceId: string,\n  childSessionId: string,\n  turnId: string,\n): Promise<void> {\n  await deliverChildLifecycleOutboxToParent(\n    svc,\n    workspaceId,\n    childSessionId,\n    `child-completion:${childSessionId}:turn:${turnId}`,\n  );\n}\n\n/**\n * Deliver the child_requires_action notice a requires_action settlement\n * committed for this exact (child, turn, generation). When the rollout flag is\n * off no row exists and this is a no-op; the reaper covers crashes after commit.\n */\nexport async function deliverChildRequiresActionToParent(\n  svc: NotifyServices,\n  workspaceId: string,\n  childSessionId: string,\n  input: { turnId: string; turnGeneration: number },\n): Promise<void> {\n  if (!svc.settings.childLifecycleNoticesEnabled) return;\n  await deliverChildLifecycleOutboxToParent(\n    svc,\n    workspaceId,\n    childSessionId,\n    childRequiresActionDedupeKey({\n      childSessionId,\n      turnId: input.turnId,\n      turnGeneration: input.turnGeneration,\n    }),\n    // A requires_action freeze without any human-input/approval request (or a\n    // child without a parent) commits no row; that is not an error.\n    { requireRow: false },\n  );\n}\n\nasync function deliverParentSystemUpdateOutbox(\n  svc: NotifyServices,\n  outbox: SessionSystemUpdateOutboxDelivery,\n): Promise<void> {\n  try {\n    const result = await addSessionSystemUpdateWithSourceMutation(\n      svc.db,\n      {\n        accountId: outbox.accountId,\n        workspaceId: outbox.workspaceId,\n        sessionId: outbox.targetSessionId,\n        ...sessionSystemUpdateOutboxKindPayload(outbox),\n        classification: outbox.classification,\n        sourceId: outbox.sourceId,\n        dedupeKey: outbox.dedupeKey,\n        summary: outbox.summary,\n        lineage: outbox.lineage,\n        personalConnectionDelegations: outbox.personalConnectionDelegations,\n        mcpAccountBindings: outbox.mcpAccountBindings,\n        xaiProviderAccountAuthoritySnapshot: outbox.xaiProviderAccountAuthoritySnapshot,\n      },\n      async (tx) => {\n        await markSessionSystemUpdateOutboxDeliveredInTransaction(tx, outbox);\n      },\n    );\n    if (result.reason === \"session_cancelled\") {\n      return;\n    }\n    if (result.added && result.events.length > 0) {\n      await svc.bus.publish(outbox.workspaceId, outbox.targetSessionId, result.events);\n    }\n    if (result.shouldWake && svc.wakeSessionWorkflow) {\n      if (result.workflowWakeRevision === null) {\n        throw new Error(\"Runnable system update has no workflow wake revision\");\n      }\n      await svc.wakeSessionWorkflow({\n        accountId: outbox.accountId,\n        workspaceId: outbox.workspaceId,\n        sessionId: outbox.targetSessionId,\n        workflowId: result.temporalWorkflowId ?? `session-${outbox.targetSessionId}`,\n        wakeRevision: result.workflowWakeRevision,\n      });\n    }\n    svc.observability.info(\"Delivered child lifecycle notice to parent session\", {\n      childSessionId: outbox.sourceSessionId,\n      parentSessionId: outbox.targetSessionId,\n      kind: outbox.kind,\n      dedupeKey: outbox.dedupeKey,\n      woke: result.shouldWake,\n    });\n  } catch (error) {\n    await markSessionSystemUpdateOutboxFailed(\n      svc.db,\n      outbox,\n      error instanceof Error ? error.message : String(error),\n    ).catch(() => undefined);\n    throw error;\n  }\n}\n\nexport async function reconcilePendingParentSystemUpdates(\n  svc: NotifyServices,\n  limit = 100,\n  overrides: ReconcileParentSystemUpdateOverrides = {},\n): Promise<{ claimed: number; delivered: number; failed: number }> {\n  const claimPendingSessionSystemUpdateOutboxFn =\n    overrides.claimPendingSessionSystemUpdateOutbox ?? claimPendingSessionSystemUpdateOutbox;\n  const rows = await claimPendingSessionSystemUpdateOutboxFn(svc.db, limit);\n  let delivered = 0;\n  let failed = 0;\n  for (const row of rows) {\n    try {\n      await deliverParentSystemUpdateOutbox(svc, row);\n      delivered += 1;\n    } catch {\n      failed += 1;\n    }\n  }\n  return { claimed: rows.length, delivered, failed };\n}\n\n/**\n * Publish migration-created safe title events through the configured session\n * event bus. The outbox is durable and deployment-global; a crash after publish\n * but before acknowledgement can duplicate a notification, which is safe\n * because SSE consumers sequence-fence and gap-fill from the durable log.\n *\n * Managed NATS exposes the stronger bounded flush acknowledgement through\n * publishConfirmed. Embedding buses predate that optional capability, so their\n * required publish promise remains the delivery acknowledgement: resolve only\n * after accepting the batch, and reject a real transport failure so the durable\n * row stays retryable. Every supported bus also provides the mandatory paired\n * recovery capability used by API SSE streams after subscriber reconnect.\n */\nexport async function reconcileAutomaticSessionTitleFanout(\n  svc: NotifyServices,\n  limit = 100,\n  overrides: ReconcileAutomaticSessionTitleFanoutOverrides = {},\n): Promise<{ claimed: number; delivered: number; failed: number }> {\n  requireSessionEventDurableFanoutCapability(svc.bus);\n  const claim = overrides.claimAutomaticSessionTitleFanout ?? claimAutomaticSessionTitleFanout;\n  const markDelivered =\n    overrides.markAutomaticSessionTitleFanoutDelivered ?? markAutomaticSessionTitleFanoutDelivered;\n  const markFailed =\n    overrides.markAutomaticSessionTitleFanoutFailed ?? markAutomaticSessionTitleFanoutFailed;\n  const rows = await claim(svc.db, limit);\n  let delivered = 0;\n  let failed = 0;\n  const queue = [...rows];\n  const workers = Array.from({ length: Math.min(20, queue.length) }, async () => {\n    for (;;) {\n      const row = queue.shift();\n      if (!row) return;\n      try {\n        if (svc.bus.isConnected?.() === false) {\n          throw new Error(\"session event bus is disconnected\");\n        }\n        if (svc.bus.publishConfirmed) {\n          await svc.bus.publishConfirmed(row.event.workspaceId, row.event.sessionId, [row.event]);\n        } else {\n          await svc.bus.publish(row.event.workspaceId, row.event.sessionId, [row.event]);\n        }\n        await markDelivered(svc.db, row);\n        delivered += 1;\n      } catch (error) {\n        failed += 1;\n        await markFailed(svc.db, row, error instanceof Error ? error.message : String(error)).catch(\n          () => undefined,\n        );\n      }\n    }\n  });\n  await Promise.all(workers);\n  return { claimed: rows.length, delivered, failed };\n}\n\nexport type WorkflowWakeReconciliationResult = {\n  claimed: number;\n  /** Transport acceptance is not durable admission. */\n  signaled: number;\n  /** Revisions acknowledged by the durable admission guard. */\n  delivered: number;\n  pendingAdmission: number;\n  /** Legacy/embedding signalers may not return an acknowledgment receipt. */\n  unconfirmed: number;\n  failed: number;\n  pendingAdmissionBlockers: Partial<\n    Record<\n      Extract<\n        import(\"@opengeni/db\").SessionWorkflowWakeDeliveryResult,\n        { action: \"pending_admission\" }\n      >[\"blocker\"],\n      number\n    >\n  >;\n};\n\nexport async function reconcilePendingSessionWorkflowWakes(\n  svc: NotifyServices,\n  limit = 1_000,\n  overrides: ReconcileSessionWorkflowWakeOverrides = {},\n): Promise<WorkflowWakeReconciliationResult> {\n  const claimPendingSessionWorkflowWakesFn =\n    overrides.claimPendingSessionWorkflowWakes ?? claimPendingSessionWorkflowWakes;\n  if (!svc.wakeSessionWorkflow) {\n    return {\n      claimed: 0,\n      signaled: 0,\n      delivered: 0,\n      pendingAdmission: 0,\n      unconfirmed: 0,\n      failed: 0,\n      pendingAdmissionBlockers: {},\n    };\n  }\n  const repairs = await claimPendingSessionWorkflowWakesFn(svc.db, limit);\n  let signaled = 0;\n  let pendingAdmission = 0;\n  let unconfirmed = 0;\n  const pendingAdmissionBlockers: WorkflowWakeReconciliationResult[\"pendingAdmissionBlockers\"] = {};\n  let delivered = 0;\n  let failed = 0;\n  const queue = [...repairs];\n  const workers = Array.from({ length: Math.min(20, queue.length) }, async () => {\n    for (;;) {\n      const repair = queue.shift();\n      if (!repair) return;\n      let signalAccepted = false;\n      const onSignalAccepted = () => {\n        if (signalAccepted) return;\n        signalAccepted = true;\n        signaled += 1;\n      };\n      try {\n        const receipt = await svc.wakeSessionWorkflow!({\n          accountId: repair.accountId,\n          workspaceId: repair.workspaceId,\n          sessionId: repair.sessionId,\n          workflowId: repair.temporalWorkflowId,\n          wakeRevision: repair.wakeRevision,\n          ...(repair.interruptionRequested ? { interruptionRequested: true } : {}),\n          onSignalAccepted,\n        });\n        // Older embeddings do not invoke the optional transport observer.\n        // Their successful return still proves a signal call, never an ACK.\n        onSignalAccepted();\n        if (receipt?.action === \"acknowledged\") {\n          delivered += 1;\n        } else if (receipt?.action === \"pending_admission\") {\n          pendingAdmission += 1;\n          pendingAdmissionBlockers[receipt.blocker] =\n            (pendingAdmissionBlockers[receipt.blocker] ?? 0) + 1;\n        } else {\n          // A successful legacy signal is not proof of acknowledgment. The\n          // committed outbox obligation remains owned by the existing guard.\n          unconfirmed += 1;\n        }\n      } catch (error) {\n        failed += 1;\n        await markSessionWorkflowWakeFailed(\n          svc.db,\n          repair,\n          error instanceof Error ? error.message : String(error),\n        ).catch(() => undefined);\n      }\n    }\n  });\n  await Promise.all(workers);\n  return {\n    claimed: repairs.length,\n    signaled,\n    delivered,\n    pendingAdmission,\n    unconfirmed,\n    failed,\n    pendingAdmissionBlockers,\n  };\n}\n\nfunction childCompletionPayload(\n  child: Session,\n  goal: SessionGoal | null,\n): Extract<SessionSystemUpdatePayload, { type: \"child_terminal_result\" }> {\n  return {\n    type: \"child_terminal_result\",\n    childSessionId: child.id,\n    status: \"idle\",\n    ...(goal\n      ? {\n          goal: {\n            status: goal.status,\n            text: goal.text,\n            ...(goal.evidence ? { evidence: goal.evidence } : {}),\n            ...(goal.rationale ? { rationale: goal.rationale } : {}),\n            ...(goal.pausedReason ? { pausedReason: goal.pausedReason } : {}),\n          },\n        }\n      : {}),\n  };\n}\n\n/**\n * The short status line for one child (what happened + its goal). It is also\n * the timeline preview, so it carries no instructions: the parent reads the\n * child's answer from the typed payload, and the operational contract says how\n * to use it. N completions coalesce into one internal-update inference.\n */\nexport function childCompletionSummary(\n  child: Session,\n  goal: SessionGoal | null,\n  terminalStatus: \"idle\" | \"failed\",\n): string {\n  const lines: string[] = [];\n  if (terminalStatus === \"failed\") {\n    lines.push(`A worker session you spawned has FAILED. Worker session id: ${child.id}.`);\n  } else if (goal?.status === \"completed\") {\n    lines.push(\n      `A worker session you spawned has COMPLETED its goal. Worker session id: ${child.id}.`,\n    );\n  } else if (goal?.status === \"paused\") {\n    lines.push(\n      `A worker session you spawned has PAUSED its goal and gone idle. Worker session id: ${child.id}.`,\n    );\n  } else {\n    lines.push(\n      `A worker session you spawned has finished its work and gone idle. Worker session id: ${child.id}.`,\n    );\n  }\n  if (goal) {\n    lines.push(`Worker goal: ${goal.text}`);\n    if (goal.status === \"completed\" && goal.evidence) {\n      lines.push(`Completion evidence: ${goal.evidence}`);\n    }\n    if (goal.status === \"paused\" && goal.rationale) {\n      lines.push(`Pause rationale: ${goal.rationale}`);\n    }\n  }\n  return lines.join(\"\\n\");\n}\n","import type {\n  ResourceRef,\n  SessionStatus,\n  SessionSystemUpdatePayload,\n  ToolRef,\n} from \"@opengeni/contracts\";\n\nexport { mergeResourceRefs, mergeToolRefs } from \"@opengeni/contracts\";\n\n/**\n * Refuse to revive a terminal reusable session on a scheduled fire. Mirrors the\n * API-level guard in apps/api/src/domain/sessions.ts (post a user message ->\n * 409 when cancelled): \"cancelled\" is the one terminal state, an explicit user\n * act, so a recurring task must NOT silently resurrect and re-bill it. Failed\n * and idle sessions stay revivable (talking to a session is how it resumes), so\n * only \"cancelled\" is rejected. Throwing inside the FOR UPDATE locked-update\n * callback aborts the whole append+enqueue transaction atomically, and the\n * dispatch catch marks the scheduled_task_run \"failed\" rather than dispatched.\n */\nexport function assertReusableSessionRevivable(status: SessionStatus): void {\n  if (status === \"cancelled\") {\n    throw new Error(\"reusable session is cancelled; refusing to revive on scheduled fire\");\n  }\n}\n\nexport function scheduledUserMessagePayload(\n  prompt: string,\n  resources: ResourceRef[],\n  tools: ToolRef[],\n  taskId: string,\n  runId: string,\n): Extract<SessionSystemUpdatePayload, { type: \"scheduled_occurrence\" }> {\n  return {\n    type: \"scheduled_occurrence\",\n    text: prompt,\n    scheduledTaskId: taskId,\n    scheduledTaskRunId: runId,\n    ...(resources.length ? { resources } : {}),\n    ...(tools.length ? { tools } : {}),\n  };\n}\n\nexport function workflowIdForSession(sessionId: string): string {\n  return `session-${sessionId}`;\n}\n","import {\n  IncidentTelemetryPreflight,\n  stableJson,\n  type FirstPartyMcpToolName,\n  type Permission,\n  type ResourceRef,\n  type ScheduledTask,\n  type ScheduledTaskAgentConfig,\n} from \"@opengeni/contracts\";\nimport { createHash } from \"node:crypto\";\nimport { isDeepStrictEqual } from \"node:util\";\n\nexport type IncidentTelemetryPreflightBlockReason =\n  | \"incident_preflight_metadata_missing\"\n  | \"incident_responder_under_capable\"\n  | \"incident_data_source_unsuitable\";\n\nexport type IncidentTelemetryPreflightResult =\n  | { action: \"not_required\" }\n  | { action: \"ready\" }\n  | { action: \"blocked\"; reason: IncidentTelemetryPreflightBlockReason };\n\nexport type IncidentTelemetryRigMetadata = {\n  name: string;\n  credentialHooks: readonly string[];\n  checkHealth: \"passing\" | \"failing\" | \"unknown\";\n};\n\nexport type IncidentTelemetryVariableSetMetadata = {\n  name: string;\n  variables: readonly { name: string }[];\n};\n\nexport type IncidentTelemetryResponderMetadata = {\n  /** False when an exact selected attachment could not be projected safely. */\n  metadataComplete: boolean;\n  resources: readonly ResourceRef[];\n  mcpServerIds: readonly string[];\n  firstPartyMcpTools: readonly FirstPartyMcpToolName[];\n  firstPartyMcpPermissions: readonly Permission[];\n  rig: IncidentTelemetryRigMetadata | null;\n  variableSets: readonly IncidentTelemetryVariableSetMetadata[];\n  /** Exact durable session policy version, or null for a not-yet-created session. */\n  toolPolicyVersion: number | null;\n};\n\nexport type IncidentTelemetryPreflightInput = {\n  agentConfig: ScheduledTaskAgentConfig;\n  /** A valid structured alert occurrence also makes a legacy task incident-triggered. */\n  incidentTriggered: boolean;\n  /** Exact bounded labels from that validated occurrence; values are never rendered in blockers. */\n  alertOccurrenceLabels: Readonly<Record<string, string>> | null;\n  responder: IncidentTelemetryResponderMetadata;\n};\n\nexport const INCIDENT_TELEMETRY_AUTHORITY_FENCE_LINEAGE_KEY = \"incidentTelemetryAuthorityFence\";\n\nexport type IncidentTelemetryAuthorityFence = {\n  version: 2;\n  toolPolicyVersion: number;\n  responderDigest: string;\n  taskDigest: string;\n  alertSelectorDigest: string;\n};\n\nexport type IncidentTelemetryPreflightDeclaration =\n  | { action: \"not_required\" }\n  | {\n      action: \"blocked\";\n      reason: \"incident_preflight_metadata_missing\" | \"incident_data_source_unsuitable\";\n    }\n  | { action: \"required\"; preflight: IncidentTelemetryPreflight };\n\nexport function incidentTelemetryPreflightDeclaration(\n  agentConfig: ScheduledTaskAgentConfig,\n  incidentTriggered: boolean,\n): IncidentTelemetryPreflightDeclaration {\n  const rawConfig = agentConfig as ScheduledTaskAgentConfig & Record<string, unknown>;\n  const executionClass = rawConfig.executionClass;\n  const rawPreflight = rawConfig.incidentTelemetryPreflight;\n  if (executionClass === undefined && rawPreflight === undefined && !incidentTriggered) {\n    return { action: \"not_required\" };\n  }\n  if (executionClass !== \"incident_telemetry\" || rawPreflight === undefined) {\n    return { action: \"blocked\", reason: \"incident_preflight_metadata_missing\" };\n  }\n\n  const parsed = IncidentTelemetryPreflight.safeParse(rawPreflight);\n  if (!parsed.success) {\n    const dataSourceInvalid = parsed.error.issues.some((issue) => issue.path[0] === \"dataSource\");\n    return {\n      action: \"blocked\",\n      reason: dataSourceInvalid\n        ? \"incident_data_source_unsuitable\"\n        : \"incident_preflight_metadata_missing\",\n    };\n  }\n  return { action: \"required\", preflight: parsed.data };\n}\n\n/**\n * Pure, metadata-only incident admission. No provider request, public endpoint\n * fetch, secret read/decrypt, session creation, or ambient credential lookup is\n * reachable from this evaluator.\n */\nexport function evaluateIncidentTelemetryPreflight(\n  input: IncidentTelemetryPreflightInput,\n): IncidentTelemetryPreflightResult {\n  const declaration = incidentTelemetryPreflightDeclaration(\n    input.agentConfig,\n    input.incidentTriggered,\n  );\n  if (declaration.action !== \"required\") return declaration;\n  const preflight = declaration.preflight;\n\n  if (!input.responder.metadataComplete) {\n    return blocked(\"incident_preflight_metadata_missing\");\n  }\n\n  if (\n    preflight.requiredResources.some(\n      (required) =>\n        !input.responder.resources.some((selected) => isDeepStrictEqual(selected, required)),\n    )\n  ) {\n    return blocked(\"incident_responder_under_capable\");\n  }\n\n  const selectedMcpServerIds = new Set(input.responder.mcpServerIds);\n  if (preflight.requiredMcpServerIds.some((id) => !selectedMcpServerIds.has(id))) {\n    return blocked(\"incident_responder_under_capable\");\n  }\n\n  const selectedFirstPartyTools = new Set(input.responder.firstPartyMcpTools);\n  if (preflight.requiredFirstPartyMcpTools.some((tool) => !selectedFirstPartyTools.has(tool))) {\n    return blocked(\"incident_responder_under_capable\");\n  }\n\n  const selectedFirstPartyPermissions = new Set(input.responder.firstPartyMcpPermissions);\n  if (\n    preflight.requiredFirstPartyMcpPermissions.some(\n      (permission) => !selectedFirstPartyPermissions.has(permission),\n    )\n  ) {\n    return blocked(\"incident_responder_under_capable\");\n  }\n\n  if (preflight.requiredRig && !rigSatisfies(input.responder.rig, preflight.requiredRig)) {\n    return blocked(\"incident_responder_under_capable\");\n  }\n\n  const variableSetsByName = new Map(input.responder.variableSets.map((set) => [set.name, set]));\n  if (preflight.requiredVariableSetNames.some((name) => !variableSetsByName.has(name))) {\n    return blocked(\"incident_responder_under_capable\");\n  }\n  const attachedVariableNames = new Set(\n    input.responder.variableSets.flatMap((set) => set.variables.map((variable) => variable.name)),\n  );\n  if (preflight.requiredVariableNames.some((name) => !attachedVariableNames.has(name))) {\n    return blocked(\"incident_responder_under_capable\");\n  }\n\n  const route = preflight.dataSource.route;\n  if (route.kind === \"mcp\" && !selectedMcpServerIds.has(route.serverId)) {\n    return blocked(\"incident_responder_under_capable\");\n  }\n  if (route.kind === \"first_party\" && !selectedFirstPartyTools.has(route.tool)) {\n    return blocked(\"incident_responder_under_capable\");\n  }\n  if (route.kind === \"variable_set\") {\n    const selected = variableSetsByName.get(route.variableSetName);\n    const names = new Set(selected?.variables.map((variable) => variable.name) ?? []);\n    if (!selected || route.variableNames.some((name) => !names.has(name))) {\n      return blocked(\"incident_responder_under_capable\");\n    }\n  }\n  if (\n    route.kind === \"rig_credential_hook\" &&\n    !rigSatisfies(input.responder.rig, {\n      name: preflight.requiredRig?.name ?? \"\",\n      credentialHookIds: [route.credentialHookId],\n    })\n  ) {\n    return blocked(\"incident_responder_under_capable\");\n  }\n\n  if (!seriesMetadataSatisfies(preflight.dataSource)) {\n    return blocked(\"incident_data_source_unsuitable\");\n  }\n  if (!alertSelectorsSatisfy(preflight.dataSource, input.alertOccurrenceLabels)) {\n    return blocked(\"incident_data_source_unsuitable\");\n  }\n  return { action: \"ready\" };\n}\n\nexport function incidentTelemetryAuthorityFence(input: {\n  task: ScheduledTask;\n  responder: IncidentTelemetryResponderMetadata;\n  alertOccurrenceLabels: Readonly<Record<string, string>> | null;\n}): IncidentTelemetryAuthorityFence | null {\n  const { task, responder } = input;\n  if (responder.toolPolicyVersion === null) return null;\n  const declaration = incidentTelemetryPreflightDeclaration(\n    task.agentConfig,\n    input.alertOccurrenceLabels !== null,\n  );\n  if (declaration.action !== \"required\" || !input.alertOccurrenceLabels) return null;\n  const selectorEntries = declaration.preflight.dataSource.alertSelectorLabels\n    .map((label) => [label, input.alertOccurrenceLabels?.[label]] as const)\n    .sort(([left], [right]) => left.localeCompare(right));\n  if (selectorEntries.some(([, value]) => typeof value !== \"string\" || value.length === 0)) {\n    return null;\n  }\n  const normalized = {\n    metadataComplete: responder.metadataComplete,\n    resources: [...responder.resources].map((resource) => stableJson(resource)).sort(),\n    mcpServerIds: [...responder.mcpServerIds].sort(),\n    firstPartyMcpTools: [...responder.firstPartyMcpTools].sort(),\n    firstPartyMcpPermissions: [...responder.firstPartyMcpPermissions].sort(),\n    rig: responder.rig\n      ? {\n          name: responder.rig.name,\n          credentialHooks: [...responder.rig.credentialHooks].sort(),\n          checkHealth: responder.rig.checkHealth,\n        }\n      : null,\n    variableSets: [...responder.variableSets]\n      .map((set) => ({\n        name: set.name,\n        variables: set.variables.map((variable) => variable.name).sort(),\n      }))\n      .sort((left, right) => left.name.localeCompare(right.name)),\n  };\n  return {\n    version: 2,\n    toolPolicyVersion: responder.toolPolicyVersion,\n    responderDigest: createHash(\"sha256\").update(stableJson(normalized)).digest(\"hex\"),\n    taskDigest: createHash(\"sha256\").update(stableJson(task)).digest(\"hex\"),\n    alertSelectorDigest: createHash(\"sha256\").update(stableJson(selectorEntries)).digest(\"hex\"),\n  };\n}\n\nexport function parseIncidentTelemetryAuthorityFence(\n  lineage: Record<string, unknown>,\n): IncidentTelemetryAuthorityFence | null {\n  const raw = lineage[INCIDENT_TELEMETRY_AUTHORITY_FENCE_LINEAGE_KEY];\n  if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return null;\n  const value = raw as Record<string, unknown>;\n  return value.version === 2 &&\n    typeof value.toolPolicyVersion === \"number\" &&\n    Number.isInteger(value.toolPolicyVersion) &&\n    value.toolPolicyVersion > 0 &&\n    typeof value.responderDigest === \"string\" &&\n    /^[0-9a-f]{64}$/.test(value.responderDigest) &&\n    typeof value.taskDigest === \"string\" &&\n    /^[0-9a-f]{64}$/.test(value.taskDigest) &&\n    typeof value.alertSelectorDigest === \"string\" &&\n    /^[0-9a-f]{64}$/.test(value.alertSelectorDigest)\n    ? {\n        version: 2,\n        toolPolicyVersion: value.toolPolicyVersion,\n        responderDigest: value.responderDigest,\n        taskDigest: value.taskDigest,\n        alertSelectorDigest: value.alertSelectorDigest,\n      }\n    : null;\n}\n\nfunction blocked(reason: IncidentTelemetryPreflightBlockReason): IncidentTelemetryPreflightResult {\n  return { action: \"blocked\", reason };\n}\n\nfunction rigSatisfies(\n  rig: IncidentTelemetryRigMetadata | null,\n  required: { name: string; credentialHookIds: readonly string[] },\n): boolean {\n  if (!rig || rig.name !== required.name || rig.checkHealth !== \"passing\") {\n    return false;\n  }\n  const hookIds = new Set(rig.credentialHooks);\n  return required.credentialHookIds.every((hookId) => hookIds.has(hookId));\n}\n\nfunction seriesMetadataSatisfies(dataSource: IncidentTelemetryPreflight[\"dataSource\"]): boolean {\n  if (dataSource.queryPath !== \"/api/v1/query\" && dataSource.queryPath !== \"/api/v1/query_range\") {\n    return false;\n  }\n  return dataSource.requiredSeries.every((required) =>\n    dataSource.availableSeries.some((available) => {\n      if (available.metric !== required.metric) return false;\n      const labels = new Set(available.labels);\n      return (\n        labels.has(dataSource.workspaceLabel) && required.labels.every((label) => labels.has(label))\n      );\n    }),\n  );\n}\n\nfunction alertSelectorsSatisfy(\n  dataSource: IncidentTelemetryPreflight[\"dataSource\"],\n  occurrenceLabels: Readonly<Record<string, string>> | null,\n): boolean {\n  if (!occurrenceLabels) return false;\n  return dataSource.alertSelectorLabels.every(\n    (label) =>\n      label !== dataSource.workspaceLabel &&\n      typeof occurrenceLabels[label] === \"string\" &&\n      occurrenceLabels[label]!.length > 0 &&\n      dataSource.requiredSeries.every((series) => series.labels.includes(label)) &&\n      dataSource.availableSeries.some(\n        (series) =>\n          dataSource.requiredSeries.some((required) => required.metric === series.metric) &&\n          series.labels.includes(dataSource.workspaceLabel) &&\n          series.labels.includes(label),\n      ),\n  );\n}\n","import {\n  DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,\n  type McpPersonalConnectionDelegation,\n  type ScheduledTask,\n  type ScheduledTaskRunAcceptedExecution,\n  type Session,\n  type SessionSystemUpdate,\n} from \"@opengeni/contracts\";\nimport { defaultSessionMcpServerIds, resolveSessionToolPolicy } from \"@opengeni/core\";\nimport {\n  getRig,\n  getScheduledScopedRigVersionMetadata,\n  getScheduledTaskRunAcceptedExecution,\n  getVariableSet,\n  listEnabledMcpCapabilityServerIds,\n  listInstalledApiIntegrationServerIdsForDelegations,\n  markScheduledTaskRunAuthorityRejectedInTransaction,\n  requireSession,\n  type Database,\n} from \"@opengeni/db\";\nimport {\n  allowedFirstPartyMcpToolsForSession,\n  resolveFirstPartyMcpToolPolicy,\n  type Settings,\n} from \"@opengeni/config\";\nimport { withFirstPartyTools } from \"./goals\";\nimport {\n  INCIDENT_TELEMETRY_AUTHORITY_FENCE_LINEAGE_KEY,\n  incidentTelemetryAuthorityFence,\n  parseIncidentTelemetryAuthorityFence,\n  evaluateIncidentTelemetryPreflight,\n  type IncidentTelemetryResponderMetadata,\n} from \"./incident-telemetry-preflight\";\n\n/** Resolve only exact selected responder metadata; never read/decrypt values or call providers. */\nexport async function resolveIncidentTelemetryResponderMetadata(input: {\n  db: Database;\n  settings: Settings;\n  task: ScheduledTask;\n  session: Session | null;\n  personalConnectionDelegations: readonly McpPersonalConnectionDelegation[];\n  personalResourceAuthoritySubjectId?: string | null;\n  executionPolicy?: {\n    tools: ScheduledTaskRunAcceptedExecution[\"resolvedTools\"];\n    firstPartyMcpTools: ScheduledTaskRunAcceptedExecution[\"resolvedFirstPartyMcpTools\"];\n    firstPartyMcpPermissions:\n      | ScheduledTaskRunAcceptedExecution[\"resolvedFirstPartyMcpPermissions\"]\n      | null;\n    variableSetIds?: readonly string[];\n    variableSetId: string | null;\n    rigId: string | null;\n    rigVersionId: string | null;\n    toolPolicy: Session[\"toolPolicy\"];\n    mcpServerIds: readonly string[];\n    toolPolicyVersion: number | null;\n  };\n}): Promise<IncidentTelemetryResponderMetadata> {\n  const [capabilityServerIds, apiIntegrationServerIds] = await Promise.all([\n    listEnabledMcpCapabilityServerIds(input.db, input.task.workspaceId),\n    listInstalledApiIntegrationServerIdsForDelegations(\n      input.db,\n      input.task.workspaceId,\n      input.personalConnectionDelegations,\n    ),\n  ]);\n  const sessionTools = input.executionPolicy\n    ? input.executionPolicy.tools\n    : input.session\n      ? input.session.tools\n      : withFirstPartyTools(input.settings, input.task.agentConfig.tools);\n  const resolvedToolPolicy = resolveIncidentTelemetryResponderToolPolicy({\n    settingsMcpServerIds: input.settings.mcpServers.map((server) => server.id),\n    capabilityServerIds,\n    apiIntegrationServerIds,\n    ...(input.executionPolicy\n      ? { acceptedSessionMcpServerIds: input.executionPolicy.mcpServerIds }\n      : {}),\n    session: input.executionPolicy\n      ? {\n          mcpServers: input.executionPolicy.mcpServerIds.map((id) => ({ id })),\n          tools: input.executionPolicy.tools,\n          toolPolicy: input.executionPolicy.toolPolicy,\n        }\n      : input.session,\n    plannedTools: sessionTools,\n  });\n\n  let metadataComplete = true;\n  let rig: IncidentTelemetryResponderMetadata[\"rig\"] = null;\n  const variableSetIds = new Set<string>();\n  if (input.executionPolicy ?? input.session) {\n    for (const id of input.executionPolicy?.variableSetIds ?? input.session?.variableSetIds ?? []) {\n      variableSetIds.add(id);\n    }\n    const variableSetId = input.executionPolicy?.variableSetId ?? input.session?.variableSetId;\n    const rigId = input.executionPolicy?.rigId ?? input.session?.rigId ?? null;\n    const rigVersionId = input.executionPolicy?.rigVersionId ?? input.session?.rigVersionId ?? null;\n    if (variableSetId) variableSetIds.add(variableSetId);\n    if ((rigId === null) !== (rigVersionId === null)) {\n      metadataComplete = false;\n    } else if (rigId && rigVersionId) {\n      const selected = await getScheduledScopedRigVersionMetadata(\n        input.db,\n        {\n          accountId: input.task.accountId,\n          workspaceId: input.task.workspaceId,\n          subjectId: input.personalResourceAuthoritySubjectId ?? input.task.createdBy.subjectId,\n        },\n        rigId,\n        rigVersionId,\n      );\n      if (!selected) {\n        metadataComplete = false;\n      } else {\n        rig = {\n          name: selected.name,\n          credentialHooks: selected.version.credentialHooks,\n          checkHealth: selected.health.checkHealth,\n        };\n        for (const id of selected.version.defaultVariableSetIds) variableSetIds.add(id);\n      }\n    }\n  } else {\n    if (input.task.variableSetId) variableSetIds.add(input.task.variableSetId);\n    if (input.task.rigId) {\n      const selectedRig = await getRig(\n        input.db,\n        {\n          accountId: input.task.accountId,\n          workspaceId: input.task.workspaceId,\n          subjectId: input.personalResourceAuthoritySubjectId ?? input.task.createdBy.subjectId,\n        },\n        input.task.rigId,\n      );\n      if (!selectedRig?.activeVersion || !selectedRig.activeVersionHealth) {\n        metadataComplete = false;\n      } else {\n        rig = {\n          name: selectedRig.name,\n          credentialHooks: selectedRig.activeVersion.credentialHooks,\n          checkHealth: selectedRig.activeVersionHealth.checkHealth,\n        };\n        for (const id of selectedRig.activeVersion.defaultVariableSetIds) variableSetIds.add(id);\n      }\n    }\n  }\n\n  const variableSets = await Promise.all(\n    [...variableSetIds].map(\n      async (id) =>\n        await getVariableSet(\n          input.db,\n          {\n            accountId: input.task.accountId,\n            workspaceId: input.task.workspaceId,\n            subjectId: input.personalResourceAuthoritySubjectId ?? input.task.createdBy.subjectId,\n          },\n          id,\n        ),\n    ),\n  );\n  if (variableSets.some((variableSet) => variableSet === null)) {\n    metadataComplete = false;\n  }\n\n  return {\n    metadataComplete,\n    resources: input.executionPolicy\n      ? input.task.agentConfig.resources\n      : (input.session?.resources ?? input.task.agentConfig.resources),\n    mcpServerIds: resolvedToolPolicy.toolRefs.map((tool) => tool.id),\n    firstPartyMcpTools: input.executionPolicy\n      ? input.executionPolicy.firstPartyMcpTools\n      : input.session\n        ? allowedFirstPartyMcpToolsForSession(input.settings, input.session.firstPartyMcpTools)\n        : resolveFirstPartyMcpToolPolicy(input.settings).default,\n    firstPartyMcpPermissions: input.executionPolicy\n      ? (input.executionPolicy.firstPartyMcpPermissions ?? DEFAULT_FIRST_PARTY_MCP_PERMISSIONS)\n      : (input.session?.firstPartyMcpPermissions ?? DEFAULT_FIRST_PARTY_MCP_PERMISSIONS),\n    rig,\n    variableSets: variableSets.flatMap((variableSet) =>\n      variableSet\n        ? [\n            {\n              name: variableSet.name,\n              variables: variableSet.variables.map((variable) => ({\n                name: variable.name,\n              })),\n            },\n          ]\n        : [],\n    ),\n    toolPolicyVersion:\n      input.executionPolicy?.toolPolicyVersion ?? input.session?.toolPolicyVersion ?? null,\n  };\n}\n\n/** Resolve the responder's current ID-only MCP policy without materializing runtime secrets. */\nexport function resolveIncidentTelemetryResponderToolPolicy(input: {\n  settingsMcpServerIds: readonly string[];\n  capabilityServerIds: readonly string[];\n  apiIntegrationServerIds: readonly string[];\n  acceptedSessionMcpServerIds?: readonly string[];\n  session: {\n    mcpServers: readonly { id: string }[];\n    tools: Session[\"tools\"];\n    toolPolicy: Session[\"toolPolicy\"];\n  } | null;\n  plannedTools: Session[\"tools\"];\n}) {\n  const workspaceDefaultMcpServerIds = new Set(input.settingsMcpServerIds);\n  for (const id of input.capabilityServerIds) workspaceDefaultMcpServerIds.add(id);\n  for (const id of input.apiIntegrationServerIds) workspaceDefaultMcpServerIds.add(id);\n  for (const id of input.acceptedSessionMcpServerIds ?? []) {\n    workspaceDefaultMcpServerIds.add(id);\n  }\n\n  const availableMcpServerIds = new Set(workspaceDefaultMcpServerIds);\n  for (const server of input.session?.mcpServers ?? []) {\n    availableMcpServerIds.add(server.id);\n  }\n\n  return resolveSessionToolPolicy({\n    toolPolicy: input.session?.toolPolicy ?? {\n      mode: \"explicit\",\n      inheritedFromSessionId: null,\n    },\n    sessionTools: input.plannedTools,\n    availableMcpServerIds,\n    defaultMcpServerIds: defaultSessionMcpServerIds(\n      [...workspaceDefaultMcpServerIds].map((id) => ({ id })),\n    ),\n  });\n}\n\n/** Revalidate a source-frozen incident responder fence before a turn can claim it. */\nexport async function validateIncidentTelemetrySystemUpdateAuthority(input: {\n  db: Database;\n  settings: Settings;\n  workspaceId: string;\n  sessionId: string;\n  update: SessionSystemUpdate;\n}): Promise<{ action: \"accept\" } | { action: \"reject\"; reason: string }> {\n  if (!(INCIDENT_TELEMETRY_AUTHORITY_FENCE_LINEAGE_KEY in input.update.lineage)) {\n    return { action: \"accept\" };\n  }\n  const fence = parseIncidentTelemetryAuthorityFence(input.update.lineage);\n  const payload = input.update.payload;\n  const taskId = input.update.lineage.scheduledTaskId;\n  const runId = payload.type === \"scheduled_occurrence\" ? payload.scheduledTaskRunId : null;\n  const reject = async () => {\n    if (runId) {\n      await markScheduledTaskRunAuthorityRejectedInTransaction(input.db, {\n        workspaceId: input.workspaceId,\n        sessionId: input.sessionId,\n        runId,\n      });\n    }\n    return {\n      action: \"reject\",\n      reason: \"incident_responder_under_capable\",\n    } as const;\n  };\n  if (!fence || typeof taskId !== \"string\" || !runId) return await reject();\n\n  const session = await requireSession(input.db, input.workspaceId, input.sessionId);\n  const acceptedExecution = await getScheduledTaskRunAcceptedExecution(input.db, {\n    workspaceId: input.workspaceId,\n    runId,\n  });\n  if (\n    !acceptedExecution ||\n    acceptedExecution.task.id !== taskId ||\n    !acceptedExecution.incidentPreflightRequired\n  ) {\n    return await reject();\n  }\n  const task = acceptedExecution.task;\n  const personalConnectionDelegations = acceptedExecution.personalConnectionDelegations;\n  const responder = await resolveIncidentTelemetryResponderMetadata({\n    db: input.db,\n    settings: input.settings,\n    task,\n    session,\n    personalConnectionDelegations,\n    personalResourceAuthoritySubjectId: acceptedExecution.personalResourceAuthoritySubjectId,\n    executionPolicy: acceptedExecution.targetSessionExecution\n      ? {\n          tools: acceptedExecution.targetSessionExecution.tools,\n          firstPartyMcpTools: acceptedExecution.targetSessionExecution.firstPartyMcpTools,\n          firstPartyMcpPermissions:\n            acceptedExecution.targetSessionExecution.firstPartyMcpPermissions,\n          variableSetIds: acceptedExecution.targetSessionExecution.variableSets.map(\n            (variableSet) => variableSet.id,\n          ),\n          variableSetId: acceptedExecution.targetSessionExecution.variableSetId,\n          rigId: acceptedExecution.targetSessionExecution.rigId,\n          rigVersionId: acceptedExecution.targetSessionExecution.rigVersionId,\n          toolPolicy: acceptedExecution.targetSessionExecution.toolPolicy,\n          mcpServerIds: acceptedExecution.targetSessionExecution.mcpServerIds,\n          toolPolicyVersion: acceptedExecution.targetSessionExecution.toolPolicyVersion,\n        }\n      : {\n          tools: acceptedExecution.resolvedTools,\n          firstPartyMcpTools: acceptedExecution.resolvedFirstPartyMcpTools,\n          firstPartyMcpPermissions: acceptedExecution.resolvedFirstPartyMcpPermissions,\n          variableSetId: acceptedExecution.resolvedVariableSet?.id ?? null,\n          rigId: acceptedExecution.resolvedRig?.id ?? null,\n          rigVersionId: acceptedExecution.resolvedRig?.versionId ?? null,\n          toolPolicy: session.toolPolicy,\n          mcpServerIds: [],\n          toolPolicyVersion: session.toolPolicyVersion,\n        },\n  });\n  const preflight = evaluateIncidentTelemetryPreflight({\n    agentConfig: task.agentConfig,\n    incidentTriggered: acceptedExecution.alertOccurrenceLabels !== null,\n    alertOccurrenceLabels: acceptedExecution.alertOccurrenceLabels,\n    responder,\n  });\n  if (preflight.action !== \"ready\") return await reject();\n  const current = incidentTelemetryAuthorityFence({\n    task,\n    responder,\n    alertOccurrenceLabels: acceptedExecution.alertOccurrenceLabels,\n  });\n  return current &&\n    current.toolPolicyVersion === fence.toolPolicyVersion &&\n    current.responderDigest === fence.responderDigest &&\n    current.taskDigest === fence.taskDigest &&\n    current.alertSelectorDigest === fence.alertSelectorDigest\n    ? { action: \"accept\" }\n    : await reject();\n}\n","import type { TurnHistorySink } from \"./history-sink\";\nimport type { Settings } from \"@opengeni/config\";\n\nexport class SandboxCapabilitiesChangedError extends Error {\n  readonly code = \"native_capabilities_changed_this_attempt\";\n\n  constructor() {\n    super(\"The attached sandbox requires rebuilding this attempt's native capabilities.\");\n    this.name = \"SandboxCapabilitiesChangedError\";\n  }\n}\n\n/**\n * Persist the SDK's complete prior model/tool history before another provider\n * request can start. The first request has no prior model/tool rows to append.\n * Follow-up requests run only after the preceding complete call/result batch is\n * replay-safe.\n */\nexport async function checkpointHistoryBeforeProviderDispatch(\n  historySink: Pick<TurnHistorySink, \"reconcileConversationTruth\">,\n  route?: {\n    effectiveSandboxBackend: Settings[\"sandboxBackend\"];\n    routingEnabled: boolean;\n    readActiveSandbox: () => Promise<{ activeSandboxId: string | null } | null>;\n  },\n): Promise<void> {\n  await historySink.reconcileConversationTruth({ requireDurable: true });\n  // A plain Agent cannot acquire SandboxAgent capabilities in place. Preserve\n  // its completed tool batch before recovering the same logical turn; the next\n  // attempt resolves and authorizes the route normally.\n  if (route?.effectiveSandboxBackend === \"none\" && route.routingEnabled) {\n    const active = await route.readActiveSandbox();\n    if (active?.activeSandboxId) throw new SandboxCapabilitiesChangedError();\n  }\n}\n","import {\n  SandboxLeaseRecoveryBlockedError,\n  SandboxLeaseSupersededError,\n  SandboxLeaseTransitionError,\n  SandboxImageConflictError,\n  SandboxRigConflictError,\n} from \"@opengeni/db\";\nimport {\n  SandboxConfigError,\n  SandboxExactResumeInstanceUnavailableError,\n  SandboxExactResumeReplacedError,\n  SandboxExecReadinessError,\n  SandboxProviderContinuityUnavailableError,\n  SandboxProviderUnavailableError,\n  SandboxResumeIdentityMismatchError,\n  SandboxResumeIdentityUnavailableError,\n  SandboxResumeStateUnavailableError,\n  WorkspaceArchiveIntegrityError,\n  classifyProviderSandboxFailure,\n} from \"@opengeni/runtime\";\nimport { type Settings } from \"@opengeni/config\";\nimport { CancelledFailure } from \"@temporalio/activity\";\nimport {\n  sandboxProvisionFailureStage,\n  SandboxProvisionStageError,\n  SandboxWarmingTimeoutError,\n} from \"../../sandbox-resume\";\nimport {\n  type SandboxLogicalProvisionCategory,\n  type SandboxLogicalProvisionStage,\n} from \"../../observability-metrics\";\nimport { randomUUID } from \"node:crypto\";\n\nexport type TurnSandboxProvisioner<T> = {\n  get(): Promise<T>;\n  hasStarted(): boolean;\n  waitForSettled(timeoutMs: number): Promise<T | null>;\n};\n\nexport type SandboxLogicalProvisionFailure = {\n  category: SandboxLogicalProvisionCategory;\n  stage: SandboxLogicalProvisionStage;\n  code: string;\n  expected: boolean;\n  retryable: boolean;\n};\n\nexport type TurnSandboxProvisionAttempt<T = unknown> = {\n  provisionId: string;\n  attempt: number;\n  outcome: \"completed\" | \"retrying\" | \"failed\";\n  durationMs: number;\n  result?: T;\n  error?: unknown;\n};\n\nexport type TurnSandboxProvisionSettlement = {\n  provisionId: string;\n  internalAttempts: number;\n  durationMs: number;\n};\n\nexport class TurnOperationCancelledError extends Error {\n  readonly name = \"TurnOperationCancelledError\";\n\n  constructor(readonly reason: unknown) {\n    super(\"Turn operation was cancelled with its owning turn\", {\n      ...(reason instanceof Error ? { cause: reason } : {}),\n    });\n  }\n}\n\nexport class SandboxDeadlineRotationError extends Error {\n  readonly name = \"SandboxDeadlineRotationError\";\n\n  constructor(\n    readonly sandboxGroupId: string,\n    readonly leaseEpoch: number,\n  ) {\n    super(\n      `Sandbox ${sandboxGroupId} reached its provider rotation boundary at lease epoch ${leaseEpoch}`,\n    );\n  }\n}\n\n/**\n * Normalize a preparation/provisioning cancellation race back to the Temporal\n * cancellation that owns the activity. Several provider APIs expose no portable\n * abort primitive, so the worker stops awaiting them and disposes any late\n * resource. The wrapper error must never fall through as an ordinary turn\n * failure: doing so would omit the quiescence receipt and strand a committed\n * Steer/Pause behind `control-pending`.\n */\nexport function turnOperationCancellationFailure(error: unknown): CancelledFailure | null {\n  if (error instanceof CancelledFailure) return error;\n  if (!(error instanceof TurnOperationCancelledError)) return null;\n  return error.reason instanceof CancelledFailure\n    ? error.reason\n    : new CancelledFailure(\"TURN_SANDBOX_PROVISION_CANCELLED\", [], error);\n}\n\nexport function throwIfTurnOperationCancelled(signal: AbortSignal | undefined): void {\n  if (signal?.aborted) {\n    throw new TurnOperationCancelledError(signal.reason);\n  }\n}\n\nexport async function waitForTurnOperation<T>(\n  operation: Promise<T>,\n  signal: AbortSignal | undefined,\n  disposeLateResult: ((result: T) => Promise<void> | void) | undefined,\n): Promise<T> {\n  if (!signal) return await operation;\n\n  let rejectCancellation: ((error: TurnOperationCancelledError) => void) | undefined;\n  const cancelled = new Promise<never>((_resolve, reject) => {\n    rejectCancellation = reject;\n  });\n  const cancel = (): void => {\n    rejectCancellation?.(new TurnOperationCancelledError(signal.reason));\n  };\n  signal.addEventListener(\"abort\", cancel, { once: true });\n  if (signal.aborted) cancel();\n\n  try {\n    const result = await Promise.race([operation, cancelled]);\n    // Cancellation owns an exact turn boundary even when the provider result\n    // and AbortSignal settle in the same microtask checkpoint. Never let a\n    // just-resolved lease escape after the control was already committed.\n    if (signal.aborted) {\n      throw new TurnOperationCancelledError(signal.reason);\n    }\n    return result;\n  } catch (error) {\n    if (signal.aborted) {\n      // The provider establish call has no universal cancellation seam. It may\n      // finish after the Temporal activity has correctly stopped; dispose its\n      // late lease instead of letting a cancelled turn resurrect a holder/box.\n      void operation\n        .then(async (result) => await disposeLateResult?.(result))\n        .catch(() => undefined);\n      // A provider failure may settle in the same checkpoint as the committed\n      // control. The control is authoritative; retain its cancellation shape\n      // so the activity publishes quiescence instead of looking like an\n      // unrelated turn failure.\n      if (!(error instanceof TurnOperationCancelledError)) {\n        throw new TurnOperationCancelledError(signal.reason);\n      }\n    }\n    throw error;\n  } finally {\n    signal.removeEventListener(\"abort\", cancel);\n  }\n}\n\nexport function sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nexport function sandboxProvisionErrorChain(error: unknown): unknown[] {\n  const chain: unknown[] = [];\n  const seen = new Set<object>();\n  let current = error;\n  for (let depth = 0; depth < 6; depth += 1) {\n    chain.push(current);\n    if (!current || typeof current !== \"object\" || seen.has(current)) break;\n    seen.add(current);\n    if (current instanceof SandboxProvisionStageError) {\n      current = current.source;\n      continue;\n    }\n    const cause = Reflect.get(current, \"cause\");\n    if (cause === undefined || cause === current) break;\n    current = cause;\n  }\n  return chain;\n}\n\nexport function firstProvisionError<T>(\n  chain: readonly unknown[],\n  constructor: abstract new (...args: never[]) => T,\n): T | null {\n  return chain.find((value): value is T => value instanceof constructor) ?? null;\n}\n\n/**\n * Closed, structural taxonomy for one logical provision failure. The classifier\n * follows only typed wrapper/cause links and provider status/code fields; it\n * never infers lifecycle truth from an arbitrary error message.\n */\nexport function classifySandboxLogicalProvisionFailure(\n  backend: string,\n  error: unknown,\n): SandboxLogicalProvisionFailure {\n  const chain = sandboxProvisionErrorChain(error);\n  const wrappedStage =\n    chain.map((value) => sandboxProvisionFailureStage(value)).find((stage) => stage !== null) ??\n    null;\n  const warming =\n    chain.find(\n      (value): value is SandboxWarmingTimeoutError => value instanceof SandboxWarmingTimeoutError,\n    ) ?? null;\n  if (warming) {\n    const execReadiness = warming.stage === \"exec_readiness\";\n    return {\n      category: execReadiness ? \"exec_readiness\" : \"sibling_warming\",\n      stage: execReadiness ? \"exec_readiness\" : \"sibling_warming\",\n      code: warming.code,\n      expected: false,\n      retryable: false,\n    };\n  }\n  const readiness = firstProvisionError(chain, SandboxExecReadinessError);\n  if (readiness) {\n    return {\n      category: \"exec_readiness\",\n      stage: \"exec_readiness\",\n      code: readiness.code,\n      expected: false,\n      retryable: false,\n    };\n  }\n  const superseded = firstProvisionError(chain, SandboxLeaseSupersededError);\n  if (superseded) {\n    return {\n      category: \"lease_superseded\",\n      stage: \"lease_admission\",\n      code: \"lease_superseded\",\n      expected: true,\n      retryable: true,\n    };\n  }\n  const transition = firstProvisionError(chain, SandboxLeaseTransitionError);\n  if (transition) {\n    return {\n      category: \"drain_capture_wait\",\n      stage: \"lifecycle_wait\",\n      code: transition.reason,\n      expected: true,\n      retryable: true,\n    };\n  }\n  const deadlineRotation = firstProvisionError(chain, SandboxDeadlineRotationError);\n  if (deadlineRotation) {\n    return {\n      category: \"drain_capture_wait\",\n      stage: \"lifecycle_wait\",\n      code: \"provider_deadline_rotation\",\n      expected: true,\n      retryable: false,\n    };\n  }\n  const recoveryBlocked = firstProvisionError(chain, SandboxLeaseRecoveryBlockedError);\n  if (recoveryBlocked) {\n    return {\n      category: \"archive_recovery\",\n      stage: \"archive_recovery\",\n      code: recoveryBlocked.code,\n      expected: false,\n      retryable: false,\n    };\n  }\n  const archive = firstProvisionError(chain, WorkspaceArchiveIntegrityError);\n  if (archive) {\n    return {\n      category: \"archive_recovery\",\n      stage: \"archive_recovery\",\n      code: archive.code,\n      expected: false,\n      retryable: archive.retryable,\n    };\n  }\n  const continuity = firstProvisionError(chain, SandboxProviderContinuityUnavailableError);\n  if (continuity) {\n    return {\n      category: \"archive_recovery\",\n      stage: \"archive_recovery\",\n      code: \"provider_continuity_unavailable\",\n      expected: false,\n      retryable: continuity.retryable,\n    };\n  }\n  const configuration = chain.find(\n    (value) =>\n      value instanceof SandboxConfigError ||\n      value instanceof SandboxProviderUnavailableError ||\n      value instanceof SandboxImageConflictError ||\n      value instanceof SandboxRigConflictError,\n  );\n  if (configuration) {\n    return {\n      category: \"configuration\",\n      stage: wrappedStage ?? \"configuration\",\n      code:\n        configuration instanceof SandboxImageConflictError\n          ? \"image_conflict\"\n          : configuration instanceof SandboxRigConflictError\n            ? \"rig_conflict\"\n            : configuration instanceof SandboxProviderUnavailableError\n              ? \"provider_unavailable\"\n              : \"sandbox_config\",\n      expected: false,\n      retryable: false,\n    };\n  }\n  const resumeFailure = chain.find(\n    (value) =>\n      value instanceof SandboxResumeStateUnavailableError ||\n      value instanceof SandboxResumeIdentityMismatchError ||\n      value instanceof SandboxResumeIdentityUnavailableError ||\n      value instanceof SandboxExactResumeReplacedError ||\n      value instanceof SandboxExactResumeInstanceUnavailableError,\n  );\n  if (resumeFailure) {\n    return {\n      category: \"resume\",\n      stage: \"resume\",\n      code:\n        resumeFailure instanceof SandboxResumeStateUnavailableError\n          ? \"resume_state_unavailable\"\n          : resumeFailure instanceof SandboxResumeIdentityMismatchError\n            ? \"resume_identity_mismatch\"\n            : resumeFailure instanceof SandboxResumeIdentityUnavailableError\n              ? \"resume_identity_unavailable\"\n              : resumeFailure instanceof SandboxExactResumeReplacedError\n                ? \"exact_resume_replaced\"\n                : \"exact_resume_instance_unavailable\",\n      expected: false,\n      retryable: false,\n    };\n  }\n  const providerFailure = classifyProviderSandboxFailure(backend, error);\n  if (providerFailure.kind === \"transient_transport\") {\n    return {\n      category: \"provider_transport\",\n      stage: wrappedStage ?? \"provider_transport\",\n      code: providerFailure.diagnostic,\n      expected: false,\n      // A typed transport fault is attributable, but a create outcome may be\n      // ambiguous. Classification never licenses replay on its own.\n      retryable: false,\n    };\n  }\n  if (wrappedStage) {\n    return {\n      category: wrappedStage,\n      stage: wrappedStage,\n      code: `${wrappedStage}_failed`,\n      expected: false,\n      retryable: false,\n    };\n  }\n  return {\n    category: \"unknown\",\n    stage: \"unknown\",\n    code: \"unknown\",\n    expected: false,\n    retryable: false,\n  };\n}\n\nexport function isLazySandboxProvisionRetryable(error: unknown): boolean {\n  const chain = sandboxProvisionErrorChain(error);\n  // Rotation resumes through the durable lifecycle wake. Retrying here holds\n  // a turn worker and can repeat the entire lease wait for every skill root.\n  if (\n    chain.some(\n      (value) =>\n        value instanceof SandboxLeaseTransitionError && value.reason === \"rotation_in_progress\",\n    )\n  )\n    return false;\n  if (\n    chain.some(\n      (value) =>\n        value instanceof SandboxImageConflictError ||\n        value instanceof SandboxRigConflictError ||\n        value instanceof SandboxLeaseRecoveryBlockedError,\n    )\n  ) {\n    return false;\n  }\n  const archive = firstProvisionError(chain, WorkspaceArchiveIntegrityError);\n  if (archive) {\n    return archive.retryable;\n  }\n  if (\n    chain.some(\n      (value) =>\n        value instanceof SandboxLeaseSupersededError ||\n        value instanceof SandboxLeaseTransitionError,\n    )\n  ) {\n    return true;\n  }\n  if (chain.some((value) => value instanceof SandboxWarmingTimeoutError)) {\n    return false;\n  }\n  // Provider/transport text is not durable evidence that creation never\n  // happened. Retrying an ambiguous unknown here can create a second box; only\n  // typed, ownership-fenced lifecycle outcomes above are safe to replay.\n  return false;\n}\n\n/** Short workflow-visible anti-churn pacing after a lifecycle transition. The\n * next acquire waits on the exact durable claim itself, so this is deliberately\n * not a guessed snapshot-plus-schedules completion time. */\nexport function sandboxDeadlineRotationRecoveryDelayMs(\n  settings: Pick<Settings, \"sandboxLeaseReaperPeriodMs\">,\n): number {\n  // The next attempt waits on the durable lifecycle claim itself. This delay is\n  // only anti-churn pacing, not an estimate of snapshot + future schedules.\n  return Math.min(5_000, settings.sandboxLeaseReaperPeriodMs);\n}\n\nexport function createTurnSandboxProvisioner<T>(\n  establish: () => Promise<T>,\n  options: {\n    maxRetries?: number;\n    backoffMs?: number;\n    signal?: AbortSignal;\n    provisionIdFactory?: () => string;\n    onStarted?: (\n      settlement: Pick<TurnSandboxProvisionSettlement, \"provisionId\">,\n    ) => Promise<void> | void;\n    onAttemptSettled?: (attempt: TurnSandboxProvisionAttempt<T>) => Promise<void> | void;\n    beforeCompleted?: (\n      result: T,\n      settlement: TurnSandboxProvisionSettlement,\n    ) => Promise<void> | void;\n    onCompleted?: (result: T, settlement: TurnSandboxProvisionSettlement) => Promise<void> | void;\n    onFailed?: (error: unknown, settlement: TurnSandboxProvisionSettlement) => Promise<void> | void;\n    disposeResult?: (result: T) => Promise<void> | void;\n  } = {},\n): TurnSandboxProvisioner<T> {\n  const maxRetries = options.maxRetries ?? 2;\n  const backoffMs = options.backoffMs ?? 250;\n  let memo: Promise<T> | null = null;\n\n  const run = async (\n    provisionId: string,\n    onAttempt: (attempt: number) => void,\n  ): Promise<{ result: T; internalAttempts: number }> => {\n    let internalAttempts = 0;\n    while (true) {\n      internalAttempts += 1;\n      onAttempt(internalAttempts);\n      const startedAt = performance.now();\n      try {\n        throwIfTurnOperationCancelled(options.signal);\n        const operation = establish();\n        const result = await waitForTurnOperation(operation, options.signal, options.disposeResult);\n        await options.onAttemptSettled?.({\n          provisionId,\n          attempt: internalAttempts,\n          outcome: \"completed\",\n          durationMs: performance.now() - startedAt,\n          result,\n        });\n        return { result, internalAttempts };\n      } catch (error) {\n        const retrying = !(\n          error instanceof TurnOperationCancelledError ||\n          internalAttempts > maxRetries ||\n          !isLazySandboxProvisionRetryable(error)\n        );\n        await options.onAttemptSettled?.({\n          provisionId,\n          attempt: internalAttempts,\n          outcome: retrying ? \"retrying\" : \"failed\",\n          durationMs: performance.now() - startedAt,\n          error,\n        });\n        if (!retrying) {\n          throw error;\n        }\n        await sleep(backoffMs * internalAttempts);\n      }\n    }\n  };\n\n  return {\n    get(): Promise<T> {\n      if (!memo) {\n        const provisionId = options.provisionIdFactory?.() ?? randomUUID();\n        memo = (async () => {\n          const startedAt = performance.now();\n          throwIfTurnOperationCancelled(options.signal);\n          await options.onStarted?.({ provisionId });\n          throwIfTurnOperationCancelled(options.signal);\n          let result: T | undefined;\n          let internalAttempts = 0;\n          let hasResult = false;\n          try {\n            const runResult = await run(provisionId, (attempt) => {\n              internalAttempts = attempt;\n            });\n            result = runResult.result;\n            internalAttempts = runResult.internalAttempts;\n            hasResult = true;\n            throwIfTurnOperationCancelled(options.signal);\n            await options.beforeCompleted?.(result, {\n              provisionId,\n              internalAttempts,\n              durationMs: performance.now() - startedAt,\n            });\n            throwIfTurnOperationCancelled(options.signal);\n            await options.onCompleted?.(result, {\n              provisionId,\n              internalAttempts,\n              durationMs: performance.now() - startedAt,\n            });\n            return result;\n          } catch (error) {\n            if (hasResult) {\n              await options.disposeResult?.(result as T);\n            }\n            if (!(error instanceof TurnOperationCancelledError)) {\n              await options.onFailed?.(error, {\n                provisionId,\n                internalAttempts: Math.max(1, internalAttempts),\n                durationMs: performance.now() - startedAt,\n              });\n            }\n            throw error;\n          }\n        })().catch((error) => {\n          // A terminal lease/archive/configuration result cannot change within\n          // this frozen turn. Keep its rejected promise memoized so later model\n          // tool calls observe the same typed result without re-entering\n          // provisioning, emitting another failure event, or creating another\n          // provider attempt. Only a retryable failure releases the single-flight\n          // for a later operation to re-read the lease/provider state.\n          if (isLazySandboxProvisionRetryable(error)) {\n            memo = null;\n          }\n          throw error;\n        });\n      }\n      return memo;\n    },\n    hasStarted(): boolean {\n      return memo !== null;\n    },\n    async waitForSettled(timeoutMs: number): Promise<T | null> {\n      if (!memo) {\n        return null;\n      }\n      let timer: ReturnType<typeof setTimeout> | undefined;\n      try {\n        return await Promise.race([\n          memo.catch(() => null),\n          new Promise<null>((resolve) => {\n            timer = setTimeout(() => resolve(null), timeoutMs);\n          }),\n        ]);\n      } finally {\n        if (timer) {\n          clearTimeout(timer);\n        }\n      }\n    },\n  };\n}\n\n/**\n * Decide whether THIS turn may send OpenAI's `prompt_cache_key` request field.\n *\n * Accepted transports:\n *   - legacy/built-in OpenAI or Azure Responses fallback (resolvedModel null);\n *   - resolved built-in OpenAI/Azure providers;\n *   - ChatGPT/Codex subscription backend (its strict allowlist permits the field).\n *   - native Anthropic Messages (maps the internal key to Claude session identity;\n *     the OpenAI field is never sent on that wire).\n *\n * Other registry API-key providers are intentionally excluded. Fireworks' prompt-cache\n * docs prescribe `user` or `x-session-affinity`, not `prompt_cache_key`; Z.AI/GLM\n * documents automatic context caching plus `user_id`. Sending OpenAI-only fields\n * to unknown OpenAI-compatible providers risks unsupported-parameter 400s.\n */\n","import { type SessionAttemptQuiescenceCommit } from \"@opengeni/db\";\nimport { type TurnToolCancellationFence } from \"@opengeni/runtime\";\nimport { type GitCredentialRenewalController } from \"../git-credential-renewal\";\nimport { type RunCredentialRenewalController } from \"../run-credential-renewal\";\nimport { type CodemodeTokenRenewalController } from \"../codemode-token-renewal\";\nimport type {\n  TurnActivityServices as ActivityServices,\n  RunAgentTurnResult,\n  SessionAttemptQuiescenceProof,\n} from \"../types\";\nimport { type ResumedTurnSandbox } from \"../../sandbox-resume\";\nimport { type SessionEvent } from \"@opengeni/contracts\";\nimport { sleep } from \"./sandbox-provision\";\n\nexport function shouldRunTurnEndWorkspacePersistence(input: {\n  activityStatus: RunAgentTurnResult[\"status\"] | \"unknown\";\n  cancellationRequested: boolean;\n  deadlineRotationRequested?: boolean;\n}): boolean {\n  return (\n    input.activityStatus !== \"cancelled\" &&\n    !input.cancellationRequested &&\n    input.deadlineRotationRequested !== true\n  );\n}\n\n/**\n * Periodic workspace snapshots protect work performed during a long-running\n * turn. Before the first provider request reaches the wire there is no\n * mid-turn agent work to protect; snapshotting platform setup at that point can\n * instead make the request wait behind the snapshot's workspace-write fence.\n */\nexport function shouldStartPeriodicWorkspaceSnapshot(input: {\n  firstProviderRequestStarted: boolean;\n  snapshotInFlight: boolean;\n  turnEndCaptureInProgress: boolean;\n  deadlineRotationRequested: boolean;\n}): boolean {\n  return (\n    input.firstProviderRequestStarted &&\n    !input.snapshotInFlight &&\n    !input.turnEndCaptureInProgress &&\n    !input.deadlineRotationRequested\n  );\n}\n\n/**\n * Temporal cancellation is delivery/transport state, never proof that the\n * dying activity crossed its mandatory sandbox-tool fence. If that fence\n * fails, surface the fence failure instead of retaining a misleading typed\n * cancellation; replacement admission remains closed because no durable\n * quiescence receipt was written.\n */\nexport function assertPhysicalToolQuiescenceForCancellation(input: {\n  acknowledgeQuiescence: boolean;\n  physicalToolQuiescenceConfirmed: boolean;\n  failure: unknown;\n}): void {\n  if (!input.acknowledgeQuiescence || input.physicalToolQuiescenceConfirmed) return;\n  if (input.failure instanceof Error) throw input.failure;\n  throw new Error(\"Physical sandbox-tool quiescence could not be confirmed\", {\n    cause: input.failure,\n  });\n}\n\n/** A physically drained attempt must leave one durable recovery producer. The\n * direct Postgres receipt is preferred; after its bounded retries exhaust, an\n * exact Temporal proof signal is sufficient because the workflow persists it\n * through an independently retrying DB-only control activity. */\nexport function assertSessionAttemptQuiescenceRecoveryDurable(input: {\n  acknowledgeQuiescence: boolean;\n  physicalToolQuiescenceConfirmed: boolean;\n  receiptOrProofDurable: boolean;\n  failure: unknown;\n}): void {\n  if (\n    !input.acknowledgeQuiescence ||\n    !input.physicalToolQuiescenceConfirmed ||\n    input.receiptOrProofDurable\n  ) {\n    return;\n  }\n  if (input.failure instanceof Error) throw input.failure;\n  throw new Error(\"Physical quiescence had no durable receipt or recovery proof\", {\n    cause: input.failure,\n  });\n}\n\nexport const QUIESCENCE_PROOF_SIGNAL_INITIAL_RETRY_MS = 250;\nexport const QUIESCENCE_PROOF_SIGNAL_MAX_RETRY_MS = 5_000;\nexport const TURN_QUIESCENCE_WATCHDOG_MS = 5 * 60_000;\nexport const TURN_FINALIZER_STEP_TIMEOUT_MS = 30_000;\n\n/** A fenced activity must never heartbeat forever while its physical writer\n * drain is stuck. The last-resort worker exit stops every in-process writer;\n * Kubernetes replaces the pod and the workflow's heartbeat-lease reconciler\n * then commits the exact quiescence receipt. */\nexport function armTurnQuiescenceWatchdog(input: {\n  enabled: boolean;\n  timeoutMs?: number;\n  onTimeout?: () => void;\n  terminateWorker: () => void;\n}): () => void {\n  if (!input.enabled) return () => undefined;\n  let armed = true;\n  const timer = setTimeout(() => {\n    if (!armed) return;\n    input.onTimeout?.();\n    input.terminateWorker();\n  }, input.timeoutMs ?? TURN_QUIESCENCE_WATCHDOG_MS);\n  timer.unref?.();\n  return () => {\n    if (!armed) return;\n    armed = false;\n    clearTimeout(timer);\n  };\n}\n\n/** Persist the authoritative receipt or durably hand the exact physical proof\n * to Temporal. This retries signal delivery, not DB eligibility or workflow\n * state. The proof object never changes between attempts. */\nexport async function persistOrSignalSessionAttemptQuiescence(input: {\n  proof: SessionAttemptQuiescenceProof;\n  persistReceipt: () => Promise<SessionAttemptQuiescenceCommit>;\n  deliverWorkflowWake?: (\n    wake: NonNullable<SessionAttemptQuiescenceCommit[\"workflowWake\"]>,\n  ) => Promise<unknown>;\n  publishEvents: (events: SessionEvent[]) => Promise<unknown>;\n  signalProof: ActivityServices[\"signalSessionAttemptQuiesced\"];\n  sleep?: (ms: number) => Promise<void>;\n  heartbeat?: (attempt: number, delayMs: number) => void;\n  onReceiptFailure?: (error: unknown) => void;\n  onWakeFailure?: (error: unknown) => void;\n  onPublishFailure?: (error: unknown) => void;\n  onSignalFailure?: (error: unknown, attempt: number, delayMs: number) => void;\n}): Promise<\"receipt\" | \"signal\"> {\n  let receipt: SessionAttemptQuiescenceCommit;\n  try {\n    receipt = await input.persistReceipt();\n  } catch (receiptError) {\n    input.onReceiptFailure?.(receiptError);\n    if (!input.signalProof) {\n      throw new Error(\"Session-attempt quiescence proof signaler is unavailable\", {\n        cause: receiptError,\n      });\n    }\n    const delay = input.sleep ?? sleep;\n    let retryMs = QUIESCENCE_PROOF_SIGNAL_INITIAL_RETRY_MS;\n    let attempt = 1;\n    for (;;) {\n      try {\n        await input.signalProof(input.proof);\n        return \"signal\";\n      } catch (signalError) {\n        input.onSignalFailure?.(signalError, attempt, retryMs);\n        try {\n          input.heartbeat?.(attempt, retryMs);\n        } catch {\n          // Heartbeat telemetry is not proof delivery and cannot replace or\n          // interrupt the exact signal retry loop.\n        }\n        await delay(retryMs);\n        retryMs = Math.min(retryMs * 2, QUIESCENCE_PROOF_SIGNAL_MAX_RETRY_MS);\n        attempt += 1;\n      }\n    }\n  }\n\n  if (receipt.workflowWake && input.deliverWorkflowWake) {\n    try {\n      await input.deliverWorkflowWake(receipt.workflowWake);\n    } catch (wakeError) {\n      // The exact revision is already durable. Immediate delivery is latency\n      // optimization only; the outbox dispatcher remains the repair path.\n      input.onWakeFailure?.(wakeError);\n    }\n  }\n  try {\n    await input.publishEvents(receipt.events);\n  } catch (publishError) {\n    // Postgres already committed quiesced_at, the queue event, and the wake.\n    // NATS is live fanout only; never misclassify its failure as receipt loss.\n    input.onPublishFailure?.(publishError);\n  }\n  return \"receipt\";\n}\n\n/**\n * Cross the non-detachable physical boundary for one dying attempt. Temporal's\n * cancellation signal is intentionally absent: cancellation is transport, not\n * proof that sandbox tools and attempt-owned credential writers have drained.\n * A replacement may be admitted only after this function resolves and the\n * caller durably persists or signals the exact quiescence receipt.\n */\nexport async function drainAttemptOwnedSandboxWriters(input: {\n  toolCancellationFence: Pick<TurnToolCancellationFence, \"cancel\" | \"waitForQuiescence\"> | null;\n  cancellationReason?: unknown;\n  gitCredentialRenewals: readonly Pick<GitCredentialRenewalController, \"stop\">[];\n  codemodeTokenRenewal: Pick<CodemodeTokenRenewalController, \"stop\"> | null;\n  runCredentialRenewal: Pick<RunCredentialRenewalController, \"stop\"> | null;\n  onStage?: (stage: \"tool_writers\" | \"credential_renewals\") => void;\n}): Promise<void> {\n  input.onStage?.(\"tool_writers\");\n  if (input.toolCancellationFence) {\n    input.toolCancellationFence.cancel(\n      input.cancellationReason ?? new Error(\"TURN_ATTEMPT_FENCED\"),\n    );\n    await input.toolCancellationFence.waitForQuiescence();\n  }\n  input.onStage?.(\"credential_renewals\");\n  await Promise.all(input.gitCredentialRenewals.map(async (renewal) => await renewal.stop()));\n  await input.codemodeTokenRenewal?.stop();\n  await input.runCredentialRenewal?.stop();\n}\n\n/** Persist the exact turn's second-stage release only after the caller has\n * crossed the physical writer boundary. This wait is intentionally independent\n * of Temporal cancellation: it is a short idempotent DB transaction that closes\n * the durable archive-capture fence. Bounded retries cover a rollout connection\n * reset without turning ordinary finalizer housekeeping into lifecycle state. */\nexport async function releaseTurnSandboxAfterWriterDrain(\n  sandbox: Pick<ResumedTurnSandbox, \"release\">,\n  options: {\n    maxAttempts?: number;\n    retryDelayMs?: number;\n    wait?: (delayMs: number) => Promise<void>;\n  } = {},\n): Promise<void> {\n  const maxAttempts = Math.max(1, options.maxAttempts ?? 3);\n  const retryDelayMs = Math.max(0, options.retryDelayMs ?? 50);\n  const wait = options.wait ?? sleep;\n  let lastError: unknown;\n  for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {\n    try {\n      await sandbox.release({ workspaceWritersQuiesced: true });\n      return;\n    } catch (error) {\n      lastError = error;\n      if (attempt < maxAttempts) {\n        await wait(retryDelayMs * attempt);\n      }\n    }\n  }\n  throw lastError;\n}\n\n/**\n * Await bounded, idempotent finalizer housekeeping only while this Temporal\n * activity still owns its execution window. A completed turn must never keep\n * heartbeating forever because a provider/tool close promise did not settle:\n * that strands every later durable prompt behind an already-terminal attempt.\n * Cancellation or the hard timeout detaches the operation with a rejection\n * handler; the operation may still finish its attempt-scoped cleanup, but it\n * cannot pin activity terminalization.\n */\nexport async function waitForTurnFinalizerStep<T>(\n  operation: Promise<T>,\n  signal: AbortSignal | undefined,\n  timeoutMs = TURN_FINALIZER_STEP_TIMEOUT_MS,\n): Promise<T | undefined> {\n  if (signal?.aborted) {\n    void operation.catch(() => undefined);\n    return undefined;\n  }\n\n  let resolveDetached: (() => void) | undefined;\n  const detached = new Promise<undefined>((resolve) => {\n    resolveDetached = () => resolve(undefined);\n  });\n  const detach = (): void => {\n    void operation.catch(() => undefined);\n    resolveDetached?.();\n  };\n  signal?.addEventListener(\"abort\", detach, { once: true });\n  const timeout = setTimeout(detach, Math.max(1, timeoutMs));\n  timeout.unref?.();\n  try {\n    return await Promise.race([operation, detached]);\n  } finally {\n    clearTimeout(timeout);\n    signal?.removeEventListener(\"abort\", detach);\n  }\n}\n\n/**\n * Flush provider-facing stream state while the attempt still owns its activity\n * window. On Pause/Steer, both promises are detached with rejection handlers:\n * neither a runtime batcher nor an uncooperative provider completion promise\n * may pin the activity behind cancellation after durable writes are fenced.\n */\nexport async function waitForTurnStreamCleanup(\n  batcherFlush: Promise<unknown>,\n  providerCompleted: Promise<unknown>,\n  signal: AbortSignal | undefined,\n): Promise<void> {\n  await waitForTurnFinalizerStep(batcherFlush, signal);\n  await waitForTurnFinalizerStep(providerCompleted, signal);\n}\n\nexport class IncompleteAgentStreamError extends Error {\n  readonly name = \"IncompleteAgentStreamError\";\n\n  constructor(message = \"Agent stream ended without a successful terminal output\") {\n    super(message);\n  }\n}\n\n/**\n * Prove that SDK completion authority did not report a failure or runtime\n * cancellation. The Agents SDK closes its ReadableStream immediately when its\n * run signal aborts, so iterator EOF is not completion authority: the separate\n * `completed` promise carries the eventual run failure.\n *\n * Only Temporal cancellation detaches cleanup. Internal runtime cancellation\n * such as a provider-deadline sandbox rotation must escape to the turn failure\n * settlement path, which checkpoints and redispatches the same logical turn.\n */\nexport async function assertSuccessfulAgentStreamCompletion(input: {\n  batcherFlush: Promise<unknown>;\n  stream: {\n    completed: Promise<void>;\n    error: unknown;\n  };\n  temporalCancellationSignal: AbortSignal | undefined;\n  runtimeCancellationSignal: AbortSignal;\n}): Promise<void> {\n  await waitForTurnStreamCleanup(\n    input.batcherFlush,\n    input.stream.completed,\n    input.temporalCancellationSignal,\n  );\n\n  if (input.runtimeCancellationSignal.aborted) {\n    throw (\n      input.runtimeCancellationSignal.reason ??\n      new IncompleteAgentStreamError(\"Agent stream was cancelled without a terminal reason\")\n    );\n  }\n  if (input.stream.error !== null && input.stream.error !== undefined) {\n    throw input.stream.error;\n  }\n}\n\n/** Call after any more-specific empty-stream recovery has had priority. */\nexport function assertAgentStreamNotCancelled(cancelled: boolean): void {\n  if (cancelled) {\n    throw new IncompleteAgentStreamError(\"Agent stream was cancelled without a terminal result\");\n  }\n}\n\n/** Interruption streams do not produce a normal final output. Call this only\n * after the interruption branch has settled any required action. A successful\n * runtime-owned input wait is a normal terminal result without assistant text;\n * its authority comes from prepared tools, never the provider's output. */\nexport function requireAgentStreamFinalOutput(\n  finalOutput: unknown | undefined,\n  inputWaitYielded = false,\n): unknown {\n  if (inputWaitYielded) return \"\";\n  if (finalOutput === undefined) {\n    throw new IncompleteAgentStreamError();\n  }\n  return finalOutput;\n}\n\n/**\n * Terminal settlement closes the active attempt before turn finalization. The\n * ordinary workspace admission therefore correctly returns `attempt_fenced`\n * for the final attempt-qualified credential deletion. Retry only that exact\n * settled-attempt case directly; every other fence/status and the direct\n * deletion itself remain fail-closed.\n */\nexport async function clearAttemptCredentialsWithSettledFence(input: {\n  activityStatus: RunAgentTurnResult[\"status\"] | \"unknown\";\n  runWorkspaceFencedClear: () => Promise<void>;\n  clearExactAttempt: () => Promise<void>;\n  onSettledAttemptFence: () => void;\n}): Promise<void> {\n  try {\n    await input.runWorkspaceFencedClear();\n  } catch (error) {\n    const settledAttemptFence =\n      error instanceof Error &&\n      error.name === \"SandboxWorkspaceMutationFencedError\" &&\n      (error as Error & { code?: unknown }).code === \"attempt_fenced\" &&\n      (input.activityStatus === \"idle\" ||\n        input.activityStatus === \"failed\" ||\n        input.activityStatus === \"cancelled\");\n    if (!settledAttemptFence) throw error;\n    input.onSettledAttemptFence();\n    await input.clearExactAttempt();\n  }\n}\n\nexport function turnFinalizerCancellationSignal(\n  temporalSignal: AbortSignal | undefined,\n  activityStatus: RunAgentTurnResult[\"status\"] | \"unknown\",\n): AbortSignal | undefined {\n  if (activityStatus !== \"cancelled\" || temporalSignal?.aborted) return temporalSignal;\n  const fenced = new AbortController();\n  fenced.abort(new Error(\"TURN_ATTEMPT_FENCED\"));\n  return fenced.signal;\n}\n\nexport type MandatoryHistoryPersistenceStage = \"history_append\" | \"sandbox_envelope\";\n\n/**\n * Preserve the exact storage failure for the permission-controlled turn event\n * while attaching only a stable, non-secret operation token to public worker\n * diagnostics. Mandatory history failures remain terminal and never inherit a\n * provider-retry classification from coincidental source text or status.\n */\nexport class MandatoryHistoryPersistenceError extends Error {\n  readonly name = \"MandatoryHistoryPersistenceError\";\n  readonly cause: unknown;\n\n  constructor(\n    readonly stage: MandatoryHistoryPersistenceStage,\n    cause: unknown,\n  ) {\n    super(cause instanceof Error ? cause.message : String(cause));\n    this.cause = cause;\n  }\n}\n\nexport async function runMandatoryHistoryPersistenceStep<T>(\n  stage: MandatoryHistoryPersistenceStage,\n  operation: () => Promise<T>,\n): Promise<T> {\n  try {\n    return await operation();\n  } catch (cause) {\n    throw new MandatoryHistoryPersistenceError(stage, cause);\n  }\n}\n\nexport type OpStreamFinalizer = {\n  finalizeOpStreamOps(): Promise<void>;\n};\n\n/** Release retained Connected Machine output only after the turn is durable. */\nexport async function finalizeDurableTurnOpStreams(\n  sessions: readonly unknown[],\n  fallback: OpStreamFinalizer | null,\n): Promise<void> {\n  const candidates = new Set<OpStreamFinalizer>();\n  for (const session of sessions) {\n    const candidate = session as Partial<OpStreamFinalizer> | null;\n    if (typeof candidate?.finalizeOpStreamOps === \"function\") {\n      candidates.add(candidate as OpStreamFinalizer);\n    }\n  }\n  if (candidates.size === 0 && fallback) {\n    candidates.add(fallback);\n  }\n  for (const candidate of candidates) {\n    try {\n      await candidate.finalizeOpStreamOps();\n    } catch {\n      // The runner's retention TTL owns the fallback.\n    }\n  }\n}\n","import { SandboxCapabilitiesChangedError } from \"./provider-dispatch-barrier\";\nimport {\n  ActiveSessionHistoryLimitExceededError,\n  ApprovalRunStateLimitExceededError,\n  nestedPostgresSqlState,\n  databaseFailureCode,\n  isRetryablePersistenceSqlState,\n  safeDatabaseErrorFacts,\n  isRetryableDatabaseTransportFailure,\n  isSessionEventPersistenceError,\n  SandboxLeaseTransitionError,\n} from \"@opengeni/db\";\nimport {\n  ActiveBackendUnresolvableError,\n  CompactionProviderResponseError,\n  EmptyCompactionSummaryError,\n  compactionProviderRejection,\n  describeCompactionProviderRejection,\n  type CompactionProviderRejection,\n  isMcpRequestTimeoutError,\n  isMcpTransportConnectivityError,\n  isModalTaskExecStartPreDispatchUnavailableError,\n  isModalCommandStartOutcomeUnknownError,\n  isRoutingMutationOutcomeUnknownError,\n  RoutingWorkspaceRootChangedError,\n  ResponsesStreamingTerminalError,\n  SandboxMaterializationVerificationError,\n  materializationVerificationDiagnostic,\n  type MaterializationVerificationDiagnostic,\n  PROVIDER_QUOTA_EXHAUSTED_CODE,\n  type ProviderQuotaExhaustion,\n  type ProviderQuotaScope,\n  classifyProviderQuotaError,\n  providerQuotaExhaustedMessage,\n  SelfhostedWorkspaceRootChangedError,\n  UNKNOWN_MODEL_FINISH_REASON_CODE,\n} from \"@opengeni/runtime\";\nimport {\n  mcpTransportRequestFailureDiagnostic,\n  type McpTransportRequestFailureDiagnostic,\n} from \"@opengeni/runtime/mcp-network\";\nimport { ApplicationFailure, CancelledFailure } from \"@temporalio/activity\";\nimport { CODEX_USAGE_EXHAUSTED_PCT } from \"../codex-rotation\";\nimport { RetainedAttachmentTransportLimitError } from \"../run-input\";\nimport type { CodexAccountStatus } from \"@opengeni/db\";\nimport {\n  CODEX_USAGE_LIMIT_ERROR_TYPE,\n  CodexReloginRequired,\n  classifyCodexEncryptedArtifactRejection,\n  classifyCodexEntitlementRejection,\n  classifyCodexResponseTimeoutError,\n  classifyCodexUsageLimitError,\n  isCodexTransportError,\n} from \"@opengeni/codex\";\nimport {\n  CodexPlanEntitlementError,\n  codexPlanEntitlementFailurePayload,\n  codexRequestRejectedFailurePayload,\n} from \"./codex-plan-entitlement\";\nimport {\n  classifyXaiSubscriptionStreamingTerminalError,\n  classifyXaiSubscriptionStreamIdleTimeoutError,\n  isXaiSubscriptionHostedToolContinuationError,\n  isXaiSubscriptionRateLimitDiagnostic,\n  isXaiSubscriptionTransportError,\n  XaiSubscriptionReloginRequired,\n} from \"@opengeni/xai-subscription\";\nimport type {\n  EscapedMcpTimeoutRecoveryDetail,\n  PostClaimDatabaseRecoveryDetail,\n  PreClaimFailureDetail,\n} from \"../types\";\nimport {\n  ESCAPED_MCP_TIMEOUT_RECOVERY_FAILURE_MESSAGE,\n  ESCAPED_MCP_TIMEOUT_RECOVERY_FAILURE_TYPE,\n  POST_CLAIM_DATABASE_RECOVERY_FAILURE_MESSAGE,\n  POST_CLAIM_DATABASE_RECOVERY_FAILURE_TYPE,\n  PRE_CLAIM_FAILURE_MESSAGE,\n  PRE_CLAIM_FAILURE_TYPE,\n} from \"../types\";\nimport {\n  MandatoryHistoryPersistenceError,\n  type MandatoryHistoryPersistenceStage,\n} from \"./quiescence\";\n\n// Retryable provider connectivity/5xx failures start quickly and back off to\n// this ceiling. Explicit rate limits retain the minute-granular fallback.\nexport const PROVIDER_BACKPRESSURE_DELAY_MS = 60_000;\nexport const PROVIDER_CONNECTIVITY_BACKOFF_MS = [2_000, 5_000, 15_000, 30_000, 60_000] as const;\nexport const MAX_AUTOMATIC_PROVIDER_RECOVERIES = PROVIDER_CONNECTIVITY_BACKOFF_MS.length;\n/**\n * Minimum wait per rate-limited recovery. Providers such as Azure OpenAI often\n * answer a per-minute token limit with a `retry-after` of about a second, which\n * alone would spend every automatic recovery before the window resets.\n */\nexport const PROVIDER_RATE_LIMIT_BACKOFF_MS = [10_000, 20_000, 40_000, 60_000, 120_000] as const;\nexport const POST_COMPACTION_CONTINUATION_EMPTY_CODE = \"post_compaction_continuation_empty\";\n\nexport class PostCompactionContinuationEmptyError extends Error {\n  readonly code = POST_COMPACTION_CONTINUATION_EMPTY_CODE;\n\n  constructor() {\n    super(\"Post-compaction continuation stream ended before a terminal model response\");\n    this.name = \"PostCompactionContinuationEmptyError\";\n  }\n}\n\nexport type ProviderRecoveryResult =\n  | {\n      status: \"recovering\";\n      continueDelayMs: number;\n    }\n  | {\n      status: \"exhausted\";\n      providerRecoveryCount: number;\n      maxProviderRecoveryCount: number;\n    };\n\nexport function providerRecoveryResult(input: {\n  failureCode: string | undefined;\n  attemptNumber: number;\n  retryAfterMs?: number | null;\n}): ProviderRecoveryResult {\n  if (input.attemptNumber > MAX_AUTOMATIC_PROVIDER_RECOVERIES) {\n    return {\n      status: \"exhausted\",\n      providerRecoveryCount: MAX_AUTOMATIC_PROVIDER_RECOVERIES,\n      maxProviderRecoveryCount: MAX_AUTOMATIC_PROVIDER_RECOVERIES,\n    };\n  }\n  const providerDelay =\n    input.retryAfterMs !== null &&\n    input.retryAfterMs !== undefined &&\n    Number.isFinite(input.retryAfterMs) &&\n    input.retryAfterMs > 0\n      ? Math.ceil(input.retryAfterMs)\n      : null;\n  const continueDelayMs =\n    input.failureCode === \"provider_rate_limited\"\n      ? Math.max(\n          providerDelay ?? PROVIDER_BACKPRESSURE_DELAY_MS,\n          PROVIDER_RATE_LIMIT_BACKOFF_MS[\n            Math.min(\n              Math.max(Math.trunc(input.attemptNumber) - 1, 0),\n              PROVIDER_RATE_LIMIT_BACKOFF_MS.length - 1,\n            )\n          ]!,\n        )\n      : input.failureCode === \"provider_unavailable\" ||\n          input.failureCode === \"upstream_connectivity_unavailable\" ||\n          input.failureCode === \"sandbox_command_start_unavailable\" ||\n          input.failureCode === \"mcp_transport_timeout\" ||\n          input.failureCode === \"mcp_transport_unavailable\" ||\n          input.failureCode === \"turn_execution_policy_definition_mismatch\" ||\n          input.failureCode === POST_COMPACTION_CONTINUATION_EMPTY_CODE\n        ? Math.max(\n            providerDelay ?? 0,\n            PROVIDER_CONNECTIVITY_BACKOFF_MS[\n              Math.min(\n                Math.max(Math.trunc(input.attemptNumber) - 1, 0),\n                PROVIDER_CONNECTIVITY_BACKOFF_MS.length - 1,\n              )\n            ]!,\n          )\n        : PROVIDER_BACKPRESSURE_DELAY_MS;\n  return {\n    status: \"recovering\",\n    continueDelayMs,\n  };\n}\n\nexport function providerRecoveryExhaustedFailure<\n  T extends Record<string, unknown> & { error: string },\n>(\n  failure: T,\n  recovery: Extract<ProviderRecoveryResult, { status: \"exhausted\" }>,\n): T & {\n  retryable: false;\n  recoveryExhausted: true;\n  providerRecoveryCount: number;\n  maxProviderRecoveryCount: number;\n  lastRetryableError: string;\n} {\n  return {\n    ...failure,\n    error: `Automatic same-turn recovery stopped after ${recovery.providerRecoveryCount} retries because the upstream dependency remained unavailable. Send a new message to retry after the dependency recovers.`,\n    retryable: false,\n    recoveryExhausted: true,\n    providerRecoveryCount: recovery.providerRecoveryCount,\n    maxProviderRecoveryCount: recovery.maxProviderRecoveryCount,\n    lastRetryableError: failure.error,\n  };\n}\n\nexport function providerRecoveryCountFromMetadata(metadata: Record<string, unknown>): number {\n  const value = metadata.providerRecoveryCount;\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0 ? value : 0;\n}\n\nexport function providerRecoveryCountAfterModelRequestPhase(\n  currentCount: number,\n  phase: string,\n): number {\n  return phase === \"completed\" ? 0 : currentCount;\n}\n\nexport function headerValue(headers: unknown, name: string): string | null {\n  if (!headers || typeof headers !== \"object\") return null;\n  const getter = (headers as { get?: unknown }).get;\n  if (typeof getter === \"function\") {\n    const value = getter.call(headers, name);\n    return typeof value === \"string\" ? value : null;\n  }\n  const target = name.toLowerCase();\n  const entry = Object.entries(headers as Record<string, unknown>).find(\n    ([key, value]) => key.toLowerCase() === target && typeof value === \"string\",\n  );\n  return typeof entry?.[1] === \"string\" ? entry[1] : null;\n}\n\n/** Read a provider Retry-After hint without retaining response headers/body. */\nexport function providerRetryAfterMs(error: unknown, nowMs = Date.now()): number | null {\n  let current: unknown = error;\n  for (let depth = 0; depth < 6 && current && typeof current === \"object\"; depth += 1) {\n    const value = current as Record<string, unknown>;\n    const body =\n      value.error && typeof value.error === \"object\"\n        ? (value.error as Record<string, unknown>)\n        : null;\n    const directSeconds = Number(\n      value.retry_after_seconds ?? body?.retry_after_seconds ?? value.retryAfterSeconds,\n    );\n    const header =\n      headerValue(value.headers, \"retry-after\") ??\n      headerValue(value.responseHeaders, \"retry-after\") ??\n      headerValue(body?.headers, \"retry-after\");\n    const headerSeconds = header === null ? Number.NaN : Number(header);\n    const headerDate =\n      header !== null && !Number.isFinite(headerSeconds) ? Date.parse(header) : Number.NaN;\n    const seconds = Number.isFinite(directSeconds)\n      ? directSeconds\n      : Number.isFinite(headerSeconds)\n        ? headerSeconds\n        : Number.isFinite(headerDate)\n          ? Math.max(0, (headerDate - nowMs) / 1_000)\n          : Number.NaN;\n    if (Number.isFinite(seconds) && seconds > 0) return Math.ceil(seconds * 1_000);\n    current = value.cause;\n  }\n  return null;\n}\n\n/**\n * Tell the model when durable MCP policy references are unavailable for this\n * exact turn. The policy projection already bounds and validates these ids;\n * this notice prevents a graceful runtime drop from becoming a silent source-\n * of-truth substitution or a false claim that the disconnected system was read.\n */\nexport function unavailableMcpOperationalContext(input: {\n  droppedIds: readonly string[];\n  droppedCount: number;\n}): string | undefined {\n  if (input.droppedCount <= 0) {\n    return undefined;\n  }\n  const omittedCount = Math.max(0, input.droppedCount - input.droppedIds.length);\n  const listed = input.droppedIds.map((id) => `\"${id}\"`).join(\", \");\n  const inventory = listed\n    ? `${listed}${omittedCount > 0 ? `, plus ${omittedCount} additional unavailable server(s)` : \"\"}`\n    : `${input.droppedCount} unavailable server(s)`;\n  return `MCP capability availability for this turn: the following session-selected server(s) are disconnected or no longer registered and were skipped: ${inventory}. Do not claim to have read or updated those systems. If the task depends on one as a source of truth, explain the limitation and ask the user to reconnect it or select another authoritative source; continue with unaffected work only when safe.`;\n}\n\n/**\n * Preserve one precise recovery obligation across Temporal's activity boundary.\n * This is intentionally narrower than the ordinary retryable-provider path:\n * only a recovered turn (generation > 1) whose MCP timeout happened before a\n * model request may ask the workflow's DB-only control activity to finish the\n * same-turn checkpoint. The original transport/recovery errors are excluded\n * from details so raw MCP response data can never enter workflow history.\n */\nexport function escapedMcpTimeoutRecoveryFailure(input: {\n  failureCode: string | undefined;\n  modelRequestStarted: boolean;\n  detail: EscapedMcpTimeoutRecoveryDetail;\n}): ApplicationFailure | null {\n  if (\n    input.failureCode !== \"mcp_transport_timeout\" ||\n    input.modelRequestStarted ||\n    !Number.isSafeInteger(input.detail.executionGeneration) ||\n    input.detail.executionGeneration <= 1 ||\n    !Number.isSafeInteger(input.detail.providerRecoveryCount) ||\n    input.detail.providerRecoveryCount <= 0 ||\n    input.detail.providerRecoveryCount > MAX_AUTOMATIC_PROVIDER_RECOVERIES ||\n    !Number.isSafeInteger(input.detail.continueDelayMs) ||\n    input.detail.continueDelayMs <= 0\n  ) {\n    return null;\n  }\n  return ApplicationFailure.create({\n    message: ESCAPED_MCP_TIMEOUT_RECOVERY_FAILURE_MESSAGE,\n    type: ESCAPED_MCP_TIMEOUT_RECOVERY_FAILURE_TYPE,\n    nonRetryable: true,\n    details: [input.detail],\n  });\n}\n\n/**\n * Convert the atomic claim transaction's failure into a small, stable\n * Temporal wire contract. The original error remains in activity diagnostics,\n * but SQL text, parameters, and arbitrary invariant messages never enter\n * workflow history. Operational failures retry; other persistence rejections\n * retain accepted work behind a durable explicit-recheck fence. Repeating the\n * same rejected transaction without changed conditions is not recovery.\n */\nexport function preClaimAdmissionFailure(error: unknown): ApplicationFailure {\n  const persistenceFailure = isSessionEventPersistenceError(error) ? error : null;\n  const retryableCode = retryableDatabaseFailureCode(error);\n  const rejectedClaim =\n    persistenceFailure?.details.stage === \"session_attempts.claim\" &&\n    persistenceFailure.details.retryOutcome === \"not_retryable\" &&\n    !retryableCode;\n  const detail: PreClaimFailureDetail = {\n    disposition: rejectedClaim\n      ? \"blocked\"\n      : persistenceFailure || retryableCode\n        ? \"retryable\"\n        : \"permanent\",\n    code: retryableCode ?? persistenceFailure?.details.code ?? \"claim_invariant\",\n    ...(persistenceFailure && rejectedClaim\n      ? {\n          sqlState: persistenceFailure.details.sqlState,\n          reason:\n            persistenceFailure.details.stage === \"session_attempts.claim\" &&\n            persistenceFailure.details.sqlState === \"OG001\"\n              ? (\"initiator_membership_required\" as const)\n              : persistenceFailure.details.stage === \"session_attempts.claim\" &&\n                  persistenceFailure.details.sqlState === \"OG002\"\n                ? (\"personal_resource_grant_required\" as const)\n                : (\"database_claim_rejected\" as const),\n          retryPolicy: \"explicit_recheck\" as const,\n        }\n      : {}),\n  };\n  return ApplicationFailure.create({\n    message: PRE_CLAIM_FAILURE_MESSAGE,\n    type: PRE_CLAIM_FAILURE_TYPE,\n    nonRetryable: true,\n    details: [detail],\n  });\n}\n\nfunction retryableDatabaseFailureCode(\n  error: unknown,\n): PostClaimDatabaseRecoveryDetail[\"code\"] | null {\n  const persistenceFailure = isSessionEventPersistenceError(error) ? error : null;\n  if (!persistenceFailure) {\n    const driver = findPostgresDriverError(error);\n    const driverSqlState = typeof driver?.code === \"string\" ? driver.code : null;\n    if (isRetryablePersistenceSqlState(driverSqlState)) {\n      return databaseFailureCode(driverSqlState);\n    }\n  }\n  const sqlState = persistenceFailure?.details.sqlState ?? null;\n  if (sqlState === null && isRetryableDatabaseTransportFailure(error)) {\n    return \"db_failure\";\n  }\n  if (\n    !persistenceFailure ||\n    !(\n      sqlState === null ||\n      sqlState.startsWith(\"08\") ||\n      sqlState.startsWith(\"40\") ||\n      sqlState.startsWith(\"53\") ||\n      sqlState === \"55P03\" ||\n      sqlState === \"57014\" ||\n      sqlState === \"57P01\" ||\n      sqlState === \"57P02\" ||\n      sqlState === \"57P03\" ||\n      sqlState.startsWith(\"58\")\n    )\n  ) {\n    return null;\n  }\n  return persistenceFailure.details.code;\n}\n\n/**\n * Carry one exact claimed-but-not-started attempt into the workflow's DB-only\n * recovery lane. Permanent database/state failures remain terminal; only the\n * same operational outage classes that are safe before claim are admitted.\n */\nexport function postClaimDatabaseRecoveryFailure(input: {\n  error: unknown;\n  turnId: string;\n  triggerEventId: string;\n  executionGeneration: number;\n  sandboxSetupOutcomeUnknown?: true;\n  providerRecovery?: {\n    failureCode: string;\n    providerRecoveryCount: number;\n  };\n}): ApplicationFailure | null {\n  const code = retryableDatabaseFailureCode(input.error);\n  if (!code || input.executionGeneration < 1) return null;\n  if (input.sandboxSetupOutcomeUnknown && input.providerRecovery) return null;\n  if (\n    input.providerRecovery &&\n    (!Number.isSafeInteger(input.providerRecovery.providerRecoveryCount) ||\n      input.providerRecovery.providerRecoveryCount <= 0 ||\n      input.providerRecovery.providerRecoveryCount > MAX_AUTOMATIC_PROVIDER_RECOVERIES ||\n      !/^[a-z][a-z0-9_]{0,63}$/.test(input.providerRecovery.failureCode))\n  ) {\n    return null;\n  }\n  const detail: PostClaimDatabaseRecoveryDetail = {\n    turnId: input.turnId,\n    triggerEventId: input.triggerEventId,\n    executionGeneration: input.executionGeneration,\n    code,\n    ...(input.sandboxSetupOutcomeUnknown ? { sandboxSetupOutcomeUnknown: true } : {}),\n    ...(input.providerRecovery\n      ? {\n          providerFailureCode: input.providerRecovery.failureCode,\n          providerRecoveryCount: input.providerRecovery.providerRecoveryCount,\n        }\n      : {}),\n  };\n  return ApplicationFailure.create({\n    message: POST_CLAIM_DATABASE_RECOVERY_FAILURE_MESSAGE,\n    type: POST_CLAIM_DATABASE_RECOVERY_FAILURE_TYPE,\n    nonRetryable: true,\n    details: [detail],\n  });\n}\n\n/**\n * Resolve which Codex account a turn runs on (multi-account P1): session-pin >\n * workspace-active. No rotation in P1. The selected id must still be in the\n * connected set — a disconnected pin was FK-nulled, so a stale id can't appear,\n * but we guard anyway. Returns null when there is no usable account (the turn\n * then fails with the existing relogin error path).\n */\nexport function isWorkerShutdownCancellation(error: unknown): boolean {\n  return error instanceof CancelledFailure && error.message === \"WORKER_SHUTDOWN\";\n}\n\nexport type SandboxLifecycleTransitionDiagnostic = {\n  sandboxGroupId: string;\n  leaseEpoch: number;\n  reason: \"capture_in_progress\" | \"rotation_in_progress\" | \"provider_recovery_in_progress\";\n};\n\n/**\n * Recover a typed sandbox lifecycle transition through the structural wrappers\n * used by parallel Agents SDK function-tool execution. Never infer transition\n * truth from message text: only the original class or an exact, fully-shaped\n * cross-package error object is accepted.\n */\nexport function sandboxLifecycleTransitionDiagnostic(\n  error: unknown,\n): SandboxLifecycleTransitionDiagnostic | null {\n  const pending: unknown[] = [error];\n  const seen = new WeakSet<object>();\n  let inspected = 0;\n\n  while (pending.length > 0 && inspected < 64) {\n    const current = pending.shift();\n    inspected += 1;\n    if (!current || typeof current !== \"object\" || seen.has(current)) continue;\n    seen.add(current);\n\n    try {\n      const record = current as Record<string, unknown>;\n      const reason = record.reason;\n      if (\n        (current instanceof SandboxLeaseTransitionError ||\n          record.name === \"SandboxLeaseTransitionError\") &&\n        typeof record.sandboxGroupId === \"string\" &&\n        record.sandboxGroupId.length > 0 &&\n        typeof record.leaseEpoch === \"number\" &&\n        Number.isSafeInteger(record.leaseEpoch) &&\n        record.leaseEpoch >= 0 &&\n        (reason === \"capture_in_progress\" ||\n          reason === \"rotation_in_progress\" ||\n          reason === \"provider_recovery_in_progress\")\n      ) {\n        return {\n          sandboxGroupId: record.sandboxGroupId,\n          leaseEpoch: record.leaseEpoch,\n          reason,\n        };\n      }\n\n      for (const key of [\"cause\", \"error\"] as const) {\n        const nested = record[key];\n        if (nested && typeof nested === \"object\") pending.push(nested);\n      }\n      if (Array.isArray(record.errors)) pending.push(...record.errors.slice(0, 32));\n    } catch {\n      // A hostile proxy or getter is not durable lifecycle evidence.\n    }\n  }\n\n  return null;\n}\n\n/**\n * Recognize active-route transitions that cannot finish inside their\n * originating attempt. A Modal-home session may start on a Connected Machine\n * without creating or leasing its managed home box. When an explicit attach\n * clears the active pointer back to home, the pointer commit is authoritative,\n * but this attempt has no home session to serve the next sandbox operation.\n *\n * The Agents SDK may retain the typed routing error directly, through `cause`,\n * or inside an AggregateError from a parallel function-tool batch. Traverse\n * only those structural error links with a strict bound; never classify from\n * message text, which could originate in model or tool content.\n */\nexport function sandboxRouteTransitionCode(\n  error: unknown,\n):\n  | \"home_unavailable_this_turn\"\n  | \"workspace_root_changed_this_turn\"\n  | \"native_capabilities_changed_this_attempt\"\n  | null {\n  const pending: unknown[] = [error];\n  const seen = new WeakSet<object>();\n  let inspected = 0;\n\n  while (pending.length > 0 && inspected < 64) {\n    const current = pending.shift();\n    inspected += 1;\n    if (!current || typeof current !== \"object\" || seen.has(current)) continue;\n    seen.add(current);\n\n    try {\n      const record = current as Record<string, unknown>;\n      if (\n        (current instanceof SandboxCapabilitiesChangedError ||\n          record.name === \"SandboxCapabilitiesChangedError\") &&\n        record.code === \"native_capabilities_changed_this_attempt\"\n      ) {\n        return \"native_capabilities_changed_this_attempt\";\n      }\n      if (\n        (current instanceof ActiveBackendUnresolvableError ||\n          record.name === \"ActiveBackendUnresolvableError\") &&\n        record.code === \"home_unavailable_this_turn\"\n      ) {\n        return \"home_unavailable_this_turn\";\n      }\n      if (\n        current instanceof RoutingWorkspaceRootChangedError ||\n        current instanceof SelfhostedWorkspaceRootChangedError ||\n        record.name === \"RoutingWorkspaceRootChangedError\" ||\n        record.name === \"SelfhostedWorkspaceRootChangedError\"\n      ) {\n        return \"workspace_root_changed_this_turn\";\n      }\n\n      for (const key of [\"cause\", \"error\"] as const) {\n        const nested = record[key];\n        if (nested && typeof nested === \"object\") pending.push(nested);\n      }\n      if (Array.isArray(record.errors)) {\n        pending.push(...record.errors.slice(0, 32));\n      }\n    } catch {\n      // A hostile proxy or getter is not a route-transition proof.\n    }\n  }\n\n  return null;\n}\n\nexport function isSandboxRouteTransitionError(error: unknown): boolean {\n  return sandboxRouteTransitionCode(error) !== null;\n}\n\n/** Backward-compatible name for callers/tests that only exercised the original\n * machine-to-home transition. */\nexport function isHomeSandboxTurnTransitionError(error: unknown): boolean {\n  return sandboxRouteTransitionCode(error) === \"home_unavailable_this_turn\";\n}\n\n/**\n * Review captures and protective snapshots are cache/persistence housekeeping,\n * never part of cancellation correctness. A control-fenced or Temporal-cancelled\n * attempt must release its physical activity promptly so Steer/Pause can advance.\n */\nexport function compactionFailureReason(reason: string): string {\n  return reason.startsWith(\"compaction summarization failed:\")\n    ? reason\n    : `compaction summarization failed: ${reason}`;\n}\n\nexport type SafeErrorDiagnostic = {\n  errorClass: \"WorkerOperationError\";\n  errorCode: \"worker_operation_failed\";\n  status?: number;\n  origin: \"worker\";\n  historyPersistenceStage?: MandatoryHistoryPersistenceStage;\n};\n\n/**\n * Produce the only exception shape allowed in worker logs. It deliberately\n * excludes the arbitrary source message, stack, cause, response/request\n * bodies, and enumerable properties. Exact failure content belongs in the\n * permission-controlled session event, not stdout or telemetry.\n */\nexport function safeErrorDiagnostic(error: unknown): SafeErrorDiagnostic {\n  const diagnostic: SafeErrorDiagnostic = {\n    errorClass: \"WorkerOperationError\",\n    errorCode: \"worker_operation_failed\",\n    origin: \"worker\",\n  };\n  try {\n    let statusSource = error;\n    if (error instanceof MandatoryHistoryPersistenceError) {\n      diagnostic.historyPersistenceStage = error.stage;\n      statusSource = error.cause;\n    }\n    if (statusSource && typeof statusSource === \"object\") {\n      const status = Number(\n        (statusSource as { status?: unknown; statusCode?: unknown }).status ??\n          (statusSource as { statusCode?: unknown }).statusCode,\n      );\n      if (Number.isInteger(status) && status >= 100 && status <= 599) {\n        diagnostic.status = status;\n      }\n    }\n  } catch {\n    // Public diagnostics are best-effort and must never replace the exact\n    // internal worker failure.\n  }\n  return diagnostic;\n}\n\nexport function safeErrorForTelemetry(error: unknown): Error {\n  const diagnostic = safeErrorDiagnostic(error);\n  const safe = new Error(\"worker operation failed\") as Error & {\n    code?: string;\n    status?: number;\n    origin?: string;\n  };\n  safe.name = \"WorkerOperationError\";\n  safe.code = diagnostic.errorCode;\n  if (diagnostic.status !== undefined) safe.status = diagnostic.status;\n  safe.origin = diagnostic.origin;\n  return safe;\n}\n\n/**\n * Guidance appended to a definitive provider rejection. Repeating the exact\n * request cannot succeed, so the generic \"send another message to retry\"\n * advice is wrong here: a new prompt re-sends the same rejected history.\n */\nexport const COMPACTION_PROVIDER_REJECTION_GUIDANCE =\n  \"The provider refused this exact request, so repeating it fails the same way until the conversation changes. If a new message fails again, start a new session.\";\n\nexport function compactionFailureReasonFromError(error: unknown): string {\n  const rejection = compactionProviderRejection(error);\n  if (rejection) {\n    return compactionFailureReason(\n      `the model provider rejected the compaction request (${describeCompactionProviderRejection(rejection)}). Active history was preserved. ${COMPACTION_PROVIDER_REJECTION_GUIDANCE}`,\n    );\n  }\n  // An exhausted provider quota is not retried (see agentRunFailurePayload),\n  // so name the refusal plainly instead of the raw diagnostic envelope.\n  const quota = classifyProviderQuotaExhaustionError(error);\n  if (quota) {\n    return compactionFailureReason(\n      `${providerQuotaExhaustedMessage(quota.scope)} Active history was preserved.`,\n    );\n  }\n  if (\n    error instanceof CompactionProviderResponseError ||\n    error instanceof EmptyCompactionSummaryError\n  ) {\n    return compactionFailureReason(error.message);\n  }\n  const errorName = error instanceof Error && error.name ? error.name : \"unknown error\";\n  return compactionFailureReason(`unexpected ${errorName}`);\n}\n\n/**\n * Exact `turn.failed` payload for a terminal compaction failure. A definitive\n * provider rejection additionally carries its closed identifier record so the\n * timeline, API consumers, and operators can name the rejected field without\n * parsing the message.\n */\nexport function compactionFailureTurnEventPayload(\n  error: unknown,\n  overrides: { error?: string } = {},\n): {\n  error: string;\n  code: \"context_compaction_failed\";\n  retryable: false;\n  recovery: \"user_message\";\n  compacted: false;\n  providerRejection?: CompactionProviderRejection;\n  quotaScope?: ProviderQuotaScope;\n} {\n  const rejection = compactionProviderRejection(error);\n  // The same closed marker as a `provider_quota_exhausted` turn failure, so\n  // clients can name the exhausted limit and offer another model here too.\n  const quota = rejection ? null : classifyProviderQuotaExhaustionError(error);\n  return {\n    error: overrides.error ?? compactionFailureReasonFromError(error),\n    code: \"context_compaction_failed\",\n    retryable: false,\n    recovery: \"user_message\",\n    compacted: false,\n    ...(rejection ? { providerRejection: rejection } : {}),\n    ...(quota ? { quotaScope: quota.scope } : {}),\n  };\n}\n\nexport function isCompactionSummaryFailure(error: unknown): boolean {\n  return (\n    error instanceof CompactionProviderResponseError || error instanceof EmptyCompactionSummaryError\n  );\n}\n\nexport function shouldRecoverCompactionProviderFailure(error: unknown): boolean {\n  if (!(error instanceof CompactionProviderResponseError)) return false;\n  if (isCodexTransportError(error) && classifyCodexUsageLimitError(error)) return true;\n  // Codex may reject an opaque artifact it minted itself on the compaction\n  // request exactly as it can on an ordinary request. Failure settlement\n  // invalidates only the exact participating artifacts and recovers the same\n  // logical turn; when nothing can be invalidated it fails closed there.\n  if (classifyCodexEncryptedArtifactRejection(error)) return true;\n  // A ChatGPT plan that no longer includes the model refuses the compaction\n  // request exactly as it refuses an ordinary one (often with an empty 400).\n  // Failure settlement re-checks the plan and, when it proves the loss,\n  // excludes that account for the model and fails the same turn over; an\n  // unexplained rejection still fails there with typed copy.\n  if (classifyCodexEntitlementRejection(error)) return true;\n  return agentRunFailurePayload(error).retryable === true;\n}\n\nexport function classifyContextWindowOverflowError(\n  error: unknown,\n): { message: string; code?: string; detail?: string } | null {\n  if (isProviderSafetyRefusal(error)) return null;\n  const fields = collectErrorStrings(error);\n  const matched = fields.find(\n    (value) =>\n      /context[_\\s-]*length[_\\s-]*exceeded/i.test(value) ||\n      /exceeds?\\s+(?:the\\s+)?context\\s+window/i.test(value) ||\n      /maximum\\s+context\\s+length/i.test(value) ||\n      /context\\s+window[^.]*exceed/i.test(value),\n  );\n  if (!matched) {\n    return null;\n  }\n  const message = error instanceof Error ? error.message : String(error);\n  const code = fields.find((value) => /context[_\\s-]*length[_\\s-]*exceeded/i.test(value));\n  return {\n    message,\n    ...(code ? { code } : {}),\n    ...(matched && matched !== message ? { detail: matched } : {}),\n  };\n}\n\n/**\n * Recognize an MCP transport/request timeout that escaped the SDK's per-tool\n * `mcpConfig.errorFunction` boundary. A thrown tool invocation is normally\n * converted to an `{isError:true}` tool output; however, connect/tools-list or\n * next-loop transport work can reject the stream iterator after a prior tool\n * output was already published. That is transient external backpressure, not a\n * terminal session error. Match MCP-qualified timeout text only: an unrelated\n * sandbox/model timeout and MCP's application-defined Authentication required signal must\n * retain their existing semantics.\n */\nexport function classifyMcpTransportTimeoutError(\n  error: unknown,\n): { message: string; detail?: string } | null {\n  const fields = collectErrorStrings(error);\n  const matchedText = fields.find(\n    (value) =>\n      /\\bmcp\\b/i.test(value) &&\n      /(?:request\\s+timed\\s+out|request\\s+timeout|\\btimed\\s+out\\b|\\btimeout\\b|ETIMEDOUT)/i.test(\n        value,\n      ) &&\n      !/authentication\\s+required/i.test(value),\n  );\n  const sanitizedSdkTimeout = isMcpRequestTimeoutError(error);\n  if (!matchedText && !sanitizedSdkTimeout) {\n    return null;\n  }\n  const message = error instanceof Error ? error.message : String(error);\n  const matched = matchedText ?? fields.find((value) => /\\bmcp\\b/i.test(value));\n  return {\n    message,\n    ...(matched && matched !== message ? { detail: matched } : {}),\n  };\n}\n\nexport function collectErrorStrings(value: unknown, seen = new WeakSet<object>()): string[] {\n  if (typeof value === \"string\") {\n    return [value];\n  }\n  if (!value || typeof value !== \"object\") {\n    return [];\n  }\n  if (seen.has(value)) {\n    return [];\n  }\n  seen.add(value);\n  const out: string[] = [];\n  // This diagnostic is already provider-owned and byte-bounded. Do not widen\n  // generic detail traversal to arbitrary application payloads.\n  if (value instanceof ResponsesStreamingTerminalError) out.push(value.detail);\n  const record = value as Record<string, unknown>;\n  for (const key of [\"message\", \"code\", \"type\", \"name\", \"param\"]) {\n    const field = record[key];\n    if (typeof field === \"string\" && field.length > 0) {\n      out.push(field);\n    }\n  }\n  for (const key of [\"error\", \"cause\", \"response\", \"data\"]) {\n    out.push(...collectErrorStrings(record[key], seen));\n  }\n  return out;\n}\n\n/**\n * Compute the conversation-truth rows a reconcile pass should append, given the\n * SDK's current `state.history` and the count already persisted.\n *\n * `state.history` is a computed getter that runs the SDK's orphan-tool-call\n * pruning on every access, so it is non-monotonic: a `function_call` with no\n * settling result yet is transiently absent and a later access yields a\n * different, possibly shorter/reordered list. The old code sliced this list by\n * a blind length watermark and appended at fixed positions with\n * onConflictDoNothing, which could freeze a position with one shape and later\n * persist a `function_call_result` whose `function_call` had been pruned away in\n * an earlier slice — the orphaned tool output that 400s the Responses API and\n * bricks the session on every replay.\n *\n * Defending: structurally repair the full current history into an API-valid sequence (the\n * same pure rules the read path uses), then append only the new tail beyond the\n * watermark. A trailing dangling call is dropped here and re-evaluated next\n * pass once its result lands, so a call and its result are written together at\n * consecutive positions and a result is never persisted without its call. The\n * watermark advances to the repaired length — never past anything unwritten —\n * so a non-monotonic history can never desync it. When previously-persisted\n * rows already exceed the repaired length (e.g. legacy orphans written before\n * this fix), nothing new is appended and the watermark holds steady.\n */\n/**\n * Stable+unique usage source key for one model call, used to build the per-call\n * idempotency key (`usage:model.tokens:${turnId}:${sourceKey}`). The turnId is\n * shared across a new attempt of the SAME turn (recovery, approval\n * rerun, activity retry), so the sourceKey alone must distinguish calls.\n *\n * - A provider responseId is globally stable+unique, so reuse it verbatim: a\n *   true activity retry that re-emits the same responseId correctly DEDUPES\n *   (one charge), while two distinct calls get distinct ids.\n * - Without a responseId the old synthesized key was only POSITIONAL (\"response-1\",\n *   \"aggregate\"), which collides across a re-dispatch — dispatch B's first\n *   call reuses dispatch A's \"response-1\" key and its charge is silently\n *   dropped (undercharge). Qualifying the synthesized key with the\n *   per-execution dispatch id (the Temporal activityId, unique per scheduled\n *   execution) makes re-dispatched calls distinct while still deduping a\n *   same-execution retry.\n */\nexport const STATUSLESS_UPSTREAM_CONNECTIVITY_MESSAGE =\n  \"unable to connect. is the computer able to access the url?\";\n\nexport function isExactStatuslessUpstreamConnectivityMessage(message: string): boolean {\n  return message.trim().toLowerCase() === STATUSLESS_UPSTREAM_CONNECTIVITY_MESSAGE;\n}\n\nfunction providerSafetyRefusalDiagnostic(error: unknown): string | undefined {\n  if (error instanceof ResponsesStreamingTerminalError) {\n    return error.category === \"safety\" ? error.detail : undefined;\n  }\n  return collectErrorStrings(error).find(\n    (value) =>\n      /^(?:content_policy_violation|content_filter|safety_violation|bio_policy|cyber_policy)$/.test(\n        value,\n      ) || /\\bthis request was blocked by our safety systems\\b/i.test(value),\n  );\n}\n\nfunction isProviderSafetyRefusal(error: unknown): boolean {\n  return providerSafetyRefusalDiagnostic(error) !== undefined;\n}\n\nexport function isTransientProviderError(error: unknown): boolean {\n  if (error instanceof ResponsesStreamingTerminalError) {\n    return error.category === \"unavailable\";\n  }\n  // A semantic refusal can arrive inside a 5xx transport envelope.\n  if (isProviderSafetyRefusal(error)) return false;\n  const status =\n    typeof error === \"object\" && error !== null\n      ? Number(\n          (error as { status?: unknown; statusCode?: unknown }).status ??\n            (error as { statusCode?: unknown }).statusCode,\n        )\n      : undefined;\n  // A real HTTP status is AUTHORITATIVE: a 5xx is transient, and ANY other status\n  // (4xx validation/auth/404, plus the 429 the earlier branches already handled) is\n  // a request fault that must NOT auto-retry — even if its body happens to read like\n  // \"connection error\" or \"overloaded\". The code/message heuristics below apply ONLY\n  // when no status survived: a network fault or an SDK-rethrown bare Error.\n  if (status !== undefined && Number.isFinite(status)) {\n    return status >= 500 && status < 600;\n  }\n  const code =\n    typeof error === \"object\" && error !== null && \"code\" in error\n      ? String((error as { code?: unknown }).code)\n      : undefined;\n  if (code && /^(?:ECONNRESET|ETIMEDOUT|EAI_AGAIN|ECONNREFUSED|EPIPE)$/i.test(code)) {\n    return true;\n  }\n  const message = error instanceof Error ? error.message : String(error);\n  if (isExactStatuslessUpstreamConnectivityMessage(message)) {\n    return true;\n  }\n  return /overloaded|an error occurred while processing your request|connection error|service unavailable|bad gateway|gateway timeout/i.test(\n    message,\n  );\n}\n\n/** An explicit `usage_limit_reached` type or code string anywhere on the error chain. */\nfunction hasCodexUsageLimitType(error: unknown): boolean {\n  return collectErrorStrings(error).some((value) => value.includes(CODEX_USAGE_LIMIT_ERROR_TYPE));\n}\n\n/**\n * Recognize an exhausted API-key provider quota (a daily or monthly allowance,\n * a free-tier day cap, or an account out of credits) as distinct from an\n * ordinary per-minute rate limit. Retrying within the bounded same-turn budget\n * cannot succeed, so the turn fails promptly instead. Subscription transports\n * own their quota semantics through credential rotation and durable capacity\n * waits, so a Codex or SuperGrok transport error never classifies here.\n */\nexport function classifyProviderQuotaExhaustionError(\n  error: unknown,\n): ProviderQuotaExhaustion | null {\n  if (isCodexTransportError(error) || isXaiSubscriptionTransportError(error)) return null;\n  // The same reader the OpenAI SDK retry veto uses, so the two never disagree.\n  return classifyProviderQuotaError(error);\n}\n\nexport type XaiCredentialFailure = {\n  kind: \"auth\" | \"forbidden\" | \"rate_limit\";\n  cooldownMs: number | null;\n};\n\n/**\n * Only definitive SuperGrok account refusals may move the same logical turn to\n * another credential. A marked HTTP 401/403/429, or an HTTP 200 SSE terminal\n * that is a rate-limit/capacity diagnostic, proves inference was refused\n * without an accepted model response; refresh relogin is equally definitive.\n */\nexport function classifyXaiCredentialFailure(error: unknown): XaiCredentialFailure | null {\n  if (isProviderSafetyRefusal(error)) return null;\n  let relogin: unknown = error;\n  for (let depth = 0; depth < 6 && relogin && typeof relogin === \"object\"; depth += 1) {\n    if (relogin instanceof XaiSubscriptionReloginRequired) {\n      return { kind: \"auth\", cooldownMs: null };\n    }\n    relogin = (relogin as Record<string, unknown>).cause;\n  }\n  if (!isXaiSubscriptionTransportError(error)) return null;\n  let current: unknown = error;\n  for (let depth = 0; depth < 6 && current && typeof current === \"object\"; depth += 1) {\n    const value = current as Record<string, unknown>;\n    const body =\n      value.error && typeof value.error === \"object\"\n        ? (value.error as Record<string, unknown>)\n        : null;\n    const status = Number(value.status ?? value.statusCode ?? body?.status ?? body?.statusCode);\n    const code = String(value.code ?? body?.code ?? \"\").toLowerCase();\n    if (status === 401 || code === \"unauthorized\" || code === \"invalid_token\") {\n      return { kind: \"auth\", cooldownMs: null };\n    }\n    if (status === 403) {\n      return { kind: \"forbidden\", cooldownMs: null };\n    }\n    const message = String(value.message ?? body?.message ?? \"\");\n    if (\n      isXaiSubscriptionRateLimitDiagnostic({\n        code,\n        message,\n        status: Number.isInteger(status) ? status : null,\n      })\n    ) {\n      return {\n        kind: \"rate_limit\",\n        cooldownMs: providerRetryAfterMs(error) ?? PROVIDER_BACKPRESSURE_DELAY_MS,\n      };\n    }\n    current = value.cause;\n  }\n  return null;\n}\n\n// The generic turn-failure boundary also receives application/provider errors.\n// A five-character code or generic severity alone does not establish a driver error.\nfunction findPostgresDriverError(error: unknown): Record<string, unknown> | null {\n  const queue: unknown[] = [error];\n  const seen = new Set<unknown>();\n  for (let index = 0; index < queue.length && index < 64; index += 1) {\n    const current = queue[index];\n    if (!current || typeof current !== \"object\" || seen.has(current)) continue;\n    seen.add(current);\n    const record = current as Record<string, unknown>;\n    if (record.name === \"PostgresError\") return record;\n    for (const key of [\"cause\", \"original\", \"driverError\", \"error\", \"errors\"]) {\n      const nested = record[key];\n      if (Array.isArray(nested)) queue.push(...nested.slice(0, 64));\n      else if (nested !== undefined) queue.push(nested);\n    }\n  }\n  return null;\n}\n\nfunction isRawDatabaseQueryError(error: unknown): boolean {\n  return (\n    error instanceof Error &&\n    \"query\" in error &&\n    typeof error.query === \"string\" &&\n    \"params\" in error &&\n    Array.isArray(error.params)\n  );\n}\n\nexport function agentRunFailurePayload(\n  error: unknown,\n  options: { isCodexTurn?: boolean } = {},\n): ReturnType<typeof baseAgentRunFailurePayload> {\n  const failure = baseAgentRunFailurePayload(error, options);\n  const diagnostic = materializationVerificationDiagnostic(error);\n  return diagnostic ? { ...failure, materializationDiagnostic: diagnostic } : failure;\n}\n\nfunction baseAgentRunFailurePayload(\n  error: unknown,\n  options: { isCodexTurn?: boolean } = {},\n): {\n  error: string;\n  code?: string;\n  retryable?: boolean;\n  detail?: string;\n  timeoutClass?: string;\n  responseObserved?: boolean;\n  requestId?: string;\n  eventCount?: number;\n  lastEventType?: string;\n  silenceDurationMs?: number;\n  correlationId?: string;\n  stage?: string;\n  sqlState?: string | null;\n  attempts?: number;\n  retryOutcome?: string;\n  database?: Record<string, string>;\n  historyPersistenceStage?: MandatoryHistoryPersistenceStage;\n  mcpTransportDiagnostic?: McpTransportRequestFailureDiagnostic;\n  materializationDiagnostic?: MaterializationVerificationDiagnostic;\n  quotaScope?: ProviderQuotaScope;\n  /** Closed Codex plan key on `codex_plan_entitlement` / `codex_request_rejected`. */\n  planType?: string | null;\n  /** Product model id a `codex_plan_entitlement` failure refers to. */\n  model?: string | null;\n} {\n  if (error instanceof SandboxMaterializationVerificationError) {\n    return {\n      error: error.message,\n      code: error.code,\n      retryable: false,\n      materializationDiagnostic: error.diagnostic,\n    };\n  }\n  if (error instanceof RetainedAttachmentTransportLimitError) {\n    return { error: error.message, code: \"retained_attachment_transport_limit\", retryable: false };\n  }\n  if (error instanceof MandatoryHistoryPersistenceError) {\n    const databaseFailure =\n      isSessionEventPersistenceError(error.cause) ||\n      findPostgresDriverError(error.cause) !== null ||\n      isRawDatabaseQueryError(error.cause);\n    const underlying = databaseFailure\n      ? agentRunFailurePayload(error.cause, options)\n      : {\n          error: error.cause instanceof Error ? error.cause.message : String(error.cause),\n        };\n    return {\n      ...underlying,\n      historyPersistenceStage: error.stage,\n    };\n  }\n  // Raw ORM wrappers can contain the full SQL and its parameters. Classify a\n  // real driver before provider message heuristics; the original cause stays\n  // available to internal diagnostics. This payload grants no replay authority.\n  const postgresDriverError = findPostgresDriverError(error);\n  const rawOrmFailure = isRawDatabaseQueryError(error);\n  if ((postgresDriverError || rawOrmFailure) && !isSessionEventPersistenceError(error)) {\n    const database = safeDatabaseErrorFacts(postgresDriverError ?? error);\n    const sqlState = postgresDriverError ? nestedPostgresSqlState(postgresDriverError) : null;\n    return {\n      error: \"OpenGeni encountered a database error.\",\n      code: databaseFailureCode(sqlState),\n      sqlState,\n      ...(Object.keys(database).length > 0 ? { database } : {}),\n    };\n  }\n  const safetyRefusalDiagnostic = providerSafetyRefusalDiagnostic(error);\n  if (safetyRefusalDiagnostic !== undefined) {\n    return {\n      error:\n        \"The model provider blocked this request through its safety systems. Automatic retries stopped.\",\n      code: \"provider_safety_refusal\",\n      retryable: false,\n      detail: safetyRefusalDiagnostic,\n    };\n  }\n  if (error instanceof ResponsesStreamingTerminalError) {\n    const quota =\n      error.category === \"unknown\" || error.category === \"rate_limit\"\n        ? classifyProviderQuotaExhaustionError({\n            code: error.code,\n            error: { code: error.code, type: error.type, message: error.detail },\n            retryAfterSeconds: error.retryAfterSeconds,\n          })\n        : null;\n    if (quota) {\n      return {\n        error: providerQuotaExhaustedMessage(quota.scope),\n        code: PROVIDER_QUOTA_EXHAUSTED_CODE,\n        retryable: false,\n        quotaScope: quota.scope,\n        detail: error.detail,\n      };\n    }\n    return {\n      error:\n        error.category === \"rate_limit\"\n          ? \"Model provider rate limit hit. Try again in a minute or lower the reasoning effort.\"\n          : error.category === \"unavailable\"\n            ? \"The model provider is temporarily unavailable. The same turn will retry after a short delay.\"\n            : \"The model provider rejected the response. Automatic retries stopped.\",\n      code:\n        error.category === \"rate_limit\"\n          ? \"provider_rate_limited\"\n          : error.category === \"unavailable\"\n            ? \"provider_unavailable\"\n            : \"provider_request_rejected\",\n      retryable: error.category === \"rate_limit\" || error.category === \"unavailable\",\n      detail: error.detail,\n    };\n  }\n  const message = error instanceof Error ? error.message : String(error);\n  const status =\n    typeof error === \"object\" && error !== null\n      ? Number(\n          (error as { status?: unknown; statusCode?: unknown }).status ??\n            (error as { statusCode?: unknown }).statusCode,\n        )\n      : undefined;\n  const code =\n    typeof error === \"object\" && error !== null && \"code\" in error\n      ? String((error as { code?: unknown }).code)\n      : undefined;\n  if (error instanceof ActiveSessionHistoryLimitExceededError) {\n    return {\n      error:\n        \"The session's active conversation history exceeds the worker's safe materialization envelope. Clear the session context before retrying; an oversized history cannot be compacted safely in a serving worker.\",\n      code: error.code,\n      retryable: false,\n      detail: error.message,\n    };\n  }\n  if (error instanceof ApprovalRunStateLimitExceededError) {\n    return {\n      error:\n        \"The saved approval state exceeds the worker's safe materialization envelope. Clear the pending approval context before retrying.\",\n      code: error.code,\n      retryable: false,\n      detail: error.message,\n    };\n  }\n  if (error instanceof PostCompactionContinuationEmptyError) {\n    return {\n      error:\n        \"Context compaction completed, but the continuation ended before a new model response. The same turn will retry from the compacted checkpoint.\",\n      code: POST_COMPACTION_CONTINUATION_EMPTY_CODE,\n      retryable: true,\n    };\n  }\n  if (isModalCommandStartOutcomeUnknownError(error)) {\n    return {\n      error:\n        \"A managed sandbox command has an unknown outcome. Its original invocation remains fenced; setup is blocked without replay until the incomplete operation can be reconciled.\",\n      code: \"sandbox_command_start_outcome_unknown\",\n      retryable: false,\n    };\n  }\n  if (\n    !isRoutingMutationOutcomeUnknownError(error) &&\n    isModalTaskExecStartPreDispatchUnavailableError(error)\n  ) {\n    return {\n      error:\n        \"The managed sandbox command router was not ready before the command was sent. The same turn will retry after a short delay.\",\n      code: \"sandbox_command_start_unavailable\",\n      retryable: true,\n    };\n  }\n  // An accepted Codex stream with no terminal response is malformed/partial,\n  // not provider backpressure. Replaying the same accepted turn could repeat\n  // model or tool effects, so this marked transport failure must outrank the\n  // generic 5xx retry classifier (CodexStreamingTerminalError uses status 502).\n  if (isCodexTransportError(error) && code === \"invalid_sse_terminal\") {\n    return {\n      error: \"The Codex response stream ended without a terminal response\",\n      code: \"invalid_sse_terminal\",\n      retryable: false,\n    };\n  }\n  if (isXaiSubscriptionHostedToolContinuationError(error)) {\n    return {\n      error:\n        \"SuperGrok stopped responding after its hosted search completed. Partial output was preserved; automatic replay is disabled because the accepted response may still have provider-side effects.\",\n      code: \"xai_hosted_tool_continuation_stalled\",\n      retryable: false,\n    };\n  }\n  const xaiStreamTerminal = classifyXaiSubscriptionStreamingTerminalError(error);\n  if (xaiStreamTerminal) {\n    return {\n      error: xaiStreamTerminal.message,\n      code: xaiStreamTerminal.code,\n      retryable: xaiStreamTerminal.status === 429,\n      lastEventType: xaiStreamTerminal.eventType,\n      ...(xaiStreamTerminal.requestId ? { requestId: xaiStreamTerminal.requestId } : {}),\n    };\n  }\n  const xaiStreamTimeout = classifyXaiSubscriptionStreamIdleTimeoutError(error);\n  if (xaiStreamTimeout) {\n    return {\n      error:\n        \"SuperGrok stopped sending valid response events. Partial output was preserved; automatic replay is disabled because the accepted response may still have provider-side effects.\",\n      code: \"xai_response_stream_idle_timeout\",\n      retryable: false,\n      responseObserved: xaiStreamTimeout.responseObserved,\n      eventCount: xaiStreamTimeout.eventCount,\n      silenceDurationMs: xaiStreamTimeout.silenceDurationMs,\n      ...(xaiStreamTimeout.requestId ? { requestId: xaiStreamTimeout.requestId } : {}),\n      ...(xaiStreamTimeout.lastEventType ? { lastEventType: xaiStreamTimeout.lastEventType } : {}),\n    };\n  }\n  if (isSessionEventPersistenceError(error)) {\n    const { details } = error;\n    return {\n      error: error.message,\n      code: details.code,\n      detail:\n        details.retryOutcome === \"exhausted\"\n          ? `The idempotent persistence transaction failed after ${details.attempts} attempts.`\n          : \"The database rejected the idempotent persistence transaction.\",\n      correlationId: details.correlationId,\n      stage: details.stage,\n      sqlState: details.sqlState,\n      attempts: details.attempts,\n      retryOutcome: details.retryOutcome,\n      ...(Object.keys(details.database).length > 0 ? { database: details.database } : {}),\n    };\n  }\n  // Codex plan entitlement: the settlement path normally re-checks the plan\n  // and records a precise payload. These branches keep any other path from\n  // surfacing the SDK's raw \"400 status code (no body)\" text.\n  if (error instanceof CodexPlanEntitlementError) {\n    return error.payload;\n  }\n  const entitlementRejection = classifyCodexEntitlementRejection(error);\n  if (entitlementRejection) {\n    return entitlementRejection.evidence === \"plan_entitlement\"\n      ? codexPlanEntitlementFailurePayload({\n          accountLabel: null,\n          planType: null,\n          planChanged: false,\n          modelId: null,\n          rejection: entitlementRejection,\n        })\n      : codexRequestRejectedFailurePayload({\n          accountLabel: null,\n          planType: null,\n          rejection: entitlementRejection,\n          planChecked: false,\n        });\n  }\n  // A ChatGPT/Codex usage cap is a HARD limit, not transient backpressure: it\n  // must NOT be reported as a generic, retryable rate-limit (which would loop a\n  // goal against a capped backend). Surface a precise, actionable message with\n  // the humanized reset window and code, non-retryable. Checked BEFORE the\n  // generic 429 branch below (a usage cap is also a 429).\n  // This terminal payload classifier may receive a plain SDK-shaped error in\n  // tests or after wrapper metadata was stripped. An explicit\n  // `usage_limit_reached` shape must still outrank generic 429 retryability.\n  // Credential quarantine/failover remains separately provenance-gated by\n  // `isCodexTransportError`; this branch only chooses the truthful user payload.\n  // The looser \"429 ... usage limit\" wording counts only on a Codex transport\n  // error: an API-key provider's 429 that says \"usage limit\" is provider quota\n  // evidence, not a ChatGPT/Codex subscription cap.\n  const usageLimit = classifyCodexUsageLimitError(error);\n  if (usageLimit && (isCodexTransportError(error) || hasCodexUsageLimitType(error))) {\n    return codexUsageLimitFailurePayload(usageLimit, message);\n  }\n  const codexTimeout = classifyCodexResponseTimeoutError(error, {\n    allowLegacyRequestTimeout: options.isCodexTurn === true,\n  });\n  if (codexTimeout) {\n    return {\n      error: codexTimeout.responseObserved\n        ? \"The Codex response timed out after streaming began. Observed output was checkpointed; automatic replay is disabled because the upstream operation may still be active.\"\n        : \"The Codex response timed out before any response was observed. Upstream acceptance is unknown, so automatic replay is disabled.\",\n      code: \"codex_response_timeout\",\n      retryable: false,\n      timeoutClass: codexTimeout.timeoutClass,\n      responseObserved: codexTimeout.responseObserved,\n      ...(codexTimeout.requestId ? { requestId: codexTimeout.requestId } : {}),\n      ...(codexTimeout.message ? { detail: codexTimeout.message } : {}),\n    };\n  }\n  const mcpTimeout = classifyMcpTransportTimeoutError(error);\n  if (mcpTimeout) {\n    const mcpTransportDiagnostic = mcpTransportRequestFailureDiagnostic(error);\n    return {\n      error:\n        \"An MCP server request timed out. Any completed tool output was checkpointed; the session can continue safely.\",\n      code: \"mcp_transport_timeout\",\n      retryable: true,\n      ...(mcpTimeout.detail || mcpTimeout.message\n        ? { detail: mcpTimeout.detail ?? mcpTimeout.message }\n        : {}),\n      ...(mcpTransportDiagnostic ? { mcpTransportDiagnostic } : {}),\n    };\n  }\n  if (isMcpTransportConnectivityError(error)) {\n    const mcpTransportDiagnostic = mcpTransportRequestFailureDiagnostic(error);\n    return {\n      error:\n        \"A required MCP server was temporarily unreachable. The same turn will retry after a short delay.\",\n      code: \"mcp_transport_unavailable\",\n      retryable: true,\n      detail: message,\n      ...(mcpTransportDiagnostic ? { mcpTransportDiagnostic } : {}),\n    };\n  }\n  if (code === UNKNOWN_MODEL_FINISH_REASON_CODE) {\n    return {\n      error:\n        \"The model provider ended its response ambiguously. Partial output was not accepted as complete; the same turn will retry from durable history.\",\n      code: UNKNOWN_MODEL_FINISH_REASON_CODE,\n      retryable: true,\n    };\n  }\n  // An exhausted quota also arrives as HTTP 429 (or 402), but no retry within\n  // the finite same-turn budget can succeed. Fail the turn promptly with a\n  // distinct code so the client can offer another model; ordinary short rate\n  // limits fall through to the retryable branch below.\n  const quota = classifyProviderQuotaExhaustionError(error);\n  if (quota) {\n    return {\n      error: providerQuotaExhaustedMessage(quota.scope),\n      code: PROVIDER_QUOTA_EXHAUSTED_CODE,\n      retryable: false,\n      quotaScope: quota.scope,\n      ...(message ? { detail: message } : {}),\n    };\n  }\n  if (\n    status === 429 ||\n    code === \"rate_limit_exceeded\" ||\n    /(?:too many requests|rate.?limit|\\b429\\b)/i.test(message)\n  ) {\n    return {\n      error: \"Model provider rate limit hit. Try again in a minute or lower the reasoning effort.\",\n      code: \"provider_rate_limited\",\n      retryable: true,\n      ...(message && message !== \"Too Many Requests\" ? { detail: message } : {}),\n    };\n  }\n  // Transient upstream backpressure (5xx / overloaded / dropped connection): keep\n  // the provider's own message (it is already user-meaningful) but mark it\n  // retryable so a goal-bearing session idles and auto-continues instead of going\n  // terminal on a provider's bad minute. See isTransientProviderError.\n  if (isTransientProviderError(error)) {\n    if (isExactStatuslessUpstreamConnectivityMessage(message)) {\n      return {\n        error:\n          \"OpenGeni could not reach an upstream service. The same turn will retry after a short delay.\",\n        code: \"upstream_connectivity_unavailable\",\n        retryable: true,\n      };\n    }\n    return { error: message, code: \"provider_unavailable\", retryable: true };\n  }\n  return { error: message };\n}\n\nexport type CodexCredentialFailure = {\n  /**\n   * `plan_entitlement` is produced only after a plan re-check proves the\n   * serving account's current plan does not include the requested model.\n   */\n  kind: \"auth\" | \"forbidden\" | \"rate_limit\" | \"quota\" | \"plan_entitlement\";\n  cooldownSeconds: number | null;\n};\n\nexport const CODEX_ALLOWANCE_FALLBACK_MS = 5 * 60 * 60_000;\n\n/**\n * Resolve a deterministic quarantine end. Generic request throttling honors\n * provider retry-after (or one minute); allowance/quota refusal waits for the\n * LAST of provider reset and every still-binding cached window (five-hour and\n * weekly both bind), falling back to one complete five-hour window when no reset\n * metadata exists.\n */\nexport function codexCredentialCooldownUntil(\n  failure: CodexCredentialFailure,\n  account: Pick<\n    CodexAccountStatus,\n    \"primaryUsedPercent\" | \"primaryResetAt\" | \"secondaryUsedPercent\" | \"secondaryResetAt\"\n  > | null,\n  now: Date,\n): Date | null {\n  if (\n    failure.kind === \"auth\" ||\n    failure.kind === \"forbidden\" ||\n    failure.kind === \"plan_entitlement\"\n  ) {\n    return null;\n  }\n  const providerReset =\n    failure.cooldownSeconds !== null &&\n    Number.isFinite(failure.cooldownSeconds) &&\n    failure.cooldownSeconds > 0\n      ? new Date(now.getTime() + Math.ceil(failure.cooldownSeconds) * 1000)\n      : null;\n  if (failure.kind === \"rate_limit\") {\n    return providerReset ?? new Date(now.getTime() + PROVIDER_BACKPRESSURE_DELAY_MS);\n  }\n  const blockingResets = account\n    ? [\n        { used: account.primaryUsedPercent, reset: account.primaryResetAt },\n        { used: account.secondaryUsedPercent, reset: account.secondaryResetAt },\n      ]\n        .filter(\n          (window): window is { used: number; reset: Date } =>\n            (window.used ?? 0) >= CODEX_USAGE_EXHAUSTED_PCT &&\n            window.reset instanceof Date &&\n            window.reset.getTime() > now.getTime(),\n        )\n        .map((window) => window.reset)\n    : [];\n  const quotaResets = providerReset ? [...blockingResets, providerReset] : blockingResets;\n  if (quotaResets.length === 0) {\n    return new Date(now.getTime() + CODEX_ALLOWANCE_FALLBACK_MS);\n  }\n  return quotaResets.reduce((latest, reset) =>\n    reset.getTime() > latest.getTime() ? reset : latest,\n  );\n}\n\n/**\n * Only definitive credential/account refusals are safe rotation signals.\n * Ambiguous network failures, malformed/partial streams, invalid model content,\n * prompt 4xx, and provider 5xx may already have consumed tokens or persisted\n * progress and therefore MUST NOT walk the credential pool automatically.\n */\nexport function classifyCodexCredentialFailure(error: unknown): CodexCredentialFailure | null {\n  // A request safety refusal is not evidence that another account should run it.\n  if (isProviderSafetyRefusal(error)) return null;\n  // A permanent OAuth refresh failure is definitive and the shared resolver has\n  // already fenced/stamped the exact credential version. The OpenAI client can\n  // wrap a rejection from its custom fetch in APIConnectionError, so recognize\n  // the typed exception through the same bounded cause chain used below.\n  let refreshError: unknown = error;\n  for (let depth = 0; depth < 6 && refreshError && typeof refreshError === \"object\"; depth += 1) {\n    if (refreshError instanceof CodexReloginRequired) {\n      return { kind: \"auth\", cooldownSeconds: null };\n    }\n    refreshError = (refreshError as Record<string, unknown>).cause;\n  }\n  // The activity catch also receives sandbox, MCP, storage, and tool failures.\n  // Their HTTP status codes are not Codex account state and must never walk the\n  // subscription pool or replay a tool on another credential.\n  if (!isCodexTransportError(error)) {\n    return null;\n  }\n  // Plan/model entitlement evidence (an explicit plan refusal, or an empty\n  // HTTP 400) is not account health or quota. The worker re-checks the plan\n  // first; only a proven entitlement loss walks the pool, as `plan_entitlement`.\n  if (classifyCodexEntitlementRejection(error)) {\n    return null;\n  }\n  const usageLimit = classifyCodexUsageLimitError(error);\n  if (usageLimit) {\n    return { kind: \"quota\", cooldownSeconds: usageLimit.resetsInSeconds };\n  }\n  let cur: unknown = error;\n  for (let depth = 0; depth < 6 && cur && typeof cur === \"object\"; depth++) {\n    const value = cur as Record<string, unknown>;\n    const body =\n      value.error && typeof value.error === \"object\"\n        ? (value.error as Record<string, unknown>)\n        : null;\n    const status = Number(value.status ?? value.statusCode ?? body?.status ?? body?.statusCode);\n    const code = String(value.code ?? body?.code ?? \"\").toLowerCase();\n    const directRetryAfter = Number(\n      value.retry_after_seconds ?? body?.retry_after_seconds ?? value.retryAfterSeconds,\n    );\n    const retryAfterHeader =\n      headerValue(value.headers, \"retry-after\") ??\n      headerValue(value.responseHeaders, \"retry-after\") ??\n      headerValue(body?.headers, \"retry-after\");\n    const retryAfterNumber = retryAfterHeader === null ? Number.NaN : Number(retryAfterHeader);\n    const retryAfterDate =\n      retryAfterHeader !== null && !Number.isFinite(retryAfterNumber)\n        ? Date.parse(retryAfterHeader)\n        : Number.NaN;\n    const retryAfter = Number.isFinite(directRetryAfter)\n      ? directRetryAfter\n      : Number.isFinite(retryAfterNumber)\n        ? retryAfterNumber\n        : Number.isFinite(retryAfterDate)\n          ? Math.max(0, (retryAfterDate - Date.now()) / 1000)\n          : Number.NaN;\n    const cooldownSeconds =\n      Number.isFinite(retryAfter) && retryAfter > 0 ? Math.ceil(retryAfter) : null;\n    // Provider quota codes are more specific than their HTTP transport status.\n    // A permanent allowance refusal commonly arrives as HTTP 429; classify it\n    // before generic backpressure so it receives the binding-window cooldown.\n    if (\n      code === \"insufficient_quota\" ||\n      code === \"quota_exceeded\" ||\n      code === \"billing_hard_limit_reached\"\n    ) {\n      return { kind: \"quota\", cooldownSeconds };\n    }\n    if (status === 401 || code === \"unauthorized\" || code === \"invalid_api_key\") {\n      return { kind: \"auth\", cooldownSeconds };\n    }\n    if (status === 403) {\n      return { kind: \"forbidden\", cooldownSeconds };\n    }\n    if (status === 429 || code === \"rate_limit_exceeded\" || code === \"too_many_requests\") {\n      return { kind: \"rate_limit\", cooldownSeconds };\n    }\n    cur = value.cause;\n  }\n  return null;\n}\n\n/** Humanize a seconds duration into a short \"2h 5m\" / \"9m\" / \"in under a minute\" string. */\nexport function humanizeResetWindow(resetsInSeconds: number | null): string {\n  if (resetsInSeconds === null || !Number.isFinite(resetsInSeconds) || resetsInSeconds <= 0) {\n    return \"shortly\";\n  }\n  const total = Math.ceil(resetsInSeconds);\n  if (total < 60) {\n    return \"in under a minute\";\n  }\n  const hours = Math.floor(total / 3600);\n  const minutes = Math.round((total % 3600) / 60);\n  if (hours > 0) {\n    return minutes > 0 ? `in about ${hours}h ${minutes}m` : `in about ${hours}h`;\n  }\n  return `in about ${minutes}m`;\n}\n\n/**\n * Build the turn.failed payload for a ChatGPT/Codex usage cap: a precise,\n * actionable message naming the reset window, the stable `codex_usage_limit_reached`\n * code, and retryable:false (an auto-retry would just re-hit the cap).\n */\nexport function codexUsageLimitFailurePayload(\n  info: { resetsInSeconds: number | null },\n  detail: string,\n  opts?: { allAccounts?: boolean },\n): { error: string; code: string; retryable: false; detail?: string } {\n  // P3: when EVERY connected subscription is rate-limited the message names the\n  // earliest reset across accounts; the single-account message is unchanged.\n  const error = opts?.allAccounts\n    ? `All connected ChatGPT/Codex subscriptions are rate-limited. Access returns ${humanizeResetWindow(info.resetsInSeconds)}. ` +\n      `You can switch this session to a different model in the meantime, or wait for a subscription to reset.`\n    : `Your ChatGPT/Codex subscription usage limit has been reached. Access resets ${humanizeResetWindow(info.resetsInSeconds)}. ` +\n      `You can switch this session to a different model in the meantime, or wait for the limit to reset.`;\n  return {\n    error,\n    code: \"codex_usage_limit_reached\",\n    retryable: false,\n    ...(detail ? { detail } : {}),\n  };\n}\n\n// A usage cap that won't reset for a long time should not pin a Temporal timer\n// open indefinitely for a goal-bearing session; cap the continuation hold so the\n// goal re-evaluates at most this far out (it will re-pause if still capped).\nexport const CODEX_USAGE_LIMIT_MAX_RESUME_MS = 60 * 60_000; // 1h\n","import {\n  MODEL_ATTACHMENT_REFS_FIELD,\n  MODEL_ATTACHMENT_CATALOG_MARKER,\n  FileResourceRef,\n  resourceMountPath,\n  type FileAsset,\n  type ResourceRef,\n} from \"@opengeni/contracts\";\nimport { createHash } from \"node:crypto\";\nimport {\n  getActiveSessionHistoryItemsPaged,\n  getFilesForSubject,\n  getSandboxSessionEnvelope,\n  getSessionEvent,\n  listSessionSystemUpdatesForTurn,\n  listTurnOpenSuffixToolCalls,\n  type Database,\n} from \"@opengeni/db\";\nimport {\n  projectHistoryForProvider,\n  projectRejectedProviderArtifactsFromSerializedRunState,\n  projectRejectedReasoningArtifact,\n  hasOpaqueProviderArtifact,\n  type HistoryProviderApi,\n  type OpenGeniRuntime,\n} from \"@opengeni/runtime\";\n\n/** Project only artifacts explicitly rejected by the provider out of its next view. */\nexport function projectRejectedProviderArtifacts(\n  rows: ReadonlyArray<{\n    item: Record<string, unknown>;\n    providerArtifactInvalidatedAt?: Date | null;\n  }>,\n): Array<Record<string, unknown>> {\n  const out: Array<Record<string, unknown>> = [];\n  for (const row of rows) {\n    if (!row.providerArtifactInvalidatedAt) {\n      out.push(row.item);\n      continue;\n    }\n    const type = typeof row.item.type === \"string\" ? row.item.type : undefined;\n    if (type === \"reasoning\") {\n      out.push(projectRejectedReasoningArtifact(row.item));\n      continue;\n    }\n    if (type === \"compaction\") {\n      continue;\n    }\n    out.push(row.item);\n  }\n  return out;\n}\n\n/** Build the attempt-local RunState view after an explicit provider rejection. */\nexport function resumeRunState(state: {\n  serializedRunState: string;\n  providerArtifactInvalidatedAt?: Date | null;\n}): string {\n  if (!state.providerArtifactInvalidatedAt) {\n    return state.serializedRunState;\n  }\n  return projectRejectedProviderArtifactsFromSerializedRunState(state.serializedRunState);\n}\n\n/** Prepared input and its exact durable-history prefix length for reconciliation. */\nexport type PreparedTurnInput = {\n  input: Awaited<ReturnType<OpenGeniRuntime[\"prepareInput\"]>>;\n  persistedHistoryCount: number;\n  providerArtifactCandidates: {\n    knownHistoryItemIds: string[];\n    historyItemIds: string[];\n    runStateId?: string;\n  };\n};\n\nexport type TurnInputOptions = {\n  turnId: string;\n  /** Frozen initiating-human authority for every model-visible file read. */\n  fileAuthority: { accountId: string; subjectId: string | null };\n  recovering?: boolean;\n  unavailableSandboxFilesNote?: string;\n  runCredentialsNote?: string;\n  mcpAvailabilityNote?: string;\n  knowledgeSourcePreparationNote?: string;\n  providerApi: HistoryProviderApi;\n  projectCanonicalHistory?: ModelHistoryAttachmentProjector;\n  materializeModelHistory?: ModelHistoryAttachmentProjector;\n  projectModelHistory?: ModelHistoryAttachmentProjector;\n  loadActiveHistory?: typeof getActiveSessionHistoryItemsPaged;\n  /** Bounded critical-path timings; telemetry failures never affect preparation. */\n  onPreparationPhase?: (measurement: HistoryPreparationPhaseMeasurement) => void;\n};\n\nexport type HistoryPreparationPhase =\n  | \"system_update_load\"\n  | \"current_attachment_resolution\"\n  | \"durable_history_load\"\n  | \"sandbox_envelope_load\"\n  | \"canonical_projection\"\n  | \"provider_projection\"\n  | \"attachment_ref_projection\"\n  | \"screenshot_materialization\"\n  | \"model_attachment_projection\"\n  | \"runtime_input_assembly\"\n  | \"artifact_candidate_scan\";\n\nexport type HistoryPreparationPhaseMeasurement = {\n  phase: HistoryPreparationPhase;\n  outcome: \"completed\" | \"failed\";\n  durationSeconds: number;\n};\n\nasync function measureHistoryPreparationPhase<T>(\n  options: Pick<TurnInputOptions, \"onPreparationPhase\">,\n  phase: HistoryPreparationPhase,\n  operation: () => T | Promise<T>,\n): Promise<T> {\n  const startedAt = performance.now();\n  let outcome: HistoryPreparationPhaseMeasurement[\"outcome\"] = \"completed\";\n  try {\n    return await operation();\n  } catch (error) {\n    outcome = \"failed\";\n    throw error;\n  } finally {\n    try {\n      options.onPreparationPhase?.({\n        phase,\n        outcome,\n        durationSeconds: (performance.now() - startedAt) / 1_000,\n      });\n    } catch {\n      // Diagnostics must not change durable history or provider input.\n    }\n  }\n}\n\nexport const MAX_INLINE_MODEL_ATTACHMENT_BYTES = 20 * 1024 * 1024;\n// Raw-byte allowance; base64 and request serialization add memory overhead.\n// This is transport admission, never an instruction to rewrite old messages.\nexport const MAX_RETAINED_MODEL_ATTACHMENT_BYTES = 64 * 1024 * 1024;\n\nexport class RetainedAttachmentTransportLimitError extends Error {\n  constructor() {\n    super(\n      \"Active uploaded images exceed the 64 MiB inline transport limit. \" +\n        \"History was preserved and no new image bytes were downloaded. \" +\n        \"Start a smaller conversation or fork before the image-heavy messages.\",\n    );\n    this.name = \"RetainedAttachmentTransportLimitError\";\n  }\n}\n\nexport type ModelAttachmentContent = {\n  kind: \"image\" | \"file\";\n  fileId: string;\n  filename: string;\n  contentType: string;\n  dataUrl: string;\n};\n\nexport type ModelHistoryAttachmentProjector = (\n  items: Array<Record<string, unknown>>,\n  options?: ModelHistoryAttachmentProjectionOptions,\n) => Promise<Array<Record<string, unknown>>>;\n\nexport type ModelHistoryAttachmentProjectionOptions = {\n  /** Exact, already-authorized files attached to the triggering message. */\n  inlineFiles?: readonly FileAsset[];\n};\n\nexport type ModelAttachmentInputPolicy = {\n  supportsImageInput: boolean;\n  inputFileMediaTypes: readonly string[];\n};\n\nconst MODEL_IMAGE_CONTENT_TYPES = new Set([\"image/gif\", \"image/jpeg\", \"image/png\", \"image/webp\"]);\n\nconst MODEL_FILE_CONTENT_TYPES = new Set([\n  \"application/json\",\n  \"application/pdf\",\n  \"application/x-yaml\",\n  \"application/yaml\",\n]);\n\n// Generic XML has equivalent application/* and text/* registrations. Keep both\n// aliases on the sandbox-path fallback until a provider parser boundary is\n// explicitly supported and verified; MIME spelling must not bypass the fence.\nconst BLOCKED_TEXT_CONTENT_TYPES = new Set([\n  \"text/css\",\n  \"text/html\",\n  \"text/javascript\",\n  \"text/xml\",\n]);\n\nfunction safeErrorType(error: unknown): string {\n  if (!(error instanceof Error)) return typeof error;\n  const name = error.name.trim();\n  return /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/.test(name) ? name : \"Error\";\n}\n\nfunction modelAttachmentDescriptor(\n  contentType: string,\n): Pick<ModelAttachmentContent, \"kind\" | \"contentType\"> | null {\n  const normalized = contentType.toLowerCase().split(\";\", 1)[0]?.trim() ?? \"\";\n  if (MODEL_IMAGE_CONTENT_TYPES.has(normalized)) {\n    return { kind: \"image\", contentType: normalized };\n  }\n  if (\n    MODEL_FILE_CONTENT_TYPES.has(normalized) ||\n    (normalized.startsWith(\"text/\") && !BLOCKED_TEXT_CONTENT_TYPES.has(normalized))\n  ) {\n    return { kind: \"file\", contentType: normalized };\n  }\n  return null;\n}\n\nexport async function modelAttachmentContentForFiles(\n  files: FileAsset[],\n  readFileBytes: (file: FileAsset) => Promise<Uint8Array>,\n  options: { retainAll?: boolean } = {},\n): Promise<ModelAttachmentContent[]> {\n  const selected: Array<{\n    file: FileAsset;\n    descriptor: Pick<ModelAttachmentContent, \"kind\" | \"contentType\">;\n    checksum: string;\n  }> = [];\n  let remainingBytes = options.retainAll\n    ? Number.POSITIVE_INFINITY\n    : MAX_INLINE_MODEL_ATTACHMENT_BYTES;\n  for (const file of files) {\n    const descriptor = modelAttachmentDescriptor(file.contentType);\n    const checksum = file.sha256?.trim().toLowerCase() ?? \"\";\n    if (\n      file.status !== \"ready\" ||\n      !descriptor ||\n      descriptor.kind !== \"image\" ||\n      file.sizeBytes > MAX_INLINE_MODEL_ATTACHMENT_BYTES ||\n      file.sizeBytes > remainingBytes ||\n      !/^[a-f0-9]{64}$/.test(checksum)\n    ) {\n      continue;\n    }\n    selected.push({ file, descriptor, checksum });\n    remainingBytes -= file.sizeBytes;\n  }\n\n  const attachments = new Array<ModelAttachmentContent | undefined>(selected.length);\n  let cursor = 0;\n  const worker = async () => {\n    while (cursor < selected.length) {\n      const index = cursor++;\n      const { file, descriptor, checksum } = selected[index]!;\n      try {\n        const bytes = await readFileBytes(file);\n        if (bytes.byteLength !== file.sizeBytes) {\n          console.error(\"model attachment bytes did not match finalized metadata\", {\n            fileId: file.id,\n            expectedSizeBytes: file.sizeBytes,\n            actualSizeBytes: bytes.byteLength,\n          });\n          continue;\n        }\n        if (createHash(\"sha256\").update(bytes).digest(\"hex\") !== checksum) {\n          console.error(\"model attachment checksum did not match finalized metadata\", {\n            fileId: file.id,\n          });\n          continue;\n        }\n        attachments[index] = {\n          kind: descriptor.kind,\n          fileId: file.id,\n          filename: file.safeFilename,\n          contentType: descriptor.contentType,\n          dataUrl: `data:${descriptor.contentType};base64,${Buffer.from(bytes).toString(\"base64\")}`,\n        };\n      } catch (error) {\n        // The sandbox-path projection remains available for every file. A direct\n        // provider-content read is an additive fast path and must not turn a\n        // transient storage read into loss of the accepted prompt.\n        console.error(\"model attachment content read failed; retaining sandbox path fallback\", {\n          fileId: file.id,\n          errorType: safeErrorType(error),\n        });\n      }\n    }\n  };\n  await Promise.all(\n    Array.from({ length: Math.min(8, selected.length) }, async () => await worker()),\n  );\n  return attachments.filter(\n    (attachment): attachment is ModelAttachmentContent => attachment !== undefined,\n  );\n}\n\nfunction attachmentRefsFromItem(item: Record<string, unknown>): FileResourceRef[] {\n  const raw = item[MODEL_ATTACHMENT_REFS_FIELD];\n  if (!Array.isArray(raw)) return [];\n  const refs: FileResourceRef[] = [];\n  for (const candidate of raw) {\n    const parsed = FileResourceRef.safeParse(candidate);\n    if (parsed.success) refs.push(parsed.data);\n  }\n  return refs;\n}\n\nfunction attachmentReceiptText(ref: FileResourceRef): string {\n  // The durable reference is immutable; live metadata/authority must not rewrite\n  // old receipt text. Pixel delivery remains subject to current file authority.\n  return (\n    `[Attachment: fileId=${ref.fileId}; mountDirectory=${resourceMountPath(ref)}. ` +\n    `Use the existing file there, or call files__files_get_download_url with this fileId and ` +\n    `download it with the shell.]`\n  );\n}\n\n/**\n * Build one turn-scoped durable-attachment projector. Resolve active refs under\n * current file authority and memoize metadata/bytes for retries and compaction.\n * A turn boundary never changes an authorized attachment's representation.\n */\nexport function createModelHistoryAttachmentProjector(\n  policy: ModelAttachmentInputPolicy,\n  readFileBytes?: (file: FileAsset) => Promise<Uint8Array>,\n  loadAuthorizedFiles?: (fileIds: readonly string[]) => Promise<readonly FileAsset[]>,\n): ModelHistoryAttachmentProjector {\n  const contentById = new Map<string, ModelAttachmentContent>();\n  const attemptedContentIds = new Set<string>();\n  const fileById = new Map<string, FileAsset>();\n  const resolvedFileIds = new Set<string>();\n  const retainedByteSizes = new Map<string, number>();\n\n  return async (items, options = {}) => {\n    for (const file of options.inlineFiles ?? []) {\n      fileById.set(file.id, file);\n      resolvedFileIds.add(file.id);\n    }\n    const refsByIndex = new Map<number, FileResourceRef[]>();\n    const orderedFileIds: string[] = [];\n    const seenFileIds = new Set<string>();\n    for (let index = 0; index < items.length; index += 1) {\n      const refs = attachmentRefsFromItem(items[index]!);\n      if (refs.length === 0) continue;\n      refsByIndex.set(index, refs);\n      for (const ref of refs) {\n        if (items[index]![MODEL_ATTACHMENT_CATALOG_MARKER] === true || seenFileIds.has(ref.fileId))\n          continue;\n        seenFileIds.add(ref.fileId);\n        orderedFileIds.push(ref.fileId);\n      }\n    }\n    if (refsByIndex.size === 0) return items;\n    const unresolved = orderedFileIds.filter((id) => !resolvedFileIds.has(id));\n    if (loadAuthorizedFiles && unresolved.length > 0) {\n      const files = await loadAuthorizedFiles(unresolved);\n      for (const file of files) fileById.set(file.id, file);\n      for (const id of unresolved) resolvedFileIds.add(id);\n    }\n\n    if (readFileBytes) {\n      const admitted = new Map(retainedByteSizes);\n      let requestImageBytes = 0;\n      for (const [index, refs] of refsByIndex) {\n        if (items[index]![MODEL_ATTACHMENT_CATALOG_MARKER] === true) continue;\n        for (const ref of refs) {\n          const file = fileById.get(ref.fileId);\n          if (\n            !file ||\n            !policy.supportsImageInput ||\n            file.status !== \"ready\" ||\n            file.sizeBytes > MAX_INLINE_MODEL_ATTACHMENT_BYTES ||\n            modelAttachmentDescriptor(file.contentType)?.kind !== \"image\" ||\n            !/^[a-f0-9]{64}$/i.test(file.sha256?.trim() ?? \"\")\n          )\n            continue;\n          // Repeated references share cached bytes but repeat in the wire body.\n          requestImageBytes += file.sizeBytes;\n          admitted.set(file.id, file.sizeBytes);\n        }\n      }\n      const turnImageBytes = [...admitted.values()].reduce((sum, bytes) => sum + bytes, 0);\n      if (\n        requestImageBytes > MAX_RETAINED_MODEL_ATTACHMENT_BYTES ||\n        turnImageBytes > MAX_RETAINED_MODEL_ATTACHMENT_BYTES\n      ) {\n        throw new RetainedAttachmentTransportLimitError();\n      }\n      for (const [id, bytes] of admitted) retainedByteSizes.set(id, bytes);\n      // Every active attachment uses the same authorized projection. Metadata\n      // and bytes are resolved once per turn, including compaction and retries.\n      const readable = [...orderedFileIds]\n        .reverse()\n        .map((id) => fileById.get(id))\n        .filter((file): file is FileAsset => {\n          if (!file || attemptedContentIds.has(file.id)) return false;\n          const descriptor = modelAttachmentDescriptor(file.contentType);\n          return Boolean(descriptor && descriptor.kind === \"image\" && policy.supportsImageInput);\n        });\n      for (const file of readable) attemptedContentIds.add(file.id);\n      const content = await modelAttachmentContentForFiles(readable, readFileBytes, {\n        retainAll: true,\n      });\n      const loadedIds = new Set(content.map((entry) => entry.fileId));\n      for (const file of readable) {\n        if (\n          file.status === \"ready\" &&\n          file.sizeBytes <= MAX_INLINE_MODEL_ATTACHMENT_BYTES &&\n          /^[a-f0-9]{64}$/i.test(file.sha256 ?? \"\") &&\n          !loadedIds.has(file.id)\n        ) {\n          // Do not let a retry silently proceed with pixels removed.\n          for (const candidate of readable) attemptedContentIds.delete(candidate.id);\n          throw new Error(`Retained attachment bytes unavailable or invalid: ${file.id}`);\n        }\n      }\n      for (const attachment of content) contentById.set(attachment.fileId, attachment);\n    }\n\n    const projected = [...items];\n    for (const [index, refs] of refsByIndex) {\n      const original = items[index]!;\n      const existingContent = Array.isArray(original.content)\n        ? [...original.content]\n        : [{ type: \"input_text\", text: String(original.content ?? \"\") }];\n      const attachmentParts = refs.flatMap((ref) => {\n        const currentFile =\n          original[MODEL_ATTACHMENT_CATALOG_MARKER] === true ? undefined : fileById.get(ref.fileId);\n        const attachment = currentFile ? contentById.get(ref.fileId) : undefined;\n        const receipt = {\n          type: \"input_text\",\n          text: attachmentReceiptText(ref),\n        };\n        if (!attachment || attachment.kind !== \"image\") {\n          return [receipt];\n        }\n        return [receipt, { type: \"input_image\", image: attachment.dataUrl }];\n      });\n      const clone: Record<string, unknown> = {\n        ...original,\n        content: [...existingContent, ...attachmentParts],\n      };\n      delete clone[MODEL_ATTACHMENT_REFS_FIELD];\n      projected[index] = clone;\n    }\n    return projected;\n  };\n}\n\n/** Add current trigger refs only when older/local history predates durable stamping. */\nexport function withCurrentUserAttachmentRefs(\n  historyItems: Array<Record<string, unknown>>,\n  refs: FileResourceRef[],\n): Array<Record<string, unknown>> {\n  if (refs.length === 0) return historyItems;\n  // Compaction can put a catalog after the triggering user message. A ref\n  // already retained anywhere in canonical history must not be copied onto\n  // that older catalog (and then disappear when the next turn replays it).\n  const retainedIds = new Set(\n    historyItems.flatMap((item) => attachmentRefsFromItem(item).map((ref) => ref.fileId)),\n  );\n  const missing = refs.filter((ref) => !retainedIds.has(ref.fileId));\n  if (missing.length === 0) return historyItems;\n  for (let index = historyItems.length - 1; index >= 0; index -= 1) {\n    const item = historyItems[index]!;\n    if (item[MODEL_ATTACHMENT_CATALOG_MARKER] === true) continue;\n    if (item.type !== \"message\" || item.role !== \"user\") continue;\n    const existing = attachmentRefsFromItem(item);\n    const existingIds = new Set(existing.map((ref) => ref.fileId));\n    const additions = missing.filter((ref) => !existingIds.has(ref.fileId));\n    if (additions.length === 0) return historyItems;\n    const projected = [...historyItems];\n    projected[index] = { ...item, [MODEL_ATTACHMENT_REFS_FIELD]: [...existing, ...additions] };\n    return projected;\n  }\n  return historyItems;\n}\n\nexport async function turnInput(\n  db: Database,\n  runtime: OpenGeniRuntime,\n  agent: any,\n  trigger: Awaited<ReturnType<typeof getSessionEvent>>,\n  options: TurnInputOptions,\n): Promise<PreparedTurnInput> {\n  if (!trigger) {\n    throw new Error(\"Missing trigger event\");\n  }\n  const updates = await measureHistoryPreparationPhase(\n    options,\n    \"system_update_load\",\n    async () =>\n      await listSessionSystemUpdatesForTurn(\n        db,\n        trigger.workspaceId,\n        trigger.sessionId,\n        options.turnId,\n      ),\n  );\n  // A logical turn can receive another atomic batch when an interrupted\n  // attempt resumes. Every update must retain its durable receipt, but the\n  // turn-wide query legitimately spans multiple history items. Canonical\n  // history owns their ordering and exactly-once inclusion below.\n  if (updates.some((update) => !update.deliveredHistoryItemId)) {\n    throw new Error(\"Delivered internal update has no durable model-memory batch\");\n  }\n  const internalContext = joinInternalContext(\n    options.recovering\n      ? [\n          \"[OpenGeni inference recovery]\",\n          \"Continue the same inference from durable conversation and sandbox state. A previous execution stopped before it could finish. Do not repeat completed side effects; inspect actual state when uncertain.\",\n        ].join(\"\\n\")\n      : undefined,\n    options.unavailableSandboxFilesNote,\n    options.runCredentialsNote,\n    options.mcpAvailabilityNote,\n    options.knowledgeSourcePreparationNote,\n  );\n  if (trigger.type === \"user.message\") {\n    const payload = trigger.payload as {\n      text?: unknown;\n      annotations?: unknown;\n      resources?: unknown;\n    };\n    const hasAnnotations = Array.isArray(payload.annotations) && payload.annotations.length > 0;\n    if (typeof payload.text !== \"string\" || (payload.text.trim().length === 0 && !hasAnnotations)) {\n      throw new Error(\"user.message payload is missing text and annotations\");\n    }\n    const resources = Array.isArray(payload.resources) ? (payload.resources as ResourceRef[]) : [];\n    const fileAttachments = await measureHistoryPreparationPhase(\n      options,\n      \"current_attachment_resolution\",\n      async () =>\n        await resolveUserMessageFileAttachments(\n          db,\n          options.fileAuthority.accountId,\n          trigger.workspaceId,\n          options.fileAuthority.subjectId,\n          resources,\n        ),\n    );\n    const attachmentContext = userMessageAttachmentsContext(fileAttachments);\n    return await messageInput(\n      db,\n      runtime,\n      agent,\n      trigger,\n      undefined,\n      joinInternalContext(internalContext, attachmentContext),\n      fileAttachments,\n      options.providerApi,\n      options.projectCanonicalHistory,\n      options.materializeModelHistory,\n      options.projectModelHistory,\n      options.loadActiveHistory,\n      options,\n    );\n  }\n  // Maintenance has no user message or delivered-update batch. It still needs\n  // the ordinary history/projection path so SDK preparation can capture the\n  // same model request prefix before the queued compaction stops inference.\n  if (\n    trigger.type === \"system.update.delivered\" ||\n    trigger.type === \"session.context.compaction.requested\"\n  ) {\n    if (trigger.type === \"system.update.delivered\" && updates.length === 0) {\n      throw new Error(\"Internal update inference has no delivered updates\");\n    }\n    return await messageInput(\n      db,\n      runtime,\n      agent,\n      trigger,\n      undefined,\n      internalContext,\n      [],\n      options.providerApi,\n      options.projectCanonicalHistory,\n      options.materializeModelHistory,\n      options.projectModelHistory,\n      options.loadActiveHistory,\n      options,\n    );\n  }\n  if (trigger.type === \"user.approvalDecision\" || trigger.type === \"user.humanInputResponse\") {\n    return await openSuffixMessageInput(db, runtime, agent, trigger, internalContext, options);\n  }\n  throw new Error(`Unsupported trigger event type: ${trigger.type}`);\n}\n\nfunction joinInternalContext(...parts: Array<string | undefined>): string | undefined {\n  const content = parts.map((part) => part?.trim()).filter((part): part is string => Boolean(part));\n  return content.length > 0 ? content.join(\"\\n\\n\") : undefined;\n}\n\nasync function openSuffixMessageInput(\n  db: Database,\n  runtime: OpenGeniRuntime,\n  agent: any,\n  trigger: NonNullable<Awaited<ReturnType<typeof getSessionEvent>>>,\n  internalContext: string | undefined,\n  options: TurnInputOptions,\n): Promise<PreparedTurnInput> {\n  const suffixRows = await listTurnOpenSuffixToolCalls(\n    db,\n    trigger.workspaceId,\n    trigger.sessionId,\n    options.turnId,\n  );\n  if (suffixRows.length === 0) {\n    throw new Error(\"Open suffix resume has no interruption rows\");\n  }\n  if (suffixRows.some((row) => row.resultItem == null)) {\n    throw new Error(\"Open suffix resume still has unresolved members\");\n  }\n  return await messageInput(\n    db,\n    runtime,\n    agent,\n    trigger,\n    undefined,\n    internalContext,\n    [],\n    options.providerApi,\n    options.projectCanonicalHistory,\n    options.materializeModelHistory,\n    options.projectModelHistory,\n    options.loadActiveHistory,\n    options,\n  );\n}\n\n/** Build one inference from canonical history plus attempt-local operational context. */\nasync function messageInput(\n  db: Database,\n  runtime: OpenGeniRuntime,\n  agent: any,\n  trigger: NonNullable<Awaited<ReturnType<typeof getSessionEvent>>>,\n  text: string | undefined,\n  internalContext: string | undefined,\n  currentAttachments: UserMessageFileAttachment[] = [],\n  providerApi: HistoryProviderApi = \"responses\",\n  projectCanonicalHistory?: ModelHistoryAttachmentProjector,\n  materializeModelHistory?: ModelHistoryAttachmentProjector,\n  projectModelHistory?: ModelHistoryAttachmentProjector,\n  loadActiveHistory: typeof getActiveSessionHistoryItemsPaged = getActiveSessionHistoryItemsPaged,\n  preparationOptions: Pick<TurnInputOptions, \"onPreparationPhase\"> = {},\n): Promise<PreparedTurnInput> {\n  const currentAttachmentRefs = currentAttachments.map((attachment) => attachment.resource);\n  const [stored, envelope] = await Promise.all([\n    measureHistoryPreparationPhase(preparationOptions, \"durable_history_load\", async () =>\n      loadActiveHistory(db, trigger.workspaceId, trigger.sessionId),\n    ),\n    measureHistoryPreparationPhase(preparationOptions, \"sandbox_envelope_load\", async () =>\n      getSandboxSessionEnvelope(db, trigger.workspaceId, trigger.sessionId),\n    ),\n  ]);\n  const canonicalView = await measureHistoryPreparationPhase(\n    preparationOptions,\n    \"canonical_projection\",\n    async () => {\n      const active = projectRejectedProviderArtifacts(stored);\n      return projectCanonicalHistory ? await projectCanonicalHistory(active) : active;\n    },\n  );\n  const providerView = await measureHistoryPreparationPhase(\n    preparationOptions,\n    \"provider_projection\",\n    () => projectHistoryForProvider(canonicalView, providerApi),\n  );\n  const referencedHistory = await measureHistoryPreparationPhase(\n    preparationOptions,\n    \"attachment_ref_projection\",\n    () => withCurrentUserAttachmentRefs(providerView, currentAttachmentRefs),\n  );\n  const materializedHistory = await measureHistoryPreparationPhase(\n    preparationOptions,\n    \"screenshot_materialization\",\n    async () =>\n      materializeModelHistory\n        ? await materializeModelHistory(referencedHistory)\n        : referencedHistory,\n  );\n  const historyItems = await measureHistoryPreparationPhase(\n    preparationOptions,\n    \"model_attachment_projection\",\n    async () =>\n      projectModelHistory\n        ? await projectModelHistory(materializedHistory, {\n            inlineFiles: currentAttachments.map((attachment) => attachment.file),\n          })\n        : materializedHistory,\n  );\n  const prepared = await measureHistoryPreparationPhase(\n    preparationOptions,\n    \"runtime_input_assembly\",\n    async () =>\n      await runtime.prepareInput(agent, {\n        kind: \"message\",\n        ...(text ? { text } : {}),\n        ...(internalContext ? { internalContext } : {}),\n        historyItems: historyItems as any,\n        sandboxEnvelope: envelope,\n        ...(projectModelHistory ? { modelInputAlreadyProjected: true } : {}),\n      }),\n  );\n  const providerArtifactCandidates = await measureHistoryPreparationPhase(\n    preparationOptions,\n    \"artifact_candidate_scan\",\n    () => {\n      const preparedItems = Array.isArray(prepared.input)\n        ? new Set(prepared.input)\n        : new Set<unknown>();\n      return {\n        knownHistoryItemIds: stored.map((row) => row.id),\n        historyItemIds: stored\n          .filter(\n            (row) =>\n              row.providerArtifactInvalidatedAt === null &&\n              hasOpaqueProviderArtifact(row.item) &&\n              preparedItems.has(row.item),\n          )\n          .map((row) => row.id),\n      };\n    },\n  );\n  return {\n    input: prepared,\n    persistedHistoryCount: prepared.persistedHistoryCount,\n    providerArtifactCandidates,\n  };\n}\n\nexport async function userMessageTextWithAttachments(\n  db: Database,\n  accountId: string,\n  workspaceId: string,\n  subjectId: string | null,\n  text: string,\n  resources: ResourceRef[],\n): Promise<string> {\n  const fileAttachments = await resolveUserMessageFileAttachments(\n    db,\n    accountId,\n    workspaceId,\n    subjectId,\n    resources,\n  );\n  const attachmentContext = userMessageAttachmentsContext(fileAttachments);\n  return attachmentContext ? [text, \"\", attachmentContext].join(\"\\n\") : text;\n}\n\ntype UserMessageFileAttachment = {\n  resource: Extract<ResourceRef, { kind: \"file\" }>;\n  file: FileAsset;\n};\n\nasync function resolveUserMessageFileAttachments(\n  db: Database,\n  accountId: string,\n  workspaceId: string,\n  subjectId: string | null,\n  resources: ResourceRef[],\n): Promise<UserMessageFileAttachment[]> {\n  const fileResources = resources.filter(\n    (resource): resource is FileResourceRef => resource.kind === \"file\",\n  );\n  if (fileResources.length === 0) return [];\n  const files = await getFilesForSubject(db, {\n    accountId,\n    workspaceId,\n    subjectId,\n    fileIds: fileResources.map((resource) => resource.fileId),\n  });\n  const fileById = new Map(files.map((file) => [file.id, file]));\n  return fileResources.map((resource) => {\n    const file = fileById.get(resource.fileId);\n    if (!file) throw new Error(`File not found: ${resource.fileId}`);\n    return { resource, file };\n  });\n}\n\nfunction userMessageAttachmentsContext(\n  attachments: UserMessageFileAttachment[],\n): string | undefined {\n  const attachedFiles = attachments.map(\n    ({ resource, file }) =>\n      `- ${file.filename} (${file.contentType}, ${file.sizeBytes} bytes): ${sandboxFilePath(resource, file)}`,\n  );\n  if (attachedFiles.length === 0) {\n    return undefined;\n  }\n  return [\"Attached files are available in the sandbox:\", ...attachedFiles].join(\"\\n\");\n}\n\nfunction sandboxFilePath(\n  resource: Extract<ResourceRef, { kind: \"file\" }>,\n  file: FileAsset,\n): string {\n  return `${resourceMountPath(resource)}/${file.safeFilename}`;\n}\n","// ChatGPT plan entitlement for Codex-billed turns.\n//\n// A connected ChatGPT account can move to a plan that no longer includes the\n// requested model (production: Pro to Free, then every request answered with\n// an empty HTTP 400). This module turns that evidence into a typed decision:\n// re-check the account's current plan, and either exclude that credential for\n// this model and let the normal failover protocol move the SAME turn, or fail\n// with a typed, plain-language payload. It never retries the request itself.\n\nimport { productLabelForModelId } from \"@opengeni/config\";\nimport {\n  codexPlanDisplayName,\n  codexPlanEntitlementLost,\n  codexPlanIsUpgrade,\n  codexPlanKey,\n  type CodexEntitlementRejection,\n} from \"@opengeni/codex\";\nimport {\n  codexPlanExcludesModel,\n  codexPlanPreviouslyExcludedModel,\n  connectionModelAllowed,\n  type CodexCredentialPlanRecheck,\n  type CodexPlanEntitlementExclusion,\n} from \"@opengeni/db\";\n\nexport const CODEX_PLAN_ENTITLEMENT_CODE = \"codex_plan_entitlement\";\nexport const CODEX_REQUEST_REJECTED_CODE = \"codex_request_rejected\";\n\nexport type CodexPlanEntitlementFailurePayload = {\n  error: string;\n  code: typeof CODEX_PLAN_ENTITLEMENT_CODE;\n  retryable: false;\n  planType: string | null;\n  model: string | null;\n  detail?: string;\n};\n\nexport type CodexRequestRejectedFailurePayload = {\n  error: string;\n  code: typeof CODEX_REQUEST_REJECTED_CODE;\n  retryable: false;\n  planType: string | null;\n  detail?: string;\n};\n\n/**\n * The user-set label of one connected ChatGPT account. The account email is\n * deliberately never used: this text lands in the durable `turn.failed` event\n * that every session reader (including embedding-host end users) can see, and\n * an inherited organization credential's email may be a member's personal\n * address. Without a label the copy says \"The connected ChatGPT account\".\n */\nexport function codexAccountDisplayLabel(\n  account: { label: string | null } | null | undefined,\n): string | null {\n  const label = account?.label?.trim() || null;\n  return label ? label.slice(0, 120) : null;\n}\n\nfunction accountPhrase(accountLabel: string | null): string {\n  return accountLabel ? `The ChatGPT account \"${accountLabel}\"` : \"The connected ChatGPT account\";\n}\n\nfunction rejectionDetail(rejection: CodexEntitlementRejection | null): string | undefined {\n  if (!rejection) return undefined;\n  return rejection.evidence === \"empty_body\"\n    ? `The Codex backend answered HTTP ${rejection.status} with no error body.`\n    : `The Codex backend refused the model for this plan (HTTP ${rejection.status}).`;\n}\n\n/** Terminal copy when the serving account's plan does not include the model. */\nexport function codexPlanEntitlementFailurePayload(input: {\n  accountLabel: string | null;\n  planType: string | null;\n  planChanged: boolean;\n  modelId: string | null;\n  rejection?: CodexEntitlementRejection | null;\n  /** The same turn waits for another connected account instead of failing. */\n  waiting?: boolean;\n}): CodexPlanEntitlementFailurePayload {\n  const plan = codexPlanDisplayName(input.planType);\n  const model = input.modelId ? productLabelForModelId(input.modelId) : \"this model\";\n  const lead = accountPhrase(input.accountLabel);\n  const next = input.waiting\n    ? \"OpenGeni is waiting for another connected account to become available.\"\n    : \"Upgrade it, use another connected account, or choose another model.\";\n  const error = plan\n    ? `${lead} ${input.planChanged ? \"is now\" : \"is\"} on the ${plan} plan, which doesn't include ${model}. ${next}`\n    : `${lead} no longer has access to ${model} on its current plan. ${next}`;\n  const detail = rejectionDetail(input.rejection ?? null);\n  return {\n    error,\n    code: CODEX_PLAN_ENTITLEMENT_CODE,\n    retryable: false,\n    planType: plan ? codexPlanKey(input.planType) : null,\n    model: input.modelId,\n    ...(detail ? { detail } : {}),\n  };\n}\n\n/**\n * Terminal copy for an empty Codex rejection. With `planChecked`, the account's\n * plan was re-read and did not explain it, so OpenGeni kept the account.\n */\nexport function codexRequestRejectedFailurePayload(input: {\n  accountLabel: string | null;\n  planType: string | null;\n  rejection: CodexEntitlementRejection;\n  planChecked?: boolean;\n}): CodexRequestRejectedFailurePayload {\n  const plan = codexPlanDisplayName(input.planType);\n  const lead = accountPhrase(input.accountLabel);\n  const planClause =\n    input.planChecked === false\n      ? \"\"\n      : plan\n        ? `${lead} still reports the ${plan} plan, so OpenGeni did not switch accounts. `\n        : `OpenGeni could not confirm the current plan of ${lead.charAt(0).toLowerCase()}${lead.slice(1)}, so it did not switch accounts. `;\n  return {\n    error:\n      `The Codex backend rejected this request (HTTP ${input.rejection.status}) without an error message. ` +\n      `${planClause}Try again, or choose another model if it keeps failing.`,\n    code: CODEX_REQUEST_REJECTED_CODE,\n    retryable: false,\n    planType: plan ? codexPlanKey(input.planType) : null,\n    ...(rejectionDetail(input.rejection) ? { detail: rejectionDetail(input.rejection)! } : {}),\n  };\n}\n\n/**\n * Admission-time refusal: the only accounts that could serve this turn were\n * already proven not to include its model on their current plan.\n */\nexport class CodexPlanEntitlementError extends Error {\n  readonly code = CODEX_PLAN_ENTITLEMENT_CODE;\n  constructor(readonly payload: CodexPlanEntitlementFailurePayload) {\n    super(payload.error);\n    this.name = \"CodexPlanEntitlementError\";\n  }\n}\n\nexport type CodexPlanEntitlementAssessment =\n  | {\n      kind: \"entitlement_lost\";\n      /**\n       * Plan the exclusion binds to: the freshly observed plan, or the\n       * recorded plan when the provider reported none.\n       */\n      planType: string | null;\n      /** The provider reported the current plan during this re-check. */\n      planObserved: boolean;\n      /** The observed plan was reached by a recorded (non-upgrade) plan change. */\n      planChanged: boolean;\n      credentialVersion: number | null;\n    }\n  | { kind: \"unexplained\"; planType: string | null };\n\n/** Pure decision over one plan re-check (see `codexPlanEntitlementLost`). */\nexport function assessCodexPlanEntitlement(\n  rejection: CodexEntitlementRejection,\n  recheck: CodexCredentialPlanRecheck,\n  modelId: string | null,\n): CodexPlanEntitlementAssessment {\n  const planObserved = recheck.planType !== null;\n  // The persisted change record, or (if that write did not land) the plan\n  // recorded just before this re-check when the fresh observation differs.\n  const planChangedFrom =\n    planObserved &&\n    recheck.previousPlanType !== null &&\n    codexPlanKey(recheck.previousPlanType) !== codexPlanKey(recheck.planType)\n      ? recheck.previousPlanType\n      : recheck.planChangedFrom;\n  const planChanged =\n    planObserved &&\n    planChangedFrom !== null &&\n    codexPlanKey(planChangedFrom) !== codexPlanKey(recheck.planType) &&\n    !codexPlanIsUpgrade(planChangedFrom, recheck.planType);\n  if (\n    codexPlanEntitlementLost({\n      evidence: rejection.evidence,\n      currentPlanType: recheck.planType,\n      planChangedFrom,\n      previouslyExcluded:\n        planObserved &&\n        codexPlanPreviouslyExcludedModel(\n          { planType: recheck.planType, planEntitlementExclusion: recheck.exclusion },\n          modelId,\n        ),\n    })\n  ) {\n    return {\n      kind: \"entitlement_lost\",\n      planType: planObserved ? recheck.planType : recheck.previousPlanType,\n      planObserved,\n      planChanged,\n      credentialVersion: recheck.credentialVersion,\n    };\n  }\n  return { kind: \"unexplained\", planType: recheck.planType };\n}\n\ntype AdmissionAccount = {\n  id: string;\n  label: string | null;\n  planType: string | null;\n  allocatorEnabled: boolean;\n  allowedModelIds?: string[] | null;\n  planEntitlementExclusion?: CodexPlanEntitlementExclusion | null;\n};\n\n/**\n * Pure admission check after credential selection found no account. Returns\n * the plan-excluded accounts that alone explain it, or null when capacity,\n * health, or policy (not plan entitlement) is the reason:\n *\n * - a manual pin (user intent) whose account's plan excludes the model;\n * - with rotation off, the active account's plan excludes the model;\n * - with rotation on, every allocatable account permitted for the model is\n *   plan-excluded.\n */\nexport function codexPlanEntitlementAdmissionBlock<T extends AdmissionAccount>(input: {\n  accounts: readonly T[];\n  modelId: string;\n  credentialId: string | null;\n  rotationEnabled: boolean;\n  activeCredentialId: string | null;\n  pinnedCredentialId: string | null;\n  pinSource: \"manual\" | \"policy\" | null;\n  now: Date;\n}): T[] | null {\n  if (input.credentialId !== null) return null;\n  const permitted = input.accounts.filter((account) =>\n    connectionModelAllowed(account.allowedModelIds, input.modelId),\n  );\n  const excluded = permitted.filter((account) =>\n    codexPlanExcludesModel(account, input.modelId, input.now),\n  );\n  if (excluded.length === 0) return null;\n  if (input.pinnedCredentialId && input.pinSource !== \"policy\") {\n    const pinned = excluded.find((account) => account.id === input.pinnedCredentialId);\n    return pinned ? [pinned] : null;\n  }\n  if (!input.rotationEnabled) {\n    const active = excluded.find((account) => account.id === input.activeCredentialId);\n    return active ? [active] : null;\n  }\n  const allocatable = permitted.filter((account) => account.allocatorEnabled);\n  const allocatableExcluded = allocatable.filter((account) =>\n    codexPlanExcludesModel(account, input.modelId, input.now),\n  );\n  return allocatable.length > 0 && allocatableExcluded.length === allocatable.length\n    ? allocatableExcluded\n    : null;\n}\n","import type { Settings } from \"@opengeni/config\";\nimport type {\n  ConnectionCredentialsPort,\n  DocumentAuthorityKind,\n  EntitlementsPort,\n  KnowledgeSourceSyncRunSummary,\n  ScheduledTaskTriggerType,\n  TurnInitiator,\n} from \"@opengeni/contracts\";\nimport type {\n  Database,\n  SessionWorkflowWakeDeliveryResult,\n  SessionAdmissionFence,\n} from \"@opengeni/db\";\nimport type { DocumentServices } from \"@opengeni/documents\";\nimport type { EventBus } from \"@opengeni/events\";\nimport type { Observability } from \"@opengeni/observability\";\nimport type { OpenGeniRuntime } from \"@opengeni/runtime\";\nimport type { ObjectStorage } from \"@opengeni/storage\";\n\n// Signal (start-if-needed) a session's Temporal workflow so a queued turn it\n// cannot otherwise observe gets claimed. Used to wake a PARENT session's\n// workflow when a spawned worker completes: the parent may have idled and let\n// its workflow run complete, so a plain signal would not start one — this must\n// signalWithStart. Injected (not built from the worker's NativeConnection)\n// because the worker package owns only the worker runtime, not a client; an\n// missing signaler leaves the committed outbox revision for the global repair\n// sweep; production workers always inject this dependency.\nexport type WakeSessionWorkflowSignal = (input: {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  workflowId: string;\n  wakeRevision: number;\n  interruptionRequested?: boolean;\n  /** Called after transport acceptance, before the fallible durable ACK. */\n  onSignalAccepted?: () => void;\n}) => Promise<SessionWorkflowWakeDeliveryResult | void>;\n\nexport type SignalCodexCapacityWorkflow = (input: {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  workflowId: string;\n  wakeRevision: number;\n}) => Promise<void>;\n\n/** Start the versioned, per-box sandbox reaper from the history-stable legacy\n * activity. The legacy Schedule workflow must keep its exact historical\n * ScheduleActivity command across mixed-version worker pools. */\nexport type StartSandboxReaperWorkflow = () => Promise<\"started\" | \"already_running\">;\n\n/** Start-or-observe the one durable reconciler for a paid video operation. */\nexport type StartVideoGenerationWorkflow = (input: {\n  accountId: string;\n  workspaceId: string;\n  operationId: string;\n}) => Promise<\"started\" | \"already_running\">;\n\n/** Exact activity-owned proof that the hard sandbox/tool fence physically\n * drained. This is delivery evidence only: the workflow still validates the\n * persisted attempt dispatch and commits the authoritative Postgres receipt. */\nexport type SessionAttemptQuiescenceProof = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  attemptId: string;\n  workflowId: string;\n  workflowRunId: string;\n  activityId: string;\n};\n\nexport type SignalSessionAttemptQuiesced = (input: SessionAttemptQuiescenceProof) => Promise<void>;\n\nexport type InspectSessionAttemptActivity = (input: {\n  workflowId: string;\n  workflowRunId: string;\n  activityId: string;\n}) => Promise<\"pending\" | \"settled\">;\n\n/** Services shared by both Temporal worker roles. Keep this graph free of the\n * agent runtime and document parser so each process can load only its role. */\nexport type SharedActivityServices = {\n  settings: Settings;\n  /**\n   * Original environment/host settings retained across live database-catalog\n   * refreshes. Older embedded test hosts may omit it and fall back to settings.\n   */\n  catalogSourceSettings?: Settings;\n  db: Database;\n  bus: EventBus;\n  objectStorage: ObjectStorage | null;\n  observability: Observability;\n  wakeSessionWorkflow: WakeSessionWorkflowSignal | null;\n  /** Durable signalWithStart fallback used only after the activity's direct\n   * physical-quiescence receipt write exhausts its bounded DB retries. */\n  signalSessionAttemptQuiesced: SignalSessionAttemptQuiesced | null;\n  /** Server-authoritative Temporal activity lease inspection used only to\n   * recover a missing quiescence receipt after the original activity vanished. */\n  inspectSessionAttemptActivity: InspectSessionAttemptActivity | null;\n  /** Revision-carrying capacity nudge; generic outbox repair is also sufficient. */\n  signalCodexCapacityWorkflow?: SignalCodexCapacityWorkflow | null;\n  /** Production control workers inject this Temporal client edge. A null edge\n   * deliberately retains the composite implementation for embedded/test hosts. */\n  startSandboxReaperWorkflow?: StartSandboxReaperWorkflow | null;\n  startVideoGenerationWorkflow?: StartVideoGenerationWorkflow | null;\n  // §7.5 P3 — host-entitlements port, the WORKER half of the same seam the API\n  // edge exposes on `AppDependencies`. When set, `ensureRunAllowed` (turn-entry\n  // AND the mid-stream budget valve) delegates the funding decision to\n  // `admitRun` instead of reading `getBillingBalance` locally. null/undefined\n  // (standalone default) → today's local-ledger read runs unchanged.\n  //\n  // IDEMPOTENCY: the worker calls `admitRun` ONLY as an admission READ (\"may\n  // this run/continue?\"), never to RECORD consumption. Usage is recorded\n  // exactly once, by `recordUsageEvent` keyed on a deterministic idempotency\n  // key the API already wrote at create-time — so a host PULL meter that also\n  // observes that same recorded event is consulted without double-charging:\n  // admission and metering are separate operations, and only metering carries\n  // the idempotency key.\n  entitlements?: EntitlementsPort | null;\n  // §7.6 connection-credential provider — host connection-credential provider, the WORKER half of the\n  // federated-connection boundary. When set, the run's per-run credential mint\n  // delegates to the host instead of self-minting from `settings`:\n  //   - `gitCredentials` REPLACES `createGitHubAppInstallationToken(settings,…)`\n  //     in `sandboxEnvironmentForRun` (the GH_TOKEN / git-extraheader source).\n  //   - `sandboxSecrets` REPLACES the `environmentsEncryptionKeyBytes(settings)`\n  //     decrypt in `loadWorkspaceEnvironmentForRun`.\n  // Each leg is independently optional; an unset leg falls through to today's\n  // self-mint for THAT leg. null/undefined (standalone default) → both legs\n  // self-mint byte-for-byte as today.\n  //\n  // workspace-scope cross-check CROSS-CHECK: a provider echoes the `workspaceId` it scoped the\n  // credential to; the consuming activity ASSERTS agreement with the run's\n  // workspace BEFORE injecting `GH_TOKEN` (or applying decrypted values). A host\n  // mapping bug returning tenant B's creds for a tenant-A run is caught here.\n  connectionCredentials?: ConnectionCredentialsPort | null;\n  /** Standalone, default-off personal GitHub smart-HTTP broker consumer. */\n  personalGitHubCredentials?: ConnectionCredentialsPort[\"gitCredentials\"] | null;\n};\n\n/** Control workers own short database and maintenance activities. Document\n * parsing is resolved lazily by the indexing activity itself. */\nexport type ControlActivityServices = SharedActivityServices;\n\n/** Turn workers own the model loop and never construct document parsers. */\nexport type TurnActivityServices = SharedActivityServices & {\n  runtime: OpenGeniRuntime;\n  /** Provider-free test/profiling seam; production injects the real runtime summarizer. */\n  summarizeContextForCompaction: typeof import(\"@opengeni/runtime\").summarizeForCompaction;\n};\n\n/** Full test/embedded harness retained as a source-compatible superset. */\nexport type ActivityServices = ControlActivityServices &\n  TurnActivityServices & {\n    documentServices: DocumentServices;\n  };\n\nexport type CodexCapacityWaitRef = {\n  /** Absent only for Temporal histories written before provider-tagged waits. */\n  provider?: \"codex\" | \"xai\";\n  waiterId: string;\n  generation: number;\n  nextCheckAt: string;\n  wakeRevision: number;\n};\n\nexport type XaiCapacityWaitRef = CodexCapacityWaitRef & { provider: \"xai\" };\n\nexport type GetCodexCapacityWaitInput = {\n  workspaceId: string;\n  sessionId: string;\n};\n\nexport type ReconcileCodexCapacityWaitInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  waiterId: string;\n  generation: number;\n  cause: \"timer\" | \"signal\" | \"queue\" | \"recovery\";\n  /** Absent only for Codex waits and pre-provider-tagged workflow histories. */\n  provider?: \"codex\" | \"xai\";\n};\n\nexport type ReconcileCodexCapacityWaitResult =\n  | ({ action: \"waiting\" } & CodexCapacityWaitRef)\n  | { action: \"resumed\" | \"paused\" | \"superseded\" | \"stale\" };\n\nexport type ActivityDependencies = Partial<ActivityServices>;\nexport type ControlActivityDependencies = Partial<ControlActivityServices>;\nexport type TurnActivityDependencies = Partial<TurnActivityServices>;\n\nexport type RunAgentTurnInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  workflowId: string;\n  workflowRunId: string;\n  attemptId: string;\n  trigger: { kind: \"next\" } | { kind: \"approval\"; triggerEventId: string };\n};\n\nexport type VideoGenerationTerminalStatus =\n  | \"completed\"\n  | \"provider_failed\"\n  | \"cancelled_before_submit\"\n  | \"outcome_unknown\"\n  | \"retention_failed\";\n\nexport type VideoGenerationReconcileResult =\n  | { action: \"waiting\"; delayMs: number }\n  | { action: \"terminal\"; status: VideoGenerationTerminalStatus };\n\nexport type SettleSessionInterruptionsInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  attemptId: string;\n  workflowId: string;\n  /**\n   * Replay-only compatibility for session workflow histories created before\n   * the receipt-gated cancellation v2 patch. New histories never send this\n   * phase; the exact activity writes the authoritative receipt itself.\n   */\n  phase?: \"logical\" | \"attempt_quiesced\";\n};\n\nexport type PersistSessionAttemptQuiescenceInput = SessionAttemptQuiescenceProof;\n\nexport type ReconcileSessionAttemptQuiescenceInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  attemptId: string;\n  workflowId: string;\n};\n\nexport type ReconcileSessionAttemptQuiescenceResult = {\n  action: \"quiesced\" | \"pending\" | \"stale\";\n};\n\nexport type FailSessionAttemptInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  attemptId: string;\n  /** Added in v2; old Temporal histories derive the session's canonical id. */\n  workflowId?: string;\n  /** Added in v2; old Temporal histories use the bounded 60-second floor. */\n  retryDelayMs?: number;\n  /** Added in v3. Upgraded turn workers classify failures from the atomic\n   * admission transaction; omission is a rolling-deploy/legacy unknown and\n   * deliberately keeps the recoverable wake behavior. */\n  preClaimFailureDisposition?: PreClaimFailureDisposition;\n  /** Added in v4. Retains the safe classified DB code so an ambiguously\n   * committed claim discovered by the control lane can recover the exact\n   * attempt instead of terminally failing it. */\n  preClaimFailure?: PreClaimFailureDetail;\n  admissionFence?: SessionAdmissionFence;\n  /** Added in v4. A claimed attempt that lost operational database access\n   * before turn-start completion carries its exact immutable turn identity so\n   * the DB-only control lane can recover it instead of terminally failing it. */\n  postClaimDatabaseRecovery?: PostClaimDatabaseRecoveryDetail;\n  /** The workflow admission trigger is required to re-evaluate the same\n   * durable admission branch before terminally settling a permanent failure. */\n  trigger?: RunAgentTurnInput[\"trigger\"];\n  error?: string;\n};\n\nexport type FailSessionAttemptResult =\n  | { action: \"blocked\" }\n  | { action: \"failed\" }\n  | { action: \"recovering\" }\n  | { action: \"unclaimed\" }\n  | { action: \"terminal\" }\n  | { action: \"stale\" };\n\nexport type PreClaimFailureDisposition = \"retryable\" | \"permanent\" | \"blocked\";\n\nexport type PreClaimFailureDetail = {\n  disposition: PreClaimFailureDisposition;\n  code: \"db_deadlock\" | \"db_serialization_failure\" | \"db_failure\" | \"claim_invariant\";\n  sqlState?: string | null;\n  reason?:\n    | \"database_claim_rejected\"\n    | \"initiator_membership_required\"\n    | \"personal_resource_grant_required\";\n  retryPolicy?: \"explicit_recheck\";\n};\n\nexport const PRE_CLAIM_FAILURE_TYPE = \"OpenGeniPreClaimFailure\";\nexport const PRE_CLAIM_FAILURE_MESSAGE = \"Agent turn admission failed before attempt claim.\";\n\nexport type PostClaimDatabaseRecoveryDetail = {\n  turnId: string;\n  triggerEventId: string;\n  executionGeneration: number;\n  code: \"db_deadlock\" | \"db_serialization_failure\" | \"db_failure\";\n  /** Present when the database outage interrupted a retryable provider\n   * recovery checkpoint. The control lane must advance this exact durable\n   * count instead of reopening the same recovery generation. */\n  providerRecoveryCount?: number;\n  /** Safe classified provider cause paired with providerRecoveryCount. */\n  providerFailureCode?: string;\n  /** Persist the no-replay setup marker, not a new provider/setup attempt. */\n  sandboxSetupOutcomeUnknown?: true;\n};\n\nexport const POST_CLAIM_DATABASE_RECOVERY_FAILURE_TYPE = \"OpenGeniPostClaimDatabaseRecovery\";\nexport const POST_CLAIM_DATABASE_RECOVERY_FAILURE_MESSAGE =\n  \"Agent turn database recovery required after attempt claim.\";\n\nexport type RecoverDispatchInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  attemptId: string;\n  timeoutType: \"HEARTBEAT\" | \"SCHEDULE_TO_START\";\n};\n\nexport type RecoverDispatchResult =\n  // The same current inference is now recoverable. It never enters the prompt\n  // queue; the next claim creates a new attempt for this exact turn.\n  | { action: \"unclaimed\" }\n  | { action: \"recovering\"; turnId: string; redispatches: number }\n  // The turn is no longer running/requires_action: the timed-out attempt was\n  // a zombie that actually settled the turn after the server gave up on its\n  // heartbeats. Nothing to redo; the workflow just continues its loop.\n  | { action: \"stale\" }\n  // The per-turn crash-loop guard tripped; the workflow must fail the\n  // session for real. `redispatches` is the count already consumed (== the\n  // ceiling), so the failed attempt was worker death number redispatches + 1.\n  | { action: \"exceeded\"; turnId: string; redispatches: number };\n\nexport const ESCAPED_MCP_TIMEOUT_RECOVERY_FAILURE_TYPE = \"EscapedMcpTimeoutRecoveryFailure\";\nexport const ESCAPED_MCP_TIMEOUT_RECOVERY_FAILURE_MESSAGE =\n  \"MCP request timeout recovery checkpoint failed before model request\";\n\nexport type EscapedMcpTimeoutRecoveryDetail = {\n  turnId: string;\n  triggerEventId: string;\n  executionGeneration: number;\n  providerRecoveryCount: number;\n  continueDelayMs: number;\n};\n\nexport type RecoverEscapedMcpTimeoutInput = EscapedMcpTimeoutRecoveryDetail & {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  attemptId: string;\n};\n\nexport type RecoverEscapedMcpTimeoutResult = {\n  action: \"recovering\" | \"stale\" | \"ineligible\";\n};\n\nexport type PeekSessionWorkInput = {\n  workspaceId: string;\n  sessionId: string;\n  includeAdmissionFence?: boolean;\n  /** Versioned workflow observer opt-in, never a caller authorization grant. */\n  observerAccountId?: string;\n};\n\nexport type SettleSessionInputWaitInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  waitTurnId: string;\n  disposition: \"held\" | \"timeout\" | \"superseded\";\n};\n\nexport type SettleSessionInputWaitResult = {\n  action: \"held\" | \"timeout\" | \"superseded\" | \"stale\";\n};\n\nexport type ExpireSessionHumanInputInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  requestId: string;\n};\n\nexport type ExpireSessionHumanInputResult = {\n  action: \"expired\" | \"stale\" | \"not_found\";\n};\n\nexport type ExpireSessionInteractionInterventionInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  interventionId: string;\n};\n\nexport type ExpireSessionInteractionInterventionResult = {\n  action: \"expired\" | \"stale\" | \"not_found\";\n};\n\nexport type ExpireScheduledRunHumanWaitInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  turnId: string;\n  runId: string;\n};\n\nexport type ExpireScheduledRunHumanWaitResult = {\n  action: \"expired\" | \"stale\" | \"not_found\";\n};\n\nexport type MarkSessionIdleInput = {\n  workspaceId: string;\n  sessionId: string;\n};\n\nexport type MaybeContinueGoalInput = {\n  accountId: string;\n  workspaceId: string;\n  sessionId: string;\n  workflowId: string;\n};\n\nexport type MaybeContinueGoalResult = {\n  // `deferred`: idle backoff between consecutive no-input continuations.\n  // Nothing was materialized; the obligation remains armed and a delayed\n  // outbox wake at the pacing deadline restarts it.\n  action: \"none\" | \"queue\" | \"continue\" | \"paused\" | \"deferred\";\n};\n\nexport type DispatchScheduledTaskRunInput = {\n  workspaceId: string;\n  taskId: string;\n  /** Stable Temporal workflow identity; retries must reuse the same source row. */\n  producerKey?: string;\n} & (\n  | {\n      triggerType: Extract<ScheduledTaskTriggerType, \"scheduled\">;\n      agentRunUsageIdempotencyKey?: never;\n      initiator?: never;\n      credentialRestriction?: never;\n    }\n  | {\n      triggerType: Extract<\n        ScheduledTaskTriggerType,\n        \"manual\" | \"initial\" | \"provider_event\" | \"retry\" | \"repair\"\n      >;\n      agentRunUsageIdempotencyKey: string;\n      /** Exact identity used by the API-side charge for this same trigger. */\n      initiator: TurnInitiator;\n      /** Trusted API-side caller ceiling for this occurrence, not the schedule. */\n      credentialRestriction?: \"developer_setup\";\n    }\n);\n\nexport type DispatchScheduledTaskRunResult =\n  | { action: \"deleted\" }\n  | {\n      action: \"blocked\";\n      runId?: string;\n      diagnostic?: import(\"@opengeni/contracts\").ConnectionAccountSelectionDiagnostic;\n      /** Present when the occurrence was refused as a visible run receipt. */\n      refusal?: import(\"@opengeni/contracts\").ScheduledTaskAdmissionRefusal;\n      reason:\n        | \"insufficient_credits\"\n        | \"allowance_exhausted\"\n        | \"monthly_model_cost_limit\"\n        | \"monthly_agent_run_limit\"\n        | \"malformed_manual_trigger\"\n        | \"scheduled_task_paused\"\n        | \"scheduled_authority_exhausted\"\n        | \"scheduled_run_terminal\"\n        | \"scheduled_execution_unrepresentable\"\n        | \"connection_account_unavailable\"\n        | \"scheduled_authority_unavailable\"\n        | \"machine_target_unavailable\"\n        | \"machine_enrollment_inactive\"\n        | \"variable_set_unavailable\"\n        | \"rig_version_unavailable\"\n        | \"knowledge_source_paused\"\n        | \"legacy_source_schedule_requires_migration\"\n        | \"incident_preflight_metadata_missing\"\n        | \"incident_responder_under_capable\"\n        | \"incident_data_source_unsuitable\";\n    }\n  | {\n      action: \"start\" | \"signal\";\n      accountId: string;\n      workspaceId: string;\n      sessionId: string;\n      triggerEventId: string;\n      workflowId: string;\n      workflowWakeRevision: number | null;\n    }\n  | {\n      action: \"knowledge_source_sync\";\n      accountId: string;\n      workspaceId: string;\n      taskId: string;\n      scheduledTaskRunId: string;\n      sourceId: string;\n      overlapPolicy: \"skip\" | \"buffer_one\";\n    };\n\nexport type RunKnowledgeSourceSyncBatchInput = {\n  /** Host-bound attempt only. Legacy control workflow inputs have none and cannot fetch. */\n  agent?: Extract<import(\"@opengeni/db\").KnowledgeActor, { kind: \"agent\" }>;\n\n  accountId: string;\n  workspaceId: string;\n  taskId: string;\n  scheduledTaskRunId: string;\n  sourceId: string;\n  overlapPolicy: \"skip\" | \"buffer_one\";\n};\n\nexport type DispatchAutomationRunInput = {\n  accountId: string;\n  workspaceId: string;\n  runId: string;\n};\n\nexport type DispatchAutomationRunResult =\n  | { action: \"started\"; sessionId: string }\n  | { action: \"already_dispatched\"; sessionId: string }\n  | { action: \"skipped\"; reason: string }\n  | { action: \"failed\"; reason: string }\n  | { action: \"not_found\" };\n\nexport type RunKnowledgeSourceSyncBatchResult = (\n  | { action: \"continue\" }\n  | {\n      action: \"complete\";\n      bufferedWake: boolean;\n      bufferedScheduledTaskRunId?: string | null;\n    }\n  | { action: \"skipped\" | \"buffered\" }\n  | {\n      action: \"failed\";\n      bufferedWake: boolean;\n      bufferedScheduledTaskRunId?: string | null;\n    }\n) & { summary?: KnowledgeSourceSyncRunSummary; errorCode?: string };\n\ntype DocumentIndexIdentity = {\n  accountId: string;\n  workspaceId: string;\n  documentId: string;\n};\n\ntype CurrentDocumentIndexAuthority = {\n  authorityKind: DocumentAuthorityKind;\n  authorityWorkspaceId: string | null;\n  authoritySubjectId: string | null;\n};\n\ntype HistoricalDocumentIndexAuthority = {\n  authorityKind?: never;\n  authorityWorkspaceId?: never;\n  authoritySubjectId?: never;\n};\n\nexport type IndexDocumentInput = DocumentIndexIdentity &\n  (CurrentDocumentIndexAuthority | HistoricalDocumentIndexAuthority);\n\ntype ClaimedRunAgentTurnResult = {\n  // \"recovering\": this attempt ended after durably preserving the same current\n  // inference for a new attempt. Recovery is not prompt queue work.\n  status: \"idle\" | \"requires_action\" | \"failed\" | \"cancelled\" | \"recovering\" | \"waiting_capacity\";\n  turnId: string;\n  attemptId: string;\n  // Provider backpressure pacing: when set on an idle or recovering result, the\n  // session workflow holds the loop this long before admitting the next attempt.\n  continueDelayMs?: number;\n  // Multi-account rotation all-capped idle: every connected Codex subscription is\n  // rate-limited/cooling. This is a MANDATORY hold — session.ts must wait\n  // continueDelayMs (floored to a minimum) and must NOT treat a 0/elapsed delay as\n  // \"continue now\" (invariant 4: NO THRASH). Distinct from a normal continueDelayMs:0\n  // which legitimately means \"a rotation candidate is ready, re-dispatch immediately\".\n  idleUntilReset?: boolean;\n  // Durable native zero-pool wait for this same nonterminal logical turn.\n  // Unlike continueDelayMs, this reference is persisted in Postgres and\n  // reconstructed after workflow/worker restart. The workflow must not call\n  // maybeContinueGoal or manufacture queue/input work while it is active.\n  capacityWait?: CodexCapacityWaitRef;\n  // This execution reached a durable terminal-for-now boundary (for example,\n  // maintenance could not run or same-turn context recovery failed). End this\n  // workflow run without synthesizing another goal continuation from unchanged\n  // state. A later prompt/control/new-update wake may retry through normal claim\n  // ordering.\n  deferredUntilWake?: boolean;\n};\n\nexport type RunAgentTurnResult =\n  | ClaimedRunAgentTurnResult\n  | {\n      status: \"unclaimed\";\n      reason: \"gate-closed\" | \"no-work\" | \"stale-approval\" | \"control-pending\";\n    };\n"],"mappings":";;;;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;;;ACRpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,aAAa,kBAAkB;AACxC,SAAS,oBAAoB;AAC7B,SAAS,YAAY;AACrB,SAAS,yBAAyB;AAElC,IAAM,4BAA4B;AAO3B,SAAS,kCACd,IACA,UACiE;AACjE,MAAI,CAAC,SAAS,2BAA4B,QAAO;AACjD,QAAM,SAAS,SAAS,yBAAyB,KAAK;AACtD,QAAM,eAAe,wBAAwB,QAAQ;AACrD,MAAI,CAAC,UAAU,CAAC,cAAc;AAC5B,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AAEA,SAAO,OAAO,YAAY;AACxB,QAAI,QAAQ,YAAY,QAAQ,aAAa,UAAU;AACrD,YAAM,IAAI,MAAM,6DAA6D;AAAA,IAC/E;AACA,QAAI,CAAC,QAAQ,uBAAuB,CAAC,QAAQ,gBAAgB,QAAQ;AACnE,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AACA,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AACA,UAAM,UAAU,MAAM,8BAA8B,IAAI,QAAQ,aAAa,QAAQ,SAAS;AAC9F,QACE,CAAC,QACD,CAAC,WACD,KAAK,OAAO,QAAQ,UACpB,KAAK,wBAAwB,QAAQ,uBACrC,CAAC,kBAAkB,KAAK,WAAW,QAAQ,SAAS,KACpD,CAAC,kBAAkB,KAAK,kBAAkB,QAAQ,gBAAgB,KAClE,QAAQ,kBAAkB,QAAQ,eAClC;AACA,YAAM,IAAI,MAAM,+DAA+D;AAAA,IACjF;AACA,UAAM,aAAa;AAAA,MACjB,KAAK;AAAA,MACL,QAAQ;AAAA,IACV;AACA,UAAM,WAAW,WAAW;AAC5B,UAAM,eAAe;AAAA,MACnB,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAEA,UAAM,aAAa,MAAM,6BAA6B,IAAI;AAAA,MACxD,WAAW,QAAQ;AAAA,MACnB,aAAa,QAAQ;AAAA,MACrB,WAAW,QAAQ;AAAA,MACnB,QAAQ,QAAQ;AAAA,MAChB,WAAW,QAAQ;AAAA,MACnB,qBAAqB,QAAQ;AAAA,MAC7B,mBAAmB,WAAW;AAAA,MAC9B,UAAU;AAAA,MACV,UAAU;AAAA,MACV,cAAc,WAAW;AAAA,MACzB,gBAAgB;AAAA,MAChB,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,gBAAgB,WAAW;AAAA,IAC7B,CAAC;AACD,QACE,WAAW,WAAW,gBACtB,WAAW,sBAAsB,WAAW,qBAC5C,WAAW,YAAY,iBAAiB,WAAW,gBACnD,WAAW,YAAY,yBAAyB,SAAS,iCACzD,WAAW,YAAY,mBAAmB,WAAW,gBACrD;AACA,YAAM,IAAI,MAAM,+DAA+D;AAAA,IACjF;AAEA,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AACA,QACE,CAAC,cACD,WAAW,cAAc,QAAQ,aACjC,WAAW,gBAAgB,WAAW,qBACtC,WAAW,cAAc,WAAW,kBACpC,WAAW,WAAW;AAAA;AAAA;AAAA,IAItB,WAAW,cAAc,WAAW,KACpC,WAAW,cAAc,CAAC,MAAM,UAChC,CAAC,2BAA2B,UAAU,GACtC;AACA,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,UAAM,WAAW,iCAAiC,MAAM,WAAW,QAAQ;AAC3E,UAAM,mBAAmB,MAAM,0CAA0C,IAAI;AAAA,MAC3E,WAAW,QAAQ;AAAA,MACnB,mBAAmB,WAAW;AAAA,MAC9B,WAAW,WAAW;AAAA,MACtB,cAAc,WAAW;AAAA,IAC3B,CAAC;AACD,QACE,CAAC,oBACD,iBAAiB,kCAAkC,SAAS,iCAC5D,iBAAiB,wBAAwB,SAAS,uBAClD,iBAAiB,wBAAwB,SAAS,uBAClD,iBAAiB,wBAAwB,SAAS,uBAClD,iBAAiB,wBAAwB,SAAS,uBAClD,SAAS,iBAAiB,SAAS,qBACnC;AACA,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAChE;AACA,UAAM,cAAc,IAAI;AAAA,MACtB,iBAAiB,aAAa,IAAI,CAAC,eAAe,CAAC,WAAW,cAAc,UAAU,CAAC;AAAA,IACzF;AACA,eAAW,cAAc,cAAc;AACrC,YAAM,UAAU,YAAY,IAAI,WAAW,YAAY;AACvD,UACE,CAAC,WACD,QAAQ,aAAa,WAAW,YAChC,QAAQ,iBAAiB,WAAW,gBACpC,QAAQ,wBAAwB,WAAW,uBAC3C,QAAQ,YACP,WAAW,WAAW,YACpB,QAAQ,mBAAmB,WAC1B,QAAQ,YACR,CAAC,uBAAuB,QAAQ,WAAW,MAC/C,CAAC,sBAAsB,QAAQ,WAAW,GAC1C;AACA,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAAA,IACF;AAEA,UAAM,WAAW;AAAA,MACf,MAAM,SAAS;AAAA,MACf,OAAO,GAAG,SAAS,YAAY,IAAI,SAAS,WAAW;AAAA,IACzD;AACA,QAAI,QAAQ,YAAY,YAAY;AAClC,aAAO;AAAA,QACL,aAAa,QAAQ;AAAA,QACrB,qBAAqB,QAAQ;AAAA,QAC7B,UAAU;AAAA,QACV,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAK;AACzC,UAAM,aAAa;AAAA,MACjB,SAAS;AAAA,MACT,WAAW,QAAQ;AAAA,MACnB,aAAa,QAAQ;AAAA,MACrB,WAAW,QAAQ;AAAA,MACnB,eAAe,QAAQ;AAAA,MACvB,QAAQ,QAAQ;AAAA,MAChB,WAAW,QAAQ;AAAA,MACnB,qBAAqB,QAAQ;AAAA,MAC7B,mBAAmB,WAAW;AAAA,MAC9B,cAAc,WAAW;AAAA,MACzB,+BAA+B,SAAS;AAAA,MACxC,gBAAgB,WAAW;AAAA,MAC3B,qBAAqB,SAAS;AAAA,MAC9B,qBAAqB,SAAS;AAAA,IAChC;AACA,UAAM,mBAA6D,aAAa;AAAA,MAC9E,CAAC,gBAAgB;AAAA,QACf,GAAG;AAAA,QACH,SAAS,+BAA+B,QAAQ;AAAA,UAC9C,GAAG;AAAA,UACH;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AACA,UAAM,SAAwC;AAAA,MAC5C,GAAG;AAAA,MACH,OAAO,YAAY,EAAE,EAAE,SAAS,WAAW;AAAA,MAC3C,UAAU;AAAA,MACV,WAAW,MAAM;AAAA,IACnB;AACA,WAAO;AAAA,MACL,OAAO,kCAAkC,QAAQ,MAAM;AAAA,MACvD,WAAW,IAAI,KAAK,OAAO,YAAY,GAAK,EAAE,YAAY;AAAA,MAC1D,aAAa,QAAQ;AAAA,MACrB,qBAAqB,QAAQ;AAAA,MAC7B,UAAU;AAAA,MACV,cAAc;AAAA,MACd;AAAA,MACA,WAAW;AAAA,QACT,MAAM;AAAA,QACN,cAAc,iBAAiB,IAAI,CAAC,gBAAgB;AAAA,UAClD,eAAe,WAAW;AAAA,UAC1B,WAAW,GAAG,YAAY,oBAAoB,WAAW,OAAO;AAAA,QAClE,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,sBAAsB,aAMnB;AACV,SACE,YAAY,QACZ,YAAY,UACZ,YAAY,QACZ,YAAY,YACZ,YAAY;AAEhB;AAEA,SAAS,uBAAuB,aAIpB;AACV,SAAO,YAAY,QAAQ,YAAY,YAAY,YAAY;AACjE;AAEA,IAAI;AAEJ,SAAS,sBAAqC;AAC5C,MAAI,8BAA8B,OAAW,QAAO;AACpD,MAAI;AACF,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,CAAC,WAAW,WAAW,UAAU,YAAY,oCAAoC;AAAA,MACjF,EAAE,UAAU,QAAQ,SAAS,KAAO,WAAW,KAAK,KAAK;AAAA,IAC3D,EAAE,KAAK;AACP,gCAA4B,KAAK,KAAK,IAAI,QAAQ;AAAA,EACpD,QAAQ;AACN,gCAA4B;AAAA,EAC9B;AACA,SAAO;AACT;AAEO,SAAS,wBAAwB,UAAmC;AACzE,QAAM,QACJ,SAAS,mBACR,SAAS,mBAAmB,WACzB,+BAA+B,SAAS,OAAO,KAC/C,SAAS,mBAAmB,WAAW,SAAS,mBAAmB,SACjE,oBAAoB,SAAS,OAAO,KACpC,SAAS;AACjB,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,IAAI,IAAI,KAAK;AACzB,MACE,SAAS,mBAAmB,aAC3B,IAAI,aAAa,eAAe,IAAI,aAAa,cAClD;AACA,QAAI,WAAW,oBAAoB,KAAK;AAAA,EAC1C;AACA,QAAM,sBACJ,SAAS,mBAAmB,aAC3B,IAAI,aAAa,0BAChB,IAAI,aAAa,6BACjB,2BAA2B,KAAK,IAAI,QAAQ;AAGhD,QAAM,yBACH,IAAI,aAAa,YACf,IAAI,aAAa,eAAe,IAAI,aAAa,eAAe,wBACnE,CAAC,SAAS,MAAM,EAAE,SAAS,SAAS,WAAW;AACjD,MACG,IAAI,aAAa,YAAY,CAAC,0BAC/B,IAAI,YACJ,IAAI,YACJ,IAAI,UACJ,IAAI,MACJ;AACA,WAAO;AAAA,EACT;AACA,MAAI,WAAW;AACf,SAAO,IAAI;AACb;AAEA,SAAS,8BACP,aACA,qBACiC;AACjC,QAAM,UAAU,YAAY;AAAA,IAC1B,CAACA,gBACCA,YAAW,aAAa,6BACxBA,YAAW,mBAAmB,qBAC9BA,YAAW,mCAAmC,wBAAwB;AAAA,EAC1E;AACA,QAAM,aAAa,QAAQ,CAAC;AAC5B,MACE,QAAQ,WAAW,KACnB,CAAC,cACD,WAAW,mBAAmB,gBAC9B,WAAW,SAAS,YACpB,CAAC,WAAW,qBACZ,CAAC,WAAW,mCACZ;AACA,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,SAAO;AACT;AAEA,SAAS,2BACP,MACA,qBACA,WAGgE;AAChE,MAAI,KAAK,WAAW,UAAU,QAAQ;AACpC,UAAM,IAAI,MAAM,wEAAwE;AAAA,EAC1F;AACA,QAAM,iBAAiB,IAAI;AAAA,IACzB,UAAU,IAAI,CAAC,eAAe,CAAC,WAAW,cAAc,UAAU,CAAC;AAAA,EACrE;AACA,QAAM,OAAO,oBAAI,IAAY;AAC7B,SAAO,KAAK,IAAI,CAAC,QAAQ;AACvB,UAAM,WAAW,eAAe,IAAI,IAAI,GAAG;AAC3C,QACE,CAAC,YACD,KAAK,IAAI,IAAI,GAAG,KAChB,IAAI,aAAa,YACjB,IAAI,wBAAwB,uBAC5B,IAAI,iBAAiB,UACrB,IAAI,mBAAmB,UACvB,OAAO,IAAI,YAAY,MAAM,SAAS,gBACtC,IAAI,QAAQ,SAAS,OACrB,IAAI,WAAW,SAAS,QACxB;AACA,YAAM,IAAI,MAAM,uEAAuE;AAAA,IACzF;AACA,SAAK,IAAI,IAAI,GAAG;AAChB,WAAO;AAAA,EACT,CAAC;AACH;;;ACpXA,SAAS,sCAAqD;AAM9D,SAAS,mDAAmD;AAC5D,SAAS,yBAAyB,oCAAmD;AACrF;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIA,SAAS,0CACd,UACA,IAC2B;AAC3B,SAAO;AAAA,IACL,gBAAgB,OAAO,YAAY,MAAM,gCAAgC,UAAU,IAAI,OAAO;AAAA,EAChG;AACF;AAEA,eAAe,gCACb,UACA,IACA,SACyB;AACzB,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,iBAAiB,QAAQ,sBAC3B,4CAA4C,QAAQ,mBAAmB,IACvE;AACJ,MAAI,CAAC,gBAAgB;AACnB,QAAI,aAAa,UAAU;AACzB,YAAM,IAAI,MAAM,GAAG,QAAQ,gEAAgE;AAAA,IAC7F;AACA,QAAI,QAAQ,YAAY,YAAY;AAClC,aAAO,EAAE,aAAa,QAAQ,YAAY;AAAA,IAC5C;AACA,UAAM,SAAS,MAAM,2CAA2C,UAAU;AAAA,MACxE,gBAAgB,QAAQ;AAAA,MACxB,eAAe,QAAQ;AAAA,IACzB,CAAC;AACD,WAAO;AAAA,MACL,OAAO,OAAO;AAAA,MACd,aAAa,QAAQ;AAAA,MACrB,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,UAAU,IAAI,CAAC;AAAA,IAC5D;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,6BAA6B,IAAI;AAAA,IACvD,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,IACA,WAAW,QAAQ;AAAA,IACnB,eAAe,QAAQ;AAAA,IACvB,QAAQ,QAAQ;AAAA,IAChB,WAAW,QAAQ;AAAA,IACnB,qBAAqB,QAAQ;AAAA,IAC7B,iBAAiB,QAAQ,kBAAkB,CAAC,GAAG,IAAI,CAAC,eAAe;AAAA,MACjE,KAAK,UAAU;AAAA,MACf,GAAI,UAAU,sBAAsB,SAChC,EAAE,mBAAmB,UAAU,kBAAkB,IACjD,CAAC;AAAA,MACL,GAAI,UAAU,iBAAiB,SAAY,EAAE,cAAc,UAAU,aAAa,IAAI,CAAC;AAAA,MACvF,GAAI,UAAU,mBAAmB,SAC7B,EAAE,gBAAgB,UAAU,eAAe,IAC3C,CAAC;AAAA,MACL,GAAI,UAAU,cAAc,SAAY,EAAE,WAAW,UAAU,UAAU,IAAI,CAAC;AAAA,IAChF,EAAE;AAAA,EACJ,CAAC;AACD,QAAM,SAAS;AAAA,IACb,aAAa,QAAQ;AAAA,IACrB,GAAI,QAAQ,sBAAsB,EAAE,qBAAqB,QAAQ,oBAAoB,IAAI,CAAC;AAAA,IAC1F;AAAA,IACA,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;AAAA,EACvE;AACA,MAAI,QAAQ,YAAY,YAAY;AAClC,WAAO,UAAU,mBAAmB,gBAClC,UAAU,mBAAmB,uBAC3B;AAAA,MACE,GAAG;AAAA,MACH,UAAU;AAAA,QACR,MAAM;AAAA,QACN,OAAO,GAAG,UAAU,SAAS,WAAW;AAAA,MAC1C;AAAA,IACF,IACA;AAAA,EACN;AACA,MACE,UAAU,mBAAmB,gBAC7B,UAAU,mBAAmB,sBAC7B;AACA,0CAAsC,OAAO;AAC7C,QAAI,CAAC,UAAU,OAAO;AACpB,YAAM,IAAI,MAAM,gDAAgD;AAAA,IAClE;AACA,UAAM,kBACJ,UAAU,mBAAmB,uBACzB;AAAA,MACE,aAAa,SAAS;AAAA,MACtB,qBAAqB,SAAS;AAAA,IAChC,IACA,oCAAoC,UAAU;AAAA,MAC5C,OAAO,UAAU;AAAA,MACjB,qBAAqB,UAAU;AAAA,IACjC,CAAC;AACP,QACE,UAAU,mBAAmB,wBAC7B,SAAS,wBAAwB,UAAU,OAC3C;AACA,YAAM,IAAI,MAAM,gEAAgE;AAAA,IAClF;AACA,UAAM,SAAS,MAAM,oDAAoD,iBAAiB;AAAA,MACxF,gBAAgB,QAAQ;AAAA,MACxB,eAAe,QAAQ;AAAA,MACvB,aAAa,EAAE,UAAU,QAAQ,eAAe,QAAQ;AAAA,IAC1D,CAAC;AACD,WAAO;AAAA,MACL,GAAG;AAAA,MACH,OAAO,OAAO;AAAA,MACd,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,UAAU,IAAI,CAAC;AAAA,IAC5D;AAAA,EACF;AACA,MAAI,UAAU,aAAa,KAAK,MAAM,UAAU,SAAS,KAAK,KAAK,IAAI,GAAG;AACxE,UAAM,IAAI,MAAM,aAAa,QAAQ,kCAAkC;AAAA,EACzE;AACA,QAAM,gBAAgB,+BAA+B,QAAQ;AAC7D,MAAI,CAAC,iBAAiB,CAAC,UAAU,qBAAqB;AACpD,UAAM,IAAI,MAAM,aAAa,QAAQ,qCAAqC;AAAA,EAC5E;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,OAAO,wBAAwB,eAAe,UAAU,mBAAmB;AAAA,IAC3E,GAAI,UAAU,YAAY,EAAE,WAAW,UAAU,UAAU,IAAI,CAAC;AAAA,EAClE;AACF;AAEA,SAAS,oCACP,UACA,WACA;AACA,QAAM,gBAAgB,+BAA+B,QAAQ;AAC7D,MAAI,CAAC,iBAAiB,CAAC,UAAU,qBAAqB;AACpD,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,SAAO;AAAA,IACL,aAAa,UAAU;AAAA,IACvB,qBAAqB,wBAAwB,eAAe,UAAU,mBAAmB;AAAA,EAC3F;AACF;AAEA,SAAS,sCAAsC,SAAsC;AACnF,QAAM,OAAO,QAAQ,kBAAkB,CAAC;AACxC,QAAM,gBAAgB,KAAK,IAAI,CAAC,cAAc,gBAAgB,UAAU,YAAY,CAAC;AACrF,QAAM,kBAAkB,KAAK,IAAI,CAAC,cAAc,gBAAgB,UAAU,cAAc,CAAC;AACzF,MACE,cAAc,KAAK,CAAC,UAAU,UAAU,IAAI,KAC5C,gBAAgB,KAAK,CAAC,UAAU,UAAU,IAAI,GAC9C;AACA,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,QAAM,qBAAqB,CAAC,GAAG,IAAI,IAAI,aAAyB,CAAC,EAAE;AAAA,IACjE,CAAC,MAAM,UAAU,OAAO;AAAA,EAC1B;AACA,QAAM,yBAAyB,CAAC,GAAG,IAAI,IAAI,QAAQ,aAAa,CAAC,EAAE;AAAA,IACjE,CAAC,MAAM,UAAU,OAAO;AAAA,EAC1B;AACA,QAAM,uBAAuB,CAAC,GAAG,IAAI,IAAI,eAA2B,CAAC;AACrE,MACE,qBAAqB,WAAW,KAChC,qBAAqB,CAAC,MAAM,QAAQ,kBACpC,mBAAmB,WAAW,QAAQ,cAAc,UACpD,mBAAmB,KAAK,CAAC,OAAO,UAAU,UAAU,uBAAuB,KAAK,CAAC,GACjF;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,OAA+B;AACtD,MAAI,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,QAAQ,EAAG,QAAO;AAClF,MAAI,OAAO,UAAU,YAAY,QAAQ,KAAK,KAAK,GAAG;AACpD,UAAM,SAAS,OAAO,KAAK;AAC3B,WAAO,OAAO,cAAc,MAAM,KAAK,SAAS,IAAI,SAAS;AAAA,EAC/D;AACA,SAAO;AACT;;;AFlKO,SAAS,6BACd,cACuC;AACvC,MAAI,kBAA0D;AAE9D,SAAO,eAAe,WAA4C;AAChE,yBAAqB,YAAY;AAC/B,YAAM,WAAW,aAAa,YAAY,YAAY;AACtD,YAAM,gBACJ,aAAa,iBAAiB,oBAAoB,UAAU,EAAE,WAAW,SAAS,CAAC;AACrF,YAAM,aAAa,aAAa,QAAQ;AACxC,YAAM,WAAW,aAAa,KAC1B,OACA,SAAS,SAAS,aAAa;AAAA,QAC7B,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,QACnC,aAAa,SAAS;AAAA,MACxB,CAAC;AACL,YAAM,mBAAmB,4BAA4B,QAAQ;AAC7D,YAAM,KAAK,aAAa,MAAM,SAAU;AACxC,YAAM,oBAAoB,MAAM,uBAAuB,IAAI,QAAQ,GAAG;AAGtE,qCAA+B,EAAE,SAAS,SAAS,6BAA6B,CAAC;AAGjF,0CAAoC,2BAA2B,QAAQ,CAAC;AACxE,aAAO;AAAA,QACL,UAAU;AAAA,QACV,uBAAuB;AAAA,QACvB;AAAA,QACA,KACE,aAAa,OACZ,MAAM;AAAA,UACL,SAAS;AAAA,UACT,mBACI,EAAE,MAAM,iBAAiB,MAAM,MAAM,iBAAiB,SAAS,IAC/D;AAAA,UACJ,6BAA6B,aAAa;AAAA,QAC5C;AAAA,QACF,eAAe,aAAa,iBAAiB,oBAAoB,QAAQ;AAAA,QACzE;AAAA,QACA,qBAAqB,aAAa,uBAAuB;AAAA,QACzD,8BAA8B,aAAa,gCAAgC;AAAA,QAC3E,+BAA+B,aAAa,iCAAiC;AAAA,QAC7E,6BAA6B,aAAa,+BAA+B;AAAA,QACzE,4BAA4B,aAAa,8BAA8B;AAAA,QACvE,8BAA8B,aAAa,gCAAgC;AAAA,QAC3E,cAAc,aAAa,gBAAgB;AAAA,QAC3C,uBACE,aAAa,yBACb,0CAA0C,UAAU,EAAE;AAAA,QACxD,2BACE,aAAa,6BAA6B,kCAAkC,IAAI,QAAQ;AAAA,MAC5F;AAAA,IACF,GAAG;AACH,WAAO,MAAM;AAAA,EACf;AACF;;;AGrFA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,8BAA8B;AAAA,EAC9B,4BAA4B;AAAA,OAGvB;AACP,SAAS,mCAAmC;;;ACb5C,SAAS,qCAAqC,8BAA8B;AAC5E,SAAS,iCAAiC;;;ACD1C,SAAS,kCAAAC,uCAAqD;AAC9D;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAOP,eAAsB,iCAAiC,OAiBd;AACvC,QAAM,gBAAgBA,gCAA+B,MAAM,QAAQ;AACnE,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,MAAI,aAAa,MAAM,+BAA+B,MAAM,IAAI;AAAA,IAC9D,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,IACjB,cAAc,MAAM;AAAA,IACpB,mBAAmB,MAAM;AAAA,IACzB;AAAA,EACF,CAAC;AAED,QAAM,gBAAgB,MAAoC;AACxD,UAAM,cAAc,WAAW,OAAO;AACtC,UAAM,SAAS,WAAW;AAC1B,QAAI,CAAC,eAAe,CAAC,QAAQ;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,aAAa,OAAO;AAAA,EAC/B;AAEA,QAAM,UAAU,YAAmD;AACjE,UAAM,sBAAsB,WAAW,OAAO;AAC9C,UAAM,uBAAuB,WAAW,OAAO;AAC/C,QAAI,CAAC,sBAAsB;AACzB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,SAAS,MAAM,2CAA2C,MAAM,IAAI;AAAA,MACxE,WAAW,MAAM;AAAA,MACjB,aAAa,MAAM;AAAA,MACnB,WAAW,MAAM;AAAA,MACjB,cAAc,MAAM;AAAA,MACpB,mBAAmB,MAAM;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,OAAO,YAAY;AAC1B,cAAM,eAAe,QAAQ,OAAO;AACpC,YAAI,CAAC,cAAc;AACjB,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACA,cAAM,SAAS,MAAM,gBAAgB,cAAc;AAAA,UACjD,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,QAC9C,CAAC;AACD,eAAO;AAAA,UACL,QAAQ;AAAA,YACN,SAAS;AAAA,YACT,aAAa,OAAO;AAAA,YACpB,cAAc,OAAO;AAAA,UACvB;AAAA,UACA,WACE,qBAAqB,OAAO,WAAW,KACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,mBAAmB,GAAK;AAAA,QACzD;AAAA,MACF;AAAA,IACF,CAAC;AACD,iBAAa,OAAO;AACpB,WAAO,cAAc;AAAA,EACvB;AAEA,SAAO;AAAA,IACL,cAAc,MAAM;AAAA,IACpB,SAAS;AAAA,MACP,eAAe;AAAA,MACf,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM;AAAA,MACd,UAAU,YAAY,cAAc;AAAA,MACpC;AAAA,MACA,cAAc,CAAC,UACb,MAAM,WAAW,gCAAgC,IAC7C,MAAM,MAAM,iCAAiC,MAAM,IACnD;AAAA,MACN,GAAI,MAAM,eAAe,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;AAAA,MACjE,GAAI,MAAM,sBAAsB,EAAE,qBAAqB,MAAM,oBAAoB,IAAI,CAAC;AAAA,MACtF,GAAI,MAAM,gBAAgB,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,MACpE,GAAI,MAAM,sBAAsB,EAAE,qBAAqB,MAAM,oBAAoB,IAAI,CAAC;AAAA,MACtF,GAAI,MAAM,2BACN,EAAE,0BAA0B,MAAM,yBAAyB,IAC3D,CAAC;AAAA,MACL,GAAI,MAAM,sBAAsB,EAAE,qBAAqB,MAAM,oBAAoB,IAAI,CAAC;AAAA,IACxF;AAAA,EACF;AACF;;;AD5HA,eAAsB,yBACpB,OACA;AACA,QAAM,WAAW,MAAM,oCAAoC,MAAM,IAAI,KAAK;AAC1E,aAAW,WAAW,UAAU;AAC9B,QAAI,QAAQ,WAAW,YAAY,CAAC,QAAQ,oBAAoB,CAAC,QAAQ;AACvE;AACF,QAAI,QAAQ,kBAAkB,KAAK,IAAI,IAAI,QAAQ,eAAe,QAAQ,IAAI,IAAQ;AACtF,QAAI;AACF,YAAM,OAAO,MAAM,iCAAiC,EAAE,GAAG,OAAO,cAAc,QAAQ,GAAG,CAAC;AAC1F,YAAM,QAAQ,MAAM,0BAA0B,EAAE,SAAS,KAAK,QAAQ,CAAC;AAEvE,UAAI,MAAM,gBAAgB,KAAM;AAChC,YAAM,uBAAuB,MAAM,IAAI;AAAA,QACrC,aAAa,MAAM;AAAA,QACnB,WAAW,MAAM;AAAA,QACjB,cAAc,QAAQ;AAAA,QACtB,kBAAkB,MAAM;AAAA,QACxB,cAAc,MAAM,QAAQ,OAAO;AAAA,QACnC,gBAAgB,MAAM;AAAA,QACtB,wBAAwB,QAAQ;AAAA,QAChC,wBAAwB,QAAQ;AAAA,QAChC,gBACE,MAAM,cAAc,MAAM,OAAQ,MAAM,QAAQ,OAAO,QAAQ;AAAA,MACnE,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AEpBA,SAAS,wBAAwB,8BAA8B;AASxD,SAAS,wBACd,SACA,SACA,KACS;AACT,SACE,uBAAuB,QAAQ,iBAAiB,OAAO,KACvD,CAAC,uBAAuB,SAAS,SAAS,GAAG;AAEjD;AAGO,SAAS,qCACd,SAIA,MACS;AACT,UACG,QAAQ,sBAAsB,MAAM,8BACpC,QAAQ,wBAAwB,MAAM,6BACtC,QAAQ,kBAAkB,WAAW,QAAQ,mBAAmB;AAErE;AAuBO,SAAS,0BAA0B,SAAwC;AAChF,SAAO;AACT;AAmBO,SAAS,iBAAiB,MAKT;AACtB,QAAM,EAAE,oBAAoB,WAAW,UAAU,gBAAgB,IAAI;AACrE,QAAM,SAAS,sBAAsB;AAOrC,MAAI,UAAU,cAAc,UAAU;AACpC,WAAO;AAAA,EACT;AACA,QAAM,gBAAgB,mBAAmB,0BAA0B,QAAQ,MAAM;AACjF,MAAI,eAAe;AACjB,WAAO;AAAA,EACT;AAEA,MAAI,UAAU,cAAc,UAAU;AACpC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAkCO,IAAM,cAAc;AAOpB,IAAM,4BAA4B;AAElC,IAAM,4BAA4B;AAEzC,SAAS,oBAAoB,aAA4B,SAAsB,KAAmB;AAKhG,SAAO,WAAW,QAAQ,QAAQ,KAAK,IAAI,QAAQ,IAAI,IAAK,eAAe;AAC7E;AAGA,SAAS,eAAe,MAA4B,KAAmB;AACrE,SAAO,KAAK;AAAA,IACV,oBAAoB,KAAK,oBAAoB,KAAK,gBAAgB,GAAG;AAAA,IACrE,oBAAoB,KAAK,sBAAsB,KAAK,kBAAkB,GAAG;AAAA,EAC3E;AACF;AAOA,SAAS,iBAAiB,MAA4B,KAAmB;AACvE,QAAM,mBACJ,MAAM,oBAAoB,KAAK,oBAAoB,KAAK,gBAAgB,GAAG;AAC7E,QAAM,qBACJ,MAAM,oBAAoB,KAAK,sBAAsB,KAAK,kBAAkB,GAAG;AACjF,SAAO,KAAK,IAAI,kBAAkB,kBAAkB;AACtD;AAEA,SAAS,QAAQ,MAA4B,KAAoB;AAC/D,SAAO,KAAK,kBAAkB,QAAQ,KAAK,eAAe,QAAQ,IAAI,IAAI,QAAQ;AACpF;AAQO,SAAS,yBAAyB,MAA4B,KAAoB;AACvF,SACE,KAAK,WAAW,YAChB,CAAC,QAAQ,MAAM,GAAG,KAClB,eAAe,MAAM,GAAG,IAAI;AAEhC;AAGO,SAAS,0BAA0B,MAA4B,KAAoB;AACxF,SAAO,KAAK,oBAAoB,yBAAyB,MAAM,GAAG;AACpE;AAcA,SAAS,QAAQ,OAAuB;AACtC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,YAAQ,MAAM,WAAW,CAAC;AAE1B,WAAO,KAAK,KAAK,MAAM,QAAU;AAAA,EACnC;AACA,SAAO,SAAS;AAClB;AAqBO,SAAS,0BAA0B,MAIxB;AAChB,QAAM,EAAE,WAAW,UAAU,IAAI,IAAI;AACrC,QAAM,YAAY,SAAS,OAAO,CAAC,SAAS,0BAA0B,MAAM,GAAG,CAAC;AAChF,MAAI,UAAU,WAAW,GAAG;AAC1B,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,QAAQ,SAAS,IAAI,UAAU;AAC7C,SAAO,UAAU,KAAK,EAAG;AAC3B;AAwBO,SAAS,kBAAkB,MAOe;AAC/C,QAAM,EAAE,WAAW,kBAAkB,UAAU,IAAI,IAAI;AACvD,QAAM,SAAS,mBACV,SAAS,KAAK,CAAC,SAAS,KAAK,OAAO,gBAAgB,KAAK,OAC1D;AACJ,MAAI,UAAU,0BAA0B,QAAQ,GAAG,GAAG;AACpD,WAAO,EAAE,MAAM,QAAQ,cAAc,kBAAmB,YAAY,MAAM;AAAA,EAC5E;AACA,QAAM,OAAO,0BAA0B,EAAE,WAAW,UAAU,IAAI,CAAC;AACnE,MAAI,QAAQ,MAAM;AAChB,WAAO,EAAE,MAAM,aAAa,iBAAiB,cAAc,UAAU,GAAG,EAAE;AAAA,EAC5E;AACA,SAAO,EAAE,MAAM,QAAQ,cAAc,MAAM,YAAY,KAAK;AAC9D;AAcO,SAAS,YAAY,MAA4B,KAAiB;AACvE,QAAM,QAAQ,IAAI,QAAQ;AAE1B,QAAM,eAAe,IAAI,KAAK,QAAQ,yBAAyB;AAC/D,QAAM,aAAqB,CAAC;AAG5B,MAAI,KAAK,kBAAkB,QAAQ,KAAK,eAAe,QAAQ,IAAI,OAAO;AACxE,eAAW,KAAK,KAAK,cAAc;AAAA,EACrC;AACA,QAAM,cAAc,CAAC,MAAe,YAAqC;AACvE,QAAI,CAAC,KAAM;AAGX,eAAW,KAAK,WAAW,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,UAAU,YAAY;AAAA,EACvF;AACA;AAAA,IACE,oBAAoB,KAAK,oBAAoB,KAAK,gBAAgB,GAAG,KACnE;AAAA,IACF,KAAK;AAAA,EACP;AACA;AAAA,IACE,oBAAoB,KAAK,sBAAsB,KAAK,kBAAkB,GAAG,KACvE;AAAA,IACF,KAAK;AAAA,EACP;AAGA,MAAI,WAAW,WAAW,GAAG;AAC3B,WAAO;AAAA,EACT;AAEA,SAAO,WAAW,OAAO,CAAC,GAAG,MAAO,EAAE,QAAQ,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAE;AACxE;AAGA,SAAS,cAAc,UAAkC,KAAiB;AACxE,SAAO,SACJ,IAAI,CAAC,SAAS,YAAY,MAAM,GAAG,CAAC,EACpC,OAAO,CAAC,GAAG,MAAO,EAAE,QAAQ,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAE;AACzD;AAQO,SAAS,kCACd,UACA,KACa;AACb,QAAM,SAAiB,CAAC;AACxB,aAAW,WAAW,UAAU;AAC9B,QAAI,CAAC,QAAQ,oBAAoB,QAAQ,WAAW,SAAU;AAC9D,QAAI,QAAQ,kBAAkB,QAAQ,eAAe,QAAQ,IAAI,IAAI,QAAQ,GAAG;AAC9E,aAAO,KAAK,QAAQ,cAAc;AAAA,IACpC;AACA,SACG,QAAQ,sBAAsB,MAAM,6BACrC,QAAQ,kBACR,QAAQ,eAAe,QAAQ,IAAI,IAAI,QAAQ,GAC/C;AACA,aAAO,KAAK,QAAQ,cAAc;AAAA,IACpC;AACA,SACG,QAAQ,wBAAwB,MAAM,6BACvC,QAAQ,oBACR,QAAQ,iBAAiB,QAAQ,IAAI,IAAI,QAAQ,GACjD;AACA,aAAO,KAAK,QAAQ,gBAAgB;AAAA,IACtC;AAAA,EACF;AACA,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,SAAO,OAAO;AAAA,IAAO,CAAC,UAAU,cAC9B,UAAU,QAAQ,IAAI,SAAS,QAAQ,IAAI,YAAY;AAAA,EACzD;AACF;AASO,SAAS,mBAAmB,iBAAuB,KAAW,OAAuB;AAC1F,QAAM,QAAQ,gBAAgB,QAAQ,IAAI,IAAI,QAAQ;AACtD,SAAO,KAAK,IAAI,KAAK,IAAI,OAAO,WAAW,GAAG,KAAK;AACrD;AAMO,SAAS,qBAAqB,MAMhB;AACnB,QAAM,EAAE,oBAAoB,mBAAmB,UAAU,IAAI,IAAI;AAIjE,QAAM,mBAAmB,0BAA0B,KAAK,gBAAgB;AACxE,QAAM,sBAAsB,SAAS,OAAO,CAAC,YAAY,QAAQ,gBAAgB;AAEjF,MAAI,oBAAoB,WAAW,GAAG;AACpC,WAAO,EAAE,MAAM,OAAO;AAAA,EACxB;AAEA,QAAM,YAAY,oBAAoB,OAAO,CAAC,SAAS,0BAA0B,MAAM,GAAG,CAAC;AAO3F,QAAM,SAAS,CAACC,YAA+D;AAC7E,QAAI,CAACA,SAAQ;AACX,aAAO;AAAA,QACL,MAAM;AAAA,QACN,iBAAiB,cAAc,qBAAqB,GAAG;AAAA,MACzD;AAAA,IACF;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,cAAcA,QAAO;AAAA,MACrB,OAAOA,QAAO,OAAO;AAAA,IACvB;AAAA,EACF;AAEA,MAAI,qBAAqB,eAAe;AAGtC,QAAI,UAAU,WAAW,GAAG;AAC1B,aAAO;AAAA,QACL,MAAM;AAAA,QACN,iBAAiB,cAAc,qBAAqB,GAAG;AAAA,MACzD;AAAA,IACF;AACA,UAAM,WAAW,oBACb,oBAAoB,UAAU,CAAC,SAAS,KAAK,OAAO,iBAAiB,IACrE;AACJ,UAAM,UACJ,YAAY,IACR;AAAA,MACE,GAAG,oBAAoB,MAAM,WAAW,CAAC;AAAA,MACzC,GAAG,oBAAoB,MAAM,GAAG,WAAW,CAAC;AAAA,IAC9C,IACA;AACN,UAAMA,UAAS,QAAQ,KAAK,CAAC,SAAS,0BAA0B,MAAM,GAAG,CAAC;AAC1E,WAAO,OAAOA,OAAM;AAAA,EACtB;AAEA,MAAI,qBAAqB,mBAAmB;AAE1C,UAAM,WAAW,oBACb,SAAS,KAAK,CAAC,SAAS,KAAK,OAAO,iBAAiB,IACrD;AACJ,QAAI,YAAY,0BAA0B,UAAU,GAAG,GAAG;AACxD,aAAO,OAAO,QAAQ;AAAA,IACxB;AACA,WAAO,OAAO,UAAU,CAAC,CAAC;AAAA,EAC5B;AASA,QAAM,eAAe,CAAC,SACpB,sBAAsB,OAAO,KAAK,mBAAmB;AACvD,QAAM,aAAa,CAAC,SAClB,oBAAoB,OAAO,KAAK,iBAAiB;AACnD,QAAM,eAAe,CAAC,SACpB,oBAAoB,QAAQ,KAAK,iBAAiB,KAAK,eAAe,QAAQ,IAAI;AACpF,QAAM,SAAS,UAAU,OAAyC,CAAC,MAAM,SAAS;AAChF,QAAI,CAAC,MAAM;AACT,aAAO;AAAA,IACT;AACA,QAAI,aAAa,IAAI,MAAM,aAAa,IAAI,GAAG;AAC7C,aAAO,aAAa,IAAI,IAAI,aAAa,IAAI,IAAI,OAAO;AAAA,IAC1D;AACA,QAAI,iBAAiB,MAAM,GAAG,MAAM,iBAAiB,MAAM,GAAG,GAAG;AAC/D,aAAO,iBAAiB,MAAM,GAAG,IAAI,iBAAiB,MAAM,GAAG,IAAI,OAAO;AAAA,IAC5E;AACA,QAAI,WAAW,IAAI,MAAM,WAAW,IAAI,GAAG;AACzC,aAAO,WAAW,IAAI,IAAI,WAAW,IAAI,IAAI,OAAO;AAAA,IACtD;AACA,WAAO,aAAa,IAAI,IAAI,aAAa,IAAI,IAAI,OAAO;AAAA,EAC1D,GAAG,MAAS;AACZ,SAAO,OAAO,MAAM;AACtB;AAQO,SAAS,kCAGd,MAO0B;AAC1B,QAAM,EAAE,oBAAoB,iBAAiB,kBAAkB,qBAAqB,IAClF,KAAK;AACP,MAAI,KAAK,QAAQ,mBAAmB;AAClC,WAAO,EAAE,cAAc,MAAM,UAAU,EAAE,MAAM,OAAO,GAAG,sBAAsB,MAAM;AAAA,EACvF;AAIA,QAAM,WAAW,KAAK,QAAQ,UAC1B,KAAK,QAAQ,SAAS;AAAA,IAAO,CAAC,YAC5B,wBAAwB,SAAS,KAAK,QAAQ,SAAU,KAAK,GAAG;AAAA,EAClE,IACA,KAAK,QAAQ;AACjB,QAAM,sBAAsB,IAAI,IAAI,KAAK,QAAQ,uBAAuB,CAAC,CAAC;AAG1E,QAAM,WAAW,0BAA0B,gBAAgB;AAC3D,QAAM,WAAW,uBACb,SAAS,KAAK,CAAC,YAAY,QAAQ,OAAO,oBAAoB,IAC9D;AACJ,MACE,YACA,CAAC,oBAAoB,IAAI,SAAS,EAAE,KACpC,yBAAyB,UAAU,KAAK,GAAG,GAC3C;AACA,WAAO;AAAA,MACL,cAAc,SAAS;AAAA,MACvB,sBAAsB;AAAA,MACtB,UAAU;AAAA,QACR,MAAM;AAAA,QACN,cAAc,SAAS;AAAA,QACvB,OAAO,SAAS,OAAO;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,iBAAiB,iBAAiB;AAAA,IACtC,oBAAoB,KAAK;AAAA,IACzB,WAAW,KAAK;AAAA,IAChB;AAAA,IACA;AAAA,EACF,CAAC;AAKD,MAAI,mBAAmB,YAAY,KAAK,2BAA2B;AACjE,UAAM,SAAS,SAAS,KAAK,CAAC,YAAY,QAAQ,OAAO,KAAK,yBAAyB;AACvF,QAAI,CAAC,QAAQ;AACX,aAAO,EAAE,cAAc,MAAM,UAAU,EAAE,MAAM,OAAO,GAAG,sBAAsB,MAAM;AAAA,IACvF;AACA,QAAI,oBAAoB,IAAI,OAAO,EAAE,GAAG;AACtC,aAAO,EAAE,cAAc,MAAM,UAAU,EAAE,MAAM,OAAO,GAAG,sBAAsB,MAAM;AAAA,IACvF;AACA,QAAI,CAAC,OAAO,kBAAkB;AAC5B,aAAO;AAAA,QACL,cAAc;AAAA,QACd,UAAU,EAAE,MAAM,qBAAqB,cAAc,OAAO,GAAG;AAAA,QAC/D,sBAAsB;AAAA,MACxB;AAAA,IACF;AACA,QAAI,yBAAyB,QAAQ,KAAK,GAAG,GAAG;AAC9C,aAAO;AAAA,QACL,cAAc,OAAO;AAAA,QACrB,UAAU,EAAE,MAAM,UAAU,cAAc,OAAO,IAAI,OAAO,MAAM;AAAA,QAClE,sBAAsB;AAAA,MACxB;AAAA,IACF;AACA,WAAO;AAAA,MACL,cAAc;AAAA,MACd,UAAU;AAAA,QACR,MAAM;AAAA,QACN,iBAAiB,YAAY,QAAQ,KAAK,GAAG;AAAA,MAC/C;AAAA,MACA,sBAAsB;AAAA,IACxB;AAAA,EACF;AAMA,MAAI,mBAAmB,WAAW;AAChC,UAAMC,uBAAsB,SAAS,OAAO,CAAC,YAAY,CAAC,oBAAoB,IAAI,QAAQ,EAAE,CAAC;AAC7F,QAAIA,qBAAoB,WAAW,GAAG;AACpC,aAAO,EAAE,cAAc,MAAM,UAAU,EAAE,MAAM,OAAO,GAAG,sBAAsB,MAAM;AAAA,IACvF;AACA,UAAM,QAAQ,kBAAkB;AAAA,MAC9B,WAAW,KAAK;AAAA,MAChB,kBAAkB,KAAK,qBAAqB,WAAW,KAAK,4BAA4B;AAAA,MACxF,UAAUA;AAAA,MACV,KAAK,KAAK;AAAA,IACZ,CAAC;AACD,QAAI,MAAM,SAAS,aAAa;AAC9B,aAAO;AAAA,QACL,cAAc;AAAA,QACd,UAAU;AAAA,QACV,sBAAsB;AAAA,MACxB;AAAA,IACF;AACA,WAAO;AAAA,MACL,cAAc,MAAM;AAAA,MACpB,UAAU;AAAA,QACR,MAAM;AAAA,QACN,cAAc,MAAM;AAAA,QACpB,OAAO,MAAM,iBAAiB;AAAA,MAChC;AAAA,MACA,sBAAsB;AAAA,IACxB;AAAA,EACF;AAOA,MAAI,CAAC,iBAAiB;AACpB,UAAM,SAAS,qBACX,SAAS,KAAK,CAAC,YAAY,QAAQ,OAAO,kBAAkB,IAC5D;AACJ,QAAI,CAAC,QAAQ;AACX,aAAO,EAAE,cAAc,MAAM,UAAU,EAAE,MAAM,OAAO,GAAG,sBAAsB,MAAM;AAAA,IACvF;AACA,QAAI,oBAAoB,IAAI,OAAO,EAAE,GAAG;AACtC,aAAO,EAAE,cAAc,MAAM,UAAU,EAAE,MAAM,OAAO,GAAG,sBAAsB,MAAM;AAAA,IACvF;AACA,QAAI,CAAC,OAAO,kBAAkB;AAC5B,aAAO;AAAA,QACL,cAAc;AAAA,QACd,UAAU,EAAE,MAAM,qBAAqB,cAAc,OAAO,GAAG;AAAA,QAC/D,sBAAsB;AAAA,MACxB;AAAA,IACF;AACA,QAAI,CAAC,yBAAyB,QAAQ,KAAK,GAAG,GAAG;AAC/C,aAAO;AAAA,QACL,cAAc;AAAA,QACd,UAAU,EAAE,MAAM,aAAa,iBAAiB,YAAY,QAAQ,KAAK,GAAG,EAAE;AAAA,QAC9E,sBAAsB;AAAA,MACxB;AAAA,IACF;AACA,WAAO;AAAA,MACL,cAAc,OAAO;AAAA,MACrB,UAAU,EAAE,MAAM,UAAU,cAAc,OAAO,IAAI,OAAO,MAAM;AAAA,MAClE,sBAAsB;AAAA,IACxB;AAAA,EACF;AAEA,QAAM,UAAU,KAAK,2BAA2B;AAChD,QAAM,sBAAsB,SAAS,OAAO,CAAC,YAAY,CAAC,oBAAoB,IAAI,QAAQ,EAAE,CAAC;AAC7F,QAAM,WAAW,qBAAqB;AAAA,IACpC,kBAAkB;AAAA,IAClB;AAAA;AAAA;AAAA,IAGA,mBAAmB;AAAA,IACnB,UAAU;AAAA,IACV,KAAK,KAAK;AAAA,EACZ,CAAC;AACD,SAAO;AAAA,IACL,cAAc,SAAS,SAAS,WAAW,SAAS,eAAe;AAAA,IACnE;AAAA,EACF;AACF;;;AHnpBA,eAAsB,0CACpB,WACA,oBACe;AACf,QAAM,QAAQ,IAAI,UAAU,IAAI,CAAC,YAAY,QAAQ,EAAE,MAAM,MAAM,MAAS,CAAC,CAAC;AAC9E,QAAM,mBAAmB;AAC3B;AAGA,eAAsB,+BACpB,UACA,SACe;AACf,QAAM,QAAQ;AAAA,IACZ,QAAQ;AAAA,MAAI,CAAC,WACX,SAAS,8BACL,SAAS,4BAA4B;AAAA,QACnC,WAAW,OAAO;AAAA,QAClB,aAAa,OAAO;AAAA,QACpB,WAAW,OAAO;AAAA,QAClB,YAAY,OAAO;AAAA,QACnB,cAAc,OAAO;AAAA,MACvB,CAAC,IACD,SAAS,sBACP,SAAS,oBAAoB;AAAA,QAC3B,WAAW,OAAO;AAAA,QAClB,aAAa,OAAO;AAAA,QACpB,WAAW,OAAO;AAAA,QAClB,YAAY,OAAO;AAAA,QACnB,cAAc,OAAO;AAAA,MACvB,CAAC,IACD,QAAQ,QAAQ;AAAA,IACxB;AAAA,EACF;AACF;AAGA,eAAsB,sCACpB,UACA,aACe;AACf,QAAM,UAAU,MAAM,oCAAoC,SAAS,IAAI,WAAW,EAAE;AAAA,IAClF,MAAM,CAAC;AAAA,EACT;AACA,QAAM,+BAA+B,UAAU,OAAO;AACxD;AAEO,SAAS,sBACd,SACA,MAAM,oBAAI,KAAK,GACiD;AAChE,YAAU;AAAA,IACR,GAAG;AAAA,IACH,UAAU,QAAQ,SAAS;AAAA,MACzB,CAAC,YAAY,CAAC,QAAQ,WAAW,wBAAwB,SAAS,QAAQ,SAAS,GAAG;AAAA,IACxF;AAAA,EACF;AACA,QAAM,WAAW,kCAAkC;AAAA,IACjD;AAAA,IACA,WAAW,QAAQ;AAAA,IACnB,2BAA2B,QAAQ;AAAA,IACnC,kBAAkB,QAAQ;AAAA,IAC1B,yBAAyB,QAAQ;AAAA,IACjC;AAAA,EACF,CAAC;AACD,QAAM,kBAAkB,SAAS,eAC7B,QAAQ,SAAS,KAAK,CAAC,YAAY,QAAQ,OAAO,SAAS,YAAY,IACvE;AACJ,QAAM,sBACJ,oBAAoB,WACnB,gBAAgB,OAAO,QAAQ,uBAC5B,yBAAyB,iBAAiB,GAAG,IAC7C,0BAA0B,iBAAiB,GAAG;AACpD,MAAI,SAAS,gBAAgB,qBAAqB;AAChD,WAAO;AAAA,MACL,MAAM;AAAA,MACN,cAAc,SAAS;AAAA,MACvB,YAAY;AAAA,QACV,gBAAgB,QAAQ,SAAS;AAAA,QACjC,eAAe,QAAQ,SAAS;AAAA,UAC9B,CAAC,aACE,QAAQ,OAAO,SAAS,gBACvB,CAAC,QAAQ,qBAAqB,SAAS,QAAQ,EAAE,MACnD,0BAA0B,SAAS,GAAG;AAAA,QAC1C,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACA,QAAM,qBACJ,QAAQ,qBAAqB,YAAY,QAAQ,4BAC7C,QAAQ,4BACR,CAAC,QAAQ,kBACP,QAAQ,qBACR;AACR,QAAM,mBAAmB,qBACrB,QAAQ,SAAS,OAAO,CAAC,YAAY,QAAQ,OAAO,kBAAkB,IACtE,QAAQ;AACZ,QAAM,qBAAqB,kCAAkC,kBAAkB,GAAG;AAClF,QAAM,+BAA+B,iBAAiB;AAAA,IACpD,CAAC,YACC,QAAQ,WAAW,YACnB,QAAQ,oBACR,QAAQ,kBAAkB,WAC1B,QAAQ,mBAAmB;AAAA,EAC/B;AACA,QAAM,gBAAgB,iBAAiB,CAAC,KAAK;AAC7C,QAAM,0BACH,iBAAiB,SACf,CAAC,cAAc,oBAAoB,cAAc,WAAW,aAC9D,uBAAuB,QACtB,iBAAiB,SAAS,KAC1B,iBAAiB;AAAA,IACf,CAAC,YAAY,CAAC,QAAQ,oBAAoB,QAAQ,WAAW;AAAA,EAC/D;AACJ,QAAM,aACJ,SAAS,SAAS,SAAS,SACvB,QAAQ,qBAAqB,YAAY,QAAQ,8BAA8B,OAC7E,uBACA,CAAC,QAAQ,mBAAmB,QAAQ,uBAAuB,OACzD,wCACA,QAAQ,gBAAgB,QAAQ,QAAQ,SAAS,WAAW,IAC1D,+BACA,QAAQ,SAAS,WAAW,IAC1B,6BACA,2BACR;AACN,SAAO;AAAA,IACL,MAAM;AAAA,IACN,iBAAiB;AAAA,IACjB,WACG,SAAS,SAAS,SAAS,UAAU,CAAC,gCAAgC,CAAC,sBACxE,SAAS,SAAS,SAAS,uBAC3B,0BACI,kBACA,sBAAsB,CAAC,+BACrB,kBACA;AAAA,IACR,YAAY;AAAA,MACV,gBAAgB,QAAQ,SAAS;AAAA,MACjC,uBAAuB,QAAQ,SAAS,OAAO,CAAC,YAAY,QAAQ,gBAAgB,EAAE;AAAA,MACtF,YAAY,QAAQ;AAAA,MACpB,GAAI,aAAa,EAAE,QAAQ,WAAW,IAAI,CAAC;AAAA,IAC7C;AAAA,EACF;AACF;AASA,eAAsB,iCACpB,UACA,OACA,UAAoC,CAAC,GACrC;AACA,QAAM,QAAQ,MAAM,qBAAqB,SAAS,IAAI,KAAK;AAC3D,MAAI,MAAM,WAAW,WAAW;AAC9B,YAAQ,UAAU;AAClB,UAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,WAAW,UAAW,QAAO;AAEvC,UAAQ,UAAU;AAClB,QAAM,4BAA4B,SAAS,KAAK,MAAM,aAAa,MAAM,WAAW,MAAM,MAAM;AAChG,QAAM,YAAY,MAAM;AAAA,IACtB,SAAS;AAAA,IACT;AAAA,MACE,WAAW,MAAM;AAAA,MACjB,aAAa,MAAM;AAAA,MACnB,WAAW,MAAM;AAAA,MACjB,UAAU,MAAM,OAAO;AAAA,MACvB,YAAY,MAAM,OAAO;AAAA,MACzB,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC;AAAA,IACxC;AAAA,IACA,CAAC,YAAY,sBAAsB,OAAO;AAAA,EAC5C;AACA,QAAM;AAAA,IACJ,SAAS;AAAA,IACT,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AACA,SAAO;AACT;AAEA,eAAe,wBACb,UACA,aACA,QACe;AACf,QAAM,WAAW,MAAM,yBAAyB,SAAS,IAAI,aAAa,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;AAChG,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,QAAQ,SAAS;AAAA,IACrB,CAAC,YACC,QAAQ,oBACR,QAAQ,WAAW,aAClB,qCAAqC,SAAS,GAAG,KAAK,QAAQ,mBAAmB;AAAA,EACtF;AACA,QAAM;AAAA,IACJ,MAAM;AAAA,MACJ,CAAC,YAAY,MACX;AAAA,QACE,SAAS;AAAA,QACT,SAAS;AAAA,QACT;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACJ;AAAA,IACA,MAAM,sCAAsC,UAAU,WAAW;AAAA,EACnE;AACF;AAEO,SAAS,8BAA8B,UAAkD;AAC9F,iBAAe,qBAAqB,OAAkC;AACpE,UAAM,EAAE,GAAG,IAAI,MAAM,SAAS;AAC9B,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AACA,UAAM,YAAY,cACd,OACA,MAAM,6BAA6B,IAAI,MAAM,aAAa,MAAM,SAAS;AAC7E,UAAM,SAAS,eAAe;AAC9B,WAAO,SACH;AAAA,MACE,GAAI,YAAY,EAAE,UAAU,MAAe,IAAI,CAAC;AAAA,MAChD,UAAU,OAAO;AAAA,MACjB,YAAY,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,MAKnB,aACE,OAAO,eAAe,OAAO,wBACzB,oBAAI,KAAK,CAAC,GAAE,YAAY,IACxB,OAAO,YAAY,YAAY;AAAA,MACrC,cAAc,OAAO;AAAA,IACvB,IACA;AAAA,EACN;AAEA,iBAAe,2BACb,OAC2C;AAC3C,UAAM,WAAW,MAAM,SAAS;AAChC,QAAI,MAAM,aAAa,OAAO;AAC5B,YAAMC,WAAU,MAAM;AAAA,QACpB,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AACA,UAAI,CAACA,YAAWA,SAAQ,OAAO,MAAM,YAAYA,SAAQ,eAAe,MAAM,YAAY;AACxF,eAAO,EAAE,QAAQ,QAAQ;AAAA,MAC3B;AACA,YAAM,YAAY,MAAM;AAAA,QACtB,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AACA,UAAI;AACF,cAAM,yBAAyB;AAAA,UAC7B,IAAI,SAAS;AAAA,UACb,UAAU,SAAS;AAAA,UACnB,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,WAAW,MAAM;AAAA,UACjB,QAAQ,UAAU;AAAA,UAClB,WAAW,UAAU;AAAA,UACrB,mBAAmB,UAAU;AAAA,QAC/B,CAAC;AACH,YAAMC,UAAS,MAAM,2BAA2B,SAAS,IAAI;AAAA,QAC3D,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,WAAW,MAAM;AAAA,QACjB,UAAU,MAAM;AAAA,QAChB,YAAY,MAAM;AAAA,MACpB,CAAC;AACD,UAAIA,QAAO,OAAO,SAAS,GAAG;AAC5B,YAAI;AACF,gBAAM,SAAS,IAAI,QAAQ,MAAM,aAAa,MAAM,WAAWA,QAAO,MAAM;AAAA,QAC9E,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAIA,QAAO,WAAW,UAAW,QAAO,EAAE,QAAQ,UAAU;AAC5D,UAAIA,QAAO,WAAW,WAAW;AAC/B,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,UAAU;AAAA,UACV,UAAUA,QAAO,OAAO;AAAA,UACxB,YAAYA,QAAO,OAAO;AAAA,UAC1B,aAAaA,QAAO,OAAO,YAAY,YAAY;AAAA,UACnD,cAAcA,QAAO,OAAO;AAAA,QAC9B;AAAA,MACF;AACA,aAAO,EAAE,QAAQA,QAAO,OAAO;AAAA,IACjC;AACA,UAAM,UAAU,MAAM;AAAA,MACpB,SAAS;AAAA,MACT,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AACA,QAAI,CAAC,WAAW,QAAQ,OAAO,MAAM,YAAY,QAAQ,eAAe,MAAM,YAAY;AACxF,aAAO,EAAE,QAAQ,QAAQ;AAAA,IAC3B;AACA,UAAM,0BACJ,QAAQ,cAAc,qBACtB,MAAM,UAAU,WAChB,QAAQ,YAAY,QAAQ,KAAK,KAAK,IAAI;AAC5C,QAAI,yBAAyB;AAG3B,YAAM,wBAAwB,UAAU,MAAM,aAAa,QAAQ,aAAa;AAAA,IAClF;AACA,UAAM,SAAS,MAAM;AAAA,MACnB,SAAS;AAAA,MACT;AAAA,QACE,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,WAAW,MAAM;AAAA,QACjB,UAAU,MAAM;AAAA,QAChB,YAAY,MAAM;AAAA,QAClB;AAAA,MACF;AAAA,MACA,CAAC,YAAY,sBAAsB,OAAO;AAAA,IAC5C;AACA,QAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAI;AACF,cAAM,SAAS,IAAI,QAAQ,MAAM,aAAa,MAAM,WAAW,OAAO,MAAM;AAAA,MAC9E,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QAAI,OAAO,WAAW,WAAW;AAC/B,aAAO,EAAE,QAAQ,UAAU;AAAA,IAC7B;AACA,QAAI,OAAO,WAAW,WAAW;AAC/B,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,UAAU,OAAO,OAAO;AAAA,QACxB,YAAY,OAAO,OAAO;AAAA,QAC1B,aAAa,OAAO,OAAO,YAAY,YAAY;AAAA,QACnD,cAAc,OAAO,OAAO;AAAA,MAC9B;AAAA,IACF;AACA,WAAO,EAAE,QAAQ,OAAO,OAAO;AAAA,EACjC;AAEA,SAAO,EAAE,sBAAsB,2BAA2B;AAC5D;;;AIpZA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGA,SAAS,yBACd,UACA,yBACA;AACA,SAAO;AAAA,IACL,eAAe,OAAO,UAA8B;AAClD,YAAM,EAAE,IAAI,cAAc,IAAI,MAAM,SAAS;AAC7C,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI,MAAM,kCAAkC;AAAA,MACpD;AACA,UAAI,CAAC,yBAAyB;AAC5B,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AACA,YAAM,CAAC,EAAE,wBAAwB,iBAAiB,GAAG,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,QACzF,OAAO,qBAAqB;AAAA,QAC5B,wBAAwB;AAAA,MAC1B,CAAC;AACD,YAAM,UAAU,MAAM,uBAAuB,IAAI,MAAM,WAAW;AAClE,UAAI,QAAQ,cAAc,MAAM,WAAW;AACzC,cAAM,IAAI,MAAM,+CAA+C;AAAA,MACjE;AACA,aAAO,MAAM,uBAAuB,IAAI,MAAM,aAAa,OAAO,aAAa;AAC7E,cAAM,kBAAkB,MAAM,8BAA8B,UAAU,KAAK;AAC3E,YAAI,CAAC,iBAAiB;AACpB,gBAAM,IAAI,MAAM,kDAAkD;AAAA,QACpE;AACA,cAAM,0BAA0B;AAAA,UAC9B;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,cAAM,gBAAgB,wBAAwB;AAAA,UAAO,CAAC,UACpD,OAAO,UAAU,eAAe,KAAK,OAAO,KAAK;AAAA,QACnD,EAAE;AACF,cAAM,mBACH,OAAO,UAAU,eAAe,KAAK,OAAO,eAAe,KAC1D,MAAM,kBAAkB,gBAAgB,iBACzC,OAAO,UAAU,eAAe,KAAK,OAAO,sBAAsB,KACjE,MAAM,yBAAyB,gBAAgB,wBAChD,OAAO,UAAU,eAAe,KAAK,OAAO,oBAAoB,KAC/D,MAAM,uBAAuB,gBAAgB;AACjD,YAAI,kBAAkB;AACpB,gBAAM,IAAI,MAAM,4CAA4C;AAAA,QAC9D;AACA,YAAI,kBAAkB,KAAK,kBAAkB,wBAAwB,QAAQ;AAC3E,gBAAM,IAAI,MAAM,qCAAqC;AAAA,QACvD;AACA,cAAM,kBAAkB,MAAM;AAAA,UAC5B;AAAA,UACA,MAAM;AAAA,UACN,MAAM;AAAA,QACR;AACA,YACE,CAAC,mBACD,gBAAgB,kBAAkB,gBAAgB,iBAClD,gBAAgB,yBAAyB,gBAAgB,wBACzD,gBAAgB,uBAAuB,gBAAgB,oBACvD;AACA,gBAAM,IAAI,MAAM,4CAA4C;AAAA,QAC9D;AACA,cAAM,WAAW,MAAM;AAAA,UACrB;AAAA,YACE,WAAW;AAAA,YACX,2BACE,gBAAgB,kBAAkB,aAC9B,gBAAgB,qBAChB;AAAA,UACR;AAAA,UACA,MACE;AAAA,YACE;AAAA,YACA;AAAA,YACA,MAAM;AAAA,YACN,MAAM;AAAA,YACN;AAAA,YACA,EAAE,iBAAiB,gBAAgB,mBAAmB;AAAA,UACxD;AAAA,QACJ;AACA,YACE,SAAS,kBAAkB,gBAAgB,iBAC3C,SAAS,yBAAyB,gBAAgB,wBAClD,SAAS,uBAAuB,gBAAgB,oBAChD;AACA,gBAAM,IAAI,MAAM,4CAA4C;AAAA,QAC9D;AACA,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AACF;;;AClGA;AAAA,EACE;AAAA,EACA,+BAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA,6BAAAC;AAAA,OAGK;AACP,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP;AAAA,EACE,4BAAAC;AAAA,EACA,0BAAAC;AAAA,EACA;AAAA,OACK;;;ACtCP,SAAS,mCAAkD;AAC3D,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAUP,eAAsB,wBACpB,UACA,OAQyC;AACzC,QAAM,cAAc,MAAM,kBAAkB;AAAA,IAC1C,IAAI,SAAS;AAAA,IACb,UAAU,SAAS;AAAA,IACnB,aAAa,MAAM;AAAA,IACnB,OAAO,MAAM;AAAA,EACf,CAAC;AACD,QAAM,mBAAmB;AAAA,IACvB,SAAS;AAAA,IACT,MAAM;AAAA,IACN;AAAA,EACF,EAAE;AACF,MACE,CAAC,qBACA,SAAS,SAAS,gBAAgB,YAAY,SAAS,SAAS,oBAAoB,YACrF;AACA,QAAI,SAAS,cAAc;AACzB,YAAM,WAAW,MAAM,SAAS,aAAa,SAAS;AAAA,QACpD,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,QAAQ;AAAA,QACR,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,UAAI,CAAC,SAAS,QAAS,QAAO;AAAA,IAChC,OAAO;AACL,YAAM,UAAU,MAAM,kBAAkB,SAAS,IAAI,MAAM,SAAS;AACpE,UAAI,QAAQ,iBAAiB,EAAG,QAAO;AAAA,IACzC;AAAA,EACF;AACA,MAAI,CAAC,kBAAkB;AACrB,UAAM,UAAU,MAAM,wBAAwB,SAAS,IAAI;AAAA,MACzD,WAAW,MAAM;AAAA,MACjB,aAAa,MAAM;AAAA,MACnB,WAAW,MAAM,4BAA4B;AAAA,IAC/C,CAAC;AACD,QAAI,QAAS,QAAO,QAAQ;AAAA,EAC9B;AACA,MACE,SAAS,SAAS,oBAAoB,YACtC,SAAS,SAAS,oBAAoB,WACtC;AACA,WAAO;AAAA,EACT;AACA,QAAM,SAAS,4BAA4B,SAAS,QAAQ;AAC5D,MAAI,CAAC,oBAAoB,OAAO,gCAAgC;AAC9D,UAAM,OAAO,MAAM,iBAAiB,SAAS,IAAI;AAAA,MAC/C,WAAW,MAAM;AAAA,MACjB,WAAW;AAAA,MACX,OAAO,gBAAgB;AAAA,IACzB,CAAC;AACD,QAAI,QAAQ,OAAO,gCAAgC;AACjD,aAAO;AAAA,IACT;AAAA,EACF;AACA,MAAI,OAAO,iCAAiC;AAC1C,UAAM,OAAO,MAAM,iBAAiB,SAAS,IAAI;AAAA,MAC/C,aAAa,MAAM;AAAA,MACnB,WAAW;AAAA,MACX,OAAO,gBAAgB;AAAA,IACzB,CAAC;AACD,QAAI,OAAO,MAAM,qBAAqB,OAAO,iCAAiC;AAC5E,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,kBAAwB;AAC/B,QAAM,MAAM,oBAAI,KAAK;AACrB,SAAO,IAAI,KAAK,KAAK,IAAI,IAAI,eAAe,GAAG,IAAI,YAAY,GAAG,CAAC,CAAC;AACtE;;;ACjGA,SAAS,iCAA6D;AAG/D,SAAS,0BACd,gBACA,wBAC+B;AAC/B,QAAM,gBAAgB,0BAA0B,sBAAsB;AACtE,SAAO,eAAe,0BAA0B,qBAC7C,cAAc,SAAS,WACtB,cAAc,OAAO,0BAA0B,oBAC/C,oBACA;AACN;;;AF6BO,SAAS,qBAAqB,UAAkD;AACrF,iBAAe,qBAAqB,OAA8C;AAChF,UAAM,EAAE,GAAG,IAAI,MAAM,SAAS;AAC9B,UAAM,qCAAqC,IAAI;AAAA,MAC7C,WAAW,MAAM;AAAA,MACjB,aAAa,MAAM;AAAA,MACnB,WAAW,MAAM;AAAA,MACjB,oBAAoB,MAAM;AAAA,MAC1B,QAAQ;AAAA;AAAA;AAAA,MAGR,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,GAAM;AAAA,IACzC,CAAC;AAAA,EACH;AAEA,iBAAe,kBACb,OACkC;AAClC,UAAM,UAAU,MAAM,SAAS;AAC/B,UAAM,EAAE,IAAI,IAAI,IAAI;AACpB,UAAM,wBAAwB,QAAQ,yBAAyB,QAAQ;AAEvE,UAAM,eAAe,MAAM,eAAe,IAAI,MAAM,aAAa,MAAM,SAAS;AAChF,QAAI,CAAC,gBAAgB,aAAa,WAAW,UAAU;AACrD,aAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAQA,UAAM,UAAU,MAAM,eAAe,IAAI,MAAM,aAAa,MAAM,SAAS;AAI3E,QAAI,QAAQ,WAAW,YAAY,QAAQ,WAAW,aAAa;AACjE,aAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AACA,QAAI,YAAY,MAAMC,wBAAuB,IAAI,qBAAqB,GAAG;AACzE,UAAM,6BAA6B,QAAQ;AAC3C,QAAI,oBAAoB;AACxB,UAAM,8BAA8B,QAAQ;AAC5C,UAAM,0BAA0B,QAAQ;AACxC,UAAM,uBAAuB,MAAM,wBAAwB,IAAI,MAAM,WAAW;AAChF,QACE,2BAA2B,WAAW,iCAAiC,KACvE,2BAA2B,WAAW,oCAAoC,KAC1E,QAAQ,MAAM,WAAW,iCAAiC,KAC1D,QAAQ,MAAM,WAAW,oCAAoC,GAC7D;AACA,kBACE,MAAM,gCAAgC,IAAI,uBAAuB;AAAA,QAC/D,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,yBAAyB,CAAC,4BAA4B,QAAQ,KAAK;AAAA,MACrE,CAAC,GACD;AAAA,IACJ;AACA,UAAM,gBAAgB,8BAA8B;AAAA,MAClD;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,IAClB,CAAC;AACD,wBAAoB,cAAc;AAClC,QAAI,qBAAqB,cAAc;AAGvC,QACE,CAAC,sBACD,QAAQ,wBAAwB,eAChC,CAAC,mBAAmB,iBAAiB,GACrC;AACA,2BAAqB,2DAA2D,iBAAiB;AAAA,IACnG;AACA,UAAM,sBAAsB,qBACxB,SACA,6BAA6B,UAAU;AAAA,MACrC,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,aAAa;AAAA,MACb,iBAAiB;AAAA,MACjB,iBAAiB;AAAA,MACjB,aAAa;AAAA,MACb,mBAAmB;AAAA,IACrB,CAAC;AACL,UAAM,qBAEF;AAAA,MACF,OAAO;AAAA,MACP,iBAAiB;AAAA,MACjB,aAAa;AAAA,MACb,GAAI,sBAAsB,EAAE,oBAAoB,IAAI,CAAC;AAAA,MACrD,OAAO,oBAAoB,UAAU,QAAQ,KAAK;AAAA,MAClD,gBAAgB,QAAQ;AAAA,IAC1B;AACA,UAAM,WAAW,MAAM,4BAA4B,IAAI;AAAA,MACrD,WAAW,MAAM;AAAA,MACjB,aAAa,MAAM;AAAA,MACnB,WAAW,MAAM;AAAA,MACjB,YAAY,MAAM;AAAA,MAClB,6BAA6B,SAAS,4BAA4B;AAAA;AAAA;AAAA,MAGlE,aAAa;AAAA,QACX,YAAY,SAAS;AAAA,QACrB,OAAO,SAAS;AAAA,MAClB;AAAA;AAAA;AAAA;AAAA,MAIA,WAAW,OAAO,IAAI,eAAe;AAInC,cAAM,aAAa,aACf,MAAM,eAAe,IAAI,MAAM,aAAa,WAAW,EAAE,IACzD;AACJ,YAAI,eAAe,CAAC,cAAc,WAAW,cAAc,MAAM,YAAY;AAC3E,gBAAM,IAAI,MAAM,8CAA8C;AAAA,QAChE;AACA,cAAM,eAAeC,2BAA0B,YAAY,QAAQ;AACnE,YAAI,qBAAqB;AACvB,gBAAM,wBAAwB;AAAA,YAC5B,aAAa,SAAS,UAAU,aAAa,SAAS;AAAA,YACtD,QAAQ;AAAA,UACV;AACA,6BAAmB,sBAAsB,wBACrC,EAAE,GAAG,qBAAqB,sBAAsB,IAChD;AAAA,QACN;AACA,cAAM,gBAAgB,qBAClB,OACA,MAAM;AAAA,UACJ,EAAE,GAAG,SAAS,UAAU,IAAI,GAAG;AAAA,UAC/B;AAAA,YACE,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,OAAO;AAAA,YACP,0BAA0B,YAAY,4BAA4B;AAAA,UACpE;AAAA,QACF;AACJ,eAAO;AAAA,UACL,eAAe,sBAAsB,eAAe,WAAW;AAAA,UAC/D,oBAAoB,qBAChB,WACC,eAAe,gBAAgB;AAAA,QACtC;AAAA,MACF;AAAA,MACA,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,MAKR,QAAQ,CAAC,MAAM,kBAAkB,QAAQ;AACvC,cAAM,2BAA2B;AAAA,UAC/B;AAAA,UACA,QAAQ;AAAA,QACV;AACA,eAAO,uBAAuB,MAAM,kBAAkB,KAAK;AAAA,UACzD,oBAAoB,yBAAyB,SAAS,gBAAgB;AAAA,UACtE,4BAA4B,yBAAyB;AAAA,YACnD;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AACD,QAAI,SAAS,OAAO,SAAS,GAAG;AAC9B,YAAM,IAAI,QAAQ,MAAM,aAAa,MAAM,WAAW,SAAS,MAAM;AAAA,IACvE;AACA,WAAO,EAAE,QAAQ,SAAS,OAAO;AAAA,EACnC;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,8BAA8B,OAIA;AAC5C,QAAM,kBAAkB,MAAM,SAAS,+BACnC;AAAA,IACE,MAAM,SAAS,2BACX,yBAAyB,MAAM,QAAQ,IACvC,MAAM;AAAA,EACZ,IACA,MAAM,SAAS,2BACb,yBAAyB,MAAM,QAAQ,IACvC,MAAM;AACZ,QAAM,eAAe,CAAC,YACpB,MAAM,yBAAyB,QAC/B,CAAC,6BAA6B,MAAM,sBAAsB;AAAA,IACxD,YAAY,yBAAyB,iBAAiB,OAAO;AAAA,IAC7D;AAAA,EACF,CAAC,EAAE;AACL,MAAI,CAAC,qBAAqB,iBAAiB,MAAM,cAAc,GAAG;AAChE,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MACb,SAAS,UAAU,MAAM,cAAc;AAAA,IACzC;AAAA,EACF;AACA,MAAI,CAAC,gCAAgC,iBAAiB,MAAM,cAAc,GAAG;AAC3E,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MACb,SAAS,UAAU,MAAM,cAAc;AAAA,IACzC;AAAA,EACF;AACA,MAAI,CAAC,aAAa,MAAM,cAAc,GAAG;AACvC,WAAO,EAAE,OAAO,MAAM,gBAAgB,SAAS,KAAK;AAAA,EACtD;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,SAAS,wCAAwC,MAAM,cAAc;AAAA,EACvE;AACF;AAUO,SAAS,uBACd,OACA,mBACA,MACA,UAAkF,CAAC,GAC3E;AACR,QAAM,kBAAkB,QAAQ,qBAC5B;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IACA,CAAC;AACL,QAAM,sBAAsB;AAAA,IAC1B;AAAA,IACA,4JACG,QAAQ,6BACL,g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b;AASO,SAAS,oBAAoB,UAAoB,OAA6B;AACnF,MAAI,CAAC,SAAS,WAAW,KAAK,CAAC,WAAW,OAAO,OAAO,UAAU,GAAG;AACnE,WAAO;AAAA,EACT;AACA,SAAO,cAAc,OAAO,CAAC,EAAE,MAAM,OAAO,IAAI,WAAW,CAAC,CAAC;AAC/D;AAKA,eAAsB,qBACpB,UACA,OAC2E;AAC3E,QAAM,SAAS,MAAM,wBAAwB,UAAU,EAAE,GAAG,OAAO,oBAAoB,EAAE,CAAC;AAC1F,MAAI,WAAW,KAAM,QAAO;AAC5B,MAAI,WAAW,uBAAuB;AACpC,WAAO,EAAE,cAAc,aAAa,SAAS,qCAAqC;AAAA,EACpF;AACA,QAAM,SAASC,6BAA4B,SAAS,QAAQ;AAC5D,QAAM,WAAW;AAAA,IACf,sBAAsB;AAAA,IACtB,0BAA0B,qCAAqC,OAAO,8BAA8B;AAAA,IACpG,yBAAyB,oCAAoC,OAAO,+BAA+B;AAAA,EACrG;AACA,SAAO,EAAE,cAAc,UAAU,SAAS,SAAS,MAAM,EAAE;AAC7D;;;AGlYA,SAAS,qBAAAC,0BAAyB;AAClC,SAAS,yBAAyB;AAClC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAAC,mBAAkB;AAC3B,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,OAGK;AACP;AAAA,EACE;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAMK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AACP,SAAS,mBAAmB,mBAAmB,uBAAuB;AACtE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,yBAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AACP,SAAS,+BAA+B;;;AC1EjC,IAAM,oCAAN,cAAgD,MAAM;AAAA,EAC3D,cAAc;AACZ,UAAM,wCAAwC;AAC9C,SAAK,OAAO;AAAA,EACd;AACF;AAQA,eAAsB,yBAAyB,OAUzB;AACpB,QAAM,MAAM,MAAM,OAAO,KAAK;AAC9B,QAAMC,SAAQ,MAAM,SAAS,IAAI;AACjC,MAAI,oBAAoB;AAExB,WAAS,UAAU,GAAG,WAAW,MAAM,OAAO,UAAU,WAAW,GAAG;AACpE,QAAI;AACJ,UAAM,YAAY,EAAE,WAAW,MAAM,WAAW,SAAS,OAAO,gBAAgB,CAAC;AACjF,QAAI;AACF,iBAAW,MAAM,MAAM,UAAU,MAAM,KAAK;AAAA,QAC1C,GAAG,MAAM;AAAA,QACT,UAAU;AAAA,QACV,QAAQ,YAAY,QAAQ,MAAM,OAAO,gBAAgB;AAAA,MAC3D,CAAC;AAAA,IACH,QAAQ;AACN,YAAM,YAAY,EAAE,WAAW,MAAM,WAAW,SAAS,OAAO,cAAc,CAAC;AAC/E,oBAAc,MAAM,eAAe,MAAM,WAAW,iBAAiB;AACrE,YAAMC,WAAU,aAAa,MAAM,QAAQ,SAAS,IAAI;AACxD,UAAI,CAAC,SAAS,MAAM,QAAQ,SAAS,mBAAmBA,QAAO,GAAG;AAChE,cAAM,IAAI,kCAAkC;AAAA,MAC9C;AACA,kBAAY,MAAM,eAAe,MAAM,WAAW,aAAa,SAASA,QAAO;AAC/E,2BAAqBA;AACrB,YAAM,YAAY,EAAE,WAAW,MAAM,WAAW,SAAS,OAAO,oBAAoB,CAAC;AACrF,YAAMD,OAAMC,QAAO;AACnB,YAAM,YAAY,EAAE,WAAW,MAAM,WAAW,SAAS,OAAO,kBAAkB,CAAC;AACnF;AAAA,IACF;AACA,UAAM,YAAY,EAAE,WAAW,MAAM,WAAW,SAAS,OAAO,cAAc,CAAC;AAE/E,QAAI,CAAC,kBAAkB,SAAS,MAAM,GAAG;AACvC;AAAA,QACE,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,KAAK,cAAc;AAAA,MAC9B;AACA,aAAO;AAAA,IACT;AAEA,kBAAc,MAAM,eAAe,MAAM,WAAW,iBAAiB;AACrE,UAAM,UAAU;AAAA,MACd,MAAM;AAAA,MACN;AAAA,MACA,kBAAkB,SAAS,QAAQ,IAAI,aAAa,GAAG,IAAI,CAAC;AAAA,IAC9D;AACA,QAAI,CAAC,SAAS,MAAM,QAAQ,SAAS,mBAAmB,OAAO,EAAG,QAAO;AACzE,UAAM,SAAS,MAAM,OAAO,EAAE,MAAM,MAAM,MAAS;AACnD;AAAA,MACE,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS,WAAW,MAAM,iBAAiB;AAAA,MAC3C;AAAA,MACA;AAAA,IACF;AACA,yBAAqB;AACrB,UAAM,YAAY,EAAE,WAAW,MAAM,WAAW,SAAS,OAAO,oBAAoB,CAAC;AACrF,UAAMD,OAAM,OAAO;AACnB,UAAM,YAAY,EAAE,WAAW,MAAM,WAAW,SAAS,OAAO,kBAAkB,CAAC;AAAA,EACrF;AAEA,QAAM,IAAI,kCAAkC;AAC9C;AAEA,SAAS,SACP,QACA,SACA,mBACA,SACS;AACT,SAAO,UAAU,OAAO,YAAY,oBAAoB,WAAW,OAAO;AAC5E;AAEA,SAAS,aACP,QACA,SACA,cACQ;AACR,QAAM,cAAc,KAAK;AAAA,IACvB,OAAO;AAAA,IACP,OAAO,iBAAiB,KAAK,KAAK,IAAI,GAAG,UAAU,CAAC;AAAA,EACtD;AACA,SAAO,KAAK,IAAI,OAAO,YAAY,KAAK,IAAI,aAAa,gBAAgB,CAAC,CAAC;AAC7E;AAEA,SAAS,kBAAkB,OAAsB,OAA8B;AAC7E,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,OAAO,SAAS,OAAO,KAAK,WAAW,EAAG,QAAO,KAAK,MAAM,UAAU,GAAK;AAC/E,QAAM,YAAY,KAAK,MAAM,KAAK;AAClC,SAAO,OAAO,SAAS,SAAS,IAAI,KAAK,IAAI,GAAG,YAAY,KAAK,IAAI;AACvE;AAEA,SAAS,kBAAkB,QAAyB;AAClD,SAAO,WAAW,OAAO,UAAU;AACrC;AAEA,SAAS,cACP,eACA,WACA,SACM;AACN,gBAAc,iBAAiB;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ,EAAE,WAAW,QAAQ;AAAA,EAC/B,CAAC;AACH;AAEA,SAAS,YACP,eACA,WACA,QACA,SACA,SACM;AACN,gBAAc,iBAAiB;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ,EAAE,WAAW,OAAO;AAAA,EAC9B,CAAC;AACD,gBAAc,iBAAiB;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ,EAAE,WAAW,OAAO;AAAA,IAC5B,OAAO,UAAU;AAAA,IACjB,SAAS,CAAC,KAAK,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE;AAAA,EAC/C,CAAC;AACD,gBAAc,KAAK,iDAAiD;AAAA,IAClE,UAAU;AAAA,IACV;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;;;ACjLA,SAAS,kBAAkB;AAE3B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,IAAM,kBAAkB;AACxB,IAAM,wBAAwB;AAC9B,IAAM,qBAAqB;AA4DpB,SAAS,8BACd,OACA,UAMiC;AACjC,MAAI,CAAC,SAAS,MAAM,YAAY,KAAK,MAAM,SAAS,uBAAwB,QAAO;AACnF,MACE,MAAM,iBAAiB,SAAS,gBAChC,MAAM,uBAAuB,SAAS,sBACtC,MAAM,aAAa,SAAS,YAC5B,MAAM,YAAY,SAAS,WAC3B,OAAO,MAAM,eAAe,YAC5B,MAAM,WAAW,SAAS,KAC1B,MAAM,WAAW,SAAS,yBAC1B,OAAO,MAAM,cAAc,YAC3B,MAAM,UAAU,SAAS,KACzB,MAAM,UAAU,SAAS,mBACzB,OAAO,MAAM,qBAAqB,YAClC,CAAC,OAAO,cAAc,MAAM,gBAAgB,KAC5C,MAAM,mBAAmB,KACzB,OAAO,MAAM,6BAA6B,YAC1C,CAAC,OAAO,SAAS,KAAK,MAAM,MAAM,wBAAwB,CAAC,KAC3D,OAAO,MAAM,6BAA6B,YAC1C,CAAC,OAAO,SAAS,KAAK,MAAM,MAAM,wBAAwB,CAAC,GAC3D;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,8BAA8B,OAUjB;AAC3B,SAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN,cAAc,MAAM;AAAA,IACpB,oBAAoB,MAAM;AAAA,IAC1B,UAAU,MAAM;AAAA,IAChB,SAAS,MAAM;AAAA,IACf,YAAY,kBAAkB,MAAM,UAAU;AAAA,IAC9C,WAAW,aAAa,MAAM,SAAS;AAAA,IACvC,kBAAkB,MAAM,qBAAqB;AAAA,IAC7C,0BAA0B,MAAM,aAAa,YAAY;AAAA,IACzD,0BAA0B,IAAI;AAAA,MAC5B,MAAM,aAAa,QAAQ,IAAI,MAAM;AAAA,IACvC,EAAE,YAAY;AAAA,EAChB;AACF;AAEO,SAAS,gCACd,QACA,WAC0B;AAC1B,SAAO;AAAA,IACL,GAAG;AAAA,IACH,WAAW,aAAa,SAAS;AAAA,IACjC,kBAAkB,OAAO,mBAAmB;AAAA,EAC9C;AACF;AAEO,SAAS,iCAAiC,QAAkC,KAAW;AAC5F,SAAO,KAAK,MAAM,OAAO,wBAAwB,KAAK,IAAI,QAAQ;AACpE;AAEA,eAAsB,oCAAoC,OAGtC;AAClB,MAAI,MAAM,OAAO,OAAO,UAAU,MAAM,OAAO,YAAY,MAAM;AAC/D,WAAO,kBAAkB,MAAM,OAAO,EAAE;AAAA,EAC1C;AACA,QAAM,OAAO,MAAM,MAAM,QAAQ,MAAM;AACvC,MAAI,CAAC,QAAQ,KAAK,aAAa,iCAAiC,KAAK,SAAS;AAC5E,UAAM,IAAI,gCAAgC,oCAAoC;AAAA,EAChF;AACA,SAAO,kBAAkB,KAAK,EAAE;AAClC;AAEO,SAAS,kCACd,OACA,QACqC;AACrC,MAAI;AACF,WAAO,oBAAoB,OAAO,MAAM;AAAA,EAC1C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,wBAAwB,OAaH;AACzC,QAAM,MAAM,MAAM,OAAO,KAAK;AAC9B,QAAM,YAAY,IAAI;AACtB,QAAM,aAAa,MAAM,aAAa,oBAAoB,MAAM,YAAY,KAAK,IAAI;AACrF,MAAI,YAAY,aAAa,YAAY,aAAa,MAAM,OAAO,SAAS;AAC5E,MAAI,6BAA6B,YAAY,8BAA8B;AAC3E,QAAM,sBAAsB,IAAI,IAAI,YAAY,uBAAuB,CAAC,CAAC;AACzE,QAAM,gBAAgB,YAAY,UAAU,YAAY;AACxD,QAAM,SAAS,EAAE,GAAG,cAAc;AAClC,QAAM,UAAU,oBAAI,IAAuC;AAE3D,SAAO,MAAM;AACX,UAAM,sBAAsB,KAAK,IAAI,GAAG,IAAI,IAAI,SAAS;AACzD,WAAO,YAAY,cAAc,YAAY;AAC7C,UAAM,aAAa,YAAY,QAAQ,OAAO,mBAAmB;AACjE,QAAI,YAAY;AACd,aAAO;AAAA,QACL,QAAQ;AAAA,QACR;AAAA,QACA,SAAS,CAAC,GAAG,QAAQ,OAAO,CAAC;AAAA,QAC7B,YAAY;AAAA,UACV,SAAS;AAAA,UACT;AAAA,UACA;AAAA,UACA,qBAAqB,CAAC,GAAG,mBAAmB;AAAA,UAC5C,QAAQ,EAAE,GAAG,OAAO;AAAA,QACtB;AAAA,QACA,mBAAmB;AAAA,QACnB;AAAA,QACA,kBAAkB,OAAO;AAAA,QACzB,WAAW,OAAO;AAAA,QAClB,QAAQ,EAAE,GAAG,OAAO;AAAA,QACpB,kBACE,eAAe,wBAAwB,OAAO,aAAa,MAAM;AAAA,MACrE;AAAA,IACF;AAEA,UAAM,gBAAgB,WAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK;AACzE,QAAI,oBAAoB,IAAI,aAAa,GAAG;AAC1C,YAAM,IAAI,gCAAgC,uCAAuC;AAAA,IACnF;AACA,wBAAoB,IAAI,aAAa;AACrC,WAAO,oBAAoB;AAC3B,UAAM,WAAW,KAAK,IAAI,KAAK,MAAM,WAAW,OAAO,aAAa;AACpE,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,MAAM,YAAY,WAAW,QAAQ;AAAA,IACpD,SAAS,OAAO;AACd,aAAO,YAAY,cAAc,YAAY,KAAK,IAAI,GAAG,IAAI,IAAI,SAAS;AAC1E,UAAI,iBAAiB,8BAA+B,OAAM,SAAS,EAAE,GAAG,OAAO;AAC/E,YAAM;AAAA,IACR;AACA,QAAI,KAAK,QAAQ,SAAS,UAAU;AAClC,YAAM,IAAI,gCAAgC,+CAA+C;AAAA,IAC3F;AACA,WAAO,iBAAiB,KAAK,QAAQ;AAErC,UAAM,mBAAmB,oBAAI,IAAY;AACzC,eAAW,UAAU,KAAK,SAAS;AACjC,UAAI,OAAO,WAAW,CAAC,OAAO,QAAQ,OAAO,KAAK,SAAS;AACzD,yBAAiB,IAAI,OAAO,MAAM;AAClC;AAAA,MACF;AACA,YAAM,aAAa,MAAM,eAAe;AAAA,QACtC,MAAM,OAAO;AAAA,QACb,YAAY,MAAM,OAAO;AAAA,QACzB,SAAS,OAAO,WAAW;AACzB,gBAAM,oBAAoB,KAAK,IAAI,GAAG,IAAI,IAAI,SAAS;AACvD,iBAAO,YAAY,cAAc,YAAY;AAC7C,cACE,OAAO,oBAAoB,MAAM,uBACjC,OAAO,aAAa,MAAM,gBAC1B,qBAAqB,MAAM,wBAC3B;AACA,mBAAO;AAAA,UACT;AACA,iBAAO,oBAAoB;AAC3B,gBAAM,SAAS,MAAM,MAAM,QAAQ,MAAM;AACzC,iBAAO,YAAY,cAAc,YAAY,KAAK,IAAI,GAAG,IAAI,IAAI,SAAS;AAC1E,iBAAO;AAAA,QACT;AAAA,MACF,CAAC;AACD,UAAI,OAAO,KAAK,aAAa,+BAA+B;AAC1D,gBAAQ,OAAO,OAAO,MAAM;AAC5B,YAAI,eAAe,UAAW,8BAA6B;AAAA,YACtD,kBAAiB,IAAI,OAAO,MAAM;AACvC;AAAA,MACF;AACA,UAAI,eAAe,UAAU;AAC3B,gBAAQ,IAAI,OAAO,QAAQ,iBAAiB,OAAO,MAAM,MAAM,QAAQ,MAAM,YAAY,CAAC;AAAA,MAC5F,WAAW,eAAe,WAAW;AACnC,gBAAQ,OAAO,OAAO,MAAM;AAC5B,qCAA6B;AAAA,MAC/B,OAAO;AACL,yBAAiB,IAAI,OAAO,MAAM;AAAA,MACpC;AAAA,IACF;AACA,QAAI,iBAAiB,OAAO,GAAG;AAC7B,iBAAW,UAAU,kBAAkB;AACrC,YAAI,QAAQ,OAAO,MAAM,EAAG,8BAA6B;AAAA,MAC3D;AACA,YAAM,WAAW,MAAM,MAAM,0BAA0B,CAAC,GAAG,gBAAgB,CAAC;AAC5E,UAAI,SAAS,OAAO,EAAG,8BAA6B;AAAA,IACtD;AACA,QAAI,KAAK,eAAe;AACtB,kBAAY,aAAa,KAAK,aAAa;AAC3C;AAAA,IACF;AACA,QAAI,CAAC,KAAK,mBAAmB;AAC3B,YAAM,IAAI,gCAAgC,6CAA6C;AAAA,IACzF;AACA,WAAO,YAAY,cAAc,YAAY,KAAK,IAAI,GAAG,IAAI,IAAI,SAAS;AAC1E,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,YAAY;AAAA,MACZ,SAAS,CAAC,GAAG,QAAQ,OAAO,CAAC;AAAA,MAC7B,YAAY;AAAA,MACZ,mBAAmB,aAAa,KAAK,iBAAiB;AAAA,MACtD;AAAA,MACA,kBAAkB,OAAO;AAAA,MACzB,WAAW,OAAO;AAAA,MAClB,QAAQ,EAAE,GAAG,OAAO;AAAA,MACpB,kBAAkB;AAAA,IACpB;AAAA,EACF;AACF;AAEA,eAAe,eAAe,OAIgB;AAC5C,MAAI,MAAM,KAAK,OAAO,MAAM,WAAY,QAAO;AAC/C,MAAI,UAAU,MAAM,KAAK;AACzB,QAAM,OAAO,oBAAI,IAAY,CAAC,MAAM,KAAK,EAAE,CAAC;AAC5C,WAAS,QAAQ,GAAG,QAAQ,oBAAoB,SAAS,GAAG;AAC1D,QAAI,QAAQ,SAAS,MAAM,UAAU,EAAG,QAAO;AAC/C,UAAM,OAAO,QAAQ,KAAK,CAACE,YAAW,CAAC,KAAK,IAAIA,OAAM,CAAC;AACvD,QAAI,CAAC,KAAM,QAAO;AAClB,SAAK,IAAI,IAAI;AACb,UAAM,SAAS,MAAM,MAAM,QAAQ,IAAI;AACvC,QAAI,CAAC,OAAQ,QAAO;AACpB,cAAU,OAAO;AAAA,EACnB;AACA,SAAO;AACT;AAEA,SAAS,iBACP,MACA,QACA,cAC2B;AAC3B,SAAO;AAAA,IACL,kBAAkB,KAAK;AAAA,IACvB,mBAAmB,KAAK,WAAW,KAAK,gBAAgB,KAAK;AAAA,IAC7D,UAAU,OAAO;AAAA,IACjB,gBAAgB,KAAK,QAAQ,CAAC,KAAK,OAAO;AAAA,IAC1C,SAAS,KAAK,WAAW,OAAO;AAAA,IAChC,OAAO,KAAK;AAAA,IACZ,UAAU,KAAK;AAAA,IACf,cAAc,KAAK;AAAA,IACnB,aAAa,KAAK;AAAA,IAClB,WACE,KAAK,eAAe,oCAAoC,mBAAmB,KAAK,EAAE,CAAC;AAAA,IACrF,UAAU,wBAAwB,MAAM,YAAY;AAAA,EACtD;AACF;AAEA,SAAS,oBACP,OACA,QAC8B;AAC9B,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,QAAM,aAAa;AACnB,QAAM,SAAS,WAAW;AAC1B,MACE,WAAW,YAAY,KACvB,OAAO,WAAW,+BAA+B,aACjD,CAAC,MAAM,QAAQ,WAAW,mBAAmB,KAC7C,WAAW,oBAAoB,KAAK,CAAC,SAAS,CAAC,iBAAiB,KAAK,IAAI,CAAC,KAC1E,IAAI,IAAI,WAAW,mBAAmB,EAAE,SAAS,WAAW,oBAAoB,UAChF,WAAW,oBAAoB,SAAS,OAAO,uBAC/C,CAAC,UACD,OAAO,WAAW,UAClB;AACA,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,MAAI,OAAO,WAAW,cAAc,UAAU;AAC5C,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,eAAa,WAAW,SAAS;AACjC,QAAM,YAAY;AAClB,aAAW,CAAC,KAAK,OAAO,KAAK;AAAA,IAC3B,CAAC,iBAAiB,OAAO,QAAQ;AAAA,IACjC,CAAC,oBAAoB,OAAO,mBAAmB;AAAA,IAC/C,CAAC,aAAa,OAAO,YAAY;AAAA,EACnC,GAAY;AACV,UAAM,cAAc,UAAU,GAAG;AACjC,QACE,CAAC,OAAO,cAAc,WAAW,KACjC,OAAO,WAAW,IAAI,KACtB,OAAO,WAAW,IAAI,SACtB;AACA,YAAM,IAAI,MAAM,gDAAgD;AAAA,IAClE;AAAA,EACF;AACA,MAAI,WAAW,oBAAoB,SAAS,OAAO,UAAU,gBAAgB,GAAG;AAC9E,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,SAAO;AACT;AAEA,SAAS,YACP,QACA,OAMA,qBACqC;AACrC,MAAI,OAAO,iBAAiB,MAAM,SAAU,QAAO;AACnD,MAAI,OAAO,oBAAoB,MAAM,oBAAqB,QAAO;AACjE,MACE,OAAO,aAAa,MAAM,gBAC1B,uBAAuB,MAAM,wBAC7B;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,cAAqC;AAC5C,SAAO,EAAE,eAAe,GAAG,kBAAkB,GAAG,WAAW,EAAE;AAC/D;AAEA,SAAS,aAAa,OAAuB;AAC3C,MAAI,MAAM,SAAS,KAAK,MAAM,SAAS,iBAAiB;AACtD,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,OAAuB;AAChD,MAAI,MAAM,SAAS,KAAK,MAAM,SAAS,uBAAuB;AAC5D,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AACA,SAAO;AACT;AAEO,IAAM,gCAAN,cAA4C,MAAM;AAAA,EACvD,SAAuC;AAAA,EAEvC,cAAc;AACZ,UAAM,qCAAqC;AAC3C,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,kCAAN,cAA8C,MAAM;AAAA,EACzD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;AFvUA,IAAM,yBAAyB,IAAI,kBAA0C;AAC7E,IAAM,cAA4B,OAAO;AAAA,EACvC,UAAU,SAAmC;AAC3C,UAAM,uBAAuB,SAAS,IAAI;AAC1C,WAAO,MAAM,GAAG,IAAI;AAAA,EACtB;AAAA,EACA,EAAE,YAAY,MAAM,WAAW;AACjC;AAEA,IAAM,iBAAiB;AACvB,IAAM,uBAAuB,IAAI,OAAO;AACxC,IAAM,+CAA+C,KAAK,KAAK,KAAK;AACpE,IAAM,wCAAwC;AAC9C,IAAM,8CAA8C,IAAI,OAAO;AAC/D,IAAM,gCAAgC,KAAK,KAAK,KAAK;AACrD,IAAM,kCAAkC;AACxC,IAAM,qBAAqB;AAC3B,IAAM,2BAA2B,IAAI,OAAO;AAsBrC,SAAS,+BAA+B,MAAoC;AACjF,SAAO,SAAS,iBACZ,EAAE,kBAAkB,qBAA8B,2BAA2B,KAAK,IAClF,EAAE,kBAAkB,qBAA8B,2BAA2B,MAAM;AACzF;AAEO,SAAS,oCACd,UACA,yBACA;AACA,QAAM,qBAAqB,yBAAyB,UAAU,uBAAuB;AACrF,SAAO;AAAA,IACL,6BAA6B,OAC3B,UAC+C;AAC/C,YAAM,EAAE,UAAU,IAAI,eAAe,cAAc,IAAI,MAAM,SAAS;AACtE,UAAI,CAAC,cAAe,OAAM,IAAI,MAAM,kCAAkC;AAGtE,UAAI,CAAC,MAAM;AACT,eAAO,EAAE,QAAQ,UAAU,cAAc,OAAO,WAAW,0BAA0B;AACvF,YAAM,UAAU;AAAA,QACd,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,OAAO,MAAM;AAAA,MACf;AACA,UAAI,cAA+D;AACnE,YAAM,YAAY,YAAY;AAC5B,cAAM,SAAS,MAAM,0BAA0B,IAAI,OAAO;AAC1D,YAAI,OAAO,uBAAuB,MAAM;AACtC,gBAAM,IAAI,MAAM,yDAAyD;AAC3E,YAAI,aAAa;AACf,gBAAM,CAAC,aAAa,UAAU,IAAI,MAAM,QAAQ,IAAI;AAAA,YAClD,iBAAiB,IAAI,MAAM,aAAa,MAAM,MAAM;AAAA,YACpDC;AAAA,cACE;AAAA,cACA,MAAM;AAAA,cACN,YAAY,WAAW;AAAA,cACvB,YAAY;AAAA,YACd;AAAA,UACF,CAAC;AACD,gBAAM,UAAU,aAAa,SAAS;AAGtC,cACE,CAAC,eACD,YAAY,WAAW,YACvB,SAAS,kBAAkB,SAC3B,SAAS,qBAAqB,QAC9B,CAACC,mBAAkB,6BAA6B,WAAW,GAAG,WAAW,KACzE,CAAC,cACD,WAAW,WAAW,YACtB,WAAW,YAAY,YAAY,WAAW,qBAC9C,WAAW,cAAc,YAAY,WAAW;AAEhD,kBAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,QACpD;AACA,eAAO;AAAA,MACT;AACA,YAAM,UAAU;AAChB,YAAM,WAAW,MAAM,qCAAqC,IAAI;AAAA,QAC9D,aAAa,MAAM;AAAA,QACnB,OAAO,MAAM;AAAA,MACf,CAAC;AACD,YAAM,OAAO,UAAU;AACvB,YAAM,SAAS,OAAO,6BAA6B,IAAI,IAAI;AAC3D,YAAM,WAAW,MAAM,iBAAiB,IAAI,MAAM,aAAa,MAAM,MAAM;AAC3E,UACE,CAAC,QACD,CAAC,UACD,CAAC,YACD,SAAS,WAAW,YACpB,KAAK,OAAO,MAAM,UAClB,KAAK,cAAc,MAAM,aACzB,KAAK,OAAO,SAAS,gBACrB,OAAO,aAAa,MAAM,YAC1B,SAAS,yBAAyB,OAAO,qBACzC;AACA,eAAO,EAAE,QAAQ,UAAU,cAAc,MAAM;AAAA,MACjD;AACA,oBAAc;AACd,YAAM,UAAU;AAChB,YAAM,+BAA+B,IAAI,IAAI;AAC7C,YAAM,8BAA8B,IAAI;AAAA,QACtC,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,UAAU,MAAM;AAAA,QAChB,iBAAiB,KAAK;AAAA,QACtB,oBAAoB,MAAM;AAAA,QAC1B,OAAO;AAAA,QACP,aAAa,gBAAgB,MAAM,kBAAkB;AAAA,QACrD,wBAAwB,OAAO;AAAA,QAC/B,2BAA2B,OAAO;AAAA,MACpC,CAAC;AACD,YAAM,gBACJ,OAAO,WAAW,mBAAmB,4BACjC,cACA;AACN,UACE,OAAO,uBAAuB,MAAM,eACpC,OAAO,0BAA0B,KACjC,CAAC,OAAO,yBACR;AACA,eAAO,MAAM,oBAAoB,mBAAmB;AAAA,MACtD;AACA,YAAM,QAAQ,MAAM,8BAA8B,IAAI;AAAA,QACpD,GAAG;AAAA,QACH,eAAe,MAAM;AAAA,MACvB,CAAC;AACD,UAAI,MAAM,WAAW,WAAW;AAC9B,sBAAc,iBAAiB;AAAA,UAC7B,MAAM;AAAA,UACN,QAAQ,EAAE,UAAU,eAAe,SAAS,MAAM,OAAO;AAAA,QAC3D,CAAC;AACD,eAAO,EAAE,QAAQ,MAAM,OAAO;AAAA,MAChC;AAEA,UAAI,iBAAgC;AACpC,UAAI,6BAA4C;AAChD,YAAM,YAAY,KAAK,IAAI;AAC3B,YAAM,UAAyC;AAAA,QAC7C,OAAO;AAAA,QACP,SAAS;AAAA,QACT,UAAU;AAAA,QACV,WAAW;AAAA,QACX,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,kBAAkB;AAAA,QAClB,WAAW;AAAA,QACX,SAAS;AAAA,QACT,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,cAAc;AAAA,QAOd,cAAc;AAAA,QACd,mBAAmB;AAAA,QACnB,UAAU,CAAC;AAAA,MACb;AACA,oBAAc,KAAK,iCAAiC;AAAA,QAClD,UAAU;AAAA,QACV,SAAS;AAAA,MACX,CAAC;AACD,UAAI;AACF,gBAAQ,QAAQ;AAChB,cAAM,WAAW,MAAM,mCAAmC,IAAI;AAAA,UAC5D,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,qBAAqB,OAAO;AAAA,QAC9B,CAAC;AACD,YAAI,CAAC,YAAY,SAAS,OAAO,mBAAmB,UAAU;AAC5D,gBAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,QAClD;AACA,YACE,wBAAwB,SAAS,OAAO,KAAK,MAC7C,wBAAwB,OAAO,WAAW,GAC1C;AACA,gBAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,QAClD;AACA,cAAM,YAAY,MAAM,2CAA2C,IAAI;AAAA,UACrE,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,oBAAoB,MAAM;AAAA,UAC1B,qBAAqB,OAAO;AAAA,UAC5B,wBAAwB,OAAO;AAAA,UAC/B,2BAA2B,OAAO;AAAA,UAClC,0BAA0B,SAAS,OAAO;AAAA,QAC5C,CAAC;AACD,qCAA6B,SAAS,OAAO;AAC7C,cAAM,kBAAkB,sBAAsB,MAAM,kBAAkB;AACtE,cAAM,cAAc,MAAM,oCAAoC,IAAI;AAAA,UAChE,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,aAAa;AAAA,UACb,qBAAqB,OAAO;AAAA,QAC9B,CAAC;AACD,YAAI,eAAe,YAAY,UAAU,WAAW;AAClD,gBAAM,kBAAkB,8BAA8B,MAAM,YAAY,QAAQ;AAChF,gBAAM,kBAAwE;AAAA,YAC5E,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,UAAU,MAAM;AAAA,YAChB,oBAAoB,MAAM;AAAA,YAC1B,oBAAoB,YAAY;AAAA,YAChC,QAAQ,YAAY,UAAU,cAAc,cAAc;AAAA,YAC1D,SAAS;AAAA,YACT,OAAO,YAAY;AAAA,YACnB,wBAAwB,OAAO;AAAA,YAC/B,2BAA2B,OAAO;AAAA,YAClC,sBAAsB,YAAY;AAAA,YAClC,+BACE,YAAY,UAAU,cAAc,YAAY,sBAAsB,IAAI;AAAA,YAC5E,GAAI,YAAY,UAAU,eAC1B,YAAY,SAAS,kBACrB,OAAO,YAAY,SAAS,mBAAmB,WAC3C;AAAA,cACE,gBAAgB,YAAY,SAAS;AAAA,YACvC,IACA,CAAC;AAAA,UACP;AACA,gBAAMC,WACJ,YAAY,UAAU,YAAY,gBAAgB,oBAC9C,MAAM,+CAA+C,IAAI;AAAA,YACvD,iBAAiB;AAAA,cACf,WAAW,MAAM;AAAA,cACjB,aAAa,MAAM;AAAA,cACnB,UAAU,MAAM;AAAA,cAChB,UAAU,OAAO;AAAA,cACjB,aAAa,8BAA8B,MAAM,QAAQ,IAAI,OAAO,WAAW,iBAAiB,IAAI,YAAY,aAAa,+BAA+B;AAAA,cAC5J,YAAY;AAAA,cACZ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,WAAW;AAAA,gBACX,0BAA0B,OAAO;AAAA,cACnC;AAAA,YACF;AAAA,YACA,YAAY;AAAA,UACd,CAAC,IACD,MAAM,+BAA+B,IAAI,eAAe;AAC9D,gBAAM,qBAAqB,aAAa,gBAAgB,SAAS,MAAM;AACvE,gBAAM,qBAAqB,SAAS,gBAAgB,UAAU,MAAM;AACpE,gBAAM,qBAAqB,SAAS,gBAAgB,OAAO,MAAM;AACjE,iBAAO;AAAA,YACL,QAAQ,YAAY,UAAU,cAAc,aAAa;AAAA,YACzD,SAAS;AAAA,YACT,GAAI,YAAY,YAAY,EAAE,WAAW,YAAY,UAAU,IAAI,CAAC;AAAA,YACpE,cAAcA,SAAQ;AAAA,YACtB,4BAA4BA,SAAQ;AAAA,UACtC;AAAA,QACF;AACA,cAAM,WAAW,MAAM,6BAA6B;AAAA,UAClD;AAAA,UACA;AAAA,UACA;AAAA,UACA,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,kBAAkB,SAAS,OAAO;AAAA,QACpC,CAAC;AACD,cAAM,sBAAsB,SAAS;AACrC,cAAM,oBAAoB,+BAA+B,SAAS,IAAI;AAEtE,YAAI,gBAAgB,SAAS,OAAO;AACpC,YAAI,MAAM,gBACN,MAAM,sCAAsC,IAAI;AAAA,UAC9C,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,YAAY;AAAA,UACZ,qBAAqB,OAAO;AAAA,QAC9B,CAAC,IACD;AACJ,cAAM,QAAQ;AAAA,UACZ,MAAM;AAAA,UACN,WAAW;AAAA,UACX,0BAA0B,OAAO;AAAA,QACnC;AACA,YAAI,CAAC,KAAK;AACR,gBAAM,MAAM,gCAAgC,IAAI;AAAA,YAC9C,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,UAAU,MAAM;AAAA,YAChB,UAAU,OAAO;AAAA,YACjB,mCAAmC,SAAS,OAAO;AAAA,YACnD,uBAAuB;AAAA,YACvB,YAAY;AAAA,YACZ,aAAa;AAAA,YACb,aAAa,sBAAsB,MAAM,QAAQ;AAAA,YACjD,YAAY;AAAA,YACZ;AAAA,UACF,CAAC;AACD,0BAAgB,IAAI;AAAA,QACtB;AAEA,cAAM,eACJ,eACC,MAAM,sBAAsB,IAAI;AAAA,UAC/B,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,mCAAmC,SAAS,OAAO;AAAA,UACnD,wBAAwB,SAAS,OAAO;AAAA,UACxC,aAAa;AAAA,UACb,aAAa;AAAA,UACb;AAAA,QACF,CAAC;AACH,yBAAiB,aAAa;AAE9B,cAAM,iBAAiB,SAAS;AAChC,cAAM,UAAU,eAAe;AAC/B,cAAM,SAAS;AAAA,UACb,GAAG;AAAA,UACH,WAAW,IAAI,SACb,uBAAuB,IAAI,WAAW,MAAM,eAAe,UAAU,GAAG,IAAI,CAAC;AAAA,UAC/E,cAAc,IAAI,SAChB,uBAAuB,IAAI,WAAW,MAAM,eAAe,aAAa,GAAG,IAAI,CAAC;AAAA,UAClF,GAAI,UACA;AAAA,YACE,SAAS,IAAI,SACX,uBAAuB,IAAI,WAAW,MAAM,QAAQ,GAAG,IAAI,CAAC;AAAA,UAChE,IACA,CAAC;AAAA,QACP;AACA,cAAM,UAAU;AAChB,cAAM,YAAY,MAAM,OAAO;AAAA,UAC7B,MAAM,MAAM;AAAA,UACZ,MAAM,MAAM;AAAA,QACd;AACA,gBAAQ,mBAAmB,UAAU;AACrC,gBAAQ,YAAY,UAAU;AAE9B,cAAM,OAAO,oBAAoB,eAC7B,MAAM,gBAAgB,IAAI,MAAM,aAAa,oBAAoB,YAAY,IAC7E,MAAM,kBAAkB,IAAI;AAAA,UAC1B,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,QACrB,CAAC;AACL,YAAI,CAAC,KAAM,OAAM,IAAI,YAAY,qBAAqB,KAAK;AAE3D,cAAM,sBAAsB,MAAM,4CAA4C,IAAI;AAAA,UAChF,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,oBAAoB,MAAM;AAAA,UAC1B,qBAAqB,OAAO;AAAA,UAC5B,gBAAgB,UAAU;AAAA,UAC1B,+BAA+B,MAAM,MAAM;AAAA,UAC3C,kBAAkB,kBAAkB;AAAA,UACpC,cAAc,UAAU,QAAQ,IAAI,CAAC,WAAW;AAAA,YAC9C,kBAAkB,MAAM;AAAA,YACxB,kBAAkB,MAAM;AAAA,YACxB,cAAc,kBAAkB,KAAK;AAAA,UACvC,EAAE;AAAA,QACJ,CAAC;AACD,cAAM,mBAAmB,kBAAkB,4BACvC,UAAU,QAAQ;AAAA,UAAO,CAAC,OAAO,UAC/B,2CAA2C;AAAA,YACzC;AAAA,YACA,aAAa,oBAAoB,KAAK;AAAA,YACtC,2BAA2B,SAAS,OAAO;AAAA,YAC3C;AAAA,UACF,CAAC;AAAA,QACH,IACA,UAAU;AACd,cAAM,wBAAwB,oBAAI,IAAiD;AACnF,mBAAW,eAAe,qBAAqB;AAC7C,gCAAsB,IAAI,YAAY,kBAAkB;AAAA,YACtD,kBAAkB,YAAY;AAAA,YAC9B,kBAAkB,YAAY;AAAA,YAC9B,cAAc,YAAY;AAAA,UAC5B,CAAC;AAAA,QACH;AACA,cAAM,oBAAoB,CAAC,GAAG,sBAAsB,OAAO,CAAC;AAC5D,cAAM,sBAAsB;AAAA,UAC1B,UAAU;AAAA,UACV;AAAA,UACA,OAAO,OAAO;AAAA,QAChB;AAEA,cAAM,uBAAuB,OAAO,YAa9B;AACJ,cAAI,CAAC,QAAQ,QAAQ,YAAY;AAC/B,kBAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,UAClD;AACA,cAAI,aACF,QAAQ,cACP,MAAM,gDAAgD,IAAI;AAAA,YACzD,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,4BAA4B,QAAQ,QAAQ;AAAA,YAC5C,qBAAqB,OAAO;AAAA,UAC9B,CAAC;AACH,cAAI,CAAC,YAAY;AACf,yBAAa,MAAM,0CAA0C,IAAI;AAAA,cAC/D,WAAW,MAAM;AAAA,cACjB,aAAa,MAAM;AAAA,cACnB,oBAAoB,MAAM;AAAA,cAC1B,UAAU,MAAM;AAAA,cAChB,sBAAsB,aAAa;AAAA,cACnC,qBAAqB,OAAO;AAAA,cAC5B,kBAAkB,QAAQ,MAAM;AAAA,cAChC,yBAAyB,QAAQ,OAAO;AAAA,cACxC,4BAA4B,QAAQ,QAAQ;AAAA,cAC5C,YAAY,QAAQ,QAAQ;AAAA,cAC5B,wBAAwB,OAAO;AAAA,cAC/B,2BAA2B,OAAO;AAAA,cAClC,2BAA2B,QAAQ,OAAO;AAAA,cAC1C,yBAAyB,QAAQ,QAAQ;AAAA,cACzC,iBAAiB,OAAO,gBAAgB,QAAQ,KAAK;AAAA,YACvD,CAAC;AAAA,UACH;AACA,cAAI,WAAW,eAAe,QAAQ,QAAQ,YAAY;AACxD,kBAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,UAClD;AACA,cAAI,WAAW,WAAW,aAAa,CAAC,QAAQ,cAAe,QAAO;AACtE,cAAI,WAAW,WAAW,aAAa,QAAQ,eAAe;AAC5D,oBAAQ,QAAQ;AAChB,gBAAI;AACF,oBAAM,kBAAkB,MAAM,mBAAmB,cAAc;AAAA,gBAC7D,WAAW,MAAM;AAAA,gBACjB,aAAa,MAAM;AAAA,gBACnB,YAAY,QAAQ,QAAQ;AAAA,gBAC5B,eAAe,OAAO,YAAY;AAAA,gBAClC,sBAAsB,OAAO,YAAY;AAAA,gBACzC,oBAAoB,OAAO,YAAY;AAAA,cACzC,CAAC;AACD,kBAAI,gBAAgB,WAAW,SAAS;AACtC,sBAAM,IAAI,MAAM,oCAAoC;AAAA,cACtD;AAAA,YACF,QAAQ;AACN,oBAAM,IAAI,YAAY,mBAAmB,IAAI;AAAA,YAC/C;AACA,mBAAO;AAAA,UACT;AACA,cAAI,WAAW,WAAW,UAAU;AAClC,kBAAM,UAAU,MAAM,wCAAwC,IAAI;AAAA,cAChE,WAAW,MAAM;AAAA,cACjB,aAAa,MAAM;AAAA,cACnB,cAAc,WAAW;AAAA,cACzB,oBAAoB,MAAM;AAAA,YAC5B,CAAC;AACD,gBAAI,YAAY,eAAe;AAC7B,oBAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,YAClD;AACA,yBAAa,EAAE,GAAG,YAAY,QAAQ,QAAQ;AAC9C,gBAAI,YAAY,UAAW,QAAO;AAAA,UACpC;AACA,cAAI,WAAW,WAAW,WAAW;AACnC,kBAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,UAClD;AACA,cAAI,QAAQ,eAAe;AACzB,oBAAQ,QAAQ;AAChB,gBAAI;AACF,oBAAM,kBAAkB,MAAM,mBAAmB,cAAc;AAAA,gBAC7D,WAAW,MAAM;AAAA,gBACjB,aAAa,MAAM;AAAA,gBACnB,YAAY,QAAQ,QAAQ;AAAA,gBAC5B,eAAe,OAAO,YAAY;AAAA,gBAClC,sBAAsB,OAAO,YAAY;AAAA,gBACzC,oBAAoB,OAAO,YAAY;AAAA,cACzC,CAAC;AACD,kBAAI,gBAAgB,WAAW,SAAS;AACtC,sBAAM,IAAI,MAAM,oCAAoC;AAAA,cACtD;AAAA,YACF,QAAQ;AACN,oBAAM,yCAAyC,IAAI;AAAA,gBACjD,WAAW,MAAM;AAAA,gBACjB,aAAa,MAAM;AAAA,gBACnB,cAAc,WAAW;AAAA,gBACzB,QAAQ;AAAA,gBACR,aAAa;AAAA,cACf,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,oBAAM,IAAI,YAAY,mBAAmB,IAAI;AAAA,YAC/C;AAAA,UACF;AACA,gBAAM,aAAa,MAAM,yCAAyC,IAAI;AAAA,YACpE,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,cAAc,WAAW;AAAA,YACzB,QAAQ;AAAA,UACV,CAAC;AACD,cAAI,eAAe,eAAe;AAChC,kBAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,UAClD;AACA,iBAAO,EAAE,GAAG,YAAY,QAAQ,UAAU;AAAA,QAC5C;AAEA,cAAM,iBAAiB,OAAO,YAQxB;AACJ,cAAI,CAAC,OAAO,WAAW,CAAC,SAAS,cAAc;AAC7C,mBAAO,EAAE,gBAAgB,WAAW,aAAa,KAAK;AAAA,UACxD;AACA,gBAAM,iCAAiC,IAAI;AAAA,YACzC,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,cAAc,QAAQ,WAAW;AAAA,YACjC,sBAAsB,QAAQ,WAAW;AAAA,YACzC,wBAAwB,OAAO;AAAA,YAC/B,2BAA2B,OAAO;AAAA,YAClC,2BAA2B,QAAQ,OAAO;AAAA,YAC1C,yBAAyB,QAAQ,QAAQ;AAAA,UAC3C,CAAC;AACD,gBAAM,4BACJ,OAAO,OAAO,sBAAsB,QAAQ;AAC9C,cAAI,4BAA4B,GAAG;AACjC,kBAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,UAC/C;AACA,gBAAM,UAAU;AAChB,gBAAM,WAAW,MAAM,OAAO,QAAQ,QAAQ,OAAO,yBAAyB;AAC9E,kBAAQ,oBAAoB,SAAS;AACrC,cAAI,QAAQ,mBAAmB,OAAO,OAAO,qBAAqB;AAChE,kBAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,UAC/C;AACA,gBAAM,WAAW,MAAM,mCAAmC,IAAI;AAAA,YAC5D,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,cAAc,QAAQ,WAAW;AAAA,YACjC,cAAc,SAAS,aAAa;AAAA,YACpC,mBAAmB,SAAS,aAAa;AAAA,YACzC,0BAA0B,SAAS,aAAa;AAAA,YAChD,sBAAsB,QAAQ,WAAW;AAAA,YACzC,wBAAwB,OAAO;AAAA,YAC/B,2BAA2B,OAAO;AAAA,YAClC,2BAA2B,QAAQ,OAAO;AAAA,YAC1C,yBAAyB,QAAQ,QAAQ;AAAA,YACzC,kBAAkB,SAAS;AAAA,YAC3B,SAAS,SAAS;AAAA,YAClB,aAAa,SAAS;AAAA,YACtB,aAAa,SAAS;AAAA,YACtB,YAAY,SAAS;AAAA,YACrB,WAAW,SAAS;AAAA,YACpB,iBAAiB,OAAO,gBAAgB,QAAQ,KAAK;AAAA,YACrD,aAAa,aAAa,QAAQ,WAAW,EAAE,IAAI,SAAS,WAAW;AAAA,YACvE,YAAY,SAAS;AAAA,UACvB,CAAC;AACD,iBAAO;AAAA,YACL,gBAAgB,SAAS;AAAA,YACzB,aAAa;AAAA,cACX,SAAS;AAAA,cACT,UAAU;AAAA,cACV,YAAY,SAAS;AAAA,cACrB,aAAa,SAAS;AAAA,cACtB,SAAS,SAAS;AAAA,cAClB,YAAY,SAAS;AAAA,cACrB,WAAW,SAAS;AAAA,YACtB;AAAA,UACF;AAAA,QACF;AAEA,cAAM,WAAW,CAAC;AAClB,mBAAW,SAAS,kBAAkB;AACpC,gBAAM,UAAU;AAChB,oBAAU,EAAE,UAAU,MAAM,UAAU,kBAAkB,MAAM,iBAAiB,CAAC;AAChF,gBAAM,mBAAmB,sBAAsB,IAAI,MAAM,gBAAgB;AACzE,cAAI,CAAC,iBAAkB,OAAM,IAAI,YAAY,4BAA4B,KAAK;AAC9E,gBAAM,kBAAkB;AAAA,YACtB,oBAAoB,MAAM;AAAA,YAC1B,gBAAgB,UAAU;AAAA,YAC1B,kBAAkB,iBAAiB;AAAA,YACnC,cAAc,iBAAiB;AAAA,UACjC;AACA,kBAAQ,WAAW;AACnB,cAAI,MAAM,SAAS,WAAW,QAAQ;AACpC,oBAAQ,WAAW;AACnB,qBAAS,KAAK;AAAA,cACZ,kBAAkB,MAAM;AAAA,cACxB,SAAS;AAAA,cACT,YAAY,MAAM,SAAS;AAAA,YAC7B,CAAC;AACD;AAAA,UACF;AACA,cAAI,MAAM,SAAS,WAAW,WAAY;AAC1C,cAAI;AACF,kBAAM,iBAAiB,MAAM,yCAAyC,IAAI;AAAA,cACxE,WAAW,MAAM;AAAA,cACjB,aAAa,MAAM;AAAA,cACnB,UAAU,MAAM;AAAA,cAChB,kBAAkB,MAAM;AAAA,cACxB,qBAAqB,OAAO;AAAA,YAC9B,CAAC;AACD,gBAAI,SACF,kBACC,MAAM,4BAA4B,IAAI;AAAA,cACrC,WAAW,MAAM;AAAA,cACjB,aAAa,MAAM;AAAA,cACnB,UAAU,MAAM;AAAA,cAChB,kBAAkB,MAAM;AAAA,cACxB,aAAa,iBAAiB,MAAM,QAAQ,IAAI,MAAM,gBAAgB;AAAA,cACtE;AAAA,YACF,CAAC;AACH,gBAAI,OAAO,mBAAmB,UAAU;AACtC,oBAAM,WAAW,MAAM,6BAA6B,IAAI;AAAA,gBACtD,WAAW,MAAM;AAAA,gBACjB,aAAa,MAAM;AAAA,gBACnB,UAAU,OAAO;AAAA,gBACjB,oBAAoB,OAAO;AAAA,gBAC3B,aAAa,iCAAiC,OAAO,EAAE,IAAI,UAAU,oBAAoB;AAAA,gBACzF,YAAY;AAAA,gBACZ;AAAA,cACF,CAAC;AACD,uBAAS;AAAA,gBACP,GAAG;AAAA,gBACH,gBAAgB;AAAA,gBAChB,qBAAqB,SAAS;AAAA,cAChC;AAAA,YACF;AACA,kBAAM,qBAAqB,OAAO,mBAC9B,MAAM,uDAAuD,IAAI;AAAA,cAC/D,WAAW,MAAM;AAAA,cACjB,aAAa,MAAM;AAAA,cACnB,WAAW,OAAO;AAAA,cAClB,qBAAqB,OAAO;AAAA,YAC9B,CAAC,IACD;AACJ,kBAAM,iBAAiB,oBAAoB,WAAW;AACtD,kBAAM,eAAe,kBAAkB,KAAK;AAC5C,kBAAM,2BACJ,OAAO,oBAAoB,eAAe,qBAAqB,WAC3D,mBAAmB,eAAe,mBAClC;AACN,kBAAM,uBACJ,OAAO,oBAAoB,eAAe,iBAAiB,WACvD,mBAAmB,eAAe,eAClC;AACN,kBAAM,oCAAoC;AAAA,cACxC,oBAAoB,eAAe,6BAA6B;AAAA,YAClE;AACA,kBAAM,oCAAoC;AAAA,cACxC,oBAAoB,eAAe,6BAA6B;AAAA,YAClE;AACA,kBAAM,oBAAoB,iBACtB,MAAM,gDAAgD,IAAI;AAAA,cACxD,WAAW,MAAM;AAAA,cACjB,aAAa,MAAM;AAAA,cACnB,4BAA4B,eAAe;AAAA,cAC3C,qBAAqB,OAAO;AAAA,YAC9B,CAAC,IACD;AACJ,gBACE,kBACA,eAAe,cACf,6BAA6B,MAAM,qBACnC,yBAAyB,gBACzB,eAAe,kBAAkB,iBACjC,sCAAsC,SAAS,OAAO,uBACtD,sCAAsC,OAAO,uBAC7C,mBAAmB,WAAW,eAC9B;AACA,oBAAM,iDAAiD,IAAI;AAAA,gBACzD,WAAW,MAAM;AAAA,gBACjB,aAAa,MAAM;AAAA,gBACnB,qBAAqB,OAAO;AAAA,gBAC5B,UAAU,MAAM;AAAA,gBAChB,mCAAmC,SAAS,OAAO;AAAA,gBACnD,UAAU,OAAO;AAAA,gBACjB,mCAAmC,OAAO;AAAA,gBAC1C,WAAW,eAAe;AAAA,gBAC1B,YAAY,eAAe;AAAA,gBAC3B,OAAO,MAAM;AAAA,gBACb,WAAW,MAAM;AAAA,gBACjB,eAAe,MAAM,qBAAqB,eAAe;AAAA,gBACzD,iBAAiB,MAAM;AAAA,gBACvB;AAAA,cACF,CAAC;AACD,oBAAMC,cAAa,MAAM,qBAAqB;AAAA,gBAC5C;AAAA,gBACA;AAAA,gBACA,SAAS;AAAA,gBACT,gBAAgB,oBAAoB,sBAAsB,OAAO;AAAA,gBACjE,YAAY;AAAA,cACd,CAAC;AACD,oBAAMC,aAAY,MAAM,eAAe;AAAA,gBACrC;AAAA,gBACA;AAAA,gBACA,SAAS;AAAA,gBACT,YAAAD;AAAA,cACF,CAAC;AACD,sBAAQ,aAAa;AACrB,uBAAS,KAAK;AAAA,gBACZ,kBAAkB,MAAM;AAAA,gBACxB,SAAS;AAAA,gBACT,eAAe,eAAe;AAAA,gBAC9B,kBAAkB,MAAM;AAAA,gBACxB;AAAA,gBACA,gBAAgBC,WAAU;AAAA,gBAC1B,aAAaA,WAAU;AAAA,gBACvB,mBAAmBD,YAAW;AAAA,cAChC,CAAC;AACD;AAAA,YACF;AACA,oBAAQ,QAAQ;AAChB,kBAAM,UAAU;AAChB,kBAAM,QAAQ,MAAM,OAAO,aAAa,OAAO,OAAO,OAAO,YAAY;AACzE,kBAAM,gBAAgBE,YAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AACrE,kBAAM,iBAAiBA,YAAW,QAAQ,EACvC;AAAA,cACC,KAAK,UAAU;AAAA,gBACb,kBAAkB,MAAM;AAAA,gBACxB,kBAAkB,MAAM;AAAA,gBACxB;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA,2BAA2B,SAAS,OAAO;AAAA,gBAC3C,2BAA2B,OAAO;AAAA,cACpC,CAAC;AAAA,YACH,EACC,OAAO,KAAK;AACf,gBACE,gBAAgB,kBAAkB,iBAClC,eAAe,cACf,eAAe,QACf;AACA,oBAAMC,WAAU,MAAM,+BAA+B,IAAI;AAAA,gBACvD,WAAW,MAAM;AAAA,gBACjB,aAAa,MAAM;AAAA,gBACnB,UAAU,OAAO;AAAA,gBACjB,mCAAmC,SAAS,OAAO;AAAA,gBACnD,mCAAmC,OAAO;AAAA,gBAC1C,2BAA2B,OAAO;AAAA,gBAClC,mBAAmB,MAAM,qBAAqB;AAAA,gBAC9C;AAAA,gBACA,cAAc,GAAG,MAAM,gBAAgB,IAAI,cAAc;AAAA,gBACzD,cAAc;AAAA,gBACd,gBAAgB;AAAA,kBACd,OAAO,MAAM;AAAA,kBACb,UAAU,MAAM;AAAA,kBAChB,SAAS,MAAM;AAAA,kBACf,kBAAkB,MAAM;AAAA,kBACxB;AAAA,kBACA,gBAAgB;AAAA,kBAChB,2BAA2B,SAAS,OAAO;AAAA,kBAC3C,2BAA2B,OAAO;AAAA,gBACpC;AAAA,gBACA,iBAAiB,MAAM;AAAA,gBACvB,iBAAiB,MAAM;AAAA,gBACvB,cAAc,IAAI;AAAA,gBAClB;AAAA,gBACA,YAAY,eAAe;AAAA,gBAC3B,QAAQ,eAAe;AAAA,gBACvB,kBAAkB,EAAE,WAAW,MAAM,UAAU;AAAA,gBAC/C,6BAA6B;AAAA,kBAC3B,OAAO,MAAM;AAAA,kBACb,WAAW,MAAM;AAAA,kBACjB,eAAe,MAAM,qBAAqB;AAAA,kBAC1C,iBAAiB,MAAM;AAAA,gBACzB;AAAA,gBACA;AAAA,gBACA,aAAa,wBAAwB,OAAO,EAAE,IAAI,cAAc;AAAA,gBAChE,YAAY;AAAA,gBACZ;AAAA,cACF,CAAC;AACD,oBAAM,iDAAiD,IAAI;AAAA,gBACzD,WAAW,MAAM;AAAA,gBACjB,aAAa,MAAM;AAAA,gBACnB,qBAAqB,OAAO;AAAA,gBAC5B,UAAU,MAAM;AAAA,gBAChB,mCAAmC,SAAS,OAAO;AAAA,gBACnD,UAAU,OAAO;AAAA,gBACjB,mCAAmC,OAAO;AAAA,gBAC1C,WAAWA,SAAQ;AAAA,gBACnB,YAAY,eAAe;AAAA,gBAC3B,OAAO,MAAM;AAAA,gBACb,WAAW,MAAM;AAAA,gBACjB,eAAe,MAAM,qBAAqB;AAAA,gBAC1C,iBAAiB,MAAM;AAAA,gBACvB;AAAA,cACF,CAAC;AACD,oBAAMH,cAAa,MAAM,qBAAqB;AAAA,gBAC5C;AAAA,gBACA;AAAA,gBACA,SAAAG;AAAA,gBACA,gBAAgB,oBAAoB,sBAAsB,OAAO;AAAA,cACnE,CAAC;AACD,oBAAMF,aAAY,MAAM,eAAe,EAAE,OAAO,QAAQ,SAAAE,UAAS,YAAAH,YAAW,CAAC;AAC7E,sBAAQ,aAAa;AACrB,sBAAQ,WAAW;AACnB,kBAAIC,WAAU,mBAAmB,UAAW,SAAQ,cAAc;AAClE,uBAAS,KAAK;AAAA,gBACZ,kBAAkB,MAAM;AAAA,gBACxB,SAAS;AAAA,gBACT;AAAA,gBACA,WAAW,MAAM;AAAA,gBACjB,kBAAkB,MAAM;AAAA,gBACxB;AAAA,gBACA,gBAAgBA,WAAU;AAAA,gBAC1B,aAAaA,WAAU;AAAA,gBACvB,mBAAmBD,YAAW;AAAA,cAChC,CAAC;AACD;AAAA,YACF;AACA,kBAAM,SAAS;AAAA,cACb,kBAAkB,MAAM,SAAS,IAAI,MAAM,WAAW,IAAI,aAAa;AAAA,YACzE;AACA,kBAAM,YAAY,cAAc,MAAM,WAAW,oBAAoB,aAAa;AAClF,kBAAM,cAAc,UAAU;AAAA,cAC5B,KAAK;AAAA,cACL,aAAa,MAAM,SAAS;AAAA,cAC5B,MAAM;AAAA,cACN,QAAQ;AAAA,YACV,CAAC;AACD,kBAAM,OAAO,MAAM,8BAA8B,IAAI;AAAA,cACnD,WAAW,MAAM;AAAA,cACjB,aAAa,MAAM;AAAA,cACnB;AAAA,cACA,UAAU,MAAM,SAAS;AAAA,cACzB,cAAc,aAAa,MAAM,SAAS,QAAQ;AAAA,cAClD,aAAa,MAAM,SAAS;AAAA,cAC5B,WAAW,MAAM;AAAA,cACjB,QAAQ;AAAA,cACR,QAAQ,cAAc;AAAA,cACtB;AAAA,YACF,CAAC;AACD,kBAAM,WAAW,MAAM,kBAAkB,IAAI;AAAA,cAC3C,WAAW,MAAM;AAAA,cACjB,aAAa,MAAM;AAAA,cACnB,QAAQ,KAAK;AAAA,cACb,QAAQ,KAAK;AAAA,cACb,OAAO,MAAM;AAAA,cACb,YAAY;AAAA,cACZ,WAAW,MAAM;AAAA,cACjB,kBAAkB,MAAM;AAAA,cACxB,aAAa,MAAM;AAAA,cACnB,iBAAiB,MAAM,eAAe;AAAA,cACtC,iBAAiB,MAAM,gBAAgB;AAAA,cACvC,eAAe,MAAM,qBAAqB;AAAA,cAC1C,yBAAyB;AAAA,gBACvB,4BAA4B,OAAO,EAAE,IAAI,cAAc;AAAA,cACzD;AAAA,cACA,eAAe,OAAO,YAAY;AAAA,cAClC,WAAW,OAAO;AAAA,cAClB,qBAAqB,OAAO;AAAA,cAC5B,8BAA8B,OAAO,YAAY,SAAS;AAAA,cAC1D,aAAa;AAAA,cACb,gBAAgB;AAAA,cAChB,QAAQ,EAAE,iBAAiB,OAAO,oBAAoB;AAAA,YACxD,CAAC;AACD,kBAAM,UAAU,MAAM,+BAA+B,IAAI;AAAA,cACvD,WAAW,MAAM;AAAA,cACjB,aAAa,MAAM;AAAA,cACnB,UAAU,OAAO;AAAA,cACjB,mCAAmC,SAAS,OAAO;AAAA,cACnD,mCAAmC,OAAO;AAAA,cAC1C,2BAA2B,OAAO;AAAA,cAClC,mBAAmB,MAAM,qBAAqB;AAAA,cAC9C;AAAA,cACA,cAAc,GAAG,MAAM,gBAAgB,IAAI,cAAc;AAAA,cACzD,cAAc;AAAA,cACd,gBAAgB;AAAA,gBACd,OAAO,MAAM;AAAA,gBACb,UAAU,MAAM;AAAA,gBAChB,SAAS,MAAM;AAAA,gBACf,kBAAkB,MAAM;AAAA,gBACxB;AAAA,gBACA,gBAAgB;AAAA,gBAChB,2BAA2B,SAAS,OAAO;AAAA,gBAC3C,2BAA2B,OAAO;AAAA,cACpC;AAAA,cACA,iBAAiB,MAAM;AAAA,cACvB,iBAAiB,MAAM;AAAA,cACvB,cAAc,IAAI;AAAA,cAClB;AAAA,cACA,YAAY,SAAS;AAAA,cACrB,QAAQ,KAAK;AAAA,cACb,kBAAkB,EAAE,WAAW,MAAM,UAAU;AAAA,cAC/C;AAAA,cACA,aAAa,oBAAoB,OAAO,EAAE,IAAI,cAAc;AAAA,cAC5D,YAAY;AAAA,cACZ;AAAA,YACF,CAAC;AACD,kBAAM,aAAa,MAAM,qBAAqB;AAAA,cAC5C;AAAA,cACA;AAAA,cACA;AAAA,cACA,eAAe;AAAA,YACjB,CAAC;AACD,kBAAM,YAAY,MAAM,eAAe,EAAE,OAAO,QAAQ,SAAS,WAAW,CAAC;AAC7E,oBAAQ,WAAW;AACnB,oBAAQ,YAAY;AACpB,gBAAI,UAAU,mBAAmB,UAAW,SAAQ,cAAc;AAClE,oBAAQ,SAAS,MAAM;AACvB,qBAAS,KAAK;AAAA,cACZ,kBAAkB,MAAM;AAAA,cACxB,SAAS;AAAA,cACT;AAAA,cACA,WAAW,MAAM;AAAA,cACjB,kBAAkB,MAAM;AAAA,cACxB;AAAA,cACA,gBAAgB,UAAU;AAAA,cAC1B,aAAa,UAAU;AAAA,cACvB,mBAAmB,WAAW;AAAA,YAChC,CAAC;AAAA,UACH,SAAS,OAAO;AACd,gBAAI,iBAAiB,0CAA0C;AAC7D,oBAAM,IAAI,YAAY,4BAA4B,KAAK;AAAA,YACzD;AACA,kBAAM,UAAU,aAAa,KAAK;AAClC,kBAAM,cACJ,iBAAiB,cACb,QACA,IAAI,YAAY,0BAA0B,KAAK;AACrD,oBAAQ,UAAU;AAClB,oBAAQ,cAAc,YAAY;AAClC,gBAAI,QAAQ,SAAS,SAAS,OAAO,OAAO,mBAAmB;AAC7D,sBAAQ,SAAS,KAAK;AAAA,gBACpB,kBAAkB,MAAM;AAAA,gBACxB,MAAM,YAAY;AAAA,gBAClB,WAAW,YAAY;AAAA,gBACvB;AAAA,cACF,CAAC;AAAA,YACH;AACA,qBAAS,KAAK;AAAA,cACZ,kBAAkB,MAAM;AAAA,cACxB,SAAS;AAAA,cACT,YAAY,YAAY;AAAA,cACxB,QAAQ;AAAA,cACR,kBAAkB,MAAM;AAAA,cACxB,cAAc,kBAAkB,KAAK;AAAA,cACrC,gBAAgB;AAAA,YAClB,CAAC;AAAA,UACH;AAAA,QACF;AACA,cAAM,sCAAsC,IAAI;AAAA,UAC9C,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,oBAAoB,MAAM;AAAA,UAC1B,oBAAoB,aAAa;AAAA,UACjC,UAAU,MAAM;AAAA,UAChB,wBAAwB,OAAO;AAAA,UAC/B,2BAA2B,OAAO;AAAA,UAClC;AAAA,QACF,CAAC;AAED,YAAI,UAAU,WAAW,YAAY,UAAU,YAAY;AACzD,cACE,UAAU,eAAe,oBACzB,UAAU,eAAe,qBACzB;AACA,kBAAM,IAAI;AAAA,cACR,UAAU,eAAe,mBACrB,yBACA;AAAA,cACJ,UAAU,eAAe;AAAA,YAC3B;AAAA,UACF;AACA,cAAI,UAAU,kBAAkB;AAC9B,oBAAQ,eAAe,eAAe,UAAU,UAAU;AAC1D,kBAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,UAC/C;AACA,cAAI,UAAU,eAAe,sBAAsB;AACjD,oBAAQ,eAAe,eAAe,UAAU,UAAU;AAC1D,kBAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,UAC/C;AACA,kBAAQ,eAAe;AACvB,kBAAQ,QAAQ;AAChB,gBAAM,8BAA8B,IAAI;AAAA,YACtC,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,UAAU,MAAM;AAAA,YAChB,oBAAoB,MAAM;AAAA,YAC1B,wBAAwB,OAAO;AAAA,YAC/B,2BAA2B,OAAO;AAAA,YAClC;AAAA,YACA,kBAAkB;AAAA,cAChB,qBAAqB,OAAO;AAAA,cAC5B,gBAAgB,UAAU;AAAA,cAC1B,+BAA+B,MAAM,MAAM;AAAA,cAC3C,cAAc;AAAA,YAChB;AAAA,UACF,CAAC;AACD,iBAAO,EAAE,QAAQ,YAAY,QAAQ;AAAA,QACvC;AAEA,cAAM,8BAA8B,UAAU,wBAC1C,MAAM,yCAAyC,IAAI;AAAA,UACjD,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,oBAAoB,MAAM;AAAA,UAC1B,qBAAqB,OAAO;AAAA,UAC5B,sBAAsB,aAAa;AAAA,UACnC,wBAAwB,OAAO;AAAA,UAC/B,2BAA2B,OAAO;AAAA,UAClC,gBAAgB,UAAU;AAAA,QAC5B,CAAC,IACD,CAAC;AACL,YAAI,4BAA4B,SAAS,GAAG;AAC1C,kBAAQ,WAAW,4BAA4B;AAC/C,gBAAM,sCAAsC,IAAI;AAAA,YAC9C,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,oBAAoB,MAAM;AAAA,YAC1B,oBAAoB,aAAa;AAAA,YACjC,UAAU,MAAM;AAAA,YAChB,wBAAwB,OAAO;AAAA,YAC/B,2BAA2B,OAAO;AAAA,YAClC,UAAU,4BAA4B,IAAI,CAAC,sBAAsB;AAAA,cAC/D;AAAA,cACA,SAAS;AAAA,cACT,YAAY;AAAA,cACZ,gBAAgB;AAAA,YAClB,EAAE;AAAA,UACJ,CAAC;AAAA,QACH;AAEA,cAAM,yBAAyB,IAAI;AAAA,UACjC,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,qBAAqB,OAAO;AAAA,UAC5B,OAAO,aAAa;AAAA,UACpB,OAAO;AAAA,UACP,cAAc;AAAA,UACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UAClC,UAAU,EAAE,GAAG,SAAS,gBAAgB,UAAU,eAAe;AAAA,UACjE,YAAY;AAAA,QACd,CAAC;AACD,gBAAQ,QAAQ;AAChB,gBAAQ,YAAY,KAAK,IAAI,IAAI;AACjC,cAAM,UAAU,MAAM,+BAA+B,IAAI;AAAA,UACvD,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,oBAAoB,MAAM;AAAA,UAC1B,oBAAoB,aAAa;AAAA,UACjC,QAAQ;AAAA,UACR;AAAA,UACA,wBAAwB,OAAO;AAAA,UAC/B,2BAA2B,OAAO;AAAA,UAClC,sBAAsB,aAAa;AAAA,UACnC,+BAA+B,aAAa,sBAAsB;AAAA,UAClE,gBAAgB,UAAU;AAAA,UAC1B,kBAAkB;AAAA,YAChB,qBAAqB,OAAO;AAAA,YAC5B,gBAAgB,UAAU;AAAA,YAC1B,+BAA+B,MAAM,MAAM;AAAA,YAC3C,cAAc;AAAA,UAChB;AAAA,QACF,CAAC;AACD,cAAM,qBAAqB,aAAa,QAAQ,SAAS,MAAM;AAC/D,cAAM,qBAAqB,SAAS,QAAQ,UAAU,MAAM;AAC5D,cAAM,qBAAqB,SAAS,QAAQ,OAAO,MAAM;AACzD,sBAAc,iBAAiB;AAAA,UAC7B,MAAM;AAAA,UACN,QAAQ,EAAE,UAAU,eAAe,SAAS,YAAY;AAAA,QAC1D,CAAC;AACD,sBAAc,iBAAiB;AAAA,UAC7B,MAAM;AAAA,UACN,QAAQ,EAAE,UAAU,eAAe,SAAS,WAAW;AAAA,UACvD,QAAQ,QAAQ;AAAA,QAClB,CAAC;AACD,mBAAW,WAAW,CAAC,aAAa,WAAW,QAAQ,GAAY;AACjE,wBAAc,iBAAiB;AAAA,YAC7B,MAAM;AAAA,YACN,QAAQ,EAAE,UAAU,eAAe,QAAQ;AAAA,YAC3C,QAAQ,QAAQ,OAAO;AAAA,UACzB,CAAC;AAAA,QACH;AACA,sBAAc,iBAAiB;AAAA,UAC7B,MAAM;AAAA,UACN,QAAQ,EAAE,UAAU,cAAc;AAAA,UAClC,QAAQ,QAAQ;AAAA,QAClB,CAAC;AACD,kCAA0B,eAAe,eAAe,SAAS,WAAW;AAC5E,eAAO;AAAA,UACL,QAAQ;AAAA,UACR;AAAA,UACA,cAAc,QAAQ;AAAA,UACtB,4BAA4B,QAAQ;AAAA,QACtC;AAAA,MACF,SAAS,OAAO;AACd,cAAM,UACJ,iBAAiB,cAAc,QAAQ,IAAI,YAAY,oBAAoB,KAAK;AAClF,gBAAQ,QAAQ;AAChB,gBAAQ,cAAc,QAAQ;AAC9B,gBAAQ,YAAY,KAAK,IAAI,IAAI;AACjC,gBAAQ,oBAAoB,QAAQ;AACpC,gBAAQ,SAAS,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC3C,YAAI,QAAQ,SAAS,WAAW,GAAG;AACjC,kBAAQ,SAAS,KAAK;AAAA,YACpB,kBAAkB,MAAM;AAAA,YACxB,MAAM,QAAQ;AAAA,YACd,WAAW,QAAQ;AAAA,YACnB,SAAS,aAAa,KAAK;AAAA,UAC7B,CAAC;AAAA,QACH;AACA,YAAI,gBAAgB;AAClB,gBAAM,yBAAyB,IAAI;AAAA,YACjC,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,qBAAqB,OAAO;AAAA,YAC5B,OAAO;AAAA,YACP,OAAO;AAAA,YACP,UAAU;AAAA,YACV,WAAW,QAAQ;AAAA,YACnB,YAAY;AAAA,UACd,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,QAC1B;AACA,cAAM,kBAAwE;AAAA,UAC5E,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,oBAAoB,MAAM;AAAA,UAC1B,oBAAoB;AAAA,UACpB,QAAQ;AAAA,UACR;AAAA,UACA,OAAO,QAAQ;AAAA,UACf,wBAAwB,OAAO;AAAA,UAC/B,2BAA2B,OAAO;AAAA,UAClC,sBAAsB,8BAA8B,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA,UAIhE,qBAAqB;AAAA,QACvB;AACA,cAAM,UAAU,QAAQ,oBACpB,MAAM,+CAA+C,IAAI;AAAA,UACvD,iBAAiB;AAAA,YACf,WAAW,MAAM;AAAA,YACjB,aAAa,MAAM;AAAA,YACnB,UAAU,MAAM;AAAA,YAChB,UAAU,OAAO;AAAA,YACjB,aAAa,8BAA8B,MAAM,QAAQ,IAAI,OAAO,WAAW,iBAAiB,IAAI,QAAQ,IAAI;AAAA,YAChH,YAAY;AAAA,YACZ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,WAAW;AAAA,cACX,0BAA0B,OAAO;AAAA,YACnC;AAAA,UACF;AAAA,UACA,YAAY;AAAA,QACd,CAAC,IACD,MAAM,+BAA+B,IAAI,eAAe;AAC5D,cAAM,qBAAqB,aAAa,QAAQ,SAAS,MAAM;AAC/D,cAAM,qBAAqB,SAAS,QAAQ,UAAU,MAAM;AAC5D,cAAM,qBAAqB,SAAS,QAAQ,OAAO,MAAM;AACzD,sBAAc,iBAAiB;AAAA,UAC7B,MAAM;AAAA,UACN,QAAQ,EAAE,UAAU,eAAe,SAAS,SAAS;AAAA,QACvD,CAAC;AACD,mBAAW,WAAW,CAAC,YAAY,aAAa,WAAW,QAAQ,GAAY;AAC7E,wBAAc,iBAAiB;AAAA,YAC7B,MAAM;AAAA,YACN,QAAQ,EAAE,UAAU,eAAe,QAAQ;AAAA,YAC3C,QAAQ,QAAQ,OAAO;AAAA,UACzB,CAAC;AAAA,QACH;AACA,sBAAc,iBAAiB;AAAA,UAC7B,MAAM;AAAA,UACN,QAAQ,EAAE,UAAU,cAAc;AAAA,UAClC,QAAQ,QAAQ;AAAA,QAClB,CAAC;AACD,kCAA0B,eAAe,eAAe,SAAS,UAAU,OAAO;AAClF,eAAO;AAAA,UACL,QAAQ;AAAA,UACR;AAAA,UACA,WAAW,QAAQ;AAAA,UACnB,cAAc,QAAQ;AAAA,UACtB,4BAA4B,QAAQ;AAAA,QACtC;AAAA,MACF;AAEA,qBAAe,oBAAoB,MAA0D;AAC3F,cAAM,kBAAkB;AAAA,UACtB,OAAO;AAAA,UACP,SAAS;AAAA,UACT,UAAU;AAAA,UACV,WAAW;AAAA,UACX,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,OAAO;AAAA,UACP,kBAAkB;AAAA,UAClB,WAAW;AAAA,UACX,SAAS;AAAA,UACT,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,cAAc;AAAA,UACd,cAAc;AAAA,UACd,mBAAmB;AAAA,UACnB,UAAU;AAAA,YACR;AAAA,cACE,kBAAkB,MAAM;AAAA,cACxB,MAAM;AAAA,cACN,WAAW;AAAA,cACX,SAAS;AAAA,YACX;AAAA,UACF;AAAA,QACF;AACA,cAAM,uBAAuB,IAAI,MAAM,aAAa,MAAM,oBAAoB;AAAA,UAC5E,kBAAkB;AAAA,QACpB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,cAAM,4CAA4C,IAAI;AAAA,UACpD,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB,oBAAoB,MAAM;AAAA,QAC5B,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,cAAM,qBAAqB,aAAa,GAAG,MAAM,EAAE,MAAM,MAAM,MAAS;AACxE,sBAAc,iBAAiB;AAAA,UAC7B,MAAM;AAAA,UACN,QAAQ,EAAE,UAAU,WAAW,SAAS,mBAAmB;AAAA,QAC7D,CAAC;AACD,eAAO,EAAE,QAAQ,UAAU,cAAc,OAAO,SAAS,iBAAiB,WAAW,KAAK;AAAA,MAC5F;AAEA,qBAAe,qBACb,MACA,UACA,MACA;AACA,YAAI,aAAa,KAAK,SAAS,YAAa;AAC5C,cAAM,iBAAiB,IAAI;AAAA,UACzB,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,WAAW,yBAAyB,IAAI;AAAA,UACxC,UAAU,SAAS,cAAc,IAAI;AAAA,UACrC;AAAA,UACA,oBAAoB;AAAA,UACpB,kBAAkB,MAAM;AAAA,UACxB,WAAW,EAAE,MAAM,WAAW,WAAW,wBAAwB;AAAA,UACjE,kBAAkB;AAAA,YAChB,iBAAiB,MAAM;AAAA,YACvB,oBAAoB,MAAM;AAAA,UAC5B;AAAA,UACA,QAAQ;AAAA,UACR,gBAAgB,+BAA+B,IAAI,IAAI,MAAM,kBAAkB;AAAA,QACjF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;AASA,eAAsB,+CACpB,IACA,OAIqE;AACrE,MAAI;AACF,UAAM,oCAAoC,IAAI,MAAM,eAAe;AAAA,EACrE,SAAS,OAAO;AACd,UAAM,wCAAwC,IAAI;AAAA,MAChD,WAAW,MAAM,WAAW;AAAA,MAC5B,aAAa,MAAM,WAAW;AAAA,MAC9B,UAAU,MAAM,WAAW;AAAA,MAC3B,oBAAoB,MAAM,WAAW;AAAA,IACvC,CAAC;AACD,UAAM;AAAA,EACR;AACA,SAAO,MAAM,+BAA+B,IAAI,MAAM,UAAU;AAClE;AAwBA,eAAe,6BAA6B,OAoBzC;AACD,QAAM,EAAE,OAAO,IAAI;AACnB,QAAM,aAAa,MAAMH;AAAA,IACvB,MAAM;AAAA,IACN,MAAM;AAAA,IACN,OAAO,WAAW;AAAA,IAClB,OAAO;AAAA,EACT;AACA,MACE,CAAC,cACD,WAAW,cAAc,MAAM,aAC/B,WAAW,cAAc,OAAO,WAAW,kBAC3C,WAAW,eAAe,YAAY,MAAM,OAAO,WAAW,eAAe,YAAY,KACzF,WAAW,SAAS,OAAO,WAAW,QACtC,WAAW,UAAU,OAAO,WAAW,qBACvC,WAAW,WAAW,UACtB;AACA,UAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,EACnE;AAEA,QAAM,gBACJ,WAAW,mBAAmB,+BAC1B,8BAA8B,UAAU,WAAW,QAAQ,IAC3D;AACN,QAAM,mBACJ,WAAW,mBAAmB,4BAC1B,4BAA4B,UAAU,WAAW,QAAQ,IACzD;AACN,QAAM,2BAA2B,kBAAkB,UAAU,iBAAiB,OAAO;AACrF,MAAI,CAAC,eAAe,WAAW,CAAC,0BAA0B;AACxD,UAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,EAClD;AACA,MACE,eAAe,WACf,CAAC,iCAAiC,WAAW,eAAe,uBAAuB,GACnF;AACA,UAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,EACnE;AACA,MAAI,kBAAkB,WAAW,CAAC,yBAAyB,WAAW,aAAa,GAAG;AACpF,UAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,EACnE;AACA,QAAM,mBAAmB,eAAe,UACpC,cAAc,KAAK,YACnB,yBAA0B;AAC9B,MAAI,kBAAkB,SAAS,iBAAiB,UAAU,UAAU;AAClE,UAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,EACnE;AACA,QAAM,gBAAgB,eAAe,UACjC,oBAAoB,cAAc,MAAM,MAAM,gBAAgB,IAC9D,wBAAwB,0BAA2B,MAAM,gBAAgB;AAC7E,MACE,CAAC,iBACD,CAAC,cAAc,eACf,cAAc,qBAAqB,OAAO,0BAC1C,CAAC,cAAc,eACf;AAAA,IACE,eAAe,UACX,0BAA0B,cAAc,WAAW,IACnD,wBAAwB,cAAc,WAAW;AAAA,EACvD,MAAM,wBAAwB,OAAO,WAAW,GAChD;AACA,UAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,EAClD;AAEA,QAAM,QAAQ,MAAM;AAAA,IAClB,MAAM;AAAA,IACN,MAAM;AAAA,EACR,EAAE;AAAA,IACA,aAAa,MAAM;AAAA,IACnB,WAAW,OAAO;AAAA,IAClB,UAAU;AAAA,IACV,eAAe;AAAA,MACb,cAAc,WAAW;AAAA,MACzB,gBAAgB,WAAW;AAAA,MAC3B,MAAM,WAAW;AAAA,MACjB,cAAc;AAAA,IAChB;AAAA,IACA,gBACE,WAAW,mBAAmB,4BAC1B,qBACA;AAAA,EACR,CAAC;AACD,MAAI,MAAM,WAAW,MAAM;AACzB,UAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,EACnE;AACA,QAAM,qBAAqB,MAAMA;AAAA,IAC/B,MAAM;AAAA,IACN,MAAM;AAAA,IACN,OAAO,WAAW;AAAA,IAClB,OAAO;AAAA,EACT;AACA,MACE,CAAC,sBACD,mBAAmB,cAAc,MAAM,aACvC,mBAAmB,cAAc,OAAO,WAAW,kBACnD,mBAAmB,eAAe,YAAY,MAC5C,OAAO,WAAW,eAAe,YAAY,KAC/C,mBAAmB,SAAS,OAAO,WAAW,QAC9C,mBAAmB,YAAY,MAAM,qBACrC,mBAAmB,WAAW,UAC9B;AACA,UAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,EACnE;AACA,QAAM,gBAAgB,MAAM,QAAQ,iBAAiB,MAAM,QAAQ;AACnE,MAAI,mBAAmB,mBAAmB,8BAA8B;AACtE,UAAM,WAAW,8BAA8B,MAAM,mBAAmB,QAAQ;AAChF,QACE,CAAC,qCAAqC;AAAA,MACpC,mBAAmB,mBAAmB;AAAA,MACtC,2BAA2B,MAAM;AAAA,MACjC,kBAAkB,mBAAmB;AAAA,MACrC,gBAAgB,SAAS,WAAW;AAAA,MACpC,eAAe,mBAAmB;AAAA,IACpC,CAAC,GACD;AACA,YAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,IACnE;AACA,UAAM,SAAS,oBAAoB,UAAU,MAAM,gBAAgB;AACnE,QAAI,CAAC,oBAAoB,QAAQ,QAAQ,yBAAyB,GAAG;AACnE,YAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,IAClD;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,qBAAqB,OAAO;AAAA,MAC5B,cAAc;AAAA,QACZ,cAAc,mBAAmB;AAAA,QACjC,mBAAmB,mBAAmB;AAAA,QACtC,0BAA0B,SAAS;AAAA,MACrC;AAAA,MACA,QAAQ,sBAAsB;AAAA,QAC5B,+BAA+B,OAAO;AAAA,QACtC;AAAA,QACA,gBAAgB;AAAA,QAChB,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,qBAAqB,OAAO;AAAA,QAC5B;AAAA,QACA,OAAO,gCAAgC,MAAM,QAAQ;AAAA,QACrD,eAAe,MAAM;AAAA,QACrB,QAAQ,OAAO;AAAA,QACf,cAAc,mBAAmB;AAAA,QACjC,8BAA8B;AAAA,QAC9B,2BAA2B,OAAO,sBAChC,MAAM,iDAAiD,MAAM,IAAI;AAAA,UAC/D,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,UAAU,MAAM;AAAA,UAChB;AAAA,QACF,CAAC;AAAA,MACL,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,mBAAmB,mBAAmB,2BAA2B;AACnE,UAAM,WAAW,4BAA4B,MAAM,mBAAmB,QAAQ;AAC9E,QACE,SAAS,WAAW,UAAU,YAC9B,CAAC,yBAAyB,mBAAmB,aAAa,GAC1D;AACA,YAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,IACnE;AACA,UAAM,SAAS,wBAAwB,UAAU,MAAM,gBAAgB;AACvE,QAAI,CAAC,oBAAoB,QAAQ,QAAQ,uBAAuB,GAAG;AACjE,YAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,IAClD;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,qBAAqB,OAAO;AAAA,MAC5B,cAAc;AAAA,MACd,QAAQ,oBAAoB;AAAA,QAC1B,+BAA+B,OAAO;AAAA,QACtC;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA,QACA,QAAQ,OAAO;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,IAAI,YAAY,qBAAqB,KAAK;AAClD;AAEA,SAAS,oBACP,QACA,QACA,OACwE;AACxE,SAAO;AAAA,IACL,UACA,OAAO,eACP,OAAO,qBAAqB,OAAO,0BACnC,OAAO,eACP,wBAAwB,MAAM,OAAO,WAAW,CAAC,MAC/C,wBAAwB,OAAO,WAAW;AAAA,EAC9C;AACF;AAEA,SAAS,wBACP,UACA,kBACgC;AAChC,SAAO,SAAS,gBAAgB,KAAK,CAAC,WAAW,OAAO,OAAO,gBAAgB,KAAK;AACtF;AAEA,SAAS,oBAAoB,OAYwD;AACnF,SAAO;AAAA,IACL,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,yBAAyB,MAAM;AAAA,IAC/B,WAAW,OAAO,eAAe;AAC/B,YAAM,YAAY,MAAM,yBAAyB;AAAA,QAC/C,SAAS,MAAM,eAAe;AAAA,QAC9B,QAAQ,MAAM;AAAA,QACd,QAAQ;AAAA,UACN,UAAU,MAAM,OAAO;AAAA,UACvB,gBAAgB,MAAM,OAAO;AAAA,UAC7B,cAAc,MAAM,OAAO,oBAAoB;AAAA,UAC/C,UAAU,KAAK,IAAI,MAAM,OAAO,UAAU,GAAG;AAAA,QAC/C;AAAA,QACA;AAAA,QACA,UAAU,OAAO,QAAQ,aACvB,MAAM,mBAAmB,MAAM,gBAAgB,QAAQ,UAAU,MAAM,aAAa;AAAA,MACxF,CAAC;AACD,aAAO;AAAA,QACL,GAAG;AAAA,QACH,gBAAgB;AAAA,QAChB,uBAAuB,UAAU,WAAW;AAAA,QAC5C,mBAAmB;AAAA,QACnB,kBACE,UAAU,WAAW,YACrB,UAAU,eAAe,wBACzB,UAAU,eAAe;AAAA,MAC7B;AAAA,IACF;AAAA,IACA,cAAc,OAAO,OAAO,aAC1B,MAAM,sBAAsB,MAAM,gBAAgB,OAAO,MAAM,eAAe,QAAQ;AAAA,IACxF,iBAAiB,CAAC,WAAW;AAAA,MAC3B,SAAS;AAAA,MACT,aAAa;AAAA,MACb,yBAAyB,MAAM;AAAA,MAC/B,SAAS,MAAM,eAAe;AAAA,MAC9B,YAAY,MAAM,eAAe;AAAA,MACjC,kBAAkB,MAAM;AAAA,MACxB,WAAW,MAAM;AAAA,IACnB;AAAA,EACF;AACF;AAEO,SAAS,sBAAsB,OAqBmD;AACvF,QAAM,eAAe,MAAM,OAAO,oBAAoB;AACtD,QAAM,WAAwC,MAAM,YAAY;AAAA,IAC9D,mBAAmB,OAAO,YACxB,MAAM,uBAAuB,SAAS,MAAM,eAAe,MAAM,OAAO,MAAM,aAAa;AAAA,IAC7F,aAAa,OAAO,WAAW,SAAS,aACtC,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAAA,IACF,SAAS,OAAO,WACd,MAAM,aAAa,QAAQ,MAAM,eAAe,MAAM,OAAO,MAAM,aAAa;AAAA,IAClF,cAAc,OAAO,YACnB,MAAM,kBAAkB,SAAS,MAAM,eAAe,MAAM,OAAO,MAAM,aAAa;AAAA,IACxF,iBAAiB,OAAO,YACtB,MAAM,qBAAqB,SAAS,MAAM,eAAe,MAAM,OAAO,MAAM,aAAa;AAAA,EAC7F;AACA,QAAM,QAAQ,SAAS,OAAO,KAAK;AACnC,QAAM,eAAe;AAAA,IACnB,UAAU,MAAM,OAAO;AAAA,IACvB,qBAAqB,MAAM,OAAO;AAAA,IAClC;AAAA,EACF;AACA,SAAO;AAAA,IACL,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,yBAAyB,MAAM;AAAA,IAC/B,WAAW,OAAO,qBAAqB,mBAAmB;AACxD,YAAM,iBAAiB;AAAA,QACrB,cAAc,MAAM;AAAA,QACpB,oBAAoB,MAAM,SAAS;AAAA,QACnC,UAAU,MAAM,eAAe;AAAA,QAC/B,SAAS,MAAM,eAAe;AAAA,MAChC;AACA,YAAM,uBAAuB;AAAA,QAC3B;AAAA,QACA;AAAA,MACF;AACA,YAAM,SAAS,8BAA8B,gBAAgB,cAAc;AAC3E,YAAM,aAAa;AAAA,QACjB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,MAAM,IAAI,KAAK,MAAM,CAAC;AAE5B,YAAM,wBAAwB,OAAO,SAQ/B;AACJ,cAAM,iBAAiB,KAAK,qBAAqB,OAAO,aAAa;AACrE,cAAM,4BAA4B,KAAK,qBAAqB,OAAO,mBAAmB;AACtF,cAAM,yBAAyB;AAAA,UAC7B,eAAe,KAAK,sBAAsB,gBAAgB;AAAA,UAC1D,kBAAkB,KAAK,sBAAsB,mBAAmB;AAAA,UAChE,WAAW,KAAK,sBAAsB,YAAY,KAAK;AAAA,QACzD;AACA,cAAM,iBAAiB,2BAA2B,wBAAwB,YAAY;AACtF,cAAM,iBAAiB,6CAA6C;AAAA,UAClE,GAAG;AAAA,UACH,GAAG;AAAA,QACL,CAAC;AACD,YAAI,gBAAgB;AAClB,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,YAAY;AAAA,YACZ,SAAS,CAAC;AAAA,YACV,YAAY;AAAA,YACZ;AAAA,YACA,uBAAuB;AAAA,YACvB,mBAAmB,KAAK;AAAA,YACxB,kBAAkB,uBAAuB;AAAA,YACzC,WAAW,uBAAuB;AAAA,YAClC,kBAAkB;AAAA,UACpB;AAAA,QACF;AAEA,cAAM,gBAAgB,MAAM,OAAO,WAAW,KAAK,sBAAsB;AACzE,cAAM,2BACJ,MAAM,OAAO,sBAAsB,KAAK,sBAAsB;AAChE,cAAM,qBAAqB,eAAe,uBAAuB;AACjE,cAAM,YAAY,MAAM,2BAA2B;AAAA,UACjD,oBAAoB,MAAM,SAAS;AAAA,UACnC,aAAa,MAAM,SAAS;AAAA,UAC5B,QAAQ,MAAM;AAAA,UACd,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,qBAAqB,MAAM;AAAA,UAC3B,QAAQ;AAAA,YACN,UAAU;AAAA,YACV,eAAe,MAAM,OAAO;AAAA,YAC5B,gBAAgB;AAAA,YAChB,cAAc,KAAK,IAAI,uCAAuC,kBAAkB;AAAA,YAChF,cAAc,MAAM,OAAO;AAAA,YAC3B,YAAY,KAAK,IAAI,gBAAgB,GAAG,GAAK;AAAA,YAC7C,UAAU,KAAK,IAAI,eAAe,GAAG;AAAA,UACvC;AAAA,UACA,YAAY,KAAK;AAAA,UACjB,cAAc,SAAS;AAAA,UACvB,KAAK;AAAA,QACP,CAAC;AACD,cAAM,qBAAqB,KAAK,qBAAqB,UAAU,IAAI;AACnE,cAAM,SAAS;AAAA,UACb,eAAe,KAAK,sBAAsB,gBAAgB,UAAU,OAAO;AAAA,UAC3E,kBACE,KAAK,sBAAsB,mBAAmB,UAAU,OAAO;AAAA,UACjE,WAAW,KAAK,sBAAsB,YAAY;AAAA,QACpD;AACA,cAAM,aAAa;AAAA,UACjB,UAAU;AAAA,UACV,KAAK;AAAA,UACL,MAAM,OAAO;AAAA,QACf;AACA,YAAI,WAAW,UAAU;AACvB,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,YAAY;AAAA,YACZ,SAAS,CAAC;AAAA,YACV,YAAY;AAAA,YACZ;AAAA,YACA,uBAAuB;AAAA,YACvB,mBAAmB,KAAK;AAAA,YACxB,kBAAkB,OAAO;AAAA,YACzB,WAAW,OAAO;AAAA,YAClB,kBAAkB;AAAA,UACpB;AAAA,QACF;AACA,cAAM,aACJ,UAAU,WAAW,aACjB,8BAA8B;AAAA,UAC5B,GAAG;AAAA,UACH,YAAY,KAAK;AAAA,UACjB,WAAW,KAAK;AAAA,UAChB,oBAAoB,QAAQ,oBAAoB;AAAA,UAChD,cAAc;AAAA,UACd,8BAA8B,MAAM;AAAA,QACtC,CAAC,IACD;AACN,eAAO;AAAA,UACL,QAAQ,UAAU;AAAA,UAClB,YAAY,UAAU;AAAA,UACtB,SAAS,WAAW;AAAA,UACpB,YACE,UAAU,WAAW,YAAY,UAAU,aACvC,6CAA6C;AAAA,YAC3C,GAAG;AAAA,YACH,YAAY,KAAK;AAAA,YACjB,gBAAgB,KAAK;AAAA,YACrB,mBAAmB,KAAK;AAAA,YACxB,uBAAuB,KAAK;AAAA,YAC5B;AAAA,YACA,qBAAqB,UAAU;AAAA,YAC/B,gBAAgB,WAAW;AAAA,UAC7B,CAAC,IACD;AAAA,UACN,gBAAgB;AAAA,UAChB,uBAAuB,UAAU,WAAW;AAAA,UAC5C,mBAAmB,KAAK;AAAA,UACxB,kBAAkB,OAAO;AAAA,UACzB,WAAW,OAAO;AAAA,UAClB,kBACE,UAAU,WAAW,YACrB,+BAA+B,UAAU,YAAY,QAAQ,YAAY;AAAA,QAC7E;AAAA,MACF;AAEA,YAAM,4BAA4B,OAAO,YAInC;AACJ,cAAM,uBAAuB,MAAM;AACnC,cAAM,mBAAmB,QAAQ,OAAO;AACxC,cAAM,SAAS,EAAE,GAAG,QAAQ,OAAO;AACnC,cAAM,iBAAiB,MAAM;AAC3B,iBAAO,YAAY,mBAAmB,KAAK,IAAI,GAAG,MAAM,IAAI,oBAAoB;AAAA,QAClF;AACA,cAAM,0BAA0B,MAAM;AACpC,yBAAe;AACf,cAAI,2BAA2B,QAAQ,YAAY,GAAG;AACpD,kBAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,UAC/C;AACA,iBAAO,oBAAoB;AAAA,QAC7B;AAEA,gCAAwB;AACxB,cAAM,iBAAiB,MAAM,SAAS,kBAAkB,MAAM,eAAe,OAAO;AACpF,uBAAe;AAEf,YAAI,aAAa,QAAQ;AACzB,YAAI,CAAC,YAAY;AACf,cAAI,MAAM,eAAe,OAAO,UAAU,MAAM,eAAe,YAAY,MAAM;AAC/E,oCAAwB;AACxB,gBAAI;AACF,2BAAa,MAAM,oCAAoC;AAAA,gBACrD,QAAQ,MAAM;AAAA,gBACd,SAAS,SAAS;AAAA,cACpB,CAAC;AAAA,YACH,SAAS,OAAO;AACd,kBAAI,iBAAiB,iCAAiC;AACpD,sBAAM,IAAI,YAAY,4BAA4B,KAAK;AAAA,cACzD;AACA,oBAAM;AAAA,YACR;AACA,2BAAe;AAAA,UACjB,OAAO;AACL,yBAAa,MAAM,eAAe;AAAA,UACpC;AAAA,QACF;AAEA,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,mBAAmB,QAAQ;AAAA,UAC3B,uBAAuB;AAAA,UACvB,oBAAoB;AAAA,UACpB,qBAAqB;AAAA,UACrB,gBAAgB,CAAC;AAAA,QACnB;AAAA,MACF;AAEA,UAAI,YAAY,SAAS,oCAAoC;AAC3D,eAAO,MAAM,sBAAsB,UAAU;AAAA,MAC/C;AACA,UAAI,CAAC,QAAQ;AACX,cAAM,SACJ,YAAY,SAAS,yBACjB,WAAW,kBAAkB,SAC7B,2BAA2B;AACjC,eAAO,MAAM;AAAA,UACX,MAAM,0BAA0B;AAAA,YAC9B;AAAA,YACA,YAAY;AAAA,YACZ,mBAAmB,mBAAmB;AAAA,UACxC,CAAC;AAAA,QACH;AAAA,MACF;AACA,UAAI,CAAC,cAAc,CAAC,wBAAwB,iCAAiC,QAAQ,GAAG,GAAG;AACzF,eAAO,MAAM;AAAA,UACX,MAAM,0BAA0B;AAAA,YAC9B,QAAQ,2BAA2B;AAAA,YACnC,YAAY,OAAO;AAAA,YACnB,mBAAmB;AAAA,UACrB,CAAC;AAAA,QACH;AAAA,MACF;AAEA,UAAI;AACF,cAAM,0BACJ,wBAAwB,iCAAiC,QAAQ,GAAG;AACtE,cAAM,oBACJ,YAAY,SAAS,yBACjB;AAAA,UACE,GAAG,WAAW;AAAA,UACd,4BACE,WAAW,kBAAkB,8BAC7B;AAAA,QACJ,IACA;AACN,cAAM,UAAU,MAAM,wBAAwB;AAAA,UAC5C,QAAQ,MAAM;AAAA,UACd;AAAA,UACA,YAAY;AAAA,UACZ,UAAU,MAAM,OAAO;AAAA,UACvB,qBAAqB,MAAM,OAAO;AAAA,UAClC;AAAA,UACA,wBAAwB,KAAK,IAAI,uCAAuC,YAAY;AAAA,UACpF,cAAc,MAAM,OAAO;AAAA,UAC3B,aAAa,OAAO,WAAW,aAC7B,MAAM,SAAS,YAAY,WAAW,MAAM,eAAe,SAAS,QAAQ;AAAA,UAC9E,SAAS,SAAS;AAAA,UAClB,2BAA2B,MAAM;AAAA,UACjC,KAAK;AAAA,QACP,CAAC;AACD,YAAI,QAAQ,WAAW,YAAY,QAAQ,YAAY;AACrD,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,YAAY,QAAQ;AAAA,YACpB,SAAS,QAAQ;AAAA,YACjB,YAAY;AAAA,cACV,SAAS;AAAA,cACT,MAAM;AAAA,cACN,GAAG;AAAA,cACH,mBAAmB;AAAA,gBACjB,GAAG,QAAQ;AAAA,gBACX,4BACE,QAAQ,WAAW,8BAA8B;AAAA,cACrD;AAAA,YACF;AAAA,YACA;AAAA,YACA,uBAAuB;AAAA,YACvB,mBAAmB;AAAA,YACnB,kBAAkB,QAAQ;AAAA,YAC1B,WAAW,QAAQ;AAAA,YACnB,kBAAkB,QAAQ;AAAA,UAC5B;AAAA,QACF;AACA,YAAI,CAAC,QAAQ,kBAAmB,OAAM,IAAI,MAAM,qCAAqC;AACrF,YAAI,QAAQ,8BAA8B,yBAAyB;AACjE,gBAAM,iBAAiB,2BAA2B,QAAQ,QAAQ,YAAY;AAC9E,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,YAAY,kBAAmB;AAAA,YAC/B,SAAS,QAAQ;AAAA,YACjB,YAAY,6CAA6C;AAAA,cACvD,GAAG;AAAA,cACH,YAAY,OAAO;AAAA,cACnB,gBAAgB,QAAQ;AAAA,cACxB,mBAAmB;AAAA,cACnB,uBAAuB,QAAQ;AAAA,cAC/B,oBAAoB;AAAA,cACpB,qBAAqB;AAAA,cACrB,gBAAgB,yBAAyB,QAAQ,SAAS,MAAM,OAAO,QAAQ;AAAA,YACjF,CAAC;AAAA,YACD;AAAA,YACA,uBAAuB;AAAA,YACvB,mBAAmB;AAAA,YACnB,kBAAkB,QAAQ;AAAA,YAC1B,WAAW,QAAQ;AAAA,YACnB,kBAAkB,mBAAmB;AAAA,UACvC;AAAA,QACF;AACA,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS,QAAQ;AAAA,UACjB,YAAY;AAAA,UACZ,gBAAgB,gCAAgC,QAAQ,QAAQ,iBAAiB;AAAA,UACjF,uBAAuB;AAAA,UACvB,mBAAmB;AAAA,UACnB,kBAAkB,QAAQ;AAAA,UAC1B,WAAW,QAAQ;AAAA,UACnB,kBAAkB;AAAA,QACpB;AAAA,MACF,SAAS,OAAO;AACd,YAAI,iBAAiB,iCAAiC;AACpD,gBAAM,IAAI,YAAY,4BAA4B,KAAK;AAAA,QACzD;AACA,YAAI,EAAE,iBAAiB,+BAAgC,OAAM;AAC7D,cAAM,OAAO,MAAM,0BAA0B;AAAA,UAC3C,QAAQ,MAAM,UAAU,2BAA2B;AAAA,UACnD,YAAY,OAAO;AAAA,UACnB,mBAAmB;AAAA,QACrB,CAAC;AACD,cAAM,iBAAiB,2BAA2B,KAAK,uBAAuB,YAAY;AAC1F,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,YAAY,kBAAmB;AAAA,UAC/B,SAAS,CAAC;AAAA,UACV,YAAY,6CAA6C;AAAA,YACvD,GAAG;AAAA,YACH,GAAG;AAAA,UACL,CAAC;AAAA,UACD;AAAA,UACA,uBAAuB;AAAA,UACvB,mBAAmB;AAAA,UACnB,kBAAkB,KAAK,sBAAsB;AAAA,UAC7C,WAAW,KAAK,sBAAsB;AAAA,UACtC,kBAAkB,mBAAmB;AAAA,QACvC;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAc,OAAO,OAAO,aAC1B,MAAM,gBAAgB,OAAO,MAAM,eAAe,UAAU,MAAM,OAAO,MAAM,aAAa;AAAA,IAC9F,SAAS,OAAO,OAAO,wBAAwB;AAC7C,UAAI,CAAC,SAAS,iBAAiB;AAC7B,cAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,MAClD;AACA,aAAO,MAAM,8BAA8B;AAAA,QACzC;AAAA,QACA;AAAA,QACA,iBAAiB,SAAS;AAAA,QAC1B,SAAS,SAAS;AAAA,QAClB,KAAK;AAAA,MACP,CAAC;AAAA,IACH;AAAA,IACA,iBAAiB,CAAC,WAAW;AAAA,MAC3B,SAAS;AAAA,MACT,aAAa;AAAA,MACb,yBAAyB,MAAM;AAAA,MAC/B,kBAAkB,MAAM;AAAA,MACxB,kBAAkB,MAAM;AAAA,MACxB,SAAS,MAAM;AAAA,MACf,WAAW,MAAM;AAAA,IACnB;AAAA,EACF;AACF;AAiCA,SAAS,gDACP,OACA,UACS;AACT,SACE,OAAO,YAAY,KACnB,MAAM,SAAS,sCACf,MAAM,iBAAiB,SAAS,gBAChC,MAAM,uBAAuB,SAAS,sBACtC,MAAM,aAAa,SAAS,YAC5B,MAAM,YAAY,SAAS,WAC3B,iBAAiB,KAAK,KAAK;AAE/B;AAEA,SAAS,oCACP,OACA,UACA,QACuC;AACvC,MACE,CAAC,SACD,MAAM,iBAAiB,SAAS,gBAChC,MAAM,uBAAuB,SAAS,sBACtC,MAAM,aAAa,SAAS,YAC5B,MAAM,YAAY,SAAS,WAC3B,iBAAiB,KAAK,IAAI,6CAC1B;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,YAAY,KAAK,MAAM,SAAS,wBAAwB;AAChE,UAAM,oBAAoB,kCAAkC,MAAM,mBAAmB,MAAM;AAC3F,WAAO,oBACF,EAAE,GAAG,OAAO,kBAAkB,IAC/B;AAAA,EACN;AACA,MAAI,MAAM,YAAY,KAAK,MAAM,SAAS,oCAAoC;AAC5E,UAAM,wBAAwB,2BAA2B,MAAM,uBAAuB,MAAM;AAC5F,UAAM,iBAAiB,+BAA+B,MAAM,gBAAgB,OAAO,QAAQ;AAC3F,QACE,OAAO,MAAM,eAAe,YAC5B,MAAM,WAAW,SAAS,KAC1B,MAAM,WAAW,SAAS,QAC1B,OAAO,MAAM,mBAAmB,YAChC,MAAM,eAAe,SAAS,KAC9B,MAAM,eAAe,SAAS,QAC9B,OAAO,MAAM,sBAAsB,aACnC,CAAC,yBACD,CAAC,kBACD,CAAC,OAAO,cAAc,MAAM,kBAAkB,KAC9C,OAAO,MAAM,kBAAkB,IAAI,KACnC,OAAO,MAAM,kBAAkB,IAAI,OAAO,gBAC1C,sBAAsB,YAAY,OAAO,MAAM,kBAAkB,IAAI,OAAO,gBAC3E,MAAM,wBAAwB,SAC5B,CAAC,MAAM,uBACN,OAAO,MAAM,wBAAwB,YACrC,MAAM,QAAQ,MAAM,mBAAmB,IAC3C;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,oBAAoB,OAAO,MAAM,kBAAkB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,6CACP,OACyC;AACzC,QAAM,aAAa;AAAA,IACjB,SAAS;AAAA,IACT,MAAM;AAAA,IACN,GAAG;AAAA,IACH,gBAAgB,MAAM,eAAe,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;AAAA,EAChE;AACA,MAAI,iBAAiB,UAAU,IAAI,6CAA6C;AAC9E,UAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,EAC/C;AACA,SAAO;AACT;AAEA,SAAS,+BACP,OACA,UACmC;AACnC,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,SAAU,QAAO;AAC7D,QAAM,SAAqC,CAAC;AAC5C,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,SAAS,OAAO;AACzB,QACE,CAAC,MAAM,QAAQ,KAAK,KACpB,MAAM,WAAW,KACjB,OAAO,MAAM,CAAC,MAAM,YACpB,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,KACzB,MAAM,CAAC,EAAE,SAAS,QACjB,MAAM,CAAC,MAAM,SACX,OAAO,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,EAAE,SAAS,KAAK,MAAM,CAAC,EAAE,SAAS,QAC5E,KAAK,IAAI,MAAM,CAAC,CAAC,GACjB;AACA,aAAO;AAAA,IACT;AACA,SAAK,IAAI,MAAM,CAAC,CAAC;AACjB,WAAO,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;AAAA,EAClC;AACA,SAAO;AACT;AAEA,SAAS,yBACP,SACA,UAC4B;AAC5B,QAAM,aAAa,mCAAmC,SAAS,CAAC,GAAG,QAAQ;AAC3E,MAAI,WAAW,SAAU,OAAM,IAAI,YAAY,4BAA4B,KAAK;AAChF,SAAO,WAAW;AACpB;AAEO,SAAS,2CAA2C,OAK/C;AACV,MAAI,MAAM,YAAY,qBAAqB,MAAM,MAAM,kBAAkB;AACvE,UAAM,IAAI,YAAY,4BAA4B,KAAK;AAAA,EACzD;AACA,MACE,MAAM,YAAY,gBAAgB,cAClC,MAAM,YAAY,gBAAgB,YAClC;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,YAAY,gBAAgB,YAAY;AAChD,UAAM,IAAI,YAAY,4BAA4B,KAAK;AAAA,EACzD;AACA,QAAM,UAAU,MAAM,YAAY;AAClC,QAAM,aAAa,UACf;AAAA,IACE,QAAQ;AAAA,IACR,MAAM,YAAY;AAAA,EACpB,IACA;AACJ,QAAM,iBACJ,YAAY,QACZ,QAAQ,yBAAyB,YACjC,QAAQ,8BAA8B,MAAM,6BAC5C,QAAQ,8BAA8B,QAAQ,oCAC9C,QAAQ,kBAAkB,MAAM,iBAChC,QAAQ,0BAA0B,aAClC,eAAe,QACf,cAAc,MACb,aAAa,KAAK,QAAQ,iBAAiB,MAAM,YAAY;AAChE,MAAI,CAAC,eAAgB,OAAM,IAAI,YAAY,4BAA4B,KAAK;AAC5E,SAAO;AACT;AAEO,SAAS,yCACd,YACA,cACA,UACgC;AAChC,MACE,CAAC,cACD,WAAW,YAAY,KACvB,WAAW,SAAS,oCACpB;AACA,WAAO;AAAA,EACT;AACA,QAAM,eAAe,+BAA+B,WAAW,gBAAgB,QAAQ;AACvF,MAAI,CAAC,aAAc,OAAM,IAAI,YAAY,4BAA4B,KAAK;AAC1E,QAAM,SAAS,IAAI,IAA2B,YAAY;AAC1D,aAAW,eAAe,cAAc;AACtC,WAAO,IAAI,YAAY,kBAAkB,YAAY,gBAAgB;AAAA,EACvE;AACA,MAAI,OAAO,OAAO,SAAU,OAAM,IAAI,YAAY,kBAAkB,KAAK;AACzE,QAAM,SAAS;AAAA,IACb,GAAG;AAAA,IACH,gBAAgB,CAAC,GAAG,MAAM;AAAA,EAC5B;AACA,MAAI,iBAAiB,MAAM,IAAI,6CAA6C;AAC1E,UAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,EAC/C;AACA,SAAO;AACT;AAEA,SAAS,mCACP,SACA,gBACA,UAKA;AACA,QAAM,SAAS,IAAI,IAA2B,cAAc;AAC5D,QAAM,WAAwC,CAAC;AAC/C,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,OAAO,IAAI,MAAM,gBAAgB,GAAG;AACvC,aAAO,IAAI,MAAM,kBAAkB,MAAM,iBAAiB;AAC1D,eAAS,KAAK,KAAK;AAAA,IACrB,OAAO;AACL,YAAM,aAAa;AAAA,QACjB,MAAM;AAAA,QACN,OAAO,IAAI,MAAM,gBAAgB,KAAK;AAAA,MACxC;AACA,UAAI,eAAe,MAAM;AACvB,eAAO;AAAA,UACL,SAAS,CAAC;AAAA,UACV,gBAAgB,CAAC,GAAG,MAAM;AAAA,UAC1B,UAAU;AAAA,QACZ;AAAA,MACF;AACA,UAAI,aAAa,GAAG;AAClB,eAAO,IAAI,MAAM,kBAAkB,MAAM,iBAAiB;AAC1D,iBAAS,KAAK,KAAK;AAAA,MACrB;AAAA,IACF;AACA,QAAI,OAAO,OAAO,SAAU,OAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,EAC3E;AACA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,gBAAgB,CAAC,GAAG,MAAM;AAAA,IAC1B,UAAU;AAAA,EACZ;AACF;AAEA,SAAS,iBAAiB,OAAwB;AAChD,MAAI;AACF,WAAO,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EACzD,QAAQ;AACN,WAAO,OAAO;AAAA,EAChB;AACF;AAEA,SAAS,2BACP,OACA,QAC8B;AAC9B,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,MAAM;AACZ,aAAW,CAAC,KAAK,OAAO,KAAK;AAAA,IAC3B,CAAC,iBAAiB,OAAO,QAAQ;AAAA,IACjC,CAAC,oBAAoB,OAAO,mBAAmB;AAAA,IAC/C,CAAC,aAAa,OAAO,YAAY;AAAA,EACnC,GAAY;AACV,UAAM,cAAc,IAAI,GAAG;AAC3B,QACE,CAAC,OAAO,cAAc,WAAW,KACjC,OAAO,WAAW,IAAI,KACtB,OAAO,WAAW,IAAI,SACtB;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,6BAAoD;AAC3D,SAAO,EAAE,eAAe,GAAG,kBAAkB,GAAG,WAAW,EAAE;AAC/D;AAEA,SAAS,2BACP,QACA,QAIO;AACP,MAAI,OAAO,iBAAiB,OAAO,SAAU,QAAO;AACpD,MAAI,OAAO,oBAAoB,OAAO,oBAAqB,QAAO;AAClE,MAAI,OAAO,aAAa,OAAO,aAAc,QAAO;AACpD,SAAO;AACT;AAEA,SAAS,+BACP,QACA,QACA,QACS;AACT,MAAI,WAAW,uBAAuB,WAAW,gBAAgB,WAAW,oBAAoB;AAC9F,WAAO;AAAA,EACT;AACA,SAAO,WAAW,wBAAwB,OAAO,aAAa,OAAO;AACvE;AAEA,eAAe,uBACb,SACA,eACA,OACA,eACiB;AACjB,MAAI,CAAC,cAAe,OAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AACrF,QAAM,MAAM,IAAI,IAAI,GAAG,cAAc,yBAAyB;AAC9D,MAAI,aAAa,IAAI,qBAAqB,MAAM;AAChD,MAAI,QAAS,KAAI,aAAa,IAAI,WAAW,OAAO;AACpD,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,EAAE,SAAS,EAAE,eAAe,QAAQ,mBAAmB,EAAE;AAAA,IACzD;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS,GAAI,0BAAyB,QAAQ;AACnD,QAAM,UAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO,eAAe,QAAQ,gBAAgB,kBAAkB;AAClE;AAEA,eAAe,iBACb,WACA,SACA,UACA,eACA,OACA,eACiC;AACjC,MAAI,CAAC,cAAe,OAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AACrF,QAAM,MAAM,IAAI,IAAI,GAAG,cAAc,UAAU;AAC/C,MAAI,aAAa,IAAI,aAAa,SAAS;AAC3C,MAAI,aAAa,IAAI,YAAY,OAAO,QAAQ,CAAC;AACjD,MAAI,aAAa,IAAI,qBAAqB,MAAM;AAChD,MAAI,aAAa,IAAI,6BAA6B,MAAM;AACxD,MAAI,aAAa,IAAI,UAAU,OAAO;AACtC,MAAI,aAAa;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACA,MAAI,QAAS,KAAI,aAAa,IAAI,WAAW,OAAO;AACpD,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,EAAE,SAAS,EAAE,eAAe,QAAQ,mBAAmB,EAAE;AAAA,IACzD;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,SAAS,WAAW,IAAK,OAAM,IAAI,8BAA8B;AACrE,MAAI,CAAC,SAAS,GAAI,0BAAyB,QAAQ;AACnD,QAAM,UAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,MAAM,QAAQ,QAAQ,OAAO,IAAI,QAAQ,UAAU,CAAC;AACpE,SAAO;AAAA,IACL,SAAS,QAAQ,IAAI,CAAC,UAAU;AAC9B,YAAM,MAAM,SAAS,OAAO,UAAU,WAAY,QAAoC,CAAC;AACvF,YAAM,SAAS,eAAe,IAAI,QAAQ,gBAAgB;AAC1D,aAAO;AAAA,QACL;AAAA,QACA,SAAS,IAAI,YAAY;AAAA,QACzB,MAAM,IAAI,QAAQ,OAAO,IAAI,SAAS,WAAW,uBAAuB,IAAI,IAAI,IAAI;AAAA,MACtF;AAAA,IACF,CAAC;AAAA,IACD,eAAe,eAAe,QAAQ,aAAa;AAAA,IACnD,mBAAmB,eAAe,QAAQ,iBAAiB;AAAA,EAC7D;AACF;AAEA,eAAe,aACb,QACA,eACA,OACA,eACkD;AAClD,MAAI,CAAC,cAAe,OAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AACrF,QAAM,MAAM,IAAI,IAAI,GAAG,cAAc,UAAU,mBAAmB,MAAM,CAAC,EAAE;AAC3E,MAAI,aAAa,IAAI,qBAAqB,MAAM;AAChD,MAAI,aAAa;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACA,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,EAAE,SAAS,EAAE,eAAe,QAAQ,mBAAmB,EAAE;AAAA,IACzD;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,SAAS,WAAW,IAAK,QAAO;AACpC,MAAI,CAAC,SAAS,GAAI,0BAAyB,QAAQ;AACnD,SAAO;AAAA,IACL,MAAM,wBAAwB,UAAU,sBAAsB,4BAA4B;AAAA,EAC5F;AACF;AAEA,eAAe,qBACb,OACA,eACA,OACA,eACqC;AACrC,MAAI,CAAC,cAAe,OAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AACrF,QAAM,MAAM,IAAI,IAAI,GAAG,cAAc,UAAU,mBAAmB,MAAM,MAAM,CAAC,cAAc;AAC7F,MAAI,aAAa,IAAI,qBAAqB,MAAM;AAChD,MAAI,aAAa,IAAI,YAAY,OAAO,MAAM,QAAQ,CAAC;AACvD,MAAI,aAAa;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACA,MAAI,MAAM,UAAW,KAAI,aAAa,IAAI,aAAa,MAAM,SAAS;AACtE,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,EAAE,SAAS,EAAE,eAAe,QAAQ,mBAAmB,EAAE;AAAA,IACzD;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,WAAO,EAAE,aAAa,CAAC,GAAG,eAAe,MAAM,QAAQ,KAAK;AAAA,EAC9D;AACA,MAAI,CAAC,SAAS,GAAI,0BAAyB,QAAQ;AACnD,QAAM,UAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,iBAAiB,MAAM,QAAQ,QAAQ,WAAW,IAAI,QAAQ,cAAc;AAClF,MAAI,CAAC,eAAgB,OAAM,IAAI,YAAY,4BAA4B,KAAK;AAC5E,SAAO;AAAA,IACL,aAAa,eAAe,IAAI,oBAAoB;AAAA,IACpD,eAAe,eAAe,QAAQ,aAAa;AAAA,IACnD,QAAQ;AAAA,EACV;AACF;AAEA,eAAsB,8BAA8B,OAMR;AAC1C,MAAI,CAAC,OAAO,cAAc,MAAM,mBAAmB,KAAK,MAAM,sBAAsB,GAAG;AACrF,UAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,EAC/C;AACA,QAAM,MAAM,MAAM,OAAO,KAAK;AAC9B,QAAM,aAAa,IAAI,KAAK,IAAI,CAAC;AACjC,MAAI,CAAC,OAAO,SAAS,WAAW,QAAQ,CAAC,GAAG;AAC1C,UAAM,IAAI,YAAY,4BAA4B,KAAK;AAAA,EACzD;AACA,QAAM,cAAuC,CAAC;AAC9C,QAAM,aAAa,oBAAI,IAAY;AACnC,MAAI,YAA2B;AAC/B,MAAI,mBAAmB;AACvB,MAAI,uBAAuB;AAC3B,KAAG;AACD,QAAI,oBAAoB,MAAM,qBAAqB;AACjD,YAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,IAC/C;AACA,wBAAoB;AACpB,UAAM,OAAO,MAAM,MAAM,gBAAgB;AAAA,MACvC,QAAQ,MAAM,MAAM;AAAA,MACpB;AAAA,MACA,UAAU,KAAK,IAAI,KAAK,kCAAkC,YAAY,MAAM;AAAA,IAC9E,CAAC;AACD,QAAI,KAAK,QAAQ;AACf,6BAAuB;AACvB;AAAA,IACF;AACA,gBAAY,KAAK,GAAG,KAAK,WAAW;AACpC,QAAI,YAAY,SAAS,iCAAiC;AACxD,YAAM,IAAI,YAAY,kBAAkB,KAAK;AAAA,IAC/C;AACA,gBAAY,KAAK;AACjB,QAAI,WAAW;AACb,UAAI,UAAU,SAAS,QAAQ,WAAW,IAAI,SAAS,GAAG;AACxD,cAAM,IAAI,YAAY,4BAA4B,KAAK;AAAA,MACzD;AACA,iBAAW,IAAI,SAAS;AAAA,IAC1B;AAAA,EACF,SAAS;AAET,MAAI,sBAAsB;AACxB,QAAI,CAAC,MAAM,WAAW,oBAAoB,MAAM,qBAAqB;AACnE,aAAO,6BAA6B,MAAM,OAAO,YAAY,gBAAgB;AAAA,IAC/E;AACA,wBAAoB;AACpB,UAAM,UAAU,MAAM,MAAM,QAAQ,MAAM,MAAM,gBAAgB;AAChE,QAAI,CAAC,WAAW,QAAQ,SAAS;AAC/B,aAAO,6BAA6B,MAAM,OAAO,YAAY,gBAAgB;AAAA,IAC/E;AACA,UAAMO,eAAcF,YAAW,QAAQ,EACpC;AAAA,MACC,KAAK,UAAU;AAAA,QACb,SAAS;AAAA,QACT,MAAM;AAAA,QACN,kBAAkB,MAAM,MAAM;AAAA,QAC9B,kBAAkB,MAAM,MAAM;AAAA,MAChC,CAAC;AAAA,IACH,EACC,OAAO,KAAK;AACf,WAAO;AAAA,MACL,aAAa;AAAA,MACb,kBAAkB,MAAM,MAAM;AAAA,MAC9B,SAAS,MAAM,MAAM;AAAA,MACrB,aAAAE;AAAA,MACA,YAAY,WAAW,YAAY;AAAA,MACnC,WAAW,IAAI,KAAK,WAAW,QAAQ,IAAI,6BAA6B,EAAE,YAAY;AAAA,MACtF;AAAA,MACA,YAAY,CAAC;AAAA,IACf;AAAA,EACF;AAEA,QAAM,uBAAuB,YAC1B,IAAI,CAAC,gBAAgB;AAAA,IACpB,IAAI,WAAW;AAAA,IACf,MAAM,WAAW;AAAA,IACjB,MAAM,WAAW;AAAA,IACjB,cAAc,WAAW;AAAA,IACzB,QAAQ,WAAW;AAAA,IACnB,oBAAoB,WAAW;AAAA,IAC/B,gBAAgB,WAAW;AAAA,IAC3B,WAAW,WAAW;AAAA,EACxB,EAAE,EACD,KAAK,CAAC,MAAM,UAAU,KAAK,UAAU,IAAI,EAAE,cAAc,KAAK,UAAU,KAAK,CAAC,CAAC;AAClF,QAAM,cAAcF,YAAW,QAAQ,EACpC;AAAA,IACC,KAAK,UAAU;AAAA,MACb,SAAS;AAAA,MACT,kBAAkB,MAAM,MAAM;AAAA,MAC9B,kBAAkB,MAAM,MAAM;AAAA,MAC9B,aAAa;AAAA,IACf,CAAC;AAAA,EACH,EACC,OAAO,KAAK;AACf,SAAO;AAAA,IACL,aAAa;AAAA,IACb,kBAAkB,MAAM,MAAM;AAAA,IAC9B,SAAS,MAAM,MAAM;AAAA,IACrB;AAAA,IACA,YAAY,WAAW,YAAY;AAAA,IACnC,WAAW,IAAI,KAAK,WAAW,QAAQ,IAAI,6BAA6B,EAAE,YAAY;AAAA,IACtF;AAAA,IACA,YAAY,qBAAqB,IAAI,CAAC,gBAAgB;AAAA,MACpD,MAAM,WAAW;AAAA,MACjB,cAAc,WAAW;AAAA,MACzB,cAAc,WAAW;AAAA,MACzB,QAAQ,WAAW;AAAA,MACnB,MAAM,WAAW;AAAA,MACjB,WAAW,WAAW;AAAA,MACtB,oBAAoB,WAAW;AAAA,MAC/B,gBAAgB,WAAW;AAAA,IAC7B,EAAE;AAAA,EACJ;AACF;AAEA,SAAS,6BACP,OACA,YACA,kBACA;AACA,SAAO;AAAA,IACL,aAAa;AAAA,IACb,kBAAkB,MAAM;AAAA,IACxB,SAAS,MAAM;AAAA,IACf,aAAaA,YAAW,QAAQ,EAC7B;AAAA,MACC,KAAK,UAAU;AAAA,QACb,SAAS;AAAA,QACT,MAAM;AAAA,QACN,kBAAkB,MAAM;AAAA,QACxB,kBAAkB,MAAM;AAAA,MAC1B,CAAC;AAAA,IACH,EACC,OAAO,KAAK;AAAA,IACf,YAAY,WAAW,YAAY;AAAA,IACnC,WAAW,IAAI,KAAK,WAAW,QAAQ,IAAI,6BAA6B,EAAE,YAAY;AAAA,IACtF;AAAA,IACA,YAAY,CAAC;AAAA,EACf;AACF;AAEA,SAAS,qBAAqB,OAAuC;AACnE,QAAM,MAAM,aAAa,KAAK;AAC9B,MAAI,IAAI,YAAY,KAAM,OAAM,IAAI,YAAY,4BAA4B,KAAK;AACjF,QAAM,OAAO,eAAe,IAAI,MAAM,iBAAiB;AACvD,MAAI,SAAS,UAAU,SAAS,WAAW,SAAS,YAAY,SAAS,UAAU;AACjF,UAAM,IAAI,YAAY,4BAA4B,KAAK;AAAA,EACzD;AACA,QAAM,OAAO,eAAe,IAAI,MAAM,iBAAiB;AACvD,MACE,SAAS,WACT,SAAS,eACT,SAAS,mBACT,SAAS,YACT,SAAS,eACT,SAAS,UACT;AACA,UAAM,IAAI,YAAY,4BAA4B,KAAK;AAAA,EACzD;AACA,QAAM,oBAAoB,MAAM,QAAQ,IAAI,iBAAiB,IAAI,IAAI,oBAAoB,CAAC;AAC1F,SAAO;AAAA,IACL,IAAI,eAAe,IAAI,IAAI,eAAe;AAAA,IAC1C;AAAA,IACA;AAAA,IACA,cAAc,eAAe,IAAI,YAAY;AAAA,IAC7C,QAAQ,eAAe,IAAI,MAAM;AAAA,IACjC,oBAAoB,OAAO,IAAI,uBAAuB,YAAY,IAAI,qBAAqB;AAAA,IAC3F,gBAAgB,+BAA+B,IAAI,cAAc;AAAA,IACjE,WAAW,kBAAkB,KAAK,CAAC,WAAW,aAAa,MAAM,EAAE,cAAc,IAAI;AAAA,EACvF;AACF;AAEA,SAAS,+BAA+B,OAA+B;AACrE,QAAM,YAAY,eAAe,KAAK;AACtC,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,SAAS,IAAI,KAAK,SAAS;AACjC,MAAI,CAAC,OAAO,SAAS,OAAO,QAAQ,CAAC,EAAG,OAAM,IAAI,YAAY,4BAA4B,KAAK;AAC/F,SAAO,OAAO,YAAY;AAC5B;AAEA,SAAS,yBAAyB,UAA2B;AAC3D,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,UAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,EACnE;AACA,QAAM,IAAI;AAAA,IACR,SAAS,UAAU,OAAO,SAAS,WAAW,MAC1C,yBACA;AAAA,IACJ,SAAS,UAAU,OAAO,SAAS,WAAW;AAAA,EAChD;AACF;AAEA,eAAe,mBACb,KACA,MACA,WACA,OACA,eACmB;AACnB,MAAI;AACF,WAAO,MAAM,yBAAyB;AAAA,MACpC,WAAW;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA,WAAW,CAAC,YAAY,UAAU,EAAE,UAAU,gBAAgB,GAAG,QAAQ,CAAC;AAAA,IAC5E,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,iBAAiB,mCAAmC;AACtD,YAAM,IAAI,YAAY,wBAAwB,IAAI;AAAA,IACpD;AACA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,oBACP,UACA,kBACkC;AAClC,QAAM,UACJ,SAAS,oBAAoB,SAAS,iBAAiB,CAAC,SAAS,cAAc,IAAI,CAAC;AACtF,SAAO,QAAQ,KAAK,CAAC,WAAW,OAAO,OAAO,gBAAgB,KAAK;AACrE;AAEO,SAAS,qCAAqC,OAMzC;AACV,SACE,MAAM,8BAA8B,UACpC,MAAM,sBAAsB,MAAM,6BAClC,MAAM,qBAAqB,aAC1B,MAAM,mBAAmB,UAAa,MAAM,mBAAmB,aAChE,iCAAiC,MAAM,eAAe,uBAAuB;AAEjF;AAEA,eAAe,kBACb,OACA,eACA,OACA,eACmC;AACnC,MAAI,CAAC,cAAe,OAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AACrF,QAAM,MAAM,IAAI,IAAI,GAAG,cAAc,QAAQ;AAC7C,MAAI,aAAa;AAAA,IACf;AAAA,IACA,IAAI,MAAM,SAAS,WAAW,KAAK,KAAK,CAAC;AAAA,EAC3C;AACA,MAAI,aAAa,IAAI,YAAY,OAAO,MAAM,QAAQ,CAAC;AACvD,MAAI,aAAa,IAAI,qBAAqB,MAAM;AAChD,MAAI,aAAa,IAAI,6BAA6B,MAAM;AACxD,MAAI,aAAa;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACA,MAAI,MAAM,UAAW,KAAI,aAAa,IAAI,aAAa,MAAM,SAAS;AACtE,MAAI,MAAM,SAAS;AACjB,QAAI,aAAa,IAAI,WAAW,OAAO;AACvC,QAAI,aAAa,IAAI,WAAW,MAAM,OAAO;AAAA,EAC/C;AACA,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,EAAE,SAAS,EAAE,eAAe,QAAQ,mBAAmB,EAAE;AAAA,IACzD;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,YAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,IACnE;AACA,UAAM,IAAI;AAAA,MACR;AAAA,MACA,SAAS,UAAU,OAAO,SAAS,WAAW;AAAA,IAChD;AAAA,EACF;AACA,QAAM,UAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,WAAW,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AACjE,SAAO;AAAA,IACL,OAAO,SAAS,IAAI,sBAAsB;AAAA,IAC1C,eAAe,OAAO,QAAQ,kBAAkB,WAAW,QAAQ,gBAAgB;AAAA,IACnF,kBAAkB,QAAQ,qBAAqB;AAAA,EACjD;AACF;AAEA,SAAS,uBAAuB,OAAkD;AAChF,QAAM,MAAM,SAAS,OAAO,UAAU,WAAY,QAAoC,CAAC;AACvF,SAAO;AAAA,IACL,IAAI,eAAe,IAAI,IAAI,IAAI;AAAA,IAC/B,MAAM,eAAe,IAAI,MAAM,MAAM;AAAA,IACrC,UAAU,eAAe,IAAI,UAAU,UAAU;AAAA,IACjD,SAAS,eAAe,IAAI,OAAO;AAAA,IACnC,SAAS,MAAM,QAAQ,IAAI,OAAO,IAC9B,IAAI,QAAQ,OAAO,CAAC,SAAyB,OAAO,SAAS,QAAQ,IACrE,CAAC;AAAA,IACL,cAAc,eAAe,IAAI,YAAY;AAAA,IAC7C,aAAa,eAAe,IAAI,WAAW;AAAA,IAC3C,SAAS,eAAe,IAAI,OAAO;AAAA,IACnC,aAAa,eAAe,IAAI,WAAW;AAAA,IAC3C,MAAM,eAAe,IAAI,IAAI;AAAA,IAC7B,aAAa,eAAe,IAAI,WAAW;AAAA,IAC3C,SAAS,IAAI,YAAY;AAAA,EAC3B;AACF;AAEA,eAAe,gBACb,OACA,eACA,UACA,OACA,eACqB;AACrB,MAAI,CAAC,cAAe,OAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AACrF,QAAM,MACJ,MAAM,SAAS,WAAW,WACtB,IAAI,IAAI,GAAG,cAAc,UAAU,mBAAmB,MAAM,gBAAgB,CAAC,SAAS,IACtF,IAAI,IAAI,GAAG,cAAc,UAAU,mBAAmB,MAAM,gBAAgB,CAAC,EAAE;AACrF,MAAI,MAAM,SAAS,WAAW,UAAU;AACtC,QAAI,aAAa,IAAI,YAAY,MAAM,SAAS,WAAW;AAAA,EAC7D,OAAO;AACL,QAAI,aAAa,IAAI,OAAO,OAAO;AACnC,QAAI,aAAa,IAAI,qBAAqB,MAAM;AAAA,EAClD;AACA,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,EAAE,SAAS,EAAE,cAAc,EAAE;AAAA,IAC7B,MAAM,SAAS,WAAW,WAAW,WAAW;AAAA,IAChD;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,YAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,IACnE;AACA,UAAM,IAAI;AAAA,MACR;AAAA,MACA,SAAS,UAAU,OAAO,SAAS,WAAW;AAAA,IAChD;AAAA,EACF;AACA,QAAM,WAAW,OAAO,SAAS,QAAQ,IAAI,gBAAgB,KAAK,GAAG;AACrE,MAAI,OAAO,SAAS,QAAQ,KAAK,WAAW,UAAU;AACpD,UAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,EAClD;AACA,MAAI,CAAC,SAAS,MAAM;AAClB,UAAMG,SAAQ,IAAI,WAAW,MAAM,SAAS,YAAY,CAAC;AACzD,QAAIA,OAAM,aAAa,SAAU,OAAM,IAAI,YAAY,qBAAqB,KAAK;AACjF,WAAOA;AAAA,EACT;AACA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,SAAuB,CAAC;AAC9B,MAAI,QAAQ;AACZ,SAAO,MAAM;AACX,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,QAAI,KAAM;AACV,aAAS,MAAM;AACf,QAAI,QAAQ,UAAU;AACpB,YAAM,OAAO,OAAO;AACpB,YAAM,IAAI,YAAY,qBAAqB,KAAK;AAAA,IAClD;AACA,WAAO,KAAK,KAAK;AAAA,EACnB;AACA,QAAM,QAAQ,IAAI,WAAW,KAAK;AAClC,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,UAAM,IAAI,OAAO,MAAM;AACvB,cAAU,MAAM;AAAA,EAClB;AACA,SAAO;AACT;AAEA,eAAe,mBACb,QACA,QACA,UACA,eACiC;AACjC,MAAI,CAAC,cAAe,OAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AACrF,MAAI,OAAO,SAAS,gBAAgB;AAClC,UAAMC,OAAM,IAAI;AAAA,MACd,GAAG,kBAAkB,YAAY,mBAAmB,OAAO,OAAO,CAAC;AAAA,IACrE;AACA,IAAAA,KAAI,aAAa;AAAA,MACf;AAAA,MACA,cAAc,OAAO,IAAI,WAAW,KAAK,KAAK,CAAC;AAAA,IACjD;AACA,IAAAA,KAAI,aAAa,IAAI,cAAc,OAAO,QAAQ,CAAC;AACnD,IAAAA,KAAI,aAAa,IAAI,UAAU,yBAAyB;AACxD,QAAI,OAAQ,CAAAA,KAAI,aAAa,IAAI,iBAAiB,MAAM;AACxD,UAAMC,WAAU,aAAa,MAAM,qBAAqBD,MAAK,eAAe,iBAAiB,CAAC;AAC9F,UAAM,SAAS,MAAM,QAAQC,SAAQ,MAAM,IAAIA,SAAQ,SAAS,CAAC;AACjE,WAAO;AAAA,MACL,OAAO,OAAO,IAAI,CAAC,QAAQ;AACzB,cAAM,MAAM,aAAa,GAAG;AAC5B,cAAM,SAAS,aAAa,IAAI,MAAM;AACtC,cAAM,KAAK,wBAAwB,IAAI,IAAI,UAAU;AACrD,cAAM,MAAM,wBAAwB,IAAI,KAAK,WAAW;AACxD,cAAM,YAAY,eAAe,OAAO,OAAO;AAC/C,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,OAAO,wBAAwB,OAAO,SAAS,eAAe;AAAA,UAC9D,SAAS;AAAA,UACT,WAAW,eAAe,OAAO,OAAO;AAAA,UACxC;AAAA,UACA,QAAQ,IAAI,IAAI,WAAW,mBAAmB,GAAG,CAAC,IAAI,OAAO,OAAO,EAAE,SAAS;AAAA,QACjF;AAAA,MACF,CAAC;AAAA,MACD,YAAY,eAAeA,SAAQ,aAAa;AAAA,IAClD;AAAA,EACF;AAEA,QAAM,MAAM,IAAI;AAAA,IACd,GAAG,kBAAkB,kBAAkB,mBAAmB,OAAO,OAAO,CAAC,uBAAuB,mBAAmB,OAAO,UAAU,CAAC;AAAA,EACvI;AACA,MAAI,aAAa,IAAI,SAAS,OAAO,QAAQ,CAAC;AAC9C,MAAI,aAAa,IAAI,QAAQ,IAAI;AACjC,MAAI,OAAQ,KAAI,aAAa,IAAI,UAAU,MAAM;AACjD,QAAM,UAAU;AAAA,IACd,MAAM,qBAAqB,KAAK,eAAe,sBAAsB;AAAA,EACvE;AACA,QAAM,QAAQ,MAAM,QAAQ,QAAQ,OAAO,IAAI,QAAQ,UAAU,CAAC;AAClE,SAAO;AAAA,IACL,OAAO,MAAM,IAAI,CAAC,QAAQ;AACxB,YAAM,MAAM,aAAa,GAAG;AAC5B,YAAM,UAAU,aAAa,IAAI,OAAO;AACxC,YAAM,KAAK,wBAAwB,IAAI,IAAI,SAAS;AACpD,YAAM,QAAQ,eAAe,aAAa,IAAI,MAAM,EAAE,KAAK;AAC3D,YAAM,gBAAgB,YAAY,QAAQ,MAAM;AAChD,aAAO;AAAA,QACL;AAAA,QACA,KAAK;AAAA,QACL,OAAO,wBAAwB,IAAI,OAAO,YAAY;AAAA,QACtD,SAAS,kBAAkB,SAAY,OAAO,OAAO,aAAa;AAAA,QAClE,WAAW,eAAe,IAAI,SAAS;AAAA,QACvC,WAAW,eAAe,QAAQ,SAAS;AAAA,QAC3C,QAAQ,QACJ,IAAI,IAAI,MAAM,WAAW,QAAQ,IAAI,QAAQ,QAAQ,KAAK,IAAI,OAAO,OAAO,EAAE,SAAS,IACvF,IAAI;AAAA,UACF,gBAAgB,mBAAmB,OAAO,GAAG,CAAC,UAAU,mBAAmB,EAAE,CAAC;AAAA,UAC9E,OAAO;AAAA,QACT,EAAE,SAAS;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,IACD,YAAY,iBAAiB,aAAa,QAAQ,MAAM,EAAE,IAAI;AAAA,EAChE;AACF;AAEA,eAAe,sBACb,QACA,OACA,eACA,UACqB;AACrB,MAAI,CAAC,cAAe,OAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AACrF,QAAM,WAAW,MAAM,iBAAiB,MAAM,MAAM,iBAAiB,QAAQ,GAAG,IAAI,CAAC;AACrF,QAAM,WACJ,OAAO,SAAS,iBACZ,MAAM,kBAAkB,QAAQ,UAAU,OAAO,aAAa,IAC9D,MAAM,uBAAuB,QAAQ,UAAU,OAAO,aAAa;AACzE,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,QAAQ;AAC/C,MAAI,MAAM,aAAa,SAAU,OAAM,IAAI,YAAY,qBAAqB,KAAK;AACjF,SAAO;AACT;AAEA,eAAe,kBACb,QACA,SACA,OACA,eACiB;AACjB,QAAM,WAAW,IAAI;AAAA,IACnB,GAAG,kBAAkB,YAAY,mBAAmB,OAAO,OAAO,CAAC,qBAAqB,mBAAmB,OAAO,CAAC;AAAA,EACrH;AACA,WAAS,aAAa;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACA,QAAM,QAAQ,aAAa,MAAM,qBAAqB,UAAU,eAAe,YAAY,CAAC;AAC5F,QAAM,SAAS,aAAa,MAAM,MAAM;AACxC,QAAM,QAAQ;AAAA,IACZ,KAAK,MAAM,KAAK;AAAA,IAChB;AAAA,IACA,UAAU,eAAe,MAAM,GAAG,KAAK,MAAM,KAAK;AAAA,IAClD,WAAW,eAAe,aAAa,OAAO,SAAS,EAAE,IAAI,KAAK,SAAS;AAAA,IAC3E,aAAa,eAAe,aAAa,OAAO,MAAM,EAAE,IAAI,KAAK,SAAS;AAAA,IAC1E,eAAe,eAAe,aAAa,OAAO,QAAQ,EAAE,IAAI,KAAK,MAAM;AAAA,IAC3E,eAAe,eAAe,aAAa,OAAO,QAAQ,EAAE,WAAW,KAAK,YAAY;AAAA,IACxF,eAAe,eAAe,aAAa,OAAO,QAAQ,EAAE,WAAW,KAAK,SAAS;AAAA,IACrF,cAAc,eAAe,OAAO,OAAO,KAAK,SAAS;AAAA,IACzD,aAAa,MAAM,SAAS;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,OAAO,WAAW,KAAK;AAAA,EACvC;AACA,QAAM,SAAS,MAAM,QAAQ,OAAO,MAAM,IACtC,OAAO,OAAO,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,IAC1E,CAAC;AACL,MAAI,OAAO,SAAS,EAAG,OAAM,OAAO,GAAG,GAAG,aAAa,OAAO,KAAK,IAAI,CAAC,EAAE;AAC1E,QAAM,WAAW,MAAM,aAAa,QAAQ,SAAS,aAAa;AAClE,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,KAAK,IAAI,eAAe,EAAE;AAChC,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,aAAa,OAAO;AAChC,YAAM,SAAS,eAAe,aAAa,IAAI,MAAM,EAAE,WAAW,KAAK;AACvE,YAAM,UAAU,eAAe,IAAI,OAAO,KAAK;AAC/C,YAAM,KAAK,OAAO,MAAM,SAAM,OAAO,IAAI,IAAI,cAAc,IAAI,IAAI,GAAG,EAAE;AAAA,IAC1E;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAe,aACb,QACA,SACA,eACoB;AACpB,QAAM,WAAsB,CAAC;AAC7B,MAAI,UAAU;AACd,WAAS,OAAO,GAAG,OAAO,IAAI,QAAQ,GAAG;AACvC,UAAM,MAAM,IAAI;AAAA,MACd,GAAG,kBAAkB,YAAY,mBAAmB,OAAO,OAAO,CAAC,qBAAqB,mBAAmB,OAAO,CAAC;AAAA,IACrH;AACA,QAAI,aAAa,IAAI,WAAW,OAAO,OAAO,CAAC;AAC/C,QAAI,aAAa,IAAI,cAAc,KAAK;AACxC,QAAI,aAAa,IAAI,WAAW,SAAS;AACzC,UAAM,UAAU,aAAa,MAAM,qBAAqB,KAAK,eAAe,eAAe,CAAC;AAC5F,UAAM,eAAe,MAAM,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,WAAW,CAAC;AAC3E,aAAS,KAAK,GAAG,YAAY;AAC7B,UAAM,QAAQ,YAAY,QAAQ,KAAK,KAAK,SAAS;AACrD,QAAI,SAAS,UAAU,SAAS,aAAa,WAAW,EAAG;AAC3D,eAAW,aAAa;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,eAAe,uBACb,QACA,QACA,OACA,eACiB;AACjB,QAAM,UAAU,IAAI;AAAA,IAClB,GAAG,kBAAkB,kBAAkB,mBAAmB,OAAO,OAAO,CAAC,sBAAsB,mBAAmB,MAAM,CAAC;AAAA,EAC3H;AACA,UAAQ,aAAa,IAAI,eAAe,SAAS;AACjD,QAAM,OAAO,aAAa,MAAM,qBAAqB,SAAS,eAAe,iBAAiB,CAAC;AAC/F,QAAM,UAAU,aAAa,aAAa,KAAK,IAAI,EAAE,OAAO;AAC5D,QAAM,QAAQ;AAAA,IACZ,KAAK,MAAM,KAAK;AAAA,IAChB;AAAA,IACA,YAAY,OAAO,IAAI,KAAK,OAAO,GAAG;AAAA,IACtC,cAAc,MAAM,gBAAgB,SAAS;AAAA,IAC7C,aAAa,MAAM,SAAS;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe,QAAQ,KAAK,KAAK;AAAA,EACnC;AACA,QAAM,WAAW,MAAM,yBAAyB,QAAQ,QAAQ,aAAa;AAC7E,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,KAAK,IAAI,eAAe,EAAE;AAChC,eAAW,WAAW,UAAU;AAC9B,YAAM,MAAM,aAAa,OAAO;AAChC,YAAM,OAAO,aAAa,aAAa,IAAI,IAAI,EAAE,OAAO;AACxD,YAAM,UAAU,aAAa,IAAI,OAAO;AACxC,YAAM;AAAA,QACJ,oBAAiB,eAAe,QAAQ,SAAS,KAAK,cAAc;AAAA,QACpE;AAAA,QACA,eAAe,KAAK,KAAK,KAAK;AAAA,QAC9B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAe,yBACb,QACA,QACA,eACoB;AACpB,QAAM,WAAsB,CAAC;AAC7B,MAAI,SAAwB;AAC5B,WAAS,OAAO,GAAG,OAAO,IAAI,QAAQ,GAAG;AACvC,UAAM,MAAM,IAAI;AAAA,MACd,GAAG,kBAAkB,kBAAkB,mBAAmB,OAAO,OAAO,CAAC,sBAAsB,mBAAmB,MAAM,CAAC;AAAA,IAC3H;AACA,QAAI,aAAa,IAAI,eAAe,SAAS;AAC7C,QAAI,aAAa,IAAI,SAAS,KAAK;AACnC,QAAI,OAAQ,KAAI,aAAa,IAAI,UAAU,MAAM;AACjD,UAAM,UAAU;AAAA,MACd,MAAM,qBAAqB,KAAK,eAAe,0BAA0B;AAAA,IAC3E;AACA,UAAM,UAAU,MAAM,QAAQ,QAAQ,OAAO,IAAI,QAAQ,UAAU,CAAC;AACpE,aAAS,KAAK,GAAG,OAAO;AACxB,aAAS,iBAAiB,aAAa,QAAQ,MAAM,EAAE,IAAI;AAC3D,QAAI,CAAC,OAAQ;AAAA,EACf;AACA,SAAO;AACT;AAEA,eAAe,qBACb,KACA,eACA,OACkB;AAClB,QAAM,WAAW,MAAM,YAAY,KAAK;AAAA,IACtC,SAAS,EAAE,eAAe,QAAQ,mBAAmB;AAAA,IACrD,UAAU;AAAA,IACV,QAAQ,YAAY,QAAQ,GAAM;AAAA,EACpC,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,SAAS,MAAM,OAAO,EAAE,MAAM,MAAM,MAAS;AACnD,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,YAAM,IAAI,YAAY,iCAAiC,MAAM,IAAI;AAAA,IACnE;AACA,UAAM,IAAI;AAAA,MACR;AAAA,MACA,SAAS,UAAU,OAAO,SAAS,WAAW;AAAA,IAChD;AAAA,EACF;AACA,SAAO,MAAM,wBAAwB,UAAU,0BAA0B,KAAK;AAChF;AAEO,SAAS,iBAAiB,OAA+B;AAC9D,QAAM,OAAO,eAAe,KAAK;AACjC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAM,IAAI,IAAI,MAAM,kBAAkB;AAC5C,QAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,MAAI,CAAC,UAAU,OAAO,SAAS,QAAS,kBAAkB,KAAK,MAAM,GAAG;AACtE,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC7C;AACA,SAAO;AACT;AAEO,SAAS,cAAc,OAAwB;AACpD,QAAM,OAAO,aAAa,KAAK;AAC/B,QAAM,OAAO,eAAe,KAAK,IAAI;AACrC,QAAM,WAAW,MAAM,QAAQ,KAAK,OAAO,IAAI,KAAK,QAAQ,IAAI,aAAa,EAAE,KAAK,EAAE,IAAI;AAC1F,MAAI,SAAS,QAAQ;AACnB,QAAI,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AACvD,UAAM,QAAQ,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,CAAC;AACxD,eAAW,WAAW,OAAO;AAC3B,YAAM,OAAO,aAAa,OAAO;AACjC,YAAM,WAAW,eAAe,KAAK,IAAI;AACzC,UAAI,aAAa,OAAQ,QAAO,KAAK,IAAI;AACzC,UAAI,aAAa,SAAU,QAAO,KAAK,IAAI;AAC3C,UAAI,aAAa,KAAM,QAAO,IAAI,IAAI;AACtC,UAAI,aAAa,SAAU,QAAO,KAAK,IAAI;AAC3C,UAAI,aAAa,QAAQ;AACvB,cAAM,OAAO,eAAe,aAAa,KAAK,KAAK,EAAE,IAAI;AACzD,YAAI,KAAM,QAAO,IAAI,IAAI,KAAK,IAAI;AAAA,MACpC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,MAAI,SAAS,YAAa,QAAO,GAAG,QAAQ;AAAA;AAAA;AAC5C,MAAI,SAAS,WAAW;AACtB,UAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,YAAY,aAAa,KAAK,KAAK,EAAE,KAAK,KAAK,GAAG,CAAC,GAAG,CAAC;AACvF,WAAO,GAAG,IAAI,OAAO,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC;AAAA;AAAA;AAAA,EAChD;AACA,MAAI,SAAS,YAAa,QAAO;AACjC,MAAI,SAAS,OAAQ,QAAO;AAC5B,MAAI,SAAS,cAAc;AACzB,WAAO,GAAG,SACP,KAAK,EACL,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,EACzB,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA,EACf;AACA,MAAI,SAAS,cAAc;AACzB,WAAO,GAAG,SAAS,QAAQ,CAAC;AAAA;AAAA,EAC9B;AACA,MAAI,SAAS,eAAe;AAC1B,WAAO,GAAG,SAAS,QAAQ,CAAC;AAAA;AAAA,EAC9B;AACA,MAAI,SAAS,YAAY;AACvB,WAAO,KAAK,SAAS,KAAK,EAAE,WAAW,MAAM,MAAM,CAAC;AAAA;AAAA,EACtD;AACA,MAAI,SAAS,YAAa,QAAO;AAAA,EAAW,SAAS,QAAQ,CAAC;AAAA;AAAA;AAAA;AAC9D,MAAI,SAAS,UAAW,QAAO,IAAI,eAAe,aAAa,KAAK,KAAK,EAAE,IAAI,KAAK,MAAM;AAC1F,MAAI,SAAS,QAAS,QAAO,eAAe,aAAa,KAAK,KAAK,EAAE,IAAI,KAAK;AAC9E,MAAI,SAAS,cAAc;AACzB,UAAM,MAAM,eAAe,aAAa,KAAK,KAAK,EAAE,GAAG;AACvD,WAAO,MAAM,IAAI,GAAG,KAAK,GAAG,MAAM;AAAA,EACpC;AACA,SAAO;AACT;AAEA,SAAS,aAAa,OAAyC;AAC7D,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAC5D,QACD,CAAC;AACP;AAEA,SAAS,wBAAwB,OAAgB,OAAuB;AACtE,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,qBAAqB,KAAK,EAAE;AAC5F,SAAO;AACT;AAEA,SAAS,kBAAkB,OAAuB;AAChD,QAAM,QAAQL,YAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,GAAG,EAAE;AACxE,QAAM,CAAC,IAAK,MAAM,CAAC,IAAK,KAAQ;AAChC,QAAM,CAAC,IAAK,MAAM,CAAC,IAAK,KAAQ;AAChC,QAAM,MAAM,MAAM,SAAS,KAAK;AAChC,SAAO,GAAG,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,MAAM,GAAG,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC;AAC1G;AAEA,SAAS,aAAa,OAAuB;AAC3C,QAAM,aAAa,MAChB,UAAU,MAAM,EAChB,QAAQ,wBAAwB,GAAG,EACnC,KAAK;AACR,UAAQ,cAAc,YAAY,MAAM,GAAG,GAAG;AAChD;AAEA,SAAS,eAAe,OAAgB,OAAuB;AAC7D,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,wBAAwB,KAAK,EAAE;AAC/F,SAAO;AACT;AAEA,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;AAEA,SAAS,YAAY,OAAoC;AACvD,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAEA,SAAS,aAAa,OAAwB;AAC5C,UAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAM,GAAG,GAAI;AAC/E;AAEA,SAAS,kBAAkB,OAAmC;AAC5D,SAAOA,YAAW,QAAQ,EACvB;AAAA,IACC,KAAK,UAAU;AAAA,MACb,kBAAkB,MAAM;AAAA,MACxB,mBAAmB,MAAM;AAAA,MACzB,OAAO,MAAM;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,SAAS,MAAM;AAAA,MACf,cAAc,MAAM;AAAA,MACpB,aAAa,MAAM;AAAA,MACnB,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH,EACC,OAAO,KAAK;AACjB;AAEA,SAAS,eACP,QAC+C;AAC/C,MAAI,WAAW,oBAAqB,QAAO;AAC3C,MAAI,WAAW,qBAAsB,QAAO;AAC5C,MAAI,WAAW,aAAc,QAAO;AACpC,MAAI,WAAW,mBAAoB,QAAO;AAC1C,SAAO;AACT;AAEA,SAAS,0BACP,eACA,UACA,SACA,SACA,SACM;AACN,gBAAc,iBAAiB;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ,EAAE,UAAU,QAAQ;AAAA,IAC5B,OAAO,KAAK,IAAI,GAAG,QAAQ,SAAS,IAAI;AAAA,EAC1C,CAAC;AACD,MAAI,QAAQ,mBAAmB,GAAG;AAChC,kBAAc,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ,EAAE,UAAU,QAAQ;AAAA,MAC5B,QAAQ,QAAQ;AAAA,IAClB,CAAC;AAAA,EACH;AACA,MAAI,QAAQ,cAAc;AACxB,kBAAc,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ,EAAE,UAAU,OAAO,QAAQ,aAAa;AAAA,IAClD,CAAC;AAAA,EACH;AACA,MAAI,QAAQ,mBAAmB;AAC7B,kBAAc,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ,EAAE,SAAS;AAAA,IACrB,CAAC;AAAA,EACH;AACA,MAAI,SAAS;AACX,kBAAc,iBAAiB;AAAA,MAC7B,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ;AAAA,QACN;AAAA,QACA,QAAQ,QAAQ;AAAA,QAChB,WAAW,QAAQ,YAAY,SAAS;AAAA,MAC1C;AAAA,IACF,CAAC;AACD,kBAAc,KAAK,gCAAgC;AAAA,MACjD;AAAA,MACA,SAAS,QAAQ,YAAY,qBAAqB;AAAA,MAClD,QAAQ,QAAQ;AAAA,MAChB,YAAY,QAAQ;AAAA,IACtB,CAAC;AACD;AAAA,EACF;AACA,gBAAc,KAAK,mCAAmC;AAAA,IACpD;AAAA,IACA,SAAS;AAAA,IACT,YAAY,QAAQ;AAAA,EACtB,CAAC;AACH;AAIA,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC9B,YACW,MACA,WACA,oBAAoB,OAC7B;AACA,UAAM,IAAI;AAJD;AACA;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AACF;;;AGn4GA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACLP,SAAS,wDAAwD;AAEjE,SAAS,eAAe;AAOxB,IAAM,oBAAoB;AAC1B,IAAM,mBAAmB;AAIzB,IAAM,sBAAsB;AAWrB,SAAS,qBACd,aACA,UAAiC,CAAC,GAClC;AACA,QAAM,MAAM,QAAQ,QAAQ,MAAM,YAAY,IAAI;AAClD,MAAI,UAA8B,CAAC;AACnC,MAAI,YAAY,KAAK,IAAI;AACzB,MAAI,gBAAsD;AAC1D,MAAI,kBAAkB;AAItB,MAAI,eAAqC;AAGzC,MAAI,cAAc;AAClB,MAAI;AAQJ,QAAM,aAAa,oBAAI,IAAsB;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,SAAO;AAAA,IACL,MAAM,OAAO,UAAwD;AACnE,yBAAmB;AAGnB,cAAQ,KAAK,EAAE,MAAM,MAAM,MAAM,SAAS,MAAM,QAAQ,CAAC;AACzD,YAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,UAAI,WAAW,IAAI,MAAM,IAAI,GAAG;AAC9B,cAAM,MAAM;AACZ;AAAA,MACF;AACA,UAAI,QAAQ,UAAU,oBAAoB,WAAW,mBAAmB;AAItE,aAAK,WAAW,EAAE,MAAM,MAAM,MAAS;AAAA,MACzC;AACA,UAAI,kBAAkB,QAAQ,UAAU,qBAAqB;AAC3D,cAAM,MAAM;AACZ;AAAA,MACF;AACA,uBAAiB;AAAA,IACnB;AAAA,IACA;AAAA,EACF;AAEA,WAAS,mBAAmB;AAC1B,QAAI,kBAAkB,MAAM;AAC1B;AAAA,IACF;AACA,oBAAgB,WAAW,MAAM;AAC/B,sBAAgB;AAGhB,WAAK,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,IACpC,GAAG,iBAAiB;AACpB,QAAI,WAAW,iBAAiB,OAAO,cAAc,UAAU,YAAY;AACzE,oBAAc,MAAM;AAAA,IACtB;AAAA,EACF;AAEA,WAAS,qBAAqB;AAC5B,QAAI,kBAAkB,MAAM;AAC1B,mBAAa,aAAa;AAC1B,sBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,iBAAe,QAAuB;AACpC,uBAAmB;AACnB,uBAAmB;AACnB,UAAM,WAAW;AACjB,uBAAmB;AAAA,EACrB;AAEA,WAAS,aAA4B;AACnC,QAAI,cAAc;AAChB,aAAO;AAAA,IACT;AACA,QAAI,aAAa;AACf,aAAO,QAAQ,OAAO,YAAY;AAAA,IACpC;AACA,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,QAAQ,QAAQ;AAAA,IACzB;AACA,uBAAmB;AACnB,UAAM,WAAW,YAAY;AAC3B,aAAO,QAAQ,SAAS,GAAG;AACzB,cAAM,SAAS,QAAQ,OAAO,GAAG,gBAAgB;AACjD,0BAAkB,OAAO;AACzB,oBAAY,KAAK,IAAI;AACrB,cAAM,YAAY,IAAI;AACtB,YAAI;AACF,gBAAM,YAAY,MAAM;AAAA,QAC1B,SAAS,OAAO;AACd,wBAAc;AACd,yBAAe;AACf,gBAAM;AAAA,QACR,UAAE;AACA,4BAAkB;AAClB,cAAI,QAAQ,SAAS;AACnB,gBAAI;AACF,sBAAQ,QAAQ;AAAA,gBACd,QAAQ,OAAO;AAAA,gBACf,iBAAiB,KAAK,IAAI,IAAI,IAAI,IAAI,aAAa,GAAI;AAAA,cACzD,CAAC;AAAA,YACH,QAAQ;AAAA,YAER;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,GAAG;AACH,mBAAe,QAAQ,QAAQ,MAAM;AACnC,qBAAe;AAAA,IACjB,CAAC;AACD,WAAO;AAAA,EACT;AAEA,WAAS,qBAA2B;AAClC,QAAI,aAAa;AACf,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEO,SAAS,yBAAyC;AACvD,MAAI;AACF,WAAO,QAAQ,QAAQ;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,uBACd,SACA,SACA,WAA+B,aACQ;AACvC,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,SAAS,MAAM;AAC3B,YAAQ,UAAU,EAAE,GAAG,SAAS,KAAI,oBAAI,KAAK,GAAE,YAAY,EAAE,CAAC;AAAA,EAChE,GAAG,gDAAgD;AACnD,MAAI,WAAW,SAAS,OAAO,MAAM,UAAU,YAAY;AACzD,UAAM,MAAM;AAAA,EACd;AACA,SAAO;AACT;AAEA,eAAsB,gBACpB,UACA,SAC4B;AAC5B,MAAI,CAAC,SAAS;AACZ,WAAO,MAAM,SAAS,KAAK;AAAA,EAC7B;AACA,QAAM,SAAS,QAAQ;AACvB,MAAI,OAAO,SAAS;AAClB,UAAM,OAAO;AAAA,EACf;AAOA,SAAO,MAAM,IAAI,QAA2B,CAAC,SAAS,WAAW;AAC/D,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,aAAyB;AACvC,UAAI,QAAS;AACb,gBAAU;AACV,aAAO,oBAAoB,SAAS,OAAO;AAC3C,eAAS;AAAA,IACX;AACA,UAAM,UAAU,MAAM,OAAO,MAAM,OAAO,OAAO,MAAM,CAAC;AAExD,WAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACxD,QAAI,OAAO,SAAS;AAClB,cAAQ;AACR;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,aAAO,SAAS,KAAK;AAAA,IACvB,SAAS,OAAO;AACd,aAAO,MAAM,OAAO,KAAK,CAAC;AAC1B;AAAA,IACF;AACA,SAAK,QAAQ,QAAQ,IAAI,EAAE;AAAA,MACzB,CAAC,WAAW,OAAO,MAAM,QAAQ,MAAM,CAAC;AAAA,MACxC,CAAC,UAAU,OAAO,MAAM,OAAO,KAAK,CAAC;AAAA,IACvC;AAAA,EACF,CAAC;AACH;;;AC9OA,SAAS,gCAAoD;AAetD,SAAS,kBACd,OACA,SAAsC,kBACnB;AACnB,QAAM,SAA4B;AAAA,IAChC,YAAY;AAAA,IACZ,WAAW;AAAA,IACX;AAAA,EACF;AACA,MAAI;AACF,QAAI,SAAS,OAAO,UAAU,UAAU;AACtC,YAAM,YAAY;AAMlB,UACE,OAAO,UAAU,SAAS,YAC1B,iCAAiC,KAAK,UAAU,IAAI,GACpD;AACA,eAAO,YAAY,UAAU;AAAA,MAC/B;AACA,UAAI,OAAO,UAAU,SAAS,YAAY,qBAAqB,KAAK,UAAU,IAAI,GAAG;AACnF,eAAO,gBAAgB,UAAU;AAAA,MACnC;AACA,YAAM,SAAS,OAAO,UAAU,UAAU,UAAU,UAAU;AAC9D,UAAI,OAAO,UAAU,MAAM,KAAK,UAAU,OAAO,UAAU,IAAK,QAAO,SAAS;AAAA,IAClF;AAAA,EACF,QAAQ;AAAA,EAER;AAIA,QAAM,OAAO,CAAC,OAAgB,QAAyB;AACrD,QAAI;AACF,aAAO,SAAS,OAAO,UAAU,WAAW,QAAQ,IAAI,OAAO,GAAG,IAAI;AAAA,IACxE,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,UAAU,KAAK,OAAO,SAAS;AACrC,QAAM,eAAe,KAAK,SAAS,WAAW;AAC9C,MACE,OAAO,iBAAiB,YACxB;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,SAAS,YAAY;AAEvB,WAAO,oBAAoB;AAC7B,QAAM,WAAW,KAAK,SAAS,WAAW;AAC1C,MACE,iBAAiB,iBACjB,OAAO,aAAa,YACpB,OAAO,UAAU,QAAQ,KACzB,YAAY,KACZ,YAAY;AAEZ,WAAO,mBAAmB;AAC5B,aAAW,OAAO,CAAC,UAAU,cAAc,gBAAgB,GAAG;AAC5D,UAAM,SAAS,KAAK,SAAS,GAAG;AAChC,QAAI,OAAO,WAAW,YAAY,OAAO,UAAU,MAAM,KAAK,UAAU,OAAO,UAAU,KAAK;AAC5F,aAAO,qBAAqB;AAC5B;AAAA,IACF;AAAA,EACF;AACA,QAAM,YAAY,KAAK,OAAO,WAAW;AACzC,MAAI,OAAO,cAAc,UAAW,QAAO,oBAAoB;AAC/D,SAAO;AACT;AAEO,SAAS,yBACd,eACA,SACA,OACA,OACM;AACN,MAAI;AACF,kBAAc,KAAK,SAAS;AAAA,MAC1B,GAAG,kBAAkB,OAAO,kBAAkB;AAAA,MAC9C,GAAI,MAAM,cACN,EAAE,iBAAiB,yBAAyB,MAAM,aAAa,MAAM,cAAc,EAAE,IACrF,CAAC;AAAA,MACL,YAAY,MAAM;AAAA,IACpB,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;;;AC/GA,SAAS,mCAAuD;AAChE,SAAS,cAAAM,mBAAkB;AAE3B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEA,IAAM,6CAAN,cAAyD,MAAM;AAAA,EAC3D,OAAO;AAAA,EAEhB,YAAY,SAAiB;AAC3B,UAAM,GAAG,OAAO,4CAA4C;AAC5D,SAAK,OAAO;AAAA,EACd;AACF;AAiBA,eAAsB,6BAA6B,OAQZ;AAErC,QAAM,aAAa,gBAAgB,MAAM,QAAQ,UAAU;AAC3D,MAAI,WAAW,YAAY,GAAG;AAC5B,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,QAAM,MAAM,0BAA0B;AAAA,IACpC,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,gBAAgB,MAAM;AAAA,IACtB,UAAU,WAAW;AAAA,IACrB,UAAUC,YAAW;AAAA,EACvB,CAAC;AACD,QAAM,UAAU,MAAM;AACtB,MAAI,WAAW,SAAS;AACtB,QACE,QAAQ,MAAM,aAAa,WAAW,gBACtC,QAAQ,MAAM,WAAW,WAAW,eACpC;AACA,YAAM,IAAI,MAAM,gEAAgE;AAAA,IAClF;AAAA,EACF;AACA,QAAM,SACJ,WAAW,UACP,QAAQ,QACR;AAAA,IACE,MAAM;AAAA,IACN,UAAU,QAAQ,MAAM;AAAA,IACxB,QAAQ,WAAW;AAAA,IACnB,OAAO,OAAO;AACZ,eAAS,SAAS,GAAG,SAAS,QAAQ,MAAM,QAAQ,UAAU,OAAO;AACnE,cAAM,QAAQ,MAAM,SAAS,QAAQ,SAAS,OAAO,IAAI;AAAA,IAC7D;AAAA,IACA,MAAM,UAAU;AAAA,IAAC;AAAA,EACnB;AACN,MAAI;AACF,UAAM,4BAA4B,MAAM,eAAe,KAAK;AAAA,MAC1D,GAAG;AAAA,MACH,UAAU,WAAW;AAAA,MACrB,QAAQ,WAAW;AAAA,MACnB,MAAM,OAAO,KAAK,KAAK,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH,SAAS,OAAO;AAId,UAAM,MAAM,cAAc,aAAa,GAAG,EAAE,MAAM,MAAM,MAAS;AACjE,UAAM;AAAA,EACR;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ,WAAW;AAAA,IACnB,OAAO,WAAW;AAAA,IAClB,SAAS,MAAM,cAAc;AAAA,EAC/B;AACF;AAKA,eAAsB,iCAKpB,OAIa;AACb,QAAM,gBAAgB,MAAM;AAC5B,QAAM,MAAM,MAAM,MAAM,EAAE,GAAG,MAAM,IAAI,IAAI;AAC3C,QAAM,SAAS,MAAM,MAAM,QAAQ;AACnC,MAAI,iBAAiB,OAAO,OAAO,yBAAyB,UAAU;AACpE,UAAM,wCAAwC,eAAe,GAAG;AAAA,EAClE;AACA,SAAO;AACT;AAEA,eAAsB,8BAA8B,OAsBjD;AACD,MAAI,MAAM,QAAQ,WAAW,YAAY,GAAG;AAC1C,QAAI,WAAW,MAAM,QAAS,OAAM,IAAI,MAAM,8CAA8C;AAC5F,WAAO,EAAE,kBAAkB,MAAM,QAAQ,OAAO;AAAA,EAClD;AACA,MAAI,MAAM,YAAY,iBAAiB,CAAC,MAAM,eAAe;AAC3D,UAAM,IAAI,2CAA2C,aAAa;AAAA,EACpE;AACA,MAAI,CAAC,MAAM,eAAe;AACxB,QAAI,WAAW,MAAM;AACnB,YAAM,IAAI,2CAA2C,MAAM,OAAO;AACpE,WAAO,EAAE,kBAAkB,MAAM,QAAQ,OAAO;AAAA,EAClD;AACA,MAAI;AACF,UAAM,sBAAsB,MAAM,6BAA6B;AAAA,MAC7D,eAAe,MAAM;AAAA,MACrB,WAAW,MAAM;AAAA,MACjB,aAAa,MAAM;AAAA,MACnB,gBAAgB,MAAM;AAAA,MACtB,SAAS,MAAM;AAAA,IACjB,CAAC;AACD,QAAI;AACF,YAAM,SAAS,2BAA2B;AAAA,QACxC,SAAS;AAAA,QACT,SAAS,MAAM,cAAc;AAAA,MAC/B,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AACA,YAAQ,KAAK,gCAAgC;AAAA,MAC3C,KAAK,oBAAoB;AAAA,MACzB,OAAO,oBAAoB;AAAA,MAC3B,QAAQ,oBAAoB;AAAA,IAC9B,CAAC;AACD,WAAO,EAAE,oBAAoB;AAAA,EAC/B,SAAS,OAAO;AACd,QAAI;AACF,YAAM,SAAS,2BAA2B;AAAA,QACxC,SAAS;AAAA,QACT,SAAS,MAAM,cAAc;AAAA,MAC/B,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,wCACpB,eACA,KACA,SAGe;AACf,MAAI,CAAC,iBAAiB,CAAC,IAAK;AAC5B,MAAI;AACF,UAAM,cAAc,aAAa,IAAI,GAAG;AACxC,QAAI;AACF,eAAS,2BAA2B;AAAA,QAClC,SAAS;AAAA,QACT,SAAS,cAAc;AAAA,MACzB,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF,QAAQ;AACN,YAAQ,MAAM,sDAAsD,EAAE,KAAK,IAAI,IAAI,CAAC;AAAA,EACtF;AACF;;;ACrMA,SAAS,oCAAAC,yCAAuD;AAChE;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,6BAAAC;AAAA,EACA,aAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AACP,SAAS,iDAAiD;AAC1D,SAAS,kCAAkC;AAG3C;AAAA,EACE;AAAA,EACA;AAAA,EACA,uCAAAC;AAAA,EACA;AAAA,EACA,kCAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,mDAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,8BAAAC;AAAA,OAmBK;;;AC9DP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,cAAAC,mBAAkB;;;AC1BpB,SAAS,4BACd,OACA,eACA,MAAM,KAAK,IAAI,GACN;AACT,SAAO;AAAA,IACL,OAAO,aAAa,UACpB,MAAM,eAAe,iBACrB,MAAM,kBACN,MAAM,eAAe,WAAW,QAAQ,IAAI;AAAA,EAC9C;AACF;;;ADi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iCAAoD;AAG7D,SAAS,kCAAAC,uCAAsC;AAiBxC,SAAS,+BAA+B,WAA6C;AAC1F,QAAM,aAAa,UAAU,KAAK;AAClC,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,SAAO,gBAAgB,UAAU;AACnC;AAEO,SAAS,2BAA2B,SAG/B;AACV,SAAO,QAAQ,WAAW,cAAc,QAAQ,cAAc;AAChE;AA4HO,IAAM,6BAAN,cAAyC,MAAM;AAAA,EAGpD,YACkB,OACA,QAChB;AACA,UAAM,kBAAkB,QAAQ,OAAO,UAAU,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO,CAAC;AAHlE;AACA;AAAA,EAGlB;AAAA,EAPS,OAAO;AAQlB;AAEA,IAAM,gCAAgC,oBAAI,QAA8C;AAEjF,SAAS,6BAA6B,OAAqD;AAChG,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,SACE,8BAA8B,IAAI,KAAK,MACtC,iBAAiB,6BAA6B,MAAM,QAAQ;AAEjE;AAEA,SAAS,2BAA2B,OAAqC,OAAyB;AAChG,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,kCAA8B,IAAI,OAAO,KAAK;AAC9C,WAAO;AAAA,EACT;AACA,SAAO,IAAI,2BAA2B,OAAO,KAAK;AACpD;AAEO,IAAe,6BAAf,cAAkD,MAAM;AAAA,EAGnD,YACQ,SACA,WACA,OACA,gBACA,YAChB;AACA,UAAM,iBAAiB,KAAK,KAAK,YAAY,GAAI;AACjD,UAAM,WAAW;AAAA,MACf,iBAAiB,SAAS,cAAc,KAAK;AAAA,MAC7C,aAAa,WAAW,UAAU,KAAK;AAAA,IACzC,EACG,OAAO,CAAC,SAAyB,SAAS,IAAI,EAC9C,KAAK,IAAI;AACZ,UAAM,SAAS,WAAW,KAAK,QAAQ,MAAM;AAC7C;AAAA,MACE,UAAU,mBACN,oBAAoB,OAAO,IAAI,MAAM,wCAAwC,cAAc,iCAC3F,oBAAoB,OAAO,IAAI,MAAM,kCAAkC,cAAc;AAAA,IAC3F;AAlBgB;AACA;AACA;AACA;AACA;AAehB,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mCAAN,cAA+C,2BAA2B;AAAA,EACtE,OAAO;AAAA,EAEhB,YACE,SACA,WACA,WAA2E,CAAC,GAC5E;AACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,kBAAkB;AAAA,MAC3B,SAAS,cAAc;AAAA,IACzB;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,oCAAN,cAAgD,2BAA2B;AAAA,EACvE,OAAO;AAAA,EAEhB,YACE,SACA,WACA,UACA;AACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,SAAS,cAAc;AAAA,IACzB;AACA,SAAK,OAAO;AAAA,EACd;AACF;AASA,IAAM,oCAAoC,oBAAI,QAAgB;AAGvD,SAAS,0CAA0C,OAAyB;AACjF,SACE,iBAAiB,oCACjB,kCAAkC,IAAI,KAAK;AAE/C;AAQO,IAAM,oDAAoD;AAC1D,IAAM,gDAAgD;AAEtD,SAAS,wCACd,SAAuB,KAAK,QACpB;AACR,QAAM,SAAS,OAAO;AACtB,QAAM,OAAO,OAAO,SAAS,MAAM,IAAI,KAAK,IAAI,KAAK,IAAI,QAAQ,CAAC,GAAG,IAAI,OAAO,OAAO,IAAI;AAC3F,SACE,oDACA,KAAK,MAAM,OAAO,6CAA6C;AAEnE;AAGO,IAAM,wDAAwD;AAI9D,SAAS,+CAAuF;AACrG,SAAO,EAAE,WAAW,sDAAsD;AAC5E;AAEA,SAAS,uCACP,SACA,SACA,SACM;AACN,MAAI;AACF,aAAS,gCAAgC,EAAE,SAAS,QAAQ,CAAC;AAAA,EAC/D,QAAQ;AAAA,EAER;AACF;AAEA,eAAe,qBAAqB,IAAY,QAAmD;AACjG,MAAI,QAAQ,QAAS,QAAO;AAC5B,MAAI,MAAM,EAAG,QAAO;AACpB,SAAO,MAAM,IAAI,QAAiB,CAAC,YAAY;AAC7C,UAAM,UAAU,MAAM;AACpB,mBAAa,KAAK;AAClB,cAAQ,KAAK;AAAA,IACf;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAQ,oBAAoB,SAAS,OAAO;AAC5C,cAAQ,IAAI;AAAA,IACd,GAAG,EAAE;AACL,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAC3D,CAAC;AACH;AAKO,IAAM,gCAAN,cAA4C,4BAA4B;AAAA,EAC7E,YACE,gBACA,YACgB,gBAChB;AACA,UAAM,gBAAgB,UAAU;AAFhB;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;AAIA,IAAM,2BAA2B;AAEjC,eAAe,MAAM,IAA2B;AAC9C,QAAM,IAAI,QAAc,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAC9D;AAQA,eAAsB,4BACpB,aACA,YAAY,iCACZ,WAA+C,CAAC,GAChD,QACe;AACf,MAAI;AACF,UAAM,2BAA2B,aAAa,WAAW,MAAM;AAAA,EACjE,SAAS,OAAO;AACd,QAAI,iBAAiB,6BAA6B,MAAM,SAAS,sBAAsB;AACrF,YAAM,IAAI,iCAAiC,YAAY,WAAW,WAAW;AAAA,QAC3E,gBAAgB,SAAS,kBAAkB;AAAA,QAC3C,YAAY,YAAY;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,UAAM;AAAA,EACR;AACF;AAEA,IAAM,uBAAN,cAAmC,MAAM;AAAA,EACvC,YAAY,WAAmB;AAC7B,UAAM,sCAAsC,SAAS,IAAI;AACzD,SAAK,OAAO;AAAA,EACd;AACF;AAEA,eAAsB,oBACpB,UACA,WACA,QACkB;AAClB,MAAI,QAAQ,QAAS,QAAO;AAC5B,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,QAAQ,KAAK;AAAA,MACjB;AAAA,MACA,GAAI,SACA;AAAA,QACE,IAAI,QAAe,CAAC,UAAU,WAAW;AACvC,2BAAiB,MACf,OAAO,OAAO,UAAU,IAAI,MAAM,mCAAmC,CAAC;AACxE,iBAAO,iBAAiB,SAAS,gBAAgB,EAAE,MAAM,KAAK,CAAC;AAC/D,cAAI,OAAO,QAAS,gBAAe;AAAA,QACrC,CAAC;AAAA,MACH,IACA,CAAC;AAAA,MACL,IAAI,QAAe,CAAC,GAAG,WAAW;AAChC,kBAAU,WAAW,MAAM,OAAO,IAAI,qBAAqB,SAAS,CAAC,GAAG,SAAS;AACjF,YAAI,WAAW,WAAW,WAAW,OAAO,QAAQ,UAAU,YAAY;AACxE,kBAAQ,MAAM;AAAA,QAChB;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,QAAQ,QAAS,QAAO;AAC5B,QAAI,iBAAiB,sBAAsB;AACzC,cAAQ;AAAA,QACN;AAAA,QACA,kBAAkB,KAAK;AAAA,MACzB;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,UAAE;AACA,QAAI,SAAS;AACX,mBAAa,OAAO;AAAA,IACtB;AACA,QAAI,eAAgB,SAAQ,oBAAoB,SAAS,cAAc;AAAA,EACzE;AACF;AAEA,eAAe,2CACb,UACA,SACA,QACsF;AACtF,MAAI,QAAQ,SAAS;AACnB,UAAM,OAAO,UAAU,IAAI,MAAM,8CAA8C;AAAA,EACjF;AACA,QAAM,UAAU,gDAAgD,UAAU,OAAO;AACjF,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK;AAAA,MACxB;AAAA,MACA,GAAI,SACA;AAAA,QACE,IAAI,QAAe,CAAC,UAAU,WAAW;AACvC,2BAAiB,MACf,OAAO,OAAO,UAAU,IAAI,MAAM,8CAA8C,CAAC;AACnF,iBAAO,iBAAiB,SAAS,gBAAgB,EAAE,MAAM,KAAK,CAAC;AAC/D,cAAI,OAAO,QAAS,gBAAe;AAAA,QACrC,CAAC;AAAA,MACH,IACA,CAAC;AAAA,MACL,IAAI,QAAe,CAAC,UAAU,WAAW;AACvC,kBAAU;AAAA,UACR,MAAM,OAAO,IAAI,qBAAqB,SAAS,wBAAwB,CAAC;AAAA,UACxE,SAAS;AAAA,QACX;AACA,gBAAQ,QAAQ;AAAA,MAClB,CAAC;AAAA,IACH,CAAC;AAAA,EACH,UAAE;AACA,QAAI,QAAS,cAAa,OAAO;AACjC,QAAI,eAAgB,SAAQ,oBAAoB,SAAS,cAAc;AAAA,EACzE;AACF;AAEA,eAAe,4BACb,aACkB;AAClB,MAAI,CAAC,YAAa,QAAO;AACzB,MAAI;AACF,UAAM,mCAAmC,WAAW;AACpD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,+BAA+B,YAAY,WAAW,KAAK,GAAG;AAChE,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT;AACF;AAEA,SAAS,4BACP,SACA,OACM;AACN,MAAI,EAAE,iBAAiB,6BAA6B;AAClD;AAAA,EACF;AACA,MAAI;AACF,aAAS,0BAA0B,EAAE,SAAS,MAAM,SAAS,OAAO,MAAM,MAAM,CAAC;AAAA,EACnF,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,mCACP,UACgC;AAChC,QAAM,eACJ,YAAY,OAAO,SAAS,iBAAiB,YAAY,SAAS,iBAAiB,OAC9E,SAAS,eACV;AACN,QAAM,UAAU,cAAc;AAC9B,QAAM,aAAaC,gCAA+B,cAAc,mBAAmB;AACnF,QAAM,YAAY,OAAO,YAAY,YAAY,QAAQ,SAAS;AAClE,MAAI,CAAC,aAAa,CAAC,YAAY;AAC7B,WAAO;AAAA,EACT;AACA,QAAM,WAAW,cAAc;AAC/B,QAAM,cAAcA,gCAA+B,cAAc,uBAAuB;AACxF,QAAM,WAAW,cAAc;AAC/B,QAAM,mBAAmB,cAAc;AACvC,QAAM,aAAa,cAAc;AACjC,SAAO;AAAA,IACL,GAAI,aAAa,CAAC,aAAa,EAAE,kBAAkB,QAAQ,IAAI,CAAC;AAAA,IAChE,GAAI,aAAa,EAAE,qBAAqB,WAAW,IAAI,CAAC;AAAA,IACxD,GAAI,aAAa,SAAY,EAAE,sBAAsB,SAAS,IAAI,CAAC;AAAA,IACnE,GAAI,OAAO,aAAa,YAAY,SAAS,SAAS,KAAK,CAAC,cACxD,EAAE,sBAAsB,SAAS,IACjC,CAAC;AAAA,IACL,GAAI,cAAc,EAAE,yBAAyB,YAAY,IAAI,CAAC;AAAA,IAC9D,GAAI,qBAAqB,SAAY,EAAE,0BAA0B,iBAAiB,IAAI,CAAC;AAAA,IACvF,GAAI,OAAO,eAAe,YAAY,WAAW,SAAS,IACtD,EAAE,oBAAoB,WAAW,IACjC,CAAC;AAAA,EACP;AACF;AAEA,eAAe,gCACb,UACA,eACkB;AAClB,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO;AACtD,QAAM,SAAS;AACf,QAAM,eACJ,OAAO,gBACP,OAAO,OAAO,iBAAiB,YAC/B,CAAC,MAAM,QAAQ,OAAO,YAAY,IAC7B,OAAO,eACR;AACN,MAAI,CAAC,gBAAgB,CAACA,gCAA+B,aAAa,mBAAmB,GAAG;AACtF,WAAO;AAAA,EACT;AACA,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,WAAW,KAAK;AAAA,IACpB;AAAA,EACF;AACA,QAAM,aAAa,gCAAgC,aAAa,oBAAoB;AACpF,MACE,QAAQ,aAAa,WACrB,YAAY,YAAY,KACxB,WAAW,UAAU,eAAe,wBACpC;AACA,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,cAAc,MAAM;AAAA,MAAiC;AAAA,MAAc,CAAC,QAClE,cAAc,eAAe,GAAG;AAAA,IAClC;AAAA,EACF;AACF;AAEA,SAAS,gCAAgC,UAAsD;AAC7F,QAAM,eACJ,YAAY,OAAO,SAAS,iBAAiB,YAAY,SAAS,iBAAiB,OAC9E,SAAS,eACV;AACN,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,WAAW,gCAAgC,aAAa,oBAAoB;AAClF,MAAI,UAAU,YAAY,EAAG,QAAO;AACpC,SAAO;AAAA,IACL,aAAa;AAAA,IACb,UAAU,YAAY,IAAI,KAAK,MAAM,SAAS,UAAU,IAAI,KAAK,IAAI;AAAA,EACvE;AACF;AAiHO,SAAS,kCACd,UACA,KAQA,SACA,YACA,QACA,QAAQ,OACsB;AAC9B,MAAI,yBAAyB;AAC7B,MAAI,4BAAwC,MAAM;AAClD,QAAM,qBAAqB,IAAI,QAAc,CAAC,YAAY;AACxD,gCAA4B;AAAA,EAC9B,CAAC;AACD,QAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,CAAC,iBAAiB;AAChB,+BAAyB;AACzB,WAAK,aAAa,KAAK,2BAA2B,yBAAyB;AAAA,IAC7E;AAAA,EACF;AACA,OAAK,OAAO;AAAA,IACV,MAAM;AACJ,UAAI,CAAC,uBAAwB,2BAA0B;AAAA,IACzD;AAAA,IACA,MAAM;AACJ,UAAI,CAAC,uBAAwB,2BAA0B;AAAA,IACzD;AAAA,EACF;AACA,SAAO,OAAO,OAAO,QAAQ,EAAE,SAAS,mBAAmB,CAAC;AAC9D;AAEA,eAAe,6BACb,UACA,KAQA,SACA,YACA,QACA,OACA,2BACkB;AAClB,QAAM,EAAE,IAAI,SAAS,IAAI;AACzB,QAAM,sBAAsB,CAAC,SAAiB,UAAyB;AACrE,UAAM,SAAS;AAAA,MACb,GAAG,kBAAkB,KAAK;AAAA,MAC1B,iBAAiBC,0BAAyB,IAAI,aAAa,IAAI,cAAc;AAAA,MAC7E;AAAA,IACF;AACA,QAAI;AACF,UAAI,SAAS,cAAe,UAAS,cAAc,KAAK,SAAS,MAAM;AAAA,UAClE,SAAQ,KAAK,SAAS,MAAM;AAAA,IACnC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,aAAa,SAAS;AAC5B,MAAI,cAAc,KAAK,CAAC,OAAO;AAC7B,WAAO;AAAA,EACT;AACA,QAAM,cAAc;AASpB,MACE,OAAO,YAAY,qBAAqB,cACxC,OAAO,YAAY,wBAAwB,YAC3C;AACA,YAAQ,MAAM,iEAAiE;AAAA,MAC7E,WAAW,OAAO,YAAY,cAAc,WAAW,YAAY,YAAY;AAAA,IACjF,CAAC;AACD,WAAO;AAAA,EACT;AAMA,QAAM,uBACJ,YAAY,OAAO,wBACnB,YAAY,OAAO,eAAe;AACpC,MAAI,QAAQ,SAAS;AACnB,WAAO;AAAA,EACT;AACA,MAAI;AAIF,UAAM,QAAQ,MAAM,UAAU,IAAI,IAAI,aAAa,IAAI,cAAc;AACrE,UAAM,iBACJ,OAAO,aAAa,UAAU,MAAM,eAAe,QAAQ,MAAM,eAAe;AAClF,UAAM,0BACJ,UAAU,QACV,OAAO,aAAa,cACpB,MAAM,eAAe,QACrB,MAAM,eAAe;AACvB,QAAI,CAAC,SAAU,CAAC,kBAAkB,CAAC,yBAA0B;AAC3D,cAAQ,MAAM,2DAA2D;AAAA,QACvE,gBAAgB,IAAI;AAAA,QACpB,eAAe;AAAA,QACf,UAAU,OAAO,YAAY;AAAA,QAC7B,YAAY,OAAO,cAAc;AAAA,QACjC,aAAa,OAAO,eAAe,QAAQ,OAAO,eAAe;AAAA,MACnE,CAAC;AACD,aAAO;AAAA,IACT;AAIA,QAAI,MAAM,iBAAiB;AACzB,aAAO;AAAA,IACT;AACA,QAAI,MAAM,eAAe,MAAM;AAC7B,aAAO;AAAA,IACT;AACA,UAAM,aAAa,MAAM;AACzB,UAAM,kBAAuC,iBAAiB,SAAS;AACvE,UAAM,gBAAgB,+BAA+B,MAAM,SAAS,OAAO;AAC3E,QAAI,CAAC,iBAAiB,cAAc,iBAAiB,aAAa;AAChE,cAAQ,MAAM,2DAA2D;AAAA,QACvE,gBAAgB,IAAI;AAAA,QACpB,SAAS,MAAM;AAAA,QACf,cAAc,eAAe,gBAAgB;AAAA,MAC/C,CAAC;AACD,aAAO;AAAA,IACT;AACA,UAAM,yBACJ,yBAAyB,yBACzB,yBAAyB;AAC3B,UAAM,oBAAoB,yBACtB,MAAM,2CAA2C,UAAU,aAAa,MAAM,IAC9E;AACJ,QAAI,QAAQ,QAAS,QAAO;AAE5B,UAAM,YAAYC,YAAW;AAC7B,UAAM,mBAAmB,+BAA+B,QAAQ;AAChE,UAAM,UAAU,MAAM,6BAA6B,IAAI;AAAA,MACrD,WAAW,IAAI;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,eAAe;AAAA,MACf,oBAAoB;AAAA,MACpB,UAAU;AAAA,MACV;AAAA,MACA,eAAe,QAAQ,IAAI;AAAA,MAC3B,oBAAoB,cAAc,aAAa;AAAA,MAC/C,cAAc,cAAc,aAAa;AAAA,MACzC,GAAI,oBAAoB,SACpB;AAAA,QACE,aAAa;AAAA,UACX,WAAW,IAAI;AAAA,UACf,QAAQ,IAAI;AAAA,UACZ,WAAW,IAAI;AAAA,UACf,UAAU,+BAA+B,IAAI,SAAS;AAAA,QACxD;AAAA,MACF,IACA,CAAC;AAAA,IACP,CAAC;AACD,QAAI,QAAQ,WAAW,WAAW;AAGhC,UAAI,QAAQ,WAAW,YAAa,QAAO;AAC3C,cAAQ,MAAM,0DAA0D;AAAA,QACtE,gBAAgB,IAAI;AAAA,QACpB,QAAQ,QAAQ;AAAA,MAClB,CAAC;AACD,aAAO;AAAA,IACT;AAEA,QAAI;AAKJ,UAAM,eAAe,KAAK,IAAI;AAC9B,UAAM,oBAAoB,OACxB,YACmC;AACnC,UACE,QAAQ,SAAS,gBACjB,QAAQ,WAAW,YAAY,KAC9B,QAAQ,WAAW,aAAa,+BAC/B,QAAQ,WAAW,aAAa,4BAClC;AACA,eAAO;AAAA,MACT;AACA,UAAI,CAAC,mBAAmB;AACtB,cAAM,IAAI,MAAM,8DAA8D;AAAA,MAChF;AACA,aAAO,MAAM,kCAAkC,IAAI;AAAA,QACjD,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB,gBAAgB,IAAI;AAAA,QACpB,eAAe,QAAQ,MAAM;AAAA,QAC7B,kBAAkB;AAAA,QAClB,kBAAkB;AAAA,QAClB,2BAA2B,QAAQ,MAAM;AAAA,QACzC,oBAAoB,kBAAkB;AAAA,QACtC,iBAAiB,kBAAkB;AAAA,QACnC,kBAAkB,QAAQ;AAAA,QAC1B,sBAAsB,QAAQ;AAAA,MAChC,CAAC;AAAA,IACH;AAEA,UAAM,mBAAmB,OAAO,YAAoB,WAAkC;AACpF,YAAM,2CAA2C,IAAI;AAAA,QACnD,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB;AAAA,QACA;AAAA,MACF,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAC1B;AAKA,UAAM,qBAAqB,YAA8B;AACvD,YAAM,iBAAiB,YAAY,IAAI;AACvC,UAAI,iBAAyC;AAC7C,UAAI;AACJ,UAAI,YAAmC;AACvC,UAAI,uBAAuB;AAC3B,UAAI;AACF,kBAAU,MAAM;AAAA,UACd;AAAA,UACA;AAAA,UACA;AAAA,YACE,WAAW,QAAQ,MAAM;AAAA,YACzB,UAAU,cAAc;AAAA,UAC1B;AAAA,UACA,QAAQ,SAAS,aAAa;AAAA,QAChC;AACA,oBAAY,MAAM,kBAAkB,OAAO;AAC3C,cAAM,oBAAoB,QAAQ;AAClC,cAAM,YAAY,MAAM,8BAA8B;AAAA,UACpD,SAAS,MAAM;AAAA,UACf,eAAe,SAAS;AAAA,UACxB,WAAW,IAAI;AAAA,UACf,aAAa,IAAI;AAAA,UACjB,gBAAgB,IAAI;AAAA,UACpB;AAAA,UACA,GAAI,SAAS,iBAAiB,EAAE,SAAS,SAAS,eAAe,IAAI,CAAC;AAAA,QACxE,CAAC;AACD,+BAAuB;AACvB,cAAM,EAAE,MAAM,IAAI,MAAM,iCAAiC;AAAA,UACvD,GAAI,SAAS,gBAAgB,EAAE,eAAe,SAAS,cAAc,IAAI,CAAC;AAAA,UAC1E,GAAI,UAAU,sBAAsB,EAAE,KAAK,UAAU,oBAAoB,IAAI,CAAC;AAAA,UAC9E,SAAS,MACP,oBAAoB,IAAI;AAAA,YACtB,WAAW,IAAI;AAAA,YACf,aAAa,IAAI;AAAA,YACjB,WAAW,IAAI;AAAA,YACf,QAAQ,IAAI;AAAA,YACZ,WAAW,IAAI;AAAA,YACf,gBAAgB,IAAI;AAAA,YACpB,eAAe;AAAA,YACf,oBAAoB;AAAA,YACpB,6BAA6B,QAAQ,MAAM;AAAA,YAC3C;AAAA,YACA,sBAAsB;AAAA,YACtB,GAAG;AAAA,YACH,sBAAsB,WAAW,MAAM;AAAA,YACvC,eAAe,QAAQ,IAAI;AAAA,YAC3B;AAAA,UACF,CAAC;AAAA,QACL,CAAC;AACD,YAAI,CAAC,SAAS,WAAW;AACvB,gBAAM,iBAAiB,UAAU,IAAI,6BAA6B;AAAA,QACpE;AACA,YAAI,MAAO,kBAAiB;AAC5B,eAAO;AAAA,MACT,SAAS,OAAO;AACd,YAAI,aAAa,CAAC;AAChB,gBAAM,iBAAiB,UAAU,IAAI,yBAAyB;AAChE,cAAM;AAAA,MACR,UAAE;AACA,cAAM,wBAAwB,OAAO,EAAE,MAAM,MAAM;AACjD,kBAAQ,KAAK,wCAAwC;AAAA,QACvD,CAAC;AACD,cAAM,+BAA+B,IAAI;AAAA,UACvC,WAAW,IAAI;AAAA,UACf,aAAa,IAAI;AAAA,UACjB,gBAAgB,IAAI;AAAA,UACpB;AAAA,UACA,eAAe;AAAA,UACf,oBAAoB;AAAA,QACtB,CAAC,EAAE,MAAM,CAAC,UAAU;AAClB,2BAAiB;AACjB,8BAAoB,qDAAqD,KAAK;AAAA,QAChF,CAAC;AACD,YAAI;AACF,mBAAS,gBAAgB,qBAAqB;AAAA,YAC5C,SAAS,MAAM;AAAA,YACf,SAAS;AAAA,YACT,iBAAiB,KAAK,IAAI,GAAG,YAAY,IAAI,IAAI,cAAc,IAAI;AAAA,UACrE,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,GAAG;AACH,UAAM,UAAU,kBAAkB;AAAA,MAChC,CAAC,eAAe,EAAE,MAAM,WAAoB,UAAU;AAAA,MACtD,CAAC,UAAU;AACT,4BAAoB,2DAA2D,KAAK;AACpF,eAAO,EAAE,MAAM,WAAoB,WAAW,MAAM;AAAA,MACtD;AAAA,IACF;AACA,8BAA0B,QAAQ,KAAK,MAAM,MAAS,CAAC;AACvD,QAAI;AACJ,UAAM,UAAU,MAAM,QAAQ,KAAK;AAAA,MACjC;AAAA,MACA,GAAI,SACA;AAAA,QACE,IAAI,QAA+B,CAAC,YAAY;AAC9C,2BAAiB,MAAM,QAAQ,EAAE,MAAM,YAAY,CAAC;AACpD,iBAAO,iBAAiB,SAAS,gBAAgB,EAAE,MAAM,KAAK,CAAC;AAC/D,cAAI,OAAO,QAAS,gBAAe;AAAA,QACrC,CAAC;AAAA,MACH,IACA,CAAC;AAAA,MACL,IAAI,QAA+B,CAAC,YAAY;AAC9C,kBAAU;AAAA,UACR,MAAM,QAAQ,EAAE,MAAM,YAAY,CAAC;AAAA,UACnC,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAAA,IACH,CAAC,EAAE,QAAQ,MAAM;AACf,UAAI,QAAS,cAAa,OAAO;AACjC,UAAI,eAAgB,SAAQ,oBAAoB,SAAS,cAAc;AAAA,IACzE,CAAC;AAID,WAAO,QAAQ,SAAS,YAAY,QAAQ,YAAY;AAAA,EAC1D,SAAS,OAAO;AAId,wBAAoB,2DAA2D,KAAK;AACpF,WAAO;AAAA,EACT;AACF;AAwBA,eAAsB,iBACpB,UACA,KACA,MACA,UAC6B;AAC7B,MAAI;AACF,WAAO,MAAM,qBAAqB,UAAU,KAAK,MAAM,QAAQ;AAAA,EACjE,SAAS,OAAO;AACd,QAAI,CAAC,0CAA0C,KAAK,EAAG,OAAM;AAC7D,UAAM,YAAY;AAClB,UAAM,OAAO,CAAC,SAAiB,WAAiD;AAC9E,UAAI,SAAS,cAAe,UAAS,cAAc,KAAK,SAAS,MAAM;AAAA,UAClE,SAAQ,KAAK,SAAS,MAAM;AAAA,IACnC;AACA,UAAM,WAAW;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,gBAAgB,IAAI;AAAA,MACpB,SAAS,UAAU;AAAA,MACnB,YAAY,UAAU;AAAA,MACtB,oBAAoB,UAAU;AAAA,IAChC;AACA,UAAM,SACJ,SAAS,0CACT,6CAA6C;AAC/C,QAAI,OAAO,aAAa,GAAG;AACzB;AAAA,QACE,SAAS;AAAA,QACT,UAAU;AAAA,QACV;AAAA,MACF;AACA;AAAA,QACE;AAAA,QACA;AAAA,MACF;AACA,YAAM;AAAA,IACR;AACA,WAAO,aAAa;AACpB,UAAM,UAAU,OACd,SAAS,2CAA2C,yCACpD;AACF,SAAK,sFAAsF;AAAA,MACzF,GAAG;AAAA,MACH,oBAAoB;AAAA,IACtB,CAAC;AACD,QAAI,CAAE,MAAM,qBAAqB,SAAS,SAAS,kBAAkB,GAAI;AAGvE;AAAA,QACE,SAAS;AAAA,QACT,UAAU;AAAA,QACV;AAAA,MACF;AACA,YAAM;AAAA,IACR;AACA,QAAI;AACF,YAAM,WAAW,MAAM,qBAAqB,UAAU,KAAK,MAAM,QAAQ;AACzE;AAAA,QACE,SAAS;AAAA,QACT,UAAU;AAAA,QACV;AAAA,MACF;AACA,aAAO;AAAA,IACT,SAAS,kBAAkB;AACzB;AAAA,QACE,SAAS;AAAA,QACT,UAAU;AAAA,QACV,SAAS,oBAAoB,UACzB,cACA,4BAA4B,mCAC1B,iBACA;AAAA,MACR;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,eAAe,qBACb,UACA,KACA,MACA,UAC6B;AAC7B,QAAM,EAAE,IAAI,SAAS,IAAI;AACzB,QAAM,KAAK,IAAI,MAAM;AACrB,QAAM,aAAa,SAAS;AAC5B,QAAM,qBAAqB,SAAS;AAOpC,MAAI,iBAAiB;AACrB,MAAI,gBAAsC;AAC1C,MAAI,kBAAwC;AAC5C,MAAI;AACJ,MAAI;AACJ,QAAM,UAAU,CAAC,YAAoE;AACnF,UAAM,kBAAkB,SAAS,6BAA6B;AAK9D,QAAI,CAAC,gBAAgB;AACnB,uBAAiB;AACjB,UAAI,sBAAsB;AACxB,4BAAoB,oBAAoB,SAAS,oBAAoB;AACrE,+BAAuB;AAAA,MACzB;AACA,UAAI,qBAAqB;AACvB,sBAAc,mBAAmB;AACjC,8BAAsB;AAAA,MACxB;AAAA,IACF;AACA,UAAM,iBAAiB,OAAO,6BAAqD;AACjF,YAAM,mBAAmB,IAAI;AAAA,QAC3B,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB,gBAAgB,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,QACA,aAAa,SAAS;AAAA,QACtB,GAAI,2BAA2B,EAAE,0BAA0B,KAAK,IAAI,CAAC;AAAA,MACvE,CAAC;AAAA,IACH;AACA,QAAI,iBAAiB;AACnB,UAAI,CAAC,iBAAiB;AAKpB,cAAM,cAAc;AACpB,cAAM,WAAW,cAAc,YAAY,MAAM,MAAM,MAAS,IAAI,QAAQ,QAAQ,GAAG;AAAA,UACrF,YAAY,MAAM,eAAe,IAAI;AAAA,QACvC;AACA,cAAM,UAAU,QAAQ,MAAM,CAAC,UAAU;AACvC,cAAI,oBAAoB,QAAS,mBAAkB;AACnD,gBAAM;AAAA,QACR,CAAC;AACD,0BAAkB;AAClB,wBAAgB;AAAA,MAClB;AACA,aAAO;AAAA,IACT;AACA,QAAI,CAAC,eAAe;AAClB,YAAM,UAAU,eAAe,KAAK;AACpC,YAAM,UAAU,QAAQ,MAAM,CAAC,UAAU;AACvC,YAAI,kBAAkB,QAAS,iBAAgB;AAC/C,cAAM;AAAA,MACR,CAAC;AACD,sBAAgB;AAAA,IAClB;AACA,WAAO;AAAA,EACT;AACA,QAAM,oBAAoB,MACxB,oBAAoB,kBAAkB,QAClC,mBAAmB,SACnB,IAAI,MAAM,2DAA2D;AAC3E,QAAM,6BAA6B,MAAY;AAC7C,QAAI,kBAAkB,oBAAoB,SAAS;AACjD,YAAM,kBAAkB;AAAA,IAC1B;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,aAAa,IAAI;AAAA,IACtC,WAAW,IAAI;AAAA,IACf,aAAa,IAAI;AAAA,IACjB,gBAAgB,IAAI;AAAA,IACpB;AAAA,IACA;AAAA,IACA,WAAW,IAAI;AAAA,IACf,SAAS,IAAI;AAAA,IACb,aAAa;AAAA,MACX,MAAM,SAAS;AAAA,MACf,qBAAqB,+BAA+B,UAAU,IAAI,OAAO;AAAA,IAC3E;AAAA,IACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,GAAI,IAAI,QAAQ,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC;AAAA,IACxC,GAAI,IAAI,cAAc,EAAE,aAAa,IAAI,YAAY,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAK1D,GAAI,IAAI,eAAe,EAAE,cAAc,IAAI,aAAa,IAAI,CAAC;AAAA,IAC7D;AAAA,IACA,mBAAmB,SAAS;AAAA,IAC5B,eAAe,iCAAiC,QAAQ;AAAA,IACxD,GAAI,qBAAqB,EAAE,YAAY,mBAAmB,IAAI,CAAC;AAAA,EACjE,CAAC;AAED,MAAI,oBAAoB;AACtB,2BAAuB,MAAM;AAM3B,WAAK,QAAQ,EAAE,MAAM,MAAM,MAAS;AAAA,IACtC;AACA,uBAAmB,iBAAiB,SAAS,sBAAsB,EAAE,MAAM,KAAK,CAAC;AAAA,EACnF;AACA,MAAI,oBAAoB,SAAS;AAC/B,UAAM,QAAQ;AACd,UAAM,kBAAkB;AAAA,EAC1B;AAeA,MAAI,uBACF,SAAS,SAAS,YACd;AAAA,IACE,eAAe,SAAS,MAAM;AAAA,IAC9B,YAAY,SAAS;AAAA,EACvB,KACC,SAAS,SAAS,cAAc,SAAS,SAAS,cACjD,SAAS,MAAM,aAAa,SAC5B,EAAE,eAAe,SAAS,MAAM,YAAY,WAAW,IACvD;AACR,MAAI,wBACF,SAAS,MAAM,aAAa,UAAU,SAAS,MAAM,aACjD;AAAA,IACE,SAAS,IAAI;AAAA,IACb,YAAY,SAAS,MAAM;AAAA,EAC7B,IACA;AACN,MAAI,sBAAsB,KAAK,IAAI;AACnC,MAAI,0BAAgD;AACpD,QAAM,+BAA+B,OAAO,QAAQ,UAAyB;AAC3E,UAAM,SAAS;AACf,QAAI,CAAC,UAAU,wBAAyB;AACxC,UAAM,aAAa,0BAA0B,UAAU,OAAO,OAAO,EAAE;AACvE,QAAI,eAAe,KAAM;AACzB,UAAM,aAAa,KAAK,IAAI,KAAQ,KAAK,MAAO,aAAa,MAAQ,CAAC,CAAC;AACvE,QAAI,CAAC,SAAS,KAAK,IAAI,IAAI,sBAAsB,WAAY;AAC7D,8BAA0B,+BAA+B;AAAA,MACvD,SAAS,OAAO;AAAA,MAChB;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,GAAI,SAAS,iBAAiB,EAAE,SAAS,SAAS,eAAe,IAAI,CAAC;AAAA,IACxE,CAAC,EACE,KAAK,MAAM;AACV,4BAAsB,KAAK,IAAI;AAAA,IACjC,CAAC,EACA,QAAQ,MAAM;AACb,gCAA0B;AAAA,IAC5B,CAAC;AACH,UAAM;AAAA,EACR;AAWA,QAAM,oBAAoB,OAAO,WAAkC;AAKjE,QAAI,WAAW,iBAAiB,SAAS,UAAU,sBAAsB;AACvE,YAAM,gBAAgB,qBAAqB;AAC3C,YAAM,QAAQ,MAAM,UAAU,IAAI,IAAI,aAAa,IAAI,cAAc;AACrE,UAAI,4BAA4B,OAAO,aAAa,EAAG;AAAA,IACzD;AACA,UAAM,UAAU;AAChB,UAAM,SAAS;AAAA,MACb,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,gBAAgB,IAAI;AAAA,MACpB,YAAY;AAAA,MACZ;AAAA,IACF;AACA,QAAI,SAAS,cAAe,UAAS,cAAc,KAAK,SAAS,MAAM;AAAA,QAClE,SAAQ,KAAK,SAAS,MAAM;AACjC,SAAK,QAAQ,EAAE,MAAM,MAAM,MAAS;AAAA,EACtC;AACA,wBAAsB,YAAY,MAAM;AACtC,UAAMC,aAAY;AAClB,QAAIA,YAAW;AACb,WAAK,2BAA2B,IAAI;AAAA,QAClC,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB,gBAAgB,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,QACA,eAAeA,WAAU;AAAA,QACzB,YAAYA,WAAU;AAAA,QACtB,aAAa,SAAS,SAAS;AAAA,MACjC,CAAC,EACE,KAAK,OAAO,WAAW;AACtB,YAAIA,eAAc,qBAAsB;AACxC,YAAI,CAAC,OAAO,aAAa;AAIvB,gBAAM,kBAAkB,OAAO,KAAK;AACpC;AAAA,QACF;AACA,YAAI,OAAO,UAAU,SAAS;AAM5B,gBAAM,kBAAkB,OAAO,KAAK;AACpC;AAAA,QACF;AAMA,YAAI,OAAO,iBAAiB,OAAO,UAAU,sBAAsB;AACjE,eAAK,6BAA6B,EAAE,MAAM,MAAM,MAAS;AAAA,QAC3D;AAAA,MACF,CAAC,EACA,MAAM,MAAM,MAAS;AACxB;AAAA,IACF;AACA,SAAK,iBAAiB,IAAI;AAAA,MACxB,WAAW,IAAI;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA;AAAA,IACF,CAAC,EACE,KAAK,OAAO,YAAY;AACvB,UAAIA,eAAc,qBAAsB;AAIxC,UAAI,CAAC,SAAS;AACZ,cAAM,kBAAkB,aAAa;AACrC;AAAA,MACF;AACA,WAAK,6BAA6B,EAAE,MAAM,MAAM,MAAS;AAAA,IAC3D,CAAC,EACA,MAAM,MAAM,MAAS;AAAA,EAC1B,GAAG,SAAS,4BAA4B,GAAM;AAC9C,MAAI,WAAW,uBAAuB,OAAO,oBAAoB,UAAU,YAAY;AACrF,wBAAoB,MAAM;AAAA,EAC5B;AAKA,MAAI,SAAS,SAAS,WAAW;AAC/B,UAAM,QAAQ;AACd,UAAM,IAAI;AAAA,MACR,IAAI;AAAA,MACJ,SAAS,MAAM;AAAA,MACf,SAAS;AAAA,MACT,SAAS,MAAM;AAAA,IACjB;AAAA,EACF;AACA,MAAI,SAAS,SAAS,UAAU;AAC9B,UAAM,QAAQ;AACd,QAAI,SAAS,WAAW,cAAc;AACpC,YAAM,IAAI;AAAA,QACR,IAAI;AAAA,QACJ,SAAS,MAAM;AAAA,QACf,SAAS;AAAA,QACT,SAAS,MAAM;AAAA,QACf,SAAS,MAAM;AAAA,QACf,SAAS,MAAM;AAAA,MACjB;AAAA,IACF;AACA,UAAM,IAAI,4BAA4B,IAAI,gBAAgB,SAAS,MAAM,YAAY;AAAA,MACnF,SAAS,SAAS,MAAM;AAAA,MACxB,YAAY,SAAS,MAAM;AAAA,MAC3B,UAAU,SAAS,MAAM;AAAA,IAC3B,CAAC;AAAA,EACH;AAIA,MAAI,SAAS,SAAS,WAAW;AAC/B,UAAM,gBAAgB,SAAS,MAAM;AACrC,QAAI,qBAAuD;AAC3D,QAAI;AACJ,QAAI;AACJ,QAAI,oBASO;AACX,QAAI;AAKF,YAAM,2BAA2B,SAAS,MAAM,4BAA4B;AAC5E,YAAM,WAAW,2BACb,OACA,MAAM,0BAA0B,IAAI,IAAI,aAAa,IAAI,SAAS;AAStE,YAAM,wBACJ,CAAC,4BACD,SAAS,MAAM,SAAS,QAAQ,WAAW,UAC3C,mCAAmC,QAAQ,MAAM,QAChD,MAAM,mCAAmC,IAAI,IAAI,aAAa,IAAI,SAAS;AAC9E,YAAM,0BACJ,CAAC,4BACD,CAAC,yBACD,SAAS,MAAM,SAAS,QAAQ,WAAW,UAC3C,mCAAmC,QAAQ,MAAM,OAC7C,+BAA+B,QAAQ,IACvC;AACN,UAAI,gBAAgB,2BAChB,OACA,wBACG,SAAS,MAAM,eAAe,OAC9B,2BAA2B,SAAS,MAAM,eAAe;AAChE,YAAM,gBACJ,SAAS,MAAM,SAAS,QAAQ,WAAW,SACvC,0BACA,SAAS,MAAM;AACrB,YAAM,qBAAqB,SAAS,MAAM,SAAS;AAGnD,UACE,CAAC,6BACC,SAAS,MAAM,SAAS,QAAQ,WAAW,gBAC1C,SAAS,MAAM,mBACd,SAAS,MAAM,iCAAiC,SACjD,SAAS,MAAM,SAAS,QAAQ,WAAW,UAC1C,mCAAmC,aAAa,MAAM,OAC1D;AACA,cAAM,sBAAsB,OAAO,WAAW;AAC9C,cAAM,sBAAsB,gCAAgC,aAAa;AACzE,cAAM,QAAQ,MAAM,8BAA8B,IAAI;AAAA,UACpD,WAAW,IAAI;AAAA,UACf,aAAa,IAAI;AAAA,UACjB,gBAAgB,IAAI;AAAA,UACpB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AACD,YAAI,MAAM,WAAW,WAAW;AAC9B,cAAI,MAAM,SAAS,iBAAiB,MAAM,SAAS,oBAAoB;AACrE,kBAAM,IAAI;AAAA,cACR,IAAI;AAAA,cACJ,MAAM,OAAO,cAAc;AAAA,YAC7B;AAAA,UACF;AACA,gBAAM,IAAI;AAAA,YACR,IAAI;AAAA,YACJ,MAAM,OAAO,cAAc;AAAA,YAC3B,MAAM,SAAS,uBAAuB,qBAAqB;AAAA,YAC3D,MAAM,OAAO,YAAY,SAAS,MAAM;AAAA,UAC1C;AAAA,QACF;AACA,wBAAgB,MAAM,MAAM,eAAe;AAC3C,cAAM,mBAAmB,MAAM,MAAM,SAAS,QAAQ;AACtD,YAAI,CAAC,kBAAkB;AACrB,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,4BAAoB;AAAA,UAClB,IAAI;AAAA,UACJ;AAAA,UACA,qBAAqB,MAAM,MAAM;AAAA,UACjC,oBAAoB,MAAM,oBAAoB,sBAAsB;AAAA,UACpE,kBAAkB,MAAM,uBAAuB,OAAO,sBAAsB;AAAA,UAC5E,uBAAuB;AAAA,QACzB;AAAA,MACF,WACE,CAAC,4BACD,SAAS,MAAM,SAAS,QAAQ,WAAW,UAC3C,CAAC,oBACD;AACA,cAAM,IAAI;AAAA,UACR,IAAI;AAAA,UACJ;AAAA,UACA;AAAA,UACA,SAAS,MAAM;AAAA,QACjB;AAAA,MACF;AAUA,YAAM,0BAA0B,oBAAI,KAAK;AACzC,YAAM,uBACJ,iBAAiB,OAAO,kBAAkB,WACrC,gBACD;AACN,YAAM,qBAAqB,MAAM;AAAA,QAC/B;AAAA,QACA,SAAS;AAAA,MACX;AACA,YAAM,kBACJ,sBAAsB,OAAO,uBAAuB,WAC/C,qBACD;AACN,YAAM,cAAc,MAAM,oCAAoC,UAAU,iBAAiB;AAAA,QACvF,WAAW,IAAI;AAAA,QACf,UAAU;AAAA,QACV,GAAI,SAAS,gBACT;AAAA,UACE,0BAA0B,OAAO,QAAQ;AACvC,gBAAI;AACF,qBAAO,MAAM,8BAA8B,SAAS,eAAgB,IAAI,KAAK;AAAA,gBAC3E,OAAO,IAAI;AAAA,gBACX,QAAQ,IAAI;AAAA,cACd,CAAC;AAAA,YACH,SAAS,OAAO;AACd,kBAAI,iBAAiB,8BAA8B;AACjD,sBAAM,IAAI,+BAA+B,MAAM,MAAM,MAAM,SAAS;AAAA,kBAClE,WAAW,MAAM;AAAA,kBACjB,OAAO;AAAA,gBACT,CAAC;AAAA,cACH;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,IACA,CAAC;AAAA,QACL,iBAAiB,IAAI;AAAA,QACrB,GAAI,IAAI,cAAc,EAAE,aAAa,IAAI,YAAY,IAAI,CAAC;AAAA,QAC1D,GAAI,SAAS,iBAAiB,EAAE,SAAS,SAAS,eAAe,IAAI,CAAC;AAAA,QACtE,GAAI,SAAS,0BACT,EAAE,yBAAyB,SAAS,wBAAwB,IAC5D,CAAC;AAAA,QACL,uBAAuB,OAAO,gBAAgB,QAAQ,oBAAoB;AACxE,cAAI,IAAI,YAAY,QAAS;AAC7B,cAAI,CAAC,UAAU,CAAC;AACd,kBAAM,IAAI,MAAM,sDAAsD;AACxE,qCAA2B;AAC3B,gBAAM,UAAU,MAAM;AAAA,YACpB;AAAA,YACA;AAAA,UACF;AACA,gBAAM,cAAc,OAAO;AAC3B,gBAAM,yBAAyB,IAAI;AAAA,YACjC,WAAW,IAAI;AAAA,YACf,aAAa,IAAI;AAAA,YACjB,gBAAgB,IAAI;AAAA,YACpB;AAAA,YACA;AAAA,YACA,oBAAoB,QAAQ;AAAA,YAC5B,qBAAqB,mBAAmB,MAAM;AAAA,YAC9C,kBAAkB,mBAAmB,oBAAoB;AAAA,YACzD,SAAS,OAAO;AAAA,YAChB,UAAU,eAAe,iBAAiB;AAAA,YAC1C,OAAO,OAAO;AAAA,YACd,cAAc,OAAO;AAAA,YACrB,eAAe,OAAO;AAAA,UACxB,CAAC;AACD,sCAA4B;AAC5B,qCAA2B,QAAQ;AAAA,QACrC;AAAA,QACA,kBAAkB,OAAO,YAAY;AACnC,+BAAqB;AACrB,kCAAwB;AAAA,YACtB,SAAS,IAAI;AAAA,YACb,YAAY,QAAQ;AAAA,UACtB;AACA,gCAAsB,KAAK,IAAI;AAC/B,cACE,4BACA,CAAE,MAAM;AAAA,YACN;AAAA,YACA,QAAQ;AAAA,YACR;AAAA,UACF,GACA;AACA,kBAAM,IAAI,MAAM,8DAA8D;AAAA,UAChF;AACA,cACE,sBACC,kBAAkB,sBAAsB,kBAAkB,mBAC3D;AACA,gBAAI,QAAQ,cAAc,SAAS;AACjC,oBAAM,IAAI;AAAA,gBACR;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AACA,gBAAI,kBAAkB,oBAAoB;AACxC,kBACE,CAAE,MAAM;AAAA,gBACN;AAAA,gBACA,QAAQ;AAAA,gBACR,kBAAkB;AAAA,cACpB,GACA;AACA,sBAAM,IAAI;AAAA,kBACR;AAAA,kBACA;AAAA,gBACF;AAAA,cACF;AAAA,YACF,OAAO;AACL,oBAAM,WAAW,MAAM;AAAA,gBACrB;AAAA,gBACA,QAAQ;AAAA,cACV;AACA,kBACE,kBAAkB,yBAClB,kBAAkB,sBAAsB,QAAQ,SAAS,KACzD;AACA,sBAAM,IAAI;AAAA,kBACR;AAAA,kBACA;AAAA,gBACF;AAAA,cACF;AACA,gCAAkB,wBAAwB;AAAA,YAC5C;AAAA,UACF;AACA,gBAAMC,kBAAiB;AAAA,YACrB,MAAM,oCAAoC,SAAS,oBAAoB;AAAA,YACvE,QAAQ;AAAA,UACV;AACA,gBAAM,WAAW,MAAM,4BAA4B,IAAI;AAAA,YACrD,WAAW,IAAI;AAAA,YACf,aAAa,IAAI;AAAA,YACjB,gBAAgB,IAAI;AAAA,YACpB;AAAA,YACA,qBAAqB,mBAAmB,MAAM;AAAA,YAC9C,GAAI,4BAA4B,EAAE,0BAA0B,IAAI,CAAC;AAAA,YACjE,GAAI,QAAQ,qBACR,EAAE,oBAAoB,QAAQ,mBAAmB,IACjD,CAAC;AAAA,YACL,YAAY,QAAQ;AAAA,YACpB,iBAAiB,QAAQ;AAAA,YACzB,aAAaA;AAAA,YACb,GAAI,QAAQ,cAAc,UACtB;AAAA,cACE,mBAAmB;AAAA,cACnB,oBAAoB,IAAI;AAAA,gBACtB,wBAAwB,QAAQ,IAAI,SAAS,sBAAsB;AAAA,cACrE;AAAA,YACF,IACA,CAAC;AAAA,YACL;AAAA;AAAA;AAAA,YAGA,mBAAmB,SAAS;AAAA,UAC9B,CAAC;AACD,cAAI,CAAC,SAAS,UAAU;AACtB,kBAAM,IAAI,4BAA4B,IAAI,gBAAgB,aAAa;AAAA,UACzE;AACA,cAAI,QAAQ,cAAc,SAAS;AACjC,kBAAM,gBAAgB,UAAU,QAAQ,YAAY;AAAA,cAClD,SAAS,SAAS,MAAM;AAAA,cACxB,aAAa,IAAI;AAAA,cACjB,gBAAgB,IAAI;AAAA,YACtB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,UAC1B;AACA,qCAA2B;AAAA,QAC7B;AAAA,QACA,6BAA6B,OAAO,eAA2C;AAC7E,cAAI,CAAC,qBAAqB,WAAW,aAAa,kBAAkB,kBAAkB;AACpF,kBAAM,IAAI;AAAA,cACR;AAAA,cACA,6BAA6B,WAAW,QAAQ;AAAA,YAClD;AAAA,UACF;AACA,cAAI,kBAAkB,kBAAkB;AACtC,kBAAM,UAAU,kBAAkB;AAClC,gBAAI,CAAC,SAAS;AACZ,oBAAM,IAAI;AAAA,gBACR;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AACA,kBAAM,UAAU,MAAM,mCAAmC,IAAI;AAAA,cAC3D,WAAW,IAAI;AAAA,cACf,aAAa,IAAI;AAAA,cACjB,gBAAgB,IAAI;AAAA,cACpB,SAAS,SAAS,MAAM;AAAA,cACxB,YAAY;AAAA,cACZ,qBAAqB,kBAAkB;AAAA,cACvC,MAAM;AAAA,cACN,eAAe,kBAAkB,iBAAiB;AAAA,cAClD,YAAY,kBAAkB,iBAAiB;AAAA,cAC/C,oBAAoB,QAAQ;AAAA,cAC5B,iBAAiB,QAAQ;AAAA,cACzB,qBAAqB,kBAAkB;AAAA,YACzC,CAAC;AACD,gBAAI,CAAC,SAAS;AACZ,oBAAM,IAAI,4BAA4B,IAAI,gBAAgB,aAAa;AAAA,YACzE;AACA,8BAAkB,qBAAqB,QAAQ;AAAA,UACjD;AACA,gBAAM,YAAY,MAAM,4BAA4B,IAAI;AAAA,YACtD,WAAW,IAAI;AAAA,YACf,aAAa,IAAI;AAAA,YACjB,gBAAgB,IAAI;AAAA,YACpB;AAAA,YACA,qBAAqB,kBAAkB;AAAA,UACzC,CAAC;AACD,cAAI,CAAC,UAAU,OAAO;AACpB,kBAAM,IAAI,4BAA4B,IAAI,gBAAgB,aAAa;AAAA,UACzE;AAAA,QACF;AAAA,MACF,CAAC;AACD,2BAAqB;AACrB,iCAA2B;AAM3B,UAAI,SAAS,+BAA+B;AAC1C,cAAM,SAAS,8BAA8B,aAAa;AAAA,UACxD,gBAAgB,IAAI;AAAA,QACtB,CAAC;AAAA,MACH,OAAO;AACL,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,YACE,gBAAgB,IAAI;AAAA,UACtB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,YAAM,6BAA6B,IAAI;AACvC,iCAA2B;AAkB3B,YAAM,iBAAiB;AAAA,QACrB,MAAM,oCAAoC,aAAa,oBAAoB;AAAA,QAC3E,YAAY;AAAA,MACd;AACA,iCAA2B;AAC3B,UACE,qBACA,CAAC,YAAY,sBACb,YAAY,iBAAiB,aAAa,kBAAkB,kBAC5D;AACA,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,YAAM,YAAY,MAAM,oBAAoB,IAAI;AAAA,QAC9C,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB,gBAAgB,IAAI;AAAA,QACpB;AAAA,QACA,YAAY,YAAY;AAAA;AAAA;AAAA,QAGxB,cAAc;AAAA,QACd,iBAAiB,YAAY;AAAA,QAC7B,aAAa;AAAA,QACb,GAAI,2BACA,EAAE,gBAAgB,EAAE,aAAa,yBAAyB,EAAE,IAC5D,YAAY,qBACV,EAAE,oBAAoB,YAAY,mBAAmB,IACrD,oBACE;AAAA,UACE,mBAAmB;AAAA,YACjB,IAAI,kBAAkB;AAAA,YACtB,kBAAkB,kBAAkB;AAAA,UACtC;AAAA,QACF,IACA,CAAC;AAAA,QACT;AAAA,MACF,CAAC;AACD,UAAI,CAAC,UAAU,aAAa,CAAC,UAAU,OAAO;AAK5C,cAAM,aAAa,MAAM,4BAA4B,WAAW;AAChE,YAAI,cAAc,qBAAqB,CAAC,YAAY,oBAAoB;AACtE,gBAAM,6BAA6B,IAAI;AAAA,YACrC,WAAW,IAAI;AAAA,YACf,aAAa,IAAI;AAAA,YACjB,gBAAgB,IAAI;AAAA,YACpB;AAAA,YACA,qBAAqB,kBAAkB;AAAA,YACvC,aAAa,UAAU,UAAU;AAAA,YACjC,WAAW;AAAA,UACb,CAAC;AAAA,QACH,WAAW,YAAY;AACrB,gBAAM,kBAAkB,IAAI;AAAA,YAC1B,WAAW,IAAI;AAAA,YACf,aAAa,IAAI;AAAA,YACjB,gBAAgB,IAAI;AAAA,YACpB;AAAA,UACF,CAAC;AAAA,QACH;AACA,cAAM,QAAQ;AACd,cAAM,IAAI,4BAA4B,IAAI,gBAAgB,aAAa;AAAA,MACzE;AACA,6BAAuB;AAAA,QACrB,eAAe,UAAU,MAAM;AAAA,QAC/B;AAAA,MACF;AACA,iCAA2B;AAC3B,aAAO,EAAE,aAAa,YAAY,UAAU,MAAM,YAAY,QAAQ;AAAA,IACxE,SAAS,OAAO;AACd,UAAI,iBAAiB,6BAA6B;AAChD,cAAM,4BAA4B,kBAAkB;AACpD,cAAM,QAAQ;AACd,cAAM;AAAA,MACR;AACA,YAAM,aAAa,MAAM,4BAA4B,kBAAkB;AAMvE,UAAI,YAAY;AACd,cAAM,wBAAwB,iBAAiB;AAC/C,YAAI,qBAAqB,CAAC,oBAAoB,oBAAoB;AAChE,gBAAM,6BAA6B,IAAI;AAAA,YACrC,WAAW,IAAI;AAAA,YACf,aAAa,IAAI;AAAA,YACjB,gBAAgB,IAAI;AAAA,YACpB;AAAA,YACA,qBAAqB,kBAAkB;AAAA,YACvC,aAAa,wBACT,oCACA,iBAAiB,iCACf,MAAM,OACN;AAAA,YACN,WAAW,wBACP,MAAM,YACN,iBAAiB,iCACf,MAAM,YACN;AAAA,YACN,GAAI,wBAAwB,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAAA,UAC7D,CAAC;AAAA,QACH,OAAO;AACL,gBAAM,kBAAkB,IAAI;AAAA,YAC1B,WAAW,IAAI;AAAA,YACf,aAAa,IAAI;AAAA,YACjB,gBAAgB,IAAI;AAAA,YACpB;AAAA,YACA,GAAI,wBAAwB,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAAA,UAC7D,CAAC;AAAA,QACH;AAAA,MACF;AACA,YAAM,QAAQ;AACd,kCAA4B,SAAS,gBAAgB,KAAK;AAC1D,UACE,cACA,sBACA,iBAAiB,oCACjB,MAAM,eAAe,mBAAmB,eACvC,mBAAmB,WAAW,aAAa,mBAAmB,WAAW,eAC1E,CAAC,mBAAmB,oBACpB;AACA,0CAAkC,IAAI,KAAK;AAAA,MAC7C;AACA,YAAM,2BAA2B,oBAAoB,qBAAqB,UAAU,KAAK;AAAA,IAC3F;AAAA,EACF;AAOA,MAAI;AACF,QAAI,aAAa,SAAS,MAAM;AAChC,QAAI,SAAS,MAAM,aAAa,WAAW;AACzC,oBAAc,MAAM,YAAY,UAAU,GAAG,GAAG;AAChD,6BAAuB,EAAE,eAAe,YAAY,WAAW;AAAA,IACjE;AACA,+BAA2B;AAM3B,UAAM,OAAO,MAAM,UAAU,IAAI,IAAI,aAAa,IAAI,cAAc;AACpE,QACE,CAAC,QACD,KAAK,aAAa,UAClB,KAAK,eAAe,cACpB,KAAK,eAAe,MACpB;AACA,YAAM,IAAI,4BAA4B,IAAI,gBAAgB,MAAM,cAAc,UAAU;AAAA,IAC1F;AACA,QAAI;AACJ,QAAI;AACF,YAAM,YAAY,SAAS,4BAA4B;AACvD,oBAAc,MAAM,UAAU,UAAU,KAAK,aAAa;AAAA,QACxD,WAAW,IAAI;AAAA,QACf,UAAU;AAAA,QACV,iBAAiB,IAAI;AAAA,QACrB,GAAI,IAAI,cAAc,EAAE,aAAa,IAAI,YAAY,IAAI,CAAC;AAAA,QAC1D,GAAI,SAAS,iBAAiB,EAAE,SAAS,SAAS,eAAe,IAAI,CAAC;AAAA,MACxE,CAAC;AACD,iCAA2B;AAM3B,UAAI,SAAS,gCAAgC;AAC3C,cAAM,SAAS,+BAA+B,WAAW;AAAA,MAC3D,OAAO;AACL,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,YACE,gBAAgB,IAAI;AAAA,UACtB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,8BAAwB;AAAA,QACtB,SAAS,IAAI;AAAA,QACb,YAAY,YAAY;AAAA,MAC1B;AACA,YAAM,6BAA6B,IAAI;AACvC,iCAA2B;AAAA,IAC7B,SAAS,OAAO;AACd,UAAI,CAAC,+BAA+B,IAAI,SAAS,KAAK,GAAG;AACvD,cAAM,2BAA2B,UAAU,KAAK;AAAA,MAClD;AACA,YAAM,SAAS,MAAM,0BAA0B,IAAI;AAAA,QACjD,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB,gBAAgB,IAAI;AAAA,QACpB,eAAe;AAAA,QACf,oBAAoB,KAAK;AAAA,QACzB,iBAAiB,IAAI;AAAA,MACvB,CAAC;AACD,UAAI,OAAO,WAAW,UAAU;AAC9B,cAAM,SAAS,gBAAgB;AAAA,UAC7B,gBAAgB,IAAI;AAAA,UACpB,YAAY,KAAK;AAAA,UACjB,YAAY,OAAO,MAAM;AAAA,QAC3B,CAAC;AACD,cAAM,IAAI;AAAA,UACR,IAAI;AAAA,UACJ,OAAO,MAAM;AAAA,UACb,KAAK;AAAA,QACP;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,IAAI;AAAA,QACJ,OAAO,OAAO,cAAc;AAAA,MAC9B;AAAA,IACF;AACA,+BAA2B;AAC3B,WAAO,EAAE,aAAa,YAAY,QAAQ;AAAA,EAC5C,SAAS,OAAO;AACd,UAAM,QAAQ;AACd,gCAA4B,SAAS,gBAAgB,KAAK;AAC1D,UAAM;AAAA,EACR;AACF;AAQA,eAAe,YACb,UACA,KACiC;AACjC,QAAM,EAAE,IAAI,SAAS,IAAI;AACzB,QAAM,WAAW,KAAK,IAAI,IAAI,SAAS;AACvC,MAAI,aAA4B;AAChC,SAAO,KAAK,IAAI,IAAI,UAAU;AAC5B,UAAM,MAAM,wBAAwB;AACpC,UAAM,QAAQ,MAAM,UAAU,IAAI,IAAI,aAAa,IAAI,cAAc;AACrE,QAAI,CAAC,OAAO;AAEV,YAAM,IAAI,4BAA4B,IAAI,gBAAgB,CAAC;AAAA,IAC7D;AACA,iBAAa,MAAM;AACnB,QAAI,MAAM,aAAa,QAAQ;AAC7B,aAAO,EAAE,YAAY,MAAM,WAAW;AAAA,IACxC;AACA,QAAI,MAAM,aAAa,YAAY;AAIjC,YAAM,IAAI,4BAA4B,IAAI,gBAAgB,MAAM,UAAU;AAAA,IAC5E;AACA,QAAI,MAAM,aAAa,QAAQ;AAC7B,UAAI,2BAA2B,MAAM,SAAS,OAAO,GAAG;AAItD,cAAM,IAAI,4BAA4B,IAAI,gBAAgB,MAAM,UAAU;AAAA,MAC5E;AACA,UACE,MAAM,SAAS,QAAQ,WAAW,cAClC,MAAM,SAAS,QAAQ,WAAW,iBAClC;AACA,cAAM,IAAI;AAAA,UACR,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,MAAM,SAAS,QAAQ,WAAW,aAC9B,qBACA;AAAA,UACJ,MAAM;AAAA,QACR;AAAA,MACF;AAGA,YAAM,IAAI,4BAA4B,IAAI,gBAAgB,MAAM,UAAU;AAAA,IAC5E;AAAA,EAEF;AACA,QAAM,IAAI,kCAAkC,IAAI,SAAS,SAAS,yBAAyB;AAAA,IACzF,gBAAgB,IAAI;AAAA,IACpB;AAAA,EACF,CAAC;AACH;;;AD3mEA,IAAM,iCAAiC;AAAA,EACrC;AAAA,EACA,CAAC,UAAW,iBAAiB,6CAA6C,MAAM,UAAU;AAC5F;AASA,SAAS,sBAAsB,OAAoC;AACjE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,SAAQ,MAAuC,WAAW;AAC5D;AAgHO,SAAS,wBAAwB,UAA2C;AACjF,QAAM,MAAM,SAAS,oBAAoB,KAAK;AAC9C,MAAI,CAAC,KAAK;AACR,WAAO,EAAE,MAAM,wBAAwB,MAAM,KAAK,KAAK,KAAK;AAAA,EAC9D;AACA,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,SAAS,KAAK,IAAI,MAAM,SAAS,GAAG,EAAE;AAC9D,UAAM,MAAM,IAAI,aAAa,UAAU,IAAI,aAAa;AACxD,UAAM,OAAO,IAAI,OAAO,OAAO,IAAI,IAAI,IAAI,MAAM,MAAM;AACvD,WAAO,EAAE,MAAM,IAAI,UAAU,MAAM,IAAI;AAAA,EACzC,QAAQ;AACN,WAAO,EAAE,MAAM,KAAK,MAAM,KAAK,KAAK,KAAK;AAAA,EAC3C;AACF;AAMO,SAAS,+BAA+B,UAG7C;AACA,SAAO;AAAA,IACL,WAAW,SAAS;AAAA,IACpB,eAAe,SAAS;AAAA,EAC1B;AACF;AAIA,SAAS,2BAA2B,UAGlC;AACA,QAAM,EAAE,WAAW,cAAc,IAAI,+BAA+B,QAAQ;AAC5E,SAAO;AAAA,IACL,qBAAqB;AAAA,IACrB,yBAAyB;AAAA,EAC3B;AACF;AAqBA,SAAS,6BACP,OACmB;AACnB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,MAAM,aAAa,UAAW,QAAO;AACzC,MAAI,MAAM,aAAa,WAAY,QAAO;AAC1C,MACE,MAAM,SAAS,QAAQ,WAAW,aAClC,MAAM,SAAS,QAAQ,WAAW,eAClC,MAAM,SAAS,QAAQ,WAAW,aAClC;AACA,WAAO;AAAA,EACT;AACA,MACE,MAAM,SAAS,QAAQ,WAAW,cAClC,MAAM,SAAS,UAAU,WAAW,cACpC,MAAM,SAAS,QAAQ,WAAW,gBAClC,MAAM,SAAS,QAAQ,WAAW,WAClC;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,uBACP,OACA,eACqC;AACrC,SAAO,IAAI;AAAA,IACT;AAAA,IACA,OAAO,cAAc;AAAA,IACrB,6BAA6B,KAAK;AAAA,EACpC;AACF;AAEO,SAAS,gCACd,aACe;AACf,SAAO,sCAAsC,WAAW;AAC1D;AAYA,eAAe,0BACb,UACA,KACA,aACgC;AAChC,QAAM,QAAQ,MAAMC,WAAU,SAAS,IAAI,IAAI,aAAa,IAAI,cAAc;AAC9E,QAAM,gBAAgB,OAAO,cAAc;AAC3C,MACE,CAAC,SACD,MAAM,aAAa,UACnB,MAAM,SAAS,SAAS,WAAW,YACnC,MAAM,eAAe,QACrB,MAAM,SAAS,SAAS,eAAe,MAAM,cAC7C,MAAM,SAAS,UAAU,WAAW,WACnC,MAAM,SAAS,QAAQ,WAAW,kBAAkB,MAAM,SAAS,QAAQ,WAAW,SACvF;AACA,UAAM,uBAAuB,OAAO,aAAa;AAAA,EACnD;AAIA,MAAI,MAAM,eAAe,YAAY,YAAY;AAC/C,UAAM,SAAS,uBAAuB;AAAA,MACpC;AAAA,MACA,YAAY,MAAM;AAAA,IACpB,CAAC;AACD,WAAO;AAAA,MACL,SAAS,YAAY;AAAA,MACrB,WAAW;AAAA,MACX,MAAM,YAAY;AAAA,MAClB,YAAY,MAAM;AAAA,MAClB,oBAAoB,MAAM;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,cAAc,MAAM;AAC1B,QAAM,uBAAuB,MAAM,mBAAmB,MAAM,WAAW,IAAI;AAC3E,QAAM,gBAAgB,8BAA8B,oBAAoB,KAAK;AAC7E,MACE,CAAC,eACD,kBAAkB,IAAI,WACtB,gCAAgC,WAAW,MAAM,MAAM,YACvD;AACA,UAAM,uBAAuB,OAAO,MAAM,UAAU;AAAA,EACtD;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,MAAMC,qCAAoC,SAAS,UAAU,aAAa;AAAA,MAClF,WAAW,IAAI;AAAA,MACf,UAAU;AAAA,MACV,iBAAiB;AAAA,IACnB,CAAC;AAGD,UAAMC,4BAA2B,OAAO;AAAA,EAC1C,SAAS,OAAO;AACd,QAAI,CAACC,gCAA+B,eAAe,KAAK,GAAG;AAIzD,YAAM,IAAI;AAAA,QACR;AAAA,QACA,MAAM;AAAA,QACN;AAAA,MACF;AAAA,IACF;AACA,UAAM,SAAS,MAAMC,2BAA0B,SAAS,IAAI;AAAA,MAC1D,WAAW,IAAI;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,gBAAgB,IAAI;AAAA,MACpB,eAAe,MAAM;AAAA,MACrB,oBAAoB,MAAM;AAAA,MAC1B,iBAAiB,MAAM;AAAA,MACvB,YAAY;AAAA,IACd,CAAC;AACD,QAAI,OAAO,WAAW,UAAU;AAC9B,YAAM,SAAS,oBAAoB;AAAA,QACjC,gBAAgB,IAAI;AAAA,QACpB,YAAY,MAAM;AAAA,QAClB,YAAY,OAAO,MAAM;AAAA,MAC3B,CAAC;AAAA,IACH;AACA,UAAM,IAAI;AAAA,MACR;AAAA,MACA,OAAO,OAAO,cAAc,MAAM;AAAA,MAClC,OAAO,WAAW,UAAU,eAAe,6BAA6B,OAAO,KAAK;AAAA,IACtF;AAAA,EACF;AAKA,QAAM,iBAAiB,8BAA8B,QAAQ,SAAS,KAAK,QAAQ;AACnF,MAAI,QAAQ,eAAe,MAAM,cAAc,mBAAmB,eAAe;AAC/E,UAAM,uBAAuB,OAAO,MAAM,UAAU;AAAA,EACtD;AACA,QAAM,SAAS,uBAAuB;AAAA,IACpC,aAAa;AAAA,IACb,YAAY,MAAM;AAAA,EACpB,CAAC;AAKD,SAAO,OAAO,aAAa,OAAO;AAClC,SAAO;AAAA,IACL,SAAS,QAAQ;AAAA,IACjB,WAAW;AAAA,IACX,MAAM,QAAQ;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,oBAAoB,MAAM;AAAA,EAC5B;AACF;AAEA,SAAS,8BACP,UACA,KACA,MAOY;AACZ,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,QAAQ,CAAC,MAAO,QAAO;AAC5B,SAAO,OAAO,EAAE,IAAI,SAAS,cAAc,MAAM;AAI/C,QACE,QAAQ,cAAc,QACtB,QAAQ,eAAe,UACvB,QAAQ,uBAAuB,QAC/B;AACA,aAAO;AAAA,IACT;AACA,UAAM,kBACJ,KAAK,YAAY,UACb,MAAMC,iDAAgD,SAAS,UAAU,QAAQ,OAAO,IACxF;AACN,UAAM,YAAY,MAAM,2BAA2B,SAAS,IAAI;AAAA,MAC9D,WAAW,MAAM;AAAA,MACjB,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,qBAAqB,MAAM;AAAA,MAC3B,WAAW,MAAM;AAAA,MACjB,UAAU,+BAA+B,MAAM,SAAS;AAAA,MACxD,gBAAgB,KAAK;AAAA,MACrB,eAAe,QAAQ;AAAA,MACvB,oBAAoB,QAAQ;AAAA,MAC5B,WAAW;AAAA,MACX,eAAeC,kCAAiC,SAAS,QAAQ;AAAA,MACjE,GAAI,SAAS,aAAa,EAAE,YAAY,SAAS,WAAW,IAAI,CAAC;AAAA,MACjE,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;AAAA,IAC3C,CAAC;AACD,WAAO,EAAE,WAAW,gBAAgB;AAAA,EACtC;AACF;AAEA,SAAS,6BACP,UACA,KACA,MAUY;AACZ,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,QAAQ,CAAC,MAAO,QAAO;AAC5B,SAAO,OAAO,EAAE,IAAI,SAAS,WAAW,SAAS,gBAAgB,MAAM;AACrE,QACE,QAAQ,cAAc,QACtB,QAAQ,eAAe,UACvB,QAAQ,uBAAuB,UAC/B,CAAC,aACD,OAAO,cAAc,UACrB;AACA;AAAA,IACF;AACA,UAAM,iBAAiB;AACvB,UAAM,iBAAiB,eAAe;AACtC,QACE,CAAC,kBACD,OAAO,eAAe,OAAO,YAC7B,OAAO,eAAe,wBAAwB,YAC9C,EAAE,qBAAqB,iBACvB;AACA,YAAM,IAAI,MAAM,iEAAiE;AAAA,IACnF;AACA,SAAK,YAAY,cAAc,YAAY,sBAAsB,iBAAiB;AAChF,UAAI;AACF,cAAM,+BAA+B,SAAS,IAAI;AAAA,UAChD,WAAW,MAAM;AAAA,UACjB,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,UACf,WAAW,gBAAgB;AAAA,UAC3B,mBAAmB,gBAAgB;AAAA,UACnC,GAAI,gBAAgB,kBAChB,EAAE,iBAAiB,gBAAgB,gBAAgB,IACnD,CAAC;AAAA,UACL,aAAa,eAAe;AAAA,UAC5B,6BAA6B,eAAe;AAAA,UAC5C,WAAW;AAAA,UACX,iBAAiB,eAAe,mBAAmB;AAAA,UACnD,OAAO;AAAA,YACL,MAAM;AAAA,YACN,QAAQ,MAAM;AAAA,YACd,qBAAqB,MAAM;AAAA,YAC3B,WAAW,MAAM;AAAA,YACjB,UAAU,+BAA+B,MAAM,SAAS;AAAA,YACxD,gBAAgB,KAAK;AAAA,YACrB,eAAe,QAAQ;AAAA,YACvB,oBAAoB,QAAQ;AAAA,YAC5B,WAAW,eAAe;AAAA,YAC1B,eAAe,eAAe;AAAA,YAC9B,YAAY,eAAe;AAAA,UAC7B;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,EAAE,iBAAiB,4CAA6C,OAAM;AAC1E,cAAM,UAAU,MAAM;AACtB,YACE,QAAQ,OAAO,gBAAgB,MAC/B,QAAQ,sBAAsB,gBAAgB,qBAC9C,QAAQ,cAAc,IAAI,aAC1B,QAAQ,mBAAmB,KAAK,kBAChC,QAAQ,sBAAsB,eAAe,MAC7C,QAAQ,eAAe,QAAQ,cAC/B,QAAQ,uBAAuB,QAAQ,sBACvC,QAAQ,cAAc,eAAe,aACrC,QAAQ,kBAAkB,eAAe,iBACzC,QAAQ,eAAe,eAAe,cACtC,QAAQ,UAAU,UAClB;AACA,gBAAM,IAAI,MAAM,qEAAqE;AAAA,YACnF,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AACA,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,iBAAiB;AAAA,YACf,IAAI,QAAQ;AAAA,YACZ,mBAAmB,QAAQ;AAAA,UAC7B;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AACA,QAAI,YAAY;AACd,YAAM,IAAI,MAAM,2EAA2E;AAC7F,UAAM,kCAAkC,SAAS,IAAI;AAAA,MACnD,WAAW,MAAM;AAAA,MACjB,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,qBAAqB,MAAM;AAAA,MAC3B,WAAW,MAAM;AAAA,MACjB,UAAU,+BAA+B,MAAM,SAAS;AAAA,MACxD,gBAAgB,KAAK;AAAA,MACrB,eAAe,QAAQ;AAAA,MACvB,oBAAoB,QAAQ;AAAA,MAC5B,WAAW;AAAA,MACX,WAAW;AAAA,MACX;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,SAAS,8BACP,UACA,KAOY;AACZ,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,OAAO,EAAE,IAAI,SAAAC,SAAQ,MAC1B,MAAM,6CAA6C,SAAS,IAAI;AAAA,IAC9D,WAAW,MAAM;AAAA,IACjB,aAAa,IAAI;AAAA,IACjB,WAAW,IAAI;AAAA,IACf,WAAWA,SAAQ;AAAA,IACnB,WAAW;AAAA,IACX,eAAeD,kCAAiC,SAAS,QAAQ;AAAA,IACjE,GAAI,SAAS,aAAa,EAAE,YAAY,SAAS,WAAW,IAAI,CAAC;AAAA,EACnE,CAAC;AACL;AAEA,SAAS,6BACP,UACA,KAUY;AACZ,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,OAAO,EAAE,IAAI,SAAAC,UAAS,WAAW,QAAQ,MAAM;AACpD,QACE,CAAC,aACD,OAAO,cAAc,YACrB,OAAQ,UAAyD,OAAO,YACxE,OAAQ,UAAyD,wBAC/D,UACF;AACA,YAAM,IAAI,MAAM,iEAAiE;AAAA,IACnF;AACA,UAAM,wCAAwC,SAAS,IAAI;AAAA,MACzD,WAAW,MAAM;AAAA,MACjB,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,WAAWA,SAAQ;AAAA,MACnB;AAAA,MACA,WAAW;AAAA,MACX;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEO,SAAS,8BACd,IACA,KACA,KACA;AACA,SAAO,OAAO,WAAmB,WAAkC;AACjE,eAAW,SAAS,QAAQ;AAC1B,YAAM,SAAS,MAAM,2BAA2B,IAAI;AAAA,QAClD,GAAG;AAAA,QACH;AAAA,QACA,SAAS,YAAY,MAAM,QAAQ;AAAA,QACnC,QAAQ,MAAM;AAAA,QACd,OAAO,MAAM;AAAA,MACf,CAAC;AACD,UAAI,OAAO,UAAU;AACnB,cAAM,IAAI,QAAQ,IAAI,aAAa,IAAI,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,IACnF;AAAA,EACF;AACF;AAEA,SAAS,oCACP,UACA,KACA;AACA,QAAM,YAAY,IAAI,wBAAwB;AAC9C,MAAI,CAAC,UAAW,QAAO;AACvB,SAAO,OAAO;AAAA,IACZ,SAAAA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,MAMM;AACJ,UAAM,SAAS,MAAM,2BAA2B,SAAS,IAAI;AAAA,MAC3D;AAAA,MACA,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,WAAWA,SAAQ;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,OAAO,UAAU,SAAS;AAC5B,YAAM,SAAS,IAAI,QAAQ,IAAI,aAAa,IAAI,WAAW,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,EAC5F;AACF;AAEA,SAAS,sCACP,UACA,KACA;AACA,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,OAAO,EAAE,SAAAA,SAAQ,MAA2C;AACjE,UAAM,0CAA0C,SAAS,IAAI;AAAA,MAC3D,WAAW,MAAM;AAAA,MACjB,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,WAAWA,SAAQ;AAAA,IACrB,CAAC;AAAA,EACH;AACF;AAEA,SAAS,6BACP,UACA,KAOY;AACZ,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,OAAO,EAAE,SAAS,SAAAA,UAAS,MAAM,MAAM;AAC5C,UAAM,UAAU,MAAM,mBAAmB,SAAS,IAAI;AAAA,MACpD,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,WAAWA,SAAQ;AAAA,IACrB,CAAC;AACD,QACE,CAAC,WACD,QAAQ,sBAAsBA,SAAQ,qBACtC,QAAQ,qBAAqB,8BAA8B,QAAQ,IAAI,KAAK,QAAQ,SACpF,QAAQ,uBAAuB,QAAQ,sBACvC,QAAQ,eAAe,QAAQ,cAC/B,QAAQ,eAAe,QAAQ,cAAc,OAAO,SAAS,aAC7D,QAAQ,kBAAkB,QAAQ,aAClC,QAAQ,eAAe,QAAQ,aAC/B;AACA,YAAM,IAAI,MAAM,qEAAqE;AAAA,IACvF;AACA,UAAM,aAAa,MAAM,sBAAsB,SAAS,IAAI;AAAA,MAC1D,WAAW,MAAM;AAAA,MACjB,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,WAAWA,SAAQ;AAAA,MACnB,UAAU,kCAAkC,OAAO;AAAA,MACnD,SAAS,MAAM;AAAA,MACf,UAAU,MAAM;AAAA,MAChB,QAAQ,MAAM;AAAA,MACd,aAAa,SAAS,SAAS;AAAA,IACjC,CAAC;AACD,QAAI,WAAW,QAAQ,UAAU,UAAU;AACzC,YAAM,IAAI,MAAM,gEAAgE;AAAA,IAClF;AACA,QAAI,WAAW,wBAAwB,SAAS,KAAK,SAAS,KAAK;AACjE,YAAM,SAAS,IACZ,QAAQ,IAAI,aAAa,IAAI,WAAW,WAAW,uBAAuB,EAC1E,MAAM,MAAM,MAAS;AAAA,IAC1B;AAAA,EACF;AACF;AAEA,SAAS,+CACP,UACA,KAOY;AACZ,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,OAAO,EAAE,SAAS,SAAAA,UAAS,QAAQ,MAAM;AAC9C,UAAM,UAAU,MAAM,mBAAmB,SAAS,IAAI;AAAA,MACpD,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,WAAWA,SAAQ;AAAA,IACrB,CAAC;AACD,QACE,CAAC,WACD,QAAQ,sBAAsBA,SAAQ,qBACtC,QAAQ,qBAAqB,8BAA8B,QAAQ,IAAI,KAAK,QAAQ,SACpF,QAAQ,uBAAuB,QAAQ,sBACvC,QAAQ,eAAe,QAAQ,cAC/B,QAAQ,eAAe,QAAQ,cAAc,OAAO,SAAS,aAC7D,QAAQ,kBAAkB,QAAQ,aAClC,QAAQ,eAAe,QAAQ,aAC/B;AACA,YAAM,IAAI,MAAM,sEAAsE;AAAA,IACxF;AACA,UAAM,qCAAqC,SAAS,IAAI;AAAA,MACtD,WAAW,MAAM;AAAA,MACjB,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,qBAAqB,MAAM;AAAA,MAC3B,WAAW,MAAM;AAAA,MACjB,WAAWA,SAAQ;AAAA,MACnB,UAAU,kCAAkC,OAAO;AAAA,MACnD,SAAS,WAAW;AAAA,IACtB,CAAC;AAAA,EACH;AACF;AAKA,SAAS,kBAAkB,KAA6C;AACtE,SAAO,MACL,IAAI,eAAe,YAAmD;AACpE,QAAI,CAAC,KAAK;AACR,aAAO;AAAA,IACT;AACA,WAAO,IAAI,qBAAqB;AAAA,EAClC,CAAC;AACL;AAcO,SAAS,uBACd,UACA,KACA,aAC2B;AAC3B,QAAM,EAAE,IAAI,UAAU,KAAK,KAAK,IAAI;AACpC,QAAM,6BAA6B,IAAI,wBAAwB;AAC/D,QAAM,2BAA2B,IAAI;AACrC,QAAM,iBAAiB,8BAA8B,UAAU,KAAK,IAAI,SAAS;AACjF,QAAM,gBAAgB,6BAA6B,UAAU,KAAK,IAAI,SAAS;AAC/E,QAAM,wBAAwB,8BAA8B,UAAU,GAAG;AACzE,QAAM,uBAAuB,6BAA6B,UAAU,GAAG;AACvE,QAAM,gBAAgB,6BAA6B,UAAU,GAAG;AAChE,QAAM,kCAAkC;AAAA,IACtC;AAAA,IACA;AAAA,EACF;AACA,QAAM,WAAW,0BAA0B;AAAA,IACzC,aAAa,IAAI;AAAA,IACjB,gBAAgB,YAAY;AAAA,IAC5B,aAAa,YAAY;AAAA,IACzB,YAAY,OAAO,cAA+C;AAChE,YAAM,UAAU,MAAM;AAAA,QACpB;AAAA,QACA,IAAI,qBAAqB,IAAI,oBACzB;AAAA,UACE,WAAW,IAAI;AAAA,UACf,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,QACjB,IACA,IAAI;AAAA,QACR;AAAA,MACF;AACA,aAAO,UACH;AAAA,QACE,IAAI,QAAQ;AAAA,QACZ,aAAa,QAAQ;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,MAAM,QAAQ;AAAA,QACd,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,QAChD,cAAc,QAAQ;AAAA,MACxB,IACA;AAAA,IACN;AAAA,IACA,mBAAmB,kBAAkB,GAAG;AAAA,IACxC,6BAA6B,OAAO,YAAY;AAC9C,UAAI,CAAC,QAAQ,aAAc,QAAO;AAClC,YAAM,aAAa,MAAM,+BAA+B,IAAI,KAAK,OAAO;AACxE,aAAO,qBAAqB,UAAU,UAAU;AAAA,IAClD;AAAA,IACA,OAAO,wBAAwB,QAAQ;AAAA;AAAA;AAAA,IAGvC,GAAG,2BAA2B,QAAQ;AAAA,IACtC,GAAI,SAAS,SAAY,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAAA,IACrD,GAAI,8BAA8B,2BAC9B;AAAA,MACE,kCAAkC,OAAO,YAAY;AACnD,cAAM,UAAU,MAAM,8CAA8C,IAAI;AAAA,UACtE,WAAW;AAAA,UACX,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,UACf,QAAQ,yBAAyB;AAAA,UACjC,qBAAqB,yBAAyB;AAAA,UAC9C,WAAW,yBAAyB;AAAA,UACpC,WAAW,OAAO,WAAW;AAAA,UAC7B,oBAAoB,QAAQ;AAAA,UAC5B,cAAc,QAAQ;AAAA,UACtB,sBAAsB,QAAQ;AAAA,UAC9B,MAAM,QAAQ;AAAA,UACd,SAAS,QAAQ;AAAA,QACnB,CAAC;AACD,eAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,MACjC;AAAA,MACA,mCAAmC,OAAO,YAAY;AACpD,cAAM,aAAa,MAAM,+CAA+C,IAAI;AAAA,UAC1E,WAAW;AAAA,UACX,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,UACf,WAAW,QAAQ;AAAA,UACnB,oBAAoB,QAAQ;AAAA,UAC5B,cAAc,QAAQ;AAAA,UACtB,sBAAsB,QAAQ;AAAA,UAC9B,MAAM,QAAQ;AAAA,UACd,SAAS,QAAQ;AAAA,UACjB,UAAU,QAAQ;AAAA,UAClB,QAAQ,QAAQ;AAAA,UAChB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,QACxD,CAAC;AACD,YAAI,cAAc,KAAK;AACrB,gBAAM,IACH,QAAQ,IAAI,aAAa,IAAI,WAAW,WAAW,MAAM,EACzD,MAAM,MAAM,MAAS;AAAA,QAC1B;AAAA,MACF;AAAA,MACA,0CAA0C;AAAA,QACxC;AAAA,QACA;AAAA,UACE,WAAW;AAAA,UACX,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,QACjB;AAAA,QACA;AAAA,MACF;AAAA,IACF,IACA,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKL,GAAI,IAAI,gBAAgB,SAAY,EAAE,aAAa,IAAI,YAAY,IAAI,CAAC;AAAA,IACxE,GAAI,IAAI,6BAA6B,SACjC,EAAE,0BAA0B,IAAI,yBAAyB,IACzD,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKL,GAAI,IAAI,mBACJ;AAAA,MACE,kBAAkB;AAAA,QAChB,WAAW,IAAI,iBAAiB;AAAA,QAChC,OAAO,IAAI,iBAAiB;AAAA,QAC5B,SAAS,YAAY;AAAA,MACvB;AAAA,IACF,IACA,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAWL,GAAI,IAAI,kBAAkB,SAAY,EAAE,eAAe,IAAI,cAAc,IAAI,CAAC;AAAA,IAC9E,GAAI,IAAI,YACJ;AAAA,MACE,uBAAuB,MACrB;AAAA,QACE;AAAA,QACA;AAAA,UACE,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,UACf,WAAW,IAAI,UAAW;AAAA,UAC1B,gBAAgB,IAAI,UAAW;AAAA,UAC/B,SAAS,IAAI,UAAW;AAAA,QAC1B;AAAA,QACA;AAAA,MACF;AAAA,IACJ,IACA,CAAC;AAAA,EACP,CAAC;AAED,QAAM,QAAQ,IAAI,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOtC,iBAAiB;AAAA,MACf,SAAS,YAAY;AAAA,MACrB,WAAW;AAAA,MACX,MAAM,YAAY;AAAA,MAClB,GAAI,IAAI,YACJ;AAAA,QACE,YAAY,IAAI,UAAU;AAAA,QAC1B,oBAAoB,IAAI,UAAU;AAAA,MACpC,IACA,CAAC;AAAA,IACP;AAAA,IACA,aAAa,YAAY;AACvB,UAAI,CAAC,eAAe,QAAQ,GAAG;AAC7B,eAAO,EAAE,iBAAiB,MAAM,aAAa,EAAE;AAAA,MACjD;AACA,YAAM,UAAU,MAAM,kBAAkB,IAAI,IAAI,aAAa,IAAI,SAAS;AAC1E,aAAO,WAAW,EAAE,iBAAiB,MAAM,aAAa,EAAE;AAAA,IAC5D;AAAA,IACA,sBAAsB;AAAA,IACtB,GAAI,SAAS,qBAAqB,EAAE,aAAa,SAAS,mBAAmB,IAAI,CAAC;AAAA,IAClF,GAAI,SAAS,uBAAuB,EAAE,eAAe,SAAS,qBAAqB,IAAI,CAAC;AAAA,IACxF,uBAAuB;AAAA,IACvB,0BAA0B,YACxB,SAAS,kCAAmC,MAAM,+BAA+B,EAAE;AAAA,IACrF,GAAI,IAAI,yBACJ;AAAA,MACE,4BAA4B,CAACA,aAC3B;AAAA,QACE;AAAA,QACA;AAAA,UACE,WAAW,IAAI,uBAAwB;AAAA,UACvC,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,UACf,WAAWA,SAAQ;AAAA,QACrB;AAAA,QACA,SAAS,MACL,CAAC,WAAW,SAAS,IAAK,QAAQ,IAAI,aAAa,IAAI,WAAW,MAAM,IACxE;AAAA,MACN;AAAA,IACJ,IACA,CAAC;AAAA,IACL,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;AAAA,IAC3C,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;AAAA,IACzC,GAAI,wBAAwB,EAAE,sBAAsB,IAAI,CAAC;AAAA,IACzD,GAAI,uBAAuB,EAAE,qBAAqB,IAAI,CAAC;AAAA,IACvD,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;AAAA,IACzC,GAAI,IAAI,yBACJ,EAAE,wBAAwB,sCAAsC,UAAU,GAAG,EAAG,IAChF,CAAC;AAAA,IACL,GAAI,IAAI,yBACJ,EAAE,sBAAsB,oCAAoC,UAAU,GAAG,EAAG,IAC5E,CAAC;AAAA,IACL,GAAI,kCAAkC,EAAE,gCAAgC,IAAI,CAAC;AAAA,IAC7E,GAAI,IAAI,YACJ;AAAA,MACE,uBAAuB,OAAO;AAAA,QAC5B;AAAA,QACA;AAAA,MACF,MAGM;AACJ,cAAM,OAAO,IAAI;AACjB,YAAI,CAAC,2CAA2C,KAAK,SAAS,KAAK,EAAG,QAAO;AAC7E,cAAM,gBAAgB,QAAQ,cAAc,KAAK;AACjD,cAAM,qBAAqB,QAAQ,sBAAsB,KAAK;AAC9D,cAAM,SAAS,MAAMH,2BAA0B,IAAI;AAAA,UACjD,WAAW,KAAK;AAAA,UAChB,aAAa,IAAI;AAAA,UACjB,gBAAgB,KAAK;AAAA,UACrB;AAAA,UACA;AAAA,UACA,iBAAiB,KAAK;AAAA,UACtB,YAAY;AAAA,QACd,CAAC;AACD,YAAI,OAAO,WAAW,UAAU;AAC9B,gBAAM,SAAS,oBAAoB;AAAA,YACjC,gBAAgB,KAAK;AAAA,YACrB,YAAY;AAAA,YACZ,YAAY,OAAO,MAAM;AAAA,UAC3B,CAAC;AAAA,QACH;AACA,cAAM,QAAQ,OAAO;AACrB,cAAM,UAAU,OAAO,SAAS,QAAQ;AACxC,eAAO;AAAA,UACL,YAAY,OAAO,cAAc;AAAA,UACjC,UACE,OAAO,WAAW,UACb,eACD,YAAY,YACT,YACD,YAAY,aACT,aACA;AAAA,QACb;AAAA,MACF;AAAA,IACF,IACA,CAAC;AAAA,EACP,CAAC;AAED,SAAO,EAAE,GAAG,aAAa,SAAS,MAAM;AAC1C;AAEO,SAAS,2BACd,UACA,KACA,MAiB2B;AAC3B,QAAM,EAAE,IAAI,UAAU,KAAK,KAAK,IAAI;AACpC,QAAM,6BAA6B,IAAI,wBAAwB;AAC/D,QAAM,2BAA2B,IAAI;AACrC,QAAM,iBAAiB,8BAA8B,UAAU,KAAK,KAAK,iBAAiB;AAC1F,QAAM,gBAAgB,6BAA6B,UAAU,KAAK,KAAK,iBAAiB;AACxF,QAAM,wBAAwB,8BAA8B,UAAU,GAAG;AACzE,QAAM,uBAAuB,6BAA6B,UAAU,GAAG;AACvE,QAAM,gBAAgB,6BAA6B,UAAU,GAAG;AAChE,QAAM,kCAAkC;AAAA,IACtC;AAAA,IACA;AAAA,EACF;AACA,QAAM,iBAAiB,8BAA8B,KAAK,SAAS;AACnE,QAAM,qBAAqB,iBACvB,cAAc,cAAc,EAAE,aAAa,SAAS,MACpD;AACJ,QAAM,mBAA2C;AAAA,IAC/C,OAAO,EAAE,UAAU,KAAK,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA,IAK7C,aAAa,MAAM;AAAA,EACrB;AACA,QAAM,iBAAiB,0BAA0B;AAAA,IAC/C,aAAa,IAAI;AAAA,IACjB,gBAAgB;AAAA,IAChB,aAAa;AAAA,IACb,YAAY,OAAO,cAA+C;AAChE,YAAM,UAAU,MAAM;AAAA,QACpB;AAAA,QACA,IAAI,qBAAqB,IAAI,oBACzB;AAAA,UACE,WAAW,IAAI;AAAA,UACf,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,QACjB,IACA,IAAI;AAAA,QACR;AAAA,MACF;AACA,aAAO,UACH;AAAA,QACE,IAAI,QAAQ;AAAA,QACZ,aAAa,QAAQ;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,MAAM,QAAQ;AAAA,QACd,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,QAChD,cAAc,QAAQ;AAAA,MACxB,IACA;AAAA,IACN;AAAA,IACA,mBAAmB,kBAAkB,GAAG;AAAA,IACxC,6BAA6B,OAAO,YAAY;AAC9C,UAAI,CAAC,QAAQ,aAAc,QAAO;AAClC,YAAM,aAAa,MAAM,+BAA+B,IAAI,KAAK,OAAO;AACxE,aAAO,qBAAqB,UAAU,UAAU;AAAA,IAClD;AAAA,IACA,OAAO,wBAAwB,QAAQ;AAAA,IACvC,GAAG,2BAA2B,QAAQ;AAAA,IACtC,GAAI,SAAS,SAAY,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAAA,IACrD,GAAI,8BAA8B,2BAC9B;AAAA,MACE,kCAAkC,OAAO,YAAY;AACnD,cAAM,UAAU,MAAM,8CAA8C,IAAI;AAAA,UACtE,WAAW;AAAA,UACX,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,UACf,QAAQ,yBAAyB;AAAA,UACjC,qBAAqB,yBAAyB;AAAA,UAC9C,WAAW,yBAAyB;AAAA,UACpC,WAAW,OAAO,WAAW;AAAA,UAC7B,oBAAoB,QAAQ;AAAA,UAC5B,cAAc,QAAQ;AAAA,UACtB,sBAAsB,QAAQ;AAAA,UAC9B,MAAM,QAAQ;AAAA,UACd,SAAS,QAAQ;AAAA,QACnB,CAAC;AACD,eAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,MACjC;AAAA,MACA,mCAAmC,OAAO,YAAY;AACpD,cAAM,aAAa,MAAM,+CAA+C,IAAI;AAAA,UAC1E,WAAW;AAAA,UACX,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,UACf,WAAW,QAAQ;AAAA,UACnB,oBAAoB,QAAQ;AAAA,UAC5B,cAAc,QAAQ;AAAA,UACtB,sBAAsB,QAAQ;AAAA,UAC9B,MAAM,QAAQ;AAAA,UACd,SAAS,QAAQ;AAAA,UACjB,UAAU,QAAQ;AAAA,UAClB,QAAQ,QAAQ;AAAA,UAChB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,QACxD,CAAC;AACD,YAAI,cAAc,KAAK;AACrB,gBAAM,IACH,QAAQ,IAAI,aAAa,IAAI,WAAW,WAAW,MAAM,EACzD,MAAM,MAAM,MAAS;AAAA,QAC1B;AAAA,MACF;AAAA,MACA,0CAA0C;AAAA,QACxC;AAAA,QACA;AAAA,UACE,WAAW;AAAA,UACX,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,QACjB;AAAA,QACA;AAAA,MACF;AAAA,IACF,IACA,CAAC;AAAA,IACL,GAAI,IAAI,gBAAgB,SAAY,EAAE,aAAa,IAAI,YAAY,IAAI,CAAC;AAAA,IACxE,GAAI,IAAI,6BAA6B,SACjC,EAAE,0BAA0B,IAAI,yBAAyB,IACzD,CAAC;AAAA,EACP,CAAC;AAED,QAAM,QAAQ,IAAI,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA,IAKtC,iBAAiB;AAAA,MACf,SAAS;AAAA,MACT,WAAW;AAAA,MACX,MAAM;AAAA,IACR;AAAA,IACA,aAAa,YAAY;AACvB,YAAM,UAAU,MAAM,kBAAkB,IAAI,IAAI,aAAa,IAAI,SAAS;AAC1E,aAAO,WAAW,EAAE,iBAAiB,MAAM,aAAa,EAAE;AAAA,IAC5D;AAAA,IACA,sBAAsB,OAAO,YAAY;AACvC,UAAI,QAAQ,oBAAoB,QAAQ,CAAC,eAAe,QAAQ,GAAG;AACjE,cAAM,cAAc,MAAM,KAAK,YAAY,IAAI;AAC/C,YAAI,KAAK,qBAAqB,YAAY,eAAe,QAAW;AAClE,iBAAO;AAAA,YACL;AAAA,YACA;AAAA,cACE,aAAa,IAAI;AAAA,cACjB,WAAW,IAAI;AAAA,cACf,WAAW,KAAK,kBAAkB;AAAA,cAClC,gBAAgB,KAAK,kBAAkB;AAAA,cACvC,SAAS,KAAK,kBAAkB;AAAA,YAClC;AAAA,YACA,YAAY;AAAA,UACd;AAAA,QACF;AACA,eAAO;AAAA,UACL,SAAS,YAAY,YAAY;AAAA,UACjC,WAAW;AAAA,UACX,MAAM,YAAY,YAAY;AAAA,QAChC;AAAA,MACF;AACA,aAAO,eAAe,OAAO;AAAA,IAC/B;AAAA,IACA,GAAI,SAAS,qBAAqB,EAAE,aAAa,SAAS,mBAAmB,IAAI,CAAC;AAAA,IAClF,GAAI,SAAS,uBAAuB,EAAE,eAAe,SAAS,qBAAqB,IAAI,CAAC;AAAA,IACxF,GAAI,KAAK,mBAAmB,EAAE,kBAAkB,KAAK,iBAAiB,IAAI,CAAC;AAAA,IAC3E,uBAAuB;AAAA,IACvB,0BAA0B,YACxB,SAAS,kCAAmC,MAAM,+BAA+B,EAAE;AAAA,IACrF,GAAI,IAAI,yBACJ;AAAA,MACE,4BAA4B,CAACG,aAC3B;AAAA,QACE;AAAA,QACA;AAAA,UACE,WAAW,IAAI,uBAAwB;AAAA,UACvC,aAAa,IAAI;AAAA,UACjB,WAAW,IAAI;AAAA,UACf,WAAWA,SAAQ;AAAA,QACrB;AAAA,QACA,SAAS,MACL,CAAC,WAAW,SAAS,IAAK,QAAQ,IAAI,aAAa,IAAI,WAAW,MAAM,IACxE;AAAA,MACN;AAAA,IACJ,IACA,CAAC;AAAA,IACL,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;AAAA,IAC3C,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;AAAA,IACzC,GAAI,wBAAwB,EAAE,sBAAsB,IAAI,CAAC;AAAA,IACzD,GAAI,uBAAuB,EAAE,qBAAqB,IAAI,CAAC;AAAA,IACvD,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;AAAA,IACzC,GAAI,IAAI,yBACJ,EAAE,wBAAwB,sCAAsC,UAAU,GAAG,EAAG,IAChF,CAAC;AAAA,IACL,GAAI,IAAI,yBACJ,EAAE,sBAAsB,oCAAoC,UAAU,GAAG,EAAG,IAC5E,CAAC;AAAA,IACL,GAAI,kCAAkC,EAAE,gCAAgC,IAAI,CAAC;AAAA,IAC7E,GAAI,KAAK,oBACL;AAAA,MACE,uBAAuB,OAAO;AAAA,QAC5B;AAAA,QACA;AAAA,MACF,MAGM;AACJ,cAAM,OAAO,KAAK;AAClB,YAAI,CAAC,2CAA2C,KAAK,SAAS,KAAK,EAAG,QAAO;AAC7E,YAAI,QAAQ,eAAe,UAAa,QAAQ,uBAAuB,QAAW;AAChF,iBAAO;AAAA,QACT;AACA,cAAM,SAAS,MAAMH,2BAA0B,IAAI;AAAA,UACjD,WAAW,KAAK;AAAA,UAChB,aAAa,IAAI;AAAA,UACjB,gBAAgB,KAAK;AAAA,UACrB,eAAe,QAAQ;AAAA,UACvB,oBAAoB,QAAQ;AAAA,UAC5B,iBAAiB,KAAK;AAAA,UACtB,YAAY;AAAA,QACd,CAAC;AACD,YAAI,OAAO,WAAW,UAAU;AAC9B,gBAAM,SAAS,oBAAoB;AAAA,YACjC,gBAAgB,KAAK;AAAA,YACrB,YAAY,QAAQ;AAAA,YACpB,YAAY,OAAO,MAAM;AAAA,UAC3B,CAAC;AAAA,QACH;AACA,cAAM,QAAQ,OAAO;AACrB,cAAM,UAAU,OAAO,SAAS,QAAQ;AACxC,eAAO;AAAA,UACL,YAAY,OAAO,cAAc,QAAQ;AAAA,UACzC,UACE,OAAO,WAAW,UACb,eACD,YAAY,YACT,YACD,YAAY,aACT,aACA;AAAA,QACb;AAAA,MACF;AAAA,IACF,IACA,CAAC;AAAA,EACP,CAAC;AAED,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,SAAS;AAAA,IACT,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW,KAAK;AAAA,EAClB;AACF;AAyEA,SAAS,gBACP,UACA,2BACoC;AACpC,QAAM,EAAE,UAAU,KAAK,UAAU,IAAI;AACrC,MAAI,CAAC,6BAA6B,SAAS,yBAAyB,QAAQ,CAAC,KAAK;AAChF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,WAAW,IAAI,sBAAsB,YAAY,IAAI,wBAAwB,KAAK,IAAI;AAAA,IACtF,GAAI,cAAc,SAAY,EAAE,SAAS,UAAU,IAAI,CAAC;AAAA,EAC1D;AACF;AAIO,SAAS,qBACd,UACA,YACoC;AACpC,MAAI,CAAC,YAAY,qBAAsB,QAAO;AAC9C,QAAM,WAAW,gBAAgB,UAAU,WAAW,aAAa,IAAI;AACvE,SAAO;AAAA,IACL,aAAa,WAAW;AAAA,IACxB,sBAAsB,WAAW;AAAA,IACjC,eAAe,WAAW;AAAA,IAC1B,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,IAC7C,yBAAyB,WAAW;AAAA,IACpC,kCAAkC,WAAW,kBAAkB,4BAA4B;AAAA,IAC3F,4BAA4B,WAAW,kBAAkB,sBAAsB;AAAA,IAC/E,+BAA+B,WAAW,kBAAkB,yBAAyB;AAAA,EACvF;AACF;AAMA,eAAe,+BACb,IACA,KACA,SACkC;AAClC,MAAI,CAAC,QAAQ,aAAc,QAAO;AAClC,MAAI,QAAQ,UAAU,QAAQ;AAC5B,WAAO,MAAM;AAAA,MACX;AAAA,MACA,IAAI,qBAAqB,IAAI,oBACzB;AAAA,QACE,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB,WAAW,IAAI;AAAA,MACjB,IACA,QAAQ;AAAA,MACZ,QAAQ;AAAA,IACV;AAAA,EACF;AACA,QAAM,YAAY,IAAI;AACtB,MAAI,CAAC,UAAW,QAAO;AACvB,SAAO,MAAM,2CAA2C,IAAI;AAAA,IAC1D,WAAW,UAAU;AAAA,IACrB,aAAa,IAAI;AAAA,IACjB,WAAW,UAAU;AAAA,IACrB,WAAW,IAAI;AAAA,IACf,QAAQ,UAAU;AAAA,IAClB,WAAW,UAAU;AAAA,IACrB,qBAAqB,UAAU;AAAA,IAC/B,cAAc,QAAQ;AAAA,IACtB,sBAAsB;AAAA,EACxB,CAAC;AACH;AAEA,eAAsB,+BACpB,UACA,MACoC;AACpC,QAAM,EAAE,IAAI,UAAU,KAAK,KAAK,IAAI;AACpC,QAAM,EAAE,WAAW,cAAc,IAAI,+BAA+B,QAAQ;AAC5E,QAAM,WAAW,gBAAgB,UAAU,KAAK,QAAQ;AACxD,QAAM,EAAE,QAAQ,QAAQ,IAAI,MAAM,8BAA8B;AAAA,IAC9D,aAAa,KAAK;AAAA,IAClB,GAAI,KAAK,uBAAuB,SAC5B,EAAE,oBAAoB,KAAK,mBAAmB,IAC9C,CAAC;AAAA,IACL,SAAS,KAAK;AAAA,IACd,sBAAsB,KAAK;AAAA,IAC3B,eAAe,KAAK;AAAA,IACpB,OAAO,wBAAwB,QAAQ;AAAA,IACvC,mBAAmB,kBAAkB,GAAG;AAAA,IACxC,OAAO,KAAK;AAAA,IACZ,aAAa,KAAK;AAAA,IAClB,GAAI,KAAK,6BAA6B,SAClC,EAAE,0BAA0B,KAAK,yBAAyB,IAC1D,CAAC;AAAA;AAAA;AAAA,IAGL;AAAA,IACA;AAAA,IACA,yBAAyB,KAAK;AAAA,IAC9B,kCAAkC,KAAK;AAAA,IACvC,4BAA4B,KAAK;AAAA,IACjC,+BAA+B,KAAK,kCAAkC;AAAA,IACtE,2BAA2B,YAAY;AACrC,YAAM,aAAa,KAAK,yBACpB,MAAM,2CAA2C,IAAI;AAAA,QACnD,WAAW,KAAK,uBAAuB;AAAA,QACvC,aAAa,KAAK;AAAA,QAClB,WAAW,KAAK,uBAAuB;AAAA,QACvC,WAAW,KAAK,uBAAuB;AAAA,QACvC,QAAQ,KAAK,uBAAuB;AAAA,QACpC,WAAW,KAAK,uBAAuB;AAAA,QACvC,qBAAqB,KAAK,uBAAuB;AAAA,QACjD,cAAc,KAAK;AAAA,QACnB,sBAAsB;AAAA,MACxB,CAAC,IACD,MAAM;AAAA,QACJ;AAAA,QACA,KAAK,sBAAsB,KAAK;AAAA,QAChC,KAAK;AAAA,MACP;AACJ,YAAM,UAAU,qBAAqB,UAAU,UAAU;AACzD,UAAI,CAAC,QAAS,QAAO;AACrB,UAAI,CAAC,QAAQ,eAAe;AAC1B,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,QACL,GAAG;AAAA,QACH,eAAe,qCAAqC,QAAQ,eAAe,KAAK,UAAU;AAAA,MAC5F;AAAA,IACF;AAAA,IACA,GAAI,KAAK,2BACL;AAAA,MACE,wBAAwB,OAAO,YAAY;AACzC,cAAM,UAAU,MAAM,8CAA8C,IAAI;AAAA,UACtE,WAAW,KAAK;AAAA,UAChB,aAAa,KAAK;AAAA,UAClB,WAAW,KAAK;AAAA,UAChB,QAAQ,KAAK,yBAA0B;AAAA,UACvC,qBAAqB,KAAK,yBAA0B;AAAA,UACpD,WAAW,KAAK,yBAA0B;AAAA,UAC1C,WAAW,OAAO,WAAW;AAAA,UAC7B,oBAAoB,QAAQ;AAAA,UAC5B,cAAc,QAAQ;AAAA,UACtB,sBAAsB,QAAQ;AAAA,UAC9B,MAAM,QAAQ;AAAA,UACd,SAAS,QAAQ;AAAA,QACnB,CAAC;AACD,eAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,MACjC;AAAA,IACF,IACA,CAAC;AAAA,IACL,gCAAgC;AAAA,MAC9B;AAAA,MACA;AAAA,QACE,WAAW,KAAK;AAAA,QAChB,aAAa,KAAK;AAAA,QAClB,WAAW,KAAK;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AAAA,IACA,yBAAyB,OAAO,YAAY;AAC1C,YAAM,aAAa,MAAM,+CAA+C,IAAI;AAAA,QAC1E,WAAW,KAAK;AAAA,QAChB,aAAa,KAAK;AAAA,QAClB,WAAW,KAAK;AAAA,QAChB,WAAW,QAAQ;AAAA,QACnB,oBAAoB,QAAQ;AAAA,QAC5B,cAAc,QAAQ;AAAA,QACtB,sBAAsB,QAAQ;AAAA,QAC9B,MAAM,QAAQ;AAAA,QACd,SAAS,QAAQ;AAAA,QACjB,UAAU,QAAQ;AAAA,QAClB,QAAQ,QAAQ;AAAA,QAChB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,MACxD,CAAC;AACD,UAAI,cAAc,KAAK;AACrB,cAAM,IACH,QAAQ,KAAK,aAAa,KAAK,WAAW,WAAW,MAAM,EAC3D,MAAM,MAAM,MAAS;AAAA,MAC1B;AAAA,IACF;AAAA;AAAA,IAEA,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA,IAIrC,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,EAC/C,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,cAAc,EAAE,SAAS,KAAK,QAAQ;AAAA,IACtC,YAAY,KAAK;AAAA,IACjB,WAAW;AAAA,EACb;AACF;AAMO,SAAS,eAAe,UAA6B;AAC1D,SAAO,SAAS,6BAA6B;AAC/C;AASO,SAAS,qBAAqB,UAA6B;AAChE,SAAO,SAAS,gCAAgC,QAAQ,SAAS,4BAA4B;AAC/F;;;AG5oDA;AAAA,EACE;AAAA,EACA,kBAAAI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,kDAAiE;AA8B1E,eAAsB,wBACpB,KACA,aACA,gBACA,YACe;AACf,MAAI;AACF,UAAM,QAAQ,MAAM,WAAW,IAAI,IAAI,aAAa,cAAc;AAClE,QAAI,CAAC,SAAS,CAAC,MAAM,iBAAiB;AACpC;AAAA,IACF;AACA,UAAM,OAAO,MAAMA,gBAAe,IAAI,IAAI,aAAa,cAAc;AACrE,UAAM,gBAAgB,oBAAoB,cAAc,IAAI,UAAU;AAGtE,UAAM,UAAU,uBAAuB,OAAO,IAAI;AAClD,UAAM,gCAAgC,MAAM;AAAA,MAC1C,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,IACF;AACA,UAAM,qBAAqB,MAAM;AAAA,MAC/B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,IACF;AACA,UAAM,eAAe,MAAM;AAAA,MACzB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,IACF;AACA,UAAM,SAAS,MAAM,qCAAqC,IAAI,IAAI;AAAA,MAChE,WAAW,MAAM;AAAA,MACjB;AAAA,MACA,iBAAiB,MAAM;AAAA,MACvB,iBAAiB,MAAM;AAAA,MACvB,MAAM;AAAA,MACN,gBAAgB,MAAM,WAAW,WAAW,oBAAoB;AAAA,MAChE,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,MACX,SAAS,uBAAuB,OAAO,MAAM,MAAM;AAAA,MACnD;AAAA,MACA,SAAS;AAAA,QACP,gBAAgB,MAAM;AAAA,QACtB,iBAAiB,MAAM;AAAA,QACvB,GAAI,aAAa,YAAY,EAAE,uBAAuB,aAAa,UAAU,IAAI,CAAC;AAAA,MACpF;AAAA,MACA;AAAA,MACA;AAAA,MACA,qCAAqC,aAAa;AAAA,IACpD,CAAC;AACD,QAAI,OAAO,WAAW,aAAa;AACjC;AAAA,IACF;AACA,UAAM,gCAAgC,KAAK,MAAM;AAAA,EACnD,SAAS,OAAO;AAGd,QAAI,cAAc,MAAM,yDAAyD;AAAA,MAC/E;AAAA,MACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AASA,eAAsB,oCACpB,KACA,aACA,gBACA,WACA,UAAoC,CAAC,GACtB;AACf,MAAI;AACF,UAAM,QAAQ,MAAM,WAAW,IAAI,IAAI,aAAa,cAAc;AAClE,QAAI,CAAC,SAAS,CAAC,MAAM,gBAAiB;AACtC,UAAM,SAAS,MAAM,wCAAwC,IAAI,IAAI;AAAA,MACnE,WAAW,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ;AACX,UAAI,QAAQ,eAAe,MAAO;AAClC,YAAM,IAAI,MAAM,iDAAiD,SAAS,EAAE;AAAA,IAC9E;AACA,QAAI,OAAO,WAAW,YAAa;AACnC,UAAM,gCAAgC,KAAK,MAAM;AAAA,EACnD,SAAS,OAAO;AACd,QAAI,cAAc,MAAM,sDAAsD;AAAA,MAC5E;AAAA,MACA;AAAA,MACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAOA,eAAsB,+BACpB,KACA,aACA,gBACA,QACe;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,oBAAoB,cAAc,SAAS,MAAM;AAAA,EACnD;AACF;AAOA,eAAsB,mCACpB,KACA,aACA,gBACA,OACe;AACf,MAAI,CAAC,IAAI,SAAS,6BAA8B;AAChD,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,6BAA6B;AAAA,MAC3B;AAAA,MACA,QAAQ,MAAM;AAAA,MACd,gBAAgB,MAAM;AAAA,IACxB,CAAC;AAAA;AAAA;AAAA,IAGD,EAAE,YAAY,MAAM;AAAA,EACtB;AACF;AAEA,eAAe,gCACb,KACA,QACe;AACf,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ;AAAA,QACE,WAAW,OAAO;AAAA,QAClB,aAAa,OAAO;AAAA,QACpB,WAAW,OAAO;AAAA,QAClB,GAAG,qCAAqC,MAAM;AAAA,QAC9C,gBAAgB,OAAO;AAAA,QACvB,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,SAAS,OAAO;AAAA,QAChB,SAAS,OAAO;AAAA,QAChB,+BAA+B,OAAO;AAAA,QACtC,oBAAoB,OAAO;AAAA,QAC3B,qCAAqC,OAAO;AAAA,MAC9C;AAAA,MACA,OAAO,OAAO;AACZ,cAAM,oDAAoD,IAAI,MAAM;AAAA,MACtE;AAAA,IACF;AACA,QAAI,OAAO,WAAW,qBAAqB;AACzC;AAAA,IACF;AACA,QAAI,OAAO,SAAS,OAAO,OAAO,SAAS,GAAG;AAC5C,YAAM,IAAI,IAAI,QAAQ,OAAO,aAAa,OAAO,iBAAiB,OAAO,MAAM;AAAA,IACjF;AACA,QAAI,OAAO,cAAc,IAAI,qBAAqB;AAChD,UAAI,OAAO,yBAAyB,MAAM;AACxC,cAAM,IAAI,MAAM,sDAAsD;AAAA,MACxE;AACA,YAAM,IAAI,oBAAoB;AAAA,QAC5B,WAAW,OAAO;AAAA,QAClB,aAAa,OAAO;AAAA,QACpB,WAAW,OAAO;AAAA,QAClB,YAAY,OAAO,sBAAsB,WAAW,OAAO,eAAe;AAAA,QAC1E,cAAc,OAAO;AAAA,MACvB,CAAC;AAAA,IACH;AACA,QAAI,cAAc,KAAK,sDAAsD;AAAA,MAC3E,gBAAgB,OAAO;AAAA,MACvB,iBAAiB,OAAO;AAAA,MACxB,MAAM,OAAO;AAAA,MACb,WAAW,OAAO;AAAA,MAClB,MAAM,OAAO;AAAA,IACf,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM;AAAA,MACJ,IAAI;AAAA,MACJ;AAAA,MACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IACvD,EAAE,MAAM,MAAM,MAAS;AACvB,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,oCACpB,KACA,QAAQ,KACR,YAAkD,CAAC,GACc;AACjE,QAAM,0CACJ,UAAU,yCAAyC;AACrD,QAAM,OAAO,MAAM,wCAAwC,IAAI,IAAI,KAAK;AACxE,MAAI,YAAY;AAChB,MAAI,SAAS;AACb,aAAW,OAAO,MAAM;AACtB,QAAI;AACF,YAAM,gCAAgC,KAAK,GAAG;AAC9C,mBAAa;AAAA,IACf,QAAQ;AACN,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO,EAAE,SAAS,KAAK,QAAQ,WAAW,OAAO;AACnD;AAeA,eAAsB,qCACpB,KACA,QAAQ,KACR,YAA2D,CAAC,GACK;AACjE,6CAA2C,IAAI,GAAG;AAClD,QAAM,QAAQ,UAAU,oCAAoC;AAC5D,QAAM,gBACJ,UAAU,4CAA4C;AACxD,QAAM,aACJ,UAAU,yCAAyC;AACrD,QAAM,OAAO,MAAM,MAAM,IAAI,IAAI,KAAK;AACtC,MAAI,YAAY;AAChB,MAAI,SAAS;AACb,QAAM,QAAQ,CAAC,GAAG,IAAI;AACtB,QAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,IAAI,MAAM,MAAM,EAAE,GAAG,YAAY;AAC7E,eAAS;AACP,YAAM,MAAM,MAAM,MAAM;AACxB,UAAI,CAAC,IAAK;AACV,UAAI;AACF,YAAI,IAAI,IAAI,cAAc,MAAM,OAAO;AACrC,gBAAM,IAAI,MAAM,mCAAmC;AAAA,QACrD;AACA,YAAI,IAAI,IAAI,kBAAkB;AAC5B,gBAAM,IAAI,IAAI,iBAAiB,IAAI,MAAM,aAAa,IAAI,MAAM,WAAW,CAAC,IAAI,KAAK,CAAC;AAAA,QACxF,OAAO;AACL,gBAAM,IAAI,IAAI,QAAQ,IAAI,MAAM,aAAa,IAAI,MAAM,WAAW,CAAC,IAAI,KAAK,CAAC;AAAA,QAC/E;AACA,cAAM,cAAc,IAAI,IAAI,GAAG;AAC/B,qBAAa;AAAA,MACf,SAAS,OAAO;AACd,kBAAU;AACV,cAAM,WAAW,IAAI,IAAI,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,EAAE;AAAA,UACpF,MAAM;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,IAAI,OAAO;AACzB,SAAO,EAAE,SAAS,KAAK,QAAQ,WAAW,OAAO;AACnD;AAuBA,eAAsB,qCACpB,KACA,QAAQ,KACR,YAAmD,CAAC,GACT;AAC3C,QAAM,qCACJ,UAAU,oCAAoC;AAChD,MAAI,CAAC,IAAI,qBAAqB;AAC5B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,UAAU;AAAA,MACV,WAAW;AAAA,MACX,kBAAkB;AAAA,MAClB,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,0BAA0B,CAAC;AAAA,IAC7B;AAAA,EACF;AACA,QAAM,UAAU,MAAM,mCAAmC,IAAI,IAAI,KAAK;AACtE,MAAI,WAAW;AACf,MAAI,mBAAmB;AACvB,MAAI,cAAc;AAClB,QAAM,2BAAyF,CAAC;AAChG,MAAI,YAAY;AAChB,MAAI,SAAS;AACb,QAAM,QAAQ,CAAC,GAAG,OAAO;AACzB,QAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,IAAI,MAAM,MAAM,EAAE,GAAG,YAAY;AAC7E,eAAS;AACP,YAAM,SAAS,MAAM,MAAM;AAC3B,UAAI,CAAC,OAAQ;AACb,UAAI,iBAAiB;AACrB,YAAM,mBAAmB,MAAM;AAC7B,YAAI,eAAgB;AACpB,yBAAiB;AACjB,oBAAY;AAAA,MACd;AACA,UAAI;AACF,cAAM,UAAU,MAAM,IAAI,oBAAqB;AAAA,UAC7C,WAAW,OAAO;AAAA,UAClB,aAAa,OAAO;AAAA,UACpB,WAAW,OAAO;AAAA,UAClB,YAAY,OAAO;AAAA,UACnB,cAAc,OAAO;AAAA,UACrB,GAAI,OAAO,wBAAwB,EAAE,uBAAuB,KAAK,IAAI,CAAC;AAAA,UACtE;AAAA,QACF,CAAC;AAGD,yBAAiB;AACjB,YAAI,SAAS,WAAW,gBAAgB;AACtC,uBAAa;AAAA,QACf,WAAW,SAAS,WAAW,qBAAqB;AAClD,8BAAoB;AACpB,mCAAyB,QAAQ,OAAO,KACrC,yBAAyB,QAAQ,OAAO,KAAK,KAAK;AAAA,QACvD,OAAO;AAGL,yBAAe;AAAA,QACjB;AAAA,MACF,SAAS,OAAO;AACd,kBAAU;AACV,cAAM;AAAA,UACJ,IAAI;AAAA,UACJ;AAAA,UACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,QACvD,EAAE,MAAM,MAAM,MAAS;AAAA,MACzB;AAAA,IACF;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,IAAI,OAAO;AACzB,SAAO;AAAA,IACL,SAAS,QAAQ;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,uBACP,OACA,MACwE;AACxE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,gBAAgB,MAAM;AAAA,IACtB,QAAQ;AAAA,IACR,GAAI,OACA;AAAA,MACE,MAAM;AAAA,QACJ,QAAQ,KAAK;AAAA,QACb,MAAM,KAAK;AAAA,QACX,GAAI,KAAK,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;AAAA,QACnD,GAAI,KAAK,YAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,QACtD,GAAI,KAAK,eAAe,EAAE,cAAc,KAAK,aAAa,IAAI,CAAC;AAAA,MACjE;AAAA,IACF,IACA,CAAC;AAAA,EACP;AACF;AAQO,SAAS,uBACd,OACA,MACA,gBACQ;AACR,QAAM,QAAkB,CAAC;AACzB,MAAI,mBAAmB,UAAU;AAC/B,UAAM,KAAK,+DAA+D,MAAM,EAAE,GAAG;AAAA,EACvF,WAAW,MAAM,WAAW,aAAa;AACvC,UAAM;AAAA,MACJ,2EAA2E,MAAM,EAAE;AAAA,IACrF;AAAA,EACF,WAAW,MAAM,WAAW,UAAU;AACpC,UAAM;AAAA,MACJ,sFAAsF,MAAM,EAAE;AAAA,IAChG;AAAA,EACF,OAAO;AACL,UAAM;AAAA,MACJ,wFAAwF,MAAM,EAAE;AAAA,IAClG;AAAA,EACF;AACA,MAAI,MAAM;AACR,UAAM,KAAK,gBAAgB,KAAK,IAAI,EAAE;AACtC,QAAI,KAAK,WAAW,eAAe,KAAK,UAAU;AAChD,YAAM,KAAK,wBAAwB,KAAK,QAAQ,EAAE;AAAA,IACpD;AACA,QAAI,KAAK,WAAW,YAAY,KAAK,WAAW;AAC9C,YAAM,KAAK,oBAAoB,KAAK,SAAS,EAAE;AAAA,IACjD;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;;;AC7eA,SAAS,mBAAmB,iBAAAC,sBAAqB;AAY1C,SAAS,+BAA+B,QAA6B;AAC1E,MAAI,WAAW,aAAa;AAC1B,UAAM,IAAI,MAAM,qEAAqE;AAAA,EACvF;AACF;AAEO,SAAS,4BACd,QACA,WACA,OACA,QACA,OACuE;AACvE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IACN,iBAAiB;AAAA,IACjB,oBAAoB;AAAA,IACpB,GAAI,UAAU,SAAS,EAAE,UAAU,IAAI,CAAC;AAAA,IACxC,GAAI,MAAM,SAAS,EAAE,MAAM,IAAI,CAAC;AAAA,EAClC;AACF;AAEO,SAAS,qBAAqB,WAA2B;AAC9D,SAAO,WAAW,SAAS;AAC7B;;;AC5CA;AAAA,EACE;AAAA,EACA;AAAA,OAMK;AACP,SAAS,cAAAC,mBAAkB;AAC3B,SAAS,qBAAAC,0BAAyB;AA6C3B,IAAM,iDAAiD;AAkBvD,SAAS,sCACd,aACA,mBACuC;AACvC,QAAM,YAAY;AAClB,QAAM,iBAAiB,UAAU;AACjC,QAAM,eAAe,UAAU;AAC/B,MAAI,mBAAmB,UAAa,iBAAiB,UAAa,CAAC,mBAAmB;AACpF,WAAO,EAAE,QAAQ,eAAe;AAAA,EAClC;AACA,MAAI,mBAAmB,wBAAwB,iBAAiB,QAAW;AACzE,WAAO,EAAE,QAAQ,WAAW,QAAQ,sCAAsC;AAAA,EAC5E;AAEA,QAAM,SAAS,2BAA2B,UAAU,YAAY;AAChE,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,oBAAoB,OAAO,MAAM,OAAO,KAAK,CAAC,UAAU,MAAM,KAAK,CAAC,MAAM,YAAY;AAC5F,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,oBACJ,oCACA;AAAA,IACN;AAAA,EACF;AACA,SAAO,EAAE,QAAQ,YAAY,WAAW,OAAO,KAAK;AACtD;AAOO,SAAS,mCACd,OACkC;AAClC,QAAM,cAAc;AAAA,IAClB,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACA,MAAI,YAAY,WAAW,WAAY,QAAO;AAC9C,QAAM,YAAY,YAAY;AAE9B,MAAI,CAAC,MAAM,UAAU,kBAAkB;AACrC,WAAO,QAAQ,qCAAqC;AAAA,EACtD;AAEA,MACE,UAAU,kBAAkB;AAAA,IAC1B,CAAC,aACC,CAAC,MAAM,UAAU,UAAU,KAAK,CAAC,aAAaA,mBAAkB,UAAU,QAAQ,CAAC;AAAA,EACvF,GACA;AACA,WAAO,QAAQ,kCAAkC;AAAA,EACnD;AAEA,QAAM,uBAAuB,IAAI,IAAI,MAAM,UAAU,YAAY;AACjE,MAAI,UAAU,qBAAqB,KAAK,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,GAAG;AAC9E,WAAO,QAAQ,kCAAkC;AAAA,EACnD;AAEA,QAAM,0BAA0B,IAAI,IAAI,MAAM,UAAU,kBAAkB;AAC1E,MAAI,UAAU,2BAA2B,KAAK,CAAC,SAAS,CAAC,wBAAwB,IAAI,IAAI,CAAC,GAAG;AAC3F,WAAO,QAAQ,kCAAkC;AAAA,EACnD;AAEA,QAAM,gCAAgC,IAAI,IAAI,MAAM,UAAU,wBAAwB;AACtF,MACE,UAAU,iCAAiC;AAAA,IACzC,CAAC,eAAe,CAAC,8BAA8B,IAAI,UAAU;AAAA,EAC/D,GACA;AACA,WAAO,QAAQ,kCAAkC;AAAA,EACnD;AAEA,MAAI,UAAU,eAAe,CAAC,aAAa,MAAM,UAAU,KAAK,UAAU,WAAW,GAAG;AACtF,WAAO,QAAQ,kCAAkC;AAAA,EACnD;AAEA,QAAM,qBAAqB,IAAI,IAAI,MAAM,UAAU,aAAa,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC;AAC7F,MAAI,UAAU,yBAAyB,KAAK,CAAC,SAAS,CAAC,mBAAmB,IAAI,IAAI,CAAC,GAAG;AACpF,WAAO,QAAQ,kCAAkC;AAAA,EACnD;AACA,QAAM,wBAAwB,IAAI;AAAA,IAChC,MAAM,UAAU,aAAa,QAAQ,CAAC,QAAQ,IAAI,UAAU,IAAI,CAAC,aAAa,SAAS,IAAI,CAAC;AAAA,EAC9F;AACA,MAAI,UAAU,sBAAsB,KAAK,CAAC,SAAS,CAAC,sBAAsB,IAAI,IAAI,CAAC,GAAG;AACpF,WAAO,QAAQ,kCAAkC;AAAA,EACnD;AAEA,QAAM,QAAQ,UAAU,WAAW;AACnC,MAAI,MAAM,SAAS,SAAS,CAAC,qBAAqB,IAAI,MAAM,QAAQ,GAAG;AACrE,WAAO,QAAQ,kCAAkC;AAAA,EACnD;AACA,MAAI,MAAM,SAAS,iBAAiB,CAAC,wBAAwB,IAAI,MAAM,IAAI,GAAG;AAC5E,WAAO,QAAQ,kCAAkC;AAAA,EACnD;AACA,MAAI,MAAM,SAAS,gBAAgB;AACjC,UAAM,WAAW,mBAAmB,IAAI,MAAM,eAAe;AAC7D,UAAM,QAAQ,IAAI,IAAI,UAAU,UAAU,IAAI,CAAC,aAAa,SAAS,IAAI,KAAK,CAAC,CAAC;AAChF,QAAI,CAAC,YAAY,MAAM,cAAc,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG;AACrE,aAAO,QAAQ,kCAAkC;AAAA,IACnD;AAAA,EACF;AACA,MACE,MAAM,SAAS,yBACf,CAAC,aAAa,MAAM,UAAU,KAAK;AAAA,IACjC,MAAM,UAAU,aAAa,QAAQ;AAAA,IACrC,mBAAmB,CAAC,MAAM,gBAAgB;AAAA,EAC5C,CAAC,GACD;AACA,WAAO,QAAQ,kCAAkC;AAAA,EACnD;AAEA,MAAI,CAAC,wBAAwB,UAAU,UAAU,GAAG;AAClD,WAAO,QAAQ,iCAAiC;AAAA,EAClD;AACA,MAAI,CAAC,sBAAsB,UAAU,YAAY,MAAM,qBAAqB,GAAG;AAC7E,WAAO,QAAQ,iCAAiC;AAAA,EAClD;AACA,SAAO,EAAE,QAAQ,QAAQ;AAC3B;AAEO,SAAS,gCAAgC,OAIL;AACzC,QAAM,EAAE,MAAM,UAAU,IAAI;AAC5B,MAAI,UAAU,sBAAsB,KAAM,QAAO;AACjD,QAAM,cAAc;AAAA,IAClB,KAAK;AAAA,IACL,MAAM,0BAA0B;AAAA,EAClC;AACA,MAAI,YAAY,WAAW,cAAc,CAAC,MAAM,sBAAuB,QAAO;AAC9E,QAAM,kBAAkB,YAAY,UAAU,WAAW,oBACtD,IAAI,CAAC,UAAU,CAAC,OAAO,MAAM,wBAAwB,KAAK,CAAC,CAAU,EACrE,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,CAAC;AACtD,MAAI,gBAAgB,KAAK,CAAC,CAAC,EAAE,KAAK,MAAM,OAAO,UAAU,YAAY,MAAM,WAAW,CAAC,GAAG;AACxF,WAAO;AAAA,EACT;AACA,QAAM,aAAa;AAAA,IACjB,kBAAkB,UAAU;AAAA,IAC5B,WAAW,CAAC,GAAG,UAAU,SAAS,EAAE,IAAI,CAAC,aAAa,WAAW,QAAQ,CAAC,EAAE,KAAK;AAAA,IACjF,cAAc,CAAC,GAAG,UAAU,YAAY,EAAE,KAAK;AAAA,IAC/C,oBAAoB,CAAC,GAAG,UAAU,kBAAkB,EAAE,KAAK;AAAA,IAC3D,0BAA0B,CAAC,GAAG,UAAU,wBAAwB,EAAE,KAAK;AAAA,IACvE,KAAK,UAAU,MACX;AAAA,MACE,MAAM,UAAU,IAAI;AAAA,MACpB,iBAAiB,CAAC,GAAG,UAAU,IAAI,eAAe,EAAE,KAAK;AAAA,MACzD,aAAa,UAAU,IAAI;AAAA,IAC7B,IACA;AAAA,IACJ,cAAc,CAAC,GAAG,UAAU,YAAY,EACrC,IAAI,CAAC,SAAS;AAAA,MACb,MAAM,IAAI;AAAA,MACV,WAAW,IAAI,UAAU,IAAI,CAAC,aAAa,SAAS,IAAI,EAAE,KAAK;AAAA,IACjE,EAAE,EACD,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC;AAAA,EAC9D;AACA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,mBAAmB,UAAU;AAAA,IAC7B,iBAAiBD,YAAW,QAAQ,EAAE,OAAO,WAAW,UAAU,CAAC,EAAE,OAAO,KAAK;AAAA,IACjF,YAAYA,YAAW,QAAQ,EAAE,OAAO,WAAW,IAAI,CAAC,EAAE,OAAO,KAAK;AAAA,IACtE,qBAAqBA,YAAW,QAAQ,EAAE,OAAO,WAAW,eAAe,CAAC,EAAE,OAAO,KAAK;AAAA,EAC5F;AACF;AAEO,SAAS,qCACd,SACwC;AACxC,QAAM,MAAM,QAAQ,8CAA8C;AAClE,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO;AAClE,QAAM,QAAQ;AACd,SAAO,MAAM,YAAY,KACvB,OAAO,MAAM,sBAAsB,YACnC,OAAO,UAAU,MAAM,iBAAiB,KACxC,MAAM,oBAAoB,KAC1B,OAAO,MAAM,oBAAoB,YACjC,iBAAiB,KAAK,MAAM,eAAe,KAC3C,OAAO,MAAM,eAAe,YAC5B,iBAAiB,KAAK,MAAM,UAAU,KACtC,OAAO,MAAM,wBAAwB,YACrC,iBAAiB,KAAK,MAAM,mBAAmB,IAC7C;AAAA,IACE,SAAS;AAAA,IACT,mBAAmB,MAAM;AAAA,IACzB,iBAAiB,MAAM;AAAA,IACvB,YAAY,MAAM;AAAA,IAClB,qBAAqB,MAAM;AAAA,EAC7B,IACA;AACN;AAEA,SAAS,QAAQ,QAAiF;AAChG,SAAO,EAAE,QAAQ,WAAW,OAAO;AACrC;AAEA,SAAS,aACP,KACA,UACS;AACT,MAAI,CAAC,OAAO,IAAI,SAAS,SAAS,QAAQ,IAAI,gBAAgB,WAAW;AACvE,WAAO;AAAA,EACT;AACA,QAAM,UAAU,IAAI,IAAI,IAAI,eAAe;AAC3C,SAAO,SAAS,kBAAkB,MAAM,CAAC,WAAW,QAAQ,IAAI,MAAM,CAAC;AACzE;AAEA,SAAS,wBAAwB,YAA+D;AAC9F,MAAI,WAAW,cAAc,mBAAmB,WAAW,cAAc,uBAAuB;AAC9F,WAAO;AAAA,EACT;AACA,SAAO,WAAW,eAAe;AAAA,IAAM,CAAC,aACtC,WAAW,gBAAgB,KAAK,CAAC,cAAc;AAC7C,UAAI,UAAU,WAAW,SAAS,OAAQ,QAAO;AACjD,YAAM,SAAS,IAAI,IAAI,UAAU,MAAM;AACvC,aACE,OAAO,IAAI,WAAW,cAAc,KAAK,SAAS,OAAO,MAAM,CAAC,UAAU,OAAO,IAAI,KAAK,CAAC;AAAA,IAE/F,CAAC;AAAA,EACH;AACF;AAEA,SAAS,sBACP,YACA,kBACS;AACT,MAAI,CAAC,iBAAkB,QAAO;AAC9B,SAAO,WAAW,oBAAoB;AAAA,IACpC,CAAC,UACC,UAAU,WAAW,kBACrB,OAAO,iBAAiB,KAAK,MAAM,YACnC,iBAAiB,KAAK,EAAG,SAAS,KAClC,WAAW,eAAe,MAAM,CAAC,WAAW,OAAO,OAAO,SAAS,KAAK,CAAC,KACzE,WAAW,gBAAgB;AAAA,MACzB,CAAC,WACC,WAAW,eAAe,KAAK,CAAC,aAAa,SAAS,WAAW,OAAO,MAAM,KAC9E,OAAO,OAAO,SAAS,WAAW,cAAc,KAChD,OAAO,OAAO,SAAS,KAAK;AAAA,IAChC;AAAA,EACJ;AACF;;;AC5TA;AAAA,EACE;AAAA,OAMK;AACP,SAAS,4BAA4B,gCAAgC;AACrE;AAAA,EACE;AAAA,EACA;AAAA,EACA,wCAAAE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAAC;AAAA,OAEK;AACP;AAAA,EACE,uCAAAC;AAAA,EACA;AAAA,OAEK;AAWP,eAAsB,0CAA0C,OAqBhB;AAC9C,QAAM,CAAC,qBAAqB,uBAAuB,IAAI,MAAM,QAAQ,IAAI;AAAA,IACvE,kCAAkC,MAAM,IAAI,MAAM,KAAK,WAAW;AAAA,IAClE;AAAA,MACE,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,MACX,MAAM;AAAA,IACR;AAAA,EACF,CAAC;AACD,QAAM,eAAe,MAAM,kBACvB,MAAM,gBAAgB,QACtB,MAAM,UACJ,MAAM,QAAQ,QACd,oBAAoB,MAAM,UAAU,MAAM,KAAK,YAAY,KAAK;AACtE,QAAM,qBAAqB,4CAA4C;AAAA,IACrE,sBAAsB,MAAM,SAAS,WAAW,IAAI,CAAC,WAAW,OAAO,EAAE;AAAA,IACzE;AAAA,IACA;AAAA,IACA,GAAI,MAAM,kBACN,EAAE,6BAA6B,MAAM,gBAAgB,aAAa,IAClE,CAAC;AAAA,IACL,SAAS,MAAM,kBACX;AAAA,MACE,YAAY,MAAM,gBAAgB,aAAa,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;AAAA,MACnE,OAAO,MAAM,gBAAgB;AAAA,MAC7B,YAAY,MAAM,gBAAgB;AAAA,IACpC,IACA,MAAM;AAAA,IACV,cAAc;AAAA,EAChB,CAAC;AAED,MAAI,mBAAmB;AACvB,MAAI,MAAiD;AACrD,QAAM,iBAAiB,oBAAI,IAAY;AACvC,MAAI,MAAM,mBAAmB,MAAM,SAAS;AAC1C,eAAW,MAAM,MAAM,iBAAiB,kBAAkB,MAAM,SAAS,kBAAkB,CAAC,GAAG;AAC7F,qBAAe,IAAI,EAAE;AAAA,IACvB;AACA,UAAM,gBAAgB,MAAM,iBAAiB,iBAAiB,MAAM,SAAS;AAC7E,UAAM,QAAQ,MAAM,iBAAiB,SAAS,MAAM,SAAS,SAAS;AACtE,UAAM,eAAe,MAAM,iBAAiB,gBAAgB,MAAM,SAAS,gBAAgB;AAC3F,QAAI,cAAe,gBAAe,IAAI,aAAa;AACnD,QAAK,UAAU,UAAW,iBAAiB,OAAO;AAChD,yBAAmB;AAAA,IACrB,WAAW,SAAS,cAAc;AAChC,YAAM,WAAW,MAAM;AAAA,QACrB,MAAM;AAAA,QACN;AAAA,UACE,WAAW,MAAM,KAAK;AAAA,UACtB,aAAa,MAAM,KAAK;AAAA,UACxB,WAAW,MAAM,sCAAsC,MAAM,KAAK,UAAU;AAAA,QAC9E;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,UAAI,CAAC,UAAU;AACb,2BAAmB;AAAA,MACrB,OAAO;AACL,cAAM;AAAA,UACJ,MAAM,SAAS;AAAA,UACf,iBAAiB,SAAS,QAAQ;AAAA,UAClC,aAAa,SAAS,OAAO;AAAA,QAC/B;AACA,mBAAW,MAAM,SAAS,QAAQ,sBAAuB,gBAAe,IAAI,EAAE;AAAA,MAChF;AAAA,IACF;AAAA,EACF,OAAO;AACL,QAAI,MAAM,KAAK,cAAe,gBAAe,IAAI,MAAM,KAAK,aAAa;AACzE,QAAI,MAAM,KAAK,OAAO;AACpB,YAAM,cAAc,MAAM;AAAA,QACxB,MAAM;AAAA,QACN;AAAA,UACE,WAAW,MAAM,KAAK;AAAA,UACtB,aAAa,MAAM,KAAK;AAAA,UACxB,WAAW,MAAM,sCAAsC,MAAM,KAAK,UAAU;AAAA,QAC9E;AAAA,QACA,MAAM,KAAK;AAAA,MACb;AACA,UAAI,CAAC,aAAa,iBAAiB,CAAC,YAAY,qBAAqB;AACnE,2BAAmB;AAAA,MACrB,OAAO;AACL,cAAM;AAAA,UACJ,MAAM,YAAY;AAAA,UAClB,iBAAiB,YAAY,cAAc;AAAA,UAC3C,aAAa,YAAY,oBAAoB;AAAA,QAC/C;AACA,mBAAW,MAAM,YAAY,cAAc,sBAAuB,gBAAe,IAAI,EAAE;AAAA,MACzF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eAAe,MAAM,QAAQ;AAAA,IACjC,CAAC,GAAG,cAAc,EAAE;AAAA,MAClB,OAAO,OACL,MAAM;AAAA,QACJ,MAAM;AAAA,QACN;AAAA,UACE,WAAW,MAAM,KAAK;AAAA,UACtB,aAAa,MAAM,KAAK;AAAA,UACxB,WAAW,MAAM,sCAAsC,MAAM,KAAK,UAAU;AAAA,QAC9E;AAAA,QACA;AAAA,MACF;AAAA,IACJ;AAAA,EACF;AACA,MAAI,aAAa,KAAK,CAAC,gBAAgB,gBAAgB,IAAI,GAAG;AAC5D,uBAAmB;AAAA,EACrB;AAEA,SAAO;AAAA,IACL;AAAA,IACA,WAAW,MAAM,kBACb,MAAM,KAAK,YAAY,YACtB,MAAM,SAAS,aAAa,MAAM,KAAK,YAAY;AAAA,IACxD,cAAc,mBAAmB,SAAS,IAAI,CAAC,SAAS,KAAK,EAAE;AAAA,IAC/D,oBAAoB,MAAM,kBACtB,MAAM,gBAAgB,qBACtB,MAAM,UACJC,qCAAoC,MAAM,UAAU,MAAM,QAAQ,kBAAkB,IACpF,+BAA+B,MAAM,QAAQ,EAAE;AAAA,IACrD,0BAA0B,MAAM,kBAC3B,MAAM,gBAAgB,4BAA4B,sCAClD,MAAM,SAAS,4BAA4B;AAAA,IAChD;AAAA,IACA,cAAc,aAAa;AAAA,MAAQ,CAAC,gBAClC,cACI;AAAA,QACE;AAAA,UACE,MAAM,YAAY;AAAA,UAClB,WAAW,YAAY,UAAU,IAAI,CAAC,cAAc;AAAA,YAClD,MAAM,SAAS;AAAA,UACjB,EAAE;AAAA,QACJ;AAAA,MACF,IACA,CAAC;AAAA,IACP;AAAA,IACA,mBACE,MAAM,iBAAiB,qBAAqB,MAAM,SAAS,qBAAqB;AAAA,EACpF;AACF;AAGO,SAAS,4CAA4C,OAWzD;AACD,QAAM,+BAA+B,IAAI,IAAI,MAAM,oBAAoB;AACvE,aAAW,MAAM,MAAM,oBAAqB,8BAA6B,IAAI,EAAE;AAC/E,aAAW,MAAM,MAAM,wBAAyB,8BAA6B,IAAI,EAAE;AACnF,aAAW,MAAM,MAAM,+BAA+B,CAAC,GAAG;AACxD,iCAA6B,IAAI,EAAE;AAAA,EACrC;AAEA,QAAM,wBAAwB,IAAI,IAAI,4BAA4B;AAClE,aAAW,UAAU,MAAM,SAAS,cAAc,CAAC,GAAG;AACpD,0BAAsB,IAAI,OAAO,EAAE;AAAA,EACrC;AAEA,SAAO,yBAAyB;AAAA,IAC9B,YAAY,MAAM,SAAS,cAAc;AAAA,MACvC,MAAM;AAAA,MACN,wBAAwB;AAAA,IAC1B;AAAA,IACA,cAAc,MAAM;AAAA,IACpB;AAAA,IACA,qBAAqB;AAAA,MACnB,CAAC,GAAG,4BAA4B,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;AAAA,IACxD;AAAA,EACF,CAAC;AACH;AAGA,eAAsB,+CAA+C,OAMI;AACvE,MAAI,EAAE,kDAAkD,MAAM,OAAO,UAAU;AAC7E,WAAO,EAAE,QAAQ,SAAS;AAAA,EAC5B;AACA,QAAM,QAAQ,qCAAqC,MAAM,OAAO,OAAO;AACvE,QAAM,UAAU,MAAM,OAAO;AAC7B,QAAM,SAAS,MAAM,OAAO,QAAQ;AACpC,QAAM,QAAQ,QAAQ,SAAS,yBAAyB,QAAQ,qBAAqB;AACrF,QAAM,SAAS,YAAY;AACzB,QAAI,OAAO;AACT,YAAM,mDAAmD,MAAM,IAAI;AAAA,QACjE,aAAa,MAAM;AAAA,QACnB,WAAW,MAAM;AAAA,QACjB;AAAA,MACF,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,CAAC,SAAS,OAAO,WAAW,YAAY,CAAC,MAAO,QAAO,MAAM,OAAO;AAExE,QAAM,UAAU,MAAMC,gBAAe,MAAM,IAAI,MAAM,aAAa,MAAM,SAAS;AACjF,QAAM,oBAAoB,MAAMC,sCAAqC,MAAM,IAAI;AAAA,IAC7E,aAAa,MAAM;AAAA,IACnB;AAAA,EACF,CAAC;AACD,MACE,CAAC,qBACD,kBAAkB,KAAK,OAAO,UAC9B,CAAC,kBAAkB,2BACnB;AACA,WAAO,MAAM,OAAO;AAAA,EACtB;AACA,QAAM,OAAO,kBAAkB;AAC/B,QAAM,gCAAgC,kBAAkB;AACxD,QAAM,YAAY,MAAM,0CAA0C;AAAA,IAChE,IAAI,MAAM;AAAA,IACV,UAAU,MAAM;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,oCAAoC,kBAAkB;AAAA,IACtD,iBAAiB,kBAAkB,yBAC/B;AAAA,MACE,OAAO,kBAAkB,uBAAuB;AAAA,MAChD,oBAAoB,kBAAkB,uBAAuB;AAAA,MAC7D,0BACE,kBAAkB,uBAAuB;AAAA,MAC3C,gBAAgB,kBAAkB,uBAAuB,aAAa;AAAA,QACpE,CAAC,gBAAgB,YAAY;AAAA,MAC/B;AAAA,MACA,eAAe,kBAAkB,uBAAuB;AAAA,MACxD,OAAO,kBAAkB,uBAAuB;AAAA,MAChD,cAAc,kBAAkB,uBAAuB;AAAA,MACvD,YAAY,kBAAkB,uBAAuB;AAAA,MACrD,cAAc,kBAAkB,uBAAuB;AAAA,MACvD,mBAAmB,kBAAkB,uBAAuB;AAAA,IAC9D,IACA;AAAA,MACE,OAAO,kBAAkB;AAAA,MACzB,oBAAoB,kBAAkB;AAAA,MACtC,0BAA0B,kBAAkB;AAAA,MAC5C,eAAe,kBAAkB,qBAAqB,MAAM;AAAA,MAC5D,OAAO,kBAAkB,aAAa,MAAM;AAAA,MAC5C,cAAc,kBAAkB,aAAa,aAAa;AAAA,MAC1D,YAAY,QAAQ;AAAA,MACpB,cAAc,CAAC;AAAA,MACf,mBAAmB,QAAQ;AAAA,IAC7B;AAAA,EACN,CAAC;AACD,QAAM,YAAY,mCAAmC;AAAA,IACnD,aAAa,KAAK;AAAA,IAClB,mBAAmB,kBAAkB,0BAA0B;AAAA,IAC/D,uBAAuB,kBAAkB;AAAA,IACzC;AAAA,EACF,CAAC;AACD,MAAI,UAAU,WAAW,QAAS,QAAO,MAAM,OAAO;AACtD,QAAM,UAAU,gCAAgC;AAAA,IAC9C;AAAA,IACA;AAAA,IACA,uBAAuB,kBAAkB;AAAA,EAC3C,CAAC;AACD,SAAO,WACL,QAAQ,sBAAsB,MAAM,qBACpC,QAAQ,oBAAoB,MAAM,mBAClC,QAAQ,eAAe,MAAM,cAC7B,QAAQ,wBAAwB,MAAM,sBACpC,EAAE,QAAQ,SAAS,IACnB,MAAM,OAAO;AACnB;;;AC1UO,IAAM,kCAAN,cAA8C,MAAM;AAAA,EAChD,OAAO;AAAA,EAEhB,cAAc;AACZ,UAAM,8EAA8E;AACpF,SAAK,OAAO;AAAA,EACd;AACF;AAQA,eAAsB,wCACpB,aACA,OAKe;AACf,QAAM,YAAY,2BAA2B,EAAE,gBAAgB,KAAK,CAAC;AAIrE,MAAI,OAAO,4BAA4B,UAAU,MAAM,gBAAgB;AACrE,UAAM,SAAS,MAAM,MAAM,kBAAkB;AAC7C,QAAI,QAAQ,gBAAiB,OAAM,IAAI,gCAAgC;AAAA,EACzE;AACF;;;AClCA;AAAA,EACE,oCAAAC;AAAA,EACA,+BAAAC;AAAA,EACA,+BAAAC;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA,6BAAAC;AAAA,EACA,6CAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kCAAAC;AAAA,EACA;AAAA,OACK;AAEP,SAAS,wBAAwB;AAUjC,SAAS,cAAAC,mBAAkB;AA+BpB,IAAM,8BAAN,cAA0C,MAAM;AAAA,EAGrD,YAAqB,QAAiB;AACpC,UAAM,qDAAqD;AAAA,MACzD,GAAI,kBAAkB,QAAQ,EAAE,OAAO,OAAO,IAAI,CAAC;AAAA,IACrD,CAAC;AAHkB;AAAA,EAIrB;AAAA,EANS,OAAO;AAOlB;AAEO,IAAM,+BAAN,cAA2C,MAAM;AAAA,EAGtD,YACW,gBACA,YACT;AACA;AAAA,MACE,WAAW,cAAc,0DAA0D,UAAU;AAAA,IAC/F;AALS;AACA;AAAA,EAKX;AAAA,EATS,OAAO;AAUlB;AAUO,SAAS,iCAAiC,OAAyC;AACxF,MAAI,iBAAiB,iBAAkB,QAAO;AAC9C,MAAI,EAAE,iBAAiB,6BAA8B,QAAO;AAC5D,SAAO,MAAM,kBAAkB,mBAC3B,MAAM,SACN,IAAI,iBAAiB,oCAAoC,CAAC,GAAG,KAAK;AACxE;AAEO,SAAS,8BAA8B,QAAuC;AACnF,MAAI,QAAQ,SAAS;AACnB,UAAM,IAAI,4BAA4B,OAAO,MAAM;AAAA,EACrD;AACF;AAEA,eAAsB,qBACpB,WACA,QACA,mBACY;AACZ,MAAI,CAAC,OAAQ,QAAO,MAAM;AAE1B,MAAI;AACJ,QAAM,YAAY,IAAI,QAAe,CAAC,UAAU,WAAW;AACzD,yBAAqB;AAAA,EACvB,CAAC;AACD,QAAM,SAAS,MAAY;AACzB,yBAAqB,IAAI,4BAA4B,OAAO,MAAM,CAAC;AAAA,EACrE;AACA,SAAO,iBAAiB,SAAS,QAAQ,EAAE,MAAM,KAAK,CAAC;AACvD,MAAI,OAAO,QAAS,QAAO;AAE3B,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,WAAW,SAAS,CAAC;AAIxD,QAAI,OAAO,SAAS;AAClB,YAAM,IAAI,4BAA4B,OAAO,MAAM;AAAA,IACrD;AACA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,OAAO,SAAS;AAIlB,WAAK,UACF,KAAK,OAAO,WAAW,MAAM,oBAAoB,MAAM,CAAC,EACxD,MAAM,MAAM,MAAS;AAKxB,UAAI,EAAE,iBAAiB,8BAA8B;AACnD,cAAM,IAAI,4BAA4B,OAAO,MAAM;AAAA,MACrD;AAAA,IACF;AACA,UAAM;AAAA,EACR,UAAE;AACA,WAAO,oBAAoB,SAAS,MAAM;AAAA,EAC5C;AACF;AAEO,SAASC,OAAM,IAA2B;AAC/C,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAEO,SAAS,2BAA2B,OAA2B;AACpE,QAAM,QAAmB,CAAC;AAC1B,QAAM,OAAO,oBAAI,IAAY;AAC7B,MAAI,UAAU;AACd,WAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG;AACzC,UAAM,KAAK,OAAO;AAClB,QAAI,CAAC,WAAW,OAAO,YAAY,YAAY,KAAK,IAAI,OAAO,EAAG;AAClE,SAAK,IAAI,OAAO;AAChB,QAAI,mBAAmB,4BAA4B;AACjD,gBAAU,QAAQ;AAClB;AAAA,IACF;AACA,UAAM,QAAQ,QAAQ,IAAI,SAAS,OAAO;AAC1C,QAAI,UAAU,UAAa,UAAU,QAAS;AAC9C,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAEO,SAAS,oBACd,OACA,aACU;AACV,SAAO,MAAM,KAAK,CAAC,UAAsB,iBAAiB,WAAW,KAAK;AAC5E;AAOO,SAAS,uCACd,SACA,OACgC;AAChC,QAAM,QAAQ,2BAA2B,KAAK;AAC9C,QAAM,eACJ,MAAM,IAAI,CAAC,UAAU,6BAA6B,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,UAAU,IAAI,KACxF;AACF,QAAM,UACJ,MAAM;AAAA,IACJ,CAAC,UAA+C,iBAAiB;AAAA,EACnE,KAAK;AACP,MAAI,SAAS;AACX,UAAM,gBAAgB,QAAQ,UAAU;AACxC,WAAO;AAAA,MACL,UAAU,gBAAgB,mBAAmB;AAAA,MAC7C,OAAO,gBAAgB,mBAAmB;AAAA,MAC1C,MAAM,QAAQ;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AACA,QAAM,YAAY,oBAAoB,OAAOC,0BAAyB;AACtE,MAAI,WAAW;AACb,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO;AAAA,MACP,MAAM,UAAU;AAAA,MAChB,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AACA,QAAM,aAAa,oBAAoB,OAAOC,4BAA2B;AACzE,MAAI,YAAY;AACd,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO;AAAA,MACP,MAAM;AAAA,MACN,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AACA,QAAM,aAAa,oBAAoB,OAAOC,4BAA2B;AACzE,MAAI,YAAY;AACd,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO;AAAA,MACP,MAAM,WAAW;AAAA,MACjB,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AACA,QAAM,mBAAmB,oBAAoB,OAAO,4BAA4B;AAChF,MAAI,kBAAkB;AACpB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO;AAAA,MACP,MAAM;AAAA,MACN,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AACA,QAAM,kBAAkB,oBAAoB,OAAOC,iCAAgC;AACnF,MAAI,iBAAiB;AACnB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO;AAAA,MACP,MAAM,gBAAgB;AAAA,MACtB,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AACA,QAAM,UAAU,oBAAoB,OAAOC,+BAA8B;AACzE,MAAI,SAAS;AACX,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO;AAAA,MACP,MAAM,QAAQ;AAAA,MACd,UAAU;AAAA,MACV,WAAW,QAAQ;AAAA,IACrB;AAAA,EACF;AACA,QAAM,aAAa,oBAAoB,OAAOC,0CAAyC;AACvF,MAAI,YAAY;AACd,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO;AAAA,MACP,MAAM;AAAA,MACN,UAAU;AAAA,MACV,WAAW,WAAW;AAAA,IACxB;AAAA,EACF;AACA,QAAM,gBAAgB,MAAM;AAAA,IAC1B,CAAC,UACC,iBAAiB,sBACjB,iBAAiB,mCACjB,iBAAiB,6BACjB,iBAAiB;AAAA,EACrB;AACA,MAAI,eAAe;AACjB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO,gBAAgB;AAAA,MACvB,MACE,yBAAyB,4BACrB,mBACA,yBAAyB,0BACvB,iBACA,yBAAyB,kCACvB,yBACA;AAAA,MACV,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AACA,QAAM,gBAAgB,MAAM;AAAA,IAC1B,CAAC,UACC,iBAAiB,sCACjB,iBAAiB,sCACjB,iBAAiB,yCACjB,iBAAiB,mCACjB,iBAAiB;AAAA,EACrB;AACA,MAAI,eAAe;AACjB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO;AAAA,MACP,MACE,yBAAyB,qCACrB,6BACA,yBAAyB,qCACvB,6BACA,yBAAyB,wCACvB,gCACA,yBAAyB,kCACvB,0BACA;AAAA,MACZ,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AACA,QAAM,kBAAkB,+BAA+B,SAAS,KAAK;AACrE,MAAI,gBAAgB,SAAS,uBAAuB;AAClD,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO,gBAAgB;AAAA,MACvB,MAAM,gBAAgB;AAAA,MACtB,UAAU;AAAA;AAAA;AAAA,MAGV,WAAW;AAAA,IACb;AAAA,EACF;AACA,MAAI,cAAc;AAChB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,OAAO;AAAA,MACP,MAAM,GAAG,YAAY;AAAA,MACrB,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AACA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,OAAO;AAAA,IACP,MAAM;AAAA,IACN,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AACF;AAEO,SAAS,gCAAgC,OAAyB;AACvE,QAAM,QAAQ,2BAA2B,KAAK;AAG9C,MACE,MAAM;AAAA,IACJ,CAAC,UACC,iBAAiBH,gCAA+B,MAAM,WAAW;AAAA,EACrE;AAEA,WAAO;AACT,MACE,MAAM;AAAA,IACJ,CAAC,UACC,iBAAiB,6BACjB,iBAAiB,2BACjB,iBAAiBC;AAAA,EACrB,GACA;AACA,WAAO;AAAA,EACT;AACA,QAAM,UAAU,oBAAoB,OAAOC,+BAA8B;AACzE,MAAI,SAAS;AACX,WAAO,QAAQ;AAAA,EACjB;AACA,MACE,MAAM;AAAA,IACJ,CAAC,UACC,iBAAiBH,gCACjB,iBAAiBC;AAAA,EACrB,GACA;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,KAAK,CAAC,UAAU,iBAAiB,0BAA0B,GAAG;AACtE,WAAO;AAAA,EACT;AAIA,SAAO;AACT;AAKO,SAAS,uCACd,UACQ;AAGR,SAAO,KAAK,IAAI,KAAO,SAAS,0BAA0B;AAC5D;AAEO,SAAS,6BACd,WACA,UAgBI,CAAC,GACsB;AAC3B,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,YAAY,QAAQ,aAAa;AACvC,MAAI,OAA0B;AAE9B,QAAM,MAAM,OACV,aACA,cACqD;AACrD,QAAI,mBAAmB;AACvB,WAAO,MAAM;AACX,0BAAoB;AACpB,gBAAU,gBAAgB;AAC1B,YAAM,YAAY,YAAY,IAAI;AAClC,UAAI;AACF,sCAA8B,QAAQ,MAAM;AAC5C,cAAM,YAAY,UAAU;AAC5B,cAAM,SAAS,MAAM,qBAAqB,WAAW,QAAQ,QAAQ,QAAQ,aAAa;AAC1F,cAAM,QAAQ,mBAAmB;AAAA,UAC/B;AAAA,UACA,SAAS;AAAA,UACT,SAAS;AAAA,UACT,YAAY,YAAY,IAAI,IAAI;AAAA,UAChC;AAAA,QACF,CAAC;AACD,eAAO,EAAE,QAAQ,iBAAiB;AAAA,MACpC,SAAS,OAAO;AACd,cAAM,WAAW,EACf,iBAAiB,+BACjB,mBAAmB,cACnB,CAAC,gCAAgC,KAAK;AAExC,cAAM,QAAQ,mBAAmB;AAAA,UAC/B;AAAA,UACA,SAAS;AAAA,UACT,SAAS,WAAW,aAAa;AAAA,UACjC,YAAY,YAAY,IAAI,IAAI;AAAA,UAChC;AAAA,QACF,CAAC;AACD,YAAI,CAAC,UAAU;AACb,gBAAM;AAAA,QACR;AACA,cAAMH,OAAM,YAAY,gBAAgB;AAAA,MAC1C;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAkB;AAChB,UAAI,CAAC,MAAM;AACT,cAAM,cAAc,QAAQ,qBAAqB,KAAKD,YAAW;AACjE,gBAAQ,YAAY;AAClB,gBAAM,YAAY,YAAY,IAAI;AAClC,wCAA8B,QAAQ,MAAM;AAC5C,gBAAM,QAAQ,YAAY,EAAE,YAAY,CAAC;AACzC,wCAA8B,QAAQ,MAAM;AAC5C,cAAI;AACJ,cAAI,mBAAmB;AACvB,cAAI,YAAY;AAChB,cAAI;AACF,kBAAM,YAAY,MAAM,IAAI,aAAa,CAAC,YAAY;AACpD,iCAAmB;AAAA,YACrB,CAAC;AACD,qBAAS,UAAU;AACnB,+BAAmB,UAAU;AAC7B,wBAAY;AACZ,0CAA8B,QAAQ,MAAM;AAC5C,kBAAM,QAAQ,kBAAkB,QAAQ;AAAA,cACtC;AAAA,cACA;AAAA,cACA,YAAY,YAAY,IAAI,IAAI;AAAA,YAClC,CAAC;AACD,0CAA8B,QAAQ,MAAM;AAC5C,kBAAM,QAAQ,cAAc,QAAQ;AAAA,cAClC;AAAA,cACA;AAAA,cACA,YAAY,YAAY,IAAI,IAAI;AAAA,YAClC,CAAC;AACD,mBAAO;AAAA,UACT,SAAS,OAAO;AACd,gBAAI,WAAW;AACb,oBAAM,QAAQ,gBAAgB,MAAW;AAAA,YAC3C;AACA,gBAAI,EAAE,iBAAiB,8BAA8B;AACnD,oBAAM,QAAQ,WAAW,OAAO;AAAA,gBAC9B;AAAA,gBACA,kBAAkB,KAAK,IAAI,GAAG,gBAAgB;AAAA,gBAC9C,YAAY,YAAY,IAAI,IAAI;AAAA,cAClC,CAAC;AAAA,YACH;AACA,kBAAM;AAAA,UACR;AAAA,QACF,GAAG,EAAE,MAAM,CAAC,UAAU;AAOpB,cAAI,gCAAgC,KAAK,GAAG;AAC1C,mBAAO;AAAA,UACT;AACA,gBAAM;AAAA,QACR,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT;AAAA,IACA,aAAsB;AACpB,aAAO,SAAS;AAAA,IAClB;AAAA,IACA,MAAM,eAAe,WAAsC;AACzD,UAAI,CAAC,MAAM;AACT,eAAO;AAAA,MACT;AACA,UAAI;AACJ,UAAI;AACF,eAAO,MAAM,QAAQ,KAAK;AAAA,UACxB,KAAK,MAAM,MAAM,IAAI;AAAA,UACrB,IAAI,QAAc,CAAC,YAAY;AAC7B,oBAAQ,WAAW,MAAM,QAAQ,IAAI,GAAG,SAAS;AAAA,UACnD,CAAC;AAAA,QACH,CAAC;AAAA,MACH,UAAE;AACA,YAAI,OAAO;AACT,uBAAa,KAAK;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACriBO,SAAS,qCAAqC,OAIzC;AACV,SACE,MAAM,mBAAmB,eACzB,CAAC,MAAM,yBACP,MAAM,8BAA8B;AAExC;AAQO,SAAS,qCAAqC,OAKzC;AACV,SACE,MAAM,+BACN,CAAC,MAAM,oBACP,CAAC,MAAM,4BACP,CAAC,MAAM;AAEX;AASO,SAAS,4CAA4C,OAInD;AACP,MAAI,CAAC,MAAM,yBAAyB,MAAM,gCAAiC;AAC3E,MAAI,MAAM,mBAAmB,MAAO,OAAM,MAAM;AAChD,QAAM,IAAI,MAAM,2DAA2D;AAAA,IACzE,OAAO,MAAM;AAAA,EACf,CAAC;AACH;AAMO,SAAS,8CAA8C,OAKrD;AACP,MACE,CAAC,MAAM,yBACP,CAAC,MAAM,mCACP,MAAM,uBACN;AACA;AAAA,EACF;AACA,MAAI,MAAM,mBAAmB,MAAO,OAAM,MAAM;AAChD,QAAM,IAAI,MAAM,gEAAgE;AAAA,IAC9E,OAAO,MAAM;AAAA,EACf,CAAC;AACH;AAEO,IAAM,2CAA2C;AACjD,IAAM,uCAAuC;AAC7C,IAAM,8BAA8B,IAAI;AACxC,IAAM,iCAAiC;AAMvC,SAAS,0BAA0B,OAK3B;AACb,MAAI,CAAC,MAAM,QAAS,QAAO,MAAM;AACjC,MAAI,QAAQ;AACZ,QAAM,QAAQ,WAAW,MAAM;AAC7B,QAAI,CAAC,MAAO;AACZ,UAAM,YAAY;AAClB,UAAM,gBAAgB;AAAA,EACxB,GAAG,MAAM,aAAa,2BAA2B;AACjD,QAAM,QAAQ;AACd,SAAO,MAAM;AACX,QAAI,CAAC,MAAO;AACZ,YAAQ;AACR,iBAAa,KAAK;AAAA,EACpB;AACF;AAKA,eAAsB,wCAAwC,OAc5B;AAChC,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,MAAM,eAAe;AAAA,EACvC,SAAS,cAAc;AACrB,UAAM,mBAAmB,YAAY;AACrC,QAAI,CAAC,MAAM,aAAa;AACtB,YAAM,IAAI,MAAM,4DAA4D;AAAA,QAC1E,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,UAAM,QAAQ,MAAM,SAASQ;AAC7B,QAAI,UAAU;AACd,QAAI,UAAU;AACd,eAAS;AACP,UAAI;AACF,cAAM,MAAM,YAAY,MAAM,KAAK;AACnC,eAAO;AAAA,MACT,SAAS,aAAa;AACpB,cAAM,kBAAkB,aAAa,SAAS,OAAO;AACrD,YAAI;AACF,gBAAM,YAAY,SAAS,OAAO;AAAA,QACpC,QAAQ;AAAA,QAGR;AACA,cAAM,MAAM,OAAO;AACnB,kBAAU,KAAK,IAAI,UAAU,GAAG,oCAAoC;AACpE,mBAAW;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,gBAAgB,MAAM,qBAAqB;AACrD,QAAI;AACF,YAAM,MAAM,oBAAoB,QAAQ,YAAY;AAAA,IACtD,SAAS,WAAW;AAGlB,YAAM,gBAAgB,SAAS;AAAA,IACjC;AAAA,EACF;AACA,MAAI;AACF,UAAM,MAAM,cAAc,QAAQ,MAAM;AAAA,EAC1C,SAAS,cAAc;AAGrB,UAAM,mBAAmB,YAAY;AAAA,EACvC;AACA,SAAO;AACT;AASA,eAAsB,gCAAgC,OAOpC;AAChB,QAAM,UAAU,cAAc;AAC9B,MAAI,MAAM,uBAAuB;AAC/B,UAAM,sBAAsB;AAAA,MAC1B,MAAM,sBAAsB,IAAI,MAAM,qBAAqB;AAAA,IAC7D;AACA,UAAM,MAAM,sBAAsB,kBAAkB;AAAA,EACtD;AACA,QAAM,UAAU,qBAAqB;AACrC,QAAM,QAAQ,IAAI,MAAM,sBAAsB,IAAI,OAAO,YAAY,MAAM,QAAQ,KAAK,CAAC,CAAC;AAC1F,QAAM,MAAM,sBAAsB,KAAK;AACvC,QAAM,MAAM,sBAAsB,KAAK;AACzC;AAOA,eAAsB,mCACpB,SACA,UAII,CAAC,GACU;AACf,QAAM,cAAc,KAAK,IAAI,GAAG,QAAQ,eAAe,CAAC;AACxD,QAAMC,gBAAe,KAAK,IAAI,GAAG,QAAQ,gBAAgB,EAAE;AAC3D,QAAM,OAAO,QAAQ,QAAQD;AAC7B,MAAI;AACJ,WAAS,UAAU,GAAG,WAAW,aAAa,WAAW,GAAG;AAC1D,QAAI;AACF,YAAM,QAAQ,QAAQ,EAAE,0BAA0B,KAAK,CAAC;AACxD;AAAA,IACF,SAAS,OAAO;AACd,kBAAY;AACZ,UAAI,UAAU,aAAa;AACzB,cAAM,KAAKC,gBAAe,OAAO;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AACA,QAAM;AACR;AAWA,eAAsB,yBACpB,WACA,QACA,YAAY,gCACY;AACxB,MAAI,QAAQ,SAAS;AACnB,SAAK,UAAU,MAAM,MAAM,MAAS;AACpC,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,QAAM,WAAW,IAAI,QAAmB,CAAC,YAAY;AACnD,sBAAkB,MAAM,QAAQ,MAAS;AAAA,EAC3C,CAAC;AACD,QAAM,SAAS,MAAY;AACzB,SAAK,UAAU,MAAM,MAAM,MAAS;AACpC,sBAAkB;AAAA,EACpB;AACA,UAAQ,iBAAiB,SAAS,QAAQ,EAAE,MAAM,KAAK,CAAC;AACxD,QAAM,UAAU,WAAW,QAAQ,KAAK,IAAI,GAAG,SAAS,CAAC;AACzD,UAAQ,QAAQ;AAChB,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,WAAW,QAAQ,CAAC;AAAA,EACjD,UAAE;AACA,iBAAa,OAAO;AACpB,YAAQ,oBAAoB,SAAS,MAAM;AAAA,EAC7C;AACF;AAQA,eAAsB,yBACpB,cACA,mBACA,QACe;AACf,QAAM,yBAAyB,cAAc,MAAM;AACnD,QAAM,yBAAyB,mBAAmB,MAAM;AAC1D;AAEO,IAAM,6BAAN,cAAyC,MAAM;AAAA,EAC3C,OAAO;AAAA,EAEhB,YAAY,UAAU,2DAA2D;AAC/E,UAAM,OAAO;AAAA,EACf;AACF;AAYA,eAAsB,sCAAsC,OAQ1C;AAChB,QAAM;AAAA,IACJ,MAAM;AAAA,IACN,MAAM,OAAO;AAAA,IACb,MAAM;AAAA,EACR;AAEA,MAAI,MAAM,0BAA0B,SAAS;AAC3C,UACE,MAAM,0BAA0B,UAChC,IAAI,2BAA2B,sDAAsD;AAAA,EAEzF;AACA,MAAI,MAAM,OAAO,UAAU,QAAQ,MAAM,OAAO,UAAU,QAAW;AACnE,UAAM,MAAM,OAAO;AAAA,EACrB;AACF;AAGO,SAAS,8BAA8B,WAA0B;AACtE,MAAI,WAAW;AACb,UAAM,IAAI,2BAA2B,sDAAsD;AAAA,EAC7F;AACF;AAMO,SAAS,8BACd,aACA,mBAAmB,OACV;AACT,MAAI,iBAAkB,QAAO;AAC7B,MAAI,gBAAgB,QAAW;AAC7B,UAAM,IAAI,2BAA2B;AAAA,EACvC;AACA,SAAO;AACT;AASA,eAAsB,wCAAwC,OAK5C;AAChB,MAAI;AACF,UAAM,MAAM,wBAAwB;AAAA,EACtC,SAAS,OAAO;AACd,UAAM,sBACJ,iBAAiB,SACjB,MAAM,SAAS,yCACd,MAAqC,SAAS,qBAC9C,MAAM,mBAAmB,UACxB,MAAM,mBAAmB,YACzB,MAAM,mBAAmB;AAC7B,QAAI,CAAC,oBAAqB,OAAM;AAChC,UAAM,sBAAsB;AAC5B,UAAM,MAAM,kBAAkB;AAAA,EAChC;AACF;AAEO,SAAS,gCACd,gBACA,gBACyB;AACzB,MAAI,mBAAmB,eAAe,gBAAgB,QAAS,QAAO;AACtE,QAAM,SAAS,IAAI,gBAAgB;AACnC,SAAO,MAAM,IAAI,MAAM,qBAAqB,CAAC;AAC7C,SAAO,OAAO;AAChB;AAUO,IAAM,mCAAN,cAA+C,MAAM;AAAA,EAI1D,YACW,OACT,OACA;AACA,UAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAHnD;AAIT,SAAK,QAAQ;AAAA,EACf;AAAA,EATS,OAAO;AAAA,EACP;AASX;AAEA,eAAsB,mCACpB,OACA,WACY;AACZ,MAAI;AACF,WAAO,MAAM,UAAU;AAAA,EACzB,SAAS,OAAO;AACd,UAAM,IAAI,iCAAiC,OAAO,KAAK;AAAA,EACzD;AACF;AAOA,eAAsB,6BACpB,UACA,UACe;AACf,QAAM,aAAa,oBAAI,IAAuB;AAC9C,aAAW,WAAW,UAAU;AAC9B,UAAM,YAAY;AAClB,QAAI,OAAO,WAAW,wBAAwB,YAAY;AACxD,iBAAW,IAAI,SAA8B;AAAA,IAC/C;AAAA,EACF;AACA,MAAI,WAAW,SAAS,KAAK,UAAU;AACrC,eAAW,IAAI,QAAQ;AAAA,EACzB;AACA,aAAW,aAAa,YAAY;AAClC,QAAI;AACF,YAAM,UAAU,oBAAoB;AAAA,IACtC,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;AC7cA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,+BAAAC;AAAA,OACK;AACP;AAAA,EACE,kCAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,OAEK;AACP,SAAS,oBAAoB,oBAAAC,yBAAwB;;;ACzCrD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,cAAAC,mBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA,6BAAAC;AAAA,EAEA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAGA,SAAS,iCACd,MAIgC;AAChC,QAAM,MAAsC,CAAC;AAC7C,aAAW,OAAO,MAAM;AACtB,QAAI,CAAC,IAAI,+BAA+B;AACtC,UAAI,KAAK,IAAI,IAAI;AACjB;AAAA,IACF;AACA,UAAM,OAAO,OAAO,IAAI,KAAK,SAAS,WAAW,IAAI,KAAK,OAAO;AACjE,QAAI,SAAS,aAAa;AACxB,UAAI,KAAK,iCAAiC,IAAI,IAAI,CAAC;AACnD;AAAA,IACF;AACA,QAAI,SAAS,cAAc;AACzB;AAAA,IACF;AACA,QAAI,KAAK,IAAI,IAAI;AAAA,EACnB;AACA,SAAO;AACT;AA6DA,eAAe,+BACb,SACA,OACA,WACY;AACZ,QAAM,YAAY,YAAY,IAAI;AAClC,MAAI,UAAyD;AAC7D,MAAI;AACF,WAAO,MAAM,UAAU;AAAA,EACzB,SAAS,OAAO;AACd,cAAU;AACV,UAAM;AAAA,EACR,UAAE;AACA,QAAI;AACF,cAAQ,qBAAqB;AAAA,QAC3B;AAAA,QACA;AAAA,QACA,kBAAkB,YAAY,IAAI,IAAI,aAAa;AAAA,MACrD,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEO,IAAM,oCAAoC,KAAK,OAAO;AAGtD,IAAM,sCAAsC,KAAK,OAAO;AAExD,IAAM,wCAAN,cAAoD,MAAM;AAAA,EAC/D,cAAc;AACZ;AAAA,MACE;AAAA,IAGF;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAyBA,IAAM,4BAA4B,oBAAI,IAAI,CAAC,aAAa,cAAc,aAAa,YAAY,CAAC;AAEhG,IAAM,2BAA2B,oBAAI,IAAI;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKD,IAAM,6BAA6B,oBAAI,IAAI;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,cAAc,OAAwB;AAC7C,MAAI,EAAE,iBAAiB,OAAQ,QAAO,OAAO;AAC7C,QAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,SAAO,iCAAiC,KAAK,IAAI,IAAI,OAAO;AAC9D;AAEA,SAAS,0BACP,aAC6D;AAC7D,QAAM,aAAa,YAAY,YAAY,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,KAAK;AACzE,MAAI,0BAA0B,IAAI,UAAU,GAAG;AAC7C,WAAO,EAAE,MAAM,SAAS,aAAa,WAAW;AAAA,EAClD;AACA,MACE,yBAAyB,IAAI,UAAU,KACtC,WAAW,WAAW,OAAO,KAAK,CAAC,2BAA2B,IAAI,UAAU,GAC7E;AACA,WAAO,EAAE,MAAM,QAAQ,aAAa,WAAW;AAAA,EACjD;AACA,SAAO;AACT;AAEA,eAAsB,+BACpB,OACA,eACA,UAAmC,CAAC,GACD;AACnC,QAAM,WAID,CAAC;AACN,MAAI,iBAAiB,QAAQ,YACzB,OAAO,oBACP;AACJ,aAAW,QAAQ,OAAO;AACxB,UAAM,aAAa,0BAA0B,KAAK,WAAW;AAC7D,UAAM,WAAW,KAAK,QAAQ,KAAK,EAAE,YAAY,KAAK;AACtD,QACE,KAAK,WAAW,WAChB,CAAC,cACD,WAAW,SAAS,WACpB,KAAK,YAAY,qCACjB,KAAK,YAAY,kBACjB,CAAC,iBAAiB,KAAK,QAAQ,GAC/B;AACA;AAAA,IACF;AACA,aAAS,KAAK,EAAE,MAAM,YAAY,SAAS,CAAC;AAC5C,sBAAkB,KAAK;AAAA,EACzB;AAEA,QAAM,cAAc,IAAI,MAA0C,SAAS,MAAM;AACjF,MAAI,SAAS;AACb,QAAM,SAAS,YAAY;AACzB,WAAO,SAAS,SAAS,QAAQ;AAC/B,YAAM,QAAQ;AACd,YAAM,EAAE,MAAM,YAAY,SAAS,IAAI,SAAS,KAAK;AACrD,UAAI;AACF,cAAM,QAAQ,MAAM,cAAc,IAAI;AACtC,YAAI,MAAM,eAAe,KAAK,WAAW;AACvC,kBAAQ,MAAM,2DAA2D;AAAA,YACvE,QAAQ,KAAK;AAAA,YACb,mBAAmB,KAAK;AAAA,YACxB,iBAAiB,MAAM;AAAA,UACzB,CAAC;AACD;AAAA,QACF;AACA,YAAIC,YAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,MAAM,UAAU;AACjE,kBAAQ,MAAM,8DAA8D;AAAA,YAC1E,QAAQ,KAAK;AAAA,UACf,CAAC;AACD;AAAA,QACF;AACA,oBAAY,KAAK,IAAI;AAAA,UACnB,MAAM,WAAW;AAAA,UACjB,QAAQ,KAAK;AAAA,UACb,UAAU,KAAK;AAAA,UACf,aAAa,WAAW;AAAA,UACxB,SAAS,QAAQ,WAAW,WAAW,WAAW,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ,CAAC;AAAA,QACzF;AAAA,MACF,SAAS,OAAO;AAId,gBAAQ,MAAM,yEAAyE;AAAA,UACrF,QAAQ,KAAK;AAAA,UACb,WAAW,cAAc,KAAK;AAAA,QAChC,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ;AAAA,IACZ,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,SAAS,MAAM,EAAE,GAAG,YAAY,MAAM,OAAO,CAAC;AAAA,EACjF;AACA,SAAO,YAAY;AAAA,IACjB,CAAC,eAAqD,eAAe;AAAA,EACvE;AACF;AAEA,SAAS,uBAAuB,MAAkD;AAChF,QAAM,MAAM,KAAK,2BAA2B;AAC5C,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AACjC,QAAM,OAA0B,CAAC;AACjC,aAAW,aAAa,KAAK;AAC3B,UAAM,SAAS,gBAAgB,UAAU,SAAS;AAClD,QAAI,OAAO,QAAS,MAAK,KAAK,OAAO,IAAI;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,KAA8B;AAG3D,SACE,uBAAuB,IAAI,MAAM,oBAAoB,kBAAkB,GAAG,CAAC;AAI/E;AAOO,SAAS,sCACd,QACA,eACA,qBACiC;AACjC,QAAM,cAAc,oBAAI,IAAoC;AAC5D,QAAM,sBAAsB,oBAAI,IAAY;AAC5C,QAAM,WAAW,oBAAI,IAAuB;AAC5C,QAAM,kBAAkB,oBAAI,IAAY;AACxC,QAAM,oBAAoB,oBAAI,IAAoB;AAElD,SAAO,OAAO,OAAO,UAAU,CAAC,MAAM;AACpC,eAAW,QAAQ,QAAQ,eAAe,CAAC,GAAG;AAC5C,eAAS,IAAI,KAAK,IAAI,IAAI;AAC1B,sBAAgB,IAAI,KAAK,EAAE;AAAA,IAC7B;AACA,UAAM,cAAc,oBAAI,IAA+B;AACvD,UAAM,iBAA2B,CAAC;AAClC,UAAM,cAAc,oBAAI,IAAY;AACpC,aAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,YAAM,OAAO,uBAAuB,MAAM,KAAK,CAAE;AACjD,UAAI,KAAK,WAAW,EAAG;AACvB,kBAAY,IAAI,OAAO,IAAI;AAC3B,iBAAW,OAAO,MAAM;AACtB,YAAI,MAAM,KAAK,EAAG,+BAA+B,MAAM,QAAQ,YAAY,IAAI,IAAI,MAAM;AACvF;AACF,oBAAY,IAAI,IAAI,MAAM;AAC1B,uBAAe,KAAK,IAAI,MAAM;AAAA,MAChC;AAAA,IACF;AACA,QAAI,YAAY,SAAS,EAAG,QAAO;AACnC,UAAM,aAAa,eAAe,OAAO,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;AACzE,QAAI,uBAAuB,WAAW,SAAS,GAAG;AAChD,YAAM,QAAQ,MAAM,oBAAoB,UAAU;AAClD,iBAAW,QAAQ,MAAO,UAAS,IAAI,KAAK,IAAI,IAAI;AACpD,iBAAW,MAAM,WAAY,iBAAgB,IAAI,EAAE;AAAA,IACrD;AAEA,QAAI,eAAe;AACjB,YAAM,WAAW,IAAI,IAAI,iBAAiB;AAC1C,UAAI,oBAAoB;AACxB,iBAAW,CAAC,OAAO,IAAI,KAAK,aAAa;AACvC,YAAI,MAAM,KAAK,EAAG,+BAA+B,MAAM,KAAM;AAC7D,mBAAW,OAAO,MAAM;AACtB,gBAAM,OAAO,SAAS,IAAI,IAAI,MAAM;AACpC,cACE,CAAC,QACD,CAAC,OAAO,sBACR,KAAK,WAAW,WAChB,KAAK,YAAY,qCACjB,0BAA0B,KAAK,WAAW,GAAG,SAAS,WACtD,CAAC,kBAAkB,KAAK,KAAK,QAAQ,KAAK,KAAK,EAAE;AAEjD;AAEF,+BAAqB,KAAK;AAC1B,mBAAS,IAAI,KAAK,IAAI,KAAK,SAAS;AAAA,QACtC;AAAA,MACF;AACA,YAAM,iBAAiB,CAAC,GAAG,SAAS,OAAO,CAAC,EAAE,OAAO,CAAC,KAAK,UAAU,MAAM,OAAO,CAAC;AACnF,UACE,oBAAoB,uCACpB,iBAAiB,qCACjB;AACA,cAAM,IAAI,sCAAsC;AAAA,MAClD;AACA,iBAAW,CAAC,IAAI,KAAK,KAAK,SAAU,mBAAkB,IAAI,IAAI,KAAK;AAGnE,YAAM,WAAW,CAAC,GAAG,cAAc,EAChC,QAAQ,EACR,IAAI,CAAC,OAAO,SAAS,IAAI,EAAE,CAAC,EAC5B,OAAO,CAAC,SAA4B;AACnC,YAAI,CAAC,QAAQ,oBAAoB,IAAI,KAAK,EAAE,EAAG,QAAO;AACtD,cAAM,aAAa,0BAA0B,KAAK,WAAW;AAC7D,eAAO,QAAQ,cAAc,WAAW,SAAS,WAAW,OAAO,kBAAkB;AAAA,MACvF,CAAC;AACH,iBAAW,QAAQ,SAAU,qBAAoB,IAAI,KAAK,EAAE;AAC5D,YAAM,UAAU,MAAM,+BAA+B,UAAU,eAAe;AAAA,QAC5E,WAAW;AAAA,MACb,CAAC;AACD,YAAM,YAAY,IAAI,IAAI,QAAQ,IAAI,CAAC,UAAU,MAAM,MAAM,CAAC;AAC9D,iBAAW,QAAQ,UAAU;AAC3B,YACE,KAAK,WAAW,WAChB,KAAK,aAAa,qCAClB,kBAAkB,KAAK,KAAK,UAAU,EAAE,KACxC,CAAC,UAAU,IAAI,KAAK,EAAE,GACtB;AAEA,qBAAW,aAAa,SAAU,qBAAoB,OAAO,UAAU,EAAE;AACzE,gBAAM,IAAI,MAAM,qDAAqD,KAAK,EAAE,EAAE;AAAA,QAChF;AAAA,MACF;AACA,iBAAW,cAAc,QAAS,aAAY,IAAI,WAAW,QAAQ,UAAU;AAAA,IACjF;AAEA,UAAM,YAAY,CAAC,GAAG,KAAK;AAC3B,eAAW,CAAC,OAAO,IAAI,KAAK,aAAa;AACvC,YAAM,WAAW,MAAM,KAAK;AAC5B,YAAM,kBAAkB,MAAM,QAAQ,SAAS,OAAO,IAClD,CAAC,GAAG,SAAS,OAAO,IACpB,CAAC,EAAE,MAAM,cAAc,MAAM,OAAO,SAAS,WAAW,EAAE,EAAE,CAAC;AACjE,YAAM,kBAAkB,KAAK,QAAQ,CAAC,QAAQ;AAC5C,cAAM,cACJ,SAAS,+BAA+B,MAAM,OAAO,SAAY,SAAS,IAAI,IAAI,MAAM;AAC1F,cAAM,aAAa,cAAc,YAAY,IAAI,IAAI,MAAM,IAAI;AAC/D,cAAM,UAAU;AAAA,UACd,MAAM;AAAA,UACN,MAAM,sBAAsB,GAAG;AAAA,QACjC;AACA,YAAI,CAAC,cAAc,WAAW,SAAS,SAAS;AAC9C,iBAAO,CAAC,OAAO;AAAA,QACjB;AACA,eAAO,CAAC,SAAS,EAAE,MAAM,eAAe,OAAO,WAAW,QAAQ,CAAC;AAAA,MACrE,CAAC;AACD,YAAM,QAAiC;AAAA,QACrC,GAAG;AAAA,QACH,SAAS,CAAC,GAAG,iBAAiB,GAAG,eAAe;AAAA,MAClD;AACA,aAAO,MAAM,2BAA2B;AACxC,gBAAU,KAAK,IAAI;AAAA,IACrB;AACA,WAAO;AAAA,EACT;AACF;AAGO,SAAS,8BACd,cACA,MACgC;AAChC,MAAI,KAAK,WAAW,EAAG,QAAO;AAI9B,QAAM,cAAc,IAAI;AAAA,IACtB,aAAa,QAAQ,CAAC,SAAS,uBAAuB,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;AAAA,EACtF;AACA,QAAM,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,MAAM,CAAC;AACjE,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,WAAS,QAAQ,aAAa,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AAChE,UAAM,OAAO,aAAa,KAAK;AAC/B,QAAI,KAAK,+BAA+B,MAAM,KAAM;AACpD,QAAI,KAAK,SAAS,aAAa,KAAK,SAAS,OAAQ;AACrD,UAAM,WAAW,uBAAuB,IAAI;AAC5C,UAAM,cAAc,IAAI,IAAI,SAAS,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;AAC7D,UAAM,YAAY,QAAQ,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,MAAM,CAAC;AACtE,QAAI,UAAU,WAAW,EAAG,QAAO;AACnC,UAAM,YAAY,CAAC,GAAG,YAAY;AAClC,cAAU,KAAK,IAAI,EAAE,GAAG,MAAM,CAAC,2BAA2B,GAAG,CAAC,GAAG,UAAU,GAAG,SAAS,EAAE;AACzF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,eAAsB,UACpB,IACA,SACA,OACA,SACA,SAC4B;AAC5B,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,uBAAuB;AAAA,EACzC;AACA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,YACE,MAAM;AAAA,MACJ;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AAAA,EACJ;AAKA,MAAI,QAAQ,KAAK,CAAC,WAAW,CAAC,OAAO,sBAAsB,GAAG;AAC5D,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,QAAM,kBAAkB;AAAA,IACtB,QAAQ,aACJ;AAAA,MACE;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI,IACX;AAAA,IACJ,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACA,MAAI,QAAQ,SAAS,gBAAgB;AACnC,UAAM,UAAU,QAAQ;AAKxB,UAAM,iBAAiB,MAAM,QAAQ,QAAQ,WAAW,KAAK,QAAQ,YAAY,SAAS;AAC1F,QAAI,OAAO,QAAQ,SAAS,YAAa,QAAQ,KAAK,KAAK,EAAE,WAAW,KAAK,CAAC,gBAAiB;AAC7F,YAAM,IAAI,MAAM,sDAAsD;AAAA,IACxE;AACA,UAAM,YAAY,MAAM,QAAQ,QAAQ,SAAS,IAAK,QAAQ,YAA8B,CAAC;AAC7F,UAAM,kBAAkB,MAAM;AAAA,MAC5B;AAAA,MACA;AAAA,MACA,YACE,MAAM;AAAA,QACJ;AAAA,QACA,QAAQ,cAAc;AAAA,QACtB,QAAQ;AAAA,QACR,QAAQ,cAAc;AAAA,QACtB;AAAA,MACF;AAAA,IACJ;AACA,UAAM,oBAAoB,8BAA8B,eAAe;AACvE,WAAO,MAAM;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,oBAAoB,iBAAiB,iBAAiB;AAAA,MACtD;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAIA,MACE,QAAQ,SAAS,6BACjB,QAAQ,SAAS,wCACjB;AACA,QAAI,QAAQ,SAAS,6BAA6B,QAAQ,WAAW,GAAG;AACtE,YAAM,IAAI,MAAM,oDAAoD;AAAA,IACtE;AACA,WAAO,MAAM;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,CAAC;AAAA,MACD,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,QAAQ,SAAS,2BAA2B,QAAQ,SAAS,2BAA2B;AAC1F,WAAO,MAAM,uBAAuB,IAAI,SAAS,OAAO,SAAS,iBAAiB,OAAO;AAAA,EAC3F;AACA,QAAM,IAAI,MAAM,mCAAmC,QAAQ,IAAI,EAAE;AACnE;AAEA,SAAS,uBAAuB,OAAsD;AACpF,QAAM,UAAU,MAAM,IAAI,CAAC,SAAS,MAAM,KAAK,CAAC,EAAE,OAAO,CAAC,SAAyB,QAAQ,IAAI,CAAC;AAChG,SAAO,QAAQ,SAAS,IAAI,QAAQ,KAAK,MAAM,IAAI;AACrD;AAEA,eAAe,uBACb,IACA,SACA,OACA,SACA,iBACA,SAC4B;AAC5B,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACA,MAAI,WAAW,WAAW,GAAG;AAC3B,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AACA,MAAI,WAAW,KAAK,CAAC,QAAQ,IAAI,cAAc,IAAI,GAAG;AACpD,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,SAAO,MAAM;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,CAAC;AAAA,IACD,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR;AAAA,EACF;AACF;AAGA,eAAe,aACb,IACA,SACA,OACA,SACA,MACA,iBACA,qBAAkD,CAAC,GACnD,cAAkC,aAClC,yBACA,yBACA,qBACA,oBAA8D,mCAC9D,qBAAmE,CAAC,GACxC;AAC5B,QAAM,wBAAwB,mBAAmB,IAAI,CAAC,eAAe,WAAW,QAAQ;AACxF,QAAM,CAAC,QAAQ,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC3C;AAAA,MAA+B;AAAA,MAAoB;AAAA,MAAwB,YACzE,kBAAkB,IAAI,QAAQ,aAAa,QAAQ,SAAS;AAAA,IAC9D;AAAA,IACA;AAAA,MAA+B;AAAA,MAAoB;AAAA,MAAyB,YAC1EC,2BAA0B,IAAI,QAAQ,aAAa,QAAQ,SAAS;AAAA,IACtE;AAAA,EACF,CAAC;AACD,QAAM,gBAAgB,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,YAAY;AACV,YAAM,SAAS,iCAAiC,MAAM;AACtD,aAAO,0BAA0B,MAAM,wBAAwB,MAAM,IAAI;AAAA,IAC3E;AAAA,EACF;AACA,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,MAAM,0BAA0B,eAAe,WAAW;AAAA,EAC5D;AACA,QAAM,oBAAoB,MAAM;AAAA,IAC9B;AAAA,IACA;AAAA,IACA,MAAM,8BAA8B,cAAc,qBAAqB;AAAA,EACzE;AACA,QAAM,sBAAsB,MAAM;AAAA,IAChC;AAAA,IACA;AAAA,IACA,YACE,0BACI,MAAM,wBAAwB,iBAAiB,IAC/C;AAAA,EACR;AACA,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,YACE,sBACI,MAAM,oBAAoB,qBAAqB;AAAA,MAC7C,aAAa,mBAAmB,IAAI,CAAC,eAAe,WAAW,IAAI;AAAA,IACrE,CAAC,IACD;AAAA,EACR;AACA,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA,YACE,MAAM,QAAQ,aAAa,OAAO;AAAA,MAChC,MAAM;AAAA,MACN,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,MACvB,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,MAC7C;AAAA,MACA,iBAAiB;AAAA,MACjB,GAAI,sBAAsB,EAAE,4BAA4B,KAAK,IAAI,CAAC;AAAA,IACpE,CAAC;AAAA,EACL;AACA,QAAM,6BAA6B,MAAM;AAAA,IACvC;AAAA,IACA;AAAA,IACA,MAAM;AACJ,YAAM,gBAAgB,MAAM,QAAQ,SAAS,KAAK,IAC9C,IAAI,IAAI,SAAS,KAAK,IACtB,oBAAI,IAAa;AACrB,aAAO;AAAA,QACL,qBAAqB,OAAO,IAAI,CAAC,QAAQ,IAAI,EAAE;AAAA,QAC/C,gBAAgB,OACb;AAAA,UACC,CAAC,QACC,IAAI,kCAAkC,QACtC,0BAA0B,IAAI,IAAI,KAClC,cAAc,IAAI,IAAI,IAAI;AAAA,QAC9B,EACC,IAAI,CAAC,QAAQ,IAAI,EAAE;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,uBAAuB,SAAS;AAAA,IAChC;AAAA,EACF;AACF;AA0BA,eAAe,kCACb,IACA,WACA,aACA,WACA,WACsC;AACtC,QAAM,gBAAgB,UAAU;AAAA,IAC9B,CAAC,aAA0C,SAAS,SAAS;AAAA,EAC/D;AACA,MAAI,cAAc,WAAW,EAAG,QAAO,CAAC;AACxC,QAAM,QAAQ,MAAM,mBAAmB,IAAI;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,cAAc,IAAI,CAAC,aAAa,SAAS,MAAM;AAAA,EAC1D,CAAC;AACD,QAAM,WAAW,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC7D,SAAO,cAAc,IAAI,CAAC,aAAa;AACrC,UAAM,OAAO,SAAS,IAAI,SAAS,MAAM;AACzC,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,mBAAmB,SAAS,MAAM,EAAE;AAC/D,WAAO,EAAE,UAAU,KAAK;AAAA,EAC1B,CAAC;AACH;AAEA,SAAS,8BACP,aACoB;AACpB,QAAM,gBAAgB,YAAY;AAAA,IAChC,CAAC,EAAE,UAAU,KAAK,MAChB,KAAK,KAAK,QAAQ,KAAK,KAAK,WAAW,KAAK,KAAK,SAAS,YAAY,gBAAgB,UAAU,IAAI,CAAC;AAAA,EACzG;AACA,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO;AAAA,EACT;AACA,SAAO,CAAC,gDAAgD,GAAG,aAAa,EAAE,KAAK,IAAI;AACrF;AAEA,SAAS,gBACP,UACA,MACQ;AACR,SAAO,GAAG,kBAAkB,QAAQ,CAAC,IAAI,KAAK,YAAY;AAC5D;;;ADlvBA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;AE5CP,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE,0BAAAC;AAAA,EACA;AAAA,EACA,0BAAAC;AAAA,OAGK;AAEA,IAAM,8BAA8B;AACpC,IAAM,8BAA8B;AA0BpC,SAAS,yBACd,SACe;AACf,QAAM,QAAQ,SAAS,OAAO,KAAK,KAAK;AACxC,SAAO,QAAQ,MAAM,MAAM,GAAG,GAAG,IAAI;AACvC;AAEA,SAAS,cAAc,cAAqC;AAC1D,SAAO,eAAe,wBAAwB,YAAY,MAAM;AAClE;AAEA,SAAS,gBAAgB,WAAiE;AACxF,MAAI,CAAC,UAAW,QAAO;AACvB,SAAO,UAAU,aAAa,eAC1B,mCAAmC,UAAU,MAAM,yBACnD,2DAA2D,UAAU,MAAM;AACjF;AAGO,SAAS,mCAAmC,OAQZ;AACrC,QAAM,OAAO,qBAAqB,MAAM,QAAQ;AAChD,QAAM,QAAQ,MAAM,UAAU,uBAAuB,MAAM,OAAO,IAAI;AACtE,QAAM,OAAO,cAAc,MAAM,YAAY;AAC7C,QAAM,OAAO,MAAM,UACf,2EACA;AACJ,QAAM,QAAQ,OACV,GAAG,IAAI,IAAI,MAAM,cAAc,WAAW,IAAI,WAAW,IAAI,gCAAgC,KAAK,KAAK,IAAI,KAC3G,GAAG,IAAI,4BAA4B,KAAK,yBAAyB,IAAI;AACzE,QAAM,SAAS,gBAAgB,MAAM,aAAa,IAAI;AACtD,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,WAAW;AAAA,IACX,UAAU,OAAO,aAAa,MAAM,QAAQ,IAAI;AAAA,IAChD,OAAO,MAAM;AAAA,IACb,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7B;AACF;AAMO,SAAS,mCAAmC,OAKZ;AACrC,QAAM,OAAO,qBAAqB,MAAM,QAAQ;AAChD,QAAM,OAAO,cAAc,MAAM,YAAY;AAC7C,QAAM,aACJ,MAAM,gBAAgB,QAClB,KACA,OACE,GAAG,IAAI,sBAAsB,IAAI,iDACjC,kDAAkD,KAAK,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;AACtG,SAAO;AAAA,IACL,OACE,iDAAiD,MAAM,UAAU,MAAM,+BACpE,UAAU;AAAA,IACf,MAAM;AAAA,IACN,WAAW;AAAA,IACX,UAAU,OAAO,aAAa,MAAM,QAAQ,IAAI;AAAA,IAChD,GAAI,gBAAgB,MAAM,SAAS,IAAI,EAAE,QAAQ,gBAAgB,MAAM,SAAS,EAAG,IAAI,CAAC;AAAA,EAC1F;AACF;AAMO,IAAM,4BAAN,cAAwC,MAAM;AAAA,EAEnD,YAAqB,SAA6C;AAChE,UAAM,QAAQ,KAAK;AADA;AAEnB,SAAK,OAAO;AAAA,EACd;AAAA,EAJS,OAAO;AAKlB;AAmBO,SAAS,2BACd,WACA,SACA,SACgC;AAChC,QAAM,eAAe,QAAQ,aAAa;AAG1C,QAAM,kBACJ,gBACA,QAAQ,qBAAqB,QAC7B,aAAa,QAAQ,gBAAgB,MAAM,aAAa,QAAQ,QAAQ,IACpE,QAAQ,mBACR,QAAQ;AACd,QAAM,cACJ,gBACA,oBAAoB,QACpB,aAAa,eAAe,MAAM,aAAa,QAAQ,QAAQ,KAC/D,CAAC,mBAAmB,iBAAiB,QAAQ,QAAQ;AACvD,MACE,yBAAyB;AAAA,IACvB,UAAU,UAAU;AAAA,IACpB,iBAAiB,QAAQ;AAAA,IACzB;AAAA,IACA,oBACE,gBACA;AAAA,MACE,EAAE,UAAU,QAAQ,UAAU,0BAA0B,QAAQ,UAAU;AAAA,MAC1E;AAAA,IACF;AAAA,EACJ,CAAC,GACD;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU,eAAe,QAAQ,WAAW,QAAQ;AAAA,MACpD;AAAA,MACA;AAAA,MACA,mBAAmB,QAAQ;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,EAAE,MAAM,eAAe,UAAU,QAAQ,SAAS;AAC3D;AAqBO,SAAS,mCAA+D,OAShE;AACb,MAAI,MAAM,iBAAiB,KAAM,QAAO;AACxC,QAAM,YAAY,MAAM,SAAS;AAAA,IAAO,CAAC,YACvCA,wBAAuB,QAAQ,iBAAiB,MAAM,OAAO;AAAA,EAC/D;AACA,QAAM,WAAW,UAAU;AAAA,IAAO,CAAC,YACjCD,wBAAuB,SAAS,MAAM,SAAS,MAAM,GAAG;AAAA,EAC1D;AACA,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,MAAI,MAAM,sBAAsB,MAAM,cAAc,UAAU;AAC5D,UAAM,SAAS,SAAS,KAAK,CAAC,YAAY,QAAQ,OAAO,MAAM,kBAAkB;AACjF,WAAO,SAAS,CAAC,MAAM,IAAI;AAAA,EAC7B;AACA,MAAI,CAAC,MAAM,iBAAiB;AAC1B,UAAM,SAAS,SAAS,KAAK,CAAC,YAAY,QAAQ,OAAO,MAAM,kBAAkB;AACjF,WAAO,SAAS,CAAC,MAAM,IAAI;AAAA,EAC7B;AACA,QAAM,cAAc,UAAU,OAAO,CAAC,YAAY,QAAQ,gBAAgB;AAC1E,QAAM,sBAAsB,YAAY;AAAA,IAAO,CAAC,YAC9CA,wBAAuB,SAAS,MAAM,SAAS,MAAM,GAAG;AAAA,EAC1D;AACA,SAAO,YAAY,SAAS,KAAK,oBAAoB,WAAW,YAAY,SACxE,sBACA;AACN;;;AFlMA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kCAAAE;AAAA,OACK;;;AGgOA,IAAM,yBAAyB;AAC/B,IAAM,4BAA4B;AAiBlC,IAAM,4CAA4C;AAClD,IAAM,+CACX;AAwBK,IAAM,4CAA4C;AAClD,IAAM,+CACX;;;AHzPK,IAAM,iCAAiC;AACvC,IAAM,mCAAmC,CAAC,KAAO,KAAO,MAAQ,KAAQ,GAAM;AAC9E,IAAM,oCAAoC,iCAAiC;AAM3E,IAAM,iCAAiC,CAAC,KAAQ,KAAQ,KAAQ,KAAQ,IAAO;AAC/E,IAAM,0CAA0C;AAEhD,IAAM,uCAAN,cAAmD,MAAM;AAAA,EACrD,OAAO;AAAA,EAEhB,cAAc;AACZ,UAAM,4EAA4E;AAClF,SAAK,OAAO;AAAA,EACd;AACF;AAaO,SAAS,uBAAuB,OAIZ;AACzB,MAAI,MAAM,gBAAgB,mCAAmC;AAC3D,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,uBAAuB;AAAA,MACvB,0BAA0B;AAAA,IAC5B;AAAA,EACF;AACA,QAAM,gBACJ,MAAM,iBAAiB,QACvB,MAAM,iBAAiB,UACvB,OAAO,SAAS,MAAM,YAAY,KAClC,MAAM,eAAe,IACjB,KAAK,KAAK,MAAM,YAAY,IAC5B;AACN,QAAM,kBACJ,MAAM,gBAAgB,0BAClB,KAAK;AAAA,IACH,iBAAiB;AAAA,IACjB,+BACE,KAAK;AAAA,MACH,KAAK,IAAI,KAAK,MAAM,MAAM,aAAa,IAAI,GAAG,CAAC;AAAA,MAC/C,+BAA+B,SAAS;AAAA,IAC1C,CACF;AAAA,EACF,IACA,MAAM,gBAAgB,0BACpB,MAAM,gBAAgB,uCACtB,MAAM,gBAAgB,uCACtB,MAAM,gBAAgB,2BACtB,MAAM,gBAAgB,+BACtB,MAAM,gBAAgB,+CACtB,MAAM,gBAAgB,0CACtB,KAAK;AAAA,IACH,iBAAiB;AAAA,IACjB,iCACE,KAAK;AAAA,MACH,KAAK,IAAI,KAAK,MAAM,MAAM,aAAa,IAAI,GAAG,CAAC;AAAA,MAC/C,iCAAiC,SAAS;AAAA,IAC5C,CACF;AAAA,EACF,IACA;AACR,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,EACF;AACF;AAEO,SAAS,iCAGd,SACA,UAOA;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,OAAO,8CAA8C,SAAS,qBAAqB;AAAA,IACnF,WAAW;AAAA,IACX,mBAAmB;AAAA,IACnB,uBAAuB,SAAS;AAAA,IAChC,0BAA0B,SAAS;AAAA,IACnC,oBAAoB,QAAQ;AAAA,EAC9B;AACF;AAEO,SAAS,kCAAkC,UAA2C;AAC3F,QAAM,QAAQ,SAAS;AACvB,SAAO,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,SAAS,IAAI,QAAQ;AAC1F;AAEO,SAAS,4CACd,cACA,OACQ;AACR,SAAO,UAAU,cAAc,IAAI;AACrC;AAEO,SAAS,YAAY,SAAkB,MAA6B;AACzE,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,SAAU,QAA8B;AAC9C,MAAI,OAAO,WAAW,YAAY;AAChC,UAAM,QAAQ,OAAO,KAAK,SAAS,IAAI;AACvC,WAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,EAC7C;AACA,QAAM,SAAS,KAAK,YAAY;AAChC,QAAM,QAAQ,OAAO,QAAQ,OAAkC,EAAE;AAAA,IAC/D,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,YAAY,MAAM,UAAU,OAAO,UAAU;AAAA,EACrE;AACA,SAAO,OAAO,QAAQ,CAAC,MAAM,WAAW,MAAM,CAAC,IAAI;AACrD;AAGO,SAAS,qBAAqB,OAAgB,QAAQ,KAAK,IAAI,GAAkB;AACtF,MAAI,UAAmB;AACvB,WAAS,QAAQ,GAAG,QAAQ,KAAK,WAAW,OAAO,YAAY,UAAU,SAAS,GAAG;AACnF,UAAM,QAAQ;AACd,UAAM,OACJ,MAAM,SAAS,OAAO,MAAM,UAAU,WACjC,MAAM,QACP;AACN,UAAM,gBAAgB;AAAA,MACpB,MAAM,uBAAuB,MAAM,uBAAuB,MAAM;AAAA,IAClE;AACA,UAAM,SACJ,YAAY,MAAM,SAAS,aAAa,KACxC,YAAY,MAAM,iBAAiB,aAAa,KAChD,YAAY,MAAM,SAAS,aAAa;AAC1C,UAAM,gBAAgB,WAAW,OAAO,OAAO,MAAM,OAAO,MAAM;AAClE,UAAM,aACJ,WAAW,QAAQ,CAAC,OAAO,SAAS,aAAa,IAAI,KAAK,MAAM,MAAM,IAAI,OAAO;AACnF,UAAM,UAAU,OAAO,SAAS,aAAa,IACzC,gBACA,OAAO,SAAS,aAAa,IAC3B,gBACA,OAAO,SAAS,UAAU,IACxB,KAAK,IAAI,IAAI,aAAa,SAAS,GAAK,IACxC,OAAO;AACf,QAAI,OAAO,SAAS,OAAO,KAAK,UAAU,EAAG,QAAO,KAAK,KAAK,UAAU,GAAK;AAC7E,cAAU,MAAM;AAAA,EAClB;AACA,SAAO;AACT;AAQO,SAAS,iCAAiC,OAG1B;AACrB,MAAI,MAAM,gBAAgB,GAAG;AAC3B,WAAO;AAAA,EACT;AACA,QAAM,eAAe,KAAK,IAAI,GAAG,MAAM,eAAe,MAAM,WAAW,MAAM;AAC7E,QAAM,SAAS,MAAM,WAAW,IAAI,CAAC,OAAO,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI;AAChE,QAAM,YAAY,SACd,GAAG,MAAM,GAAG,eAAe,IAAI,UAAU,YAAY,sCAAsC,EAAE,KAC7F,GAAG,MAAM,YAAY;AACzB,SAAO,kJAAkJ,SAAS;AACpK;AAUO,SAAS,iCAAiC,OAInB;AAC5B,MACE,MAAM,gBAAgB,2BACtB,MAAM,uBACN,CAAC,OAAO,cAAc,MAAM,OAAO,mBAAmB,KACtD,MAAM,OAAO,uBAAuB,KACpC,CAAC,OAAO,cAAc,MAAM,OAAO,qBAAqB,KACxD,MAAM,OAAO,yBAAyB,KACtC,MAAM,OAAO,wBAAwB,qCACrC,CAAC,OAAO,cAAc,MAAM,OAAO,eAAe,KAClD,MAAM,OAAO,mBAAmB,GAChC;AACA,WAAO;AAAA,EACT;AACA,SAAO,mBAAmB,OAAO;AAAA,IAC/B,SAAS;AAAA,IACT,MAAM;AAAA,IACN,cAAc;AAAA,IACd,SAAS,CAAC,MAAM,MAAM;AAAA,EACxB,CAAC;AACH;AAUO,SAAS,yBAAyB,OAAoC;AAC3E,QAAM,qBAAqB,+BAA+B,KAAK,IAAI,QAAQ;AAC3E,QAAM,gBAAgB,6BAA6B,KAAK;AACxD,QAAM,gBACJ,oBAAoB,QAAQ,UAAU,4BACtC,mBAAmB,QAAQ,iBAAiB,mBAC5C,CAAC;AACH,QAAM,SAAgC;AAAA,IACpC,aAAa,gBACT,YACA,sBAAsB,gBACpB,cACA;AAAA,IACN,MAAM,iBAAiB,oBAAoB,QAAQ,QAAQ;AAAA,IAC3D,GAAI,sBAAsB,gBACtB;AAAA,MACE,UAAU,mBAAmB,QAAQ;AAAA,MACrC,QACE,mBAAmB,QAAQ,UAAU,4BACrC,mBAAmB,QAAQ,aAAa,UACnC,kCACD,mBAAmB,QAAQ,UAAU,4BACnC,mBAAmB,QAAQ,aAAa,UACvC,qCACA;AAAA,MACT,aAAa;AAAA,IACf,IACA,CAAC;AAAA,EACP;AACA,SAAO,mBAAmB,OAAO;AAAA,IAC/B,SAAS;AAAA,IACT,MAAM;AAAA,IACN,cAAc;AAAA,IACd,SAAS,CAAC,MAAM;AAAA,EAClB,CAAC;AACH;AAEA,SAAS,6BACP,OACgD;AAChD,QAAM,qBAAqB,+BAA+B,KAAK,IAAI,QAAQ;AAC3E,MAAI,CAAC,oBAAoB;AACvB,UAAM,SAAS,wBAAwB,KAAK;AAC5C,UAAM,iBAAiB,OAAO,QAAQ,SAAS,WAAW,OAAO,OAAO;AACxE,QAAI,+BAA+B,cAAc,GAAG;AAClD,aAAO,oBAAoB,cAAc;AAAA,IAC3C;AAAA,EACF;AACA,QAAM,WAAW,oBAAoB,QAAQ,YAAY;AACzD,MAAI,aAAa,QAAQ,oCAAoC,KAAK,GAAG;AACnE,WAAO;AAAA,EACT;AACA,MACE,CAAC,sBACD,EACE,aAAa,QACb,SAAS,WAAW,IAAI,KACxB,SAAS,WAAW,IAAI,KACxB,SAAS,WAAW,IAAI,KACxB,aAAa,WACb,aAAa,WACb,aAAa,WACb,aAAa,WACb,aAAa,WACb,SAAS,WAAW,IAAI,IAE1B;AACA,WAAO;AAAA,EACT;AACA,SAAO,mBAAmB,QAAQ;AACpC;AAOO,SAAS,iCAAiC,OAUnB;AAC5B,QAAM,OAAO,6BAA6B,MAAM,KAAK;AACrD,MAAI,CAAC,QAAQ,MAAM,sBAAsB,EAAG,QAAO;AACnD,MAAI,MAAM,8BAA8B,MAAM,iBAAkB,QAAO;AACvE,MACE,MAAM,qBACL,CAAC,OAAO,cAAc,MAAM,iBAAiB,qBAAqB,KACjE,MAAM,iBAAiB,yBAAyB,KAChD,MAAM,iBAAiB,wBAAwB,qCAC/C,CAAC,yBAAyB,KAAK,MAAM,iBAAiB,WAAW,IACnE;AACA,WAAO;AAAA,EACT;AACA,QAAM,SAA0C;AAAA,IAC9C,QAAQ,MAAM;AAAA,IACd,gBAAgB,MAAM;AAAA,IACtB,qBAAqB,MAAM;AAAA,IAC3B;AAAA,IACA,GAAI,MAAM,6BAA6B,EAAE,4BAA4B,KAAK,IAAI,CAAC;AAAA,IAC/E,GAAI,MAAM,mBACN;AAAA,MACE,qBAAqB,MAAM,iBAAiB;AAAA,MAC5C,uBAAuB,MAAM,iBAAiB;AAAA,IAChD,IACA,CAAC;AAAA,EACP;AACA,SAAO,mBAAmB,OAAO;AAAA,IAC/B,SAAS;AAAA,IACT,MAAM;AAAA,IACN,cAAc;AAAA,IACd,SAAS,CAAC,MAAM;AAAA,EAClB,CAAC;AACH;AASO,SAAS,6BAA6B,OAAyB;AACpE,SAAO,iBAAiBC,qBAAoB,MAAM,YAAY;AAChE;AAcO,SAAS,qCACd,OAC6C;AAC7C,QAAM,UAAqB,CAAC,KAAK;AACjC,QAAM,OAAO,oBAAI,QAAgB;AACjC,MAAI,YAAY;AAEhB,SAAO,QAAQ,SAAS,KAAK,YAAY,IAAI;AAC3C,UAAM,UAAU,QAAQ,MAAM;AAC9B,iBAAa;AACb,QAAI,CAAC,WAAW,OAAO,YAAY,YAAY,KAAK,IAAI,OAAO,EAAG;AAClE,SAAK,IAAI,OAAO;AAEhB,QAAI;AACF,YAAM,SAAS;AACf,YAAM,SAAS,OAAO;AACtB,WACG,mBAAmBC,gCAClB,OAAO,SAAS,kCAClB,OAAO,OAAO,mBAAmB,YACjC,OAAO,eAAe,SAAS,KAC/B,OAAO,OAAO,eAAe,YAC7B,OAAO,cAAc,OAAO,UAAU,KACtC,OAAO,cAAc,MACpB,WAAW,yBACV,WAAW,0BACX,WAAW,kCACb;AACA,eAAO;AAAA,UACL,gBAAgB,OAAO;AAAA,UACvB,YAAY,OAAO;AAAA,UACnB;AAAA,QACF;AAAA,MACF;AAEA,iBAAW,OAAO,CAAC,SAAS,OAAO,GAAY;AAC7C,cAAM,SAAS,OAAO,GAAG;AACzB,YAAI,UAAU,OAAO,WAAW,SAAU,SAAQ,KAAK,MAAM;AAAA,MAC/D;AACA,UAAI,MAAM,QAAQ,OAAO,MAAM,EAAG,SAAQ,KAAK,GAAG,OAAO,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,IAC9E,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAcO,SAAS,2BACd,OAKO;AACP,QAAM,UAAqB,CAAC,KAAK;AACjC,QAAM,OAAO,oBAAI,QAAgB;AACjC,MAAI,YAAY;AAEhB,SAAO,QAAQ,SAAS,KAAK,YAAY,IAAI;AAC3C,UAAM,UAAU,QAAQ,MAAM;AAC9B,iBAAa;AACb,QAAI,CAAC,WAAW,OAAO,YAAY,YAAY,KAAK,IAAI,OAAO,EAAG;AAClE,SAAK,IAAI,OAAO;AAEhB,QAAI;AACF,YAAM,SAAS;AACf,WACG,mBAAmB,mCAClB,OAAO,SAAS,sCAClB,OAAO,SAAS,4CAChB;AACA,eAAO;AAAA,MACT;AACA,WACG,mBAAmBC,mCAClB,OAAO,SAAS,qCAClB,OAAO,SAAS,8BAChB;AACA,eAAO;AAAA,MACT;AACA,UACE,mBAAmB,oCACnB,mBAAmB,uCACnB,OAAO,SAAS,sCAChB,OAAO,SAAS,uCAChB;AACA,eAAO;AAAA,MACT;AAEA,iBAAW,OAAO,CAAC,SAAS,OAAO,GAAY;AAC7C,cAAM,SAAS,OAAO,GAAG;AACzB,YAAI,UAAU,OAAO,WAAW,SAAU,SAAQ,KAAK,MAAM;AAAA,MAC/D;AACA,UAAI,MAAM,QAAQ,OAAO,MAAM,GAAG;AAChC,gBAAQ,KAAK,GAAG,OAAO,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,MAC5C;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAiBO,SAAS,wBAAwB,QAAwB;AAC9D,SAAO,OAAO,WAAW,kCAAkC,IACvD,SACA,oCAAoC,MAAM;AAChD;AAgBO,SAAS,oBAAoB,OAAqC;AACvE,QAAM,aAAkC;AAAA,IACtC,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,QAAQ;AAAA,EACV;AACA,MAAI;AACF,QAAI,eAAe;AACnB,QAAI,iBAAiB,kCAAkC;AACrD,iBAAW,0BAA0B,MAAM;AAC3C,qBAAe,MAAM;AAAA,IACvB;AACA,QAAI,gBAAgB,OAAO,iBAAiB,UAAU;AACpD,YAAM,SAAS;AAAA,QACZ,aAA4D,UAC1D,aAA0C;AAAA,MAC/C;AACA,UAAI,OAAO,UAAU,MAAM,KAAK,UAAU,OAAO,UAAU,KAAK;AAC9D,mBAAW,SAAS;AAAA,MACtB;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAGR;AACA,SAAO;AACT;AAEO,SAAS,sBAAsB,OAAuB;AAC3D,QAAM,aAAa,oBAAoB,KAAK;AAC5C,QAAM,OAAO,IAAI,MAAM,yBAAyB;AAKhD,OAAK,OAAO;AACZ,OAAK,OAAO,WAAW;AACvB,MAAI,WAAW,WAAW,OAAW,MAAK,SAAS,WAAW;AAC9D,OAAK,SAAS,WAAW;AACzB,SAAO;AACT;AAOO,IAAM,yCACX;AAEK,SAAS,iCAAiC,OAAwB;AACvE,QAAM,YAAY,4BAA4B,KAAK;AACnD,MAAI,WAAW;AACb,WAAO;AAAA,MACL,uDAAuD,oCAAoC,SAAS,CAAC,oCAAoC,sCAAsC;AAAA,IACjL;AAAA,EACF;AAGA,QAAM,QAAQ,qCAAqC,KAAK;AACxD,MAAI,OAAO;AACT,WAAO;AAAA,MACL,GAAG,8BAA8B,MAAM,KAAK,CAAC;AAAA,IAC/C;AAAA,EACF;AACA,MACE,iBAAiB,mCACjB,iBAAiB,6BACjB;AACA,WAAO,wBAAwB,MAAM,OAAO;AAAA,EAC9C;AACA,QAAM,YAAY,iBAAiB,SAAS,MAAM,OAAO,MAAM,OAAO;AACtE,SAAO,wBAAwB,cAAc,SAAS,EAAE;AAC1D;AAQO,SAAS,kCACd,OACA,YAAgC,CAAC,GASjC;AACA,QAAM,YAAY,4BAA4B,KAAK;AAGnD,QAAM,QAAQ,YAAY,OAAO,qCAAqC,KAAK;AAC3E,SAAO;AAAA,IACL,OAAO,UAAU,SAAS,iCAAiC,KAAK;AAAA,IAChE,MAAM;AAAA,IACN,WAAW;AAAA,IACX,UAAU;AAAA,IACV,WAAW;AAAA,IACX,GAAI,YAAY,EAAE,mBAAmB,UAAU,IAAI,CAAC;AAAA,IACpD,GAAI,QAAQ,EAAE,YAAY,MAAM,MAAM,IAAI,CAAC;AAAA,EAC7C;AACF;AAEO,SAAS,2BAA2B,OAAyB;AAClE,SACE,iBAAiB,mCAAmC,iBAAiB;AAEzE;AAEO,SAAS,uCAAuC,OAAyB;AAC9E,MAAI,EAAE,iBAAiB,iCAAkC,QAAO;AAChE,MAAI,sBAAsB,KAAK,KAAK,6BAA6B,KAAK,EAAG,QAAO;AAKhF,MAAI,wCAAwC,KAAK,EAAG,QAAO;AAM3D,MAAI,kCAAkC,KAAK,EAAG,QAAO;AACrD,SAAO,uBAAuB,KAAK,EAAE,cAAc;AACrD;AAEO,SAAS,mCACd,OAC4D;AAC5D,MAAI,wBAAwB,KAAK,EAAG,QAAO;AAC3C,QAAM,SAAS,oBAAoB,KAAK;AACxC,QAAM,UAAU,OAAO;AAAA,IACrB,CAAC,UACC,uCAAuC,KAAK,KAAK,KACjD,0CAA0C,KAAK,KAAK,KACpD,8BAA8B,KAAK,KAAK,KACxC,+BAA+B,KAAK,KAAK;AAAA,EAC7C;AACA,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,QAAM,OAAO,OAAO,KAAK,CAAC,UAAU,uCAAuC,KAAK,KAAK,CAAC;AACtF,SAAO;AAAA,IACL;AAAA,IACA,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,IACvB,GAAI,WAAW,YAAY,UAAU,EAAE,QAAQ,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAYO,SAAS,iCACd,OAC6C;AAC7C,QAAM,SAAS,oBAAoB,KAAK;AACxC,QAAM,cAAc,OAAO;AAAA,IACzB,CAAC,UACC,WAAW,KAAK,KAAK,KACrB,qFAAqF;AAAA,MACnF;AAAA,IACF,KACA,CAAC,6BAA6B,KAAK,KAAK;AAAA,EAC5C;AACA,QAAM,sBAAsB,yBAAyB,KAAK;AAC1D,MAAI,CAAC,eAAe,CAAC,qBAAqB;AACxC,WAAO;AAAA,EACT;AACA,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,QAAM,UAAU,eAAe,OAAO,KAAK,CAAC,UAAU,WAAW,KAAK,KAAK,CAAC;AAC5E,SAAO;AAAA,IACL;AAAA,IACA,GAAI,WAAW,YAAY,UAAU,EAAE,QAAQ,QAAQ,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,SAAS,oBAAoB,OAAgB,OAAO,oBAAI,QAAgB,GAAa;AAC1F,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,CAAC,KAAK;AAAA,EACf;AACA,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO,CAAC;AAAA,EACV;AACA,MAAI,KAAK,IAAI,KAAK,GAAG;AACnB,WAAO,CAAC;AAAA,EACV;AACA,OAAK,IAAI,KAAK;AACd,QAAM,MAAgB,CAAC;AAGvB,MAAI,iBAAiB,gCAAiC,KAAI,KAAK,MAAM,MAAM;AAC3E,QAAM,SAAS;AACf,aAAW,OAAO,CAAC,WAAW,QAAQ,QAAQ,QAAQ,OAAO,GAAG;AAC9D,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,UAAI,KAAK,KAAK;AAAA,IAChB;AAAA,EACF;AACA,aAAW,OAAO,CAAC,SAAS,SAAS,YAAY,MAAM,GAAG;AACxD,QAAI,KAAK,GAAG,oBAAoB,OAAO,GAAG,GAAG,IAAI,CAAC;AAAA,EACpD;AACA,SAAO;AACT;AA2CO,IAAM,2CACX;AAEK,SAAS,6CAA6C,SAA0B;AACrF,SAAO,QAAQ,KAAK,EAAE,YAAY,MAAM;AAC1C;AAEA,SAAS,gCAAgC,OAAoC;AAC3E,MAAI,iBAAiB,iCAAiC;AACpD,WAAO,MAAM,aAAa,WAAW,MAAM,SAAS;AAAA,EACtD;AACA,SAAO,oBAAoB,KAAK,EAAE;AAAA,IAChC,CAAC,UACC,yFAAyF;AAAA,MACvF;AAAA,IACF,KAAK,sDAAsD,KAAK,KAAK;AAAA,EACzE;AACF;AAEA,SAAS,wBAAwB,OAAyB;AACxD,SAAO,gCAAgC,KAAK,MAAM;AACpD;AAEO,SAAS,yBAAyB,OAAyB;AAChE,MAAI,iBAAiB,iCAAiC;AACpD,WAAO,MAAM,aAAa;AAAA,EAC5B;AAEA,MAAI,wBAAwB,KAAK,EAAG,QAAO;AAC3C,QAAM,SACJ,OAAO,UAAU,YAAY,UAAU,OACnC;AAAA,IACG,MAAqD,UACnD,MAAmC;AAAA,EACxC,IACA;AAMN,MAAI,WAAW,UAAa,OAAO,SAAS,MAAM,GAAG;AACnD,WAAO,UAAU,OAAO,SAAS;AAAA,EACnC;AACA,QAAM,OACJ,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,QACrD,OAAQ,MAA6B,IAAI,IACzC;AACN,MAAI,QAAQ,2DAA2D,KAAK,IAAI,GAAG;AACjF,WAAO;AAAA,EACT;AACA,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,MAAI,6CAA6C,OAAO,GAAG;AACzD,WAAO;AAAA,EACT;AACA,SAAO,+HAA+H;AAAA,IACpI;AAAA,EACF;AACF;AAGA,SAAS,uBAAuB,OAAyB;AACvD,SAAO,oBAAoB,KAAK,EAAE,KAAK,CAAC,UAAU,MAAM,SAAS,4BAA4B,CAAC;AAChG;AAUO,SAAS,qCACd,OACgC;AAChC,MAAI,sBAAsB,KAAK,KAAK,gCAAgC,KAAK,EAAG,QAAO;AAEnF,SAAO,2BAA2B,KAAK;AACzC;AAaO,SAAS,6BAA6B,OAA6C;AACxF,MAAI,wBAAwB,KAAK,EAAG,QAAO;AAC3C,MAAI,UAAmB;AACvB,WAAS,QAAQ,GAAG,QAAQ,KAAK,WAAW,OAAO,YAAY,UAAU,SAAS,GAAG;AACnF,QAAI,mBAAmBC,iCAAgC;AACrD,aAAO,EAAE,MAAM,QAAQ,YAAY,KAAK;AAAA,IAC1C;AACA,cAAW,QAAoC;AAAA,EACjD;AACA,MAAI,CAAC,gCAAgC,KAAK,EAAG,QAAO;AACpD,MAAI,UAAmB;AACvB,WAAS,QAAQ,GAAG,QAAQ,KAAK,WAAW,OAAO,YAAY,UAAU,SAAS,GAAG;AACnF,UAAM,QAAQ;AACd,UAAM,OACJ,MAAM,SAAS,OAAO,MAAM,UAAU,WACjC,MAAM,QACP;AACN,UAAM,SAAS,OAAO,MAAM,UAAU,MAAM,cAAc,MAAM,UAAU,MAAM,UAAU;AAC1F,UAAM,OAAO,OAAO,MAAM,QAAQ,MAAM,QAAQ,EAAE,EAAE,YAAY;AAChE,QAAI,WAAW,OAAO,SAAS,kBAAkB,SAAS,iBAAiB;AACzE,aAAO,EAAE,MAAM,QAAQ,YAAY,KAAK;AAAA,IAC1C;AACA,QAAI,WAAW,KAAK;AAClB,aAAO,EAAE,MAAM,aAAa,YAAY,KAAK;AAAA,IAC/C;AACA,UAAM,UAAU,OAAO,MAAM,WAAW,MAAM,WAAW,EAAE;AAC3D,QACE,qCAAqC;AAAA,MACnC;AAAA,MACA;AAAA,MACA,QAAQ,OAAO,UAAU,MAAM,IAAI,SAAS;AAAA,IAC9C,CAAC,GACD;AACA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,YAAY,qBAAqB,KAAK,KAAK;AAAA,MAC7C;AAAA,IACF;AACA,cAAU,MAAM;AAAA,EAClB;AACA,SAAO;AACT;AAIA,SAAS,wBAAwB,OAAgD;AAC/E,QAAM,QAAmB,CAAC,KAAK;AAC/B,QAAM,OAAO,oBAAI,IAAa;AAC9B,WAAS,QAAQ,GAAG,QAAQ,MAAM,UAAU,QAAQ,IAAI,SAAS,GAAG;AAClE,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,WAAW,OAAO,YAAY,YAAY,KAAK,IAAI,OAAO,EAAG;AAClE,SAAK,IAAI,OAAO;AAChB,UAAM,SAAS;AACf,QAAI,OAAO,SAAS,gBAAiB,QAAO;AAC5C,eAAW,OAAO,CAAC,SAAS,YAAY,eAAe,SAAS,QAAQ,GAAG;AACzE,YAAM,SAAS,OAAO,GAAG;AACzB,UAAI,MAAM,QAAQ,MAAM,EAAG,OAAM,KAAK,GAAG,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,eACnD,WAAW,OAAW,OAAM,KAAK,MAAM;AAAA,IAClD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,OAAyB;AACxD,SACE,iBAAiB,SACjB,WAAW,SACX,OAAO,MAAM,UAAU,YACvB,YAAY,SACZ,MAAM,QAAQ,MAAM,MAAM;AAE9B;AAEO,SAAS,uBACd,OACA,UAAqC,CAAC,GACS;AAC/C,QAAM,UAAU,2BAA2B,OAAO,OAAO;AACzD,QAAM,aAAa,sCAAsC,KAAK;AAC9D,SAAO,aAAa,EAAE,GAAG,SAAS,2BAA2B,WAAW,IAAI;AAC9E;AAEA,SAAS,2BACP,OACA,UAAqC,CAAC,GA0BtC;AACA,MAAI,iBAAiB,yCAAyC;AAC5D,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,MACX,2BAA2B,MAAM;AAAA,IACnC;AAAA,EACF;AACA,MAAI,iBAAiB,uCAAuC;AAC1D,WAAO,EAAE,OAAO,MAAM,SAAS,MAAM,uCAAuC,WAAW,MAAM;AAAA,EAC/F;AACA,MAAI,iBAAiB,kCAAkC;AACrD,UAAM,kBACJ,+BAA+B,MAAM,KAAK,KAC1C,wBAAwB,MAAM,KAAK,MAAM,QACzC,wBAAwB,MAAM,KAAK;AACrC,UAAM,aAAa,kBACf,uBAAuB,MAAM,OAAO,OAAO,IAC3C;AAAA,MACE,OAAO,MAAM,iBAAiB,QAAQ,MAAM,MAAM,UAAU,OAAO,MAAM,KAAK;AAAA,IAChF;AACJ,WAAO;AAAA,MACL,GAAG;AAAA,MACH,yBAAyB,MAAM;AAAA,IACjC;AAAA,EACF;AAIA,QAAM,sBAAsB,wBAAwB,KAAK;AACzD,QAAM,gBAAgB,wBAAwB,KAAK;AACnD,OAAK,uBAAuB,kBAAkB,CAAC,+BAA+B,KAAK,GAAG;AACpF,UAAM,WAAW,uBAAuB,uBAAuB,KAAK;AACpE,UAAM,WAAW,sBAAsB,uBAAuB,mBAAmB,IAAI;AACrF,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM,oBAAoB,QAAQ;AAAA,MAClC;AAAA,MACA,GAAI,OAAO,KAAK,QAAQ,EAAE,SAAS,IAAI,EAAE,SAAS,IAAI,CAAC;AAAA,IACzD;AAAA,EACF;AACA,QAAM,0BAA0B,gCAAgC,KAAK;AACrE,MAAI,4BAA4B,QAAW;AACzC,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,iBAAiB,iCAAiC;AACpD,UAAMC,SACJ,MAAM,aAAa,aAAa,MAAM,aAAa,eAC/C,qCAAqC;AAAA,MACnC,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,SAAS,MAAM,OAAO;AAAA,MACnE,mBAAmB,MAAM;AAAA,IAC3B,CAAC,IACD;AACN,QAAIA,QAAO;AACT,aAAO;AAAA,QACL,OAAO,8BAA8BA,OAAM,KAAK;AAAA,QAChD,MAAM;AAAA,QACN,WAAW;AAAA,QACX,YAAYA,OAAM;AAAA,QAClB,QAAQ,MAAM;AAAA,MAChB;AAAA,IACF;AACA,WAAO;AAAA,MACL,OACE,MAAM,aAAa,eACf,wFACA,MAAM,aAAa,gBACjB,iGACA;AAAA,MACR,MACE,MAAM,aAAa,eACf,0BACA,MAAM,aAAa,gBACjB,yBACA;AAAA,MACR,WAAW,MAAM,aAAa,gBAAgB,MAAM,aAAa;AAAA,MACjE,QAAQ,MAAM;AAAA,IAChB;AAAA,EACF;AACA,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,QAAM,SACJ,OAAO,UAAU,YAAY,UAAU,OACnC;AAAA,IACG,MAAqD,UACnD,MAAmC;AAAA,EACxC,IACA;AACN,QAAM,OACJ,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,QACrD,OAAQ,MAA6B,IAAI,IACzC;AACN,MAAI,iBAAiB,wCAAwC;AAC3D,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,MACX,QAAQ,MAAM;AAAA,IAChB;AAAA,EACF;AACA,MAAI,iBAAiB,oCAAoC;AACvD,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,MACX,QAAQ,MAAM;AAAA,IAChB;AAAA,EACF;AACA,MAAI,iBAAiB,sCAAsC;AACzD,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM;AAAA,MACN,WAAW;AAAA,IACb;AAAA,EACF;AACA,MAAI,uCAAuC,KAAK,GAAG;AACjD,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM;AAAA,MACN,WAAW;AAAA,IACb;AAAA,EACF;AACA,MACE,CAAC,qCAAqC,KAAK,KAC3C,gDAAgD,KAAK,GACrD;AACA,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM;AAAA,MACN,WAAW;AAAA,IACb;AAAA,EACF;AAKA,MAAI,sBAAsB,KAAK,KAAK,SAAS,wBAAwB;AACnE,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,IACb;AAAA,EACF;AACA,MAAI,6CAA6C,KAAK,GAAG;AACvD,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM;AAAA,MACN,WAAW;AAAA,IACb;AAAA,EACF;AACA,QAAM,oBAAoB,8CAA8C,KAAK;AAC7E,MAAI,mBAAmB;AACrB,WAAO;AAAA,MACL,OAAO,kBAAkB;AAAA,MACzB,MAAM,kBAAkB;AAAA,MACxB,WAAW,kBAAkB,WAAW;AAAA,MACxC,eAAe,kBAAkB;AAAA,MACjC,GAAI,kBAAkB,YAAY,EAAE,WAAW,kBAAkB,UAAU,IAAI,CAAC;AAAA,IAClF;AAAA,EACF;AACA,QAAM,mBAAmB,8CAA8C,KAAK;AAC5E,MAAI,kBAAkB;AACpB,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM;AAAA,MACN,WAAW;AAAA,MACX,kBAAkB,iBAAiB;AAAA,MACnC,YAAY,iBAAiB;AAAA,MAC7B,mBAAmB,iBAAiB;AAAA,MACpC,GAAI,iBAAiB,YAAY,EAAE,WAAW,iBAAiB,UAAU,IAAI,CAAC;AAAA,MAC9E,GAAI,iBAAiB,gBAAgB,EAAE,eAAe,iBAAiB,cAAc,IAAI,CAAC;AAAA,IAC5F;AAAA,EACF;AACA,MAAI,+BAA+B,KAAK,GAAG;AACzC,UAAM,EAAE,QAAQ,IAAI;AACpB,WAAO;AAAA,MACL,OAAO,MAAM;AAAA,MACb,MAAM,QAAQ;AAAA,MACd,QACE,QAAQ,iBAAiB,cACrB,uDAAuD,QAAQ,QAAQ,eACvE;AAAA,MACN,eAAe,QAAQ;AAAA,MACvB,OAAO,QAAQ;AAAA,MACf,UAAU,QAAQ;AAAA,MAClB,UAAU,QAAQ;AAAA,MAClB,cAAc,QAAQ;AAAA,MACtB,GAAI,OAAO,KAAK,QAAQ,QAAQ,EAAE,SAAS,IAAI,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,IACnF;AAAA,EACF;AAIA,MAAI,iBAAiB,2BAA2B;AAC9C,WAAO,MAAM;AAAA,EACf;AACA,QAAM,uBAAuB,kCAAkC,KAAK;AACpE,MAAI,sBAAsB;AACxB,WAAO,qBAAqB,aAAa,qBACrC,mCAAmC;AAAA,MACjC,cAAc;AAAA,MACd,UAAU;AAAA,MACV,aAAa;AAAA,MACb,SAAS;AAAA,MACT,WAAW;AAAA,IACb,CAAC,IACD,mCAAmC;AAAA,MACjC,cAAc;AAAA,MACd,UAAU;AAAA,MACV,WAAW;AAAA,MACX,aAAa;AAAA,IACf,CAAC;AAAA,EACP;AAcA,QAAM,aAAa,6BAA6B,KAAK;AACrD,MAAI,eAAe,sBAAsB,KAAK,KAAK,uBAAuB,KAAK,IAAI;AACjF,WAAO,8BAA8B,YAAY,OAAO;AAAA,EAC1D;AACA,QAAM,eAAe,kCAAkC,OAAO;AAAA,IAC5D,2BAA2B,QAAQ,gBAAgB;AAAA,EACrD,CAAC;AACD,MAAI,cAAc;AAChB,WAAO;AAAA,MACL,OAAO,aAAa,mBAChB,2KACA;AAAA,MACJ,MAAM;AAAA,MACN,WAAW;AAAA,MACX,cAAc,aAAa;AAAA,MAC3B,kBAAkB,aAAa;AAAA,MAC/B,GAAI,aAAa,YAAY,EAAE,WAAW,aAAa,UAAU,IAAI,CAAC;AAAA,MACtE,GAAI,aAAa,UAAU,EAAE,QAAQ,aAAa,QAAQ,IAAI,CAAC;AAAA,IACjE;AAAA,EACF;AACA,QAAM,aAAa,iCAAiC,KAAK;AACzD,MAAI,YAAY;AACd,UAAM,yBAAyB,qCAAqC,KAAK;AACzE,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM;AAAA,MACN,WAAW;AAAA,MACX,GAAI,WAAW,UAAU,WAAW,UAChC,EAAE,QAAQ,WAAW,UAAU,WAAW,QAAQ,IAClD,CAAC;AAAA,MACL,GAAI,yBAAyB,EAAE,uBAAuB,IAAI,CAAC;AAAA,IAC7D;AAAA,EACF;AACA,MAAI,gCAAgC,KAAK,GAAG;AAC1C,UAAM,yBAAyB,qCAAqC,KAAK;AACzE,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,GAAI,yBAAyB,EAAE,uBAAuB,IAAI,CAAC;AAAA,IAC7D;AAAA,EACF;AACA,MAAI,SAAS,kCAAkC;AAC7C,WAAO;AAAA,MACL,OACE;AAAA,MACF,MAAM;AAAA,MACN,WAAW;AAAA,IACb;AAAA,EACF;AAKA,QAAM,QAAQ,qCAAqC,KAAK;AACxD,MAAI,OAAO;AACT,WAAO;AAAA,MACL,OAAO,8BAA8B,MAAM,KAAK;AAAA,MAChD,MAAM;AAAA,MACN,WAAW;AAAA,MACX,YAAY,MAAM;AAAA,MAClB,GAAI,UAAU,EAAE,QAAQ,QAAQ,IAAI,CAAC;AAAA,IACvC;AAAA,EACF;AACA,MACE,WAAW,OACX,SAAS,yBACT,6CAA6C,KAAK,OAAO,GACzD;AACA,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,GAAI,WAAW,YAAY,sBAAsB,EAAE,QAAQ,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAAA,EACF;AAKA,MAAI,yBAAyB,KAAK,GAAG;AACnC,QAAI,6CAA6C,OAAO,GAAG;AACzD,aAAO;AAAA,QACL,OACE;AAAA,QACF,MAAM;AAAA,QACN,WAAW;AAAA,MACb;AAAA,IACF;AACA,WAAO,EAAE,OAAO,SAAS,MAAM,wBAAwB,WAAW,KAAK;AAAA,EACzE;AACA,SAAO,EAAE,OAAO,QAAQ;AAC1B;AAWO,IAAM,8BAA8B,IAAI,KAAK;AAS7C,SAAS,6BACd,SACA,SAIA,KACa;AACb,MACE,QAAQ,SAAS,UACjB,QAAQ,SAAS,eACjB,QAAQ,SAAS,oBACjB;AACA,WAAO;AAAA,EACT;AACA,QAAM,gBACJ,QAAQ,oBAAoB,QAC5B,OAAO,SAAS,QAAQ,eAAe,KACvC,QAAQ,kBAAkB,IACtB,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,KAAK,QAAQ,eAAe,IAAI,GAAI,IAClE;AACN,MAAI,QAAQ,SAAS,cAAc;AACjC,WAAO,iBAAiB,IAAI,KAAK,IAAI,QAAQ,IAAI,8BAA8B;AAAA,EACjF;AACA,QAAM,iBAAiB,UACnB;AAAA,IACE,EAAE,MAAM,QAAQ,oBAAoB,OAAO,QAAQ,eAAe;AAAA,IAClE,EAAE,MAAM,QAAQ,sBAAsB,OAAO,QAAQ,iBAAiB;AAAA,EACxE,EACG;AAAA,IACC,CAAC,YACE,OAAO,QAAQ,MAAM,6BACtB,OAAO,iBAAiB,QACxB,OAAO,MAAM,QAAQ,IAAI,IAAI,QAAQ;AAAA,EACzC,EACC,IAAI,CAAC,WAAW,OAAO,KAAK,IAC/B,CAAC;AACL,QAAM,cAAc,gBAAgB,CAAC,GAAG,gBAAgB,aAAa,IAAI;AACzE,MAAI,YAAY,WAAW,GAAG;AAC5B,WAAO,IAAI,KAAK,IAAI,QAAQ,IAAI,2BAA2B;AAAA,EAC7D;AACA,SAAO,YAAY;AAAA,IAAO,CAAC,QAAQ,UACjC,MAAM,QAAQ,IAAI,OAAO,QAAQ,IAAI,QAAQ;AAAA,EAC/C;AACF;AAQO,SAAS,+BAA+B,OAA+C;AAE5F,MAAI,wBAAwB,KAAK,EAAG,QAAO;AAK3C,MAAI,eAAwB;AAC5B,WAAS,QAAQ,GAAG,QAAQ,KAAK,gBAAgB,OAAO,iBAAiB,UAAU,SAAS,GAAG;AAC7F,QAAI,wBAAwB,sBAAsB;AAChD,aAAO,EAAE,MAAM,QAAQ,iBAAiB,KAAK;AAAA,IAC/C;AACA,mBAAgB,aAAyC;AAAA,EAC3D;AAIA,MAAI,CAAC,sBAAsB,KAAK,GAAG;AACjC,WAAO;AAAA,EACT;AAIA,MAAI,kCAAkC,KAAK,GAAG;AAC5C,WAAO;AAAA,EACT;AACA,QAAM,aAAa,6BAA6B,KAAK;AACrD,MAAI,YAAY;AACd,WAAO,EAAE,MAAM,SAAS,iBAAiB,WAAW,gBAAgB;AAAA,EACtE;AACA,MAAI,MAAe;AACnB,WAAS,QAAQ,GAAG,QAAQ,KAAK,OAAO,OAAO,QAAQ,UAAU,SAAS;AACxE,UAAM,QAAQ;AACd,UAAM,OACJ,MAAM,SAAS,OAAO,MAAM,UAAU,WACjC,MAAM,QACP;AACN,UAAM,SAAS,OAAO,MAAM,UAAU,MAAM,cAAc,MAAM,UAAU,MAAM,UAAU;AAC1F,UAAM,OAAO,OAAO,MAAM,QAAQ,MAAM,QAAQ,EAAE,EAAE,YAAY;AAChE,UAAM,mBAAmB;AAAA,MACvB,MAAM,uBAAuB,MAAM,uBAAuB,MAAM;AAAA,IAClE;AACA,UAAM,mBACJ,YAAY,MAAM,SAAS,aAAa,KACxC,YAAY,MAAM,iBAAiB,aAAa,KAChD,YAAY,MAAM,SAAS,aAAa;AAC1C,UAAM,mBAAmB,qBAAqB,OAAO,OAAO,MAAM,OAAO,gBAAgB;AACzF,UAAM,iBACJ,qBAAqB,QAAQ,CAAC,OAAO,SAAS,gBAAgB,IAC1D,KAAK,MAAM,gBAAgB,IAC3B,OAAO;AACb,UAAM,aAAa,OAAO,SAAS,gBAAgB,IAC/C,mBACA,OAAO,SAAS,gBAAgB,IAC9B,mBACA,OAAO,SAAS,cAAc,IAC5B,KAAK,IAAI,IAAI,iBAAiB,KAAK,IAAI,KAAK,GAAI,IAChD,OAAO;AACf,UAAM,kBACJ,OAAO,SAAS,UAAU,KAAK,aAAa,IAAI,KAAK,KAAK,UAAU,IAAI;AAI1E,QACE,SAAS,wBACT,SAAS,oBACT,SAAS,8BACT;AACA,aAAO,EAAE,MAAM,SAAS,gBAAgB;AAAA,IAC1C;AACA,QAAI,WAAW,OAAO,SAAS,kBAAkB,SAAS,mBAAmB;AAC3E,aAAO,EAAE,MAAM,QAAQ,gBAAgB;AAAA,IACzC;AACA,QAAI,WAAW,KAAK;AAClB,aAAO,EAAE,MAAM,aAAa,gBAAgB;AAAA,IAC9C;AACA,QAAI,WAAW,OAAO,SAAS,yBAAyB,SAAS,qBAAqB;AACpF,aAAO,EAAE,MAAM,cAAc,gBAAgB;AAAA,IAC/C;AACA,UAAM,MAAM;AAAA,EACd;AACA,SAAO;AACT;AAGO,SAAS,oBAAoB,iBAAwC;AAC1E,MAAI,oBAAoB,QAAQ,CAAC,OAAO,SAAS,eAAe,KAAK,mBAAmB,GAAG;AACzF,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,KAAK,KAAK,eAAe;AACvC,MAAI,QAAQ,IAAI;AACd,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,KAAK,MAAM,QAAQ,IAAI;AACrC,QAAM,UAAU,KAAK,MAAO,QAAQ,OAAQ,EAAE;AAC9C,MAAI,QAAQ,GAAG;AACb,WAAO,UAAU,IAAI,YAAY,KAAK,KAAK,OAAO,MAAM,YAAY,KAAK;AAAA,EAC3E;AACA,SAAO,YAAY,OAAO;AAC5B;AAOO,SAAS,8BACd,MACA,QACA,MACoE;AAGpE,QAAM,QAAQ,MAAM,cAChB,8EAA8E,oBAAoB,KAAK,eAAe,CAAC,6GAEvH,+EAA+E,oBAAoB,KAAK,eAAe,CAAC;AAE5H,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,WAAW;AAAA,IACX,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7B;AACF;AAKO,IAAM,kCAAkC,KAAK;","names":["delegation","environmentsEncryptionKeyBytes","chosen","unattemptedAccounts","current","result","configuredStaticUsageLimits","readTurnExecutionPolicyV1","modelFundingForAdmission","resolveCatalogSettings","resolveCatalogSettings","readTurnExecutionPolicyV1","configuredStaticUsageLimits","isDeepStrictEqual","createHash","getConnectionMetadata","sleep","delayMs","parent","getConnectionMetadata","isDeepStrictEqual","settled","obligation","objectAcl","createHash","version","aclRevision","bytes","url","payload","randomUUID","randomUUID","sandboxLifecycleTransitionWaitMs","markWarmLeaseInstanceLost","readLease","establishSandboxSessionFromEnvelope","isProviderSandboxNotFoundError","resolveModalCheckpointProviderBindingForSession","verifySandboxExecReadiness","randomUUID","sandboxLeaseTelemetryKey","parseWorkspaceArchiveObjectRef","parseWorkspaceArchiveObjectRef","sandboxLeaseTelemetryKey","randomUUID","heartbeat","resumeEnvelope","readLease","establishSandboxSessionFromEnvelope","verifySandboxExecReadiness","isProviderSandboxNotFoundError","markWarmLeaseInstanceLost","resolveModalCheckpointProviderBindingForSession","sandboxLifecycleTransitionWaitMs","process","getSessionGoal","mergeToolRefs","createHash","isDeepStrictEqual","getScheduledTaskRunAcceptedExecution","requireSession","allowedFirstPartyMcpToolsForSession","allowedFirstPartyMcpToolsForSession","requireSession","getScheduledTaskRunAcceptedExecution","SandboxLeaseRecoveryBlockedError","SandboxLeaseSupersededError","SandboxLeaseTransitionError","SandboxExecReadinessError","SandboxProviderContinuityUnavailableError","WorkspaceArchiveIntegrityError","randomUUID","sleep","SandboxExecReadinessError","SandboxLeaseSupersededError","SandboxLeaseTransitionError","SandboxLeaseRecoveryBlockedError","WorkspaceArchiveIntegrityError","SandboxProviderContinuityUnavailableError","sleep","retryDelayMs","SandboxLeaseTransitionError","ActiveBackendUnresolvableError","CancelledFailure","createHash","getSandboxSessionEnvelope","createHash","getSandboxSessionEnvelope","codexPlanExcludesModel","connectionModelAllowed","XaiSubscriptionReloginRequired","CancelledFailure","SandboxLeaseTransitionError","ActiveBackendUnresolvableError","XaiSubscriptionReloginRequired","quota"]}