@tokenfactory/acc-runner 0.40.27 → 0.40.29

package/dist/chat-cancel/child-terminator.d.ts

@@ -0,0 +1,37 @@
+/**
+ * CX-3 STOP-CANCEL: SIGTERM → grace → SIGKILL of an engine child, with a
+ * provable-death promise.
+ *
+ * The chat-lane driver already SIGTERMs the engine child when its AbortSignal
+ * fires (engines spawn the child bound to that signal). This terminator is the
+ * belt-and-suspenders escalation the operator's Stop needs: SIGTERM first, and if
+ * the child has not exited within a short grace window, SIGKILL — so an engine
+ * that swallows SIGTERM (a wedged subprocess) is still provably dead well inside
+ * the CX-3 "cancel lands ≤ 2s / engine child provably dead" budget.
+ *
+ * Fully injectable clock/timer seams so the escalation is exercised without real
+ * wall-clock sleeps.
+ */
+import type { ChildHandle, ChildTerminationResult } from "./types.js";
+/** Default grace after SIGTERM before escalating to SIGKILL (ms). */
+export declare const DEFAULT_TERMINATE_GRACE_MS = 1200;
+export interface TerminateChildOptions {
+    /** Grace after SIGTERM before SIGKILL, ms (default DEFAULT_TERMINATE_GRACE_MS). */
+    graceMs?: number;
+    /**
+     * Schedule a callback after `ms`, returning a canceller. Injected in tests so
+     * the grace window advances on a virtual clock. Defaults to unref'd setTimeout.
+     */
+    schedule?: (ms: number, cb: () => void) => () => void;
+}
+/**
+ * Terminate one engine child. Resolves when the child's exit is observed, or when
+ * the SIGKILL escalation has been delivered after the grace window — whichever
+ * comes first. Never rejects: a kill() that throws (already-dead race) resolves as
+ * alreadyDead, because the caller's contract is "the child will not keep running",
+ * not "I personally delivered the fatal signal".
+ */
+export declare function terminateEngineChild(child: ChildHandle, opts?: TerminateChildOptions): Promise<ChildTerminationResult>;
+/** Synchronous best-effort: SIGTERM now, no waiting. For shutdown fan-out. */
+export declare function signalTerminate(child: ChildHandle): boolean;
+//# sourceMappingURL=child-terminator.d.ts.map

package/dist/chat-cancel/child-terminator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-terminator.d.ts","sourceRoot":"","sources":["../../src/chat-cancel/child-terminator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEtE,qEAAqE;AACrE,eAAO,MAAM,0BAA0B,OAAQ,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC,mFAAmF;IACnF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;CACvD;AAQD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,WAAW,EAClB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,sBAAsB,CAAC,CAuDjC;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAO3D"}

package/dist/chat-cancel/child-terminator.js

@@ -0,0 +1,81 @@
+/** Default grace after SIGTERM before escalating to SIGKILL (ms). */
+export const DEFAULT_TERMINATE_GRACE_MS = 1_200;
+function defaultSchedule(ms, cb) {
+    const t = setTimeout(cb, ms);
+    t.unref?.();
+    return () => clearTimeout(t);
+}
+/**
+ * Terminate one engine child. Resolves when the child's exit is observed, or when
+ * the SIGKILL escalation has been delivered after the grace window — whichever
+ * comes first. Never rejects: a kill() that throws (already-dead race) resolves as
+ * alreadyDead, because the caller's contract is "the child will not keep running",
+ * not "I personally delivered the fatal signal".
+ */
+export function terminateEngineChild(child, opts = {}) {
+    const graceMs = Math.max(0, opts.graceMs ?? DEFAULT_TERMINATE_GRACE_MS);
+    const schedule = opts.schedule ?? defaultSchedule;
+    // Already gone: nothing to signal.
+    if (child.pid === undefined) {
+        return Promise.resolve({ killed: true, escalated: false, alreadyDead: true, exited: true });
+    }
+    return new Promise((resolve) => {
+        let settled = false;
+        let escalated = false;
+        let sawExit = false;
+        let cancelGrace = null;
+        const finish = () => {
+            if (settled)
+                return;
+            settled = true;
+            cancelGrace?.();
+            resolve({ killed: true, escalated, alreadyDead: false, exited: sawExit });
+        };
+        // Resolve as soon as the child actually exits (the common, fast path).
+        try {
+            child.once("exit", () => {
+                sawExit = true;
+                finish();
+            });
+        }
+        catch {
+            /* an emitter that refuses a listener still gets the signals below */
+        }
+        // SIGTERM: the graceful ask.
+        try {
+            child.kill("SIGTERM");
+        }
+        catch {
+            // kill() throwing (ESRCH) means the child is already dead → we're done.
+            resolve({ killed: true, escalated: false, alreadyDead: true, exited: true });
+            return;
+        }
+        // Escalate to SIGKILL if it has not exited within the grace window.
+        cancelGrace = schedule(graceMs, () => {
+            if (settled)
+                return;
+            escalated = true;
+            try {
+                child.kill("SIGKILL");
+            }
+            catch {
+                /* already gone between the grace expiry and the SIGKILL — fine */
+            }
+            // Give the exit event a beat; if it never arrives (detached emitter in a
+            // test double) resolve anyway so the caller is never left hanging.
+            schedule(0, finish);
+        });
+    });
+}
+/** Synchronous best-effort: SIGTERM now, no waiting. For shutdown fan-out. */
+export function signalTerminate(child) {
+    if (child.pid === undefined)
+        return false;
+    try {
+        return child.kill("SIGTERM");
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=child-terminator.js.map

package/dist/chat-cancel/child-terminator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-terminator.js","sourceRoot":"","sources":["../../src/chat-cancel/child-terminator.ts"],"names":[],"mappings":"AAgBA,qEAAqE;AACrE,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAYhD,SAAS,eAAe,CAAC,EAAU,EAAE,EAAc;IACjD,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACZ,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAkB,EAClB,OAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,IAAI,0BAA0B,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC;IAElD,mCAAmC;IACnC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,EAAE;QACrD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAwB,IAAI,CAAC;QAE5C,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC;QAEF,uEAAuE;QACvE,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;gBACtB,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,oEAAoE;QACpE,WAAW,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;YACD,yEAAyE;YACzE,mEAAmE;YACnE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,KAAkB;IAChD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/chat-cancel/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * CX-3 STOP-CANCEL: the runner-side chat-cancel barrel.
+ *
+ * When the operator hits Stop, acc.cancel_chat_turn (migration 0278) makes the
+ * turn terminal-CANCELLED server-side and persists the partial reply. These
+ * primitives tear the still-running engine down locally so the child is provably
+ * dead and the slot frees:
+ *   - child-terminator.ts — SIGTERM → grace → SIGKILL with a provable-death promise.
+ *   - cancel-controller.ts — registers in-flight turns; reconciles against the
+ *                            server's cancel truth and aborts + terminates each.
+ *   - cancel-source.ts     — the acc.chat_turns-backed CancelSource.
+ *
+ * Wiring into ChatCompanion.launch (register-per-turn + reconcile loop) is a
+ * follow-up, mirroring the AS-3 resume-controller and FLEET-SERVE watch-chat
+ * primitives that shipped ahead of their watch.ts wiring.
+ */
+export { DEFAULT_TERMINATE_GRACE_MS, signalTerminate, terminateEngineChild, type TerminateChildOptions, } from "./child-terminator.js";
+export { ChatCancelController, type ChatCancelControllerOptions, } from "./cancel-controller.js";
+export { buildSupabaseCancelSource, type CancelQueryClient, } from "./cancel-source.js";
+export type { CancellableTurn, CancelSource, ChatCancelReason, ChildHandle, ChildTerminationResult, TurnCancelResult, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/chat-cancel/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/chat-cancel/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,0BAA0B,EAC1B,eAAe,EACf,oBAAoB,EACpB,KAAK,qBAAqB,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,GACjC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/chat-cancel/index.js

@@ -0,0 +1,20 @@
+/**
+ * CX-3 STOP-CANCEL: the runner-side chat-cancel barrel.
+ *
+ * When the operator hits Stop, acc.cancel_chat_turn (migration 0278) makes the
+ * turn terminal-CANCELLED server-side and persists the partial reply. These
+ * primitives tear the still-running engine down locally so the child is provably
+ * dead and the slot frees:
+ *   - child-terminator.ts — SIGTERM → grace → SIGKILL with a provable-death promise.
+ *   - cancel-controller.ts — registers in-flight turns; reconciles against the
+ *                            server's cancel truth and aborts + terminates each.
+ *   - cancel-source.ts     — the acc.chat_turns-backed CancelSource.
+ *
+ * Wiring into ChatCompanion.launch (register-per-turn + reconcile loop) is a
+ * follow-up, mirroring the AS-3 resume-controller and FLEET-SERVE watch-chat
+ * primitives that shipped ahead of their watch.ts wiring.
+ */
+export { DEFAULT_TERMINATE_GRACE_MS, signalTerminate, terminateEngineChild, } from "./child-terminator.js";
+export { ChatCancelController, } from "./cancel-controller.js";
+export { buildSupabaseCancelSource, } from "./cancel-source.js";
+//# sourceMappingURL=index.js.map

package/dist/chat-cancel/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/chat-cancel/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,0BAA0B,EAC1B,eAAe,EACf,oBAAoB,GAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,GAErB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,GAE1B,MAAM,oBAAoB,CAAC"}

package/dist/chat-cancel/types.d.ts

@@ -0,0 +1,69 @@
+/**
+ * CX-3 STOP-CANCEL (runner side): shared wire shapes for the chat-cancel
+ * primitives. Kept dependency-free (no execa / supabase imports) so the whole
+ * subsystem is exercised deterministically with plain fakes.
+ */
+/** Why a turn is being torn down locally. Extensible; additive values are ignored by older peers. */
+export type ChatCancelReason = "operator_cancelled" | "runner_shutdown";
+/**
+ * The minimal child-process surface the terminator needs. `ExecaChildProcess`
+ * (what the engines spawn) is structurally assignable to this, so a real engine
+ * child and a test double share one code path.
+ */
+export interface ChildHandle {
+    /** OS pid, or undefined once the child has been reaped. */
+    readonly pid?: number | undefined;
+    /** True once a kill signal has been delivered (Node sets this on kill()). */
+    readonly killed: boolean;
+    /** Deliver a signal. Returns false when the child is already gone. */
+    kill(signal?: NodeJS.Signals | number): boolean;
+    /** Subscribe once to a lifecycle event (exit/close ⇒ the child is dead). */
+    once(event: "exit" | "close", listener: (...args: unknown[]) => void): unknown;
+}
+/**
+ * A turn currently in flight on this runner that CAN be cancelled: aborting the
+ * controller stops the drive loop (and, when wired to the engine's spawn, SIGTERMs
+ * the child); `child` is the optional direct handle the terminator escalates on so
+ * the engine process is provably dead even if the abort→SIGTERM plumbing lags.
+ */
+export interface CancellableTurn {
+    turnId: string;
+    conversationId: string;
+    /** Abort the drive loop for this turn (forwarded to engine.streamTurn's signal). */
+    abort: (reason: ChatCancelReason) => void;
+    /** Optional direct engine-child handle for provable termination. */
+    child?: ChildHandle | undefined;
+}
+/**
+ * The server-side source of cancel truth. Given the turn ids currently in flight
+ * on this runner, return the subset the operator has cancelled server-side
+ * (acc.chat_turns.status = 'cancelled', set by acc.cancel_chat_turn / migration
+ * 0278). The controller reconciles against this so a browser Stop reliably tears
+ * the local turn down within one poll cycle — no direct browser→runner channel
+ * required.
+ */
+export interface CancelSource {
+    listCancelled(turnIds: readonly string[]): Promise<string[]>;
+}
+/** The outcome of terminating one engine child. */
+export interface ChildTerminationResult {
+    /** True when a kill signal was delivered (or the child was already dead). */
+    killed: boolean;
+    /** True when SIGTERM did not land within the grace window and SIGKILL was sent. */
+    escalated: boolean;
+    /** True when the child was already gone before we tried (no pid / already killed). */
+    alreadyDead: boolean;
+    /** True when we observed the child's exit event before resolving. */
+    exited: boolean;
+}
+/** The outcome of cancelling one in-flight turn locally. */
+export interface TurnCancelResult {
+    turnId: string;
+    /** True when the turn was registered and its abort was fired. */
+    aborted: boolean;
+    /** Present when the turn had a child handle we terminated. */
+    child?: ChildTerminationResult;
+    /** True when the turn was not registered here (nothing to cancel). */
+    notFound: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/chat-cancel/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/chat-cancel/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,qGAAqG;AACrG,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAExE;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,sEAAsE;IACtE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAChD,4EAA4E;IAC5E,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,OAAO,CAAC;CAChF;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,KAAK,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC1C,oEAAoE;IACpE,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC9D;AAED,mDAAmD;AACnD,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,MAAM,EAAE,OAAO,CAAC;IAChB,mFAAmF;IACnF,SAAS,EAAE,OAAO,CAAC;IACnB,sFAAsF;IACtF,WAAW,EAAE,OAAO,CAAC;IACrB,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,4DAA4D;AAC5D,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;IACjB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,EAAE,OAAO,CAAC;CACnB"}

package/dist/chat-cancel/types.js

@@ -0,0 +1,7 @@
+/**
+ * CX-3 STOP-CANCEL (runner side): shared wire shapes for the chat-cancel
+ * primitives. Kept dependency-free (no execa / supabase imports) so the whole
+ * subsystem is exercised deterministically with plain fakes.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/chat-cancel/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/chat-cancel/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/claim-deadman/deadman.d.ts

@@ -0,0 +1,152 @@
+/**
+ * CLAIM-DEADMAN: dead-man switch for a wedged claim channel.
+ *
+ * The incident (2026-07-22 ~18:24 IST): a dispatcher sent 12+ `task.dispatched`
+ * events to a runner whose HTTP heartbeat was current (hb_age 0min) but whose
+ * Realtime *claim subscription* was dead. The 90s claim watchdog —
+ * which resubscribes the channel when a task sits assigned-but-unclaimed — had
+ * itself stopped firing, so the board sat 12 queued / 0 running with two online
+ * runners and needed a manual `pkill acc-runner watch`.
+ *
+ * HTTP heartbeat and the WS claim channel fail INDEPENDENTLY. The heartbeat says
+ * "I'm alive"; the claim path says nothing. This state machine closes that seam
+ * with a stronger, later escalation than the 90s watchdog resubscribe:
+ *
+ *   1. track `pending-dispatch` (work the server is offering this runner) vs
+ *      the last instant a claim was actually processed;
+ *   2. when work is pending AND no claim has landed for `wedgeThresholdMs`
+ *      (default 120s, > the 90s watchdog so the cheap resubscribe gets first
+ *      crack), TEAR DOWN + FULLY REBUILD the Realtime client (not just a
+ *      resubscribe) — up to `maxRebuilds` times, paced by `rebuildGraceMs`;
+ *   3. if still wedged after the rebuild budget, fall back to DEGRADED
+ *      DB-poll claiming (the caller polls the claim path directly every ~15s);
+ *   4. recovery is declared when the offered backlog drains to zero after a
+ *      wedge episode — i.e. the board is unblocked again, whether the WS came
+ *      back or the DB-poll fallback carried the load.
+ *
+ * This class is PURE and clock-injectable (`now`) so the thresholds are proven
+ * with a fake clock in unit tests; the watch loop owns the side effects (client
+ * rebuild, fallback timer, audit events). It never throws.
+ */
+/** Default: no claim processed for this long, while work is pending, = wedged. */
+export declare const DEFAULT_WEDGE_THRESHOLD_MS = 120000;
+/**
+ * Default: minimum gap between escalation steps, so a rebuild has time to take
+ * effect before the next step is considered. Aligns with the fallback poll
+ * cadence. With the defaults the ladder is: wedge@120s, rebuild#1@120s,
+ * rebuild#2@135s, fallback@150s — comfortably inside the 3-min recovery target.
+ */
+export declare const DEFAULT_REBUILD_GRACE_MS = 15000;
+/** Default: full Realtime-client rebuilds before falling back to DB-poll claiming. */
+export declare const DEFAULT_MAX_REBUILDS = 2;
+/** Default: DB-poll fallback cadence (ms) — the caller's degraded claim loop. */
+export declare const DEFAULT_FALLBACK_POLL_MS = 15000;
+/** Default: how often the watch loop evaluates the deadman. */
+export declare const DEFAULT_DEADMAN_CHECK_MS = 30000;
+export type DeadmanActionKind = "none" | "rebuild" | "fallback";
+export interface DeadmanDecision {
+    /**
+     * What the watch loop should do this tick:
+     *  - "none":     healthy, or wedged-but-waiting-out-the-rebuild-grace.
+     *  - "rebuild":  tear down + fully rebuild the Realtime client (attempt N).
+     *  - "fallback": the rebuild budget is spent — run/keep the degraded DB-poll
+     *                claim loop until the backlog drains.
+     */
+    action: DeadmanActionKind;
+    /** 1-based rebuild attempt when action === "rebuild". */
+    rebuildAttempt?: number;
+    /**
+     * True on the single tick that first detects the wedge this episode — the
+     * caller emits `runner.claim_channel_wedged` exactly once per episode.
+     */
+    wedged: boolean;
+    /** Snapshot for the audit payload. */
+    pendingDispatch: number;
+    /** ms since the last processed claim (staleness of the claim path). */
+    msSinceClaim: number;
+}
+export interface DispatchSignal {
+    /**
+     * How many tasks the server is currently offering this runner (assigned +
+     * queued, i.e. dispatched-but-unclaimed). The "server already knows" input:
+     * delivered via the heartbeat response or read from the assigned-queued RPC —
+     * either way an HTTP path that survives a dead WS.
+     */
+    pendingDispatch: number;
+    /**
+     * The dispatcher marked this runner SUSPECT after N consecutive undelivered
+     * dispatch offers. A redundant confirmation that work is genuinely being
+     * offered even if `pendingDispatch` momentarily reads 0.
+     */
+    suspect?: boolean;
+}
+export interface ClaimDeadmanOptions {
+    wedgeThresholdMs?: number;
+    rebuildGraceMs?: number;
+    maxRebuilds?: number;
+    /** Injected clock. Defaults to Date.now. */
+    now?: () => number;
+}
+export declare class ClaimDeadman {
+    private readonly wedgeThresholdMs;
+    private readonly rebuildGraceMs;
+    private readonly maxRebuilds;
+    private readonly now;
+    /** Current pending-dispatch count (offered work), from the last signal. */
+    private pending;
+    private suspect;
+    /** Last instant a claim was actually processed (any path). */
+    private lastClaimMs;
+    /** Full-client rebuilds performed this wedge episode. */
+    private rebuilds;
+    /** Latched: the DB-poll fallback is engaged for this episode. */
+    private fallbackActive;
+    /** Whether the `wedged` event has already been emitted this episode. */
+    private wedgedEmitted;
+    /** Last escalation instant, for pacing steps by rebuildGraceMs. */
+    private lastEscalationMs;
+    constructor(opts?: ClaimDeadmanOptions);
+    /**
+     * Feed the pending-dispatch signal (from the heartbeat response or the
+     * assigned-queued read). Returns `{ recovered: true }` on the transition where
+     * an active wedge episode's offered backlog has drained to zero — the caller
+     * then emits `runner.claim_channel_recovered` and stops the fallback loop.
+     */
+    observeDispatchSignal(signal: DispatchSignal): {
+        recovered: boolean;
+    };
+    /**
+     * A claim was processed (a task enqueued/claimed via ANY path — realtime,
+     * poll, scan, watchdog, or the DB-poll fallback). Resets the staleness clock
+     * so a runner that IS claiming — even slowly, even via the fallback — is never
+     * treated as wedged. Recovery itself is declared by the backlog draining
+     * (observeDispatchSignal), not by an individual claim, so a fallback claim
+     * keeps the runner functional without prematurely clearing the episode.
+     */
+    observeClaimProcessed(): void;
+    /**
+     * A heartbeat failed — the network/auth path is down, which is a DIFFERENT
+     * failure (the claim RPC would fail too). Not a wedge: clear the staleness
+     * clock and drop the pending signal so an outage never trips the deadman the
+     * instant heartbeats recover. Mirrors the claim watchdog's heartbeat-failure
+     * guard. Does not clear an in-flight episode's escalation state — a recovery
+     * is only ever declared by the backlog draining.
+     */
+    observeHeartbeatFailure(): void;
+    /** Evaluate the escalation ladder for this tick. Never throws. */
+    tick(): DeadmanDecision;
+    /** True while a wedge episode is in progress (escalated or already degraded). */
+    isFallbackActive(): boolean;
+    /** Introspection for tests / telemetry. */
+    snapshot(): {
+        pending: number;
+        suspect: boolean;
+        rebuilds: number;
+        fallbackActive: boolean;
+        wedgedEmitted: boolean;
+    };
+    private inEpisode;
+    private reset;
+    private decision;
+}
+//# sourceMappingURL=deadman.d.ts.map

package/dist/claim-deadman/deadman.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deadman.d.ts","sourceRoot":"","sources":["../../src/claim-deadman/deadman.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,SAAU,CAAC;AAClD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAC/C,sFAAsF;AACtF,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,iFAAiF;AACjF,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAC/C,+DAA+D;AAC/D,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,MAAM,EAAE,iBAAiB,CAAC;IAC1B,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,sCAAsC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,2EAA2E;IAC3E,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,OAAO,CAAS;IACxB,8DAA8D;IAC9D,OAAO,CAAC,WAAW,CAAS;IAC5B,yDAAyD;IACzD,OAAO,CAAC,QAAQ,CAAK;IACrB,iEAAiE;IACjE,OAAO,CAAC,cAAc,CAAS;IAC/B,wEAAwE;IACxE,OAAO,CAAC,aAAa,CAAS;IAC9B,mEAAmE;IACnE,OAAO,CAAC,gBAAgB,CAAuB;gBAEnC,IAAI,GAAE,mBAAwB;IAQ1C;;;;;OAKG;IACH,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE;IAWrE;;;;;;;OAOG;IACH,qBAAqB,IAAI,IAAI;IAI7B;;;;;;;OAOG;IACH,uBAAuB,IAAI,IAAI;IAM/B,kEAAkE;IAClE,IAAI,IAAI,eAAe;IAwCvB,iFAAiF;IACjF,gBAAgB,IAAI,OAAO;IAI3B,2CAA2C;IAC3C,QAAQ,IAAI;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,OAAO,CAAC;QACxB,aAAa,EAAE,OAAO,CAAC;KACxB;IAUD,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,QAAQ;CAOjB"}

package/dist/claim-deadman/deadman.js

@@ -0,0 +1,176 @@
+/**
+ * CLAIM-DEADMAN: dead-man switch for a wedged claim channel.
+ *
+ * The incident (2026-07-22 ~18:24 IST): a dispatcher sent 12+ `task.dispatched`
+ * events to a runner whose HTTP heartbeat was current (hb_age 0min) but whose
+ * Realtime *claim subscription* was dead. The 90s claim watchdog —
+ * which resubscribes the channel when a task sits assigned-but-unclaimed — had
+ * itself stopped firing, so the board sat 12 queued / 0 running with two online
+ * runners and needed a manual `pkill acc-runner watch`.
+ *
+ * HTTP heartbeat and the WS claim channel fail INDEPENDENTLY. The heartbeat says
+ * "I'm alive"; the claim path says nothing. This state machine closes that seam
+ * with a stronger, later escalation than the 90s watchdog resubscribe:
+ *
+ *   1. track `pending-dispatch` (work the server is offering this runner) vs
+ *      the last instant a claim was actually processed;
+ *   2. when work is pending AND no claim has landed for `wedgeThresholdMs`
+ *      (default 120s, > the 90s watchdog so the cheap resubscribe gets first
+ *      crack), TEAR DOWN + FULLY REBUILD the Realtime client (not just a
+ *      resubscribe) — up to `maxRebuilds` times, paced by `rebuildGraceMs`;
+ *   3. if still wedged after the rebuild budget, fall back to DEGRADED
+ *      DB-poll claiming (the caller polls the claim path directly every ~15s);
+ *   4. recovery is declared when the offered backlog drains to zero after a
+ *      wedge episode — i.e. the board is unblocked again, whether the WS came
+ *      back or the DB-poll fallback carried the load.
+ *
+ * This class is PURE and clock-injectable (`now`) so the thresholds are proven
+ * with a fake clock in unit tests; the watch loop owns the side effects (client
+ * rebuild, fallback timer, audit events). It never throws.
+ */
+/** Default: no claim processed for this long, while work is pending, = wedged. */
+export const DEFAULT_WEDGE_THRESHOLD_MS = 120_000;
+/**
+ * Default: minimum gap between escalation steps, so a rebuild has time to take
+ * effect before the next step is considered. Aligns with the fallback poll
+ * cadence. With the defaults the ladder is: wedge@120s, rebuild#1@120s,
+ * rebuild#2@135s, fallback@150s — comfortably inside the 3-min recovery target.
+ */
+export const DEFAULT_REBUILD_GRACE_MS = 15_000;
+/** Default: full Realtime-client rebuilds before falling back to DB-poll claiming. */
+export const DEFAULT_MAX_REBUILDS = 2;
+/** Default: DB-poll fallback cadence (ms) — the caller's degraded claim loop. */
+export const DEFAULT_FALLBACK_POLL_MS = 15_000;
+/** Default: how often the watch loop evaluates the deadman. */
+export const DEFAULT_DEADMAN_CHECK_MS = 30_000;
+export class ClaimDeadman {
+    wedgeThresholdMs;
+    rebuildGraceMs;
+    maxRebuilds;
+    now;
+    /** Current pending-dispatch count (offered work), from the last signal. */
+    pending = 0;
+    suspect = false;
+    /** Last instant a claim was actually processed (any path). */
+    lastClaimMs;
+    /** Full-client rebuilds performed this wedge episode. */
+    rebuilds = 0;
+    /** Latched: the DB-poll fallback is engaged for this episode. */
+    fallbackActive = false;
+    /** Whether the `wedged` event has already been emitted this episode. */
+    wedgedEmitted = false;
+    /** Last escalation instant, for pacing steps by rebuildGraceMs. */
+    lastEscalationMs = null;
+    constructor(opts = {}) {
+        this.wedgeThresholdMs = opts.wedgeThresholdMs ?? DEFAULT_WEDGE_THRESHOLD_MS;
+        this.rebuildGraceMs = opts.rebuildGraceMs ?? DEFAULT_REBUILD_GRACE_MS;
+        this.maxRebuilds = opts.maxRebuilds ?? DEFAULT_MAX_REBUILDS;
+        this.now = opts.now ?? Date.now;
+        this.lastClaimMs = this.now();
+    }
+    /**
+     * Feed the pending-dispatch signal (from the heartbeat response or the
+     * assigned-queued read). Returns `{ recovered: true }` on the transition where
+     * an active wedge episode's offered backlog has drained to zero — the caller
+     * then emits `runner.claim_channel_recovered` and stops the fallback loop.
+     */
+    observeDispatchSignal(signal) {
+        const wasWedged = this.inEpisode();
+        this.pending = Math.max(0, Math.floor(signal.pendingDispatch || 0));
+        this.suspect = Boolean(signal.suspect);
+        if (wasWedged && this.pending === 0 && !this.suspect) {
+            this.reset();
+            return { recovered: true };
+        }
+        return { recovered: false };
+    }
+    /**
+     * A claim was processed (a task enqueued/claimed via ANY path — realtime,
+     * poll, scan, watchdog, or the DB-poll fallback). Resets the staleness clock
+     * so a runner that IS claiming — even slowly, even via the fallback — is never
+     * treated as wedged. Recovery itself is declared by the backlog draining
+     * (observeDispatchSignal), not by an individual claim, so a fallback claim
+     * keeps the runner functional without prematurely clearing the episode.
+     */
+    observeClaimProcessed() {
+        this.lastClaimMs = this.now();
+    }
+    /**
+     * A heartbeat failed — the network/auth path is down, which is a DIFFERENT
+     * failure (the claim RPC would fail too). Not a wedge: clear the staleness
+     * clock and drop the pending signal so an outage never trips the deadman the
+     * instant heartbeats recover. Mirrors the claim watchdog's heartbeat-failure
+     * guard. Does not clear an in-flight episode's escalation state — a recovery
+     * is only ever declared by the backlog draining.
+     */
+    observeHeartbeatFailure() {
+        this.lastClaimMs = this.now();
+        this.pending = 0;
+        this.suspect = false;
+    }
+    /** Evaluate the escalation ladder for this tick. Never throws. */
+    tick() {
+        const now = this.now();
+        const msSinceClaim = now - this.lastClaimMs;
+        const offered = this.pending > 0 || this.suspect;
+        const stale = msSinceClaim >= this.wedgeThresholdMs;
+        // Nothing offered and not already degraded → healthy.
+        if (!offered && !this.fallbackActive) {
+            return this.decision("none", false, msSinceClaim);
+        }
+        // Already degraded → keep the DB-poll fallback running until the backlog
+        // drains (observeDispatchSignal declares recovery + resets).
+        if (this.fallbackActive) {
+            return this.decision("fallback", false, msSinceClaim);
+        }
+        // Offered but a claim landed recently → the claim path is working, not wedged.
+        if (!stale) {
+            return this.decision("none", false, msSinceClaim);
+        }
+        // Wedged. Pace escalation steps so a rebuild gets time to take effect.
+        if (this.lastEscalationMs !== null &&
+            now - this.lastEscalationMs < this.rebuildGraceMs) {
+            return this.decision("none", false, msSinceClaim);
+        }
+        const wedged = !this.wedgedEmitted;
+        this.wedgedEmitted = true;
+        this.lastEscalationMs = now;
+        if (this.rebuilds < this.maxRebuilds) {
+            this.rebuilds += 1;
+            const d = this.decision("rebuild", wedged, msSinceClaim);
+            d.rebuildAttempt = this.rebuilds;
+            return d;
+        }
+        // Rebuild budget spent — degrade to DB-poll claiming.
+        this.fallbackActive = true;
+        return this.decision("fallback", wedged, msSinceClaim);
+    }
+    /** True while a wedge episode is in progress (escalated or already degraded). */
+    isFallbackActive() {
+        return this.fallbackActive;
+    }
+    /** Introspection for tests / telemetry. */
+    snapshot() {
+        return {
+            pending: this.pending,
+            suspect: this.suspect,
+            rebuilds: this.rebuilds,
+            fallbackActive: this.fallbackActive,
+            wedgedEmitted: this.wedgedEmitted,
+        };
+    }
+    inEpisode() {
+        return this.wedgedEmitted || this.rebuilds > 0 || this.fallbackActive;
+    }
+    reset() {
+        this.rebuilds = 0;
+        this.fallbackActive = false;
+        this.wedgedEmitted = false;
+        this.lastEscalationMs = null;
+        this.lastClaimMs = this.now();
+    }
+    decision(action, wedged, msSinceClaim) {
+        return { action, wedged, pendingDispatch: this.pending, msSinceClaim };
+    }
+}
+//# sourceMappingURL=deadman.js.map

package/dist/claim-deadman/deadman.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deadman.js","sourceRoot":"","sources":["../../src/claim-deadman/deadman.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAClD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,sFAAsF;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAkD/C,MAAM,OAAO,YAAY;IACN,gBAAgB,CAAS;IACzB,cAAc,CAAS;IACvB,WAAW,CAAS;IACpB,GAAG,CAAe;IAEnC,2EAA2E;IACnE,OAAO,GAAG,CAAC,CAAC;IACZ,OAAO,GAAG,KAAK,CAAC;IACxB,8DAA8D;IACtD,WAAW,CAAS;IAC5B,yDAAyD;IACjD,QAAQ,GAAG,CAAC,CAAC;IACrB,iEAAiE;IACzD,cAAc,GAAG,KAAK,CAAC;IAC/B,wEAAwE;IAChE,aAAa,GAAG,KAAK,CAAC;IAC9B,mEAAmE;IAC3D,gBAAgB,GAAkB,IAAI,CAAC;IAE/C,YAAY,OAA4B,EAAE;QACxC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC5E,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;QAC5D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,MAAsB;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,qBAAqB;QACnB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACH,uBAAuB;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,kEAAkE;IAClE,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC;QACjD,MAAM,KAAK,GAAG,YAAY,IAAI,IAAI,CAAC,gBAAgB,CAAC;QAEpD,sDAAsD;QACtD,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QACD,yEAAyE;QACzE,6DAA6D;QAC7D,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACxD,CAAC;QACD,+EAA+E;QAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QACD,uEAAuE;QACvE,IACE,IAAI,CAAC,gBAAgB,KAAK,IAAI;YAC9B,GAAG,GAAG,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,cAAc,EACjD,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC;QAC5B,IAAI,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YACzD,CAAC,CAAC,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC;YACjC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,sDAAsD;QACtD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACzD,CAAC;IAED,iFAAiF;IACjF,gBAAgB;QACd,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,2CAA2C;IAC3C,QAAQ;QAON,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC;IACxE,CAAC;IAEO,KAAK;QACX,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IAEO,QAAQ,CACd,MAAyB,EACzB,MAAe,EACf,YAAoB;QAEpB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;IACzE,CAAC;CACF"}