negotium 0.2.2 → 0.2.4

package/dist/browser-runtime.js.map

@@ -1,32 +1,33 @@
 {
   "version": 3,
-  "sources": ["../../../packages/core/src/platform/playwright/browser-processes.ts", "../../../packages/core/src/platform/config.ts", "../../../packages/core/src/platform/config-helpers.ts", "../../../packages/core/src/platform/logger.ts", "../../../packages/core/src/types.ts", "../../../packages/core/src/platform/playwright/manager-utils.ts", "../../../packages/core/src/storage/storage-host.ts", "../../../packages/core/src/storage/sqlite.ts", "../../../packages/core/src/storage/forum-db.ts", "../../../packages/core/src/storage/runtime-leases.ts", "../../../packages/core/src/storage/runtime-topic-state.ts", "../../../packages/core/src/storage/runtime-process-leases.ts", "../../../packages/core/src/platform/playwright/manager.ts", "../../../packages/core/src/platform/delay.ts", "../../../packages/core/src/platform/playwright/headed-launch.ts", "../../../packages/core/src/platform/playwright/transport-probe.ts", "../../../packages/core/src/platform/playwright/capability.ts", "../../../packages/core/src/platform/playwright/vault-broker.ts", "../../../packages/core/src/storage/vault.ts", "../../../packages/core/src/storage/vault-crypto-core.ts", "../../../packages/core/src/storage/vault-crypto.ts", "../../../packages/core/src/security/sanitize.ts", "../../../packages/core/src/storage/browser-profiles.ts"],
+  "sources": ["../../../packages/core/src/platform/playwright/browser-processes.ts", "../../../packages/core/src/platform/config.ts", "../../../packages/core/src/platform/config-helpers.ts", "../../../packages/core/src/platform/logger.ts", "../../../packages/core/src/types.ts", "../../../packages/core/src/platform/playwright/manager-utils.ts", "../../../packages/core/src/storage/storage-host.ts", "../../../packages/core/src/storage/sqlite.ts", "../../../packages/core/src/storage/forum-db.ts", "../../../packages/core/src/storage/runtime-leases.ts", "../../../packages/core/src/storage/runtime-topic-state.ts", "../../../packages/core/src/storage/runtime-process-leases.ts", "../../../packages/core/src/platform/playwright/manager.ts", "../../../packages/core/src/platform/delay.ts", "../../../packages/core/src/platform/playwright/headed-launch.ts", "../../../packages/core/src/platform/playwright/transport-probe.ts", "../../../packages/core/src/platform/playwright/capability.ts", "../../../packages/core/src/platform/playwright/vault-broker.ts", "../../../packages/core/src/storage/vault.ts", "../../../packages/core/src/storage/vault-crypto-core.ts", "../../../packages/core/src/storage/vault-crypto.ts", "../../../packages/core/src/security/sanitize.ts", "../../../packages/core/src/storage/browser-profiles.ts", "../../../packages/core/src/platform/playwright/profile-management.ts"],
   "sourcesContent": [
     "import { execFileSync } from \"node:child_process\";\nimport { readdirSync, unlinkSync } from \"node:fs\";\nimport { createServer } from \"node:net\";\nimport { resolve, sep } from \"node:path\";\nimport { BROWSER_PROFILES_DIR } from \"#platform/config\";\nimport { logger } from \"#platform/logger\";\nimport { extractUserDataDirArg } from \"#platform/playwright/manager-utils\";\nimport { getRuntimeProcessLease } from \"#storage/runtime-process-leases\";\n\nexport function isPortInUse(port: number): Promise<boolean> {\n  return new Promise((resolveProbe) => {\n    const server = createServer();\n    let settled = false;\n    const finish = (occupied: boolean) => {\n      if (settled) return;\n      settled = true;\n      server.removeAllListeners();\n      resolveProbe(occupied);\n    };\n\n    server.unref();\n    server.once(\"error\", () => finish(true));\n    server.listen({ host: \"127.0.0.1\", port, exclusive: true }, () => {\n      server.close((error) => finish(error !== undefined));\n    });\n  });\n}\n\nexport async function reserveAvailableLoopbackPort(\n  minPort: number,\n  maxPort: number,\n  reservedPorts: Set<number>,\n  probeOccupied: (port: number) => Promise<boolean> = isPortInUse,\n): Promise<number | null> {\n  for (let port = minPort; port <= maxPort; port++) {\n    if (reservedPorts.has(port)) continue;\n    reservedPorts.add(port);\n    if (await probeOccupied(port)) {\n      reservedPorts.delete(port);\n      continue;\n    }\n    return port;\n  }\n  return null;\n}\n\n/**\n * Kill all leftover browser-MCP processes from previous bot runs. The gateway\n * owns a Browser.rs child, so match both layers plus the legacy server.\n */\nexport function cleanupZombiePlaywright(): void {\n  try {\n    const pids = execFileSync(\"pgrep\", [\"-f\", \"browser-rs-http\\\\.mjs|browser-rs|playwright-mcp\"], {\n      stdio: \"pipe\",\n    })\n      .toString()\n      .trim();\n    if (pids) {\n      logger.info({ pids: pids.replace(/\\n/g, \", \") }, \"Cleaning up zombie browser-MCP processes\");\n      for (const pid of pids.split(\"\\n\")) {\n        const pidNum = parseInt(pid.trim(), 10);\n        if (!Number.isNaN(pidNum)) {\n          try {\n            const cmdline = execFileSync(\"ps\", [\"-p\", String(pidNum), \"-o\", \"command=\"], {\n              stdio: \"pipe\",\n            })\n              .toString()\n              .trim();\n            const userDataDir = extractUserDataDirArg(cmdline);\n            const resolvedProfilesDir = resolve(BROWSER_PROFILES_DIR);\n            const resolvedUserDataDir = userDataDir ? resolve(userDataDir) : undefined;\n            const isManagedProfile =\n              resolvedUserDataDir === resolvedProfilesDir ||\n              resolvedUserDataDir?.startsWith(`${resolvedProfilesDir}${sep}`);\n            if (!isManagedProfile) {\n              logger.warn(\n                { pid: pidNum, userDataDir },\n                \"Skipping browser-MCP cleanup outside Otium browser profile dir\",\n              );\n              continue;\n            }\n            // Reap Chrome children before the node parent.\n            killProcessTreeChildren(pidNum);\n            process.kill(pidNum, \"SIGKILL\");\n          } catch (e) {\n            logger.warn({ err: e, pid: pidNum }, \"Failed to kill leftover browser-MCP process\");\n          }\n        }\n      }\n    }\n  } catch {\n    // No processes found — good\n  }\n}\n\n/**\n * Kill any browser process (the node MCP or the Chrome it launched) still\n * holding a specific user-data-dir. Used on the crash-exit path: once the MCP\n * parent dies on its own, its Chrome subtree reparents to init, so `pgrep -P`\n * can no longer find it — but the Chrome browser process still carries\n * `--user-data-dir <path>` in argv, so we match on the path instead. Bounded to\n * Otium's profile dir so unrelated Chrome is never touched.\n */\nexport function killBrowserProcsForUserDataDir(userDataDir: string): void {\n  const target = resolve(userDataDir);\n  const profileRoot = resolve(BROWSER_PROFILES_DIR);\n  if (target !== profileRoot && !target.startsWith(`${profileRoot}${sep}`)) return;\n  let pids: string;\n  try {\n    pids = execFileSync(\"pgrep\", [\"-f\", \"--\", userDataDir], { stdio: \"pipe\" }).toString().trim();\n  } catch {\n    return; // no matches\n  }\n  if (!pids) return;\n  for (const pid of pids.split(\"\\n\")) {\n    const pidNum = parseInt(pid.trim(), 10);\n    if (Number.isNaN(pidNum) || pidNum === process.pid) continue;\n    try {\n      const cmdline = execFileSync(\"ps\", [\"-p\", String(pidNum), \"-o\", \"command=\"], {\n        stdio: \"pipe\",\n      })\n        .toString()\n        .trim();\n      const argDir = extractUserDataDirArg(cmdline);\n      // Only the process that actually owns this exact profile dir; renderer\n      // grandchildren carry no --user-data-dir and are reaped via the tree walk.\n      if (!argDir || resolve(argDir) !== target) continue;\n      killProcessTreeChildren(pidNum);\n      process.kill(pidNum, \"SIGKILL\");\n      logger.info({ pid: pidNum, userDataDir }, \"Reaped orphaned browser process by user-data-dir\");\n    } catch (e) {\n      logger.debug({ err: e, pid: pidNum, userDataDir }, \"Failed to reap browser proc by dir\");\n    }\n  }\n}\n\n/**\n * Pure orphan selection: given browser processes tagged with their\n * `--user-data-dir`, the set of dirs owned by live tracked instances, and the\n * profile root, return the pids to reap — those under our profile dir whose\n * owning instance is no longer tracked (a dead MCP's leftover Chrome, or a\n * stale MCP from a previous run). Exported for unit tests.\n */\nexport function selectOrphanBrowserPids(\n  procs: Array<{ pid: number; userDataDir: string | null }>,\n  liveUserDataDirs: Iterable<string>,\n  profileRoot: string,\n  selfPid: number,\n): number[] {\n  const root = resolve(profileRoot);\n  const live = new Set([...liveUserDataDirs].map((d) => resolve(d)));\n  const out: number[] = [];\n  for (const { pid, userDataDir } of procs) {\n    if (pid === selfPid || !userDataDir) continue;\n    const dir = resolve(userDataDir);\n    if (dir !== root && !dir.startsWith(`${root}${sep}`)) continue;\n    if (live.has(dir)) continue; // belongs to a tracked instance\n    out.push(pid);\n  }\n  return out;\n}\n\n/**\n * The browser process table is shared across every Negotium process, while the\n * in-memory `instances` map is not. Only the current node-daemon lease owner may\n * compare those two views and reap untracked browsers. Otherwise an old daemon\n * that survived shutdown can mistake the replacement daemon's browser for an\n * orphan and kill it.\n */\nexport function isBrowserJanitorOwner(leaseOwnerPid: number | null, selfPid: number): boolean {\n  return leaseOwnerPid === selfPid;\n}\n\n/**\n * Periodic sweep that reaps orphaned browser processes the tracked-instance map\n * has lost sight of. The 30-min idle eviction only touches instances still in\n * the map; when an MCP dies on its own its Chrome escapes the map entirely, so\n * without this nothing reclaims it until the next process restart. Cascading\n * orphans under memory pressure are exactly this failure mode.\n */\nexport function reapOrphanBrowsers(liveUserDataDirs: Iterable<string>): void {\n  // Use an infinite stale window here intentionally: even if the active daemon\n  // briefly misses a heartbeat, the recorded owner remains the only process\n  // allowed to run this destructive cross-process sweep.\n  const daemonLease = getRuntimeProcessLease(\"node-daemon\", Date.now(), Number.POSITIVE_INFINITY);\n  if (!isBrowserJanitorOwner(daemonLease?.pid ?? null, process.pid)) return;\n\n  const profileRoot = resolve(BROWSER_PROFILES_DIR);\n  let pids: string;\n  try {\n    pids = execFileSync(\"pgrep\", [\"-f\", \"--\", profileRoot], { stdio: \"pipe\" }).toString().trim();\n  } catch {\n    return; // no browser processes at all\n  }\n  if (!pids) return;\n\n  const procs: Array<{ pid: number; userDataDir: string | null }> = [];\n  for (const pid of pids.split(\"\\n\")) {\n    const pidNum = parseInt(pid.trim(), 10);\n    if (Number.isNaN(pidNum)) continue;\n    try {\n      const cmdline = execFileSync(\"ps\", [\"-p\", String(pidNum), \"-o\", \"command=\"], {\n        stdio: \"pipe\",\n      })\n        .toString()\n        .trim();\n      procs.push({ pid: pidNum, userDataDir: extractUserDataDirArg(cmdline) });\n    } catch {\n      // Process vanished between pgrep and ps — nothing to reap.\n    }\n  }\n\n  const orphanPids = selectOrphanBrowserPids(procs, liveUserDataDirs, profileRoot, process.pid);\n  for (const pid of orphanPids) {\n    try {\n      killProcessTreeChildren(pid);\n      process.kill(pid, \"SIGKILL\");\n      logger.info({ pid }, \"Reaped orphaned browser process (janitor)\");\n    } catch (e) {\n      logger.debug({ err: e, pid }, \"Janitor failed to reap orphaned browser process\");\n    }\n  }\n}\n\n/**\n * Health check — can we reach the SSE endpoint?\n */\nexport async function isHealthy(port: number): Promise<boolean> {\n  for (const path of [\"/health\", \"/sse?owner=__negotium_health__\"]) {\n    try {\n      const res = await fetch(`http://127.0.0.1:${port}${path}`, {\n        signal: AbortSignal.timeout(2000),\n      });\n      await res.body?.cancel();\n      if (res.ok) return true;\n    } catch {\n      // Try the transport endpoint when this runtime has no /health route.\n    }\n  }\n  return false;\n}\n\n/**\n * Clean up Chrome Singleton files (SingletonLock, SingletonSocket, SingletonCookie)\n * in a user data directory. These stale files prevent browser relaunch after crash.\n */\nexport function cleanSingletonFiles(userDataDir: string): void {\n  try {\n    const files = readdirSync(userDataDir);\n    for (const f of files) {\n      if (f.startsWith(\"Singleton\")) {\n        try {\n          unlinkSync(resolve(userDataDir, f));\n          logger.info({ file: f, userDataDir }, \"Removed stale Singleton file\");\n        } catch (e) {\n          logger.warn({ err: e, file: f }, \"Failed to remove stale Chrome Singleton file\");\n        }\n      }\n    }\n  } catch {\n    // Directory may not exist\n  }\n}\n\n/**\n * Kill the full process subtree spawned by a Playwright MCP instance.\n *\n * Chrome fans out into zygote/renderer/gpu grandchildren, so killing only\n * direct children leaves orphaned Chrome processes after retries/aborts. Walk\n * the tree before signaling so descendants are still discoverable.\n */\nexport function killProcessTreeChildren(pid: number): void {\n  try {\n    const children = execFileSync(\"pgrep\", [\"-P\", String(pid)], { stdio: \"pipe\" })\n      .toString()\n      .trim();\n    if (!children) return;\n    const childPids = children\n      .split(\"\\n\")\n      .map((cpid) => parseInt(cpid, 10))\n      .filter((pidNum) => !Number.isNaN(pidNum));\n\n    for (const childPid of childPids) {\n      killProcessTreeChildren(childPid);\n    }\n\n    for (const signal of [\"SIGTERM\", \"SIGKILL\"] as const) {\n      for (const childPid of childPids) {\n        try {\n          process.kill(childPid, signal);\n        } catch (e) {\n          logger.debug({ err: e, pid: childPid, signal }, \"Failed to signal browser child process\");\n        }\n      }\n    }\n    logger.info({ parentPid: pid, childPids }, \"Killed browser-MCP child process tree\");\n  } catch {\n    // No children found — fine\n  }\n}\n",
-    "import { execFileSync } from \"node:child_process\";\nimport { randomBytes } from \"node:crypto\";\nimport {\n  accessSync,\n  chmodSync,\n  constants,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { createRequire } from \"node:module\";\nimport { homedir } from \"node:os\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { parseRuntimePort, readEnvText, safeRuntimePathSegment } from \"#platform/config-helpers\";\nimport { logger } from \"#platform/logger\";\nimport { type AgentKind, isAgentKind } from \"#types\";\n\nexport function envText(envKey: string): string | undefined {\n  return readEnvText(process.env, envKey);\n}\n\nfunction resolveAgentEnv(envKey: string, fallback: AgentKind, legacyEnvKey?: string): AgentKind {\n  const value = envText(envKey) ?? (legacyEnvKey ? envText(legacyEnvKey) : undefined);\n  return isAgentKind(value) ? value : fallback;\n}\n\nconst HOME = homedir();\n\n// new URL(\"../..\", import.meta.url) causes webpack to treat \"../..\" as a module import.\n// Split into fileURLToPath → dirname → resolve to avoid that.\nfunction resolveProjectRoot(): string {\n  const moduleDir = dirname(fileURLToPath(import.meta.url));\n  const packagedRuntime = resolve(moduleDir, \"runtime\");\n  if (existsSync(resolve(packagedRuntime, \"src\"))) return packagedRuntime;\n  return resolve(moduleDir, \"../..\");\n}\n\nexport const PROJECT_ROOT = resolveProjectRoot();\n\n/** Resolve a dependency executable from either a package-local or hoisted install. */\nfunction resolveDependencyBin(name: string): string {\n  let dir = PROJECT_ROOT;\n  while (true) {\n    const candidate = resolve(dir, \"node_modules\", \".bin\", name);\n    if (existsSync(candidate)) return candidate;\n    const parent = dirname(dir);\n    if (parent === dir) return candidate;\n    dir = parent;\n  }\n}\n\n// Each machine is one negotium node; all node state lives in one dotdir.\n// NEGOTIUM_STATE_DIR overrides (useful for tests and multi-node-on-one-box).\nconst STATE_DIR_ENV = envText(\"NEGOTIUM_STATE_DIR\");\nexport const STATE_DIR = STATE_DIR_ENV ? resolve(STATE_DIR_ENV) : resolve(HOME, \".negotium\");\n\nfunction resolveLocalStateDir(envKey: string, stateName: string): string {\n  const envValue = envText(envKey);\n  if (envValue) return resolve(envValue);\n  return resolve(STATE_DIR, stateName);\n}\n\nfunction parsePortEnv(envValue: string | undefined, fallback: number): number {\n  return parseRuntimePort(envValue, fallback);\n}\n\nexport const WORKSPACE_DIR = resolveLocalStateDir(\"NEGOTIUM_WORKSPACE_DIR\", \"workspace\");\nexport const TOPIC_WORKSPACE_DIR = resolve(WORKSPACE_DIR, \"topics\");\nexport const SHARED_WIKI_DIR = resolve(WORKSPACE_DIR, \"wiki\");\nexport const CRON_WORKSPACE_DIR = resolve(WORKSPACE_DIR, \"cron\");\nexport const BROWSER_DIR = resolveLocalStateDir(\"NEGOTIUM_BROWSER_DIR\", \"browser\");\nexport const BROWSER_PROFILES_DIR = resolve(BROWSER_DIR, \"profiles\");\nexport const BINARIES_DIR = resolve(STATE_DIR, \"binaries\");\nexport const SECRETS_DIR = resolve(STATE_DIR, \"secrets\");\n// Legacy names remain public, but their durable contents now live under data.\nexport const CONTEXTS_DIR = resolve(STATE_DIR, \"data\", \"contexts\");\nexport const DM_WORKSPACE_DIR = resolve(STATE_DIR, \"data\", \"dm\");\nexport const SESSION_WORKSPACE_DIR = resolve(STATE_DIR, \"data\", \"sessions\");\n// The Claude Agent SDK ships a platform-matched Claude Code binary. Keep that\n// SDK/CLI pair together by default; only use an external executable when an\n// operator explicitly opts in. This avoids silently pairing an older SDK with\n// a newer globally installed Claude Code release.\nconst CLAUDE_EXECUTABLE_ENV = envText(\"NEGOTIUM_CLAUDE_EXECUTABLE\");\nexport const CLAUDE_EXECUTABLE = CLAUDE_EXECUTABLE_ENV ? resolve(CLAUDE_EXECUTABLE_ENV) : undefined;\n\n// Fallback output language for model-generated prose (topic/channel/manager\n// replies and the archiver's summaries, briefs, articles, completion reply).\n// Defaults to English; set `NEGOTIUM_LANG` to the user's mother tongue (e.g.\n// `Korean`, `ko`). The assistant still mirrors whatever language the user\n// writes in; `NEGOTIUM_MEMORY_LANG` can narrow just the archiver. Fixed system\n// chrome / degraded-path strings emitted by code stay English (can't translate\n// an arbitrary value at runtime).\nexport const DEFAULT_OUTPUT_LANGUAGE = \"English\";\n\nexport function resolveOutputLanguage(): string {\n  const raw = envText(\"NEGOTIUM_LANG\")?.trim();\n  return raw && raw.length > 0 ? raw : DEFAULT_OUTPUT_LANGUAGE;\n}\n\n/** Browser.rs release tested with this Negotium version. */\nexport const BROWSER_RS_VERSION = \"v0.1.16\";\n/** Require the authenticated listener and the current Browser.rs tool contract. */\nexport const BROWSER_RS_MIN_SECURE_VERSION = \"0.1.15\";\n\nfunction versionAtLeast(actualVersion: string, minimumVersion: string): boolean {\n  const actual = actualVersion.split(\".\").map(Number);\n  const minimum = minimumVersion.split(\".\").map(Number);\n  if (actual.some(Number.isNaN) || minimum.some(Number.isNaN)) return false;\n  for (let index = 0; index < minimum.length; index += 1) {\n    if ((actual[index] ?? 0) > (minimum[index] ?? 0)) return true;\n    if ((actual[index] ?? 0) < (minimum[index] ?? 0)) return false;\n  }\n  return true;\n}\n\nfunction browserRsMeetsMinimumVersion(candidate: string): boolean {\n  try {\n    const output = execFileSync(candidate, [\"--version\"], {\n      encoding: \"utf8\",\n      timeout: 2_000,\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n    }).trim();\n    const match = output.match(/^browser-rs (\\d+)\\.(\\d+)\\.(\\d+)$/);\n    if (!match) return false;\n    return versionAtLeast(match.slice(1).join(\".\"), BROWSER_RS_MIN_SECURE_VERSION);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Resolve the preferred Browser.rs engine without consulting PATH. The\n * versioned private location keeps different Negotium releases reproducible\n * and avoids changing a user's global browser-rs installation.\n */\nexport function resolveBrowserRsBin(envValue?: string): string | undefined {\n  const override = envValue?.trim();\n  if (\n    !override &&\n    !versionAtLeast(BROWSER_RS_VERSION.replace(/^v/, \"\"), BROWSER_RS_MIN_SECURE_VERSION)\n  ) {\n    return undefined;\n  }\n  const candidate = override\n    ? resolve(override)\n    : resolve(BINARIES_DIR, \"browser-rs\", BROWSER_RS_VERSION, \"browser-rs\");\n  try {\n    accessSync(candidate, constants.X_OK);\n    return browserRsMeetsMinimumVersion(candidate) ? candidate : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport const BROWSER_RS_BIN = resolveBrowserRsBin(envText(\"NEGOTIUM_BROWSER_RS_BIN\"));\n\n// Managed Browser.rs terminates MCP transports and security policy itself.\nexport function resolveBrowserMcpBin(envValue?: string): string {\n  const override = envValue?.trim();\n  if (override) return resolve(override);\n  return BROWSER_RS_BIN ?? resolve(BINARIES_DIR, \"browser-rs\", BROWSER_RS_VERSION, \"browser-rs\");\n}\n\nexport const PLAYWRIGHT_MCP_BIN = resolveBrowserMcpBin(envText(\"NEGOTIUM_BROWSER_MCP_BIN\"));\n\n// --- Browser egress proxy ---\n//\n// On a datacenter host (AWS) the browser's egress IP is a known cloud range,\n// so anti-bot services (Cloudflare, DataDome, reCAPTCHA) challenge or block it\n// far more than a residential IP would. Routing the automation browser through\n// a residential/ISP proxy moves the egress IP out of the datacenter range.\n//\n// Operators set BROWSER_PROXY_URL, e.g. http://user:pass@proxy.host:8080 or\n// socks5://proxy.host:1080. Credentials in the URL are split out because\n// Playwright takes them as separate fields. BROWSER_PROXY_BYPASS is an optional\n// comma-separated no-proxy list (e.g. \"localhost,127.0.0.1,*.internal\").\n//\n// NOTE: Chromium does not support authentication for SOCKS proxies — put\n// credentials only on http/https proxy URLs.\nexport type BrowserProxyConfig = {\n  server: string;\n  username?: string;\n  password?: string;\n  bypass?: string;\n};\n\nexport function resolveBrowserProxy(): BrowserProxyConfig | null {\n  const raw = envText(\"BROWSER_PROXY_URL\");\n  if (!raw) return null;\n  let url: URL;\n  try {\n    url = new URL(raw);\n  } catch {\n    logger.warn({ raw }, \"Ignoring malformed BROWSER_PROXY_URL\");\n    return null;\n  }\n  // Playwright wants the server without embedded credentials.\n  const server = `${url.protocol}//${url.host}`;\n  const proxy: BrowserProxyConfig = { server };\n  if (url.username) proxy.username = decodeURIComponent(url.username);\n  if (url.password) proxy.password = decodeURIComponent(url.password);\n  const bypass = envText(\"BROWSER_PROXY_BYPASS\");\n  if (bypass) proxy.bypass = bypass;\n  return proxy;\n}\n\n// --- Node/tsx runtime for the `codex` agent's MCP servers ---\n//\n// codex 0.135's rmcp stdio MCP client cannot reliably complete the initialize\n// handshake with servers spawned via `bun` (the JSON-RPC initialize is\n// dropped/raced and no tools ever reach the model). Pure-node servers connect\n// reliably, so codex turns launch the SAME .ts servers via node + tsx instead\n// of `bun run`. claude/maestro keep using `bun run` (fast, native, unaffected).\n//\n// tsx transpiles .ts on the fly and resolves the `@/*` tsconfig path aliases,\n// but only when it can find the tsconfig — and MCP servers run with cwd set to\n// the user's workspace dir, not PROJECT_ROOT — so we pass TSX_TSCONFIG_PATH\n// explicitly via env. Requires package.json `\"type\": \"module\"` so the servers'\n// top-level `await` loads as ESM under node.\nexport const TSX_BIN = resolveDependencyBin(\"tsx\");\n/** In-process tsx loader used by Node MCP entrypoints (avoids the tsx CLI child process). */\nexport const TSX_LOADER = createRequire(import.meta.url).resolve(\"tsx\");\nexport const TSCONFIG_PATH = resolve(PROJECT_ROOT, \"tsconfig.json\");\n\nexport const SESSION_COMM_SERVER = resolve(PROJECT_ROOT, \"src/mcp/session-comm/server.ts\");\n\nexport const TASK_SERVER = resolve(PROJECT_ROOT, \"src/mcp/task-server.ts\");\nexport const BROWSER_MCP_SSE_PROXY_SERVER = resolve(\n  PROJECT_ROOT,\n  \"src/mcp/browser-sse-proxy-server.ts\",\n);\nexport const CANONICAL_MCP_PROXY_SERVER = resolve(\n  PROJECT_ROOT,\n  \"src/mcp/canonical-proxy-server.ts\",\n);\n\nexport const WIKI_SERVER = resolve(PROJECT_ROOT, \"src/mcp/wiki-server.ts\");\n\nexport const TOKEN_STATS_SERVER = resolve(PROJECT_ROOT, \"src/mcp/token-stats-server.ts\");\n\nexport const COMPACTION_LOG_SERVER = resolve(PROJECT_ROOT, \"src/mcp/compaction-log-server.ts\");\n\nexport const SYSTEM_HEALTH_SERVER = resolve(PROJECT_ROOT, \"src/mcp/system-health-server.ts\");\n\nexport const AGENT_HEALTH_SERVER = resolve(PROJECT_ROOT, \"src/mcp/agent-health-server.ts\");\n\nexport const BACKGROUND_BASH_SERVER = resolve(PROJECT_ROOT, \"src/mcp/background-bash-server.ts\");\n\nexport const VAULT_SERVER = resolve(PROJECT_ROOT, \"src/mcp/vault-server.ts\");\n\nexport const BG_BASH_BASE_PORT = parsePortEnv(process.env.BG_BASH_BASE_PORT, 9700);\nexport const BG_BASH_MAX_PORT = parsePortEnv(process.env.BG_BASH_MAX_PORT, 9799);\n\nfunction safeWorkspaceSegment(value: string, fallback: string): string {\n  return safeRuntimePathSegment(value, fallback);\n}\n\n/** Resolve the shared filesystem workspace for an API topic. */\nexport function resolveTopicWorkspaceDir(topicId: string): string {\n  return join(TOPIC_WORKSPACE_DIR, safeWorkspaceSegment(topicId, \"topic\"));\n}\n\nexport function isProductionEnv(): boolean {\n  return process.env.NODE_ENV === \"production\";\n}\n\nfunction loadOrCreateLocalSecret(\n  envKey: string,\n  filename: string,\n  options: { persistEnvValue?: boolean } = {},\n): string {\n  const envValue = envText(envKey);\n  const secretFile = resolve(SECRETS_DIR, filename);\n  mkdirSync(dirname(secretFile), { recursive: true });\n  if (envValue) {\n    if (options.persistEnvValue) {\n      writeFileSync(secretFile, `${envValue}\\n`, { mode: 0o600 });\n      chmodSync(secretFile, 0o600);\n    }\n    return envValue;\n  }\n\n  if (existsSync(secretFile)) {\n    const stored = readFileSync(secretFile, \"utf-8\").trim();\n    if (stored) {\n      chmodSync(secretFile, 0o600);\n      return stored;\n    }\n  }\n\n  const secret = randomBytes(32).toString(\"base64url\");\n  try {\n    writeFileSync(secretFile, `${secret}\\n`, { mode: 0o600, flag: \"wx\" });\n    return secret;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n    const stored = readFileSync(secretFile, \"utf-8\").trim();\n    if (!stored) throw new Error(`Secret file exists but is empty: ${secretFile}`);\n    chmodSync(secretFile, 0o600);\n    return stored;\n  }\n}\n\nexport const RUNTIME_MCP_SECRET = loadOrCreateLocalSecret(\n  \"RUNTIME_MCP_SECRET\",\n  \"runtime-mcp-secret\",\n);\n/** Local bearer token for the loopback node-control API. */\nexport const NODE_CONTROL_TOKEN = loadOrCreateLocalSecret(\n  \"NEGOTIUM_CONTROL_TOKEN\",\n  \"node-control-token\",\n);\nexport const VAULT_MASTER_KEY = loadOrCreateLocalSecret(\n  \"NEGOTIUM_VAULT_MASTER_KEY\",\n  \"vault-master-key\",\n  { persistEnvValue: true },\n);\n// Agent/tool subprocesses inherit process.env. Keep the loaded key in this\n// process only so `env`/`ps` inside an agent workspace cannot reveal it.\ndelete process.env.NEGOTIUM_VAULT_MASTER_KEY;\n\n/** The node's single open port: runtime MCP endpoint + node API. */\nexport const NEGOTIUM_PORT = parseInt(process.env.NEGOTIUM_PORT || \"7777\", 10);\nexport const hostname = process.env.HOSTNAME || \"127.0.0.1\";\n\n// Persistent state (survives restarts, long-lived)\nexport const DATA_DIR = resolveLocalStateDir(\"NEGOTIUM_DATA_DIR\", \"data\");\nexport const LOG_DIR = resolveLocalStateDir(\"NEGOTIUM_LOG_DIR\", \"logs\");\nexport const UPLOADS_DIR = resolve(DATA_DIR, \"uploads\");\nexport const VAULT_DIR = resolve(DATA_DIR, \"vault\");\n// SESSIONS_DB_PATH env override lets tests point the DB singleton at a temp file.\nexport const SESSIONS_DB = process.env.SESSIONS_DB_PATH\n  ? resolve(process.env.SESSIONS_DB_PATH)\n  : resolve(DATA_DIR, \"sessions.db\");\nexport const DEBUG_FILE = resolve(DATA_DIR, \"debug-users.json\");\nexport const USERS_LOG_DIR = resolve(DATA_DIR, \"users\");\n\n// Runtime IPC queues (transient, safe to clear on restart)\n/** @deprecated Use the runtime layout name; NEGOTIUM_RUN_DIR remains a compatibility override. */\nexport const RUN_DIR = resolveLocalStateDir(\"NEGOTIUM_RUN_DIR\", \"runtime\");\nexport const RUNTIME_DIR = RUN_DIR;\nexport const PROGRESS_DIR = resolve(RUN_DIR, \"progress\");\nexport const DM_CMD_DIR = resolve(RUN_DIR, \"dm-commands\");\nexport const DM_RESP_DIR = resolve(RUN_DIR, \"dm-responses\");\nexport const SESSION_INBOX_DIR = resolve(RUN_DIR, \"session-inbox\");\nexport const SESSION_ASKS_DIR = resolve(RUN_DIR, \"session-asks\");\nexport const PLAYWRIGHT_BASE_PORT = parsePortEnv(process.env.PLAYWRIGHT_BASE_PORT, 9100);\nexport const PLAYWRIGHT_MAX_PORT = parsePortEnv(process.env.PLAYWRIGHT_MAX_PORT, 9499);\nexport const PLAYWRIGHT_PORTS_DIR = resolve(RUN_DIR, \"playwright-ports\");\nmkdirSync(STATE_DIR, { recursive: true });\nmkdirSync(DATA_DIR, { recursive: true });\nmkdirSync(UPLOADS_DIR, { recursive: true });\nmkdirSync(VAULT_DIR, { recursive: true, mode: 0o700 });\nmkdirSync(LOG_DIR, { recursive: true });\nmkdirSync(PROGRESS_DIR, { recursive: true });\nmkdirSync(DM_CMD_DIR, { recursive: true });\nmkdirSync(DM_RESP_DIR, { recursive: true });\nmkdirSync(SESSION_INBOX_DIR, { recursive: true });\nmkdirSync(SESSION_ASKS_DIR, { recursive: true });\nmkdirSync(PLAYWRIGHT_PORTS_DIR, { recursive: true });\nmkdirSync(WORKSPACE_DIR, { recursive: true });\nmkdirSync(TOPIC_WORKSPACE_DIR, { recursive: true });\nmkdirSync(SHARED_WIKI_DIR, { recursive: true });\nmkdirSync(CRON_WORKSPACE_DIR, { recursive: true });\nmkdirSync(CONTEXTS_DIR, { recursive: true });\nmkdirSync(DM_WORKSPACE_DIR, { recursive: true });\nmkdirSync(SESSION_WORKSPACE_DIR, { recursive: true });\nmkdirSync(BROWSER_DIR, { recursive: true });\nmkdirSync(BROWSER_PROFILES_DIR, { recursive: true });\nmkdirSync(BINARIES_DIR, { recursive: true });\nmkdirSync(SECRETS_DIR, { recursive: true, mode: 0o700 });\n\n/** Stale threshold for active-query state files (crash recovery) */\nexport const ACTIVE_QUERY_STALE_MS = 10 * 60 * 1000; // 10 minutes\n\nexport const AGENTS_PROMPTS_DIR = resolve(PROJECT_ROOT, \"src/prompts/agents\");\nexport const RESOURCES_DIR = resolve(PROJECT_ROOT, \"src/resources\");\n\n/** Returns process.env without CLAUDECODE, to prevent nested claude-code detection in subprocesses. */\nexport function getCleanEnv(): NodeJS.ProcessEnv {\n  const env = { ...process.env };\n  delete env.CLAUDECODE;\n  return env;\n}\n\nexport const FILE_EXTENSIONS_REGEX =\n  /(?:\\/[^\\s\"'<>|*?[\\]]+\\.(?:png|jpg|jpeg|gif|webp|svg|pdf|csv|xlsx|xls|json|txt|md|html|zip|py|js|ts|tsx|jsx|css|xml|yaml|yml|docx|pptx))/gi;\n\nexport const FILE_TAG_REGEX = /\\[FILE:(\\/[^\\]]+)\\]/gi;\n\n// Canonical Claude model IDs — update here when Anthropic releases new versions\nexport const MODEL_SONNET = \"claude-sonnet-5\";\nexport const MODEL_OPUS = \"claude-opus-5\";\nexport const MODEL_HAIKU = \"claude-haiku-4-5-20251001\";\nexport const MODEL_FABLE = \"claude-fable-5\"; // Mythos-class, announced 2026-06-09\n\n// DeepSeek V4 (released 2026-04-24). API is OpenAI-compatible at\n// https://api.deepseek.com/v1/chat/completions; thinking mode is enabled via\n// `extra_body.thinking.type` + `reasoning_effort`. Legacy `deepseek-chat` /\n// `deepseek-reasoner` are deprecated 2026-07-24.\nexport const MODEL_DEEPSEEK_V4_PRO = \"deepseek-v4-pro\";\nexport const MODEL_DEEPSEEK_V4_FLASH = \"deepseek-v4-flash\";\n\n// Agent + model defaults split by session role. FALLBACK_* is the shared base;\n// SESSION_* overrides topic + ephemeral; GATEWAY_* overrides dm + manager.\n// DEFAULT_* is accepted as a legacy alias during the env migration window.\nexport const FALLBACK_AGENT: AgentKind = resolveAgentEnv(\n  \"FALLBACK_AGENT\",\n  \"maestro\",\n  \"DEFAULT_AGENT\",\n);\nexport const SESSION_AGENT: AgentKind = resolveAgentEnv(\"SESSION_AGENT\", FALLBACK_AGENT);\nexport const GATEWAY_AGENT: AgentKind = resolveAgentEnv(\"GATEWAY_AGENT\", FALLBACK_AGENT);\n\nexport const FALLBACK_MODEL = envText(\"FALLBACK_MODEL\") ?? envText(\"DEFAULT_MODEL\");\n\nfunction resolveModelEnv(envKey: string, agentConst: AgentKind): string | undefined {\n  return envText(envKey) ?? (agentConst === FALLBACK_AGENT ? FALLBACK_MODEL : undefined);\n}\n\nexport const SESSION_MODEL = resolveModelEnv(\"SESSION_MODEL\", SESSION_AGENT);\nexport const GATEWAY_MODEL = resolveModelEnv(\"GATEWAY_MODEL\", GATEWAY_AGENT);\n\n/** Resolve the effective display/default model for a topic (session context).\n *  Applies the session model override only when that role owns the agent;\n *  otherwise each registry's native default stays authoritative. */\nexport function resolveDefaultModel(agent: string, registryDefaultModel: string): string {\n  return agent === SESSION_AGENT && SESSION_MODEL ? SESSION_MODEL : registryDefaultModel;\n}\n\n// ── External tool binaries + media pipeline env ───────────────────\n// (src/media/* 에서 사용. 미설정 시 fallback 의미는 기존 그대로:\n//  FFMPEG_BIN은 text-extractor에서 필수(undefined면 spawn 시점 실패),\n//  video.ts에서는 PATH의 ffmpeg/ffprobe로 fallback.)\nexport const FFMPEG_BIN = envText(\"FFMPEG_BIN\");\nexport const FFPROBE_BIN = envText(\"FFPROBE_BIN\");\nexport const PYTHON_BIN = envText(\"PYTHON_BIN\") ?? \"python3\";\nexport const FASTER_WHISPER_WRAPPER =\n  envText(\"FASTER_WHISPER_WRAPPER\") ?? resolve(PROJECT_ROOT, \"scripts/faster-whisper-wrapper.py\");\nexport const WHISPER_MODEL = envText(\"WHISPER_MODEL_FILE\") ?? \"turbo\";\nexport const TESSERACT_BIN = envText(\"TESSERACT_BIN\") ?? \"tesseract\";\nexport const PDFTOTEXT_BIN = envText(\"PDFTOTEXT_BIN\") ?? \"pdftotext\";\n\n// Max tell_session relay depth from origin user. ask_session forks reset to\n// depth=0, so this only caps tell_session chains. Override via MAX_TELL_DEPTH\n// (positive int); defaults to 20 when unset or invalid.\nconst _envMaxTellDepth = Number.parseInt(process.env.MAX_TELL_DEPTH ?? \"\", 10);\nexport const MAX_TELL_DEPTH =\n  Number.isInteger(_envMaxTellDepth) && _envMaxTellDepth > 0 ? _envMaxTellDepth : 20;\n\n/** Codex CLI auth file. 호출 시점에 env를 읽는다 — 테스트가 런타임에\n *  NEGOTIUM_CODEX_AUTH_FILE을 바꾸므로 모듈 로드 상수로 만들면 안 된다. */\nexport function codexAuthFilePath(): string {\n  return process.env.NEGOTIUM_CODEX_AUTH_FILE || join(homedir(), \".codex\", \"auth.json\");\n}\n\n// System defaults moved to per-agent registries\n// (`src/agents/{claude,codex}-registry.ts`). Read via\n// `getRegistry(agent).defaultModel` / `.defaultEffort`.\n\n// MCP server builders -> src/platform/mcp-config.ts\n",
+    "import { execFileSync } from \"node:child_process\";\nimport { randomBytes } from \"node:crypto\";\nimport {\n  accessSync,\n  chmodSync,\n  constants,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { createRequire } from \"node:module\";\nimport { homedir } from \"node:os\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { parseRuntimePort, readEnvText, safeRuntimePathSegment } from \"#platform/config-helpers\";\nimport { logger } from \"#platform/logger\";\nimport { type AgentKind, isAgentKind } from \"#types\";\n\nexport function envText(envKey: string): string | undefined {\n  return readEnvText(process.env, envKey);\n}\n\nfunction resolveAgentEnv(envKey: string, fallback: AgentKind, legacyEnvKey?: string): AgentKind {\n  const value = envText(envKey) ?? (legacyEnvKey ? envText(legacyEnvKey) : undefined);\n  return isAgentKind(value) ? value : fallback;\n}\n\nconst HOME = homedir();\n\n// new URL(\"../..\", import.meta.url) causes webpack to treat \"../..\" as a module import.\n// Split into fileURLToPath → dirname → resolve to avoid that.\nfunction resolveProjectRoot(): string {\n  const moduleDir = dirname(fileURLToPath(import.meta.url));\n  const packagedRuntime = resolve(moduleDir, \"runtime\");\n  if (existsSync(resolve(packagedRuntime, \"src\"))) return packagedRuntime;\n  return resolve(moduleDir, \"../..\");\n}\n\nexport const PROJECT_ROOT = resolveProjectRoot();\n\n/** Resolve a dependency executable from either a package-local or hoisted install. */\nfunction resolveDependencyBin(name: string): string {\n  let dir = PROJECT_ROOT;\n  while (true) {\n    const candidate = resolve(dir, \"node_modules\", \".bin\", name);\n    if (existsSync(candidate)) return candidate;\n    const parent = dirname(dir);\n    if (parent === dir) return candidate;\n    dir = parent;\n  }\n}\n\n// Each machine is one negotium node; all node state lives in one dotdir.\n// NEGOTIUM_STATE_DIR overrides (useful for tests and multi-node-on-one-box).\nconst STATE_DIR_ENV = envText(\"NEGOTIUM_STATE_DIR\");\nexport const STATE_DIR = STATE_DIR_ENV ? resolve(STATE_DIR_ENV) : resolve(HOME, \".negotium\");\n\nfunction resolveLocalStateDir(envKey: string, stateName: string): string {\n  const envValue = envText(envKey);\n  if (envValue) return resolve(envValue);\n  return resolve(STATE_DIR, stateName);\n}\n\nfunction parsePortEnv(envValue: string | undefined, fallback: number): number {\n  return parseRuntimePort(envValue, fallback);\n}\n\nexport const WORKSPACE_DIR = resolveLocalStateDir(\"NEGOTIUM_WORKSPACE_DIR\", \"workspace\");\nexport const TOPIC_WORKSPACE_DIR = resolve(WORKSPACE_DIR, \"topics\");\nexport const SHARED_WIKI_DIR = resolve(WORKSPACE_DIR, \"wiki\");\nexport const CRON_WORKSPACE_DIR = resolve(WORKSPACE_DIR, \"cron\");\nexport const BROWSER_DIR = resolveLocalStateDir(\"NEGOTIUM_BROWSER_DIR\", \"browser\");\nexport const BROWSER_PROFILES_DIR = resolve(BROWSER_DIR, \"profiles\");\nexport const BINARIES_DIR = resolve(STATE_DIR, \"binaries\");\nexport const SECRETS_DIR = resolve(STATE_DIR, \"secrets\");\n// Legacy names remain public, but their durable contents now live under data.\nexport const CONTEXTS_DIR = resolve(STATE_DIR, \"data\", \"contexts\");\nexport const DM_WORKSPACE_DIR = resolve(STATE_DIR, \"data\", \"dm\");\nexport const SESSION_WORKSPACE_DIR = resolve(STATE_DIR, \"data\", \"sessions\");\n// The Claude Agent SDK ships a platform-matched Claude Code binary. Keep that\n// SDK/CLI pair together by default; only use an external executable when an\n// operator explicitly opts in. This avoids silently pairing an older SDK with\n// a newer globally installed Claude Code release.\nconst CLAUDE_EXECUTABLE_ENV = envText(\"NEGOTIUM_CLAUDE_EXECUTABLE\");\nexport const CLAUDE_EXECUTABLE = CLAUDE_EXECUTABLE_ENV ? resolve(CLAUDE_EXECUTABLE_ENV) : undefined;\n\n// Fallback output language for model-generated prose (topic/channel/manager\n// replies and the archiver's summaries, briefs, articles, completion reply).\n// Defaults to English; set `NEGOTIUM_LANG` to the user's mother tongue (e.g.\n// `Korean`, `ko`). The assistant still mirrors whatever language the user\n// writes in; `NEGOTIUM_MEMORY_LANG` can narrow just the archiver. Fixed system\n// chrome / degraded-path strings emitted by code stay English (can't translate\n// an arbitrary value at runtime).\nexport const DEFAULT_OUTPUT_LANGUAGE = \"English\";\n\nexport function resolveOutputLanguage(): string {\n  const raw = envText(\"NEGOTIUM_LANG\")?.trim();\n  return raw && raw.length > 0 ? raw : DEFAULT_OUTPUT_LANGUAGE;\n}\n\n/** Browser.rs release tested with this Negotium version. */\nexport const BROWSER_RS_VERSION = \"v0.1.16\";\n/** Require the authenticated listener and the current Browser.rs tool contract. */\nexport const BROWSER_RS_MIN_SECURE_VERSION = \"0.1.15\";\n\nfunction versionAtLeast(actualVersion: string, minimumVersion: string): boolean {\n  const actual = actualVersion.split(\".\").map(Number);\n  const minimum = minimumVersion.split(\".\").map(Number);\n  if (actual.some(Number.isNaN) || minimum.some(Number.isNaN)) return false;\n  for (let index = 0; index < minimum.length; index += 1) {\n    if ((actual[index] ?? 0) > (minimum[index] ?? 0)) return true;\n    if ((actual[index] ?? 0) < (minimum[index] ?? 0)) return false;\n  }\n  return true;\n}\n\nfunction browserRsMeetsMinimumVersion(candidate: string): boolean {\n  try {\n    const output = execFileSync(candidate, [\"--version\"], {\n      encoding: \"utf8\",\n      timeout: 2_000,\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n    }).trim();\n    const match = output.match(/^browser-rs (\\d+)\\.(\\d+)\\.(\\d+)$/);\n    if (!match) return false;\n    return versionAtLeast(match.slice(1).join(\".\"), BROWSER_RS_MIN_SECURE_VERSION);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Resolve the preferred Browser.rs engine without consulting PATH. The\n * versioned private location keeps different Negotium releases reproducible\n * and avoids changing a user's global browser-rs installation.\n */\nexport function resolveBrowserRsBin(envValue?: string): string | undefined {\n  const override = envValue?.trim();\n  if (\n    !override &&\n    !versionAtLeast(BROWSER_RS_VERSION.replace(/^v/, \"\"), BROWSER_RS_MIN_SECURE_VERSION)\n  ) {\n    return undefined;\n  }\n  const candidate = override\n    ? resolve(override)\n    : resolve(BINARIES_DIR, \"browser-rs\", BROWSER_RS_VERSION, \"browser-rs\");\n  try {\n    accessSync(candidate, constants.X_OK);\n    return browserRsMeetsMinimumVersion(candidate) ? candidate : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport const BROWSER_RS_BIN = resolveBrowserRsBin(envText(\"NEGOTIUM_BROWSER_RS_BIN\"));\n\n// Managed Browser.rs terminates MCP transports and security policy itself.\nexport function resolveBrowserMcpBin(envValue?: string): string {\n  const override = envValue?.trim();\n  if (override) return resolve(override);\n  return BROWSER_RS_BIN ?? resolve(BINARIES_DIR, \"browser-rs\", BROWSER_RS_VERSION, \"browser-rs\");\n}\n\nexport const PLAYWRIGHT_MCP_BIN = resolveBrowserMcpBin(envText(\"NEGOTIUM_BROWSER_MCP_BIN\"));\n\n// --- Browser egress proxy ---\n//\n// On a datacenter host (AWS) the browser's egress IP is a known cloud range,\n// so anti-bot services (Cloudflare, DataDome, reCAPTCHA) challenge or block it\n// far more than a residential IP would. Routing the automation browser through\n// a residential/ISP proxy moves the egress IP out of the datacenter range.\n//\n// Operators set BROWSER_PROXY_URL, e.g. http://user:pass@proxy.host:8080 or\n// socks5://proxy.host:1080. Credentials in the URL are split out because\n// Playwright takes them as separate fields. BROWSER_PROXY_BYPASS is an optional\n// comma-separated no-proxy list (e.g. \"localhost,127.0.0.1,*.internal\").\n//\n// NOTE: Chromium does not support authentication for SOCKS proxies — put\n// credentials only on http/https proxy URLs.\nexport type BrowserProxyConfig = {\n  server: string;\n  username?: string;\n  password?: string;\n  bypass?: string;\n};\n\nexport function resolveBrowserProxy(): BrowserProxyConfig | null {\n  const raw = envText(\"BROWSER_PROXY_URL\");\n  if (!raw) return null;\n  let url: URL;\n  try {\n    url = new URL(raw);\n  } catch {\n    logger.warn({ raw }, \"Ignoring malformed BROWSER_PROXY_URL\");\n    return null;\n  }\n  // Playwright wants the server without embedded credentials.\n  const server = `${url.protocol}//${url.host}`;\n  const proxy: BrowserProxyConfig = { server };\n  if (url.username) proxy.username = decodeURIComponent(url.username);\n  if (url.password) proxy.password = decodeURIComponent(url.password);\n  const bypass = envText(\"BROWSER_PROXY_BYPASS\");\n  if (bypass) proxy.bypass = bypass;\n  return proxy;\n}\n\n// --- Node/tsx runtime for the `codex` agent's MCP servers ---\n//\n// codex 0.135's rmcp stdio MCP client cannot reliably complete the initialize\n// handshake with servers spawned via `bun` (the JSON-RPC initialize is\n// dropped/raced and no tools ever reach the model). Pure-node servers connect\n// reliably, so codex turns launch the SAME .ts servers via node + tsx instead\n// of `bun run`. claude/maestro keep using `bun run` (fast, native, unaffected).\n//\n// tsx transpiles .ts on the fly and resolves the `@/*` tsconfig path aliases,\n// but only when it can find the tsconfig — and MCP servers run with cwd set to\n// the user's workspace dir, not PROJECT_ROOT — so we pass TSX_TSCONFIG_PATH\n// explicitly via env. Requires package.json `\"type\": \"module\"` so the servers'\n// top-level `await` loads as ESM under node.\nexport const TSX_BIN = resolveDependencyBin(\"tsx\");\n/** In-process tsx loader used by Node MCP entrypoints (avoids the tsx CLI child process). */\nexport const TSX_LOADER = createRequire(import.meta.url).resolve(\"tsx\");\nexport const TSCONFIG_PATH = resolve(PROJECT_ROOT, \"tsconfig.json\");\n\nexport const SESSION_COMM_SERVER = resolve(PROJECT_ROOT, \"src/mcp/session-comm/server.ts\");\n\nexport const TASK_SERVER = resolve(PROJECT_ROOT, \"src/mcp/task-server.ts\");\nexport const BROWSER_MCP_SSE_PROXY_SERVER = resolve(\n  PROJECT_ROOT,\n  \"src/mcp/browser-sse-proxy-server.ts\",\n);\nexport const CANONICAL_MCP_PROXY_SERVER = resolve(\n  PROJECT_ROOT,\n  \"src/mcp/canonical-proxy-server.ts\",\n);\n\nexport const WIKI_SERVER = resolve(PROJECT_ROOT, \"src/mcp/wiki-server.ts\");\n\nexport const TOKEN_STATS_SERVER = resolve(PROJECT_ROOT, \"src/mcp/token-stats-server.ts\");\n\nexport const COMPACTION_LOG_SERVER = resolve(PROJECT_ROOT, \"src/mcp/compaction-log-server.ts\");\n\nexport const SYSTEM_HEALTH_SERVER = resolve(PROJECT_ROOT, \"src/mcp/system-health-server.ts\");\n\nexport const AGENT_HEALTH_SERVER = resolve(PROJECT_ROOT, \"src/mcp/agent-health-server.ts\");\n\nexport const BACKGROUND_BASH_SERVER = resolve(PROJECT_ROOT, \"src/mcp/background-bash-server.ts\");\n\nexport const VAULT_SERVER = resolve(PROJECT_ROOT, \"src/mcp/vault-server.ts\");\n\nexport const BG_BASH_BASE_PORT = parsePortEnv(process.env.BG_BASH_BASE_PORT, 9700);\nexport const BG_BASH_MAX_PORT = parsePortEnv(process.env.BG_BASH_MAX_PORT, 9799);\n\nfunction safeWorkspaceSegment(value: string, fallback: string): string {\n  return safeRuntimePathSegment(value, fallback);\n}\n\n/** Resolve the shared filesystem workspace for an API topic. */\nexport function resolveTopicWorkspaceDir(topicId: string): string {\n  return join(TOPIC_WORKSPACE_DIR, safeWorkspaceSegment(topicId, \"topic\"));\n}\n\nexport function isProductionEnv(): boolean {\n  return process.env.NODE_ENV === \"production\";\n}\n\nfunction loadOrCreateLocalSecret(\n  envKey: string,\n  filename: string,\n  options: { persistEnvValue?: boolean } = {},\n): string {\n  const envValue = envText(envKey);\n  const secretFile = resolve(SECRETS_DIR, filename);\n  mkdirSync(dirname(secretFile), { recursive: true });\n  if (envValue) {\n    if (options.persistEnvValue) {\n      writeFileSync(secretFile, `${envValue}\\n`, { mode: 0o600 });\n      chmodSync(secretFile, 0o600);\n    }\n    return envValue;\n  }\n\n  if (existsSync(secretFile)) {\n    const stored = readFileSync(secretFile, \"utf-8\").trim();\n    if (stored) {\n      chmodSync(secretFile, 0o600);\n      return stored;\n    }\n  }\n\n  const secret = randomBytes(32).toString(\"base64url\");\n  try {\n    writeFileSync(secretFile, `${secret}\\n`, { mode: 0o600, flag: \"wx\" });\n    return secret;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n    const stored = readFileSync(secretFile, \"utf-8\").trim();\n    if (!stored) throw new Error(`Secret file exists but is empty: ${secretFile}`);\n    chmodSync(secretFile, 0o600);\n    return stored;\n  }\n}\n\nexport const RUNTIME_MCP_SECRET = loadOrCreateLocalSecret(\n  \"RUNTIME_MCP_SECRET\",\n  \"runtime-mcp-secret\",\n);\n/** Local bearer token for the loopback node-control API. */\nexport const NODE_CONTROL_TOKEN = loadOrCreateLocalSecret(\n  \"NEGOTIUM_CONTROL_TOKEN\",\n  \"node-control-token\",\n);\nexport const VAULT_MASTER_KEY = loadOrCreateLocalSecret(\n  \"NEGOTIUM_VAULT_MASTER_KEY\",\n  \"vault-master-key\",\n  { persistEnvValue: true },\n);\n// Agent/tool subprocesses inherit process.env. Keep the loaded key in this\n// process only so `env`/`ps` inside an agent workspace cannot reveal it.\ndelete process.env.NEGOTIUM_VAULT_MASTER_KEY;\n\n/** The node's single open port: runtime MCP endpoint + node API. */\nexport const NEGOTIUM_PORT = parseInt(process.env.NEGOTIUM_PORT || \"7777\", 10);\nexport const hostname = process.env.HOSTNAME || \"127.0.0.1\";\n\n// Persistent state (survives restarts, long-lived)\nexport const DATA_DIR = resolveLocalStateDir(\"NEGOTIUM_DATA_DIR\", \"data\");\nexport const LOG_DIR = resolveLocalStateDir(\"NEGOTIUM_LOG_DIR\", \"logs\");\nexport const UPLOADS_DIR = resolve(DATA_DIR, \"uploads\");\nexport const VAULT_DIR = resolve(DATA_DIR, \"vault\");\n// SESSIONS_DB_PATH env override lets tests point the DB singleton at a temp file.\nexport const SESSIONS_DB = process.env.SESSIONS_DB_PATH\n  ? resolve(process.env.SESSIONS_DB_PATH)\n  : resolve(DATA_DIR, \"sessions.db\");\nexport const DEBUG_FILE = resolve(DATA_DIR, \"debug-users.json\");\nexport const USERS_LOG_DIR = resolve(DATA_DIR, \"users\");\n\n// Runtime IPC queues (transient, safe to clear on restart)\n/** @deprecated Use the runtime layout name; NEGOTIUM_RUN_DIR remains a compatibility override. */\nexport const RUN_DIR = resolveLocalStateDir(\"NEGOTIUM_RUN_DIR\", \"runtime\");\nexport const RUNTIME_DIR = RUN_DIR;\nexport const PROGRESS_DIR = resolve(RUN_DIR, \"progress\");\nexport const DM_CMD_DIR = resolve(RUN_DIR, \"dm-commands\");\nexport const DM_RESP_DIR = resolve(RUN_DIR, \"dm-responses\");\nexport const SESSION_INBOX_DIR = resolve(RUN_DIR, \"session-inbox\");\nexport const SESSION_ASKS_DIR = resolve(RUN_DIR, \"session-asks\");\nexport const PLAYWRIGHT_BASE_PORT = parsePortEnv(process.env.PLAYWRIGHT_BASE_PORT, 9100);\nexport const PLAYWRIGHT_MAX_PORT = parsePortEnv(process.env.PLAYWRIGHT_MAX_PORT, 9499);\nexport const PLAYWRIGHT_PORTS_DIR = resolve(RUN_DIR, \"playwright-ports\");\nmkdirSync(STATE_DIR, { recursive: true });\nmkdirSync(DATA_DIR, { recursive: true });\nmkdirSync(UPLOADS_DIR, { recursive: true });\nmkdirSync(VAULT_DIR, { recursive: true, mode: 0o700 });\nmkdirSync(LOG_DIR, { recursive: true });\nmkdirSync(PROGRESS_DIR, { recursive: true });\nmkdirSync(DM_CMD_DIR, { recursive: true });\nmkdirSync(DM_RESP_DIR, { recursive: true });\nmkdirSync(SESSION_INBOX_DIR, { recursive: true });\nmkdirSync(SESSION_ASKS_DIR, { recursive: true });\nmkdirSync(PLAYWRIGHT_PORTS_DIR, { recursive: true });\nmkdirSync(WORKSPACE_DIR, { recursive: true });\nmkdirSync(TOPIC_WORKSPACE_DIR, { recursive: true });\nmkdirSync(SHARED_WIKI_DIR, { recursive: true });\nmkdirSync(CRON_WORKSPACE_DIR, { recursive: true });\nmkdirSync(CONTEXTS_DIR, { recursive: true });\nmkdirSync(DM_WORKSPACE_DIR, { recursive: true });\nmkdirSync(SESSION_WORKSPACE_DIR, { recursive: true });\nmkdirSync(BROWSER_DIR, { recursive: true });\nmkdirSync(BROWSER_PROFILES_DIR, { recursive: true });\nmkdirSync(BINARIES_DIR, { recursive: true });\nmkdirSync(SECRETS_DIR, { recursive: true, mode: 0o700 });\n\n/** Stale threshold for active-query state files (crash recovery) */\nexport const ACTIVE_QUERY_STALE_MS = 10 * 60 * 1000; // 10 minutes\n\nexport const AGENTS_PROMPTS_DIR = resolve(PROJECT_ROOT, \"src/prompts/agents\");\nexport const RESOURCES_DIR = resolve(PROJECT_ROOT, \"src/resources\");\n\n/** Returns process.env without CLAUDECODE, to prevent nested claude-code detection in subprocesses. */\nexport function getCleanEnv(): NodeJS.ProcessEnv {\n  const env = { ...process.env };\n  delete env.CLAUDECODE;\n  return env;\n}\n\nexport const FILE_EXTENSIONS_REGEX =\n  /(?:\\/[^\\s\"'<>|*?[\\]]+\\.(?:png|jpg|jpeg|gif|webp|svg|pdf|csv|xlsx|xls|json|txt|md|html|zip|py|js|ts|tsx|jsx|css|xml|yaml|yml|docx|pptx))/gi;\n\nexport const FILE_TAG_REGEX = /\\[FILE:(\\/[^\\]]+)\\]/gi;\n\n// Canonical Claude model IDs — update here when Anthropic releases new versions\nexport const MODEL_SONNET = \"claude-sonnet-5\";\nexport const MODEL_OPUS = \"claude-opus-5\";\nexport const MODEL_HAIKU = \"claude-haiku-4-5-20251001\";\nexport const MODEL_FABLE = \"claude-fable-5\"; // Mythos-class, announced 2026-06-09\n\n// DeepSeek V4 (released 2026-04-24). API is OpenAI-compatible at\n// https://api.deepseek.com/v1/chat/completions; thinking mode is enabled via\n// `extra_body.thinking.type` + `reasoning_effort`. Legacy `deepseek-chat` /\n// `deepseek-reasoner` are deprecated 2026-07-24.\nexport const MODEL_DEEPSEEK_V4_PRO = \"deepseek-v4-pro\";\nexport const MODEL_DEEPSEEK_V4_FLASH = \"deepseek-v4-flash\";\n\n// Agent + model defaults split by session role. FALLBACK_* is the shared base;\n// SESSION_* overrides topic + ephemeral; GATEWAY_* overrides dm + manager.\n// DEFAULT_* is accepted as a legacy alias during the env migration window.\nexport const FALLBACK_AGENT: AgentKind = resolveAgentEnv(\n  \"FALLBACK_AGENT\",\n  \"maestro\",\n  \"DEFAULT_AGENT\",\n);\nexport const SESSION_AGENT: AgentKind = resolveAgentEnv(\"SESSION_AGENT\", FALLBACK_AGENT);\nexport const GATEWAY_AGENT: AgentKind = resolveAgentEnv(\"GATEWAY_AGENT\", FALLBACK_AGENT);\n\nexport const FALLBACK_MODEL = envText(\"FALLBACK_MODEL\") ?? envText(\"DEFAULT_MODEL\");\n\nfunction resolveModelEnv(envKey: string, agentConst: AgentKind): string | undefined {\n  return envText(envKey) ?? (agentConst === FALLBACK_AGENT ? FALLBACK_MODEL : undefined);\n}\n\nexport const SESSION_MODEL = resolveModelEnv(\"SESSION_MODEL\", SESSION_AGENT);\nexport const GATEWAY_MODEL = resolveModelEnv(\"GATEWAY_MODEL\", GATEWAY_AGENT);\n\n/** Resolve the effective display/default model for a topic (session context).\n *  Applies the session model override only when that role owns the agent;\n *  otherwise each registry's native default stays authoritative. */\nexport function resolveDefaultModel(agent: string, registryDefaultModel: string): string {\n  return agent === SESSION_AGENT && SESSION_MODEL ? SESSION_MODEL : registryDefaultModel;\n}\n\n// ── External tool binaries + media pipeline env ───────────────────\n// (src/media/* 에서 사용. 미설정 시 fallback 의미는 기존 그대로:\n//  FFMPEG_BIN은 text-extractor에서 필수(undefined면 spawn 시점 실패),\n//  video.ts에서는 PATH의 ffmpeg/ffprobe로 fallback.)\nexport const FFMPEG_BIN = envText(\"FFMPEG_BIN\");\nexport const FFPROBE_BIN = envText(\"FFPROBE_BIN\");\nexport const PYTHON_BIN = envText(\"PYTHON_BIN\") ?? \"python3\";\nexport const FASTER_WHISPER_WRAPPER =\n  envText(\"FASTER_WHISPER_WRAPPER\") ?? resolve(PROJECT_ROOT, \"scripts/faster-whisper-wrapper.py\");\nexport const WHISPER_MODEL = envText(\"WHISPER_MODEL_FILE\") ?? \"turbo\";\nexport const TESSERACT_BIN = envText(\"TESSERACT_BIN\") ?? \"tesseract\";\nexport const PDFTOTEXT_BIN = envText(\"PDFTOTEXT_BIN\") ?? \"pdftotext\";\n\n// Max tell_session relay depth from origin user. ask_session forks reset to\n// depth=0, so this only caps tell_session chains. Override via MAX_TELL_DEPTH\n// (positive int); defaults to 20 when unset or invalid.\nconst _envMaxTellDepth = Number.parseInt(process.env.MAX_TELL_DEPTH ?? \"\", 10);\nexport const MAX_TELL_DEPTH =\n  Number.isInteger(_envMaxTellDepth) && _envMaxTellDepth > 0 ? _envMaxTellDepth : 20;\n\n/** Codex CLI auth file. 호출 시점에 env를 읽는다 — 테스트가 런타임에\n *  NEGOTIUM_CODEX_AUTH_FILE을 바꾸므로 모듈 로드 상수로 만들면 안 된다. */\nexport function codexAuthFilePath(): string {\n  return (\n    process.env.NEGOTIUM_CODEX_AUTH_FILE ||\n    join(process.env.CODEX_HOME || join(homedir(), \".codex\"), \"auth.json\")\n  );\n}\n\n// System defaults moved to per-agent registries\n// (`src/agents/{claude,codex}-registry.ts`). Read via\n// `getRegistry(agent).defaultModel` / `.defaultEffort`.\n\n// MCP server builders -> src/platform/mcp-config.ts\n",
     "import { resolve } from \"node:path\";\n\nexport type RuntimeEnvironment = Readonly<Record<string, string | undefined>>;\n\nexport function readEnvText(env: RuntimeEnvironment, key: string): string | undefined {\n  const value = env[key]?.trim();\n  return value || undefined;\n}\n\nexport function parseRuntimePort(value: string | undefined, fallback: number): number {\n  if (!value) return fallback;\n  const port = Number.parseInt(value, 10);\n  return Number.isInteger(port) && port > 0 && port <= 65_535 ? port : fallback;\n}\n\nexport function resolveRuntimeStateDir(options: {\n  env: RuntimeEnvironment;\n  envKey: string;\n  fallbackRoot: string;\n  fallbackName: string;\n}): string {\n  const configured = readEnvText(options.env, options.envKey);\n  return configured ? resolve(configured) : resolve(options.fallbackRoot, options.fallbackName);\n}\n\nexport function safeRuntimePathSegment(value: string, fallback: string, maxLength = 160): string {\n  const cleaned = value\n    .trim()\n    .replace(/[^A-Za-z0-9._-]/g, \"_\")\n    .replace(/^_+|_+$/g, \"\")\n    .slice(0, maxLength);\n  return cleaned || fallback;\n}\n",
     "import pino from \"pino\";\n\nexport interface StdioLoggerOptions {\n  level?: string;\n  development?: boolean;\n}\n\n/**\n * Always write logs to stderr (fd 2), never stdout.\n *\n * MCP servers under `src/mcp/**` run as stdio subprocesses where stdout is the\n * JSON-RPC transport channel. A single log line on stdout corrupts the next\n * message and the MCP client closes the transport (\"Transport closed\"). The\n * main bot process is also fine with stderr — pm2 captures both streams.\n *\n * In dev mode pino spawns a `pino-pretty` worker that owns its own sink, so we\n * pass `destination: 2` through transport.options. In prod (no transport) the\n * second arg to `pino()` sets the destination directly.\n */\nexport function createStdioLogger(options: StdioLoggerOptions = {}) {\n  const development = options.development ?? process.env.NODE_ENV === \"development\";\n  return pino(\n    {\n      level: options.level ?? process.env.LOG_LEVEL ?? \"info\",\n      transport: development\n        ? {\n            target: \"pino-pretty\",\n            options: {\n              colorize: true,\n              translateTime: \"SYS:yyyy-mm-dd HH:MM:ss\",\n              destination: 2,\n            },\n          }\n        : undefined,\n    },\n    pino.destination(2),\n  );\n}\n\nexport type StdioLogger = ReturnType<typeof createStdioLogger>;\n\nexport const logger = createStdioLogger();\n",
     "/**\n * Common context carried through the attachment/prompt-build pipeline.\n * Used by buildPromptFromMessage and related helpers.\n */\nexport interface SessionContext {\n  userId: number;\n  topicName?: string;\n  userDir?: string;\n  sessionType?: \"dm\" | \"forum\" | \"ephemeral\" | \"manager\" | \"cron\";\n}\n\nexport interface TokenUsage {\n  /** Aggregate billable input across every model call made during this turn. */\n  inputTokens: number;\n  outputTokens: number;\n  cacheCreationInputTokens?: number;\n  cacheReadInputTokens?: number;\n  /** Provider-reported query cost when available. */\n  costUsd?: number;\n  /** Tokens occupied by the latest model call, not aggregate turn spend. */\n  contextTokens?: number;\n  /** Provider-reported context window for the latest model call. */\n  contextWindow?: number;\n}\n\n/** Agent identifier — one of the supported AI provider backends. */\nexport type AgentKind = \"maestro\" | \"claude\" | \"codex\";\n\nexport const SUPPORTED_AGENTS: readonly AgentKind[] = [\"maestro\", \"claude\", \"codex\"] as const;\n\nexport function isAgentKind(value: unknown): value is AgentKind {\n  return typeof value === \"string\" && (SUPPORTED_AGENTS as readonly string[]).includes(value);\n}\n\n/**\n * Per-agent supported reasoning efforts. Single source of truth for both the\n * `EffortLevel` type and each registry's `validEfforts` runtime list — the\n * registries import these directly so adding a value in one place\n * propagates to validation, footer rendering, and zod enums.\n *\n * Claude SDK rejects 'minimal'; Codex SDK rejects 'max'. The two sets\n * intersect on low/medium/high/xhigh. Maestro (TS port) currently piggybacks\n * on the Anthropic provider, so its efforts mirror the Claude set; this can\n * narrow per-provider once Phase 5 lands.\n *\n * 'minimal' removed from codex: Codex API rejects it when default tools\n * (image_gen, web_search) are active, making agent sessions unusable.\n */\nexport const CLAUDE_EFFORT_VALUES = [\"low\", \"medium\", \"high\", \"xhigh\", \"max\"] as const;\nexport const CODEX_EFFORT_VALUES = [\"low\", \"medium\", \"high\", \"xhigh\", \"max\"] as const;\nexport const MAESTRO_EFFORT_VALUES = [\"low\", \"medium\", \"high\", \"xhigh\", \"max\"] as const;\n\nexport type EffortLevel =\n  | (typeof CLAUDE_EFFORT_VALUES)[number]\n  | (typeof CODEX_EFFORT_VALUES)[number]\n  | (typeof MAESTRO_EFFORT_VALUES)[number];\n\n/**\n * Runtime iteration list (used by zod enums and any callers that need to\n * loop over every accepted value). Manually ordered for readability; the\n * `satisfies` check fails the build if an entry here isn't covered by the\n * per-agent unions above.\n */\nexport const EFFORT_VALUES = [\n  \"low\",\n  \"medium\",\n  \"high\",\n  \"xhigh\",\n  \"max\",\n] as const satisfies readonly EffortLevel[];\n\n/**\n * Normalized events yielded by any agent provider (claudeProvider, codexProvider).\n * The handler/event-processor consumes these without caring which backend produced them.\n *\n * `user_message` is the lone \"into-the-log\" variant — no provider yields it.\n * The query handler writes it directly to the conversation log right before\n * `runAgent()` starts, so cross-agent rollout reconstruction can pair every\n * assistant turn with the user prompt that triggered it. Consumers that only\n * react to provider output (e.g. processAgentEvent) can safely ignore it.\n */\n/**\n * Wire-safe projection of one task, carried by the `tasks` UnifiedEvent.\n *\n * This is also the on-disk shape of Otium's shared task store, so claude,\n * codex, and maestro render the same live panel from the same source of truth.\n */\nexport interface TaskSnapshot {\n  id: string;\n  subject: string;\n  status: \"pending\" | \"in_progress\" | \"completed\";\n  /** Task ids this one is blocked by; omitted when empty. */\n  blockedBy?: string[];\n  /** Present-continuous label for spinners, when set. */\n  activeForm?: string;\n  /** Owner / agent name for multi-agent runs, when set. */\n  owner?: string;\n}\n\nexport type UnifiedEvent =\n  | {\n      type: \"user_message\";\n      content: string;\n      synthetic?: \"compaction\";\n      /** Total ordered user submissions represented by one preempting provider turn. */\n      consecutiveBatchSize?: number;\n      /** Zero-based position within the ordered preemption batch. */\n      consecutiveBatchIndex?: number;\n    }\n  | { type: \"session\"; sessionId: string }\n  | {\n      type: \"tool_use\";\n      name: string;\n      input: Record<string, unknown>;\n      /** Provider-assigned id so the client can match tool_use→tool_result pairs. */\n      toolUseId?: string;\n    }\n  | { type: \"tool_progress\"; toolName: string; elapsed: number }\n  | { type: \"tool_use_summary\"; summary: string }\n  // Provider reasoning/thinking summary text (Codex `reasoning` items; Claude\n  // extended-thinking). Surfaced so background runs (cron/archiver) show the\n  // agent's thought process, not just tool calls.\n  | { type: \"reasoning\"; content: string }\n  // Full task-list snapshot (replace, not delta) from Otium's shared task\n  // store. Provider-native task/todo stores are not authoritative.\n  | { type: \"tasks\"; tasks: TaskSnapshot[] }\n  | {\n      type: \"tool_result\";\n      toolUseId: string;\n      content: string;\n      /** True when the tool call failed; absent/false means success. */\n      isError?: boolean;\n      metadata?: {\n        truncatedForModel: boolean;\n        originalBytes: number;\n        returnedBytes: number;\n        omittedBytes?: number;\n        outputPath?: string;\n      };\n    }\n  | { type: \"text_delta\"; content: string }\n  | { type: \"text\"; content: string }\n  | { type: \"result\"; content: string; stopReason: string; usage?: TokenUsage }\n  | { type: \"file\"; path: string; source: string; origin: \"tag\" | \"extension\" }\n  | {\n      type: \"error\";\n      content: string;\n      usage?: TokenUsage;\n      code?: \"budget_exceeded\";\n    }\n  | { type: \"status\"; content: string };\n\nexport interface AgentInputAttachment {\n  id: string;\n  type: \"image\" | \"file\" | \"audio\";\n  filename: string;\n  mimeType: string;\n  sizeBytes: number;\n  path: string;\n}\n\n/** Worker-side runtime tools proxy user-facing state back to the canonical\n * hub topic identified here. */\nexport interface PeerRuntimeBridgeContext {\n  hubCellId: string;\n  hostTopicId: string;\n  hostQueryId: string;\n  canSpawnSubagents: boolean;\n}\n\nexport interface AgentQueryOptions {\n  agent: AgentKind;\n  prompt: string;\n  attachments?: AgentInputAttachment[];\n  sessionId?: string | null;\n  cwd: string;\n  systemPrompt: string;\n  userId?: string;\n  session?: string;\n  playwrightPort?: number;\n  playwrightCapability?: string;\n  bgBashPort?: number;\n  sessionType?: \"dm\" | \"forum\" | \"ephemeral\" | \"manager\" | \"cron\";\n  /** API topic id (REST/WS world). Carries per-query topic context for MCP servers. */\n  topicId?: string;\n  /** Direct parent topic id when this query runs inside a subagent room. */\n  subagentParentTopicId?: string;\n  /** API query id for the currently running turn. Used by runtime MCP tools. */\n  queryId?: string;\n  /** Optional wiki-memory topic id. Derived topics use their root origin here\n   *  while other per-topic MCP servers keep `topicId` bound to the live room. */\n  wikiTopicId?: string;\n  /** Whether self-config MCP may enqueue an automatic continue turn after set_* changes. */\n  autoContinue?: boolean;\n  /** Expose Otium-only visual panel tools for this turn. Default-deny. */\n  visualTools?: boolean;\n  /** Expose adapter-backed file-delivery tools for this turn. Default-deny. */\n  fileDeliveryTools?: boolean;\n  abortController?: AbortController;\n  model?: string;\n  /** Provider-side hard budget when the selected SDK supports one. */\n  maxBudgetUsd?: number;\n  depth?: number;\n  agents?: Record<\n    string,\n    {\n      description: string;\n      prompt: string;\n      model?: string;\n      tools?: string[];\n      maxTurns?: number;\n      effort?: EffortLevel | number;\n    }\n  >;\n  effort?: EffortLevel;\n  /**\n   * Per-API-call `max_tokens` ceiling on the assistant's output. Wired\n   * through to the underlying provider request body for every agent\n   * (claude/codex/maestro). Omit to inherit each provider SDK's per-model\n   * default — for maestro that's the v0.1.21+ `getNativeMaxOutputTokens`\n   * catalog (deepseek-pro=64K, kimi-k3=64K, kimi-k2.7-code=32K).\n   *\n   * Pass an explicit number when a specific topic / surface needs a tighter\n   * latency cap or a higher ceiling for long-form generation (legal\n   * report writing, multi-K Write/Edit file bodies). Pre-0.1.21 maestro\n   * builds silently clamped at 4096 and truncated outputs mid-string;\n   * setting this field is now the supported way to lift that ceiling.\n   */\n  maxTokens?: number;\n  /**\n   * v0.1.22+: Claude-Code-style deferred tool catalog + `ToolSearch` built-in.\n   *\n   * Wired straight through to `maestro-agent-sdk`'s\n   * `AgentQueryOptions.enableToolSearch`. When `true`, the maestro provider\n   * registers every MCP tool as deferred — schemas stay off the wire until\n   * the model promotes them via `ToolSearch(\"select:Name1,Name2\")` or\n   * `ToolSearch(\"keyword\")`. Active set persists across resume.\n   *\n   * Otium's maestro provider supplies `true` when the caller leaves this\n   * option unset, because most forum turns carry enough MCP surface for the\n   * reminder-token savings to outweigh the first-use `ToolSearch` round-trip.\n   * Callers can still pass `false` per call when a narrow surface or\n   * latency-sensitive workflow is better served by eager MCP schemas.\n   *\n   * No-op for claude / codex agents — they have their own deferred-tool\n   * machinery owned by their respective SDKs.\n   */\n  enableToolSearch?: boolean;\n  /**\n   * Bounded tool results with the full output kept on disk.\n   *\n   * Wired to `maestro-agent-sdk`'s `AgentQueryOptions.toolResultTruncation`.\n   * The SDK caps a string tool result, writes the untruncated bytes to a file,\n   * and splices an opaque `maestro://tool-output/<id>` reference into the text\n   * that the `ReadToolOutput` tool can page back through.\n   *\n   * The maestro provider enables it by default. Left unset, every tool result\n   * — a whole-file `Read`, a wide `Grep`, a `WebFetch` of a large page —\n   * entered the context at full size, and the `\"ReadToolOutput\"` entry in the\n   * provider's builtin list was dead, because the SDK only registers that tool\n   * when truncation is on with `saveFullOutput`.\n   *\n   * Pass an explicit object to tune the budget, or `{ enabled: false }` for a\n   * call whose tool results must arrive whole.\n   *\n   * No-op for claude / codex agents — their SDKs do their own truncation.\n   */\n  toolResultTruncation?: {\n    enabled?: boolean;\n    maxBytes?: number;\n    headBytes?: number;\n    tailBytes?: number;\n    saveFullOutput?: boolean;\n    outputDir?: string;\n    retentionDays?: number;\n    ignoreTools?: string[];\n  };\n  /**\n   * Claude-Code-compatible exact tool denylist. Maestro v0.1.42+ hides these\n   * tools from provider schemas / ToolSearch and blocks dispatch if a stale\n   * call still arrives. Claude maps this to its SDK option. Codex does not\n   * support this name-based list; its provider-native multi-agent tool family\n   * is disabled separately through the Codex feature config.\n   */\n  disallowedTools?: readonly string[];\n  /**\n   * Hard provider tool policy for auxiliary model calls.\n   *\n   * `\"none\"` removes MCP and provider-native tools before the request is\n   * dispatched. `\"compaction-log\"` keeps provider-native tools disabled and\n   * exposes only the host-scoped immutable log reader. Use these for untrusted\n   * transcript transforms; reacting to tool events after dispatch is not a\n   * security boundary.\n   */\n  toolPolicy?: \"none\" | \"compaction-log\";\n  mcpEnabled?: string[] | null;\n  peerBridge?: PeerRuntimeBridgeContext;\n  mcpExtra?: Record<string, unknown>;\n  /**\n   * true for silent fork runs generating ask_session replies — restricts session-comm\n   * outbound tools (ask/tell/abort) so the forked session can only produce text\n   */\n  silent?: boolean;\n}\n\n/** State file written to data/users/{userId}/active-queries/{topicId}.json while a query is running. */\nexport interface QueryState {\n  topicId?: string;\n  topicName?: string;\n  task?: string; // first 100 chars of prompt, newlines normalized\n  since: string; // ISO timestamp\n}\n",
     "import type { ChildProcess } from \"node:child_process\";\nimport { resolve } from \"node:path\";\n\n/** Revalidate that readiness still belongs to the same live child before publication. */\nexport function isLiveOwnedChildProcess(\n  current: { process: ChildProcess } | undefined,\n  expected: ChildProcess,\n): boolean {\n  return (\n    current?.process === expected &&\n    expected.exitCode === null &&\n    expected.signalCode === null &&\n    !expected.killed\n  );\n}\n\n/** Require a health response that could only come from this exact wrapper spawn. */\nexport function matchesSpawnedBrowserHealth(health: unknown, expectedSpawnNonce: string): boolean {\n  if (!health || typeof health !== \"object\") return false;\n  const candidate = health as Record<string, unknown>;\n  return (\n    candidate.ok === true &&\n    candidate.name === \"negotium-browser-gateway\" &&\n    candidate.spawnNonce === expectedSpawnNonce\n  );\n}\n\n/** Select an idle instance while excluding active borrowers and lifecycle work. */\nexport function selectIdleEvictionKey(\n  candidates: Iterable<[string, { lastUsedAt: number }]>,\n  pinnedKeys: Iterable<string>,\n  busyKeys: Iterable<string>,\n  now: number,\n  maxIdleMs: number,\n): string | null {\n  const pinned = new Set(pinnedKeys);\n  const busy = new Set(busyKeys);\n  let oldest: { key: string; lastUsedAt: number } | null = null;\n  for (const [key, instance] of candidates) {\n    if (pinned.has(key) || busy.has(key)) continue;\n    if (now - instance.lastUsedAt < maxIdleMs) continue;\n    if (!oldest || instance.lastUsedAt < oldest.lastUsedAt) {\n      oldest = { key, lastUsedAt: instance.lastUsedAt };\n    }\n  }\n  return oldest?.key ?? null;\n}\n\n/** Select a currently unreserved and unoccupied port without mutating state. */\nexport function selectReusablePort(\n  minPort: number,\n  maxPort: number,\n  reservedPorts: ReadonlySet<number>,\n  isOccupied: (port: number) => boolean,\n): number | null {\n  for (let port = minPort; port <= maxPort; port++) {\n    if (reservedPorts.has(port) || isOccupied(port)) continue;\n    return port;\n  }\n  return null;\n}\n\n/** Parse space- and equals-style `--user-data-dir` process arguments. */\nexport function extractUserDataDirArg(cmdline: string): string | null {\n  const match = cmdline.match(/--user-data-dir(?:\\s+|=)(\\S+)/);\n  return match ? match[1] : null;\n}\n\n/** Require positive command-line proof before killing a profile-scoped process. */\nexport function browserProcessMatchesExpectedProfile(\n  cmdline: string,\n  expectedUserDataDir: string,\n): boolean {\n  const actualUserDataDir = extractUserDataDirArg(cmdline);\n  return actualUserDataDir !== null && resolve(actualUserDataDir) === resolve(expectedUserDataDir);\n}\n\n/** Wait for an actual process exit; ChildProcess.killed only means a signal was sent. */\nexport function waitForChildProcessExit(proc: ChildProcess, timeoutMs: number): Promise<boolean> {\n  if (proc.exitCode !== null || proc.signalCode !== null) return Promise.resolve(true);\n\n  return new Promise<boolean>((resolveWait) => {\n    let settled = false;\n    let timer: ReturnType<typeof setTimeout>;\n    const finish = (exited: boolean) => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      proc.off(\"exit\", onExit);\n      resolveWait(exited);\n    };\n    const onExit = () => finish(true);\n\n    proc.once(\"exit\", onExit);\n    timer = setTimeout(() => finish(proc.exitCode !== null || proc.signalCode !== null), timeoutMs);\n    if (typeof timer === \"object\") timer.unref?.();\n\n    // Close the gap between the initial state check and listener registration.\n    if (proc.exitCode !== null || proc.signalCode !== null) finish(true);\n  });\n}\n\n/** Reject immediately when the OS cannot launch a child process. */\nexport function waitForChildProcessSpawnError(proc: Pick<ChildProcess, \"once\">): Promise<never> {\n  return new Promise<never>((_resolve, reject) => {\n    proc.once(\"error\", reject);\n  });\n}\n",
-    "import { mkdirSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { Database } from \"#storage/sqlite\";\nimport type { StorageDatabase, StorageHostConfig } from \"#storage/storage-contract\";\n\nexport type {\n  StorageDatabase,\n  StorageDatabaseAdapter,\n  StorageDatabaseInput,\n  StorageHostConfig,\n  StorageHostOptions,\n  StorageStatement,\n  StorageTransaction,\n} from \"#storage/storage-contract\";\n\nlet configuredHost: Readonly<StorageHostConfig> = {};\ntype InternalStorageDatabase = InstanceType<typeof Database>;\ntype OwnedStorageDatabase = InternalStorageDatabase & { close(): void };\nlet fallbackDatabase: OwnedStorageDatabase | null = null;\nlet fallbackDatabasePath: string | null = null;\n\ninterface StorageHostFrame {\n  active: boolean;\n  patch: Readonly<StorageHostConfig>;\n}\n\nconst storageHostFrames: StorageHostFrame[] = [];\n\ntype StorageSchemaInitializer = (database: InternalStorageDatabase) => void;\ninterface RegisteredSchemaInitializer {\n  initialize: StorageSchemaInitializer;\n  priority: number;\n}\n\nconst schemaInitializers: RegisteredSchemaInitializer[] = [];\nconst initializedSchemas = new WeakMap<InternalStorageDatabase, Set<StorageSchemaInitializer>>();\nconst initializingDatabases = new WeakSet<InternalStorageDatabase>();\n\nfunction envPath(name: string, fallback: string): string {\n  const value = process.env[name]?.trim();\n  return resolve(value || fallback);\n}\n\nfunction defaultStateDir(): string {\n  return envPath(\"NEGOTIUM_STATE_DIR\", join(homedir(), \".negotium\"));\n}\n\nfunction defaultDataDir(): string {\n  return envPath(\"NEGOTIUM_DATA_DIR\", join(defaultStateDir(), \"data\"));\n}\n\nfunction defaultLogDir(): string {\n  return envPath(\"NEGOTIUM_LOG_DIR\", join(defaultStateDir(), \"logs\"));\n}\n\nfunction defaultWorkspaceDir(): string {\n  return envPath(\"NEGOTIUM_WORKSPACE_DIR\", join(defaultStateDir(), \"workspace\"));\n}\n\nfunction defaultSessionAsksDir(): string {\n  const runDir = envPath(\"NEGOTIUM_RUN_DIR\", join(defaultStateDir(), \"runtime\"));\n  return join(runDir, \"session-asks\");\n}\n\nfunction defaultSessionsDatabasePath(): string {\n  return envPath(\"SESSIONS_DB_PATH\", join(resolveStorageDataDir(), \"sessions.db\"));\n}\n\nfunction initializeDatabase(database: InternalStorageDatabase): void {\n  // busy_timeout FIRST. Switching to WAL needs a brief exclusive lock, so when\n  // two processes open the same database at the same moment — the node daemon\n  // and an adapter, or two MCP servers — one of them hits SQLITE_BUSY. With the\n  // timeout configured afterwards there was no retry budget in effect for the\n  // statement that needed it most, and the loser died with \"database is locked\"\n  // during startup. Measured with four processes racing one fresh file: 60/100\n  // opens failed in the old order, 0/100 with the timeout set first.\n  database.exec(\"PRAGMA busy_timeout = 5000\");\n  database.exec(\"PRAGMA journal_mode = WAL\");\n  database.exec(\"PRAGMA foreign_keys = ON\");\n  database.exec(\"PRAGMA wal_autocheckpoint = 1000\");\n  try {\n    database.exec(\"PRAGMA wal_checkpoint(TRUNCATE)\");\n  } catch {\n    // Non-fatal; a concurrent writer may hold the WAL briefly.\n  }\n}\n\nfunction defaultDatabase(): InternalStorageDatabase {\n  const path = defaultSessionsDatabasePath();\n  if (fallbackDatabase && fallbackDatabasePath === path) return fallbackDatabase;\n  if (fallbackDatabase) fallbackDatabase.close();\n  mkdirSync(dirname(path), { recursive: true });\n  fallbackDatabase = new Database(path, { create: true }) as unknown as OwnedStorageDatabase;\n  fallbackDatabasePath = path;\n  initializeDatabase(fallbackDatabase);\n  return fallbackDatabase;\n}\n\nexport function resolveStorageDatabase(): InternalStorageDatabase {\n  return (configuredHost.database ?? defaultDatabase()) as InternalStorageDatabase;\n}\n\nexport function resolveStorageDataDir(): string {\n  return configuredHost.dataDir ?? defaultDataDir();\n}\n\nexport function resolveStorageLogDir(): string {\n  return configuredHost.logDir ?? defaultLogDir();\n}\n\nexport function resolveStorageSessionAsksDir(): string {\n  return configuredHost.sessionAsksDir ?? defaultSessionAsksDir();\n}\n\nexport function resolveStorageWorkspaceDir(): string {\n  return configuredHost.workspaceDir ?? defaultWorkspaceDir();\n}\n\nexport function resolveStorageSharedWikiDir(): string {\n  return configuredHost.sharedWikiDir ?? join(resolveStorageWorkspaceDir(), \"wiki\");\n}\n\nexport function resolveStorageUsersLogDir(): string {\n  return configuredHost.usersLogDir ?? join(resolveStorageDataDir(), \"users\");\n}\n\nconst STORAGE_PATH_KEYS = [\n  \"dataDir\",\n  \"logDir\",\n  \"sessionAsksDir\",\n  \"workspaceDir\",\n  \"sharedWikiDir\",\n  \"usersLogDir\",\n] as const;\n\nfunction normalizeStorageHostPatch(options: StorageHostConfig): Readonly<StorageHostConfig> {\n  const patch: StorageHostConfig = {};\n  if (options.database !== undefined) {\n    options.database.exec(\"PRAGMA foreign_keys = ON\");\n    patch.database = options.database;\n  }\n  for (const key of STORAGE_PATH_KEYS) {\n    const value = options[key];\n    if (value === undefined) continue;\n    if (!value.trim()) throw new TypeError(`${key} must not be empty`);\n    patch[key] = resolve(value);\n  }\n  return Object.freeze(patch);\n}\n\nfunction refreshConfiguredHost(): void {\n  configuredHost = Object.freeze(\n    Object.assign(\n      {},\n      ...storageHostFrames.filter((frame) => frame.active).map((frame) => frame.patch),\n    ),\n  );\n}\n\n/**\n * Configure the process-local storage boundary for an embedding host.\n *\n * Resolution is lazy: importing `negotium/storage` never opens a database or\n * touches a filesystem path. The returned disposer restores the exact prior\n * host, which keeps tests and nested embeddings isolated.\n */\nexport function configureStorageHost(options: StorageHostConfig): () => void {\n  const frame: StorageHostFrame = { active: true, patch: normalizeStorageHostPatch(options) };\n  storageHostFrames.push(frame);\n  refreshConfiguredHost();\n  return () => {\n    if (!frame.active) return;\n    frame.active = false;\n    const index = storageHostFrames.indexOf(frame);\n    if (index >= 0) storageHostFrames.splice(index, 1);\n    refreshConfiguredHost();\n  };\n}\n\n/** Remove every configured host layer and restore standalone fallbacks. */\nexport function resetStorageHost(): void {\n  for (const frame of storageHostFrames) frame.active = false;\n  storageHostFrames.length = 0;\n  refreshConfiguredHost();\n}\n\n/** Close only Negotium's fallback connection. Injected connections are borrowed. */\nexport function closeStorageDatabase(): void {\n  if (!fallbackDatabase) return;\n  fallbackDatabase.close();\n  fallbackDatabase = null;\n  fallbackDatabasePath = null;\n}\n\nexport function registerStorageSchemaInitializer(\n  initialize: StorageSchemaInitializer,\n  priority = 100,\n): void {\n  schemaInitializers.push({ initialize, priority });\n  schemaInitializers.sort((a, b) => a.priority - b.priority);\n}\n\nexport function ensureStorageSchemas(\n  database: InternalStorageDatabase = resolveStorageDatabase(),\n): void {\n  if (initializingDatabases.has(database)) return;\n  let initialized = initializedSchemas.get(database);\n  if (!initialized) {\n    initialized = new Set();\n    initializedSchemas.set(database, initialized);\n  }\n  initializingDatabases.add(database);\n  try {\n    for (const entry of schemaInitializers) {\n      if (initialized.has(entry.initialize)) continue;\n      // Mark first so a migration that calls through the public db proxy does\n      // not recursively invoke itself. Remove on failure so the next call can retry.\n      initialized.add(entry.initialize);\n      try {\n        entry.initialize(database);\n      } catch (error) {\n        initialized.delete(entry.initialize);\n        throw error;\n      }\n    }\n  } finally {\n    initializingDatabases.delete(database);\n  }\n}\n\n/** Stable proxy identity used by legacy imports and embedding hosts. */\nexport const internalStorageDatabase = new Proxy({} as InternalStorageDatabase, {\n  get(_target, property) {\n    const database = resolveStorageDatabase();\n    ensureStorageSchemas(database);\n    const value = Reflect.get(database as object, property, database);\n    return typeof value === \"function\" ? value.bind(database) : value;\n  },\n  set(_target, property, value) {\n    const database = resolveStorageDatabase();\n    ensureStorageSchemas(database);\n    return Reflect.set(database as object, property, value, database);\n  },\n});\n\n/** Structurally typed view intended for embedding hosts. */\nexport const storageDatabase = internalStorageDatabase as unknown as StorageDatabase;\n",
+    "import { mkdirSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { Database } from \"#storage/sqlite\";\nimport type { StorageDatabase, StorageHostConfig } from \"#storage/storage-contract\";\n\nexport type {\n  StorageDatabase,\n  StorageDatabaseAdapter,\n  StorageDatabaseInput,\n  StorageHostConfig,\n  StorageHostOptions,\n  StorageStatement,\n  StorageTransaction,\n} from \"#storage/storage-contract\";\n\nlet configuredHost: Readonly<StorageHostConfig> = {};\ntype InternalStorageDatabase = InstanceType<typeof Database>;\ntype OwnedStorageDatabase = InternalStorageDatabase & { close(): void };\nlet fallbackDatabase: OwnedStorageDatabase | null = null;\nlet fallbackDatabasePath: string | null = null;\n\ninterface StorageHostFrame {\n  active: boolean;\n  patch: Readonly<StorageHostConfig>;\n}\n\nconst storageHostFrames: StorageHostFrame[] = [];\n\ntype StorageSchemaInitializer = (database: InternalStorageDatabase) => void;\ninterface RegisteredSchemaInitializer {\n  initialize: StorageSchemaInitializer;\n  priority: number;\n}\n\nconst schemaInitializers: RegisteredSchemaInitializer[] = [];\nconst initializedSchemas = new WeakMap<InternalStorageDatabase, Set<StorageSchemaInitializer>>();\nconst initializingDatabases = new WeakSet<InternalStorageDatabase>();\n\nfunction envPath(name: string, fallback: string): string {\n  const value = process.env[name]?.trim();\n  return resolve(value || fallback);\n}\n\nfunction defaultStateDir(): string {\n  return envPath(\"NEGOTIUM_STATE_DIR\", join(homedir(), \".negotium\"));\n}\n\nfunction defaultDataDir(): string {\n  return envPath(\"NEGOTIUM_DATA_DIR\", join(defaultStateDir(), \"data\"));\n}\n\nfunction defaultLogDir(): string {\n  return envPath(\"NEGOTIUM_LOG_DIR\", join(defaultStateDir(), \"logs\"));\n}\n\nfunction defaultWorkspaceDir(): string {\n  return envPath(\"NEGOTIUM_WORKSPACE_DIR\", join(defaultStateDir(), \"workspace\"));\n}\n\nfunction defaultSessionAsksDir(): string {\n  const runDir = envPath(\"NEGOTIUM_RUN_DIR\", join(defaultStateDir(), \"runtime\"));\n  return join(runDir, \"session-asks\");\n}\n\nfunction defaultSessionsDatabasePath(): string {\n  return envPath(\"SESSIONS_DB_PATH\", join(resolveStorageDataDir(), \"sessions.db\"));\n}\n\nconst SQLITE_INIT_RETRY_MS = 25;\nconst SQLITE_INIT_TIMEOUT_MS = 5_000;\nconst SQLITE_INIT_SLEEP = new Int32Array(new SharedArrayBuffer(Int32Array.BYTES_PER_ELEMENT));\n\nfunction isSqliteBusy(error: unknown): boolean {\n  const message = error instanceof Error ? error.message : String(error);\n  return /database is (?:locked|busy)|SQLITE_(?:BUSY|LOCKED)/i.test(message);\n}\n\nfunction execWithBusyRetry(\n  database: InternalStorageDatabase,\n  sql: string,\n  timeoutMs = SQLITE_INIT_TIMEOUT_MS,\n): void {\n  const deadline = Date.now() + timeoutMs;\n  while (true) {\n    try {\n      database.exec(sql);\n      return;\n    } catch (error) {\n      if (!isSqliteBusy(error) || Date.now() >= deadline) throw error;\n      Atomics.wait(SQLITE_INIT_SLEEP, 0, 0, Math.min(SQLITE_INIT_RETRY_MS, deadline - Date.now()));\n    }\n  }\n}\n\nexport function initializeDatabase(database: InternalStorageDatabase): void {\n  // busy_timeout FIRST. Switching to WAL needs a brief exclusive lock, so when\n  // two processes open the same database at the same moment — the node daemon\n  // and an adapter, or two MCP servers — one of them hits SQLITE_BUSY. With the\n  // timeout configured afterwards there was no retry budget in effect for the\n  // statement that needed it most. Older Bun releases can still surface\n  // SQLITE_BUSY immediately for journal_mode, so keep a bounded host-level\n  // retry around that one exclusive transition as well.\n  database.exec(\"PRAGMA busy_timeout = 5000\");\n  execWithBusyRetry(database, \"PRAGMA journal_mode = WAL\");\n  database.exec(\"PRAGMA foreign_keys = ON\");\n  database.exec(\"PRAGMA wal_autocheckpoint = 1000\");\n  try {\n    database.exec(\"PRAGMA wal_checkpoint(TRUNCATE)\");\n  } catch {\n    // Non-fatal; a concurrent writer may hold the WAL briefly.\n  }\n}\n\nfunction defaultDatabase(): InternalStorageDatabase {\n  const path = defaultSessionsDatabasePath();\n  if (fallbackDatabase && fallbackDatabasePath === path) return fallbackDatabase;\n  if (fallbackDatabase) fallbackDatabase.close();\n  mkdirSync(dirname(path), { recursive: true });\n  fallbackDatabase = new Database(path, { create: true }) as unknown as OwnedStorageDatabase;\n  fallbackDatabasePath = path;\n  initializeDatabase(fallbackDatabase);\n  return fallbackDatabase;\n}\n\nexport function resolveStorageDatabase(): InternalStorageDatabase {\n  return (configuredHost.database ?? defaultDatabase()) as InternalStorageDatabase;\n}\n\nexport function resolveStorageDataDir(): string {\n  return configuredHost.dataDir ?? defaultDataDir();\n}\n\nexport function resolveStorageLogDir(): string {\n  return configuredHost.logDir ?? defaultLogDir();\n}\n\nexport function resolveStorageSessionAsksDir(): string {\n  return configuredHost.sessionAsksDir ?? defaultSessionAsksDir();\n}\n\nexport function resolveStorageWorkspaceDir(): string {\n  return configuredHost.workspaceDir ?? defaultWorkspaceDir();\n}\n\nexport function resolveStorageSharedWikiDir(): string {\n  return configuredHost.sharedWikiDir ?? join(resolveStorageWorkspaceDir(), \"wiki\");\n}\n\nexport function resolveStorageUsersLogDir(): string {\n  return configuredHost.usersLogDir ?? join(resolveStorageDataDir(), \"users\");\n}\n\nconst STORAGE_PATH_KEYS = [\n  \"dataDir\",\n  \"logDir\",\n  \"sessionAsksDir\",\n  \"workspaceDir\",\n  \"sharedWikiDir\",\n  \"usersLogDir\",\n] as const;\n\nfunction normalizeStorageHostPatch(options: StorageHostConfig): Readonly<StorageHostConfig> {\n  const patch: StorageHostConfig = {};\n  if (options.database !== undefined) {\n    options.database.exec(\"PRAGMA foreign_keys = ON\");\n    patch.database = options.database;\n  }\n  for (const key of STORAGE_PATH_KEYS) {\n    const value = options[key];\n    if (value === undefined) continue;\n    if (!value.trim()) throw new TypeError(`${key} must not be empty`);\n    patch[key] = resolve(value);\n  }\n  return Object.freeze(patch);\n}\n\nfunction refreshConfiguredHost(): void {\n  configuredHost = Object.freeze(\n    Object.assign(\n      {},\n      ...storageHostFrames.filter((frame) => frame.active).map((frame) => frame.patch),\n    ),\n  );\n}\n\n/**\n * Configure the process-local storage boundary for an embedding host.\n *\n * Resolution is lazy: importing `negotium/storage` never opens a database or\n * touches a filesystem path. The returned disposer restores the exact prior\n * host, which keeps tests and nested embeddings isolated.\n */\nexport function configureStorageHost(options: StorageHostConfig): () => void {\n  const frame: StorageHostFrame = { active: true, patch: normalizeStorageHostPatch(options) };\n  storageHostFrames.push(frame);\n  refreshConfiguredHost();\n  return () => {\n    if (!frame.active) return;\n    frame.active = false;\n    const index = storageHostFrames.indexOf(frame);\n    if (index >= 0) storageHostFrames.splice(index, 1);\n    refreshConfiguredHost();\n  };\n}\n\n/** Remove every configured host layer and restore standalone fallbacks. */\nexport function resetStorageHost(): void {\n  for (const frame of storageHostFrames) frame.active = false;\n  storageHostFrames.length = 0;\n  refreshConfiguredHost();\n}\n\n/** Close only Negotium's fallback connection. Injected connections are borrowed. */\nexport function closeStorageDatabase(): void {\n  if (!fallbackDatabase) return;\n  fallbackDatabase.close();\n  fallbackDatabase = null;\n  fallbackDatabasePath = null;\n}\n\nexport function registerStorageSchemaInitializer(\n  initialize: StorageSchemaInitializer,\n  priority = 100,\n): void {\n  schemaInitializers.push({ initialize, priority });\n  schemaInitializers.sort((a, b) => a.priority - b.priority);\n}\n\nexport function ensureStorageSchemas(\n  database: InternalStorageDatabase = resolveStorageDatabase(),\n): void {\n  if (initializingDatabases.has(database)) return;\n  let initialized = initializedSchemas.get(database);\n  if (!initialized) {\n    initialized = new Set();\n    initializedSchemas.set(database, initialized);\n  }\n  initializingDatabases.add(database);\n  try {\n    for (const entry of schemaInitializers) {\n      if (initialized.has(entry.initialize)) continue;\n      // Mark first so a migration that calls through the public db proxy does\n      // not recursively invoke itself. Remove on failure so the next call can retry.\n      initialized.add(entry.initialize);\n      try {\n        entry.initialize(database);\n      } catch (error) {\n        initialized.delete(entry.initialize);\n        throw error;\n      }\n    }\n  } finally {\n    initializingDatabases.delete(database);\n  }\n}\n\n/** Stable proxy identity used by legacy imports and embedding hosts. */\nexport const internalStorageDatabase = new Proxy({} as InternalStorageDatabase, {\n  get(_target, property) {\n    const database = resolveStorageDatabase();\n    ensureStorageSchemas(database);\n    const value = Reflect.get(database as object, property, database);\n    return typeof value === \"function\" ? value.bind(database) : value;\n  },\n  set(_target, property, value) {\n    const database = resolveStorageDatabase();\n    ensureStorageSchemas(database);\n    return Reflect.set(database as object, property, value, database);\n  },\n});\n\n/** Structurally typed view intended for embedding hosts. */\nexport const storageDatabase = internalStorageDatabase as unknown as StorageDatabase;\n",
     "// Runtime-adaptive SQLite façade.\n//\n// Why this exists: Otium normally runs on bun and uses `bun:sqlite` (native,\n// fast, zero-build). But the `codex` agent's MCP servers must run on pure node\n// — codex 0.135's rmcp stdio client can't handshake with bun-spawned servers\n// (see serverLaunch in platform/mcp-config.ts). `bun:sqlite` doesn't exist\n// under node, so any MCP server that touches the DB would crash on import.\n//\n// This module picks the backend at runtime and re-exports it as `Database`:\n//   - under bun  → the real `bun:sqlite` Database (unchanged behavior)\n//   - under node → a thin shim over node:sqlite's DatabaseSync exposing the\n//     exact subset Otium uses: new Database(path, {readonly?,create?}),\n//     .query()/.prepare() → statement, .exec(), .run(), .transaction(fn),\n//     .close(); statements support positional `?` params via .run()/.get()/\n//     .all(). (No named-object params / .values()/.iterate()/.as() are used in\n//     this codebase, so the shim intentionally omits them.)\n//\n// The TYPE of the exported `Database` is bun:sqlite's own class type (imported\n// type-only, so it's erased at runtime and never resolved under node). That\n// keeps every existing call site — including generic `.query<Row, Params>()`\n// usages — type-checking exactly as before with zero changes.\n//\n// The bun branch uses a dynamic import so node never resolves the `bun:sqlite`\n// specifier (dead code under node), and the node branch's `node:sqlite` import\n// never runs under bun.\n\nimport type { Database as BunDatabase } from \"bun:sqlite\";\n\n// `mock.module()` can replace the Bun global while a test graph is being\n// evaluated. The runtime version flag is stable and is also the documented\n// cross-runtime discriminator.\nconst isBun = typeof process.versions.bun === \"string\";\n\ntype DatabaseCtor = typeof BunDatabase;\n\nlet Database: DatabaseCtor;\n\nif (isBun) {\n  ({ Database } = await import(\"bun:sqlite\"));\n} else {\n  // node:sqlite has no type declarations under our tsconfig (`types: bun-types`\n  // only), and `bun-types` doesn't ship them — so type the dynamic import\n  // locally and use a `string` specifier to keep tsc from trying to resolve it.\n  type NodeStatement = {\n    run(...params: unknown[]): unknown;\n    get(...params: unknown[]): unknown;\n    all(...params: unknown[]): unknown[];\n  };\n  type NodeDatabaseSync = {\n    prepare(sql: string): NodeStatement;\n    exec(sql: string): void;\n    close(): void;\n  };\n  type NodeSqliteModule = {\n    DatabaseSync: new (path: string, options?: { readOnly?: boolean }) => NodeDatabaseSync;\n  };\n  // Keep Bun's resolver from eagerly resolving the Node-only builtin even\n  // though this branch is dead there (notably under `bun test` + mock.module).\n  const nodeSqliteSpecifier = [\"node\", \"sqlite\"].join(\":\");\n  const { DatabaseSync } = (await import(nodeSqliteSpecifier)) as NodeSqliteModule;\n\n  type DbOptions = { readonly?: boolean; create?: boolean };\n\n  class NodeDatabase {\n    #db: NodeDatabaseSync;\n\n    constructor(path: string, options: DbOptions = {}) {\n      // node:sqlite opens read-write and creates-if-missing by default, which\n      // matches bun's `{create:true}`. For readonly we must not create.\n      this.#db = options.readonly\n        ? new DatabaseSync(path, { readOnly: true })\n        : new DatabaseSync(path);\n    }\n\n    query(sql: string) {\n      return this.#db.prepare(sql);\n    }\n\n    prepare(sql: string) {\n      return this.#db.prepare(sql);\n    }\n\n    exec(sql: string): void {\n      this.#db.exec(sql);\n    }\n\n    run(sql: string, ...params: unknown[]) {\n      return this.#db.prepare(sql).run(...params);\n    }\n\n    transaction<Args extends unknown[], R>(fn: (...args: Args) => R): (...args: Args) => R {\n      // bun's db.transaction(fn) returns a function that runs fn inside a\n      // transaction when called. node:sqlite has no helper, so emulate with\n      // BEGIN/COMMIT/ROLLBACK. It also exposes deferred/immediate/exclusive\n      // variants; mirror those so Node-launched MCP servers can share call\n      // sites with Bun.\n      const run =\n        (begin: \"BEGIN\" | \"BEGIN DEFERRED\" | \"BEGIN IMMEDIATE\" | \"BEGIN EXCLUSIVE\") =>\n        (...args: Args): R => {\n          this.#db.exec(begin);\n          try {\n            const result = fn(...args);\n            this.#db.exec(\"COMMIT\");\n            return result;\n          } catch (err) {\n            this.#db.exec(\"ROLLBACK\");\n            throw err;\n          }\n        };\n      const tx = run(\"BEGIN\") as ((...args: Args) => R) & {\n        deferred: (...args: Args) => R;\n        immediate: (...args: Args) => R;\n        exclusive: (...args: Args) => R;\n      };\n      tx.deferred = run(\"BEGIN DEFERRED\");\n      tx.immediate = run(\"BEGIN IMMEDIATE\");\n      tx.exclusive = run(\"BEGIN EXCLUSIVE\");\n      return tx;\n    }\n\n    close(): void {\n      this.#db.close();\n    }\n  }\n\n  Database = NodeDatabase as unknown as DatabaseCtor;\n}\n\nexport { Database };\n",
     "import type { StorageDatabase } from \"#storage/storage-contract\";\nimport { internalStorageDatabase } from \"#storage/storage-host\";\n\nexport const db = internalStorageDatabase as unknown as StorageDatabase;\n",
     "import { randomUUID } from \"node:crypto\";\nimport { db } from \"#storage/forum-db\";\nimport { TOPIC_MAINTENANCE_STALE_MS } from \"#storage/runtime-topic-state\";\nimport { registerStorageSchemaInitializer } from \"#storage/storage-host\";\n\nexport const RUNTIME_INSTANCE_ID = `${process.pid}-${randomUUID()}`;\nexport const TURN_LEASE_STALE_MS = 10_000;\n\nexport interface RuntimeTurnLease {\n  topicId: string;\n  queryId: string;\n  ownerId: string;\n  origin: string;\n  startedAt: number;\n  heartbeatAt: number;\n  abortRequested: boolean;\n  abortReason?: \"internal\" | \"external\";\n}\n\ninterface RuntimeTurnLeaseRow {\n  topic_id: string;\n  query_id: string;\n  owner_id: string;\n  origin: string;\n  started_at: number | bigint;\n  heartbeat_at: number | bigint;\n  abort_requested: number;\n  abort_reason: string | null;\n}\n\nregisterStorageSchemaInitializer((database) => {\n  database.exec(`\n    CREATE TABLE IF NOT EXISTS runtime_turn_leases (\n      topic_id TEXT PRIMARY KEY,\n      query_id TEXT NOT NULL UNIQUE,\n      owner_id TEXT NOT NULL,\n      origin TEXT NOT NULL,\n      started_at INTEGER NOT NULL,\n      heartbeat_at INTEGER NOT NULL,\n      abort_requested INTEGER NOT NULL DEFAULT 0 CHECK (abort_requested IN (0, 1)),\n      abort_reason TEXT CHECK (abort_reason IS NULL OR abort_reason IN ('internal', 'external'))\n    );\n    CREATE INDEX IF NOT EXISTS idx_runtime_turn_leases_heartbeat ON runtime_turn_leases(heartbeat_at);\n  `);\n}, 33);\n\nfunction rowToLease(row: RuntimeTurnLeaseRow): RuntimeTurnLease {\n  const abortReason =\n    row.abort_reason === \"internal\" || row.abort_reason === \"external\"\n      ? row.abort_reason\n      : undefined;\n  return {\n    topicId: row.topic_id,\n    queryId: row.query_id,\n    ownerId: row.owner_id,\n    origin: row.origin,\n    startedAt: Number(row.started_at),\n    heartbeatAt: Number(row.heartbeat_at),\n    abortRequested: row.abort_requested !== 0,\n    abortReason,\n  };\n}\n\nexport function getRuntimeTurnLease(topicId: string, now = Date.now()): RuntimeTurnLease | null {\n  const row = db\n    .query<RuntimeTurnLeaseRow, [string]>(\"SELECT * FROM runtime_turn_leases WHERE topic_id = ?\")\n    .get(topicId);\n  if (!row) return null;\n  const lease = rowToLease(row);\n  return now - lease.heartbeatAt <= TURN_LEASE_STALE_MS ? lease : null;\n}\n\nexport function listRuntimeTurnLeases(now = Date.now()): RuntimeTurnLease[] {\n  return db\n    .query<RuntimeTurnLeaseRow, []>(\"SELECT * FROM runtime_turn_leases ORDER BY started_at ASC\")\n    .all()\n    .map(rowToLease)\n    .filter((lease) => now - lease.heartbeatAt <= TURN_LEASE_STALE_MS);\n}\n\nexport function claimRuntimeTurnLease(\n  input: {\n    topicId: string;\n    queryId: string;\n    origin: string;\n    ownerId?: string;\n  },\n  now = Date.now(),\n): boolean {\n  const ownerId = input.ownerId ?? RUNTIME_INSTANCE_ID;\n  const result = db\n    .query(\n      `INSERT INTO runtime_turn_leases\n         (topic_id, query_id, owner_id, origin, started_at, heartbeat_at, abort_requested, abort_reason)\n       SELECT ?, ?, ?, ?, ?, ?, 0, NULL\n       WHERE NOT EXISTS (\n         SELECT 1 FROM runtime_topic_state\n         WHERE topic_id = ? AND maintenance = 1 AND heartbeat_at >= ?\n       )\n       ON CONFLICT(topic_id) DO UPDATE SET\n         query_id = excluded.query_id,\n         owner_id = excluded.owner_id,\n         origin = excluded.origin,\n         started_at = excluded.started_at,\n         heartbeat_at = excluded.heartbeat_at,\n         abort_requested = 0,\n         abort_reason = NULL\n       WHERE (runtime_turn_leases.owner_id = excluded.owner_id\n          OR runtime_turn_leases.heartbeat_at < ?)\n         AND NOT EXISTS (\n           SELECT 1 FROM runtime_topic_state\n           WHERE topic_id = excluded.topic_id AND maintenance = 1 AND heartbeat_at >= ?\n         )`,\n    )\n    .run(\n      input.topicId,\n      input.queryId,\n      ownerId,\n      input.origin,\n      now,\n      now,\n      input.topicId,\n      now - TOPIC_MAINTENANCE_STALE_MS,\n      now - TURN_LEASE_STALE_MS,\n      now - TOPIC_MAINTENANCE_STALE_MS,\n    );\n  return Number(result.changes ?? 0) > 0;\n}\n\nexport function heartbeatRuntimeTurnLease(\n  topicId: string,\n  queryId: string,\n  ownerId = RUNTIME_INSTANCE_ID,\n  now = Date.now(),\n): { owned: boolean; abortRequested: boolean; abortReason?: \"internal\" | \"external\" } {\n  const updated = db\n    .query(\n      `UPDATE runtime_turn_leases\n       SET heartbeat_at = ?\n       WHERE topic_id = ? AND query_id = ? AND owner_id = ?`,\n    )\n    .run(now, topicId, queryId, ownerId);\n  if (Number(updated.changes ?? 0) === 0) return { owned: false, abortRequested: false };\n\n  const row = db\n    .query<{ abort_requested: number; abort_reason: string | null }, [string, string, string]>(\n      `SELECT abort_requested, abort_reason\n       FROM runtime_turn_leases\n       WHERE topic_id = ? AND query_id = ? AND owner_id = ?`,\n    )\n    .get(topicId, queryId, ownerId);\n  const abortReason =\n    row?.abort_reason === \"internal\" || row?.abort_reason === \"external\"\n      ? row.abort_reason\n      : undefined;\n  return {\n    owned: Boolean(row),\n    abortRequested: row?.abort_requested !== 0,\n    abortReason,\n  };\n}\n\nexport function requestRuntimeTurnAbort(topicId: string, reason: \"internal\" | \"external\"): boolean {\n  const result = db\n    .query(\n      `UPDATE runtime_turn_leases\n       SET abort_requested = 1,\n           abort_reason = CASE\n             WHEN abort_reason = 'external' THEN abort_reason\n             ELSE ?\n           END\n       WHERE topic_id = ? AND heartbeat_at >= ?`,\n    )\n    .run(reason, topicId, Date.now() - TURN_LEASE_STALE_MS);\n  return Number(result.changes ?? 0) > 0;\n}\n\nexport function releaseRuntimeTurnLease(\n  topicId: string,\n  queryId: string,\n  ownerId = RUNTIME_INSTANCE_ID,\n): boolean {\n  const result = db\n    .query(\n      `DELETE FROM runtime_turn_leases\n       WHERE topic_id = ? AND query_id = ? AND owner_id = ?`,\n    )\n    .run(topicId, queryId, ownerId);\n  return Number(result.changes ?? 0) > 0;\n}\n",
     "import { randomUUID } from \"node:crypto\";\nimport { db } from \"#storage/forum-db\";\nimport { registerStorageSchemaInitializer } from \"#storage/storage-host\";\n\nexport const TOPIC_MAINTENANCE_STALE_MS = 30_000;\nexport const TOPIC_MAINTENANCE_HEARTBEAT_MS = 1_000;\n\nexport interface RuntimeTopicState {\n  topicId: string;\n  epoch: number;\n  maintenance: boolean;\n  maintenanceOwner?: string;\n  heartbeatAt?: number;\n}\n\nexport interface RuntimeTopicMaintenanceHandle {\n  topicId: string;\n  epoch: number;\n  ownerId: string;\n  isOwned(): boolean;\n  finish(options?: { deleteState?: boolean }): void;\n}\n\ninterface RuntimeTopicStateRow {\n  topic_id: string;\n  epoch: number | bigint;\n  maintenance: number;\n  maintenance_owner: string | null;\n  heartbeat_at: number | bigint | null;\n}\n\nregisterStorageSchemaInitializer((database) => {\n  database.exec(`\n    CREATE TABLE IF NOT EXISTS runtime_topic_state (\n      topic_id TEXT PRIMARY KEY,\n      epoch INTEGER NOT NULL DEFAULT 0,\n      maintenance INTEGER NOT NULL DEFAULT 0 CHECK (maintenance IN (0, 1)),\n      maintenance_owner TEXT,\n      heartbeat_at INTEGER\n    )\n  `);\n}, 32);\n\nfunction rowToState(row: RuntimeTopicStateRow, now = Date.now()): RuntimeTopicState {\n  const heartbeatAt = row.heartbeat_at === null ? undefined : Number(row.heartbeat_at);\n  const maintenance =\n    row.maintenance !== 0 &&\n    heartbeatAt !== undefined &&\n    now - heartbeatAt <= TOPIC_MAINTENANCE_STALE_MS;\n  return {\n    topicId: row.topic_id,\n    epoch: Number(row.epoch),\n    maintenance,\n    maintenanceOwner: maintenance ? (row.maintenance_owner ?? undefined) : undefined,\n    heartbeatAt,\n  };\n}\n\nexport function getRuntimeTopicState(topicId: string, now = Date.now()): RuntimeTopicState {\n  const row = db\n    .query<RuntimeTopicStateRow, [string]>(\"SELECT * FROM runtime_topic_state WHERE topic_id = ?\")\n    .get(topicId);\n  return row ? rowToState(row, now) : { topicId, epoch: 0, maintenance: false };\n}\n\nexport function getRuntimeTopicEpoch(topicId: string): number {\n  return getRuntimeTopicState(topicId).epoch;\n}\n\nexport function isRuntimeTopicMaintenance(topicId: string, now = Date.now()): boolean {\n  return getRuntimeTopicState(topicId, now).maintenance;\n}\n\n/**\n * Advance the topic execution epoch and hold an exclusive maintenance fence.\n * Turns from an older epoch can be identified and discarded in every process.\n */\nexport function beginRuntimeTopicMaintenance(\n  topicId: string,\n  options: { ownerId?: string; now?: number; heartbeatMs?: number } = {},\n): RuntimeTopicMaintenanceHandle | null {\n  const ownerId = options.ownerId ?? `${process.pid}-${randomUUID()}`;\n  const now = options.now ?? Date.now();\n  const result = db\n    .query(\n      `INSERT INTO runtime_topic_state\n         (topic_id, epoch, maintenance, maintenance_owner, heartbeat_at)\n       VALUES (?, 1, 1, ?, ?)\n       ON CONFLICT(topic_id) DO UPDATE SET\n         epoch = runtime_topic_state.epoch + 1,\n         maintenance = 1,\n         maintenance_owner = excluded.maintenance_owner,\n         heartbeat_at = excluded.heartbeat_at\n       WHERE runtime_topic_state.maintenance = 0\n          OR runtime_topic_state.heartbeat_at IS NULL\n          OR runtime_topic_state.heartbeat_at < ?`,\n    )\n    .run(topicId, ownerId, now, now - TOPIC_MAINTENANCE_STALE_MS);\n  if (Number(result.changes ?? 0) === 0) return null;\n\n  const epoch = getRuntimeTopicEpoch(topicId);\n  let finished = false;\n  const heartbeatMs = options.heartbeatMs ?? TOPIC_MAINTENANCE_HEARTBEAT_MS;\n  const timer = setInterval(() => {\n    if (finished) return;\n    const updated = db\n      .query(\n        `UPDATE runtime_topic_state\n         SET heartbeat_at = ?\n         WHERE topic_id = ? AND epoch = ? AND maintenance_owner = ? AND maintenance = 1`,\n      )\n      .run(Date.now(), topicId, epoch, ownerId);\n    if (Number(updated.changes ?? 0) > 0) return;\n    finished = true;\n    clearInterval(timer);\n  }, heartbeatMs);\n  timer.unref?.();\n\n  return {\n    topicId,\n    epoch,\n    ownerId,\n    isOwned() {\n      if (finished) return false;\n      const row = db\n        .query<{ owned: number }, [string, number, string]>(\n          `SELECT 1 AS owned FROM runtime_topic_state\n           WHERE topic_id = ? AND epoch = ? AND maintenance_owner = ? AND maintenance = 1`,\n        )\n        .get(topicId, epoch, ownerId);\n      return Boolean(row);\n    },\n    finish(finishOptions = {}) {\n      if (finished) return;\n      finished = true;\n      clearInterval(timer);\n      if (finishOptions.deleteState) {\n        db.query(\n          `DELETE FROM runtime_topic_state\n           WHERE topic_id = ? AND epoch = ? AND maintenance_owner = ?`,\n        ).run(topicId, epoch, ownerId);\n        return;\n      }\n      db.query(\n        `UPDATE runtime_topic_state\n         SET maintenance = 0, maintenance_owner = NULL, heartbeat_at = NULL\n         WHERE topic_id = ? AND epoch = ? AND maintenance_owner = ?`,\n      ).run(topicId, epoch, ownerId);\n    },\n  };\n}\n",
     "import { db } from \"#storage/forum-db\";\nimport { RUNTIME_INSTANCE_ID } from \"#storage/runtime-leases\";\nimport { registerStorageSchemaInitializer } from \"#storage/storage-host\";\n\nexport const PROCESS_LEASE_STALE_MS = 5_000;\nexport const PROCESS_LEASE_HEARTBEAT_MS = 1_000;\n\nexport interface RuntimeProcessLease {\n  role: string;\n  ownerId: string;\n  pid: number;\n  startedAt: number;\n  heartbeatAt: number;\n}\n\nexport interface RuntimeProcessLeaseHandle extends RuntimeProcessLease {\n  stop(): void;\n}\n\nexport interface AcquireRuntimeProcessLeaseOptions {\n  ownerId?: string;\n  pid?: number;\n  now?: number;\n  staleMs?: number;\n  heartbeatMs?: number;\n  onLost?: () => void;\n}\n\nexport interface WaitForRuntimeProcessLeaseOptions extends AcquireRuntimeProcessLeaseOptions {\n  waitMs?: number;\n  retryMs?: number;\n}\n\nexport interface WaitForRequiredRuntimeProcessLeaseOptions\n  extends WaitForRuntimeProcessLeaseOptions {\n  workloadName?: string;\n}\n\ninterface RuntimeProcessLeaseRow {\n  role: string;\n  owner_id: string;\n  pid: number | bigint;\n  started_at: number | bigint;\n  heartbeat_at: number | bigint;\n}\n\nregisterStorageSchemaInitializer((database) => {\n  database.exec(`\n    CREATE TABLE IF NOT EXISTS runtime_process_leases (\n      role TEXT PRIMARY KEY,\n      owner_id TEXT NOT NULL UNIQUE,\n      pid INTEGER NOT NULL,\n      started_at INTEGER NOT NULL,\n      heartbeat_at INTEGER NOT NULL\n    );\n    CREATE INDEX IF NOT EXISTS idx_runtime_process_leases_heartbeat ON runtime_process_leases(heartbeat_at);\n  `);\n}, 34);\n\nfunction rowToLease(row: RuntimeProcessLeaseRow): RuntimeProcessLease {\n  return {\n    role: row.role,\n    ownerId: row.owner_id,\n    pid: Number(row.pid),\n    startedAt: Number(row.started_at),\n    heartbeatAt: Number(row.heartbeat_at),\n  };\n}\n\nfunction isProcessAlive(pid: number): boolean {\n  if (!Number.isSafeInteger(pid) || pid <= 0) return false;\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code !== \"ESRCH\";\n  }\n}\n\nexport function isRuntimeProcessLeaseAlive(lease: RuntimeProcessLease): boolean {\n  return Date.now() - lease.heartbeatAt <= PROCESS_LEASE_STALE_MS && isProcessAlive(lease.pid);\n}\n\nfunction removeDeadRuntimeProcessLease(role: string): void {\n  const row = db\n    .query<RuntimeProcessLeaseRow, [string]>(\"SELECT * FROM runtime_process_leases WHERE role = ?\")\n    .get(role);\n  if (!row) return;\n  const lease = rowToLease(row);\n  if (isProcessAlive(lease.pid)) return;\n  db.query(\n    `DELETE FROM runtime_process_leases\n     WHERE role = ? AND owner_id = ? AND pid = ? AND heartbeat_at = ?`,\n  ).run(lease.role, lease.ownerId, lease.pid, lease.heartbeatAt);\n}\n\nexport function getRuntimeProcessLease(\n  role: string,\n  now = Date.now(),\n  staleMs = PROCESS_LEASE_STALE_MS,\n): RuntimeProcessLease | null {\n  const row = db\n    .query<RuntimeProcessLeaseRow, [string]>(\"SELECT * FROM runtime_process_leases WHERE role = ?\")\n    .get(role);\n  if (!row) return null;\n  const lease = rowToLease(row);\n  return now - lease.heartbeatAt <= staleMs ? lease : null;\n}\n\n/** List healthy process leases, optionally restricted to one role prefix. */\nexport function listRuntimeProcessLeases(\n  rolePrefix = \"\",\n  now = Date.now(),\n  staleMs = PROCESS_LEASE_STALE_MS,\n): RuntimeProcessLease[] {\n  const rows = rolePrefix\n    ? db\n        .query<RuntimeProcessLeaseRow, [string]>(\n          \"SELECT * FROM runtime_process_leases WHERE role LIKE ? ORDER BY role\",\n        )\n        .all(`${rolePrefix}%`)\n    : db\n        .query<RuntimeProcessLeaseRow, []>(\"SELECT * FROM runtime_process_leases ORDER BY role\")\n        .all();\n  return rows.map(rowToLease).filter((lease) => now - lease.heartbeatAt <= staleMs);\n}\n\n/** Remove crash leftovers without evicting a live process whose heartbeat is delayed. */\nexport function removeDeadRuntimeProcessLeases(rolePrefix = \"\"): number {\n  const rows = rolePrefix\n    ? db\n        .query<RuntimeProcessLeaseRow, [string]>(\n          \"SELECT * FROM runtime_process_leases WHERE role LIKE ?\",\n        )\n        .all(`${rolePrefix}%`)\n    : db.query<RuntimeProcessLeaseRow, []>(\"SELECT * FROM runtime_process_leases\").all();\n  let removed = 0;\n  for (const row of rows) {\n    const lease = rowToLease(row);\n    if (isProcessAlive(lease.pid)) continue;\n    const result = db\n      .query(\n        `DELETE FROM runtime_process_leases\n         WHERE role = ? AND owner_id = ? AND pid = ? AND heartbeat_at = ?`,\n      )\n      .run(lease.role, lease.ownerId, lease.pid, lease.heartbeatAt);\n    removed += Number(result.changes ?? 0);\n  }\n  return removed;\n}\n\nexport function heartbeatRuntimeProcessLease(\n  role: string,\n  ownerId: string,\n  now = Date.now(),\n): boolean {\n  const result = db\n    .query(\n      `UPDATE runtime_process_leases\n       SET heartbeat_at = ?\n       WHERE role = ? AND owner_id = ?`,\n    )\n    .run(now, role, ownerId);\n  return Number(result.changes ?? 0) > 0;\n}\n\nexport function releaseRuntimeProcessLease(role: string, ownerId: string): boolean {\n  const result = db\n    .query(\"DELETE FROM runtime_process_leases WHERE role = ? AND owner_id = ?\")\n    .run(role, ownerId);\n  return Number(result.changes ?? 0) > 0;\n}\n\n/**\n * Claim one cross-process role and keep it alive with a SQLite heartbeat.\n * A process that exits without cleanup is replaceable after `staleMs`.\n */\nexport function acquireRuntimeProcessLease(\n  role: string,\n  options: AcquireRuntimeProcessLeaseOptions = {},\n): RuntimeProcessLeaseHandle | null {\n  const normalizedRole = role.trim();\n  if (!normalizedRole) throw new Error(\"runtime process lease role must not be empty\");\n  removeDeadRuntimeProcessLease(normalizedRole);\n  const ownerId = options.ownerId ?? `${RUNTIME_INSTANCE_ID}:${normalizedRole}`;\n  const pid = options.pid ?? process.pid;\n  const now = options.now ?? Date.now();\n  const staleMs = options.staleMs ?? PROCESS_LEASE_STALE_MS;\n  const result = db\n    .query(\n      `INSERT INTO runtime_process_leases (role, owner_id, pid, started_at, heartbeat_at)\n       VALUES (?, ?, ?, ?, ?)\n       ON CONFLICT(role) DO UPDATE SET\n         owner_id = excluded.owner_id,\n         pid = excluded.pid,\n         started_at = excluded.started_at,\n         heartbeat_at = excluded.heartbeat_at\n       WHERE runtime_process_leases.heartbeat_at < ?`,\n    )\n    .run(normalizedRole, ownerId, pid, now, now, now - staleMs);\n  if (Number(result.changes ?? 0) === 0) return null;\n\n  let stopped = false;\n  const heartbeatMs = options.heartbeatMs ?? PROCESS_LEASE_HEARTBEAT_MS;\n  const timer = setInterval(() => {\n    if (stopped) return;\n    if (heartbeatRuntimeProcessLease(normalizedRole, ownerId)) return;\n    stopped = true;\n    clearInterval(timer);\n    options.onLost?.();\n  }, heartbeatMs);\n  timer.unref?.();\n\n  return {\n    role: normalizedRole,\n    ownerId,\n    pid,\n    startedAt: now,\n    heartbeatAt: now,\n    stop() {\n      if (stopped) return;\n      stopped = true;\n      clearInterval(timer);\n      releaseRuntimeProcessLease(normalizedRole, ownerId);\n    },\n  };\n}\n\n/**\n * Wait through a graceful handoff or stale-heartbeat window instead of making\n * process supervisors burn through their restart budget on a transient clash.\n */\nexport async function waitForRuntimeProcessLease(\n  role: string,\n  options: WaitForRuntimeProcessLeaseOptions = {},\n): Promise<RuntimeProcessLeaseHandle | null> {\n  const {\n    waitMs = PROCESS_LEASE_STALE_MS + PROCESS_LEASE_HEARTBEAT_MS,\n    retryMs = 100,\n    ...acquireOptions\n  } = options;\n  const deadline = Date.now() + Math.max(0, waitMs);\n  const interval = Math.max(1, retryMs);\n  while (true) {\n    const lease = acquireRuntimeProcessLease(role, acquireOptions);\n    if (lease) return lease;\n    const remaining = deadline - Date.now();\n    if (remaining <= 0) return null;\n    await new Promise<void>((resolve) => setTimeout(resolve, Math.min(interval, remaining)));\n  }\n}\n\n/** Claim a process role or report the live owner in a user-facing error. */\nexport async function waitForRequiredRuntimeProcessLease(\n  role: string,\n  options: WaitForRequiredRuntimeProcessLeaseOptions = {},\n): Promise<RuntimeProcessLeaseHandle> {\n  const { workloadName = role, ...leaseOptions } = options;\n  const lease = await waitForRuntimeProcessLease(role, leaseOptions);\n  if (lease) return lease;\n  const current = getRuntimeProcessLease(role);\n  throw new Error(`${workloadName} is already running${current ? ` (pid ${current.pid})` : \"\"}`);\n}\n",
-    "import { type ChildProcess, execFileSync, spawn } from \"node:child_process\";\nimport { createHash, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport {\n  cpSync,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  rmSync,\n  unlinkSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { dirname, join, resolve } from \"node:path\";\nimport {\n  BROWSER_PROFILES_DIR,\n  BROWSER_RS_BIN,\n  type BrowserProxyConfig,\n  PLAYWRIGHT_BASE_PORT,\n  PLAYWRIGHT_MAX_PORT,\n  PLAYWRIGHT_MCP_BIN,\n  PLAYWRIGHT_PORTS_DIR,\n  resolveBrowserProxy,\n} from \"#platform/config\";\nimport { delay } from \"#platform/delay\";\nimport { logger } from \"#platform/logger\";\nimport {\n  cleanSingletonFiles,\n  isPortInUse,\n  killBrowserProcsForUserDataDir,\n  killProcessTreeChildren,\n  reapOrphanBrowsers,\n  reserveAvailableLoopbackPort,\n} from \"#platform/playwright/browser-processes\";\nimport {\n  type HeadedPlaywrightSpawnSpec,\n  resolveHeadedPlaywrightSpawn,\n} from \"#platform/playwright/headed-launch\";\nimport { probePlaywrightMcpTransports } from \"#platform/playwright/transport-probe\";\nimport {\n  type BrowserVaultBrokerHandle,\n  createBrowserVaultBroker,\n} from \"#platform/playwright/vault-broker\";\nimport { sanitizeTopicName } from \"#security/sanitize\";\nimport {\n  assignTopicBrowserProfile,\n  getBrowserProfileOwner,\n  getTopicBrowserProfile,\n  hasBrowserProfileTopic,\n  normalizeBrowserProfileName,\n} from \"#storage/browser-profiles\";\nimport {\n  isLiveOwnedChildProcess,\n  matchesSpawnedBrowserHealth,\n  selectIdleEvictionKey,\n  waitForChildProcessExit,\n} from \"./manager-utils\";\n\nexport interface PlaywrightProfileBinding {\n  readonly instanceKey: string;\n  readonly ownerId: string;\n  readonly profile: string;\n}\n\nexport interface PlaywrightChildEnvironmentContext {\n  instanceKey: string;\n  ownerId: string;\n  capability: string;\n  proxy: BrowserProxyConfig | null;\n  browserRsBin?: string;\n  environment: NodeJS.ProcessEnv;\n}\n\nexport interface PlaywrightManagerHost {\n  readonly portsDir: string;\n  readonly basePort: number;\n  readonly maxPort: number;\n  readonly browserBin: string;\n  readonly browserRsBin?: string;\n  readonly resolveProxy: () => BrowserProxyConfig | null;\n  readonly resolveTopicBinding: (userId: string, topic?: string) => PlaywrightProfileBinding;\n  readonly resolveNamedBinding: (ownerId: string, rawProfile: string) => PlaywrightProfileBinding;\n  readonly resolveInstanceDataDir: (instanceKey: string) => string;\n  readonly createChildEnvironment: (\n    context: PlaywrightChildEnvironmentContext,\n  ) => NodeJS.ProcessEnv;\n  /** Reap an orphan that owns this exact host-managed data directory. */\n  readonly cleanupBrowserProcessesForDataDir: (userDataDir: string) => void;\n  /** Reap host-managed browsers that are not represented by the supplied live directories. */\n  readonly reapOrphanBrowsers: (liveUserDataDirs: Iterable<string>) => void;\n}\n\nexport {\n  cleanupZombiePlaywright,\n  isBrowserJanitorOwner,\n  reapOrphanBrowsers,\n  selectOrphanBrowserPids,\n} from \"#platform/playwright/browser-processes\";\nexport { probePlaywrightMcpTransports } from \"#platform/playwright/transport-probe\";\nexport {\n  browserProcessMatchesExpectedProfile,\n  extractUserDataDirArg,\n  isLiveOwnedChildProcess,\n  matchesSpawnedBrowserHealth,\n  selectIdleEvictionKey,\n  selectReusablePort,\n  waitForChildProcessExit,\n  waitForChildProcessSpawnError,\n} from \"./manager-utils\";\nexport { PLAYWRIGHT_PORTS_DIR };\n\n/** Multiple topics assigned to one profile reuse one browser process. */\nexport function makeInstanceKey(userId: string, topic: string | undefined): string {\n  return resolvePlaywrightTopicBinding(userId, topic).instanceKey;\n}\n\nexport function resolvePlaywrightTopicBinding(\n  userId: string,\n  topic: string | undefined,\n): PlaywrightProfileBinding {\n  return validateProfileBinding(managerHost.resolveTopicBinding(userId, topic));\n}\n\nfunction defaultTopicBinding(userId: string, topic: string | undefined): PlaywrightProfileBinding {\n  if (!topic) return managerHost.resolveNamedBinding(userId, \"default\");\n  const ownerId = getBrowserProfileOwner(topic, userId);\n  const profile = getTopicBrowserProfile(topic);\n  return managerHost.resolveNamedBinding(ownerId, profile);\n}\n\nexport function makeBrowserProfileInstanceKey(ownerId: string, rawProfile: string): string {\n  return resolvePlaywrightProfileBinding(ownerId, rawProfile).instanceKey;\n}\n\nexport function resolvePlaywrightProfileBinding(\n  ownerId: string,\n  rawProfile: string,\n): PlaywrightProfileBinding {\n  return validateProfileBinding(managerHost.resolveNamedBinding(ownerId, rawProfile));\n}\n\nfunction validateProfileBinding(binding: PlaywrightProfileBinding): PlaywrightProfileBinding {\n  if (\n    !binding ||\n    typeof binding.instanceKey !== \"string\" ||\n    !binding.instanceKey.trim() ||\n    typeof binding.ownerId !== \"string\" ||\n    !binding.ownerId.trim() ||\n    typeof binding.profile !== \"string\" ||\n    !binding.profile.trim()\n  ) {\n    throw new Error(\"invalid Playwright profile binding\");\n  }\n  return Object.freeze({ ...binding });\n}\n\nfunction defaultNamedBinding(_ownerId: string, rawProfile: string): PlaywrightProfileBinding {\n  const profile = normalizeBrowserProfileName(rawProfile);\n  const instanceKey = `profile:${profile}`;\n  return {\n    instanceKey,\n    ownerId: \"local\",\n    profile,\n  };\n}\n\nexport function legacyBrowserProfileName(topic: string): string {\n  return `legacy_${createHash(\"sha256\").update(topic).digest(\"hex\").slice(0, 12)}`;\n}\n\nfunction defaultChildEnvironment(context: PlaywrightChildEnvironmentContext): NodeJS.ProcessEnv {\n  const childEnvironment: NodeJS.ProcessEnv = {};\n  for (const key of [\n    \"HOME\",\n    \"PATH\",\n    \"TMPDIR\",\n    \"TMP\",\n    \"TEMP\",\n    \"LANG\",\n    \"LC_ALL\",\n    \"LC_CTYPE\",\n    \"DISPLAY\",\n    \"WAYLAND_DISPLAY\",\n    \"XAUTHORITY\",\n    \"DBUS_SESSION_BUS_ADDRESS\",\n    \"XDG_RUNTIME_DIR\",\n    \"XDG_CONFIG_HOME\",\n    \"XDG_CACHE_HOME\",\n    \"XDG_DATA_HOME\",\n    \"AB_CHROME\",\n    \"AB_CONNECT\",\n    \"RUST_LOG\",\n    \"RUST_BACKTRACE\",\n  ]) {\n    if (context.environment[key] !== undefined) childEnvironment[key] = context.environment[key];\n  }\n  return childEnvironment;\n}\n\nconst defaultManagerHost: Readonly<PlaywrightManagerHost> = Object.freeze({\n  portsDir: PLAYWRIGHT_PORTS_DIR,\n  basePort: PLAYWRIGHT_BASE_PORT,\n  maxPort: PLAYWRIGHT_MAX_PORT,\n  browserBin: PLAYWRIGHT_MCP_BIN,\n  browserRsBin: BROWSER_RS_BIN,\n  resolveProxy: resolveBrowserProxy,\n  resolveTopicBinding: defaultTopicBinding,\n  resolveNamedBinding: defaultNamedBinding,\n  resolveInstanceDataDir(instanceKey: string) {\n    const { ownerId, profile } = parseInstanceKey(instanceKey);\n    return defaultProfileDir(ownerId, profile);\n  },\n  createChildEnvironment: defaultChildEnvironment,\n  cleanupBrowserProcessesForDataDir: killBrowserProcsForUserDataDir,\n  reapOrphanBrowsers,\n});\n\nlet managerHost: Readonly<PlaywrightManagerHost> = defaultManagerHost;\n\n/**\n * Configure product-specific profile storage and browser launch glue.\n * Call once during bootstrap, before any browser instance is started.\n */\nexport function configurePlaywrightManagerHost(\n  overrides: Partial<PlaywrightManagerHost>,\n): Readonly<PlaywrightManagerHost> {\n  if (instances.size > 0 || spawning.size > 0 || pinnedInstances.size > 0) {\n    throw new Error(\"cannot configure Playwright manager while browser instances are active\");\n  }\n  const next = { ...managerHost, ...overrides };\n  if (!next.portsDir || !Number.isInteger(next.basePort) || !Number.isInteger(next.maxPort)) {\n    throw new Error(\"invalid Playwright manager paths or port range\");\n  }\n  if (next.basePort < 1 || next.maxPort > 65_535 || next.basePort > next.maxPort) {\n    throw new Error(\"invalid Playwright manager port range\");\n  }\n  if (!next.browserBin) {\n    throw new Error(\"Browser manager gateway is required\");\n  }\n  if (\n    next.resolveInstanceDataDir !== defaultManagerHost.resolveInstanceDataDir &&\n    (next.cleanupBrowserProcessesForDataDir ===\n      defaultManagerHost.cleanupBrowserProcessesForDataDir ||\n      next.reapOrphanBrowsers === defaultManagerHost.reapOrphanBrowsers)\n  ) {\n    throw new Error(\n      \"custom Playwright profile paths require host crash cleanup and orphan sweep hooks\",\n    );\n  }\n  managerHost = Object.freeze(next);\n  return managerHost;\n}\n\nexport function getPlaywrightManagerHost(): Readonly<PlaywrightManagerHost> {\n  return managerHost;\n}\n\n/** Restore Negotium's built-in browser host after all instances are stopped. */\nexport function resetPlaywrightManagerHost(): void {\n  configurePlaywrightManagerHost(defaultManagerHost);\n}\n\ninterface InstanceKeyParts {\n  ownerId: string;\n  profile: string;\n}\n\nfunction parseInstanceKey(instanceKey: string): InstanceKeyParts {\n  const shared = /^profile:(.+)$/.exec(instanceKey);\n  if (shared && !shared[1]!.includes(\":\")) {\n    return { ownerId: \"local\", profile: normalizeBrowserProfileName(shared[1]!) };\n  }\n  const match = /^profile:([^:]+):(.+)$/.exec(instanceKey);\n  if (!match) return { ownerId: \"legacy\", profile: sanitizeTopicName(instanceKey) };\n  return {\n    ownerId: decodeURIComponent(match[1]!),\n    profile: normalizeBrowserProfileName(match[2]!),\n  };\n}\n\nfunction portFileName(instanceKey: string): string {\n  return createHash(\"sha256\").update(instanceKey).digest(\"hex\").slice(0, 24);\n}\n\nfunction writePortFile(instanceKey: string, port: number) {\n  try {\n    mkdirSync(managerHost.portsDir, { recursive: true });\n    writeFileSync(join(managerHost.portsDir, portFileName(instanceKey)), String(port));\n  } catch (e) {\n    logger.warn({ err: e, instanceKey, port }, \"Failed to save playwright port file\");\n  }\n}\n\nfunction deletePortFile(instanceKey: string) {\n  try {\n    unlinkSync(join(managerHost.portsDir, portFileName(instanceKey)));\n  } catch (e) {\n    logger.warn({ err: e, instanceKey }, \"Failed to delete playwright port file\");\n  }\n}\n\nfunction readPortFile(instanceKey: string): number | null {\n  try {\n    const port = Number.parseInt(\n      readFileSync(join(managerHost.portsDir, portFileName(instanceKey)), \"utf8\").trim(),\n      10,\n    );\n    return Number.isInteger(port) ? port : null;\n  } catch {\n    return null;\n  }\n}\n\nconst MAX_IDLE_MS = 2 * 60 * 60 * 1000; // 2 hours idle → eligible for eviction\n\ninterface PlaywrightInstance {\n  process: ChildProcess;\n  port: number;\n  ownerId: string;\n  startedAt: number;\n  lastUsedAt: number;\n  capability: string;\n  vaultBroker: BrowserVaultBrokerHandle;\n}\n\nconst instances = new Map<string, PlaywrightInstance>();\n\nfunction assertInstanceOwner(instanceKey: string, ownerId: string): void {\n  const existing = instances.get(instanceKey);\n  if (existing && existing.ownerId !== ownerId) {\n    throw new Error(\n      `Playwright profile binding owner changed for \"${instanceKey}\" (${existing.ownerId} -> ${ownerId})`,\n    );\n  }\n}\n\n// Track used ports to avoid collisions\nconst usedPorts = new Set<number>();\n\n// Prevent concurrent spawns for the same key\nconst spawning = new Map<string, Promise<number | null>>();\n\nexport interface PlaywrightMaintenanceControl {\n  /** Stop one of the locked instances before mutating its profile directory. */\n  stopInstance(instanceKey: string): Promise<boolean>;\n}\n\n/** Serialize destructive profile maintenance with normal browser startup. */\nexport async function withPlaywrightInstanceMaintenance<T>(\n  rawKeys: string[],\n  operation: (control: PlaywrightMaintenanceControl) => Promise<T>,\n): Promise<T> {\n  const keys = [...new Set(rawKeys)].sort();\n  const lockedKeys = new Set(keys);\n  for (;;) {\n    const pending = keys\n      .map((key) => spawning.get(key))\n      .filter((promise): promise is Promise<number | null> => promise !== undefined);\n    if (pending.length > 0) {\n      await Promise.allSettled(pending);\n      continue;\n    }\n\n    let releaseBarrier!: () => void;\n    const barrier = new Promise<number | null>((resolveBarrier) => {\n      releaseBarrier = () => resolveBarrier(null);\n    });\n    // No await occurs between the registry check and registration, so another\n    // event-loop task cannot acquire any of these keys concurrently.\n    for (const key of keys) spawning.set(key, barrier);\n\n    try {\n      return await operation({\n        async stopInstance(instanceKey) {\n          if (!lockedKeys.has(instanceKey)) {\n            throw new Error(`Playwright maintenance does not own instance \"${instanceKey}\"`);\n          }\n          const process = instances.get(instanceKey)?.process;\n          if (!process) return false;\n          killInstance(instanceKey);\n          if (!(await waitForChildProcessExit(process, 3000))) {\n            logger.warn(\n              { instanceKey, pid: process.pid },\n              \"Playwright MCP ignored SIGTERM during profile maintenance\",\n            );\n            try {\n              process.kill(\"SIGKILL\");\n            } catch (error) {\n              logger.warn(\n                { err: error, instanceKey, pid: process.pid },\n                \"Failed to SIGKILL Playwright MCP during profile maintenance\",\n              );\n            }\n            await waitForChildProcessExit(process, 1000);\n          }\n          return true;\n        },\n      });\n    } finally {\n      for (const key of keys) {\n        if (spawning.get(key) === barrier) spawning.delete(key);\n      }\n      releaseBarrier();\n    }\n  }\n}\n\n/** Stop one managed instance under the same serialization used by startup and profile mutation. */\nexport function stopPlaywrightInstance(instanceKey: string): Promise<boolean> {\n  return withPlaywrightInstanceMaintenance([instanceKey], ({ stopInstance }) =>\n    stopInstance(instanceKey),\n  );\n}\n\n/** Run owner-aware named-profile maintenance under one lifecycle barrier. */\nexport function withPlaywrightProfileMaintenance<T>(\n  ownerId: string,\n  rawProfile: string,\n  operation: (\n    binding: PlaywrightProfileBinding,\n    control: PlaywrightMaintenanceControl,\n  ) => Promise<T>,\n): Promise<T> {\n  const binding = resolvePlaywrightProfileBinding(ownerId, rawProfile);\n  return withPlaywrightInstanceMaintenance([binding.instanceKey], async (control) => {\n    assertInstanceOwner(binding.instanceKey, binding.ownerId);\n    return operation(binding, control);\n  });\n}\n\n/** Stop a named profile before deleting or replacing its host-managed data directory. */\nexport function stopPlaywrightProfile(ownerId: string, rawProfile: string): Promise<boolean> {\n  return withPlaywrightProfileMaintenance(ownerId, rawProfile, (binding, { stopInstance }) =>\n    stopInstance(binding.instanceKey),\n  );\n}\n\n// A shared profile may have several concurrent turns. Reference counts keep an\n// idle sweep from evicting the process until every borrower has finished.\nconst pinnedInstances = new Map<string, number>();\n\nexport function pinPlaywrightInstance(instanceKey: string): void {\n  pinnedInstances.set(instanceKey, (pinnedInstances.get(instanceKey) ?? 0) + 1);\n}\n\nexport function unpinPlaywrightInstance(instanceKey: string): void {\n  const count = pinnedInstances.get(instanceKey);\n  if (count === undefined) return;\n  if (count <= 1) pinnedInstances.delete(instanceKey);\n  else pinnedInstances.set(instanceKey, count - 1);\n}\n\nexport function getPlaywrightCapability(instanceKey: string): string | undefined {\n  return instances.get(instanceKey)?.capability;\n}\n\n/** Resolve a live browser capability back to its owning user. */\nexport function resolvePlaywrightCapabilityOwner(capability: string): string | undefined {\n  if (!capability) return undefined;\n  const provided = Buffer.from(capability);\n  for (const instance of instances.values()) {\n    const expected = Buffer.from(instance.capability);\n    if (provided.length === expected.length && timingSafeEqual(provided, expected)) {\n      return instance.ownerId;\n    }\n  }\n  return undefined;\n}\n\n/** Run the configured host's path-bounded orphan sweep against current live instances. */\nexport function reapPlaywrightOrphans(): void {\n  managerHost.reapOrphanBrowsers([...instances.keys()].map(resolveUserDataDir));\n}\n\n// --- Browser MCP failure notification callback ---\n// Fired when a managed process fails or its transport becomes unhealthy.\n// Intentional cleanup paths do not notify consumers.\nexport interface PlaywrightFailure {\n  reason: \"exit\" | \"process-error\" | \"unhealthy\";\n  code?: number | null;\n  error?: string;\n}\n\ntype PlaywrightFailureHandler = (instanceKey: string, failure: PlaywrightFailure) => void;\nconst playwrightFailureHandlers = new Set<PlaywrightFailureHandler>();\nexport function onPlaywrightFailure(handler: PlaywrightFailureHandler): () => void {\n  playwrightFailureHandlers.add(handler);\n  return () => playwrightFailureHandlers.delete(handler);\n}\n\nfunction notifyPlaywrightFailure(instanceKey: string, failure: PlaywrightFailure): void {\n  for (const handler of playwrightFailureHandlers) {\n    try {\n      handler(instanceKey, failure);\n    } catch (err) {\n      logger.warn({ err, instanceKey, failure }, \"Playwright failure handler failed\");\n    }\n  }\n}\n\n/**\n * Evict the oldest idle instance to free a port.\n * Returns the evicted port, or null when no instance was eligible.\n */\nfunction evictIdleInstance(): number | null {\n  const now = Date.now();\n  const oldestKey = selectIdleEvictionKey(\n    instances,\n    pinnedInstances.keys(),\n    spawning.keys(),\n    now,\n    MAX_IDLE_MS,\n  );\n  if (oldestKey) {\n    const instance = instances.get(oldestKey);\n    if (!instance) return null;\n    const idleMin = ((now - instance.lastUsedAt) / 60000).toFixed(0);\n    logger.info({ key: oldestKey, idleMin }, \"Evicting idle playwright instance\");\n    killInstance(oldestKey);\n    return instance.port;\n  }\n  return null;\n}\n\n/**\n * Find an available port without depending on platform process-inspection tools.\n * If all ports are taken, evicts the oldest idle instance.\n */\nasync function allocatePort(): Promise<number> {\n  const port = await reserveAvailableLoopbackPort(\n    managerHost.basePort,\n    managerHost.maxPort,\n    usedPorts,\n    async (candidate) => {\n      // A real loopback bind probe is portable and fail-closed. In particular,\n      // a missing `lsof` must never make an occupied port appear available.\n      const occupied = await isPortInUse(candidate);\n      if (occupied) logger.warn({ port: candidate }, \"Port occupied by external process, skipping\");\n      return occupied;\n    },\n  );\n  if (port !== null) return port;\n\n  // All ports used — try evicting an idle instance\n  const evictedPort = evictIdleInstance();\n  if (evictedPort !== null) {\n    // SIGTERM only requests shutdown. Do not hand the port to a replacement\n    // until the old listener is actually gone, and recheck every candidate in\n    // case another allocator claimed a different port while we were waiting.\n    await waitForPortRelease(evictedPort);\n    return allocatePort();\n  }\n\n  throw new Error(\n    `No available ports for Playwright MCP (${instances.size} active instances, range ${managerHost.basePort}-${managerHost.maxPort})`,\n  );\n}\n\nfunction releasePort(port: number) {\n  usedPorts.delete(port);\n}\n\nfunction defaultProfileDir(_ownerId: string, profile: string): string {\n  return resolve(BROWSER_PROFILES_DIR, profile);\n}\n\n/** Resolve the shared profile userDataDir for an instanceKey. */\nfunction resolveUserDataDir(instanceKey: string): string {\n  return managerHost.resolveInstanceDataDir(instanceKey);\n}\n\n/**\n * Kill and clean up a specific instance.\n * Also kills Chrome child processes and cleans up Singleton files.\n * @param keepPort - If true, don't release the port (for same-port respawn).\n */\nfunction killInstance(instanceKey: string, opts?: { keepPort?: boolean }) {\n  const inst = instances.get(instanceKey);\n  if (!inst) return;\n\n  // Kill Chrome children first (before killing the MCP server)\n  if (inst.process.pid) {\n    killProcessTreeChildren(inst.process.pid);\n  }\n\n  try {\n    inst.process.kill(\"SIGTERM\");\n  } catch (e) {\n    logger.warn({ err: e, instanceKey }, \"Failed to kill playwright instance\");\n  }\n  void inst.vaultBroker.close();\n\n  // Drop the spawn-time error/exit handlers. Cleanup is done synchronously\n  // here, so the late-firing listeners only add duplicate instances.delete()\n  // calls and keep the process reference alive until exit. Removing them\n  // also lets callers (e.g. killAllPlaywright) attach their own exit waiter\n  // without the spawn handler racing against it.\n  inst.process.removeAllListeners(\"error\");\n  inst.process.removeAllListeners(\"exit\");\n\n  cleanSingletonFiles(resolveUserDataDir(instanceKey));\n\n  if (!opts?.keepPort) releasePort(inst.port);\n  instances.delete(instanceKey);\n  deletePortFile(instanceKey);\n  logger.info(\n    { instanceKey, port: inst.port, keepPort: !!opts?.keepPort },\n    \"Killed Playwright MCP (with cleanup)\",\n  );\n}\n\nconst PLAYWRIGHT_STARTUP_STDERR_LIMIT = 8 * 1024;\n\nfunction captureBoundedStderr(proc: ChildProcess): () => string {\n  let tail = Buffer.alloc(0);\n  proc.stderr?.on(\"data\", (chunk: Buffer | string) => {\n    const next = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n    tail = Buffer.concat([tail, next]);\n    if (tail.byteLength > PLAYWRIGHT_STARTUP_STDERR_LIMIT) {\n      tail = tail.subarray(tail.byteLength - PLAYWRIGHT_STARTUP_STDERR_LIMIT);\n    }\n  });\n  return () => tail.toString(\"utf8\").trim();\n}\n\nexport function watchChildStartup(\n  proc: ChildProcess,\n  stderrTail: () => string,\n): { failure: Promise<never>; stop: () => void } {\n  let stopped = false;\n  let rejectFailure: (error: Error) => void = () => undefined;\n  const diagnostics = () => {\n    const stderr = stderrTail();\n    return stderr ? `\\nstderr (last ${PLAYWRIGHT_STARTUP_STDERR_LIMIT} bytes):\\n${stderr}` : \"\";\n  };\n  const onError = (error: Error) => {\n    rejectFailure(\n      new Error(`Playwright MCP failed to spawn: ${error.message}${diagnostics()}`, {\n        cause: error,\n      }),\n    );\n  };\n  const onExit = (code: number | null, signal: NodeJS.Signals | null) => {\n    rejectFailure(\n      new Error(\n        `Playwright MCP exited during startup (code=${code ?? \"null\"}, signal=${signal ?? \"null\"})${diagnostics()}`,\n      ),\n    );\n  };\n  const failure = new Promise<never>((_resolve, reject) => {\n    rejectFailure = reject;\n    proc.once(\"error\", onError);\n    proc.once(\"exit\", onExit);\n  });\n  const stop = () => {\n    if (stopped) return;\n    stopped = true;\n    proc.off(\"error\", onError);\n    proc.off(\"exit\", onExit);\n  };\n  return { failure, stop };\n}\n\n/**\n * Spawn a browser MCP HTTP server for a shared named profile. The profile\n * identity is encoded in `instanceKey` and decoded inside `resolveUserDataDir`.\n */\n/**\n * Spawn a Playwright MCP process for the given instanceKey.\n * @param instanceKey  Unique key identifying this instance.\n * @param ownerId      Canonical profile owner ID (stored in the instance record).\n * @param reservedPort When provided the process binds to this already-reserved\n *                     port (restart path). When omitted a fresh port is allocated.\n */\nasync function spawnPlaywright(\n  instanceKey: string,\n  ownerId: string,\n  reservedPort?: number,\n  browserBin = managerHost.browserBin,\n): Promise<number> {\n  if (!managerHost.browserRsBin) {\n    throw new Error(\"Browser.rs is unavailable or below the minimum secure version\");\n  }\n  const userDataDir = resolveUserDataDir(instanceKey);\n  const port = reservedPort ?? (await allocatePort());\n  mkdirSync(userDataDir, { recursive: true });\n\n  const mcpArgs = [\n    \"--port\",\n    String(port),\n    // Pin to IPv4. `--host 127.0.0.1` keeps every transport on the same\n    // address family. Without it, a `localhost`→`::1`-only bind breaks the\n    // Maestro MCP client (its SSEClientTransport forces `127.0.0.1` because\n    // the Node `eventsource` package's IPv6 lookup historically failed), so\n    // browser tools would silently disappear from maestro turns.\n    \"--host\",\n    \"127.0.0.1\",\n    // Keep the browser visible. Do not rely on the launcher's implicit\n    // default: an explicit flag prevents wrapper/upstream default changes\n    // from silently switching topic browsers back to headless mode.\n    \"--headed\",\n    \"--user-data-dir\",\n    userDataDir,\n  ];\n  // Pass the egress proxy to the child through the environment rather than\n  // argv so the credentials never surface in `ps`/`/proc` command lines. The\n  // Browser.rs currently rejects this configuration rather than bypassing it.\n  const proxy = managerHost.resolveProxy();\n  if (proxy) {\n    releasePort(port);\n    throw new Error(\"Browser.rs managed mode does not support authenticated egress proxies\");\n  }\n  const capability = randomBytes(32).toString(\"hex\");\n  const spawnNonce = randomBytes(32).toString(\"hex\");\n  let vaultBroker: BrowserVaultBrokerHandle;\n  try {\n    vaultBroker = await createBrowserVaultBroker(ownerId);\n  } catch (error) {\n    releasePort(port);\n    throw error;\n  }\n  const childEnv = {\n    ...managerHost.createChildEnvironment({\n      instanceKey,\n      ownerId,\n      capability,\n      proxy,\n      browserRsBin: managerHost.browserRsBin,\n      environment: process.env,\n    }),\n    AB_MANAGED: \"1\",\n    AB_HTTP_CAPABILITY: capability,\n    AB_SPAWN_NONCE: spawnNonce,\n    AB_SECRET_BROKER_SOCKET: vaultBroker.socketPath,\n    AB_SECRET_BROKER_TOKEN: vaultBroker.token,\n  };\n  // Managed Browser.rs authenticates owner-scoped transports with this root\n  // capability. Product hooks may add launch details but cannot remove it.\n  const command = browserBin.endsWith(\".mjs\") ? process.execPath : browserBin;\n  const args = browserBin.endsWith(\".mjs\") ? [browserBin, ...mcpArgs] : mcpArgs;\n  let spawnSpec: HeadedPlaywrightSpawnSpec;\n  try {\n    spawnSpec = resolveHeadedPlaywrightSpawn(command, args, { environment: childEnv });\n  } catch (err) {\n    await vaultBroker.close();\n    releasePort(port);\n    throw err;\n  }\n  let proc: ChildProcess;\n  try {\n    proc = spawn(spawnSpec.command, spawnSpec.args, {\n      stdio: [\"ignore\", \"ignore\", \"pipe\"],\n      detached: false,\n      env: childEnv,\n    });\n  } catch (err) {\n    await vaultBroker.close();\n    releasePort(port);\n    throw err;\n  }\n  const stderrTail = captureBoundedStderr(proc);\n  const startup = watchChildStartup(proc, stderrTail);\n\n  // When the MCP dies on its own (crash / OOM), its Chrome subtree is reparented\n  // to init and escapes the tracked-instance map. Reap it by user-data-dir here\n  // so a crash can't leak an orphan Chrome that keeps holding memory (the exact\n  // cascade that piles up dozens of zombies under pressure). killInstance()\n  // removes these listeners before signalling, so this only runs on real deaths.\n  const reapCrashedBrowser = () => {\n    const userDataDir = resolveUserDataDir(instanceKey);\n    managerHost.cleanupBrowserProcessesForDataDir(userDataDir);\n    cleanSingletonFiles(userDataDir);\n  };\n\n  proc.once(\"error\", (err) => {\n    logger.error({ err, instanceKey, stderr: stderrTail() || undefined }, \"Playwright MCP error\");\n    if (instances.get(instanceKey)?.process === proc) {\n      releasePort(port);\n      instances.delete(instanceKey);\n      void vaultBroker.close();\n      reapCrashedBrowser();\n      notifyPlaywrightFailure(instanceKey, {\n        reason: \"process-error\",\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  });\n\n  proc.once(\"exit\", (code) => {\n    logger.info({ instanceKey, code, stderr: stderrTail() || undefined }, \"Playwright MCP exited\");\n    // `wasOurs` distinguishes a crash from our own killInstance(): the latter\n    // calls removeAllListeners(\"exit\") + instances.delete() BEFORE the kill\n    // signal lands, so this listener either doesn't fire or sees wasOurs=false.\n    // wasOurs=true here therefore implies the MCP died on its own — Claude\n    // SDK queries waiting on its tool results need to be aborted.\n    const wasOurs = instances.get(instanceKey)?.process === proc;\n    if (wasOurs) {\n      releasePort(port);\n      instances.delete(instanceKey);\n      void vaultBroker.close();\n      reapCrashedBrowser();\n      notifyPlaywrightFailure(instanceKey, { reason: \"exit\", code });\n    }\n  });\n\n  const now = Date.now();\n  instances.set(instanceKey, {\n    process: proc,\n    port,\n    ownerId,\n    startedAt: now,\n    lastUsedAt: now,\n    capability,\n    vaultBroker,\n  });\n\n  let startupError: Error | undefined;\n  let ready = false;\n  try {\n    ready = await Promise.race([\n      (async () =>\n        (await waitForServer(port, spawnNonce, 10_000)) &&\n        (await supportsOwnerCleanup(port, capability)) &&\n        (await probePlaywrightMcpTransports(port, capability)))(),\n      startup.failure,\n    ]);\n  } catch (error) {\n    startupError = error instanceof Error ? error : new Error(String(error));\n  } finally {\n    startup.stop();\n  }\n  if (ready && !isLiveOwnedChildProcess(instances.get(instanceKey), proc)) {\n    ready = false;\n    startupError = new Error(\n      `Playwright MCP exited after readiness but before publication on port ${port}` +\n        (stderrTail() ? `\\nstderr:\\n${stderrTail()}` : \"\"),\n    );\n  }\n  if (!ready) {\n    const exitCode = proc.exitCode;\n    killInstance(instanceKey);\n    if (startupError) throw startupError;\n    throw new Error(\n      `Playwright MCP failed health check after spawn on port ${port}` +\n        (exitCode === null ? \"\" : ` (exitCode=${exitCode})`) +\n        (stderrTail() ? `\\nstderr:\\n${stderrTail()}` : \"\"),\n    );\n  }\n  writePortFile(instanceKey, port);\n  logger.info(\n    { instanceKey, port, pid: proc.pid, ready, virtualDisplay: spawnSpec.virtualDisplay },\n    \"Playwright MCP started\",\n  );\n  return port;\n}\n\nasync function supportsOwnerCleanup(port: number, capability: string): Promise<boolean> {\n  try {\n    const query = new URLSearchParams({ owner: \"__negotium_capability_probe__\" });\n    const response = await fetch(`http://127.0.0.1:${port}/owners?${query}`, {\n      method: \"DELETE\",\n      headers: {\n        \"X-Browser-Capability\": capability,\n      },\n      signal: AbortSignal.timeout(2000),\n    });\n    await response.body?.cancel();\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Ensure a healthy browser MCP server is running for this topic's profile.\n * Topics assigned to the same profile reuse one process and data directory.\n * - If running and healthy → reuse\n * - If running but unhealthy → kill and respawn\n * - If not running → spawn\n */\nexport async function ensurePlaywright(userId: string, topic?: string): Promise<number> {\n  const binding = resolvePlaywrightTopicBinding(userId, topic);\n  const { instanceKey, ownerId } = binding;\n\n  // If a spawn/restart is already in progress for this key, wait for it\n  const inProgress = spawning.get(instanceKey);\n  if (inProgress) {\n    const port = await inProgress;\n    assertInstanceOwner(instanceKey, ownerId);\n    if (port !== null) return port;\n    // Restart failed — re-enter: by now another caller may have registered a\n    // newer attempt to join, otherwise we start one ourselves.\n    return ensurePlaywright(userId, topic);\n  }\n\n  // The ENTIRE health-check → kill → spawn sequence lives inside the spawning\n  // promise. The old shape awaited isHealthy() between the guard check and\n  // spawning.set(), so two concurrent callers could both pass the guard: one\n  // would killInstance() the instance the other had just spawned, or both\n  // would spawn and the second instances.set() orphaned the first process\n  // (its port leaked from usedPorts until restart). With no await between\n  // spawning.get() above and spawning.set() below, the guard is airtight on\n  // a single-threaded event loop.\n  const promise = (async (): Promise<number> => {\n    const existing = instances.get(instanceKey);\n    assertInstanceOwner(instanceKey, ownerId);\n\n    if (existing && !existing.process.killed && existing.process.exitCode === null) {\n      if (await probePlaywrightMcpTransports(existing.port, existing.capability)) {\n        existing.lastUsedAt = Date.now();\n        return existing.port;\n      }\n      logger.warn({ instanceKey }, \"Playwright MCP unresponsive, restarting\");\n      const oldPort = existing.port;\n      killInstance(instanceKey);\n      notifyPlaywrightFailure(instanceKey, { reason: \"unhealthy\" });\n      await waitForPortRelease(oldPort);\n      cleanSingletonFiles(resolveUserDataDir(instanceKey));\n    } else if (existing) {\n      releasePort(existing.port);\n      instances.delete(instanceKey);\n      cleanSingletonFiles(resolveUserDataDir(instanceKey));\n      notifyPlaywrightFailure(instanceKey, {\n        reason: \"exit\",\n        code: existing.process.exitCode,\n      });\n    }\n\n    return spawnPlaywright(instanceKey, ownerId);\n  })().finally(() => spawning.delete(instanceKey));\n  spawning.set(instanceKey, promise);\n  return promise;\n}\n\nasync function waitForPortRelease(port: number, timeoutMs = 3000): Promise<void> {\n  const start = Date.now();\n  while (Date.now() - start < timeoutMs) {\n    if (!(await isPortInUse(port))) return;\n    await delay(200);\n  }\n}\n\n/** Start or reuse a named shared profile before assigning more topics to it. */\nexport async function ensureBrowserProfile(ownerId: string, rawProfile: string): Promise<number> {\n  const binding = resolvePlaywrightProfileBinding(ownerId, rawProfile);\n  const instanceKey = binding.instanceKey;\n  const inProgress = spawning.get(instanceKey);\n  if (inProgress) {\n    const port = await inProgress;\n    assertInstanceOwner(instanceKey, binding.ownerId);\n    const capability = instances.get(instanceKey)?.capability;\n    if (port !== null && capability && (await probePlaywrightMcpTransports(port, capability))) {\n      return port;\n    }\n    if (port === null) return ensureBrowserProfile(ownerId, rawProfile);\n    throw new Error(`Browser profile \"${rawProfile}\" failed to start.`);\n  }\n\n  const promise = (async (): Promise<number> => {\n    const publishedPort = readPortFile(instanceKey);\n    const existing = instances.get(instanceKey);\n    assertInstanceOwner(instanceKey, binding.ownerId);\n    if (publishedPort !== null && !existing) {\n      // A port file without an in-memory instance belongs to a previous runtime.\n      // Its per-process capability and ChildProcess handle cannot be recovered,\n      // so adopting it would bypass owner cleanup and lifecycle tracking. Reap\n      // only the browser serving this exact profile, then spawn a tracked one.\n      logger.warn(\n        { instanceKey, publishedPort },\n        \"Recycling untracked browser profile process from stale port file\",\n      );\n      managerHost.cleanupBrowserProcessesForDataDir(resolveUserDataDir(instanceKey));\n      await waitForPortRelease(publishedPort);\n      deletePortFile(instanceKey);\n    }\n\n    if (existing && !existing.process.killed && existing.process.exitCode === null) {\n      if (await probePlaywrightMcpTransports(existing.port, existing.capability)) {\n        existing.lastUsedAt = Date.now();\n        return existing.port;\n      }\n      const oldPort = existing.port;\n      killInstance(instanceKey);\n      notifyPlaywrightFailure(instanceKey, { reason: \"unhealthy\" });\n      await waitForPortRelease(oldPort);\n      cleanSingletonFiles(resolveUserDataDir(instanceKey));\n    } else if (existing) {\n      releasePort(existing.port);\n      instances.delete(instanceKey);\n      cleanSingletonFiles(resolveUserDataDir(instanceKey));\n      notifyPlaywrightFailure(instanceKey, {\n        reason: \"exit\",\n        code: existing.process.exitCode,\n      });\n    }\n    const port = await spawnPlaywright(instanceKey, binding.ownerId);\n    const capability = instances.get(instanceKey)?.capability;\n    if (!capability || !(await probePlaywrightMcpTransports(port, capability))) {\n      killInstance(instanceKey);\n      throw new Error(`Browser profile \"${rawProfile}\" did not pass its health check.`);\n    }\n    return port;\n  })().finally(() => spawning.delete(instanceKey));\n  spawning.set(instanceKey, promise);\n  return promise;\n}\n\n/** Close only one topic/job's tabs while preserving the shared profile. */\nexport async function closeBrowserOwnerTabs(\n  ownerId: string,\n  rawProfile: string,\n  owner: string,\n): Promise<number> {\n  const binding = resolvePlaywrightProfileBinding(ownerId, rawProfile);\n  const instanceKey = binding.instanceKey;\n  const inProgress = spawning.get(instanceKey);\n  if (inProgress) await inProgress;\n  assertInstanceOwner(instanceKey, binding.ownerId);\n  const instance = instances.get(instanceKey);\n  if (!instance) return 0;\n  const port = instance.port;\n\n  const query = new URLSearchParams({ owner });\n  const response = await fetch(`http://127.0.0.1:${port}/owners?${query}`, {\n    method: \"DELETE\",\n    headers: {\n      \"X-Browser-Capability\": instance.capability,\n    },\n    signal: AbortSignal.timeout(5000),\n  });\n  if (!response.ok) throw new Error(`browser MCP owner cleanup failed (${response.status})`);\n  const result = (await response.json()) as { closed?: number };\n  return typeof result.closed === \"number\" ? result.closed : 0;\n}\n\n/**\n * Poll until the SSE server responds, or timeout.\n * Returns true if the server is healthy, false on timeout.\n */\nasync function waitForServer(\n  port: number,\n  expectedSpawnNonce: string,\n  timeoutMs: number,\n): Promise<boolean> {\n  const start = Date.now();\n  while (Date.now() - start < timeoutMs) {\n    try {\n      const response = await fetch(`http://127.0.0.1:${port}/health`, {\n        signal: AbortSignal.timeout(1000),\n      });\n      if (response.ok) {\n        const health: unknown = await response.json();\n        if (matchesSpawnedBrowserHealth(health, expectedSpawnNonce)) {\n          return true;\n        }\n      } else {\n        await response.body?.cancel();\n      }\n    } catch {\n      // The owned child may still be loading or binding its listener.\n    }\n    await delay(300);\n  }\n  logger.warn({ port, timeoutMs }, \"Playwright MCP not ready before timeout\");\n  return false;\n}\n\n/**\n * Kill all Playwright MCP instances for a specific user.\n */\nexport function killPlaywrightForUser(userId: string): void {\n  logger.info({ userId }, \"killPlaywrightForUser: no user-scoped browser profile to kill\");\n}\n\n/**\n * Legacy API retained for callers that still request topic-scoped shutdown.\n * Shared profiles cannot be killed through a single topic.\n */\nexport function killPlaywrightForTopic(userId: string, topic: string): void {\n  logger.info(\n    { userId, topic },\n    \"killPlaywrightForTopic skipped: topic uses a shared browser profile\",\n  );\n}\n\n/**\n * Resolve the on-disk Playwright user-data-dir for a topic/profile id.\n * Useful for external callers that need to inspect / copy / delete the dir without\n * touching the running process.\n */\nexport function resolveTopicProfileDir(userId: string, topic: string): string {\n  return resolveUserDataDir(makeInstanceKey(userId, topic));\n}\n\nexport interface CloneProfileResult {\n  copied: boolean;\n  srcDir: string;\n  dstDir: string;\n  /** Set when `copied=false` to explain why (e.g. src-missing, same-dir, copy-failed:…) */\n  reason?: string;\n}\n\n/**\n * Assign a child to its parent's shared profile when owners match. Browser\n * credentials never cross an owner boundary.\n *\n * Safety: if the parent instance is currently running, we kill it first to flush\n * SQLite WAL state to disk, then copy. The parent is NOT respawned here — the\n * next user message on the parent topic will trigger ensurePlaywright() to bring\n * it back. This avoids a race where copy and live writes interleave.\n *\n * Copy strategy:\n *   - macOS APFS: `cp -cR` triggers clonefile() (metadata-only, ms-level).\n *   - Other platforms, or if clonefile fails: regular recursive copy.\n */\nexport async function cloneProfileForChild(opts: {\n  userId: string;\n  srcTopic: string;\n  dstTopic: string;\n}): Promise<CloneProfileResult> {\n  const srcOwner = getBrowserProfileOwner(opts.srcTopic, opts.userId);\n  const dstOwner = getBrowserProfileOwner(opts.dstTopic, opts.userId);\n  if (srcOwner !== dstOwner) {\n    const srcBinding = resolvePlaywrightProfileBinding(\n      srcOwner,\n      getTopicBrowserProfile(opts.srcTopic),\n    );\n    const dstBinding = resolvePlaywrightProfileBinding(\n      dstOwner,\n      getTopicBrowserProfile(opts.dstTopic),\n    );\n    return {\n      copied: false,\n      srcDir: resolveUserDataDir(srcBinding.instanceKey),\n      dstDir: resolveUserDataDir(dstBinding.instanceKey),\n      reason: \"cross-owner-fresh-profile\",\n    };\n  }\n  if (srcOwner === dstOwner && hasBrowserProfileTopic(opts.dstTopic)) {\n    const profile = getTopicBrowserProfile(opts.srcTopic);\n    assignTopicBrowserProfile({ topicId: opts.dstTopic, actorUserId: dstOwner, profile });\n    const binding = resolvePlaywrightProfileBinding(srcOwner, profile);\n    const sharedDir = resolveUserDataDir(binding.instanceKey);\n    return {\n      copied: false,\n      srcDir: sharedDir,\n      dstDir: sharedDir,\n      reason: \"shared-profile-assignment\",\n    };\n  }\n\n  const srcKey = makeInstanceKey(opts.userId, opts.srcTopic);\n  const dstKey = makeInstanceKey(opts.userId, opts.dstTopic);\n  const srcDir = resolveUserDataDir(srcKey);\n  const dstDir = resolveUserDataDir(dstKey);\n\n  if (srcDir === dstDir) {\n    return { copied: false, srcDir, dstDir, reason: \"same-dir\" };\n  }\n\n  return withPlaywrightInstanceMaintenance([srcKey, dstKey], async () => {\n    // Quiesce parent if running so Chrome flushes SQLite (Cookies, Login Data)\n    // before we read the bytes. The maintenance barrier prevents a concurrent\n    // ensurePlaywright() from reopening either profile until copying finishes.\n    //\n    // killInstance() sends SIGTERM and removes the instance map entry synchronously,\n    // but Chrome's subprocess exit + on-disk flush is async. Empirically 1.0–1.5s\n    // is enough for the cookie store to settle; we wait 1.5s to be safe.\n    const parentWasLive = instances.has(srcKey);\n    if (parentWasLive) {\n      logger.info({ srcKey }, \"Quiescing parent Playwright before profile clone\");\n      killInstance(srcKey);\n      await delay(1500);\n    }\n\n    // Defensive: dst should be brand-new but kill any stray instance just in case\n    if (instances.has(dstKey)) {\n      killInstance(dstKey);\n      await delay(500);\n    }\n\n    if (!existsSync(srcDir)) {\n      return { copied: false, srcDir, dstDir, reason: \"src-missing\" };\n    }\n\n    try {\n      if (existsSync(dstDir)) {\n        rmSync(dstDir, { recursive: true, force: true });\n      }\n      mkdirSync(dirname(dstDir), { recursive: true });\n      if (process.platform === \"darwin\") {\n        try {\n          // `-c` requests clonefile() on APFS for a fast copy-on-write clone.\n          execFileSync(\"cp\", [\"-cR\", srcDir, dstDir], { stdio: \"pipe\" });\n        } catch {\n          cpSync(srcDir, dstDir, { recursive: true });\n        }\n      } else {\n        cpSync(srcDir, dstDir, { recursive: true });\n      }\n    } catch (e) {\n      const reason = `copy-failed: ${e instanceof Error ? e.message : String(e)}`;\n      logger.warn({ srcDir, dstDir, err: e }, \"Playwright profile clone failed\");\n      return { copied: false, srcDir, dstDir, reason };\n    }\n\n    // Strip per-process locks copied from the parent so the child Chrome can\n    // launch on its fresh dir without a fake \"another instance is running\" error.\n    cleanSingletonFiles(dstDir);\n    for (const f of [\"DevToolsActivePort\", \"LOCK\"]) {\n      try {\n        unlinkSync(resolve(dstDir, f));\n      } catch {\n        // Not all profiles have these — ignore.\n      }\n    }\n\n    logger.info({ srcKey, dstKey, srcDir, dstDir }, \"Cloned Playwright profile for child topic\");\n    return { copied: true, srcDir, dstDir };\n  });\n}\n\n/**\n * Compatibility API for hard-delete callers. Shared profile directories are\n * preserved; lifecycle cleanup closes only the deleted topic's owner tabs.\n */\nexport function deleteTopicProfileDir(\n  userId: string,\n  topic: string,\n): { deleted: boolean; dir: string } {\n  const key = makeInstanceKey(userId, topic);\n  const dir = resolveUserDataDir(key);\n  logger.info({ dir, userId, topic }, \"Preserved shared browser profile on topic deletion\");\n  return { deleted: false, dir };\n}\n\n/**\n * Kill all running Playwright MCP instances and wait for them to exit.\n * Call on bot shutdown. Waits up to 3s per instance before giving up.\n */\nexport async function killAllPlaywright(): Promise<void> {\n  const procs = [...instances.entries()].map(([key, inst]) => ({ key, proc: inst.process }));\n  for (const { key } of procs) killInstance(key);\n\n  await Promise.all(\n    procs.map(async ({ key, proc }) => {\n      if (await waitForChildProcessExit(proc, 3000)) return;\n      logger.warn({ instanceKey: key, pid: proc.pid }, \"Playwright MCP ignored SIGTERM\");\n      try {\n        proc.kill(\"SIGKILL\");\n      } catch (err) {\n        logger.warn({ err, instanceKey: key, pid: proc.pid }, \"Failed to SIGKILL Playwright MCP\");\n      }\n      if (!(await waitForChildProcessExit(proc, 1000))) {\n        logger.warn({ instanceKey: key, pid: proc.pid }, \"Playwright MCP did not report exit\");\n      }\n    }),\n  );\n}\n\n// Proactively evict all idle instances every 30 minutes\n// Every 30 minutes: evict idle instances, then reap any orphaned browser the\n// tracked-instance map has lost sight of. The orphan reap is only a backstop —\n// the crash-exit handler already reaps in real time (killBrowserProcsForUserDataDir),\n// so this catches just the rare miss (an exit event that never fired). A single\n// low-frequency sweep keeps it cheap: one `pgrep` that returns nothing when no\n// browser is running, a few `ps` calls only while automation is active.\nsetInterval(\n  () => {\n    while (evictIdleInstance() !== null) {}\n    try {\n      reapPlaywrightOrphans();\n    } catch (e) {\n      logger.debug({ err: e }, \"reapOrphanBrowsers sweep failed\");\n    }\n  },\n  30 * 60 * 1000,\n).unref();\n",
+    "import { type ChildProcess, execFileSync, spawn } from \"node:child_process\";\nimport { createHash, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport {\n  cpSync,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  rmSync,\n  unlinkSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { dirname, join, resolve } from \"node:path\";\nimport {\n  BROWSER_PROFILES_DIR,\n  BROWSER_RS_BIN,\n  type BrowserProxyConfig,\n  PLAYWRIGHT_BASE_PORT,\n  PLAYWRIGHT_MAX_PORT,\n  PLAYWRIGHT_MCP_BIN,\n  PLAYWRIGHT_PORTS_DIR,\n  resolveBrowserProxy,\n} from \"#platform/config\";\nimport { delay } from \"#platform/delay\";\nimport { logger } from \"#platform/logger\";\nimport {\n  cleanSingletonFiles,\n  isPortInUse,\n  killBrowserProcsForUserDataDir,\n  killProcessTreeChildren,\n  reapOrphanBrowsers,\n  reserveAvailableLoopbackPort,\n} from \"#platform/playwright/browser-processes\";\nimport {\n  type HeadedPlaywrightSpawnSpec,\n  resolveHeadedPlaywrightSpawn,\n} from \"#platform/playwright/headed-launch\";\nimport { probePlaywrightMcpTransports } from \"#platform/playwright/transport-probe\";\nimport {\n  type BrowserVaultBrokerHandle,\n  createBrowserVaultBroker,\n} from \"#platform/playwright/vault-broker\";\nimport { sanitizeTopicName } from \"#security/sanitize\";\nimport {\n  assignTopicBrowserProfile,\n  getBrowserProfileOwner,\n  getTopicBrowserProfile,\n  hasBrowserProfileTopic,\n  normalizeBrowserProfileName,\n} from \"#storage/browser-profiles\";\nimport {\n  isLiveOwnedChildProcess,\n  matchesSpawnedBrowserHealth,\n  selectIdleEvictionKey,\n  waitForChildProcessExit,\n} from \"./manager-utils\";\n\nexport interface PlaywrightProfileBinding {\n  readonly instanceKey: string;\n  readonly ownerId: string;\n  readonly profile: string;\n}\n\nexport interface PlaywrightChildEnvironmentContext {\n  instanceKey: string;\n  ownerId: string;\n  capability: string;\n  proxy: BrowserProxyConfig | null;\n  browserRsBin?: string;\n  environment: NodeJS.ProcessEnv;\n}\n\nexport interface PlaywrightManagerHost {\n  readonly portsDir: string;\n  readonly basePort: number;\n  readonly maxPort: number;\n  readonly browserBin: string;\n  readonly browserRsBin?: string;\n  readonly resolveProxy: () => BrowserProxyConfig | null;\n  readonly resolveTopicBinding: (userId: string, topic?: string) => PlaywrightProfileBinding;\n  readonly resolveNamedBinding: (ownerId: string, rawProfile: string) => PlaywrightProfileBinding;\n  readonly resolveInstanceDataDir: (instanceKey: string) => string;\n  readonly createChildEnvironment: (\n    context: PlaywrightChildEnvironmentContext,\n  ) => NodeJS.ProcessEnv;\n  /** Reap an orphan that owns this exact host-managed data directory. */\n  readonly cleanupBrowserProcessesForDataDir: (userDataDir: string) => void;\n  /** Remove an exact host-managed profile directory, rejecting paths outside the host's root. */\n  readonly removeProfileDataDir?: (userDataDir: string) => boolean;\n  /** Reap host-managed browsers that are not represented by the supplied live directories. */\n  readonly reapOrphanBrowsers: (liveUserDataDirs: Iterable<string>) => void;\n}\n\nfunction removeDefaultProfileDataDir(userDataDir: string): boolean {\n  const root = resolve(BROWSER_PROFILES_DIR);\n  const target = resolve(userDataDir);\n  if (dirname(target) !== root) {\n    throw new Error(`Refusing to delete browser profile outside managed root: ${target}`);\n  }\n  const existed = existsSync(target);\n  rmSync(target, { recursive: true, force: true });\n  return existed;\n}\n\nexport {\n  cleanupZombiePlaywright,\n  isBrowserJanitorOwner,\n  reapOrphanBrowsers,\n  selectOrphanBrowserPids,\n} from \"#platform/playwright/browser-processes\";\nexport { probePlaywrightMcpTransports } from \"#platform/playwright/transport-probe\";\nexport {\n  browserProcessMatchesExpectedProfile,\n  extractUserDataDirArg,\n  isLiveOwnedChildProcess,\n  matchesSpawnedBrowserHealth,\n  selectIdleEvictionKey,\n  selectReusablePort,\n  waitForChildProcessExit,\n  waitForChildProcessSpawnError,\n} from \"./manager-utils\";\nexport { PLAYWRIGHT_PORTS_DIR };\n\n/** Multiple topics assigned to one profile reuse one browser process. */\nexport function makeInstanceKey(userId: string, topic: string | undefined): string {\n  return resolvePlaywrightTopicBinding(userId, topic).instanceKey;\n}\n\nexport function resolvePlaywrightTopicBinding(\n  userId: string,\n  topic: string | undefined,\n): PlaywrightProfileBinding {\n  return validateProfileBinding(managerHost.resolveTopicBinding(userId, topic));\n}\n\nfunction defaultTopicBinding(userId: string, topic: string | undefined): PlaywrightProfileBinding {\n  if (!topic) return managerHost.resolveNamedBinding(userId, \"default\");\n  const ownerId = getBrowserProfileOwner(topic, userId);\n  const profile = getTopicBrowserProfile(topic);\n  return managerHost.resolveNamedBinding(ownerId, profile);\n}\n\nexport function makeBrowserProfileInstanceKey(ownerId: string, rawProfile: string): string {\n  return resolvePlaywrightProfileBinding(ownerId, rawProfile).instanceKey;\n}\n\nexport function resolvePlaywrightProfileBinding(\n  ownerId: string,\n  rawProfile: string,\n): PlaywrightProfileBinding {\n  return validateProfileBinding(managerHost.resolveNamedBinding(ownerId, rawProfile));\n}\n\nfunction validateProfileBinding(binding: PlaywrightProfileBinding): PlaywrightProfileBinding {\n  if (\n    !binding ||\n    typeof binding.instanceKey !== \"string\" ||\n    !binding.instanceKey.trim() ||\n    typeof binding.ownerId !== \"string\" ||\n    !binding.ownerId.trim() ||\n    typeof binding.profile !== \"string\" ||\n    !binding.profile.trim()\n  ) {\n    throw new Error(\"invalid Playwright profile binding\");\n  }\n  return Object.freeze({ ...binding });\n}\n\nfunction defaultNamedBinding(_ownerId: string, rawProfile: string): PlaywrightProfileBinding {\n  const profile = normalizeBrowserProfileName(rawProfile);\n  const instanceKey = `profile:${profile}`;\n  return {\n    instanceKey,\n    ownerId: \"local\",\n    profile,\n  };\n}\n\nexport function legacyBrowserProfileName(topic: string): string {\n  return `legacy_${createHash(\"sha256\").update(topic).digest(\"hex\").slice(0, 12)}`;\n}\n\nfunction defaultChildEnvironment(context: PlaywrightChildEnvironmentContext): NodeJS.ProcessEnv {\n  const childEnvironment: NodeJS.ProcessEnv = {};\n  for (const key of [\n    \"HOME\",\n    \"PATH\",\n    \"TMPDIR\",\n    \"TMP\",\n    \"TEMP\",\n    \"LANG\",\n    \"LC_ALL\",\n    \"LC_CTYPE\",\n    \"DISPLAY\",\n    \"WAYLAND_DISPLAY\",\n    \"XAUTHORITY\",\n    \"DBUS_SESSION_BUS_ADDRESS\",\n    \"XDG_RUNTIME_DIR\",\n    \"XDG_CONFIG_HOME\",\n    \"XDG_CACHE_HOME\",\n    \"XDG_DATA_HOME\",\n    \"AB_CHROME\",\n    \"AB_CONNECT\",\n    \"RUST_LOG\",\n    \"RUST_BACKTRACE\",\n  ]) {\n    if (context.environment[key] !== undefined) childEnvironment[key] = context.environment[key];\n  }\n  return childEnvironment;\n}\n\nconst defaultManagerHost: Readonly<PlaywrightManagerHost> = Object.freeze({\n  portsDir: PLAYWRIGHT_PORTS_DIR,\n  basePort: PLAYWRIGHT_BASE_PORT,\n  maxPort: PLAYWRIGHT_MAX_PORT,\n  browserBin: PLAYWRIGHT_MCP_BIN,\n  browserRsBin: BROWSER_RS_BIN,\n  resolveProxy: resolveBrowserProxy,\n  resolveTopicBinding: defaultTopicBinding,\n  resolveNamedBinding: defaultNamedBinding,\n  resolveInstanceDataDir(instanceKey: string) {\n    const { ownerId, profile } = parseInstanceKey(instanceKey);\n    return defaultProfileDir(ownerId, profile);\n  },\n  createChildEnvironment: defaultChildEnvironment,\n  cleanupBrowserProcessesForDataDir: killBrowserProcsForUserDataDir,\n  removeProfileDataDir: removeDefaultProfileDataDir,\n  reapOrphanBrowsers,\n});\n\nlet managerHost: Readonly<PlaywrightManagerHost> = defaultManagerHost;\n\n/**\n * Configure product-specific profile storage and browser launch glue.\n * Call once during bootstrap, before any browser instance is started.\n */\nexport function configurePlaywrightManagerHost(\n  overrides: Partial<PlaywrightManagerHost>,\n): Readonly<PlaywrightManagerHost> {\n  if (instances.size > 0 || spawning.size > 0 || pinnedInstances.size > 0) {\n    throw new Error(\"cannot configure Playwright manager while browser instances are active\");\n  }\n  const next = { ...managerHost, ...overrides };\n  if (!next.portsDir || !Number.isInteger(next.basePort) || !Number.isInteger(next.maxPort)) {\n    throw new Error(\"invalid Playwright manager paths or port range\");\n  }\n  if (next.basePort < 1 || next.maxPort > 65_535 || next.basePort > next.maxPort) {\n    throw new Error(\"invalid Playwright manager port range\");\n  }\n  if (!next.browserBin) {\n    throw new Error(\"Browser manager gateway is required\");\n  }\n  if (\n    next.resolveInstanceDataDir !== defaultManagerHost.resolveInstanceDataDir &&\n    (next.cleanupBrowserProcessesForDataDir ===\n      defaultManagerHost.cleanupBrowserProcessesForDataDir ||\n      !next.removeProfileDataDir ||\n      next.removeProfileDataDir === defaultManagerHost.removeProfileDataDir ||\n      next.reapOrphanBrowsers === defaultManagerHost.reapOrphanBrowsers)\n  ) {\n    throw new Error(\n      \"custom Playwright profile paths require host crash cleanup, profile removal, and orphan sweep hooks\",\n    );\n  }\n  managerHost = Object.freeze(next);\n  return managerHost;\n}\n\nexport function getPlaywrightManagerHost(): Readonly<PlaywrightManagerHost> {\n  return managerHost;\n}\n\n/** Restore Negotium's built-in browser host after all instances are stopped. */\nexport function resetPlaywrightManagerHost(): void {\n  configurePlaywrightManagerHost(defaultManagerHost);\n}\n\ninterface InstanceKeyParts {\n  ownerId: string;\n  profile: string;\n}\n\nfunction parseInstanceKey(instanceKey: string): InstanceKeyParts {\n  const shared = /^profile:(.+)$/.exec(instanceKey);\n  if (shared && !shared[1]!.includes(\":\")) {\n    return { ownerId: \"local\", profile: normalizeBrowserProfileName(shared[1]!) };\n  }\n  const match = /^profile:([^:]+):(.+)$/.exec(instanceKey);\n  if (!match) return { ownerId: \"legacy\", profile: sanitizeTopicName(instanceKey) };\n  return {\n    ownerId: decodeURIComponent(match[1]!),\n    profile: normalizeBrowserProfileName(match[2]!),\n  };\n}\n\nfunction portFileName(instanceKey: string): string {\n  return createHash(\"sha256\").update(instanceKey).digest(\"hex\").slice(0, 24);\n}\n\nfunction writePortFile(instanceKey: string, port: number) {\n  try {\n    mkdirSync(managerHost.portsDir, { recursive: true });\n    writeFileSync(join(managerHost.portsDir, portFileName(instanceKey)), String(port));\n  } catch (e) {\n    logger.warn({ err: e, instanceKey, port }, \"Failed to save playwright port file\");\n  }\n}\n\nfunction deletePortFile(instanceKey: string) {\n  try {\n    unlinkSync(join(managerHost.portsDir, portFileName(instanceKey)));\n  } catch (e) {\n    if ((e as NodeJS.ErrnoException).code === \"ENOENT\") return;\n    logger.warn({ err: e, instanceKey }, \"Failed to delete playwright port file\");\n  }\n}\n\nfunction readPortFile(instanceKey: string): number | null {\n  try {\n    const port = Number.parseInt(\n      readFileSync(join(managerHost.portsDir, portFileName(instanceKey)), \"utf8\").trim(),\n      10,\n    );\n    return Number.isInteger(port) ? port : null;\n  } catch {\n    return null;\n  }\n}\n\nconst MAX_IDLE_MS = 2 * 60 * 60 * 1000; // 2 hours idle → eligible for eviction\n\ninterface PlaywrightInstance {\n  process: ChildProcess;\n  port: number;\n  ownerId: string;\n  startedAt: number;\n  lastUsedAt: number;\n  capability: string;\n  vaultBroker: BrowserVaultBrokerHandle;\n}\n\nconst instances = new Map<string, PlaywrightInstance>();\n\nfunction assertInstanceOwner(instanceKey: string, ownerId: string): void {\n  const existing = instances.get(instanceKey);\n  if (existing && existing.ownerId !== ownerId) {\n    throw new Error(\n      `Playwright profile binding owner changed for \"${instanceKey}\" (${existing.ownerId} -> ${ownerId})`,\n    );\n  }\n}\n\n// Track used ports to avoid collisions\nconst usedPorts = new Set<number>();\n\n// Prevent concurrent spawns for the same key\nconst spawning = new Map<string, Promise<number | null>>();\n\nexport interface PlaywrightMaintenanceControl {\n  /** Stop one of the locked instances before mutating its profile directory. */\n  stopInstance(instanceKey: string): Promise<boolean>;\n}\n\n/** Serialize destructive profile maintenance with normal browser startup. */\nexport async function withPlaywrightInstanceMaintenance<T>(\n  rawKeys: string[],\n  operation: (control: PlaywrightMaintenanceControl) => Promise<T>,\n): Promise<T> {\n  const keys = [...new Set(rawKeys)].sort();\n  const lockedKeys = new Set(keys);\n  for (;;) {\n    const pending = keys\n      .map((key) => spawning.get(key))\n      .filter((promise): promise is Promise<number | null> => promise !== undefined);\n    if (pending.length > 0) {\n      await Promise.allSettled(pending);\n      continue;\n    }\n\n    let releaseBarrier!: () => void;\n    const barrier = new Promise<number | null>((resolveBarrier) => {\n      releaseBarrier = () => resolveBarrier(null);\n    });\n    // No await occurs between the registry check and registration, so another\n    // event-loop task cannot acquire any of these keys concurrently.\n    for (const key of keys) spawning.set(key, barrier);\n\n    try {\n      return await operation({\n        async stopInstance(instanceKey) {\n          if (!lockedKeys.has(instanceKey)) {\n            throw new Error(`Playwright maintenance does not own instance \"${instanceKey}\"`);\n          }\n          const process = instances.get(instanceKey)?.process;\n          if (!process) return false;\n          killInstance(instanceKey);\n          if (!(await waitForChildProcessExit(process, 3000))) {\n            logger.warn(\n              { instanceKey, pid: process.pid },\n              \"Playwright MCP ignored SIGTERM during profile maintenance\",\n            );\n            try {\n              process.kill(\"SIGKILL\");\n            } catch (error) {\n              logger.warn(\n                { err: error, instanceKey, pid: process.pid },\n                \"Failed to SIGKILL Playwright MCP during profile maintenance\",\n              );\n            }\n            await waitForChildProcessExit(process, 1000);\n          }\n          return true;\n        },\n      });\n    } finally {\n      for (const key of keys) {\n        if (spawning.get(key) === barrier) spawning.delete(key);\n      }\n      releaseBarrier();\n    }\n  }\n}\n\n/** Stop one managed instance under the same serialization used by startup and profile mutation. */\nexport function stopPlaywrightInstance(instanceKey: string): Promise<boolean> {\n  return withPlaywrightInstanceMaintenance([instanceKey], ({ stopInstance }) =>\n    stopInstance(instanceKey),\n  );\n}\n\n/** Run owner-aware named-profile maintenance under one lifecycle barrier. */\nexport function withPlaywrightProfileMaintenance<T>(\n  ownerId: string,\n  rawProfile: string,\n  operation: (\n    binding: PlaywrightProfileBinding,\n    control: PlaywrightMaintenanceControl,\n  ) => Promise<T>,\n): Promise<T> {\n  const binding = resolvePlaywrightProfileBinding(ownerId, rawProfile);\n  return withPlaywrightInstanceMaintenance([binding.instanceKey], async (control) => {\n    assertInstanceOwner(binding.instanceKey, binding.ownerId);\n    return operation(binding, control);\n  });\n}\n\n/** Stop a named profile before deleting or replacing its host-managed data directory. */\nexport function stopPlaywrightProfile(ownerId: string, rawProfile: string): Promise<boolean> {\n  return withPlaywrightProfileMaintenance(ownerId, rawProfile, (binding, { stopInstance }) =>\n    stopInstance(binding.instanceKey),\n  );\n}\n\nexport interface RemovePlaywrightProfileDataResult {\n  dataDir: string;\n  processStopped: boolean;\n  dataRemoved: boolean;\n}\n\nexport interface RemovePlaywrightProfileDataOptions {\n  /** Revalidate external ownership immediately before the synchronous removal. */\n  beforeRemove?: () => void;\n  /** Commit external metadata before releasing the profile lifecycle barrier. */\n  afterRemove?: () => void;\n}\n\n/** Stop all exact-profile processes and remove its data through the configured host boundary. */\nexport function removePlaywrightProfileData(\n  ownerId: string,\n  rawProfile: string,\n  options: RemovePlaywrightProfileDataOptions = {},\n): Promise<RemovePlaywrightProfileDataResult> {\n  return withPlaywrightProfileMaintenance(\n    ownerId,\n    rawProfile,\n    async (binding, { stopInstance }) => {\n      const dataDir = resolveUserDataDir(binding.instanceKey);\n      const processStopped = await stopInstance(binding.instanceKey);\n      managerHost.cleanupBrowserProcessesForDataDir(dataDir);\n      deletePortFile(binding.instanceKey);\n      options.beforeRemove?.();\n      const removeProfileDataDir = managerHost.removeProfileDataDir;\n      if (!removeProfileDataDir) {\n        throw new Error(\"Browser profile deletion is not configured for this host.\");\n      }\n      const dataRemoved = removeProfileDataDir(dataDir);\n      options.afterRemove?.();\n      return { dataDir, processStopped, dataRemoved };\n    },\n  );\n}\n\n// A shared profile may have several concurrent turns. Reference counts keep an\n// idle sweep from evicting the process until every borrower has finished.\nconst pinnedInstances = new Map<string, number>();\n\nexport function pinPlaywrightInstance(instanceKey: string): void {\n  pinnedInstances.set(instanceKey, (pinnedInstances.get(instanceKey) ?? 0) + 1);\n}\n\nexport function unpinPlaywrightInstance(instanceKey: string): void {\n  const count = pinnedInstances.get(instanceKey);\n  if (count === undefined) return;\n  if (count <= 1) pinnedInstances.delete(instanceKey);\n  else pinnedInstances.set(instanceKey, count - 1);\n}\n\nexport function getPlaywrightCapability(instanceKey: string): string | undefined {\n  return instances.get(instanceKey)?.capability;\n}\n\n/** Resolve a live browser capability back to its owning user. */\nexport function resolvePlaywrightCapabilityOwner(capability: string): string | undefined {\n  if (!capability) return undefined;\n  const provided = Buffer.from(capability);\n  for (const instance of instances.values()) {\n    const expected = Buffer.from(instance.capability);\n    if (provided.length === expected.length && timingSafeEqual(provided, expected)) {\n      return instance.ownerId;\n    }\n  }\n  return undefined;\n}\n\n/** Run the configured host's path-bounded orphan sweep against current live instances. */\nexport function reapPlaywrightOrphans(): void {\n  managerHost.reapOrphanBrowsers([...instances.keys()].map(resolveUserDataDir));\n}\n\n// --- Browser MCP failure notification callback ---\n// Fired when a managed process fails or its transport becomes unhealthy.\n// Intentional cleanup paths do not notify consumers.\nexport interface PlaywrightFailure {\n  reason: \"exit\" | \"process-error\" | \"unhealthy\";\n  code?: number | null;\n  error?: string;\n}\n\ntype PlaywrightFailureHandler = (instanceKey: string, failure: PlaywrightFailure) => void;\nconst playwrightFailureHandlers = new Set<PlaywrightFailureHandler>();\nexport function onPlaywrightFailure(handler: PlaywrightFailureHandler): () => void {\n  playwrightFailureHandlers.add(handler);\n  return () => playwrightFailureHandlers.delete(handler);\n}\n\nfunction notifyPlaywrightFailure(instanceKey: string, failure: PlaywrightFailure): void {\n  for (const handler of playwrightFailureHandlers) {\n    try {\n      handler(instanceKey, failure);\n    } catch (err) {\n      logger.warn({ err, instanceKey, failure }, \"Playwright failure handler failed\");\n    }\n  }\n}\n\n/**\n * Evict the oldest idle instance to free a port.\n * Returns the evicted port, or null when no instance was eligible.\n */\nfunction evictIdleInstance(): number | null {\n  const now = Date.now();\n  const oldestKey = selectIdleEvictionKey(\n    instances,\n    pinnedInstances.keys(),\n    spawning.keys(),\n    now,\n    MAX_IDLE_MS,\n  );\n  if (oldestKey) {\n    const instance = instances.get(oldestKey);\n    if (!instance) return null;\n    const idleMin = ((now - instance.lastUsedAt) / 60000).toFixed(0);\n    logger.info({ key: oldestKey, idleMin }, \"Evicting idle playwright instance\");\n    killInstance(oldestKey);\n    return instance.port;\n  }\n  return null;\n}\n\n/**\n * Find an available port without depending on platform process-inspection tools.\n * If all ports are taken, evicts the oldest idle instance.\n */\nasync function allocatePort(): Promise<number> {\n  const port = await reserveAvailableLoopbackPort(\n    managerHost.basePort,\n    managerHost.maxPort,\n    usedPorts,\n    async (candidate) => {\n      // A real loopback bind probe is portable and fail-closed. In particular,\n      // a missing `lsof` must never make an occupied port appear available.\n      const occupied = await isPortInUse(candidate);\n      if (occupied) logger.warn({ port: candidate }, \"Port occupied by external process, skipping\");\n      return occupied;\n    },\n  );\n  if (port !== null) return port;\n\n  // All ports used — try evicting an idle instance\n  const evictedPort = evictIdleInstance();\n  if (evictedPort !== null) {\n    // SIGTERM only requests shutdown. Do not hand the port to a replacement\n    // until the old listener is actually gone, and recheck every candidate in\n    // case another allocator claimed a different port while we were waiting.\n    await waitForPortRelease(evictedPort);\n    return allocatePort();\n  }\n\n  throw new Error(\n    `No available ports for Playwright MCP (${instances.size} active instances, range ${managerHost.basePort}-${managerHost.maxPort})`,\n  );\n}\n\nfunction releasePort(port: number) {\n  usedPorts.delete(port);\n}\n\nfunction defaultProfileDir(_ownerId: string, profile: string): string {\n  return resolve(BROWSER_PROFILES_DIR, profile);\n}\n\n/** Resolve the shared profile userDataDir for an instanceKey. */\nfunction resolveUserDataDir(instanceKey: string): string {\n  return managerHost.resolveInstanceDataDir(instanceKey);\n}\n\n/**\n * Kill and clean up a specific instance.\n * Also kills Chrome child processes and cleans up Singleton files.\n * @param keepPort - If true, don't release the port (for same-port respawn).\n */\nfunction killInstance(instanceKey: string, opts?: { keepPort?: boolean }) {\n  const inst = instances.get(instanceKey);\n  if (!inst) return;\n\n  // Kill Chrome children first (before killing the MCP server)\n  if (inst.process.pid) {\n    killProcessTreeChildren(inst.process.pid);\n  }\n\n  try {\n    inst.process.kill(\"SIGTERM\");\n  } catch (e) {\n    logger.warn({ err: e, instanceKey }, \"Failed to kill playwright instance\");\n  }\n  void inst.vaultBroker.close();\n\n  // Drop the spawn-time error/exit handlers. Cleanup is done synchronously\n  // here, so the late-firing listeners only add duplicate instances.delete()\n  // calls and keep the process reference alive until exit. Removing them\n  // also lets callers (e.g. killAllPlaywright) attach their own exit waiter\n  // without the spawn handler racing against it.\n  inst.process.removeAllListeners(\"error\");\n  inst.process.removeAllListeners(\"exit\");\n\n  cleanSingletonFiles(resolveUserDataDir(instanceKey));\n\n  if (!opts?.keepPort) releasePort(inst.port);\n  instances.delete(instanceKey);\n  deletePortFile(instanceKey);\n  logger.info(\n    { instanceKey, port: inst.port, keepPort: !!opts?.keepPort },\n    \"Killed Playwright MCP (with cleanup)\",\n  );\n}\n\nconst PLAYWRIGHT_STARTUP_STDERR_LIMIT = 8 * 1024;\n\nfunction captureBoundedStderr(proc: ChildProcess): () => string {\n  let tail = Buffer.alloc(0);\n  proc.stderr?.on(\"data\", (chunk: Buffer | string) => {\n    const next = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n    tail = Buffer.concat([tail, next]);\n    if (tail.byteLength > PLAYWRIGHT_STARTUP_STDERR_LIMIT) {\n      tail = tail.subarray(tail.byteLength - PLAYWRIGHT_STARTUP_STDERR_LIMIT);\n    }\n  });\n  return () => tail.toString(\"utf8\").trim();\n}\n\nexport function watchChildStartup(\n  proc: ChildProcess,\n  stderrTail: () => string,\n): { failure: Promise<never>; stop: () => void } {\n  let stopped = false;\n  let rejectFailure: (error: Error) => void = () => undefined;\n  const diagnostics = () => {\n    const stderr = stderrTail();\n    return stderr ? `\\nstderr (last ${PLAYWRIGHT_STARTUP_STDERR_LIMIT} bytes):\\n${stderr}` : \"\";\n  };\n  const onError = (error: Error) => {\n    rejectFailure(\n      new Error(`Playwright MCP failed to spawn: ${error.message}${diagnostics()}`, {\n        cause: error,\n      }),\n    );\n  };\n  const onExit = (code: number | null, signal: NodeJS.Signals | null) => {\n    rejectFailure(\n      new Error(\n        `Playwright MCP exited during startup (code=${code ?? \"null\"}, signal=${signal ?? \"null\"})${diagnostics()}`,\n      ),\n    );\n  };\n  const failure = new Promise<never>((_resolve, reject) => {\n    rejectFailure = reject;\n    proc.once(\"error\", onError);\n    proc.once(\"exit\", onExit);\n  });\n  const stop = () => {\n    if (stopped) return;\n    stopped = true;\n    proc.off(\"error\", onError);\n    proc.off(\"exit\", onExit);\n  };\n  return { failure, stop };\n}\n\n/**\n * Spawn a browser MCP HTTP server for a shared named profile. The profile\n * identity is encoded in `instanceKey` and decoded inside `resolveUserDataDir`.\n */\n/**\n * Spawn a Playwright MCP process for the given instanceKey.\n * @param instanceKey  Unique key identifying this instance.\n * @param ownerId      Canonical profile owner ID (stored in the instance record).\n * @param reservedPort When provided the process binds to this already-reserved\n *                     port (restart path). When omitted a fresh port is allocated.\n */\nasync function spawnPlaywright(\n  instanceKey: string,\n  ownerId: string,\n  reservedPort?: number,\n  browserBin = managerHost.browserBin,\n): Promise<number> {\n  if (!managerHost.browserRsBin) {\n    throw new Error(\"Browser.rs is unavailable or below the minimum secure version\");\n  }\n  const userDataDir = resolveUserDataDir(instanceKey);\n  const port = reservedPort ?? (await allocatePort());\n  mkdirSync(userDataDir, { recursive: true });\n\n  const mcpArgs = [\n    \"--port\",\n    String(port),\n    // Pin to IPv4. `--host 127.0.0.1` keeps every transport on the same\n    // address family. Without it, a `localhost`→`::1`-only bind breaks the\n    // Maestro MCP client (its SSEClientTransport forces `127.0.0.1` because\n    // the Node `eventsource` package's IPv6 lookup historically failed), so\n    // browser tools would silently disappear from maestro turns.\n    \"--host\",\n    \"127.0.0.1\",\n    // Keep the browser visible. Do not rely on the launcher's implicit\n    // default: an explicit flag prevents wrapper/upstream default changes\n    // from silently switching topic browsers back to headless mode.\n    \"--headed\",\n    \"--user-data-dir\",\n    userDataDir,\n  ];\n  // Pass the egress proxy to the child through the environment rather than\n  // argv so the credentials never surface in `ps`/`/proc` command lines. The\n  // Browser.rs currently rejects this configuration rather than bypassing it.\n  const proxy = managerHost.resolveProxy();\n  if (proxy) {\n    releasePort(port);\n    throw new Error(\"Browser.rs managed mode does not support authenticated egress proxies\");\n  }\n  const capability = randomBytes(32).toString(\"hex\");\n  const spawnNonce = randomBytes(32).toString(\"hex\");\n  let vaultBroker: BrowserVaultBrokerHandle;\n  try {\n    vaultBroker = await createBrowserVaultBroker(ownerId);\n  } catch (error) {\n    releasePort(port);\n    throw error;\n  }\n  const childEnv = {\n    ...managerHost.createChildEnvironment({\n      instanceKey,\n      ownerId,\n      capability,\n      proxy,\n      browserRsBin: managerHost.browserRsBin,\n      environment: process.env,\n    }),\n    AB_MANAGED: \"1\",\n    AB_HTTP_CAPABILITY: capability,\n    AB_SPAWN_NONCE: spawnNonce,\n    AB_SECRET_BROKER_SOCKET: vaultBroker.socketPath,\n    AB_SECRET_BROKER_TOKEN: vaultBroker.token,\n  };\n  // Managed Browser.rs authenticates owner-scoped transports with this root\n  // capability. Product hooks may add launch details but cannot remove it.\n  const command = browserBin.endsWith(\".mjs\") ? process.execPath : browserBin;\n  const args = browserBin.endsWith(\".mjs\") ? [browserBin, ...mcpArgs] : mcpArgs;\n  let spawnSpec: HeadedPlaywrightSpawnSpec;\n  try {\n    spawnSpec = resolveHeadedPlaywrightSpawn(command, args, { environment: childEnv });\n  } catch (err) {\n    await vaultBroker.close();\n    releasePort(port);\n    throw err;\n  }\n  let proc: ChildProcess;\n  try {\n    proc = spawn(spawnSpec.command, spawnSpec.args, {\n      stdio: [\"ignore\", \"ignore\", \"pipe\"],\n      detached: false,\n      env: childEnv,\n    });\n  } catch (err) {\n    await vaultBroker.close();\n    releasePort(port);\n    throw err;\n  }\n  const stderrTail = captureBoundedStderr(proc);\n  const startup = watchChildStartup(proc, stderrTail);\n\n  // When the MCP dies on its own (crash / OOM), its Chrome subtree is reparented\n  // to init and escapes the tracked-instance map. Reap it by user-data-dir here\n  // so a crash can't leak an orphan Chrome that keeps holding memory (the exact\n  // cascade that piles up dozens of zombies under pressure). killInstance()\n  // removes these listeners before signalling, so this only runs on real deaths.\n  const reapCrashedBrowser = () => {\n    const userDataDir = resolveUserDataDir(instanceKey);\n    managerHost.cleanupBrowserProcessesForDataDir(userDataDir);\n    cleanSingletonFiles(userDataDir);\n  };\n\n  proc.once(\"error\", (err) => {\n    logger.error({ err, instanceKey, stderr: stderrTail() || undefined }, \"Playwright MCP error\");\n    if (instances.get(instanceKey)?.process === proc) {\n      releasePort(port);\n      instances.delete(instanceKey);\n      void vaultBroker.close();\n      reapCrashedBrowser();\n      notifyPlaywrightFailure(instanceKey, {\n        reason: \"process-error\",\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  });\n\n  proc.once(\"exit\", (code) => {\n    logger.info({ instanceKey, code, stderr: stderrTail() || undefined }, \"Playwright MCP exited\");\n    // `wasOurs` distinguishes a crash from our own killInstance(): the latter\n    // calls removeAllListeners(\"exit\") + instances.delete() BEFORE the kill\n    // signal lands, so this listener either doesn't fire or sees wasOurs=false.\n    // wasOurs=true here therefore implies the MCP died on its own — Claude\n    // SDK queries waiting on its tool results need to be aborted.\n    const wasOurs = instances.get(instanceKey)?.process === proc;\n    if (wasOurs) {\n      releasePort(port);\n      instances.delete(instanceKey);\n      void vaultBroker.close();\n      reapCrashedBrowser();\n      notifyPlaywrightFailure(instanceKey, { reason: \"exit\", code });\n    }\n  });\n\n  const now = Date.now();\n  instances.set(instanceKey, {\n    process: proc,\n    port,\n    ownerId,\n    startedAt: now,\n    lastUsedAt: now,\n    capability,\n    vaultBroker,\n  });\n\n  let startupError: Error | undefined;\n  let ready = false;\n  try {\n    ready = await Promise.race([\n      (async () =>\n        (await waitForServer(port, spawnNonce, 10_000)) &&\n        (await supportsOwnerCleanup(port, capability)) &&\n        (await probePlaywrightMcpTransports(port, capability)))(),\n      startup.failure,\n    ]);\n  } catch (error) {\n    startupError = error instanceof Error ? error : new Error(String(error));\n  } finally {\n    startup.stop();\n  }\n  if (ready && !isLiveOwnedChildProcess(instances.get(instanceKey), proc)) {\n    ready = false;\n    startupError = new Error(\n      `Playwright MCP exited after readiness but before publication on port ${port}` +\n        (stderrTail() ? `\\nstderr:\\n${stderrTail()}` : \"\"),\n    );\n  }\n  if (!ready) {\n    const exitCode = proc.exitCode;\n    killInstance(instanceKey);\n    if (startupError) throw startupError;\n    throw new Error(\n      `Playwright MCP failed health check after spawn on port ${port}` +\n        (exitCode === null ? \"\" : ` (exitCode=${exitCode})`) +\n        (stderrTail() ? `\\nstderr:\\n${stderrTail()}` : \"\"),\n    );\n  }\n  writePortFile(instanceKey, port);\n  logger.info(\n    { instanceKey, port, pid: proc.pid, ready, virtualDisplay: spawnSpec.virtualDisplay },\n    \"Playwright MCP started\",\n  );\n  return port;\n}\n\nasync function supportsOwnerCleanup(port: number, capability: string): Promise<boolean> {\n  try {\n    const query = new URLSearchParams({ owner: \"__negotium_capability_probe__\" });\n    const response = await fetch(`http://127.0.0.1:${port}/owners?${query}`, {\n      method: \"DELETE\",\n      headers: {\n        \"X-Browser-Capability\": capability,\n      },\n      signal: AbortSignal.timeout(2000),\n    });\n    await response.body?.cancel();\n    return response.ok;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Ensure a healthy browser MCP server is running for this topic's profile.\n * Topics assigned to the same profile reuse one process and data directory.\n * - If running and healthy → reuse\n * - If running but unhealthy → kill and respawn\n * - If not running → spawn\n */\nexport async function ensurePlaywright(userId: string, topic?: string): Promise<number> {\n  const binding = resolvePlaywrightTopicBinding(userId, topic);\n  const { instanceKey, ownerId } = binding;\n\n  // If a spawn/restart is already in progress for this key, wait for it\n  const inProgress = spawning.get(instanceKey);\n  if (inProgress) {\n    const port = await inProgress;\n    assertInstanceOwner(instanceKey, ownerId);\n    if (port !== null) return port;\n    // Restart failed — re-enter: by now another caller may have registered a\n    // newer attempt to join, otherwise we start one ourselves.\n    return ensurePlaywright(userId, topic);\n  }\n\n  // The ENTIRE health-check → kill → spawn sequence lives inside the spawning\n  // promise. The old shape awaited isHealthy() between the guard check and\n  // spawning.set(), so two concurrent callers could both pass the guard: one\n  // would killInstance() the instance the other had just spawned, or both\n  // would spawn and the second instances.set() orphaned the first process\n  // (its port leaked from usedPorts until restart). With no await between\n  // spawning.get() above and spawning.set() below, the guard is airtight on\n  // a single-threaded event loop.\n  const promise = (async (): Promise<number> => {\n    const existing = instances.get(instanceKey);\n    assertInstanceOwner(instanceKey, ownerId);\n\n    if (existing && !existing.process.killed && existing.process.exitCode === null) {\n      if (await probePlaywrightMcpTransports(existing.port, existing.capability)) {\n        existing.lastUsedAt = Date.now();\n        return existing.port;\n      }\n      logger.warn({ instanceKey }, \"Playwright MCP unresponsive, restarting\");\n      const oldPort = existing.port;\n      killInstance(instanceKey);\n      notifyPlaywrightFailure(instanceKey, { reason: \"unhealthy\" });\n      await waitForPortRelease(oldPort);\n      cleanSingletonFiles(resolveUserDataDir(instanceKey));\n    } else if (existing) {\n      releasePort(existing.port);\n      instances.delete(instanceKey);\n      cleanSingletonFiles(resolveUserDataDir(instanceKey));\n      notifyPlaywrightFailure(instanceKey, {\n        reason: \"exit\",\n        code: existing.process.exitCode,\n      });\n    }\n\n    return spawnPlaywright(instanceKey, ownerId);\n  })().finally(() => spawning.delete(instanceKey));\n  spawning.set(instanceKey, promise);\n  return promise;\n}\n\nasync function waitForPortRelease(port: number, timeoutMs = 3000): Promise<void> {\n  const start = Date.now();\n  while (Date.now() - start < timeoutMs) {\n    if (!(await isPortInUse(port))) return;\n    await delay(200);\n  }\n}\n\n/** Start or reuse a named shared profile before assigning more topics to it. */\nexport async function ensureBrowserProfile(ownerId: string, rawProfile: string): Promise<number> {\n  const binding = resolvePlaywrightProfileBinding(ownerId, rawProfile);\n  const instanceKey = binding.instanceKey;\n  const inProgress = spawning.get(instanceKey);\n  if (inProgress) {\n    const port = await inProgress;\n    assertInstanceOwner(instanceKey, binding.ownerId);\n    const capability = instances.get(instanceKey)?.capability;\n    if (port !== null && capability && (await probePlaywrightMcpTransports(port, capability))) {\n      return port;\n    }\n    if (port === null) return ensureBrowserProfile(ownerId, rawProfile);\n    throw new Error(`Browser profile \"${rawProfile}\" failed to start.`);\n  }\n\n  const promise = (async (): Promise<number> => {\n    const publishedPort = readPortFile(instanceKey);\n    const existing = instances.get(instanceKey);\n    assertInstanceOwner(instanceKey, binding.ownerId);\n    if (publishedPort !== null && !existing) {\n      // A port file without an in-memory instance belongs to a previous runtime.\n      // Its per-process capability and ChildProcess handle cannot be recovered,\n      // so adopting it would bypass owner cleanup and lifecycle tracking. Reap\n      // only the browser serving this exact profile, then spawn a tracked one.\n      logger.warn(\n        { instanceKey, publishedPort },\n        \"Recycling untracked browser profile process from stale port file\",\n      );\n      managerHost.cleanupBrowserProcessesForDataDir(resolveUserDataDir(instanceKey));\n      await waitForPortRelease(publishedPort);\n      deletePortFile(instanceKey);\n    }\n\n    if (existing && !existing.process.killed && existing.process.exitCode === null) {\n      if (await probePlaywrightMcpTransports(existing.port, existing.capability)) {\n        existing.lastUsedAt = Date.now();\n        return existing.port;\n      }\n      const oldPort = existing.port;\n      killInstance(instanceKey);\n      notifyPlaywrightFailure(instanceKey, { reason: \"unhealthy\" });\n      await waitForPortRelease(oldPort);\n      cleanSingletonFiles(resolveUserDataDir(instanceKey));\n    } else if (existing) {\n      releasePort(existing.port);\n      instances.delete(instanceKey);\n      cleanSingletonFiles(resolveUserDataDir(instanceKey));\n      notifyPlaywrightFailure(instanceKey, {\n        reason: \"exit\",\n        code: existing.process.exitCode,\n      });\n    }\n    const port = await spawnPlaywright(instanceKey, binding.ownerId);\n    const capability = instances.get(instanceKey)?.capability;\n    if (!capability || !(await probePlaywrightMcpTransports(port, capability))) {\n      killInstance(instanceKey);\n      throw new Error(`Browser profile \"${rawProfile}\" did not pass its health check.`);\n    }\n    return port;\n  })().finally(() => spawning.delete(instanceKey));\n  spawning.set(instanceKey, promise);\n  return promise;\n}\n\n/** Close only one topic/job's tabs while preserving the shared profile. */\nexport async function closeBrowserOwnerTabs(\n  ownerId: string,\n  rawProfile: string,\n  owner: string,\n): Promise<number> {\n  const binding = resolvePlaywrightProfileBinding(ownerId, rawProfile);\n  const instanceKey = binding.instanceKey;\n  const inProgress = spawning.get(instanceKey);\n  if (inProgress) await inProgress;\n  assertInstanceOwner(instanceKey, binding.ownerId);\n  const instance = instances.get(instanceKey);\n  if (!instance) return 0;\n  const port = instance.port;\n\n  const query = new URLSearchParams({ owner });\n  const response = await fetch(`http://127.0.0.1:${port}/owners?${query}`, {\n    method: \"DELETE\",\n    headers: {\n      \"X-Browser-Capability\": instance.capability,\n    },\n    signal: AbortSignal.timeout(5000),\n  });\n  if (!response.ok) throw new Error(`browser MCP owner cleanup failed (${response.status})`);\n  const result = (await response.json()) as { closed?: number };\n  return typeof result.closed === \"number\" ? result.closed : 0;\n}\n\n/**\n * Poll until the SSE server responds, or timeout.\n * Returns true if the server is healthy, false on timeout.\n */\nasync function waitForServer(\n  port: number,\n  expectedSpawnNonce: string,\n  timeoutMs: number,\n): Promise<boolean> {\n  const start = Date.now();\n  while (Date.now() - start < timeoutMs) {\n    try {\n      const response = await fetch(`http://127.0.0.1:${port}/health`, {\n        signal: AbortSignal.timeout(1000),\n      });\n      if (response.ok) {\n        const health: unknown = await response.json();\n        if (matchesSpawnedBrowserHealth(health, expectedSpawnNonce)) {\n          return true;\n        }\n      } else {\n        await response.body?.cancel();\n      }\n    } catch {\n      // The owned child may still be loading or binding its listener.\n    }\n    await delay(300);\n  }\n  logger.warn({ port, timeoutMs }, \"Playwright MCP not ready before timeout\");\n  return false;\n}\n\n/**\n * Kill all Playwright MCP instances for a specific user.\n */\nexport function killPlaywrightForUser(userId: string): void {\n  logger.info({ userId }, \"killPlaywrightForUser: no user-scoped browser profile to kill\");\n}\n\n/**\n * Legacy API retained for callers that still request topic-scoped shutdown.\n * Shared profiles cannot be killed through a single topic.\n */\nexport function killPlaywrightForTopic(userId: string, topic: string): void {\n  logger.info(\n    { userId, topic },\n    \"killPlaywrightForTopic skipped: topic uses a shared browser profile\",\n  );\n}\n\n/**\n * Resolve the on-disk Playwright user-data-dir for a topic/profile id.\n * Useful for external callers that need to inspect / copy / delete the dir without\n * touching the running process.\n */\nexport function resolveTopicProfileDir(userId: string, topic: string): string {\n  return resolveUserDataDir(makeInstanceKey(userId, topic));\n}\n\nexport interface CloneProfileResult {\n  copied: boolean;\n  srcDir: string;\n  dstDir: string;\n  /** Set when `copied=false` to explain why (e.g. src-missing, same-dir, copy-failed:…) */\n  reason?: string;\n}\n\n/**\n * Assign a child to its parent's shared profile when owners match. Browser\n * credentials never cross an owner boundary.\n *\n * Safety: if the parent instance is currently running, we kill it first to flush\n * SQLite WAL state to disk, then copy. The parent is NOT respawned here — the\n * next user message on the parent topic will trigger ensurePlaywright() to bring\n * it back. This avoids a race where copy and live writes interleave.\n *\n * Copy strategy:\n *   - macOS APFS: `cp -cR` triggers clonefile() (metadata-only, ms-level).\n *   - Other platforms, or if clonefile fails: regular recursive copy.\n */\nexport async function cloneProfileForChild(opts: {\n  userId: string;\n  srcTopic: string;\n  dstTopic: string;\n}): Promise<CloneProfileResult> {\n  const srcOwner = getBrowserProfileOwner(opts.srcTopic, opts.userId);\n  const dstOwner = getBrowserProfileOwner(opts.dstTopic, opts.userId);\n  if (srcOwner !== dstOwner) {\n    const srcBinding = resolvePlaywrightProfileBinding(\n      srcOwner,\n      getTopicBrowserProfile(opts.srcTopic),\n    );\n    const dstBinding = resolvePlaywrightProfileBinding(\n      dstOwner,\n      getTopicBrowserProfile(opts.dstTopic),\n    );\n    return {\n      copied: false,\n      srcDir: resolveUserDataDir(srcBinding.instanceKey),\n      dstDir: resolveUserDataDir(dstBinding.instanceKey),\n      reason: \"cross-owner-fresh-profile\",\n    };\n  }\n  if (srcOwner === dstOwner && hasBrowserProfileTopic(opts.dstTopic)) {\n    const profile = getTopicBrowserProfile(opts.srcTopic);\n    assignTopicBrowserProfile({ topicId: opts.dstTopic, actorUserId: dstOwner, profile });\n    const binding = resolvePlaywrightProfileBinding(srcOwner, profile);\n    const sharedDir = resolveUserDataDir(binding.instanceKey);\n    return {\n      copied: false,\n      srcDir: sharedDir,\n      dstDir: sharedDir,\n      reason: \"shared-profile-assignment\",\n    };\n  }\n\n  const srcKey = makeInstanceKey(opts.userId, opts.srcTopic);\n  const dstKey = makeInstanceKey(opts.userId, opts.dstTopic);\n  const srcDir = resolveUserDataDir(srcKey);\n  const dstDir = resolveUserDataDir(dstKey);\n\n  if (srcDir === dstDir) {\n    return { copied: false, srcDir, dstDir, reason: \"same-dir\" };\n  }\n\n  return withPlaywrightInstanceMaintenance([srcKey, dstKey], async () => {\n    // Quiesce parent if running so Chrome flushes SQLite (Cookies, Login Data)\n    // before we read the bytes. The maintenance barrier prevents a concurrent\n    // ensurePlaywright() from reopening either profile until copying finishes.\n    //\n    // killInstance() sends SIGTERM and removes the instance map entry synchronously,\n    // but Chrome's subprocess exit + on-disk flush is async. Empirically 1.0–1.5s\n    // is enough for the cookie store to settle; we wait 1.5s to be safe.\n    const parentWasLive = instances.has(srcKey);\n    if (parentWasLive) {\n      logger.info({ srcKey }, \"Quiescing parent Playwright before profile clone\");\n      killInstance(srcKey);\n      await delay(1500);\n    }\n\n    // Defensive: dst should be brand-new but kill any stray instance just in case\n    if (instances.has(dstKey)) {\n      killInstance(dstKey);\n      await delay(500);\n    }\n\n    if (!existsSync(srcDir)) {\n      return { copied: false, srcDir, dstDir, reason: \"src-missing\" };\n    }\n\n    try {\n      if (existsSync(dstDir)) {\n        rmSync(dstDir, { recursive: true, force: true });\n      }\n      mkdirSync(dirname(dstDir), { recursive: true });\n      if (process.platform === \"darwin\") {\n        try {\n          // `-c` requests clonefile() on APFS for a fast copy-on-write clone.\n          execFileSync(\"cp\", [\"-cR\", srcDir, dstDir], { stdio: \"pipe\" });\n        } catch {\n          cpSync(srcDir, dstDir, { recursive: true });\n        }\n      } else {\n        cpSync(srcDir, dstDir, { recursive: true });\n      }\n    } catch (e) {\n      const reason = `copy-failed: ${e instanceof Error ? e.message : String(e)}`;\n      logger.warn({ srcDir, dstDir, err: e }, \"Playwright profile clone failed\");\n      return { copied: false, srcDir, dstDir, reason };\n    }\n\n    // Strip per-process locks copied from the parent so the child Chrome can\n    // launch on its fresh dir without a fake \"another instance is running\" error.\n    cleanSingletonFiles(dstDir);\n    for (const f of [\"DevToolsActivePort\", \"LOCK\"]) {\n      try {\n        unlinkSync(resolve(dstDir, f));\n      } catch {\n        // Not all profiles have these — ignore.\n      }\n    }\n\n    logger.info({ srcKey, dstKey, srcDir, dstDir }, \"Cloned Playwright profile for child topic\");\n    return { copied: true, srcDir, dstDir };\n  });\n}\n\n/**\n * Compatibility API for hard-delete callers. Shared profile directories are\n * preserved; lifecycle cleanup closes only the deleted topic's owner tabs.\n */\nexport function deleteTopicProfileDir(\n  userId: string,\n  topic: string,\n): { deleted: boolean; dir: string } {\n  const key = makeInstanceKey(userId, topic);\n  const dir = resolveUserDataDir(key);\n  logger.info({ dir, userId, topic }, \"Preserved shared browser profile on topic deletion\");\n  return { deleted: false, dir };\n}\n\n/**\n * Kill all running Playwright MCP instances and wait for them to exit.\n * Call on bot shutdown. Waits up to 3s per instance before giving up.\n */\nexport async function killAllPlaywright(): Promise<void> {\n  const procs = [...instances.entries()].map(([key, inst]) => ({ key, proc: inst.process }));\n  for (const { key } of procs) killInstance(key);\n\n  await Promise.all(\n    procs.map(async ({ key, proc }) => {\n      if (await waitForChildProcessExit(proc, 3000)) return;\n      logger.warn({ instanceKey: key, pid: proc.pid }, \"Playwright MCP ignored SIGTERM\");\n      try {\n        proc.kill(\"SIGKILL\");\n      } catch (err) {\n        logger.warn({ err, instanceKey: key, pid: proc.pid }, \"Failed to SIGKILL Playwright MCP\");\n      }\n      if (!(await waitForChildProcessExit(proc, 1000))) {\n        logger.warn({ instanceKey: key, pid: proc.pid }, \"Playwright MCP did not report exit\");\n      }\n    }),\n  );\n}\n\n// Proactively evict all idle instances every 30 minutes\n// Every 30 minutes: evict idle instances, then reap any orphaned browser the\n// tracked-instance map has lost sight of. The orphan reap is only a backstop —\n// the crash-exit handler already reaps in real time (killBrowserProcsForUserDataDir),\n// so this catches just the rare miss (an exit event that never fired). A single\n// low-frequency sweep keeps it cheap: one `pgrep` that returns nothing when no\n// browser is running, a few `ps` calls only while automation is active.\nsetInterval(\n  () => {\n    while (evictIdleInstance() !== null) {}\n    try {\n      reapPlaywrightOrphans();\n    } catch (e) {\n      logger.debug({ err: e }, \"reapOrphanBrowsers sweep failed\");\n    }\n  },\n  30 * 60 * 1000,\n).unref();\n",
     "export const delay = (ms: number) => new Promise<void>((r) => setTimeout(r, ms));\n",
     "import { accessSync, constants } from \"node:fs\";\nimport { delimiter, isAbsolute, resolve } from \"node:path\";\n\nexport interface HeadedPlaywrightSpawnSpec {\n  command: string;\n  args: string[];\n  virtualDisplay: boolean;\n}\n\ninterface HeadedPlaywrightSpawnOptions {\n  platform?: NodeJS.Platform;\n  environment?: NodeJS.ProcessEnv;\n  findExecutable?: (command: string, environment: NodeJS.ProcessEnv) => string | null;\n}\n\nfunction findExecutableOnPath(\n  command: string,\n  environment: NodeJS.ProcessEnv = process.env,\n): string | null {\n  const candidates = isAbsolute(command)\n    ? [command]\n    : (environment.PATH ?? \"\")\n        .split(delimiter)\n        .filter(Boolean)\n        .map((directory) => resolve(directory, command));\n  for (const candidate of candidates) {\n    try {\n      accessSync(candidate, constants.X_OK);\n      return candidate;\n    } catch {\n      // Keep searching PATH.\n    }\n  }\n  return null;\n}\n\n/** Select the safe argv-only launcher for a visible browser MCP. */\nexport function resolveHeadedPlaywrightSpawn(\n  command: string,\n  args: readonly string[],\n  options: HeadedPlaywrightSpawnOptions = {},\n): HeadedPlaywrightSpawnSpec {\n  const platform = options.platform ?? process.platform;\n  const environment = options.environment ?? process.env;\n  const hasDisplay = Boolean(environment.DISPLAY?.trim() || environment.WAYLAND_DISPLAY?.trim());\n  if (platform !== \"linux\" || hasDisplay) {\n    return { command, args: [...args], virtualDisplay: false };\n  }\n\n  const xvfbRun = (options.findExecutable ?? findExecutableOnPath)(\"xvfb-run\", environment);\n  if (!xvfbRun) {\n    throw new Error(\n      \"Headed Playwright on Linux requires DISPLAY/WAYLAND_DISPLAY or xvfb-run; install Xvfb and ensure xvfb-run is on PATH\",\n    );\n  }\n  return {\n    command: xvfbRun,\n    args: [\"-a\", \"-s\", \"-screen 0 1440x1000x24\", command, ...args],\n    virtualDisplay: true,\n  };\n}\n",
     "import { Client } from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { SSEClientTransport } from \"@modelcontextprotocol/sdk/client/sse.js\";\nimport { StreamableHTTPClientTransport } from \"@modelcontextprotocol/sdk/client/streamableHttp.js\";\nimport type { FetchLike, Transport } from \"@modelcontextprotocol/sdk/shared/transport.js\";\nimport { browserOwnerCapability } from \"#platform/playwright/capability\";\n\nconst PROBE_OWNER = \"__negotium_transport_probe__\";\nconst PROBE_TIMEOUT_MS = 3000;\n\ninterface ProbeTransportOptions {\n  terminate?: () => Promise<void>;\n  timeoutMs?: number;\n}\n\nexport async function probeMcpTransport(\n  transport: Transport,\n  options: ProbeTransportOptions = {},\n): Promise<boolean> {\n  const client = new Client({ name: \"negotium-browser-healthcheck\", version: \"1.0.0\" });\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n\n  try {\n    const tools = await Promise.race([\n      (async () => {\n        await client.connect(transport);\n        const result = await client.listTools();\n        if (result.tools.length === 0) throw new Error(\"browser MCP returned no tools\");\n        await options.terminate?.();\n        return result.tools;\n      })(),\n      new Promise<never>((_, reject) => {\n        timeout = setTimeout(\n          () => reject(new Error(\"browser MCP transport probe timed out\")),\n          options.timeoutMs ?? PROBE_TIMEOUT_MS,\n        );\n        timeout.unref?.();\n      }),\n    ]);\n    return tools.length > 0;\n  } catch {\n    return false;\n  } finally {\n    if (timeout) clearTimeout(timeout);\n    try {\n      await client.close();\n    } catch {\n      // The probe already failed; close is best-effort for partially opened transports.\n    }\n  }\n}\n\n/**\n * Exercise both authenticated transports used by browser-enabled agents.\n * A process-only response or partial SSE handshake is insufficient: each\n * transport must initialize, complete tools/list, and close cleanly.\n */\nexport async function probePlaywrightMcpTransports(\n  port: number,\n  capability: string,\n  fetchImpl: FetchLike = fetch as FetchLike,\n): Promise<boolean> {\n  const query = new URLSearchParams({ owner: PROBE_OWNER });\n  const baseUrl = `http://127.0.0.1:${port}`;\n  const ownerCapability = browserOwnerCapability(capability, PROBE_OWNER);\n  const capabilityHeaders = { \"X-Browser-Capability\": ownerCapability };\n  const authenticatedFetch: FetchLike = (input, init) => {\n    const headers = new Headers(init?.headers);\n    headers.set(\"X-Browser-Capability\", ownerCapability);\n    return fetchImpl(input, { ...init, headers });\n  };\n\n  const sseTransport = new SSEClientTransport(new URL(`${baseUrl}/sse?${query}`), {\n    fetch: authenticatedFetch,\n    eventSourceInit: { fetch: authenticatedFetch },\n    requestInit: { headers: capabilityHeaders },\n  });\n  if (!(await probeMcpTransport(sseTransport))) return false;\n\n  const streamableTransport = new StreamableHTTPClientTransport(\n    new URL(`${baseUrl}/mcp?${query}`),\n    {\n      fetch: authenticatedFetch,\n      requestInit: { headers: capabilityHeaders },\n    },\n  );\n  return probeMcpTransport(streamableTransport, {\n    terminate: () => streamableTransport.terminateSession(),\n  });\n}\n",
     "import { createHmac } from \"node:crypto\";\n\nexport function browserOwnerCapability(capability: string, owner: string): string {\n  return createHmac(\"sha256\", capability).update(owner).digest(\"hex\");\n}\n",
-    "import { randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { chmodSync } from \"node:fs\";\nimport { createServer, type Server, type Socket } from \"node:net\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { normalizeVaultKey, redactVaultSecrets, vaultListWithValues } from \"#storage/vault-public\";\n\nconst MAX_REQUEST_BYTES = 16 * 1024 * 1024;\nconst DEFAULT_OUTPUT_LIMIT = 100_000;\nconst LEASE_TTL_MS = 5 * 60_000;\nconst MAX_ACTIVE_LEASES = 1_024;\nconst BOUNDED_OUTPUTS: Record<string, { argument: string; field: string }> = {\n  browser_snapshot: { argument: \"maxLength\", field: \"snapshot\" },\n  browser_api_request: { argument: \"maxBytes\", field: \"body\" },\n  browser_get_visible_text: { argument: \"maxLength\", field: \"text\" },\n  browser_get_visible_html: { argument: \"maxLength\", field: \"html\" },\n};\n\ninterface RedactionBoundary {\n  field: string;\n  limit: number;\n}\n\nexport interface BrowserVaultBrokerHandle {\n  readonly socketPath: string;\n  readonly token: string;\n  close(): Promise<void>;\n}\n\nfunction deepMapStrings(value: unknown, transform: (text: string) => string): unknown {\n  if (typeof value === \"string\") return transform(value);\n  if (Array.isArray(value)) return value.map((entry) => deepMapStrings(entry, transform));\n  if (!value || typeof value !== \"object\") return value;\n  const prototype = Object.getPrototypeOf(value);\n  if (prototype !== Object.prototype && prototype !== null) return value;\n  return Object.fromEntries(\n    Object.entries(value).map(([key, entry]) => [key, deepMapStrings(entry, transform)]),\n  );\n}\n\nfunction encodedSecretForms(value: string): string[] {\n  return [\n    ...new Set([\n      value,\n      encodeURIComponent(value),\n      Buffer.from(value, \"utf8\").toString(\"base64\"),\n      Buffer.from(value, \"utf8\").toString(\"base64url\"),\n      Buffer.from(value, \"utf8\").toString(\"hex\"),\n    ]),\n  ]\n    .filter(Boolean)\n    .sort((left, right) => right.length - left.length);\n}\n\nfunction prepareInput(\n  tool: string,\n  value: unknown,\n): { value: unknown; boundary?: RedactionBoundary } {\n  const config = BOUNDED_OUTPUTS[tool];\n  if (!config || !value || typeof value !== \"object\" || Array.isArray(value)) return { value };\n  const input = value as Record<string, unknown>;\n  const requested = input[config.argument];\n  if (requested !== undefined && (!Number.isSafeInteger(requested) || Number(requested) <= 0)) {\n    return { value };\n  }\n  const limit = requested === undefined ? DEFAULT_OUTPUT_LIMIT : Number(requested);\n  return {\n    value: { ...input, [config.argument]: Number.MAX_SAFE_INTEGER },\n    boundary: { field: config.field, limit },\n  };\n}\n\nfunction redactTextEntry(\n  entry: unknown,\n  redact: (value: unknown) => unknown,\n  boundary?: RedactionBoundary,\n): unknown {\n  if (!entry || typeof entry !== \"object\") return redact(entry);\n  const content = entry as Record<string, unknown>;\n  if (content.type !== \"text\" || typeof content.text !== \"string\") return redact(entry);\n  try {\n    const parsed = redact(JSON.parse(content.text));\n    if (boundary && parsed && typeof parsed === \"object\") {\n      const object = parsed as Record<string, unknown>;\n      const fieldValue = object[boundary.field];\n      if (typeof fieldValue === \"string\") {\n        const originalExceeded =\n          typeof object.length === \"number\" && object.length > boundary.limit;\n        if (fieldValue.length > boundary.limit)\n          object[boundary.field] = fieldValue.slice(0, boundary.limit);\n        if (originalExceeded || fieldValue.length > boundary.limit) object.truncated = true;\n      }\n    }\n    return { ...content, text: JSON.stringify(parsed, null, 2) };\n  } catch {\n    const redacted = redact(content.text);\n    if (boundary && typeof redacted === \"string\" && redacted.length > boundary.limit) {\n      return {\n        ...content,\n        text: `${redacted.slice(0, boundary.limit)}\\n[truncated]`,\n      };\n    }\n    return { ...content, text: redacted };\n  }\n}\n\nfunction secureOutput(\n  result: unknown,\n  redact: (value: unknown) => unknown,\n  boundary?: RedactionBoundary,\n): unknown {\n  if (!result || typeof result !== \"object\") return redact(result);\n  const object = result as Record<string, unknown>;\n  const content = Array.isArray(object.content)\n    ? object.content.map((entry) => redactTextEntry(entry, redact, boundary))\n    : object.content;\n  return redact({ ...object, content });\n}\n\nfunction authorized(actual: unknown, expected: string): boolean {\n  if (typeof actual !== \"string\") return false;\n  const left = Buffer.from(actual);\n  const right = Buffer.from(expected);\n  return left.length === right.length && timingSafeEqual(left, right);\n}\n\nexport async function createBrowserVaultBroker(userId: string): Promise<BrowserVaultBrokerHandle> {\n  const token = randomBytes(32).toString(\"hex\");\n  const socketPath = join(\n    process.platform === \"win32\" ? tmpdir() : \"/tmp\",\n    `negotium-browser-vault-${process.pid}-${randomBytes(8).toString(\"hex\")}.sock`,\n  );\n  const retainedForms = new Map<string, string>();\n  const leases = new Map<string, { boundary?: RedactionBoundary; createdAt: number }>();\n  const sockets = new Set<Socket>();\n\n  const redactRetained = (text: string): string => {\n    let output = text;\n    for (const [form, key] of [...retainedForms].sort(\n      ([left], [right]) => right.length - left.length,\n    )) {\n      output = output.replaceAll(form, `[REDACTED:${key}]`);\n    }\n    return output;\n  };\n  const redact = (value: unknown): unknown =>\n    deepMapStrings(value, (text) => redactRetained(redactVaultSecrets(userId, text)));\n\n  const handleRequest = (request: Record<string, unknown>): Record<string, unknown> => {\n    const id = request.id;\n    if (!authorized(request.token, token)) return { id, ok: false, error: \"unauthorized\" };\n    if (request.op === \"transform_input\") {\n      if (typeof request.tool !== \"string\") return { id, ok: false, error: \"invalid tool\" };\n      const leaseCutoff = Date.now() - LEASE_TTL_MS;\n      for (const [lease, binding] of leases) {\n        if (binding.createdAt < leaseCutoff) leases.delete(lease);\n      }\n      if (leases.size >= MAX_ACTIVE_LEASES) {\n        return { id, ok: false, error: \"too many active leases\" };\n      }\n      const entries = new Map(vaultListWithValues(userId).map((entry) => [entry.key, entry.value]));\n      const substituted = deepMapStrings(request.value, (text) =>\n        text.replace(/\\{\\{([^}]+)\\}\\}/g, (match, rawKey: string) => {\n          const key = normalizeVaultKey(rawKey);\n          const secret = entries.get(key);\n          if (secret === undefined) return match;\n          for (const form of encodedSecretForms(secret)) retainedForms.set(form, key);\n          return secret;\n        }),\n      );\n      const prepared = prepareInput(request.tool, substituted);\n      const lease = randomBytes(24).toString(\"hex\");\n      leases.set(lease, { boundary: prepared.boundary, createdAt: Date.now() });\n      return {\n        id,\n        ok: true,\n        value: prepared.value,\n        lease,\n        boundary: prepared.boundary,\n      };\n    }\n    if (request.op === \"redact_output\") {\n      if (typeof request.lease !== \"string\") {\n        return { id, ok: false, error: \"invalid lease\" };\n      }\n      const binding = leases.get(request.lease);\n      leases.delete(request.lease);\n      if (!binding || binding.createdAt < Date.now() - LEASE_TTL_MS) {\n        return { id, ok: false, error: \"invalid lease\" };\n      }\n      try {\n        const value = secureOutput(request.value, redact, binding.boundary);\n        const serialized = JSON.stringify(value);\n        if (redactRetained(serialized) !== serialized) {\n          return { id, ok: false, error: \"redaction verification failed\" };\n        }\n        return { id, ok: true, value };\n      } catch {\n        return { id, ok: false, error: \"redaction failed\" };\n      }\n    }\n    return { id, ok: false, error: \"unknown operation\" };\n  };\n\n  const server: Server = createServer((socket) => {\n    sockets.add(socket);\n    let pending = \"\";\n    socket.setEncoding(\"utf8\");\n    socket.on(\"data\", (chunk: string) => {\n      pending += chunk;\n      if (Buffer.byteLength(pending) > MAX_REQUEST_BYTES) {\n        socket.destroy();\n        return;\n      }\n      while (true) {\n        const newline = pending.indexOf(\"\\n\");\n        if (newline < 0) break;\n        const line = pending.slice(0, newline);\n        pending = pending.slice(newline + 1);\n        if (!line) continue;\n        let response: Record<string, unknown>;\n        try {\n          response = handleRequest(JSON.parse(line) as Record<string, unknown>);\n        } catch {\n          response = { ok: false, error: \"invalid request\" };\n        }\n        socket.write(`${JSON.stringify(response)}\\n`);\n      }\n    });\n    socket.once(\"close\", () => sockets.delete(socket));\n  });\n  await new Promise<void>((resolveListen, reject) => {\n    server.once(\"error\", reject);\n    server.listen(socketPath, resolveListen);\n  });\n  chmodSync(socketPath, 0o600);\n  let closed = false;\n\n  return {\n    socketPath,\n    token,\n    async close() {\n      if (closed) return;\n      closed = true;\n      leases.clear();\n      retainedForms.clear();\n      for (const socket of sockets) socket.destroy();\n      await new Promise<void>((resolveClose) => server.close(() => resolveClose()));\n    },\n  };\n}\n",
-    "import { chmodSync, mkdirSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { DATA_DIR, VAULT_MASTER_KEY } from \"#platform/config\";\nimport { Database } from \"#storage/sqlite\";\nimport { decryptVaultValue, encryptVaultValue } from \"#storage/vault-crypto\";\n\nexport type VaultDatabase = Pick<InstanceType<typeof Database>, \"exec\" | \"prepare\">;\n\nexport interface VaultStorageOptions {\n  database?: VaultDatabase;\n  dataDir?: string;\n  masterKey?: string;\n}\n\nlet vaultDb: VaultDatabase | undefined;\nlet vaultMasterKey = VAULT_MASTER_KEY;\n\nfunction initializeVaultDatabase(database: VaultDatabase): void {\n  database.exec(\"PRAGMA journal_mode = WAL\");\n  database.exec(\"PRAGMA busy_timeout = 5000\");\n  database.exec(`\n  CREATE TABLE IF NOT EXISTS vault (\n    user_id     TEXT    NOT NULL,\n    key         TEXT    NOT NULL,\n    value       TEXT    NOT NULL,\n    description TEXT    NOT NULL DEFAULT '',\n    PRIMARY KEY (user_id, key)\n  )\n  `);\n\n  // Migrate legacy schema where user_id was INTEGER (Telegram numeric ids only).\n  // The Otium API authenticates with string user ids (\"otium-user-…\"), so user_id\n  // is now TEXT for every channel. Rebuild + CAST existing rows so old Telegram\n  // secrets survive; idempotent (no-op once user_id is already TEXT).\n  {\n    const cols = database.prepare(\"PRAGMA table_info(vault)\").all() as {\n      name: string;\n      type: string;\n    }[];\n    const uid = cols.find((c) => c.name === \"user_id\");\n    if (uid && uid.type.toUpperCase() === \"INTEGER\") {\n      database.exec(\"BEGIN\");\n      database.exec(`\n      CREATE TABLE vault_migrated (\n        user_id     TEXT    NOT NULL,\n        key         TEXT    NOT NULL,\n        value       TEXT    NOT NULL,\n        description TEXT    NOT NULL DEFAULT '',\n        PRIMARY KEY (user_id, key)\n      )\n    `);\n      database.exec(\n        \"INSERT INTO vault_migrated SELECT CAST(user_id AS TEXT), key, value, description FROM vault\",\n      );\n      database.exec(\"DROP TABLE vault\");\n      database.exec(\"ALTER TABLE vault_migrated RENAME TO vault\");\n      database.exec(\"COMMIT\");\n    }\n  }\n}\n\nfunction openVaultDatabase(dataDir: string): VaultDatabase {\n  const vaultDir = join(dataDir, \"vault\");\n  const path = join(vaultDir, \"vault.db\");\n  mkdirSync(vaultDir, { recursive: true, mode: 0o700 });\n  const database = new Database(path, { create: true });\n  // Defense in depth: the database and its sidecars are owner-only, while each\n  // value is also encrypted independently by vault-crypto.\n  chmodSync(path, 0o600);\n  initializeVaultDatabase(database);\n  return database;\n}\n\nfunction activeVaultDatabase(): VaultDatabase {\n  if (!vaultDb) vaultDb = openVaultDatabase(DATA_DIR);\n  return vaultDb;\n}\n\n/** Configure process-wide vault storage during embedding-host bootstrap. */\nexport function configureVaultStorage(options: VaultStorageOptions): () => void {\n  if (options.database && options.dataDir) {\n    throw new Error(\"configureVaultStorage accepts either database or dataDir, not both\");\n  }\n  const previousDb = vaultDb;\n  const previousMasterKey = vaultMasterKey;\n  const configuredDb = options.database ?? openVaultDatabase(options.dataDir ?? DATA_DIR);\n  if (options.database) initializeVaultDatabase(configuredDb);\n  vaultDb = configuredDb;\n  vaultMasterKey = options.masterKey ?? VAULT_MASTER_KEY;\n  let disposed = false;\n  return () => {\n    if (disposed) return;\n    disposed = true;\n    if (!options.database && \"close\" in configuredDb) {\n      (configuredDb as VaultDatabase & { close(): void }).close();\n    }\n    vaultDb = previousDb;\n    vaultMasterKey = previousMasterKey;\n  };\n}\n\nexport interface VaultEntry {\n  key: string;\n  description: string;\n}\n\nexport interface VaultEntryWithValue extends VaultEntry {\n  value: string;\n}\n\nexport const VAULT_KEY_PATTERN = /^[A-Z][A-Z0-9_]{0,127}$/;\nexport const VAULT_VALUE_MIN_BYTES = 4;\nexport const VAULT_VALUE_MAX_BYTES = 64 * 1024;\nexport const VAULT_DESCRIPTION_MAX_LENGTH = 500;\n\nexport function normalizeVaultKey(key: string): string {\n  return key.trim().toUpperCase();\n}\n\nexport function validateVaultKey(key: string): boolean {\n  return VAULT_KEY_PATTERN.test(normalizeVaultKey(key));\n}\n\nfunction decryptRow(userId: string, key: string, storedValue: string): string {\n  const database = activeVaultDatabase();\n  const decoded = decryptVaultValue(userId, key, storedValue, vaultMasterKey);\n  if (decoded.legacyPlaintext) {\n    database\n      .prepare(\"UPDATE vault SET value = ? WHERE user_id = ? AND key = ? AND value = ?\")\n      .run(encryptVaultValue(userId, key, decoded.value, vaultMasterKey), userId, key, storedValue);\n  }\n  return decoded.value;\n}\n\nexport function vaultListWithValues(userId: string): VaultEntryWithValue[] {\n  const rows = activeVaultDatabase()\n    .prepare(\"SELECT key, description, value FROM vault WHERE user_id = ? ORDER BY key\")\n    .all(userId) as VaultEntryWithValue[];\n  return rows.map((row) => ({\n    key: row.key,\n    description: row.description,\n    value: decryptRow(userId, row.key, row.value),\n  }));\n}\n\nexport function vaultSet(userId: string, key: string, value: string, description = \"\"): void {\n  const normalizedKey = normalizeVaultKey(key);\n  activeVaultDatabase()\n    .prepare(\n      `INSERT INTO vault (user_id, key, value, description) VALUES (?, ?, ?, ?)\n       ON CONFLICT (user_id, key) DO UPDATE\n         SET value = excluded.value, description = excluded.description`,\n    )\n    .run(\n      userId,\n      normalizedKey,\n      encryptVaultValue(userId, normalizedKey, value, vaultMasterKey),\n      description,\n    );\n}\n\nexport function vaultHasKey(userId: string, key: string): boolean {\n  const row = activeVaultDatabase()\n    .prepare(\"SELECT 1 FROM vault WHERE user_id = ? AND key = ?\")\n    .get(userId, normalizeVaultKey(key));\n  return row != null;\n}\n\nexport function vaultDel(userId: string, key: string): boolean {\n  const result = activeVaultDatabase()\n    .prepare(\"DELETE FROM vault WHERE user_id = ? AND key = ?\")\n    .run(userId, normalizeVaultKey(key)) as { changes: number };\n  return result.changes > 0;\n}\n\nexport function vaultDeleteAllForUser(userId: string): number {\n  const result = activeVaultDatabase()\n    .prepare(\"DELETE FROM vault WHERE user_id = ?\")\n    .run(userId) as {\n    changes: number;\n  };\n  return result.changes;\n}\n\nexport function vaultList(userId: string): VaultEntry[] {\n  return activeVaultDatabase()\n    .prepare(\"SELECT key, description FROM vault WHERE user_id = ? ORDER BY key\")\n    .all(userId) as VaultEntry[];\n}\n\nexport function vaultGetValue(userId: string, key: string): string | undefined {\n  const normalizedKey = normalizeVaultKey(key);\n  const row = activeVaultDatabase()\n    .prepare(\"SELECT key, value FROM vault WHERE user_id = ? AND key = ?\")\n    .get(userId, normalizedKey) as { key: string; value: string } | undefined;\n  return row ? decryptRow(userId, row.key, row.value) : undefined;\n}\n\nexport interface VaultSubstitutionResult {\n  text: string;\n  usedKeys: string[];\n}\n\n/** Replace {{KEY}} placeholders and report which credentials were consumed. */\nexport function vaultSubstituteDetailed(userId: string, text: string): VaultSubstitutionResult {\n  const entries = new Map(vaultListWithValues(userId).map((entry) => [entry.key, entry.value]));\n  const usedKeys = new Set<string>();\n  const substituted = text.replace(/\\{\\{([^}]+)\\}\\}/g, (match, rawKey: string) => {\n    const key = normalizeVaultKey(rawKey);\n    const value = entries.get(key);\n    if (value === undefined) return match;\n    usedKeys.add(key);\n    return value;\n  });\n  return { text: substituted, usedKeys: [...usedKeys] };\n}\n\n/** Detect real {{KEY}} references without decrypting any Vault values. */\nexport function valueReferencesVaultKey(userId: string, value: unknown): boolean {\n  const keys = new Set(vaultList(userId).map((entry) => entry.key));\n  const visit = (candidate: unknown): boolean => {\n    if (typeof candidate === \"string\") {\n      for (const match of candidate.matchAll(/\\{\\{([^}]+)\\}\\}/g)) {\n        if (keys.has(normalizeVaultKey(match[1] ?? \"\"))) return true;\n      }\n      return false;\n    }\n    if (Array.isArray(candidate)) return candidate.some(visit);\n    if (candidate && typeof candidate === \"object\") {\n      return Object.values(candidate as Record<string, unknown>).some(visit);\n    }\n    return false;\n  };\n  return visit(value);\n}\n\nfunction encodedSecretForms(value: string): string[] {\n  const forms = new Set<string>([\n    value,\n    encodeURIComponent(value),\n    Buffer.from(value, \"utf8\").toString(\"base64\"),\n    Buffer.from(value, \"utf8\").toString(\"base64url\"),\n    Buffer.from(value, \"utf8\").toString(\"hex\"),\n  ]);\n  forms.delete(\"\");\n  return [...forms].sort((a, b) => b.length - a.length);\n}\n\n/** Scrub raw and common encoded forms before tool output reaches a model. */\nexport function redactVaultSecrets(userId: string, text: string): string {\n  const candidates = vaultListWithValues(userId)\n    .flatMap((entry) => encodedSecretForms(entry.value).map((form) => ({ form, key: entry.key })))\n    .sort((a, b) => b.form.length - a.form.length || a.key.localeCompare(b.key));\n  if (candidates.length === 0) return text;\n  const candidatesByFirstCharacter = new Map<string, typeof candidates>();\n  for (const candidate of candidates) {\n    const first = candidate.form[0];\n    if (!first) continue;\n    const bucket = candidatesByFirstCharacter.get(first) ?? [];\n    bucket.push(candidate);\n    candidatesByFirstCharacter.set(first, bucket);\n  }\n\n  let redacted = \"\";\n  let offset = 0;\n  while (offset < text.length) {\n    const match = candidatesByFirstCharacter\n      .get(text[offset] ?? \"\")\n      ?.find((candidate) => text.startsWith(candidate.form, offset));\n    if (!match) {\n      redacted += text[offset];\n      offset += 1;\n      continue;\n    }\n    redacted += `[REDACTED:${match.key}]`;\n    offset += match.form.length;\n  }\n  return redacted;\n}\n",
+    "import { randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { chmodSync } from \"node:fs\";\nimport { createServer, type Server, type Socket } from \"node:net\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { redactVaultSecrets, vaultGetValue, vaultSubstituteDetailed } from \"#storage/vault-public\";\n\nconst MAX_REQUEST_BYTES = 16 * 1024 * 1024;\nconst DEFAULT_OUTPUT_LIMIT = 100_000;\nconst LEASE_TTL_MS = 5 * 60_000;\nconst MAX_ACTIVE_LEASES = 1_024;\nconst BOUNDED_OUTPUTS: Record<string, { argument: string; field: string }> = {\n  browser_snapshot: { argument: \"maxLength\", field: \"snapshot\" },\n  browser_api_request: { argument: \"maxBytes\", field: \"body\" },\n  browser_get_visible_text: { argument: \"maxLength\", field: \"text\" },\n  browser_get_visible_html: { argument: \"maxLength\", field: \"html\" },\n};\n\ninterface RedactionBoundary {\n  field: string;\n  limit: number;\n}\n\nexport interface BrowserVaultBrokerHandle {\n  readonly socketPath: string;\n  readonly token: string;\n  close(): Promise<void>;\n}\n\nfunction deepMapStrings(value: unknown, transform: (text: string) => string): unknown {\n  if (typeof value === \"string\") return transform(value);\n  if (Array.isArray(value)) return value.map((entry) => deepMapStrings(entry, transform));\n  if (!value || typeof value !== \"object\") return value;\n  const prototype = Object.getPrototypeOf(value);\n  if (prototype !== Object.prototype && prototype !== null) return value;\n  return Object.fromEntries(\n    Object.entries(value).map(([key, entry]) => [key, deepMapStrings(entry, transform)]),\n  );\n}\n\nfunction encodedSecretForms(value: string): string[] {\n  return [\n    ...new Set([\n      value,\n      encodeURIComponent(value),\n      Buffer.from(value, \"utf8\").toString(\"base64\"),\n      Buffer.from(value, \"utf8\").toString(\"base64url\"),\n      Buffer.from(value, \"utf8\").toString(\"hex\"),\n    ]),\n  ]\n    .filter(Boolean)\n    .sort((left, right) => right.length - left.length);\n}\n\nfunction prepareInput(\n  tool: string,\n  value: unknown,\n): { value: unknown; boundary?: RedactionBoundary } {\n  const config = BOUNDED_OUTPUTS[tool];\n  if (!config || !value || typeof value !== \"object\" || Array.isArray(value)) return { value };\n  const input = value as Record<string, unknown>;\n  const requested = input[config.argument];\n  if (requested !== undefined && (!Number.isSafeInteger(requested) || Number(requested) <= 0)) {\n    return { value };\n  }\n  const limit = requested === undefined ? DEFAULT_OUTPUT_LIMIT : Number(requested);\n  return {\n    value: { ...input, [config.argument]: Number.MAX_SAFE_INTEGER },\n    boundary: { field: config.field, limit },\n  };\n}\n\nfunction redactTextEntry(\n  entry: unknown,\n  redact: (value: unknown) => unknown,\n  boundary?: RedactionBoundary,\n): unknown {\n  if (!entry || typeof entry !== \"object\") return redact(entry);\n  const content = entry as Record<string, unknown>;\n  if (content.type !== \"text\" || typeof content.text !== \"string\") return redact(entry);\n  try {\n    const parsed = redact(JSON.parse(content.text));\n    if (boundary && parsed && typeof parsed === \"object\") {\n      const object = parsed as Record<string, unknown>;\n      const fieldValue = object[boundary.field];\n      if (typeof fieldValue === \"string\") {\n        const originalExceeded =\n          typeof object.length === \"number\" && object.length > boundary.limit;\n        if (fieldValue.length > boundary.limit)\n          object[boundary.field] = fieldValue.slice(0, boundary.limit);\n        if (originalExceeded || fieldValue.length > boundary.limit) object.truncated = true;\n      }\n    }\n    return { ...content, text: JSON.stringify(parsed, null, 2) };\n  } catch {\n    const redacted = redact(content.text);\n    if (boundary && typeof redacted === \"string\" && redacted.length > boundary.limit) {\n      return {\n        ...content,\n        text: `${redacted.slice(0, boundary.limit)}\\n[truncated]`,\n      };\n    }\n    return { ...content, text: redacted };\n  }\n}\n\nfunction secureOutput(\n  result: unknown,\n  redact: (value: unknown) => unknown,\n  boundary?: RedactionBoundary,\n): unknown {\n  if (!result || typeof result !== \"object\") return redact(result);\n  const object = result as Record<string, unknown>;\n  const content = Array.isArray(object.content)\n    ? object.content.map((entry) => redactTextEntry(entry, redact, boundary))\n    : object.content;\n  return redact({ ...object, content });\n}\n\nfunction authorized(actual: unknown, expected: string): boolean {\n  if (typeof actual !== \"string\") return false;\n  const left = Buffer.from(actual);\n  const right = Buffer.from(expected);\n  return left.length === right.length && timingSafeEqual(left, right);\n}\n\nexport async function createBrowserVaultBroker(userId: string): Promise<BrowserVaultBrokerHandle> {\n  const token = randomBytes(32).toString(\"hex\");\n  const socketPath = join(\n    process.platform === \"win32\" ? tmpdir() : \"/tmp\",\n    `negotium-browser-vault-${process.pid}-${randomBytes(8).toString(\"hex\")}.sock`,\n  );\n  const retainedForms = new Map<string, string>();\n  const leases = new Map<string, { boundary?: RedactionBoundary; createdAt: number }>();\n  const sockets = new Set<Socket>();\n\n  const redactRetained = (text: string): string => {\n    let output = text;\n    for (const [form, key] of [...retainedForms].sort(\n      ([left], [right]) => right.length - left.length,\n    )) {\n      output = output.replaceAll(form, `[REDACTED:${key}]`);\n    }\n    return output;\n  };\n  const redact = (value: unknown): unknown =>\n    deepMapStrings(value, (text) => redactRetained(redactVaultSecrets(userId, text)));\n\n  const handleRequest = (request: Record<string, unknown>): Record<string, unknown> => {\n    const id = request.id;\n    if (!authorized(request.token, token)) return { id, ok: false, error: \"unauthorized\" };\n    if (request.op === \"transform_input\") {\n      if (typeof request.tool !== \"string\") return { id, ok: false, error: \"invalid tool\" };\n      const leaseCutoff = Date.now() - LEASE_TTL_MS;\n      for (const [lease, binding] of leases) {\n        if (binding.createdAt < leaseCutoff) leases.delete(lease);\n      }\n      if (leases.size >= MAX_ACTIVE_LEASES) {\n        return { id, ok: false, error: \"too many active leases\" };\n      }\n      const substituted = deepMapStrings(request.value, (text) => {\n        const result = vaultSubstituteDetailed(userId, text);\n        for (const key of result.usedKeys) {\n          const secret = vaultGetValue(userId, key);\n          if (secret === undefined) continue;\n          for (const form of encodedSecretForms(secret)) retainedForms.set(form, key);\n        }\n        return result.text;\n      });\n      const prepared = prepareInput(request.tool, substituted);\n      const lease = randomBytes(24).toString(\"hex\");\n      leases.set(lease, { boundary: prepared.boundary, createdAt: Date.now() });\n      return {\n        id,\n        ok: true,\n        value: prepared.value,\n        lease,\n        boundary: prepared.boundary,\n      };\n    }\n    if (request.op === \"redact_output\") {\n      if (typeof request.lease !== \"string\") {\n        return { id, ok: false, error: \"invalid lease\" };\n      }\n      const binding = leases.get(request.lease);\n      leases.delete(request.lease);\n      if (!binding || binding.createdAt < Date.now() - LEASE_TTL_MS) {\n        return { id, ok: false, error: \"invalid lease\" };\n      }\n      try {\n        const value = secureOutput(request.value, redact, binding.boundary);\n        const serialized = JSON.stringify(value);\n        if (redactRetained(serialized) !== serialized) {\n          return { id, ok: false, error: \"redaction verification failed\" };\n        }\n        return { id, ok: true, value };\n      } catch {\n        return { id, ok: false, error: \"redaction failed\" };\n      }\n    }\n    return { id, ok: false, error: \"unknown operation\" };\n  };\n\n  const server: Server = createServer((socket) => {\n    sockets.add(socket);\n    let pending = \"\";\n    socket.setEncoding(\"utf8\");\n    socket.on(\"data\", (chunk: string) => {\n      pending += chunk;\n      if (Buffer.byteLength(pending) > MAX_REQUEST_BYTES) {\n        socket.destroy();\n        return;\n      }\n      while (true) {\n        const newline = pending.indexOf(\"\\n\");\n        if (newline < 0) break;\n        const line = pending.slice(0, newline);\n        pending = pending.slice(newline + 1);\n        if (!line) continue;\n        let response: Record<string, unknown>;\n        try {\n          response = handleRequest(JSON.parse(line) as Record<string, unknown>);\n        } catch {\n          response = { ok: false, error: \"invalid request\" };\n        }\n        socket.write(`${JSON.stringify(response)}\\n`);\n      }\n    });\n    socket.once(\"close\", () => sockets.delete(socket));\n  });\n  await new Promise<void>((resolveListen, reject) => {\n    server.once(\"error\", reject);\n    server.listen(socketPath, resolveListen);\n  });\n  chmodSync(socketPath, 0o600);\n  let closed = false;\n\n  return {\n    socketPath,\n    token,\n    async close() {\n      if (closed) return;\n      closed = true;\n      leases.clear();\n      retainedForms.clear();\n      for (const socket of sockets) socket.destroy();\n      await new Promise<void>((resolveClose) => server.close(() => resolveClose()));\n    },\n  };\n}\n",
+    "import { chmodSync, mkdirSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { DATA_DIR, VAULT_MASTER_KEY } from \"#platform/config\";\nimport { Database } from \"#storage/sqlite\";\nimport { decryptVaultValue, encryptVaultValue } from \"#storage/vault-crypto\";\n\nexport type VaultDatabase = Pick<InstanceType<typeof Database>, \"exec\" | \"prepare\">;\n\nexport interface VaultStorageOptions {\n  database?: VaultDatabase;\n  dataDir?: string;\n  masterKey?: string;\n}\n\nlet vaultDb: VaultDatabase | undefined;\nlet vaultMasterKey = VAULT_MASTER_KEY;\n\nfunction initializeVaultDatabase(database: VaultDatabase): void {\n  database.exec(\"PRAGMA journal_mode = WAL\");\n  database.exec(\"PRAGMA busy_timeout = 5000\");\n  database.exec(`\n  CREATE TABLE IF NOT EXISTS vault (\n    user_id     TEXT    NOT NULL,\n    key         TEXT    NOT NULL,\n    value       TEXT    NOT NULL,\n    description TEXT    NOT NULL DEFAULT '',\n    PRIMARY KEY (user_id, key)\n  )\n  `);\n\n  // Migrate legacy schema where user_id was INTEGER (Telegram numeric ids only).\n  // The Otium API authenticates with string user ids (\"otium-user-…\"), so user_id\n  // is now TEXT for every channel. Rebuild + CAST existing rows so old Telegram\n  // secrets survive; idempotent (no-op once user_id is already TEXT).\n  {\n    const cols = database.prepare(\"PRAGMA table_info(vault)\").all() as {\n      name: string;\n      type: string;\n    }[];\n    const uid = cols.find((c) => c.name === \"user_id\");\n    if (uid && uid.type.toUpperCase() === \"INTEGER\") {\n      database.exec(\"BEGIN\");\n      database.exec(`\n      CREATE TABLE vault_migrated (\n        user_id     TEXT    NOT NULL,\n        key         TEXT    NOT NULL,\n        value       TEXT    NOT NULL,\n        description TEXT    NOT NULL DEFAULT '',\n        PRIMARY KEY (user_id, key)\n      )\n    `);\n      database.exec(\n        \"INSERT INTO vault_migrated SELECT CAST(user_id AS TEXT), key, value, description FROM vault\",\n      );\n      database.exec(\"DROP TABLE vault\");\n      database.exec(\"ALTER TABLE vault_migrated RENAME TO vault\");\n      database.exec(\"COMMIT\");\n    }\n  }\n}\n\nfunction openVaultDatabase(dataDir: string): VaultDatabase {\n  const vaultDir = join(dataDir, \"vault\");\n  const path = join(vaultDir, \"vault.db\");\n  mkdirSync(vaultDir, { recursive: true, mode: 0o700 });\n  const database = new Database(path, { create: true });\n  // Defense in depth: the database and its sidecars are owner-only, while each\n  // value is also encrypted independently by vault-crypto.\n  chmodSync(path, 0o600);\n  initializeVaultDatabase(database);\n  return database;\n}\n\nfunction activeVaultDatabase(): VaultDatabase {\n  if (!vaultDb) vaultDb = openVaultDatabase(DATA_DIR);\n  return vaultDb;\n}\n\n/** Configure process-wide vault storage during embedding-host bootstrap. */\nexport function configureVaultStorage(options: VaultStorageOptions): () => void {\n  if (options.database && options.dataDir) {\n    throw new Error(\"configureVaultStorage accepts either database or dataDir, not both\");\n  }\n  const previousDb = vaultDb;\n  const previousMasterKey = vaultMasterKey;\n  const configuredDb = options.database ?? openVaultDatabase(options.dataDir ?? DATA_DIR);\n  if (options.database) initializeVaultDatabase(configuredDb);\n  vaultDb = configuredDb;\n  vaultMasterKey = options.masterKey ?? VAULT_MASTER_KEY;\n  let disposed = false;\n  return () => {\n    if (disposed) return;\n    disposed = true;\n    if (!options.database && \"close\" in configuredDb) {\n      (configuredDb as VaultDatabase & { close(): void }).close();\n    }\n    vaultDb = previousDb;\n    vaultMasterKey = previousMasterKey;\n  };\n}\n\nexport interface VaultEntry {\n  key: string;\n  description: string;\n}\n\nexport interface VaultEntryWithValue extends VaultEntry {\n  value: string;\n}\n\nexport const VAULT_KEY_PATTERN = /^[A-Z][A-Z0-9_]{0,127}$/;\nexport const VAULT_VALUE_MIN_BYTES = 4;\nexport const VAULT_VALUE_MAX_BYTES = 64 * 1024;\nexport const VAULT_DESCRIPTION_MAX_LENGTH = 500;\n\nexport function normalizeVaultKey(key: string): string {\n  return key.trim().toUpperCase();\n}\n\nexport function validateVaultKey(key: string): boolean {\n  return VAULT_KEY_PATTERN.test(normalizeVaultKey(key));\n}\n\nfunction decryptRow(userId: string, key: string, storedValue: string): string {\n  const database = activeVaultDatabase();\n  const decoded = decryptVaultValue(userId, key, storedValue, vaultMasterKey);\n  if (decoded.legacyPlaintext) {\n    database\n      .prepare(\"UPDATE vault SET value = ? WHERE user_id = ? AND key = ? AND value = ?\")\n      .run(encryptVaultValue(userId, key, decoded.value, vaultMasterKey), userId, key, storedValue);\n  }\n  return decoded.value;\n}\n\nexport function vaultListWithValues(userId: string): VaultEntryWithValue[] {\n  const rows = activeVaultDatabase()\n    .prepare(\"SELECT key, description, value FROM vault WHERE user_id = ? ORDER BY key\")\n    .all(userId) as VaultEntryWithValue[];\n  return rows.map((row) => ({\n    key: row.key,\n    description: row.description,\n    value: decryptRow(userId, row.key, row.value),\n  }));\n}\n\n/**\n * Return only rows that can still be authenticated with the active master key.\n *\n * This is intentionally limited to redaction indexes: one damaged credential\n * must not disable unrelated tools, while direct access to that credential\n * continues to fail closed through vaultGetValue().\n */\nexport function vaultListDecryptableValues(userId: string): VaultEntryWithValue[] {\n  const rows = activeVaultDatabase()\n    .prepare(\"SELECT key, description, value FROM vault WHERE user_id = ? ORDER BY key\")\n    .all(userId) as VaultEntryWithValue[];\n  const entries: VaultEntryWithValue[] = [];\n  for (const row of rows) {\n    try {\n      entries.push({\n        key: row.key,\n        description: row.description,\n        value: decryptRow(userId, row.key, row.value),\n      });\n    } catch {\n      // A value that cannot be authenticated cannot be exposed by substitution,\n      // so there is no plaintext form available to add to the redaction index.\n    }\n  }\n  return entries;\n}\n\nexport function vaultSet(userId: string, key: string, value: string, description = \"\"): void {\n  const normalizedKey = normalizeVaultKey(key);\n  activeVaultDatabase()\n    .prepare(\n      `INSERT INTO vault (user_id, key, value, description) VALUES (?, ?, ?, ?)\n       ON CONFLICT (user_id, key) DO UPDATE\n         SET value = excluded.value, description = excluded.description`,\n    )\n    .run(\n      userId,\n      normalizedKey,\n      encryptVaultValue(userId, normalizedKey, value, vaultMasterKey),\n      description,\n    );\n}\n\nexport function vaultHasKey(userId: string, key: string): boolean {\n  const row = activeVaultDatabase()\n    .prepare(\"SELECT 1 FROM vault WHERE user_id = ? AND key = ?\")\n    .get(userId, normalizeVaultKey(key));\n  return row != null;\n}\n\nexport function vaultDel(userId: string, key: string): boolean {\n  const result = activeVaultDatabase()\n    .prepare(\"DELETE FROM vault WHERE user_id = ? AND key = ?\")\n    .run(userId, normalizeVaultKey(key)) as { changes: number };\n  return result.changes > 0;\n}\n\nexport function vaultDeleteAllForUser(userId: string): number {\n  const result = activeVaultDatabase()\n    .prepare(\"DELETE FROM vault WHERE user_id = ?\")\n    .run(userId) as {\n    changes: number;\n  };\n  return result.changes;\n}\n\nexport function vaultList(userId: string): VaultEntry[] {\n  return activeVaultDatabase()\n    .prepare(\"SELECT key, description FROM vault WHERE user_id = ? ORDER BY key\")\n    .all(userId) as VaultEntry[];\n}\n\nexport function vaultGetValue(userId: string, key: string): string | undefined {\n  const normalizedKey = normalizeVaultKey(key);\n  const row = activeVaultDatabase()\n    .prepare(\"SELECT key, value FROM vault WHERE user_id = ? AND key = ?\")\n    .get(userId, normalizedKey) as { key: string; value: string } | undefined;\n  return row ? decryptRow(userId, row.key, row.value) : undefined;\n}\n\nexport interface VaultSubstitutionResult {\n  text: string;\n  usedKeys: string[];\n}\n\n/** Replace {{KEY}} placeholders and report which credentials were consumed. */\nexport function vaultSubstituteDetailed(userId: string, text: string): VaultSubstitutionResult {\n  const entries = new Map<string, string | undefined>();\n  const usedKeys = new Set<string>();\n  const substituted = text.replace(/\\{\\{([^}]+)\\}\\}/g, (match, rawKey: string) => {\n    const key = normalizeVaultKey(rawKey);\n    if (!entries.has(key)) entries.set(key, vaultGetValue(userId, key));\n    const value = entries.get(key);\n    if (value === undefined) return match;\n    usedKeys.add(key);\n    return value;\n  });\n  return { text: substituted, usedKeys: [...usedKeys] };\n}\n\n/** Detect real {{KEY}} references without decrypting any Vault values. */\nexport function valueReferencesVaultKey(userId: string, value: unknown): boolean {\n  const keys = new Set(vaultList(userId).map((entry) => entry.key));\n  const visit = (candidate: unknown): boolean => {\n    if (typeof candidate === \"string\") {\n      for (const match of candidate.matchAll(/\\{\\{([^}]+)\\}\\}/g)) {\n        if (keys.has(normalizeVaultKey(match[1] ?? \"\"))) return true;\n      }\n      return false;\n    }\n    if (Array.isArray(candidate)) return candidate.some(visit);\n    if (candidate && typeof candidate === \"object\") {\n      return Object.values(candidate as Record<string, unknown>).some(visit);\n    }\n    return false;\n  };\n  return visit(value);\n}\n\nfunction encodedSecretForms(value: string): string[] {\n  const forms = new Set<string>([\n    value,\n    encodeURIComponent(value),\n    Buffer.from(value, \"utf8\").toString(\"base64\"),\n    Buffer.from(value, \"utf8\").toString(\"base64url\"),\n    Buffer.from(value, \"utf8\").toString(\"hex\"),\n  ]);\n  forms.delete(\"\");\n  return [...forms].sort((a, b) => b.length - a.length);\n}\n\n/** Scrub raw and common encoded forms before tool output reaches a model. */\nexport function redactVaultSecrets(userId: string, text: string): string {\n  const candidates = vaultListDecryptableValues(userId)\n    .flatMap((entry) => encodedSecretForms(entry.value).map((form) => ({ form, key: entry.key })))\n    .sort((a, b) => b.form.length - a.form.length || a.key.localeCompare(b.key));\n  if (candidates.length === 0) return text;\n  const candidatesByFirstCharacter = new Map<string, typeof candidates>();\n  for (const candidate of candidates) {\n    const first = candidate.form[0];\n    if (!first) continue;\n    const bucket = candidatesByFirstCharacter.get(first) ?? [];\n    bucket.push(candidate);\n    candidatesByFirstCharacter.set(first, bucket);\n  }\n\n  let redacted = \"\";\n  let offset = 0;\n  while (offset < text.length) {\n    const match = candidatesByFirstCharacter\n      .get(text[offset] ?? \"\")\n      ?.find((candidate) => text.startsWith(candidate.form, offset));\n    if (!match) {\n      redacted += text[offset];\n      offset += 1;\n      continue;\n    }\n    redacted += `[REDACTED:${match.key}]`;\n    offset += match.form.length;\n  }\n  return redacted;\n}\n",
     "import { createCipheriv, createDecipheriv, createHash, randomBytes } from \"node:crypto\";\n\nconst ENVELOPE_PREFIX = \"otium-vault:v1:\";\nconst IV_BYTES = 12;\nconst KEY_BYTES = 32;\n\nfunction encryptionKey(masterKey: string): Buffer {\n  return createHash(\"sha256\")\n    .update(\"otium-vault-value-v1\\0\", \"utf8\")\n    .update(masterKey, \"utf8\")\n    .digest()\n    .subarray(0, KEY_BYTES);\n}\n\nfunction aad(userId: string, key: string): Buffer {\n  return Buffer.from(`${userId}\\0${key.toUpperCase()}`, \"utf8\");\n}\n\nexport function isEncryptedVaultValue(value: string): boolean {\n  return value.startsWith(ENVELOPE_PREFIX);\n}\n\nexport function encryptVaultValueWithKey(\n  userId: string,\n  key: string,\n  value: string,\n  masterKey: string,\n): string {\n  const iv = randomBytes(IV_BYTES);\n  const cipher = createCipheriv(\"aes-256-gcm\", encryptionKey(masterKey), iv);\n  cipher.setAAD(aad(userId, key));\n  const ciphertext = Buffer.concat([cipher.update(value, \"utf8\"), cipher.final()]);\n  const tag = cipher.getAuthTag();\n  return `${ENVELOPE_PREFIX}${iv.toString(\"base64url\")}.${ciphertext.toString(\"base64url\")}.${tag.toString(\"base64url\")}`;\n}\n\nexport function decryptVaultValueWithKey(\n  userId: string,\n  key: string,\n  storedValue: string,\n  masterKey: string,\n): { value: string; legacyPlaintext: boolean } {\n  if (!isEncryptedVaultValue(storedValue)) {\n    return { value: storedValue, legacyPlaintext: true };\n  }\n\n  const encoded = storedValue.slice(ENVELOPE_PREFIX.length);\n  const [ivPart, ciphertextPart, tagPart, ...extra] = encoded.split(\".\");\n  if (!ivPart || ciphertextPart === undefined || !tagPart || extra.length > 0) {\n    throw new Error(\"Invalid encrypted vault value\");\n  }\n\n  const iv = Buffer.from(ivPart, \"base64url\");\n  const ciphertext = Buffer.from(ciphertextPart, \"base64url\");\n  const tag = Buffer.from(tagPart, \"base64url\");\n  if (iv.length !== IV_BYTES || tag.length !== 16) {\n    throw new Error(\"Invalid encrypted vault value\");\n  }\n\n  const decipher = createDecipheriv(\"aes-256-gcm\", encryptionKey(masterKey), iv);\n  decipher.setAAD(aad(userId, key));\n  decipher.setAuthTag(tag);\n  const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);\n  return { value: plaintext.toString(\"utf8\"), legacyPlaintext: false };\n}\n",
     "import { VAULT_MASTER_KEY } from \"#platform/config\";\nimport {\n  decryptVaultValueWithKey,\n  encryptVaultValueWithKey,\n  isEncryptedVaultValue,\n} from \"#storage/vault-crypto-core\";\n\nexport { isEncryptedVaultValue };\n\n/** Encrypt one vault row. The user/key binding prevents ciphertext row swapping. */\nexport function encryptVaultValue(\n  userId: string,\n  key: string,\n  value: string,\n  masterKey = VAULT_MASTER_KEY,\n): string {\n  return encryptVaultValueWithKey(userId, key, value, masterKey);\n}\n\n/**\n * Decrypt a stored value. Plaintext rows are accepted for rolling upgrades and\n * are re-encrypted by the storage layer immediately after a successful read.\n */\nexport function decryptVaultValue(\n  userId: string,\n  key: string,\n  storedValue: string,\n  masterKey = VAULT_MASTER_KEY,\n): { value: string; legacyPlaintext: boolean } {\n  return decryptVaultValueWithKey(userId, key, storedValue, masterKey);\n}\n",
     "/** Sanitize a topic/session name for use in file paths.\n *  Replaces non-alphanumeric characters (excluding Korean) with underscores.\n *  Empty input (or input consisting only of disallowed chars) returns \"_\" so\n *  callers always get a non-empty single path component.\n *  @param name  The raw topic or session name.\n *  @param lowercase  Whether to lowercase the result (default: false).\n *                    Use true for wiki paths; leave false for log file paths.\n */\nexport function sanitizeTopicName(name: string, lowercase = false): string {\n  const safe = name.replace(/[^a-zA-Z0-9가-힣_-]/g, \"_\") || \"_\";\n  return lowercase ? safe.toLowerCase() : safe;\n}\n\n/** Sanitize a file name for use in file paths. Allows dots.\n *  Pure-dot results (\".\", \"..\") are replaced with \"_\" to block path-traversal\n *  when the sanitized value is used as a standalone path component.\n */\nexport function sanitizeFileName(name: string): string {\n  const safe = name.replace(/[^a-zA-Z0-9._-]/g, \"_\") || \"_\";\n  if (safe === \".\" || safe === \"..\") return \"_\";\n  return safe;\n}\n\n/** Sanitize an arbitrary ID (no Korean, no dots) for use in file paths. */\nexport function sanitizeId(id: string): string {\n  return id.replace(/[^a-zA-Z0-9_-]/g, \"_\") || \"_\";\n}\n",
-    "import { db } from \"#storage/forum-db\";\n\nexport const DEFAULT_BROWSER_PROFILE = \"default\";\n\nexport interface BrowserProfileRecord {\n  name: string;\n  createdAt: string | null;\n  topics: Array<{ id: string; title: string }>;\n}\n\nexport function normalizeBrowserProfileName(name: string): string {\n  const value = name.trim().toLowerCase();\n  if (!/^[a-z0-9][a-z0-9_-]{0,47}$/.test(value)) {\n    throw new Error(\"Profile name must be 1-48 lowercase letters, numbers, '-' or '_'.\");\n  }\n  return value;\n}\n\ndb.exec(`\n  CREATE TABLE IF NOT EXISTS browser_profiles (\n    owner_id TEXT NOT NULL,\n    name TEXT NOT NULL,\n    created_at TEXT NOT NULL,\n    PRIMARY KEY (owner_id, name)\n  )\n`);\n\nexport function getBrowserProfileOwner(topicId: string, fallbackUserId: string): string {\n  return (\n    db\n      .query<{ browser_profile_owner: string | null }, string>(\n        \"SELECT browser_profile_owner FROM api_topics WHERE id = ?\",\n      )\n      .get(topicId)?.browser_profile_owner ?? fallbackUserId\n  );\n}\n\nexport function isTopicBrowserProfileOwner(topicId: string, userId: string): boolean {\n  return getBrowserProfileOwner(topicId, \"\") === userId;\n}\n\nexport function getTopicBrowserProfile(topicId: string): string {\n  const value = db\n    .query<{ browser_profile: string | null }, string>(\n      \"SELECT browser_profile FROM api_topics WHERE id = ?\",\n    )\n    .get(topicId)?.browser_profile;\n  return value || DEFAULT_BROWSER_PROFILE;\n}\n\nexport function hasBrowserProfileTopic(topicId: string): boolean {\n  return Boolean(\n    db.query<{ id: string }, string>(\"SELECT id FROM api_topics WHERE id = ?\").get(topicId),\n  );\n}\n\nexport function createBrowserProfile(ownerId: string, rawName: string): string {\n  void ownerId;\n  const name = normalizeBrowserProfileName(rawName);\n  if (name === DEFAULT_BROWSER_PROFILE) return name;\n  db.query(\n    \"INSERT OR IGNORE INTO browser_profiles (owner_id, name, created_at) VALUES (?, ?, ?)\",\n  ).run(\"local\", name, new Date().toISOString());\n  return name;\n}\n\nexport function assignTopicBrowserProfile(opts: {\n  topicId: string;\n  actorUserId: string;\n  profile: string;\n}): { previous: string; profile: string } {\n  const actualOwner = getBrowserProfileOwner(opts.topicId, \"\");\n  if (!actualOwner) throw new Error(`Topic \"${opts.topicId}\" not found or has no owner.`);\n  if (actualOwner !== opts.actorUserId) {\n    throw new Error(`Only the topic owner can change its browser profile.`);\n  }\n  const profile = normalizeBrowserProfileName(opts.profile);\n  if (profile !== DEFAULT_BROWSER_PROFILE) createBrowserProfile(actualOwner, profile);\n  const previous = getTopicBrowserProfile(opts.topicId);\n  const result = db\n    .query(\"UPDATE api_topics SET browser_profile = ? WHERE id = ?\")\n    .run(profile, opts.topicId);\n  if (Number(result.changes ?? 0) !== 1) throw new Error(`Topic \"${opts.topicId}\" not found.`);\n  return { previous, profile };\n}\n\nexport function listBrowserProfiles(ownerId: string): BrowserProfileRecord[] {\n  void ownerId;\n  const records = db\n    .query<{ name: string; created_at: string }, string>(\n      \"SELECT name, created_at FROM browser_profiles WHERE owner_id = ? ORDER BY name\",\n    )\n    .all(\"local\");\n  const topics = db\n    .query<{ id: string; title: string; browser_profile: string | null }, []>(\n      `SELECT t.id, t.title, t.browser_profile FROM api_topics t\n       ORDER BY t.title`,\n    )\n    .all();\n\n  const byName = new Map<string, BrowserProfileRecord>();\n  byName.set(DEFAULT_BROWSER_PROFILE, {\n    name: DEFAULT_BROWSER_PROFILE,\n    createdAt: null,\n    topics: [],\n  });\n  for (const row of records) {\n    byName.set(row.name, { name: row.name, createdAt: row.created_at, topics: [] });\n  }\n  for (const topic of topics) {\n    const name = topic.browser_profile || DEFAULT_BROWSER_PROFILE;\n    const record = byName.get(name) ?? { name, createdAt: null, topics: [] };\n    record.topics.push({ id: topic.id, title: topic.title });\n    byName.set(name, record);\n  }\n  return [...byName.values()].sort((a, b) => {\n    if (a.name === DEFAULT_BROWSER_PROFILE) return -1;\n    if (b.name === DEFAULT_BROWSER_PROFILE) return 1;\n    return a.name.localeCompare(b.name);\n  });\n}\n\nexport function deleteBrowserProfile(ownerId: string, rawName: string): void {\n  void ownerId;\n  const name = normalizeBrowserProfileName(rawName);\n  if (name === DEFAULT_BROWSER_PROFILE) throw new Error(\"The default profile cannot be deleted.\");\n  const used = db\n    .query<{ count: number }, string>(\n      `SELECT COUNT(*) AS count FROM api_topics t\n       WHERE t.browser_profile = ?`,\n    )\n    .get(name)?.count;\n  if (used) throw new Error(`Profile \"${name}\" is assigned to ${used} topic(s).`);\n  db.query(\"DELETE FROM browser_profiles WHERE owner_id = ? AND name = ?\").run(\"local\", name);\n}\n"
+    "import { db } from \"#storage/forum-db\";\n\nexport const DEFAULT_BROWSER_PROFILE = \"default\";\n\nexport interface BrowserProfileRecord {\n  name: string;\n  createdAt: string | null;\n  topics: Array<{ id: string; title: string }>;\n  deletable: boolean;\n}\n\nexport function normalizeBrowserProfileName(name: string): string {\n  const value = name.trim().toLowerCase();\n  if (!/^[a-z0-9][a-z0-9_-]{0,47}$/.test(value)) {\n    throw new Error(\"Profile name must be 1-48 lowercase letters, numbers, '-' or '_'.\");\n  }\n  return value;\n}\n\ndb.exec(`\n  CREATE TABLE IF NOT EXISTS browser_profiles (\n    owner_id TEXT NOT NULL,\n    name TEXT NOT NULL,\n    created_at TEXT NOT NULL,\n    PRIMARY KEY (owner_id, name)\n  )\n`);\n\nexport function getBrowserProfileOwner(topicId: string, fallbackUserId: string): string {\n  return (\n    db\n      .query<{ browser_profile_owner: string | null }, string>(\n        \"SELECT browser_profile_owner FROM api_topics WHERE id = ?\",\n      )\n      .get(topicId)?.browser_profile_owner ?? fallbackUserId\n  );\n}\n\nexport function isTopicBrowserProfileOwner(topicId: string, userId: string): boolean {\n  return getBrowserProfileOwner(topicId, \"\") === userId;\n}\n\nexport function getTopicBrowserProfile(topicId: string): string {\n  const value = db\n    .query<{ browser_profile: string | null }, string>(\n      \"SELECT browser_profile FROM api_topics WHERE id = ?\",\n    )\n    .get(topicId)?.browser_profile;\n  return value || DEFAULT_BROWSER_PROFILE;\n}\n\nexport function hasBrowserProfileTopic(topicId: string): boolean {\n  return Boolean(\n    db.query<{ id: string }, string>(\"SELECT id FROM api_topics WHERE id = ?\").get(topicId),\n  );\n}\n\nexport function createBrowserProfile(ownerId: string, rawName: string): string {\n  void ownerId;\n  const name = normalizeBrowserProfileName(rawName);\n  if (name === DEFAULT_BROWSER_PROFILE) return name;\n  db.query(\n    \"INSERT OR IGNORE INTO browser_profiles (owner_id, name, created_at) VALUES (?, ?, ?)\",\n  ).run(\"local\", name, new Date().toISOString());\n  return name;\n}\n\nexport function assignTopicBrowserProfile(opts: {\n  topicId: string;\n  actorUserId: string;\n  profile: string;\n}): { previous: string; profile: string } {\n  const actualOwner = getBrowserProfileOwner(opts.topicId, \"\");\n  if (!actualOwner) throw new Error(`Topic \"${opts.topicId}\" not found or has no owner.`);\n  if (actualOwner !== opts.actorUserId) {\n    throw new Error(`Only the topic owner can change its browser profile.`);\n  }\n  const profile = normalizeBrowserProfileName(opts.profile);\n  if (profile !== DEFAULT_BROWSER_PROFILE) createBrowserProfile(actualOwner, profile);\n  const previous = getTopicBrowserProfile(opts.topicId);\n  const result = db\n    .query(\"UPDATE api_topics SET browser_profile = ? WHERE id = ?\")\n    .run(profile, opts.topicId);\n  if (Number(result.changes ?? 0) !== 1) throw new Error(`Topic \"${opts.topicId}\" not found.`);\n  return { previous, profile };\n}\n\nexport function listBrowserProfiles(ownerId: string): BrowserProfileRecord[] {\n  void ownerId;\n  const records = db\n    .query<{ name: string; created_at: string }, string>(\n      \"SELECT name, created_at FROM browser_profiles WHERE owner_id = ? ORDER BY name\",\n    )\n    .all(\"local\");\n  const topics = db\n    .query<{ id: string; title: string; browser_profile: string | null }, []>(\n      `SELECT t.id, t.title, t.browser_profile FROM api_topics t\n       ORDER BY t.title`,\n    )\n    .all();\n\n  const byName = new Map<string, BrowserProfileRecord>();\n  byName.set(DEFAULT_BROWSER_PROFILE, {\n    name: DEFAULT_BROWSER_PROFILE,\n    createdAt: null,\n    topics: [],\n    deletable: false,\n  });\n  for (const row of records) {\n    byName.set(row.name, {\n      name: row.name,\n      createdAt: row.created_at,\n      topics: [],\n      deletable: true,\n    });\n  }\n  for (const topic of topics) {\n    const name = topic.browser_profile || DEFAULT_BROWSER_PROFILE;\n    const record = byName.get(name) ?? {\n      name,\n      createdAt: null,\n      topics: [],\n      deletable: name !== DEFAULT_BROWSER_PROFILE,\n    };\n    record.topics.push({ id: topic.id, title: topic.title });\n    record.deletable = false;\n    byName.set(name, record);\n  }\n  return [...byName.values()].sort((a, b) => {\n    if (a.name === DEFAULT_BROWSER_PROFILE) return -1;\n    if (b.name === DEFAULT_BROWSER_PROFILE) return 1;\n    return a.name.localeCompare(b.name);\n  });\n}\n\nexport function assertBrowserProfileDeletable(ownerId: string, rawName: string): string {\n  void ownerId;\n  const name = normalizeBrowserProfileName(rawName);\n  if (name === DEFAULT_BROWSER_PROFILE) throw new Error(\"The default profile cannot be deleted.\");\n  const topics = db\n    .query<{ id: string; title: string }, string>(\n      `SELECT t.id, t.title FROM api_topics t\n       WHERE t.browser_profile = ?\n       ORDER BY t.title`,\n    )\n    .all(name);\n  if (topics.length > 0) {\n    const assigned = topics.map((topic) => `${topic.title} (${topic.id})`).join(\", \");\n    throw new Error(`Profile \"${name}\" is assigned to ${topics.length} topic(s): ${assigned}.`);\n  }\n  return name;\n}\n\nexport function deleteBrowserProfile(ownerId: string, rawName: string): boolean {\n  const name = assertBrowserProfileDeletable(ownerId, rawName);\n  const result = db\n    .query(\"DELETE FROM browser_profiles WHERE owner_id = ? AND name = ?\")\n    .run(\"local\", name);\n  return Number(result.changes ?? 0) > 0;\n}\n",
+    "import { removePlaywrightProfileData } from \"#platform/playwright/manager\";\nimport { assertBrowserProfileDeletable, deleteBrowserProfile } from \"#storage/browser-profiles\";\n\nexport interface DeleteManagedBrowserProfileResult {\n  profile: string;\n  metadataRemoved: boolean;\n  dataRemoved: boolean;\n  processStopped: boolean;\n}\n\n/** Delete an unused named profile while serialized against browser startup. */\nexport async function deleteManagedBrowserProfile(\n  ownerId: string,\n  rawProfile: string,\n): Promise<DeleteManagedBrowserProfileResult> {\n  const profile = assertBrowserProfileDeletable(ownerId, rawProfile);\n  let metadataRemoved = false;\n  const removed = await removePlaywrightProfileData(ownerId, profile, {\n    beforeRemove: () => {\n      assertBrowserProfileDeletable(ownerId, profile);\n    },\n    afterRemove: () => {\n      metadataRemoved = deleteBrowserProfile(ownerId, profile);\n    },\n  });\n\n  return {\n    profile,\n    metadataRemoved,\n    dataRemoved: removed.dataRemoved,\n    processStopped: removed.processStopped,\n  };\n}\n"
   ],
-  "mappings": ";;;;AAAA,yBAAS;AACT;AACA;AACA,oBAAS;;;ACHT;AACA;AACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASA;AACA;AACA;AACA;;;ACVO,SAAS,WAAW,CAAC,KAAyB,KAAiC;AAAA,EACpF,MAAM,QAAQ,IAAI,MAAM,KAAK;AAAA,EAC7B,OAAO,SAAS;AAAA;AAGX,SAAS,gBAAgB,CAAC,OAA2B,UAA0B;AAAA,EACpF,IAAI,CAAC;AAAA,IAAO,OAAO;AAAA,EACnB,MAAM,OAAO,OAAO,SAAS,OAAO,EAAE;AAAA,EACtC,OAAO,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,QAAQ,QAAS,OAAO;AAAA;;;ACZvE;AAmBO,SAAS,iBAAiB,CAAC,UAA8B,CAAC,GAAG;AAAA,EAClE,MAAM,cAAc,QAAQ,eAAe;AAAA,EAC3C,OAAO,KACL;AAAA,IACE,OAAO,QAAQ,SAAS,QAAQ,IAAI,aAAa;AAAA,IACjD,WAAW,cACP;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,UAAU;AAAA,QACV,eAAe;AAAA,QACf,aAAa;AAAA,MACf;AAAA,IACF,IACA;AAAA,EACN,GACA,KAAK,YAAY,CAAC,CACpB;AAAA;AAKK,IAAM,SAAS,kBAAkB;;;ACbjC,IAAM,mBAAyC,CAAC,WAAW,UAAU,OAAO;AAE5E,SAAS,WAAW,CAAC,OAAoC;AAAA,EAC9D,OAAO,OAAO,UAAU,YAAa,iBAAuC,SAAS,KAAK;AAAA;;;AHZrF,SAAS,OAAO,CAAC,QAAoC;AAAA,EAC1D,OAAO,YAAY,QAAQ,KAAK,MAAM;AAAA;AAGxC,SAAS,eAAe,CAAC,QAAgB,UAAqB,cAAkC;AAAA,EAC9F,MAAM,QAAQ,QAAQ,MAAM,MAAM,eAAe,QAAQ,YAAY,IAAI;AAAA,EACzE,OAAO,YAAY,KAAK,IAAI,QAAQ;AAAA;AAGtC,IAAM,OAAO,QAAQ;AAIrB,SAAS,kBAAkB,GAAW;AAAA,EACpC,MAAM,YAAY,QAAQ,cAAc,YAAY,GAAG,CAAC;AAAA,EACxD,MAAM,kBAAkB,QAAQ,WAAW,SAAS;AAAA,EACpD,IAAI,WAAW,QAAQ,iBAAiB,KAAK,CAAC;AAAA,IAAG,OAAO;AAAA,EACxD,OAAO,QAAQ,WAAW,OAAO;AAAA;AAG5B,IAAM,eAAe,mBAAmB;AAG/C,SAAS,oBAAoB,CAAC,MAAsB;AAAA,EAClD,IAAI,MAAM;AAAA,EACV,OAAO,MAAM;AAAA,IACX,MAAM,YAAY,QAAQ,KAAK,gBAAgB,QAAQ,IAAI;AAAA,IAC3D,IAAI,WAAW,SAAS;AAAA,MAAG,OAAO;AAAA,IAClC,MAAM,SAAS,QAAQ,GAAG;AAAA,IAC1B,IAAI,WAAW;AAAA,MAAK,OAAO;AAAA,IAC3B,MAAM;AAAA,EACR;AAAA;AAKF,IAAM,gBAAgB,QAAQ,oBAAoB;AAC3C,IAAM,YAAY,gBAAgB,QAAQ,aAAa,IAAI,QAAQ,MAAM,WAAW;AAE3F,SAAS,oBAAoB,CAAC,QAAgB,WAA2B;AAAA,EACvE,MAAM,WAAW,QAAQ,MAAM;AAAA,EAC/B,IAAI;AAAA,IAAU,OAAO,QAAQ,QAAQ;AAAA,EACrC,OAAO,QAAQ,WAAW,SAAS;AAAA;AAGrC,SAAS,YAAY,CAAC,UAA8B,UAA0B;AAAA,EAC5E,OAAO,iBAAiB,UAAU,QAAQ;AAAA;AAGrC,IAAM,gBAAgB,qBAAqB,0BAA0B,WAAW;AAChF,IAAM,sBAAsB,QAAQ,eAAe,QAAQ;AAC3D,IAAM,kBAAkB,QAAQ,eAAe,MAAM;AACrD,IAAM,qBAAqB,QAAQ,eAAe,MAAM;AACxD,IAAM,cAAc,qBAAqB,wBAAwB,SAAS;AAC1E,IAAM,uBAAuB,QAAQ,aAAa,UAAU;AAC5D,IAAM,eAAe,QAAQ,WAAW,UAAU;AAClD,IAAM,cAAc,QAAQ,WAAW,SAAS;AAEhD,IAAM,eAAe,QAAQ,WAAW,QAAQ,UAAU;AAC1D,IAAM,mBAAmB,QAAQ,WAAW,QAAQ,IAAI;AACxD,IAAM,wBAAwB,QAAQ,WAAW,QAAQ,UAAU;AAK1E,IAAM,wBAAwB,QAAQ,4BAA4B;AAC3D,IAAM,oBAAoB,wBAAwB,QAAQ,qBAAqB,IAAI;AAiBnF,IAAM,qBAAqB;AAE3B,IAAM,gCAAgC;AAE7C,SAAS,cAAc,CAAC,eAAuB,gBAAiC;AAAA,EAC9E,MAAM,SAAS,cAAc,MAAM,GAAG,EAAE,IAAI,MAAM;AAAA,EAClD,MAAM,UAAU,eAAe,MAAM,GAAG,EAAE,IAAI,MAAM;AAAA,EACpD,IAAI,OAAO,KAAK,OAAO,KAAK,KAAK,QAAQ,KAAK,OAAO,KAAK;AAAA,IAAG,OAAO;AAAA,EACpE,SAAS,QAAQ,EAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AAAA,IACtD,KAAK,OAAO,UAAU,MAAM,QAAQ,UAAU;AAAA,MAAI,OAAO;AAAA,IACzD,KAAK,OAAO,UAAU,MAAM,QAAQ,UAAU;AAAA,MAAI,OAAO;AAAA,EAC3D;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,4BAA4B,CAAC,WAA4B;AAAA,EAChE,IAAI;AAAA,IACF,MAAM,SAAS,aAAa,WAAW,CAAC,WAAW,GAAG;AAAA,MACpD,UAAU;AAAA,MACV,SAAS;AAAA,MACT,OAAO,CAAC,UAAU,QAAQ,QAAQ;AAAA,IACpC,CAAC,EAAE,KAAK;AAAA,IACR,MAAM,QAAQ,OAAO,MAAM,kCAAkC;AAAA,IAC7D,IAAI,CAAC;AAAA,MAAO,OAAO;AAAA,IACnB,OAAO,eAAe,MAAM,MAAM,CAAC,EAAE,KAAK,GAAG,GAAG,6BAA6B;AAAA,IAC7E,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AASJ,SAAS,mBAAmB,CAAC,UAAuC;AAAA,EACzE,MAAM,WAAW,UAAU,KAAK;AAAA,EAChC,IACE,CAAC,YACD,CAAC,eAAe,mBAAmB,QAAQ,MAAM,EAAE,GAAG,6BAA6B,GACnF;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM,YAAY,WACd,QAAQ,QAAQ,IAChB,QAAQ,cAAc,cAAc,oBAAoB,YAAY;AAAA,EACxE,IAAI;AAAA,IACF,WAAW,WAAW,UAAU,IAAI;AAAA,IACpC,OAAO,6BAA6B,SAAS,IAAI,YAAY;AAAA,IAC7D,MAAM;AAAA,IACN;AAAA;AAAA;AAIG,IAAM,iBAAiB,oBAAoB,QAAQ,yBAAyB,CAAC;AAG7E,SAAS,oBAAoB,CAAC,UAA2B;AAAA,EAC9D,MAAM,WAAW,UAAU,KAAK;AAAA,EAChC,IAAI;AAAA,IAAU,OAAO,QAAQ,QAAQ;AAAA,EACrC,OAAO,kBAAkB,QAAQ,cAAc,cAAc,oBAAoB,YAAY;AAAA;AAGxF,IAAM,qBAAqB,qBAAqB,QAAQ,0BAA0B,CAAC;AAuBnF,SAAS,mBAAmB,GAA8B;AAAA,EAC/D,MAAM,MAAM,QAAQ,mBAAmB;AAAA,EACvC,IAAI,CAAC;AAAA,IAAK,OAAO;AAAA,EACjB,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,MAAM,IAAI,IAAI,GAAG;AAAA,IACjB,MAAM;AAAA,IACN,OAAO,KAAK,EAAE,IAAI,GAAG,sCAAsC;AAAA,IAC3D,OAAO;AAAA;AAAA,EAGT,MAAM,SAAS,GAAG,IAAI,aAAa,IAAI;AAAA,EACvC,MAAM,QAA4B,EAAE,OAAO;AAAA,EAC3C,IAAI,IAAI;AAAA,IAAU,MAAM,WAAW,mBAAmB,IAAI,QAAQ;AAAA,EAClE,IAAI,IAAI;AAAA,IAAU,MAAM,WAAW,mBAAmB,IAAI,QAAQ;AAAA,EAClE,MAAM,SAAS,QAAQ,sBAAsB;AAAA,EAC7C,IAAI;AAAA,IAAQ,MAAM,SAAS;AAAA,EAC3B,OAAO;AAAA;AAgBF,IAAM,UAAU,qBAAqB,KAAK;AAE1C,IAAM,aAAa,cAAc,YAAY,GAAG,EAAE,QAAQ,KAAK;AAC/D,IAAM,gBAAgB,QAAQ,cAAc,eAAe;AAE3D,IAAM,sBAAsB,QAAQ,cAAc,gCAAgC;AAElF,IAAM,cAAc,QAAQ,cAAc,wBAAwB;AAClE,IAAM,+BAA+B,QAC1C,cACA,qCACF;AACO,IAAM,6BAA6B,QACxC,cACA,mCACF;AAEO,IAAM,cAAc,QAAQ,cAAc,wBAAwB;AAElE,IAAM,qBAAqB,QAAQ,cAAc,+BAA+B;AAEhF,IAAM,wBAAwB,QAAQ,cAAc,kCAAkC;AAEtF,IAAM,uBAAuB,QAAQ,cAAc,iCAAiC;AAEpF,IAAM,sBAAsB,QAAQ,cAAc,gCAAgC;AAElF,IAAM,yBAAyB,QAAQ,cAAc,mCAAmC;AAExF,IAAM,eAAe,QAAQ,cAAc,yBAAyB;AAEpE,IAAM,oBAAoB,aAAa,QAAQ,IAAI,mBAAmB,IAAI;AAC1E,IAAM,mBAAmB,aAAa,QAAQ,IAAI,kBAAkB,IAAI;AAe/E,SAAS,uBAAuB,CAC9B,QACA,UACA,UAAyC,CAAC,GAClC;AAAA,EACR,MAAM,WAAW,QAAQ,MAAM;AAAA,EAC/B,MAAM,aAAa,QAAQ,aAAa,QAAQ;AAAA,EAChD,UAAU,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EAClD,IAAI,UAAU;AAAA,IACZ,IAAI,QAAQ,iBAAiB;AAAA,MAC3B,cAAc,YAAY,GAAG;AAAA,GAAc,EAAE,MAAM,IAAM,CAAC;AAAA,MAC1D,UAAU,YAAY,GAAK;AAAA,IAC7B;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,WAAW,UAAU,GAAG;AAAA,IAC1B,MAAM,SAAS,aAAa,YAAY,OAAO,EAAE,KAAK;AAAA,IACtD,IAAI,QAAQ;AAAA,MACV,UAAU,YAAY,GAAK;AAAA,MAC3B,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,YAAY,EAAE,EAAE,SAAS,WAAW;AAAA,EACnD,IAAI;AAAA,IACF,cAAc,YAAY,GAAG;AAAA,GAAY,EAAE,MAAM,KAAO,MAAM,KAAK,CAAC;AAAA,IACpE,OAAO;AAAA,IACP,OAAO,OAAO;AAAA,IACd,IAAK,MAAgC,SAAS;AAAA,MAAU,MAAM;AAAA,IAC9D,MAAM,SAAS,aAAa,YAAY,OAAO,EAAE,KAAK;AAAA,IACtD,IAAI,CAAC;AAAA,MAAQ,MAAM,IAAI,MAAM,oCAAoC,YAAY;AAAA,IAC7E,UAAU,YAAY,GAAK;AAAA,IAC3B,OAAO;AAAA;AAAA;AAIJ,IAAM,qBAAqB,wBAChC,sBACA,oBACF;AAEO,IAAM,qBAAqB,wBAChC,0BACA,oBACF;AACO,IAAM,mBAAmB,wBAC9B,6BACA,oBACA,EAAE,iBAAiB,KAAK,CAC1B;AAGA,OAAO,QAAQ,IAAI;AAGZ,IAAM,gBAAgB,SAAS,QAAQ,IAAI,iBAAiB,QAAQ,EAAE;AACtE,IAAM,WAAW,QAAQ,IAAI,YAAY;AAGzC,IAAM,WAAW,qBAAqB,qBAAqB,MAAM;AACjE,IAAM,UAAU,qBAAqB,oBAAoB,MAAM;AAC/D,IAAM,cAAc,QAAQ,UAAU,SAAS;AAC/C,IAAM,YAAY,QAAQ,UAAU,OAAO;AAE3C,IAAM,cAAc,QAAQ,IAAI,mBACnC,QAAQ,QAAQ,IAAI,gBAAgB,IACpC,QAAQ,UAAU,aAAa;AAC5B,IAAM,aAAa,QAAQ,UAAU,kBAAkB;AACvD,IAAM,gBAAgB,QAAQ,UAAU,OAAO;AAI/C,IAAM,UAAU,qBAAqB,oBAAoB,SAAS;AAElE,IAAM,eAAe,QAAQ,SAAS,UAAU;AAChD,IAAM,aAAa,QAAQ,SAAS,aAAa;AACjD,IAAM,cAAc,QAAQ,SAAS,cAAc;AACnD,IAAM,oBAAoB,QAAQ,SAAS,eAAe;AAC1D,IAAM,mBAAmB,QAAQ,SAAS,cAAc;AACxD,IAAM,uBAAuB,aAAa,QAAQ,IAAI,sBAAsB,IAAI;AAChF,IAAM,sBAAsB,aAAa,QAAQ,IAAI,qBAAqB,IAAI;AAC9E,IAAM,uBAAuB,QAAQ,SAAS,kBAAkB;AACvE,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;AACxC,UAAU,UAAU,EAAE,WAAW,KAAK,CAAC;AACvC,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;AAC1C,UAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACrD,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,UAAU,cAAc,EAAE,WAAW,KAAK,CAAC;AAC3C,UAAU,YAAY,EAAE,WAAW,KAAK,CAAC;AACzC,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;AAC1C,UAAU,mBAAmB,EAAE,WAAW,KAAK,CAAC;AAChD,UAAU,kBAAkB,EAAE,WAAW,KAAK,CAAC;AAC/C,UAAU,sBAAsB,EAAE,WAAW,KAAK,CAAC;AACnD,UAAU,eAAe,EAAE,WAAW,KAAK,CAAC;AAC5C,UAAU,qBAAqB,EAAE,WAAW,KAAK,CAAC;AAClD,UAAU,iBAAiB,EAAE,WAAW,KAAK,CAAC;AAC9C,UAAU,oBAAoB,EAAE,WAAW,KAAK,CAAC;AACjD,UAAU,cAAc,EAAE,WAAW,KAAK,CAAC;AAC3C,UAAU,kBAAkB,EAAE,WAAW,KAAK,CAAC;AAC/C,UAAU,uBAAuB,EAAE,WAAW,KAAK,CAAC;AACpD,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;AAC1C,UAAU,sBAAsB,EAAE,WAAW,KAAK,CAAC;AACnD,UAAU,cAAc,EAAE,WAAW,KAAK,CAAC;AAC3C,UAAU,aAAa,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGhD,IAAM,wBAAwB,KAAK,KAAK;AAExC,IAAM,qBAAqB,QAAQ,cAAc,oBAAoB;AACrE,IAAM,gBAAgB,QAAQ,cAAc,eAAe;AA8B3D,IAAM,iBAA4B,gBACvC,kBACA,WACA,eACF;AACO,IAAM,gBAA2B,gBAAgB,iBAAiB,cAAc;AAChF,IAAM,gBAA2B,gBAAgB,iBAAiB,cAAc;AAEhF,IAAM,iBAAiB,QAAQ,gBAAgB,KAAK,QAAQ,eAAe;AAElF,SAAS,eAAe,CAAC,QAAgB,YAA2C;AAAA,EAClF,OAAO,QAAQ,MAAM,MAAM,eAAe,iBAAiB,iBAAiB;AAAA;AAGvE,IAAM,gBAAgB,gBAAgB,iBAAiB,aAAa;AACpE,IAAM,gBAAgB,gBAAgB,iBAAiB,aAAa;AAapE,IAAM,aAAa,QAAQ,YAAY;AACvC,IAAM,cAAc,QAAQ,aAAa;AACzC,IAAM,aAAa,QAAQ,YAAY,KAAK;AAC5C,IAAM,yBACX,QAAQ,wBAAwB,KAAK,QAAQ,cAAc,mCAAmC;AACzF,IAAM,gBAAgB,QAAQ,oBAAoB,KAAK;AACvD,IAAM,gBAAgB,QAAQ,eAAe,KAAK;AAClD,IAAM,gBAAgB,QAAQ,eAAe,KAAK;AAKzD,IAAM,mBAAmB,OAAO,SAAS,QAAQ,IAAI,kBAAkB,IAAI,EAAE;AACtE,IAAM,iBACX,OAAO,UAAU,gBAAgB,KAAK,mBAAmB,IAAI,mBAAmB;;;AIjclF,oBAAS;AAGF,SAAS,uBAAuB,CACrC,SACA,UACS;AAAA,EACT,OACE,SAAS,YAAY,YACrB,SAAS,aAAa,QACtB,SAAS,eAAe,QACxB,CAAC,SAAS;AAAA;AAKP,SAAS,2BAA2B,CAAC,QAAiB,oBAAqC;AAAA,EAChG,IAAI,CAAC,UAAU,OAAO,WAAW;AAAA,IAAU,OAAO;AAAA,EAClD,MAAM,YAAY;AAAA,EAClB,OACE,UAAU,OAAO,QACjB,UAAU,SAAS,8BACnB,UAAU,eAAe;AAAA;AAKtB,SAAS,qBAAqB,CACnC,YACA,YACA,UACA,KACA,WACe;AAAA,EACf,MAAM,SAAS,IAAI,IAAI,UAAU;AAAA,EACjC,MAAM,OAAO,IAAI,IAAI,QAAQ;AAAA,EAC7B,IAAI,SAAqD;AAAA,EACzD,YAAY,KAAK,aAAa,YAAY;AAAA,IACxC,IAAI,OAAO,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG;AAAA,MAAG;AAAA,IACtC,IAAI,MAAM,SAAS,aAAa;AAAA,MAAW;AAAA,IAC3C,IAAI,CAAC,UAAU,SAAS,aAAa,OAAO,YAAY;AAAA,MACtD,SAAS,EAAE,KAAK,YAAY,SAAS,WAAW;AAAA,IAClD;AAAA,EACF;AAAA,EACA,OAAO,QAAQ,OAAO;AAAA;AAIjB,SAAS,kBAAkB,CAChC,SACA,SACA,eACA,YACe;AAAA,EACf,SAAS,OAAO,QAAS,QAAQ,SAAS,QAAQ;AAAA,IAChD,IAAI,cAAc,IAAI,IAAI,KAAK,WAAW,IAAI;AAAA,MAAG;AAAA,IACjD,OAAO;AAAA,EACT;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,qBAAqB,CAAC,SAAgC;AAAA,EACpE,MAAM,QAAQ,QAAQ,MAAM,+BAA+B;AAAA,EAC3D,OAAO,QAAQ,MAAM,KAAK;AAAA;AAIrB,SAAS,oCAAoC,CAClD,SACA,qBACS;AAAA,EACT,MAAM,oBAAoB,sBAAsB,OAAO;AAAA,EACvD,OAAO,sBAAsB,QAAQ,SAAQ,iBAAiB,MAAM,SAAQ,mBAAmB;AAAA;AAI1F,SAAS,uBAAuB,CAAC,MAAoB,WAAqC;AAAA,EAC/F,IAAI,KAAK,aAAa,QAAQ,KAAK,eAAe;AAAA,IAAM,OAAO,QAAQ,QAAQ,IAAI;AAAA,EAEnF,OAAO,IAAI,QAAiB,CAAC,gBAAgB;AAAA,IAC3C,IAAI,UAAU;AAAA,IACd,IAAI;AAAA,IACJ,MAAM,SAAS,CAAC,WAAoB;AAAA,MAClC,IAAI;AAAA,QAAS;AAAA,MACb,UAAU;AAAA,MACV,aAAa,KAAK;AAAA,MAClB,KAAK,IAAI,QAAQ,MAAM;AAAA,MACvB,YAAY,MAAM;AAAA;AAAA,IAEpB,MAAM,SAAS,MAAM,OAAO,IAAI;AAAA,IAEhC,KAAK,KAAK,QAAQ,MAAM;AAAA,IACxB,QAAQ,WAAW,MAAM,OAAO,KAAK,aAAa,QAAQ,KAAK,eAAe,IAAI,GAAG,SAAS;AAAA,IAC9F,IAAI,OAAO,UAAU;AAAA,MAAU,MAAM,QAAQ;AAAA,IAG7C,IAAI,KAAK,aAAa,QAAQ,KAAK,eAAe;AAAA,MAAM,OAAO,IAAI;AAAA,GACpE;AAAA;AAII,SAAS,6BAA6B,CAAC,MAAkD;AAAA,EAC9F,OAAO,IAAI,QAAe,CAAC,UAAU,WAAW;AAAA,IAC9C,KAAK,KAAK,SAAS,MAAM;AAAA,GAC1B;AAAA;;;AC1GH,sBAAS;AACT,oBAAS;AACT,oBAAS,kBAAS,kBAAM;;;AC6BxB,IAAM,QAAQ,OAAO,QAAQ,SAAS,QAAQ;AAI9C,IAAI;AAEJ,IAAI,OAAO;AAAA,GACR,EAAE,SAAS,IAAI,MAAa;AAC/B,EAAO;AAAA,EAmBL,MAAM,sBAAsB,CAAC,QAAQ,QAAQ,EAAE,KAAK,GAAG;AAAA,EACvD,QAAQ,iBAAkB,MAAa;AAAA;AAAA,EAIvC,MAAM,aAAa;AAAA,IACjB;AAAA,IAEA,WAAW,CAAC,MAAc,UAAqB,CAAC,GAAG;AAAA,MAGjD,KAAK,MAAM,QAAQ,WACf,IAAI,aAAa,MAAM,EAAE,UAAU,KAAK,CAAC,IACzC,IAAI,aAAa,IAAI;AAAA;AAAA,IAG3B,KAAK,CAAC,KAAa;AAAA,MACjB,OAAO,KAAK,IAAI,QAAQ,GAAG;AAAA;AAAA,IAG7B,OAAO,CAAC,KAAa;AAAA,MACnB,OAAO,KAAK,IAAI,QAAQ,GAAG;AAAA;AAAA,IAG7B,IAAI,CAAC,KAAmB;AAAA,MACtB,KAAK,IAAI,KAAK,GAAG;AAAA;AAAA,IAGnB,GAAG,CAAC,QAAgB,QAAmB;AAAA,MACrC,OAAO,KAAK,IAAI,QAAQ,GAAG,EAAE,IAAI,GAAG,MAAM;AAAA;AAAA,IAG5C,WAAsC,CAAC,IAAgD;AAAA,MAMrF,MAAM,MACJ,CAAC,UACD,IAAI,SAAkB;AAAA,QACpB,KAAK,IAAI,KAAK,KAAK;AAAA,QACnB,IAAI;AAAA,UACF,MAAM,SAAS,GAAG,GAAG,IAAI;AAAA,UACzB,KAAK,IAAI,KAAK,QAAQ;AAAA,UACtB,OAAO;AAAA,UACP,OAAO,KAAK;AAAA,UACZ,KAAK,IAAI,KAAK,UAAU;AAAA,UACxB,MAAM;AAAA;AAAA;AAAA,MAGZ,MAAM,KAAK,IAAI,OAAO;AAAA,MAKtB,GAAG,WAAW,IAAI,gBAAgB;AAAA,MAClC,GAAG,YAAY,IAAI,iBAAiB;AAAA,MACpC,GAAG,YAAY,IAAI,iBAAiB;AAAA,MACpC,OAAO;AAAA;AAAA,IAGT,KAAK,GAAS;AAAA,MACZ,KAAK,IAAI,MAAM;AAAA;AAAA,EAEnB;AAAA,EAEA,WAAW;AAAA;;;AD7Gb,IAAI,iBAA8C,CAAC;AAGnD,IAAI,mBAAgD;AACpD,IAAI,uBAAsC;AAe1C,IAAM,qBAAoD,CAAC;AAC3D,IAAM,qBAAqB,IAAI;AAC/B,IAAM,wBAAwB,IAAI;AAElC,SAAS,OAAO,CAAC,MAAc,UAA0B;AAAA,EACvD,MAAM,QAAQ,QAAQ,IAAI,OAAO,KAAK;AAAA,EACtC,OAAO,SAAQ,SAAS,QAAQ;AAAA;AAGlC,SAAS,eAAe,GAAW;AAAA,EACjC,OAAO,QAAQ,sBAAsB,MAAK,SAAQ,GAAG,WAAW,CAAC;AAAA;AAGnE,SAAS,cAAc,GAAW;AAAA,EAChC,OAAO,QAAQ,qBAAqB,MAAK,gBAAgB,GAAG,MAAM,CAAC;AAAA;AAgBrE,SAAS,2BAA2B,GAAW;AAAA,EAC7C,OAAO,QAAQ,oBAAoB,MAAK,sBAAsB,GAAG,aAAa,CAAC;AAAA;AAGjF,SAAS,kBAAkB,CAAC,UAAyC;AAAA,EAQnE,SAAS,KAAK,4BAA4B;AAAA,EAC1C,SAAS,KAAK,2BAA2B;AAAA,EACzC,SAAS,KAAK,0BAA0B;AAAA,EACxC,SAAS,KAAK,kCAAkC;AAAA,EAChD,IAAI;AAAA,IACF,SAAS,KAAK,iCAAiC;AAAA,IAC/C,MAAM;AAAA;AAKV,SAAS,eAAe,GAA4B;AAAA,EAClD,MAAM,OAAO,4BAA4B;AAAA,EACzC,IAAI,oBAAoB,yBAAyB;AAAA,IAAM,OAAO;AAAA,EAC9D,IAAI;AAAA,IAAkB,iBAAiB,MAAM;AAAA,EAC7C,WAAU,SAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5C,mBAAmB,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC;AAAA,EACtD,uBAAuB;AAAA,EACvB,mBAAmB,gBAAgB;AAAA,EACnC,OAAO;AAAA;AAGF,SAAS,sBAAsB,GAA4B;AAAA,EAChE,OAAQ,eAAe,YAAY,gBAAgB;AAAA;AAG9C,SAAS,qBAAqB,GAAW;AAAA,EAC9C,OAAO,eAAe,WAAW,eAAe;AAAA;AA2F3C,SAAS,gCAAgC,CAC9C,YACA,WAAW,KACL;AAAA,EACN,mBAAmB,KAAK,EAAE,YAAY,SAAS,CAAC;AAAA,EAChD,mBAAmB,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAAA;AAGpD,SAAS,oBAAoB,CAClC,WAAoC,uBAAuB,GACrD;AAAA,EACN,IAAI,sBAAsB,IAAI,QAAQ;AAAA,IAAG;AAAA,EACzC,IAAI,cAAc,mBAAmB,IAAI,QAAQ;AAAA,EACjD,IAAI,CAAC,aAAa;AAAA,IAChB,cAAc,IAAI;AAAA,IAClB,mBAAmB,IAAI,UAAU,WAAW;AAAA,EAC9C;AAAA,EACA,sBAAsB,IAAI,QAAQ;AAAA,EAClC,IAAI;AAAA,IACF,WAAW,SAAS,oBAAoB;AAAA,MACtC,IAAI,YAAY,IAAI,MAAM,UAAU;AAAA,QAAG;AAAA,MAGvC,YAAY,IAAI,MAAM,UAAU;AAAA,MAChC,IAAI;AAAA,QACF,MAAM,WAAW,QAAQ;AAAA,QACzB,OAAO,OAAO;AAAA,QACd,YAAY,OAAO,MAAM,UAAU;AAAA,QACnC,MAAM;AAAA;AAAA,IAEV;AAAA,YACA;AAAA,IACA,sBAAsB,OAAO,QAAQ;AAAA;AAAA;AAKlC,IAAM,0BAA0B,IAAI,MAAM,CAAC,GAA8B;AAAA,EAC9E,GAAG,CAAC,SAAS,UAAU;AAAA,IACrB,MAAM,WAAW,uBAAuB;AAAA,IACxC,qBAAqB,QAAQ;AAAA,IAC7B,MAAM,QAAQ,QAAQ,IAAI,UAAoB,UAAU,QAAQ;AAAA,IAChE,OAAO,OAAO,UAAU,aAAa,MAAM,KAAK,QAAQ,IAAI;AAAA;AAAA,EAE9D,GAAG,CAAC,SAAS,UAAU,OAAO;AAAA,IAC5B,MAAM,WAAW,uBAAuB;AAAA,IACxC,qBAAqB,QAAQ;AAAA,IAC7B,OAAO,QAAQ,IAAI,UAAoB,UAAU,OAAO,QAAQ;AAAA;AAEpE,CAAC;;;AEjPM,IAAM,KAAK;;;ACHlB;;;AC+BA,iCAAiC,CAAC,aAAa;AAAA,EAC7C,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAQb;AAAA,GACA,EAAE;;;ADpCE,IAAM,sBAAsB,GAAG,QAAQ,OAAO,WAAW;AAyBhE,iCAAiC,CAAC,aAAa;AAAA,EAC7C,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAYb;AAAA,GACA,EAAE;;;AExCE,IAAM,yBAAyB;AA0CtC,iCAAiC,CAAC,aAAa;AAAA,EAC7C,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GASb;AAAA,GACA,EAAE;AAEL,SAAS,UAAU,CAAC,KAAkD;AAAA,EACpE,OAAO;AAAA,IACL,MAAM,IAAI;AAAA,IACV,SAAS,IAAI;AAAA,IACb,KAAK,OAAO,IAAI,GAAG;AAAA,IACnB,WAAW,OAAO,IAAI,UAAU;AAAA,IAChC,aAAa,OAAO,IAAI,YAAY;AAAA,EACtC;AAAA;AA8BK,SAAS,sBAAsB,CACpC,MACA,MAAM,KAAK,IAAI,GACf,UAAU,wBACkB;AAAA,EAC5B,MAAM,MAAM,GACT,MAAwC,qDAAqD,EAC7F,IAAI,IAAI;AAAA,EACX,IAAI,CAAC;AAAA,IAAK,OAAO;AAAA,EACjB,MAAM,QAAQ,WAAW,GAAG;AAAA,EAC5B,OAAO,MAAM,MAAM,eAAe,UAAU,QAAQ;AAAA;;;AXjG/C,SAAS,WAAW,CAAC,MAAgC;AAAA,EAC1D,OAAO,IAAI,QAAQ,CAAC,iBAAiB;AAAA,IACnC,MAAM,SAAS,aAAa;AAAA,IAC5B,IAAI,UAAU;AAAA,IACd,MAAM,SAAS,CAAC,aAAsB;AAAA,MACpC,IAAI;AAAA,QAAS;AAAA,MACb,UAAU;AAAA,MACV,OAAO,mBAAmB;AAAA,MAC1B,aAAa,QAAQ;AAAA;AAAA,IAGvB,OAAO,MAAM;AAAA,IACb,OAAO,KAAK,SAAS,MAAM,OAAO,IAAI,CAAC;AAAA,IACvC,OAAO,OAAO,EAAE,MAAM,aAAa,MAAM,WAAW,KAAK,GAAG,MAAM;AAAA,MAChE,OAAO,MAAM,CAAC,UAAU,OAAO,UAAU,SAAS,CAAC;AAAA,KACpD;AAAA,GACF;AAAA;AAGH,eAAsB,4BAA4B,CAChD,SACA,SACA,eACA,gBAAoD,aAC5B;AAAA,EACxB,SAAS,OAAO,QAAS,QAAQ,SAAS,QAAQ;AAAA,IAChD,IAAI,cAAc,IAAI,IAAI;AAAA,MAAG;AAAA,IAC7B,cAAc,IAAI,IAAI;AAAA,IACtB,IAAI,MAAM,cAAc,IAAI,GAAG;AAAA,MAC7B,cAAc,OAAO,IAAI;AAAA,MACzB;AAAA,IACF;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,OAAO;AAAA;AA4DF,SAAS,8BAA8B,CAAC,aAA2B;AAAA,EACxE,MAAM,SAAS,SAAQ,WAAW;AAAA,EAClC,MAAM,cAAc,SAAQ,oBAAoB;AAAA,EAChD,IAAI,WAAW,eAAe,CAAC,OAAO,WAAW,GAAG,cAAc,KAAK;AAAA,IAAG;AAAA,EAC1E,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,cAAa,SAAS,CAAC,MAAM,MAAM,WAAW,GAAG,EAAE,OAAO,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK;AAAA,IAC3F,MAAM;AAAA,IACN;AAAA;AAAA,EAEF,IAAI,CAAC;AAAA,IAAM;AAAA,EACX,WAAW,OAAO,KAAK,MAAM;AAAA,CAAI,GAAG;AAAA,IAClC,MAAM,SAAS,SAAS,IAAI,KAAK,GAAG,EAAE;AAAA,IACtC,IAAI,OAAO,MAAM,MAAM,KAAK,WAAW,QAAQ;AAAA,MAAK;AAAA,IACpD,IAAI;AAAA,MACF,MAAM,UAAU,cAAa,MAAM,CAAC,MAAM,OAAO,MAAM,GAAG,MAAM,UAAU,GAAG;AAAA,QAC3E,OAAO;AAAA,MACT,CAAC,EACE,SAAS,EACT,KAAK;AAAA,MACR,MAAM,SAAS,sBAAsB,OAAO;AAAA,MAG5C,IAAI,CAAC,UAAU,SAAQ,MAAM,MAAM;AAAA,QAAQ;AAAA,MAC3C,wBAAwB,MAAM;AAAA,MAC9B,QAAQ,KAAK,QAAQ,SAAS;AAAA,MAC9B,OAAO,KAAK,EAAE,KAAK,QAAQ,YAAY,GAAG,kDAAkD;AAAA,MAC5F,OAAO,GAAG;AAAA,MACV,OAAO,MAAM,EAAE,KAAK,GAAG,KAAK,QAAQ,YAAY,GAAG,oCAAoC;AAAA;AAAA,EAE3F;AAAA;AAUK,SAAS,uBAAuB,CACrC,OACA,kBACA,aACA,SACU;AAAA,EACV,MAAM,OAAO,SAAQ,WAAW;AAAA,EAChC,MAAM,OAAO,IAAI,IAAI,CAAC,GAAG,gBAAgB,EAAE,IAAI,CAAC,MAAM,SAAQ,CAAC,CAAC,CAAC;AAAA,EACjE,MAAM,MAAgB,CAAC;AAAA,EACvB,aAAa,KAAK,iBAAiB,OAAO;AAAA,IACxC,IAAI,QAAQ,WAAW,CAAC;AAAA,MAAa;AAAA,IACrC,MAAM,MAAM,SAAQ,WAAW;AAAA,IAC/B,IAAI,QAAQ,QAAQ,CAAC,IAAI,WAAW,GAAG,OAAO,KAAK;AAAA,MAAG;AAAA,IACtD,IAAI,KAAK,IAAI,GAAG;AAAA,MAAG;AAAA,IACnB,IAAI,KAAK,GAAG;AAAA,EACd;AAAA,EACA,OAAO;AAAA;AAUF,SAAS,qBAAqB,CAAC,eAA8B,SAA0B;AAAA,EAC5F,OAAO,kBAAkB;AAAA;AAUpB,SAAS,kBAAkB,CAAC,kBAA0C;AAAA,EAI3E,MAAM,cAAc,uBAAuB,eAAe,KAAK,IAAI,GAAG,OAAO,iBAAiB;AAAA,EAC9F,IAAI,CAAC,sBAAsB,aAAa,OAAO,MAAM,QAAQ,GAAG;AAAA,IAAG;AAAA,EAEnE,MAAM,cAAc,SAAQ,oBAAoB;AAAA,EAChD,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,cAAa,SAAS,CAAC,MAAM,MAAM,WAAW,GAAG,EAAE,OAAO,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK;AAAA,IAC3F,MAAM;AAAA,IACN;AAAA;AAAA,EAEF,IAAI,CAAC;AAAA,IAAM;AAAA,EAEX,MAAM,QAA4D,CAAC;AAAA,EACnE,WAAW,OAAO,KAAK,MAAM;AAAA,CAAI,GAAG;AAAA,IAClC,MAAM,SAAS,SAAS,IAAI,KAAK,GAAG,EAAE;AAAA,IACtC,IAAI,OAAO,MAAM,MAAM;AAAA,MAAG;AAAA,IAC1B,IAAI;AAAA,MACF,MAAM,UAAU,cAAa,MAAM,CAAC,MAAM,OAAO,MAAM,GAAG,MAAM,UAAU,GAAG;AAAA,QAC3E,OAAO;AAAA,MACT,CAAC,EACE,SAAS,EACT,KAAK;AAAA,MACR,MAAM,KAAK,EAAE,KAAK,QAAQ,aAAa,sBAAsB,OAAO,EAAE,CAAC;AAAA,MACvE,MAAM;AAAA,EAGV;AAAA,EAEA,MAAM,aAAa,wBAAwB,OAAO,kBAAkB,aAAa,QAAQ,GAAG;AAAA,EAC5F,WAAW,OAAO,YAAY;AAAA,IAC5B,IAAI;AAAA,MACF,wBAAwB,GAAG;AAAA,MAC3B,QAAQ,KAAK,KAAK,SAAS;AAAA,MAC3B,OAAO,KAAK,EAAE,IAAI,GAAG,2CAA2C;AAAA,MAChE,OAAO,GAAG;AAAA,MACV,OAAO,MAAM,EAAE,KAAK,GAAG,IAAI,GAAG,iDAAiD;AAAA;AAAA,EAEnF;AAAA;AAyBK,SAAS,mBAAmB,CAAC,aAA2B;AAAA,EAC7D,IAAI;AAAA,IACF,MAAM,QAAQ,YAAY,WAAW;AAAA,IACrC,WAAW,KAAK,OAAO;AAAA,MACrB,IAAI,EAAE,WAAW,WAAW,GAAG;AAAA,QAC7B,IAAI;AAAA,UACF,WAAW,SAAQ,aAAa,CAAC,CAAC;AAAA,UAClC,OAAO,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,8BAA8B;AAAA,UACpE,OAAO,GAAG;AAAA,UACV,OAAO,KAAK,EAAE,KAAK,GAAG,MAAM,EAAE,GAAG,8CAA8C;AAAA;AAAA,MAEnF;AAAA,IACF;AAAA,IACA,MAAM;AAAA;AAYH,SAAS,uBAAuB,CAAC,KAAmB;AAAA,EACzD,IAAI;AAAA,IACF,MAAM,WAAW,cAAa,SAAS,CAAC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,OAAO,OAAO,CAAC,EAC1E,SAAS,EACT,KAAK;AAAA,IACR,IAAI,CAAC;AAAA,MAAU;AAAA,IACf,MAAM,YAAY,SACf,MAAM;AAAA,CAAI,EACV,IAAI,CAAC,SAAS,SAAS,MAAM,EAAE,CAAC,EAChC,OAAO,CAAC,WAAW,CAAC,OAAO,MAAM,MAAM,CAAC;AAAA,IAE3C,WAAW,YAAY,WAAW;AAAA,MAChC,wBAAwB,QAAQ;AAAA,IAClC;AAAA,IAEA,WAAW,UAAU,CAAC,WAAW,SAAS,GAAY;AAAA,MACpD,WAAW,YAAY,WAAW;AAAA,QAChC,IAAI;AAAA,UACF,QAAQ,KAAK,UAAU,MAAM;AAAA,UAC7B,OAAO,GAAG;AAAA,UACV,OAAO,MAAM,EAAE,KAAK,GAAG,KAAK,UAAU,OAAO,GAAG,wCAAwC;AAAA;AAAA,MAE5F;AAAA,IACF;AAAA,IACA,OAAO,KAAK,EAAE,WAAW,KAAK,UAAU,GAAG,uCAAuC;AAAA,IAClF,MAAM;AAAA;;AYxSV,yBAA4B;AAC5B,uBAAS,4BAAY,iCAAa;AAClC;AAAA;AAAA,gBAEE;AAAA,eACA;AAAA,kBACA;AAAA;AAAA,gBAEA;AAAA,mBACA;AAAA;AAEF,oBAAS,kBAAS,kBAAM;;;ACXjB,IAAM,QAAQ,CAAC,OAAe,IAAI,QAAc,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;;;ACA/E,uBAAS,0BAAY;AACrB,2CAAgC;AAchC,SAAS,oBAAoB,CAC3B,SACA,cAAiC,QAAQ,KAC1B;AAAA,EACf,MAAM,aAAa,WAAW,OAAO,IACjC,CAAC,OAAO,KACP,YAAY,QAAQ,IAClB,MAAM,SAAS,EACf,OAAO,OAAO,EACd,IAAI,CAAC,cAAc,SAAQ,WAAW,OAAO,CAAC;AAAA,EACrD,WAAW,aAAa,YAAY;AAAA,IAClC,IAAI;AAAA,MACF,YAAW,WAAW,WAAU,IAAI;AAAA,MACpC,OAAO;AAAA,MACP,MAAM;AAAA,EAGV;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,4BAA4B,CAC1C,SACA,MACA,UAAwC,CAAC,GACd;AAAA,EAC3B,MAAM,WAAW,QAAQ,YAAY,QAAQ;AAAA,EAC7C,MAAM,cAAc,QAAQ,eAAe,QAAQ;AAAA,EACnD,MAAM,aAAa,QAAQ,YAAY,SAAS,KAAK,KAAK,YAAY,iBAAiB,KAAK,CAAC;AAAA,EAC7F,IAAI,aAAa,WAAW,YAAY;AAAA,IACtC,OAAO,EAAE,SAAS,MAAM,CAAC,GAAG,IAAI,GAAG,gBAAgB,MAAM;AAAA,EAC3D;AAAA,EAEA,MAAM,WAAW,QAAQ,kBAAkB,sBAAsB,YAAY,WAAW;AAAA,EACxF,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,MACR,sHACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM,CAAC,MAAM,MAAM,0BAA0B,SAAS,GAAG,IAAI;AAAA,IAC7D,gBAAgB;AAAA,EAClB;AAAA;;;AC3DF;AACA;AACA;;;ACFA;AAEO,SAAS,sBAAsB,CAAC,YAAoB,OAAuB;AAAA,EAChF,OAAO,WAAW,UAAU,UAAU,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAAA;;;ADGpE,IAAM,cAAc;AACpB,IAAM,mBAAmB;AAOzB,eAAsB,iBAAiB,CACrC,WACA,UAAiC,CAAC,GAChB;AAAA,EAClB,MAAM,SAAS,IAAI,OAAO,EAAE,MAAM,gCAAgC,SAAS,QAAQ,CAAC;AAAA,EACpF,IAAI;AAAA,EAEJ,IAAI;AAAA,IACF,MAAM,QAAQ,MAAM,QAAQ,KAAK;AAAA,OAC9B,YAAY;AAAA,QACX,MAAM,OAAO,QAAQ,SAAS;AAAA,QAC9B,MAAM,SAAS,MAAM,OAAO,UAAU;AAAA,QACtC,IAAI,OAAO,MAAM,WAAW;AAAA,UAAG,MAAM,IAAI,MAAM,+BAA+B;AAAA,QAC9E,MAAM,QAAQ,YAAY;AAAA,QAC1B,OAAO,OAAO;AAAA,SACb;AAAA,MACH,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,QAChC,UAAU,WACR,MAAM,OAAO,IAAI,MAAM,uCAAuC,CAAC,GAC/D,QAAQ,aAAa,gBACvB;AAAA,QACA,QAAQ,QAAQ;AAAA,OACjB;AAAA,IACH,CAAC;AAAA,IACD,OAAO,MAAM,SAAS;AAAA,IACtB,MAAM;AAAA,IACN,OAAO;AAAA,YACP;AAAA,IACA,IAAI;AAAA,MAAS,aAAa,OAAO;AAAA,IACjC,IAAI;AAAA,MACF,MAAM,OAAO,MAAM;AAAA,MACnB,MAAM;AAAA;AAAA;AAWZ,eAAsB,4BAA4B,CAChD,MACA,YACA,YAAuB,OACL;AAAA,EAClB,MAAM,QAAQ,IAAI,gBAAgB,EAAE,OAAO,YAAY,CAAC;AAAA,EACxD,MAAM,UAAU,oBAAoB;AAAA,EACpC,MAAM,kBAAkB,uBAAuB,YAAY,WAAW;AAAA,EACtE,MAAM,oBAAoB,EAAE,wBAAwB,gBAAgB;AAAA,EACpE,MAAM,qBAAgC,CAAC,OAAO,SAAS;AAAA,IACrD,MAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;AAAA,IACzC,QAAQ,IAAI,wBAAwB,eAAe;AAAA,IACnD,OAAO,UAAU,OAAO,KAAK,MAAM,QAAQ,CAAC;AAAA;AAAA,EAG9C,MAAM,eAAe,IAAI,mBAAmB,IAAI,IAAI,GAAG,eAAe,OAAO,GAAG;AAAA,IAC9E,OAAO;AAAA,IACP,iBAAiB,EAAE,OAAO,mBAAmB;AAAA,IAC7C,aAAa,EAAE,SAAS,kBAAkB;AAAA,EAC5C,CAAC;AAAA,EACD,IAAI,CAAE,MAAM,kBAAkB,YAAY;AAAA,IAAI,OAAO;AAAA,EAErD,MAAM,sBAAsB,IAAI,8BAC9B,IAAI,IAAI,GAAG,eAAe,OAAO,GACjC;AAAA,IACE,OAAO;AAAA,IACP,aAAa,EAAE,SAAS,kBAAkB;AAAA,EAC5C,CACF;AAAA,EACA,OAAO,kBAAkB,qBAAqB;AAAA,IAC5C,WAAW,MAAM,oBAAoB,iBAAiB;AAAA,EACxD,CAAC;AAAA;;;AEvFH,wBAAS;AACT,sBAAS;AACT,yBAAS;AACT;AACA,iBAAS;;;ACJT,sBAAS,yBAAW;AACpB,iBAAS;;;ACDT,sEAAuD;AAEvD,IAAM,kBAAkB;AACxB,IAAM,WAAW;AACjB,IAAM,YAAY;AAElB,SAAS,aAAa,CAAC,WAA2B;AAAA,EAChD,OAAO,WAAW,QAAQ,EACvB,OAAO,4BAA0B,MAAM,EACvC,OAAO,WAAW,MAAM,EACxB,OAAO,EACP,SAAS,GAAG,SAAS;AAAA;AAG1B,SAAS,GAAG,CAAC,QAAgB,KAAqB;AAAA,EAChD,OAAO,OAAO,KAAK,GAAG,aAAW,IAAI,YAAY,KAAK,MAAM;AAAA;AAGvD,SAAS,qBAAqB,CAAC,OAAwB;AAAA,EAC5D,OAAO,MAAM,WAAW,eAAe;AAAA;AAGlC,SAAS,wBAAwB,CACtC,QACA,KACA,OACA,WACQ;AAAA,EACR,MAAM,KAAK,aAAY,QAAQ;AAAA,EAC/B,MAAM,SAAS,eAAe,eAAe,cAAc,SAAS,GAAG,EAAE;AAAA,EACzE,OAAO,OAAO,IAAI,QAAQ,GAAG,CAAC;AAAA,EAC9B,MAAM,aAAa,OAAO,OAAO,CAAC,OAAO,OAAO,OAAO,MAAM,GAAG,OAAO,MAAM,CAAC,CAAC;AAAA,EAC/E,MAAM,MAAM,OAAO,WAAW;AAAA,EAC9B,OAAO,GAAG,kBAAkB,GAAG,SAAS,WAAW,KAAK,WAAW,SAAS,WAAW,KAAK,IAAI,SAAS,WAAW;AAAA;AAG/G,SAAS,wBAAwB,CACtC,QACA,KACA,aACA,WAC6C;AAAA,EAC7C,IAAI,CAAC,sBAAsB,WAAW,GAAG;AAAA,IACvC,OAAO,EAAE,OAAO,aAAa,iBAAiB,KAAK;AAAA,EACrD;AAAA,EAEA,MAAM,UAAU,YAAY,MAAM,gBAAgB,MAAM;AAAA,EACxD,OAAO,QAAQ,gBAAgB,YAAY,SAAS,QAAQ,MAAM,GAAG;AAAA,EACrE,IAAI,CAAC,UAAU,mBAAmB,aAAa,CAAC,WAAW,MAAM,SAAS,GAAG;AAAA,IAC3E,MAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAAA,EAEA,MAAM,KAAK,OAAO,KAAK,QAAQ,WAAW;AAAA,EAC1C,MAAM,aAAa,OAAO,KAAK,gBAAgB,WAAW;AAAA,EAC1D,MAAM,MAAM,OAAO,KAAK,SAAS,WAAW;AAAA,EAC5C,IAAI,GAAG,WAAW,YAAY,IAAI,WAAW,IAAI;AAAA,IAC/C,MAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAAA,EAEA,MAAM,WAAW,iBAAiB,eAAe,cAAc,SAAS,GAAG,EAAE;AAAA,EAC7E,SAAS,OAAO,IAAI,QAAQ,GAAG,CAAC;AAAA,EAChC,SAAS,WAAW,GAAG;AAAA,EACvB,MAAM,YAAY,OAAO,OAAO,CAAC,SAAS,OAAO,UAAU,GAAG,SAAS,MAAM,CAAC,CAAC;AAAA,EAC/E,OAAO,EAAE,OAAO,UAAU,SAAS,MAAM,GAAG,iBAAiB,MAAM;AAAA;;;ACrD9D,SAAS,iBAAiB,CAC/B,QACA,KACA,OACA,YAAY,kBACJ;AAAA,EACR,OAAO,yBAAyB,QAAQ,KAAK,OAAO,SAAS;AAAA;AAOxD,SAAS,iBAAiB,CAC/B,QACA,KACA,aACA,YAAY,kBACiC;AAAA,EAC7C,OAAO,yBAAyB,QAAQ,KAAK,aAAa,SAAS;AAAA;;;AFfrE,IAAI;AACJ,IAAI,iBAAiB;AAErB,SAAS,uBAAuB,CAAC,UAA+B;AAAA,EAC9D,SAAS,KAAK,2BAA2B;AAAA,EACzC,SAAS,KAAK,4BAA4B;AAAA,EAC1C,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAQb;AAAA,EAMD;AAAA,IACE,MAAM,OAAO,SAAS,QAAQ,0BAA0B,EAAE,IAAI;AAAA,IAI9D,MAAM,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS;AAAA,IACjD,IAAI,OAAO,IAAI,KAAK,YAAY,MAAM,WAAW;AAAA,MAC/C,SAAS,KAAK,OAAO;AAAA,MACrB,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAQf;AAAA,MACC,SAAS,KACP,6FACF;AAAA,MACA,SAAS,KAAK,kBAAkB;AAAA,MAChC,SAAS,KAAK,4CAA4C;AAAA,MAC1D,SAAS,KAAK,QAAQ;AAAA,IACxB;AAAA,EACF;AAAA;AAGF,SAAS,iBAAiB,CAAC,SAAgC;AAAA,EACzD,MAAM,WAAW,MAAK,SAAS,OAAO;AAAA,EACtC,MAAM,OAAO,MAAK,UAAU,UAAU;AAAA,EACtC,WAAU,UAAU,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAAA,EACpD,MAAM,WAAW,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC;AAAA,EAGpD,WAAU,MAAM,GAAK;AAAA,EACrB,wBAAwB,QAAQ;AAAA,EAChC,OAAO;AAAA;AAGT,SAAS,mBAAmB,GAAkB;AAAA,EAC5C,IAAI,CAAC;AAAA,IAAS,UAAU,kBAAkB,QAAQ;AAAA,EAClD,OAAO;AAAA;AAqCF,IAAM,wBAAwB,KAAK;AAGnC,SAAS,iBAAiB,CAAC,KAAqB;AAAA,EACrD,OAAO,IAAI,KAAK,EAAE,YAAY;AAAA;AAOhC,SAAS,UAAU,CAAC,QAAgB,KAAa,aAA6B;AAAA,EAC5E,MAAM,WAAW,oBAAoB;AAAA,EACrC,MAAM,UAAU,kBAAkB,QAAQ,KAAK,aAAa,cAAc;AAAA,EAC1E,IAAI,QAAQ,iBAAiB;AAAA,IAC3B,SACG,QAAQ,wEAAwE,EAChF,IAAI,kBAAkB,QAAQ,KAAK,QAAQ,OAAO,cAAc,GAAG,QAAQ,KAAK,WAAW;AAAA,EAChG;AAAA,EACA,OAAO,QAAQ;AAAA;AAGV,SAAS,mBAAmB,CAAC,QAAuC;AAAA,EACzE,MAAM,OAAO,oBAAoB,EAC9B,QAAQ,0EAA0E,EAClF,IAAI,MAAM;AAAA,EACb,OAAO,KAAK,IAAI,CAAC,SAAS;AAAA,IACxB,KAAK,IAAI;AAAA,IACT,aAAa,IAAI;AAAA,IACjB,OAAO,WAAW,QAAQ,IAAI,KAAK,IAAI,KAAK;AAAA,EAC9C,EAAE;AAAA;AA8FJ,SAAS,kBAAkB,CAAC,OAAyB;AAAA,EACnD,MAAM,QAAQ,IAAI,IAAY;AAAA,IAC5B;AAAA,IACA,mBAAmB,KAAK;AAAA,IACxB,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,QAAQ;AAAA,IAC5C,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,WAAW;AAAA,IAC/C,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,KAAK;AAAA,EAC3C,CAAC;AAAA,EACD,MAAM,OAAO,EAAE;AAAA,EACf,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM;AAAA;AAI/C,SAAS,kBAAkB,CAAC,QAAgB,MAAsB;AAAA,EACvE,MAAM,aAAa,oBAAoB,MAAM,EAC1C,QAAQ,CAAC,UAAU,mBAAmB,MAAM,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,IAAI,EAAE,CAAC,EAC5F,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;AAAA,EAC7E,IAAI,WAAW,WAAW;AAAA,IAAG,OAAO;AAAA,EACpC,MAAM,6BAA6B,IAAI;AAAA,EACvC,WAAW,aAAa,YAAY;AAAA,IAClC,MAAM,QAAQ,UAAU,KAAK;AAAA,IAC7B,IAAI,CAAC;AAAA,MAAO;AAAA,IACZ,MAAM,SAAS,2BAA2B,IAAI,KAAK,KAAK,CAAC;AAAA,IACzD,OAAO,KAAK,SAAS;AAAA,IACrB,2BAA2B,IAAI,OAAO,MAAM;AAAA,EAC9C;AAAA,EAEA,IAAI,WAAW;AAAA,EACf,IAAI,SAAS;AAAA,EACb,OAAO,SAAS,KAAK,QAAQ;AAAA,IAC3B,MAAM,QAAQ,2BACX,IAAI,KAAK,WAAW,EAAE,GACrB,KAAK,CAAC,cAAc,KAAK,WAAW,UAAU,MAAM,MAAM,CAAC;AAAA,IAC/D,IAAI,CAAC,OAAO;AAAA,MACV,YAAY,KAAK;AAAA,MACjB,UAAU;AAAA,MACV;AAAA,IACF;AAAA,IACA,YAAY,aAAa,MAAM;AAAA,IAC/B,UAAU,MAAM,KAAK;AAAA,EACvB;AAAA,EACA,OAAO;AAAA;;AD9QT,IAAM,oBAAoB,KAAK,OAAO;AACtC,IAAM,uBAAuB;AAC7B,IAAM,eAAe,IAAI;AACzB,IAAM,oBAAoB;AAC1B,IAAM,kBAAuE;AAAA,EAC3E,kBAAkB,EAAE,UAAU,aAAa,OAAO,WAAW;AAAA,EAC7D,qBAAqB,EAAE,UAAU,YAAY,OAAO,OAAO;AAAA,EAC3D,0BAA0B,EAAE,UAAU,aAAa,OAAO,OAAO;AAAA,EACjE,0BAA0B,EAAE,UAAU,aAAa,OAAO,OAAO;AACnE;AAaA,SAAS,cAAc,CAAC,OAAgB,WAA8C;AAAA,EACpF,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO,UAAU,KAAK;AAAA,EACrD,IAAI,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,MAAM,IAAI,CAAC,UAAU,eAAe,OAAO,SAAS,CAAC;AAAA,EACtF,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EAChD,MAAM,YAAY,OAAO,eAAe,KAAK;AAAA,EAC7C,IAAI,cAAc,OAAO,aAAa,cAAc;AAAA,IAAM,OAAO;AAAA,EACjE,OAAO,OAAO,YACZ,OAAO,QAAQ,KAAK,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,KAAK,eAAe,OAAO,SAAS,CAAC,CAAC,CACrF;AAAA;AAGF,SAAS,mBAAkB,CAAC,OAAyB;AAAA,EACnD,OAAO;AAAA,IACL,GAAG,IAAI,IAAI;AAAA,MACT;AAAA,MACA,mBAAmB,KAAK;AAAA,MACxB,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,QAAQ;AAAA,MAC5C,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,WAAW;AAAA,MAC/C,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,KAAK;AAAA,IAC3C,CAAC;AAAA,EACH,EACG,OAAO,OAAO,EACd,KAAK,CAAC,MAAM,UAAU,MAAM,SAAS,KAAK,MAAM;AAAA;AAGrD,SAAS,YAAY,CACnB,MACA,OACkD;AAAA,EAClD,MAAM,SAAS,gBAAgB;AAAA,EAC/B,IAAI,CAAC,UAAU,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,EAAE,MAAM;AAAA,EAC3F,MAAM,QAAQ;AAAA,EACd,MAAM,YAAY,MAAM,OAAO;AAAA,EAC/B,IAAI,cAAc,cAAc,CAAC,OAAO,cAAc,SAAS,KAAK,OAAO,SAAS,KAAK,IAAI;AAAA,IAC3F,OAAO,EAAE,MAAM;AAAA,EACjB;AAAA,EACA,MAAM,QAAQ,cAAc,YAAY,uBAAuB,OAAO,SAAS;AAAA,EAC/E,OAAO;AAAA,IACL,OAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,iBAAiB;AAAA,IAC9D,UAAU,EAAE,OAAO,OAAO,OAAO,MAAM;AAAA,EACzC;AAAA;AAGF,SAAS,eAAe,CACtB,OACA,QACA,UACS;AAAA,EACT,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,IAAU,OAAO,OAAO,KAAK;AAAA,EAC5D,MAAM,UAAU;AAAA,EAChB,IAAI,QAAQ,SAAS,UAAU,OAAO,QAAQ,SAAS;AAAA,IAAU,OAAO,OAAO,KAAK;AAAA,EACpF,IAAI;AAAA,IACF,MAAM,SAAS,OAAO,KAAK,MAAM,QAAQ,IAAI,CAAC;AAAA,IAC9C,IAAI,YAAY,UAAU,OAAO,WAAW,UAAU;AAAA,MACpD,MAAM,SAAS;AAAA,MACf,MAAM,aAAa,OAAO,SAAS;AAAA,MACnC,IAAI,OAAO,eAAe,UAAU;AAAA,QAClC,MAAM,mBACJ,OAAO,OAAO,WAAW,YAAY,OAAO,SAAS,SAAS;AAAA,QAChE,IAAI,WAAW,SAAS,SAAS;AAAA,UAC/B,OAAO,SAAS,SAAS,WAAW,MAAM,GAAG,SAAS,KAAK;AAAA,QAC7D,IAAI,oBAAoB,WAAW,SAAS,SAAS;AAAA,UAAO,OAAO,YAAY;AAAA,MACjF;AAAA,IACF;AAAA,IACA,OAAO,KAAK,SAAS,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE;AAAA,IAC3D,MAAM;AAAA,IACN,MAAM,WAAW,OAAO,QAAQ,IAAI;AAAA,IACpC,IAAI,YAAY,OAAO,aAAa,YAAY,SAAS,SAAS,SAAS,OAAO;AAAA,MAChF,OAAO;AAAA,WACF;AAAA,QACH,MAAM,GAAG,SAAS,MAAM,GAAG,SAAS,KAAK;AAAA;AAAA,MAC3C;AAAA,IACF;AAAA,IACA,OAAO,KAAK,SAAS,MAAM,SAAS;AAAA;AAAA;AAIxC,SAAS,YAAY,CACnB,QACA,QACA,UACS;AAAA,EACT,IAAI,CAAC,UAAU,OAAO,WAAW;AAAA,IAAU,OAAO,OAAO,MAAM;AAAA,EAC/D,MAAM,SAAS;AAAA,EACf,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO,IACxC,OAAO,QAAQ,IAAI,CAAC,UAAU,gBAAgB,OAAO,QAAQ,QAAQ,CAAC,IACtE,OAAO;AAAA,EACX,OAAO,OAAO,KAAK,QAAQ,QAAQ,CAAC;AAAA;AAGtC,SAAS,UAAU,CAAC,QAAiB,UAA2B;AAAA,EAC9D,IAAI,OAAO,WAAW;AAAA,IAAU,OAAO;AAAA,EACvC,MAAM,OAAO,OAAO,KAAK,MAAM;AAAA,EAC/B,MAAM,QAAQ,OAAO,KAAK,QAAQ;AAAA,EAClC,OAAO,KAAK,WAAW,MAAM,UAAU,gBAAgB,MAAM,KAAK;AAAA;AAGpE,eAAsB,wBAAwB,CAAC,QAAmD;AAAA,EAChG,MAAM,QAAQ,aAAY,EAAE,EAAE,SAAS,KAAK;AAAA,EAC5C,MAAM,aAAa,MACjB,QAAQ,aAAa,UAAU,OAAO,IAAI,QAC1C,0BAA0B,QAAQ,OAAO,aAAY,CAAC,EAAE,SAAS,KAAK,QACxE;AAAA,EACA,MAAM,gBAAgB,IAAI;AAAA,EAC1B,MAAM,SAAS,IAAI;AAAA,EACnB,MAAM,UAAU,IAAI;AAAA,EAEpB,MAAM,iBAAiB,CAAC,SAAyB;AAAA,IAC/C,IAAI,SAAS;AAAA,IACb,YAAY,MAAM,QAAQ,CAAC,GAAG,aAAa,EAAE,KAC3C,EAAE,QAAQ,WAAW,MAAM,SAAS,KAAK,MAC3C,GAAG;AAAA,MACD,SAAS,OAAO,WAAW,MAAM,aAAa,MAAM;AAAA,IACtD;AAAA,IACA,OAAO;AAAA;AAAA,EAET,MAAM,SAAS,CAAC,UACd,eAAe,OAAO,CAAC,SAAS,eAAe,mBAAmB,QAAQ,IAAI,CAAC,CAAC;AAAA,EAElF,MAAM,gBAAgB,CAAC,YAA8D;AAAA,IACnF,MAAM,KAAK,QAAQ;AAAA,IACnB,IAAI,CAAC,WAAW,QAAQ,OAAO,KAAK;AAAA,MAAG,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,eAAe;AAAA,IACrF,IAAI,QAAQ,OAAO,mBAAmB;AAAA,MACpC,IAAI,OAAO,QAAQ,SAAS;AAAA,QAAU,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,eAAe;AAAA,MACpF,MAAM,cAAc,KAAK,IAAI,IAAI;AAAA,MACjC,YAAY,QAAO,YAAY,QAAQ;AAAA,QACrC,IAAI,QAAQ,YAAY;AAAA,UAAa,OAAO,OAAO,MAAK;AAAA,MAC1D;AAAA,MACA,IAAI,OAAO,QAAQ,mBAAmB;AAAA,QACpC,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,yBAAyB;AAAA,MAC1D;AAAA,MACA,MAAM,UAAU,IAAI,IAAI,oBAAoB,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,MAC5F,MAAM,cAAc,eAAe,QAAQ,OAAO,CAAC,SACjD,KAAK,QAAQ,oBAAoB,CAAC,OAAO,WAAmB;AAAA,QAC1D,MAAM,MAAM,kBAAkB,MAAM;AAAA,QACpC,MAAM,SAAS,QAAQ,IAAI,GAAG;AAAA,QAC9B,IAAI,WAAW;AAAA,UAAW,OAAO;AAAA,QACjC,WAAW,QAAQ,oBAAmB,MAAM;AAAA,UAAG,cAAc,IAAI,MAAM,GAAG;AAAA,QAC1E,OAAO;AAAA,OACR,CACH;AAAA,MACA,MAAM,WAAW,aAAa,QAAQ,MAAM,WAAW;AAAA,MACvD,MAAM,QAAQ,aAAY,EAAE,EAAE,SAAS,KAAK;AAAA,MAC5C,OAAO,IAAI,OAAO,EAAE,UAAU,SAAS,UAAU,WAAW,KAAK,IAAI,EAAE,CAAC;AAAA,MACxE,OAAO;AAAA,QACL;AAAA,QACA,IAAI;AAAA,QACJ,OAAO,SAAS;AAAA,QAChB;AAAA,QACA,UAAU,SAAS;AAAA,MACrB;AAAA,IACF;AAAA,IACA,IAAI,QAAQ,OAAO,iBAAiB;AAAA,MAClC,IAAI,OAAO,QAAQ,UAAU,UAAU;AAAA,QACrC,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,gBAAgB;AAAA,MACjD;AAAA,MACA,MAAM,UAAU,OAAO,IAAI,QAAQ,KAAK;AAAA,MACxC,OAAO,OAAO,QAAQ,KAAK;AAAA,MAC3B,IAAI,CAAC,WAAW,QAAQ,YAAY,KAAK,IAAI,IAAI,cAAc;AAAA,QAC7D,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,gBAAgB;AAAA,MACjD;AAAA,MACA,IAAI;AAAA,QACF,MAAM,QAAQ,aAAa,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;AAAA,QAClE,MAAM,aAAa,KAAK,UAAU,KAAK;AAAA,QACvC,IAAI,eAAe,UAAU,MAAM,YAAY;AAAA,UAC7C,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,gCAAgC;AAAA,QACjE;AAAA,QACA,OAAO,EAAE,IAAI,IAAI,MAAM,MAAM;AAAA,QAC7B,MAAM;AAAA,QACN,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,mBAAmB;AAAA;AAAA,IAEtD;AAAA,IACA,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,oBAAoB;AAAA;AAAA,EAGrD,MAAM,SAAiB,cAAa,CAAC,WAAW;AAAA,IAC9C,QAAQ,IAAI,MAAM;AAAA,IAClB,IAAI,UAAU;AAAA,IACd,OAAO,YAAY,MAAM;AAAA,IACzB,OAAO,GAAG,QAAQ,CAAC,UAAkB;AAAA,MACnC,WAAW;AAAA,MACX,IAAI,OAAO,WAAW,OAAO,IAAI,mBAAmB;AAAA,QAClD,OAAO,QAAQ;AAAA,QACf;AAAA,MACF;AAAA,MACA,OAAO,MAAM;AAAA,QACX,MAAM,UAAU,QAAQ,QAAQ;AAAA,CAAI;AAAA,QACpC,IAAI,UAAU;AAAA,UAAG;AAAA,QACjB,MAAM,OAAO,QAAQ,MAAM,GAAG,OAAO;AAAA,QACrC,UAAU,QAAQ,MAAM,UAAU,CAAC;AAAA,QACnC,IAAI,CAAC;AAAA,UAAM;AAAA,QACX,IAAI;AAAA,QACJ,IAAI;AAAA,UACF,WAAW,cAAc,KAAK,MAAM,IAAI,CAA4B;AAAA,UACpE,MAAM;AAAA,UACN,WAAW,EAAE,IAAI,OAAO,OAAO,kBAAkB;AAAA;AAAA,QAEnD,OAAO,MAAM,GAAG,KAAK,UAAU,QAAQ;AAAA,CAAK;AAAA,MAC9C;AAAA,KACD;AAAA,IACD,OAAO,KAAK,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC;AAAA,GAClD;AAAA,EACD,MAAM,IAAI,QAAc,CAAC,eAAe,WAAW;AAAA,IACjD,OAAO,KAAK,SAAS,MAAM;AAAA,IAC3B,OAAO,OAAO,YAAY,aAAa;AAAA,GACxC;AAAA,EACD,WAAU,YAAY,GAAK;AAAA,EAC3B,IAAI,SAAS;AAAA,EAEb,OAAO;AAAA,IACL;AAAA,IACA;AAAA,SACM,MAAK,GAAG;AAAA,MACZ,IAAI;AAAA,QAAQ;AAAA,MACZ,SAAS;AAAA,MACT,OAAO,MAAM;AAAA,MACb,cAAc,MAAM;AAAA,MACpB,WAAW,UAAU;AAAA,QAAS,OAAO,QAAQ;AAAA,MAC7C,MAAM,IAAI,QAAc,CAAC,iBAAiB,OAAO,MAAM,MAAM,aAAa,CAAC,CAAC;AAAA;AAAA,EAEhF;AAAA;;;AIjPK,SAAS,iBAAiB,CAAC,MAAc,YAAY,OAAe;AAAA,EACzE,MAAM,OAAO,KAAK,QAAQ,gCAAqB,GAAG,KAAK;AAAA,EACvD,OAAO,YAAY,KAAK,YAAY,IAAI;AAAA;;;ACRnC,IAAM,0BAA0B;AAQhC,SAAS,2BAA2B,CAAC,MAAsB;AAAA,EAChE,MAAM,QAAQ,KAAK,KAAK,EAAE,YAAY;AAAA,EACtC,IAAI,CAAC,6BAA6B,KAAK,KAAK,GAAG;AAAA,IAC7C,MAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AAAA,EACA,OAAO;AAAA;AAGT,GAAG,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOP;AAEM,SAAS,sBAAsB,CAAC,SAAiB,gBAAgC;AAAA,EACtF,OACE,GACG,MACC,2DACF,EACC,IAAI,OAAO,GAAG,yBAAyB;AAAA;AAQvC,SAAS,sBAAsB,CAAC,SAAyB;AAAA,EAC9D,MAAM,QAAQ,GACX,MACC,qDACF,EACC,IAAI,OAAO,GAAG;AAAA,EACjB,OAAO,SAAS;AAAA;;AV+DX,SAAS,eAAe,CAAC,QAAgB,OAAmC;AAAA,EACjF,OAAO,8BAA8B,QAAQ,KAAK,EAAE;AAAA;AAG/C,SAAS,6BAA6B,CAC3C,QACA,OAC0B;AAAA,EAC1B,OAAO,uBAAuB,YAAY,oBAAoB,QAAQ,KAAK,CAAC;AAAA;AAG9E,SAAS,mBAAmB,CAAC,QAAgB,OAAqD;AAAA,EAChG,IAAI,CAAC;AAAA,IAAO,OAAO,YAAY,oBAAoB,QAAQ,SAAS;AAAA,EACpE,MAAM,UAAU,uBAAuB,OAAO,MAAM;AAAA,EACpD,MAAM,UAAU,uBAAuB,KAAK;AAAA,EAC5C,OAAO,YAAY,oBAAoB,SAAS,OAAO;AAAA;AAGlD,SAAS,6BAA6B,CAAC,SAAiB,YAA4B;AAAA,EACzF,OAAO,gCAAgC,SAAS,UAAU,EAAE;AAAA;AAGvD,SAAS,+BAA+B,CAC7C,SACA,YAC0B;AAAA,EAC1B,OAAO,uBAAuB,YAAY,oBAAoB,SAAS,UAAU,CAAC;AAAA;AAGpF,SAAS,sBAAsB,CAAC,SAA6D;AAAA,EAC3F,IACE,CAAC,WACD,OAAO,QAAQ,gBAAgB,YAC/B,CAAC,QAAQ,YAAY,KAAK,KAC1B,OAAO,QAAQ,YAAY,YAC3B,CAAC,QAAQ,QAAQ,KAAK,KACtB,OAAO,QAAQ,YAAY,YAC3B,CAAC,QAAQ,QAAQ,KAAK,GACtB;AAAA,IACA,MAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAAA,EACA,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC;AAAA;AAGrC,SAAS,mBAAmB,CAAC,UAAkB,YAA8C;AAAA,EAC3F,MAAM,UAAU,4BAA4B,UAAU;AAAA,EACtD,MAAM,cAAc,WAAW;AAAA,EAC/B,OAAO;AAAA,IACL;AAAA,IACA,SAAS;AAAA,IACT;AAAA,EACF;AAAA;AAOF,SAAS,uBAAuB,CAAC,SAA+D;AAAA,EAC9F,MAAM,mBAAsC,CAAC;AAAA,EAC7C,WAAW,OAAO;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAG;AAAA,IACD,IAAI,QAAQ,YAAY,SAAS;AAAA,MAAW,iBAAiB,OAAO,QAAQ,YAAY;AAAA,EAC1F;AAAA,EACA,OAAO;AAAA;AAGT,IAAM,qBAAsD,OAAO,OAAO;AAAA,EACxE,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,cAAc;AAAA,EACd,qBAAqB;AAAA,EACrB,qBAAqB;AAAA,EACrB,sBAAsB,CAAC,aAAqB;AAAA,IAC1C,QAAQ,SAAS,YAAY,iBAAiB,WAAW;AAAA,IACzD,OAAO,kBAAkB,SAAS,OAAO;AAAA;AAAA,EAE3C,wBAAwB;AAAA,EACxB,mCAAmC;AAAA,EACnC;AACF,CAAC;AAED,IAAI,cAA+C;AAM5C,SAAS,8BAA8B,CAC5C,WACiC;AAAA,EACjC,IAAI,UAAU,OAAO,KAAK,SAAS,OAAO,KAAK,gBAAgB,OAAO,GAAG;AAAA,IACvE,MAAM,IAAI,MAAM,wEAAwE;AAAA,EAC1F;AAAA,EACA,MAAM,OAAO,KAAK,gBAAgB,UAAU;AAAA,EAC5C,IAAI,CAAC,KAAK,YAAY,CAAC,OAAO,UAAU,KAAK,QAAQ,KAAK,CAAC,OAAO,UAAU,KAAK,OAAO,GAAG;AAAA,IACzF,MAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AAAA,EACA,IAAI,KAAK,WAAW,KAAK,KAAK,UAAU,SAAU,KAAK,WAAW,KAAK,SAAS;AAAA,IAC9E,MAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAAA,EACA,IAAI,CAAC,KAAK,YAAY;AAAA,IACpB,MAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AAAA,EACA,IACE,KAAK,2BAA2B,mBAAmB,2BAClD,KAAK,sCACJ,mBAAmB,qCACnB,KAAK,uBAAuB,mBAAmB,qBACjD;AAAA,IACA,MAAM,IAAI,MACR,mFACF;AAAA,EACF;AAAA,EACA,cAAc,OAAO,OAAO,IAAI;AAAA,EAChC,OAAO;AAAA;AAGF,SAAS,wBAAwB,GAAoC;AAAA,EAC1E,OAAO;AAAA;AAIF,SAAS,0BAA0B,GAAS;AAAA,EACjD,+BAA+B,kBAAkB;AAAA;AAQnD,SAAS,gBAAgB,CAAC,aAAuC;AAAA,EAC/D,MAAM,SAAS,iBAAiB,KAAK,WAAW;AAAA,EAChD,IAAI,UAAU,CAAC,OAAO,GAAI,SAAS,GAAG,GAAG;AAAA,IACvC,OAAO,EAAE,SAAS,SAAS,SAAS,4BAA4B,OAAO,EAAG,EAAE;AAAA,EAC9E;AAAA,EACA,MAAM,QAAQ,yBAAyB,KAAK,WAAW;AAAA,EACvD,IAAI,CAAC;AAAA,IAAO,OAAO,EAAE,SAAS,UAAU,SAAS,kBAAkB,WAAW,EAAE;AAAA,EAChF,OAAO;AAAA,IACL,SAAS,mBAAmB,MAAM,EAAG;AAAA,IACrC,SAAS,4BAA4B,MAAM,EAAG;AAAA,EAChD;AAAA;AAGF,SAAS,YAAY,CAAC,aAA6B;AAAA,EACjD,OAAO,YAAW,QAAQ,EAAE,OAAO,WAAW,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAAA;AAG3E,SAAS,aAAa,CAAC,aAAqB,MAAc;AAAA,EACxD,IAAI;AAAA,IACF,WAAU,YAAY,UAAU,EAAE,WAAW,KAAK,CAAC;AAAA,IACnD,eAAc,MAAK,YAAY,UAAU,aAAa,WAAW,CAAC,GAAG,OAAO,IAAI,CAAC;AAAA,IACjF,OAAO,GAAG;AAAA,IACV,OAAO,KAAK,EAAE,KAAK,GAAG,aAAa,KAAK,GAAG,qCAAqC;AAAA;AAAA;AAIpF,SAAS,cAAc,CAAC,aAAqB;AAAA,EAC3C,IAAI;AAAA,IACF,YAAW,MAAK,YAAY,UAAU,aAAa,WAAW,CAAC,CAAC;AAAA,IAChE,OAAO,GAAG;AAAA,IACV,OAAO,KAAK,EAAE,KAAK,GAAG,YAAY,GAAG,uCAAuC;AAAA;AAAA;AAIhF,SAAS,YAAY,CAAC,aAAoC;AAAA,EACxD,IAAI;AAAA,IACF,MAAM,OAAO,OAAO,SAClB,cAAa,MAAK,YAAY,UAAU,aAAa,WAAW,CAAC,GAAG,MAAM,EAAE,KAAK,GACjF,EACF;AAAA,IACA,OAAO,OAAO,UAAU,IAAI,IAAI,OAAO;AAAA,IACvC,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,IAAM,cAAc,IAAI,KAAK,KAAK;AAYlC,IAAM,YAAY,IAAI;AAEtB,SAAS,mBAAmB,CAAC,aAAqB,SAAuB;AAAA,EACvE,MAAM,WAAW,UAAU,IAAI,WAAW;AAAA,EAC1C,IAAI,YAAY,SAAS,YAAY,SAAS;AAAA,IAC5C,MAAM,IAAI,MACR,iDAAiD,iBAAiB,SAAS,cAAc,UAC3F;AAAA,EACF;AAAA;AAIF,IAAM,YAAY,IAAI;AAGtB,IAAM,WAAW,IAAI;AAQrB,eAAsB,iCAAoC,CACxD,SACA,WACY;AAAA,EACZ,MAAM,OAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK;AAAA,EACxC,MAAM,aAAa,IAAI,IAAI,IAAI;AAAA,EAC/B,UAAS;AAAA,IACP,MAAM,UAAU,KACb,IAAI,CAAC,QAAQ,SAAS,IAAI,GAAG,CAAC,EAC9B,OAAO,CAAC,YAA+C,YAAY,SAAS;AAAA,IAC/E,IAAI,QAAQ,SAAS,GAAG;AAAA,MACtB,MAAM,QAAQ,WAAW,OAAO;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,IACJ,MAAM,UAAU,IAAI,QAAuB,CAAC,mBAAmB;AAAA,MAC7D,iBAAiB,MAAM,eAAe,IAAI;AAAA,KAC3C;AAAA,IAGD,WAAW,OAAO;AAAA,MAAM,SAAS,IAAI,KAAK,OAAO;AAAA,IAEjD,IAAI;AAAA,MACF,OAAO,MAAM,UAAU;AAAA,aACf,aAAY,CAAC,aAAa;AAAA,UAC9B,IAAI,CAAC,WAAW,IAAI,WAAW,GAAG;AAAA,YAChC,MAAM,IAAI,MAAM,iDAAiD,cAAc;AAAA,UACjF;AAAA,UACA,MAAM,WAAU,UAAU,IAAI,WAAW,GAAG;AAAA,UAC5C,IAAI,CAAC;AAAA,YAAS,OAAO;AAAA,UACrB,aAAa,WAAW;AAAA,UACxB,IAAI,CAAE,MAAM,wBAAwB,UAAS,IAAI,GAAI;AAAA,YACnD,OAAO,KACL,EAAE,aAAa,KAAK,SAAQ,IAAI,GAChC,2DACF;AAAA,YACA,IAAI;AAAA,cACF,SAAQ,KAAK,SAAS;AAAA,cACtB,OAAO,OAAO;AAAA,cACd,OAAO,KACL,EAAE,KAAK,OAAO,aAAa,KAAK,SAAQ,IAAI,GAC5C,6DACF;AAAA;AAAA,YAEF,MAAM,wBAAwB,UAAS,IAAI;AAAA,UAC7C;AAAA,UACA,OAAO;AAAA;AAAA,MAEX,CAAC;AAAA,cACD;AAAA,MACA,WAAW,OAAO,MAAM;AAAA,QACtB,IAAI,SAAS,IAAI,GAAG,MAAM;AAAA,UAAS,SAAS,OAAO,GAAG;AAAA,MACxD;AAAA,MACA,eAAe;AAAA;AAAA,EAEnB;AAAA;AAIK,SAAS,sBAAsB,CAAC,aAAuC;AAAA,EAC5E,OAAO,kCAAkC,CAAC,WAAW,GAAG,GAAG,mBACzD,aAAa,WAAW,CAC1B;AAAA;AAIK,SAAS,gCAAmC,CACjD,SACA,YACA,WAIY;AAAA,EACZ,MAAM,UAAU,gCAAgC,SAAS,UAAU;AAAA,EACnE,OAAO,kCAAkC,CAAC,QAAQ,WAAW,GAAG,OAAO,YAAY;AAAA,IACjF,oBAAoB,QAAQ,aAAa,QAAQ,OAAO;AAAA,IACxD,OAAO,UAAU,SAAS,OAAO;AAAA,GAClC;AAAA;AAII,SAAS,qBAAqB,CAAC,SAAiB,YAAsC;AAAA,EAC3F,OAAO,iCAAiC,SAAS,YAAY,CAAC,WAAW,mBACvE,aAAa,QAAQ,WAAW,CAClC;AAAA;AAKF,IAAM,kBAAkB,IAAI;AAErB,SAAS,qBAAqB,CAAC,aAA2B;AAAA,EAC/D,gBAAgB,IAAI,cAAc,gBAAgB,IAAI,WAAW,KAAK,KAAK,CAAC;AAAA;AAGvE,SAAS,uBAAuB,CAAC,aAA2B;AAAA,EACjE,MAAM,QAAQ,gBAAgB,IAAI,WAAW;AAAA,EAC7C,IAAI,UAAU;AAAA,IAAW;AAAA,EACzB,IAAI,SAAS;AAAA,IAAG,gBAAgB,OAAO,WAAW;AAAA,EAC7C;AAAA,oBAAgB,IAAI,aAAa,QAAQ,CAAC;AAAA;AAG1C,SAAS,uBAAuB,CAAC,aAAyC;AAAA,EAC/E,OAAO,UAAU,IAAI,WAAW,GAAG;AAAA;AAI9B,SAAS,gCAAgC,CAAC,YAAwC;AAAA,EACvF,IAAI,CAAC;AAAA,IAAY;AAAA,EACjB,MAAM,WAAW,OAAO,KAAK,UAAU;AAAA,EACvC,WAAW,YAAY,UAAU,OAAO,GAAG;AAAA,IACzC,MAAM,WAAW,OAAO,KAAK,SAAS,UAAU;AAAA,IAChD,IAAI,SAAS,WAAW,SAAS,UAAU,iBAAgB,UAAU,QAAQ,GAAG;AAAA,MAC9E,OAAO,SAAS;AAAA,IAClB;AAAA,EACF;AAAA,EACA;AAAA;AAIK,SAAS,qBAAqB,GAAS;AAAA,EAC5C,YAAY,mBAAmB,CAAC,GAAG,UAAU,KAAK,CAAC,EAAE,IAAI,kBAAkB,CAAC;AAAA;AAa9E,IAAM,4BAA4B,IAAI;AAC/B,SAAS,mBAAmB,CAAC,SAA+C;AAAA,EACjF,0BAA0B,IAAI,OAAO;AAAA,EACrC,OAAO,MAAM,0BAA0B,OAAO,OAAO;AAAA;AAGvD,SAAS,uBAAuB,CAAC,aAAqB,SAAkC;AAAA,EACtF,WAAW,WAAW,2BAA2B;AAAA,IAC/C,IAAI;AAAA,MACF,QAAQ,aAAa,OAAO;AAAA,MAC5B,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK,EAAE,KAAK,aAAa,QAAQ,GAAG,mCAAmC;AAAA;AAAA,EAElF;AAAA;AAOF,SAAS,iBAAiB,GAAkB;AAAA,EAC1C,MAAM,MAAM,KAAK,IAAI;AAAA,EACrB,MAAM,YAAY,sBAChB,WACA,gBAAgB,KAAK,GACrB,SAAS,KAAK,GACd,KACA,WACF;AAAA,EACA,IAAI,WAAW;AAAA,IACb,MAAM,WAAW,UAAU,IAAI,SAAS;AAAA,IACxC,IAAI,CAAC;AAAA,MAAU,OAAO;AAAA,IACtB,MAAM,YAAY,MAAM,SAAS,cAAc,OAAO,QAAQ,CAAC;AAAA,IAC/D,OAAO,KAAK,EAAE,KAAK,WAAW,QAAQ,GAAG,mCAAmC;AAAA,IAC5E,aAAa,SAAS;AAAA,IACtB,OAAO,SAAS;AAAA,EAClB;AAAA,EACA,OAAO;AAAA;AAOT,eAAe,YAAY,GAAoB;AAAA,EAC7C,MAAM,OAAO,MAAM,6BACjB,YAAY,UACZ,YAAY,SACZ,WACA,OAAO,cAAc;AAAA,IAGnB,MAAM,WAAW,MAAM,YAAY,SAAS;AAAA,IAC5C,IAAI;AAAA,MAAU,OAAO,KAAK,EAAE,MAAM,UAAU,GAAG,6CAA6C;AAAA,IAC5F,OAAO;AAAA,GAEX;AAAA,EACA,IAAI,SAAS;AAAA,IAAM,OAAO;AAAA,EAG1B,MAAM,cAAc,kBAAkB;AAAA,EACtC,IAAI,gBAAgB,MAAM;AAAA,IAIxB,MAAM,mBAAmB,WAAW;AAAA,IACpC,OAAO,aAAa;AAAA,EACtB;AAAA,EAEA,MAAM,IAAI,MACR,0CAA0C,UAAU,gCAAgC,YAAY,YAAY,YAAY,UAC1H;AAAA;AAGF,SAAS,WAAW,CAAC,MAAc;AAAA,EACjC,UAAU,OAAO,IAAI;AAAA;AAGvB,SAAS,iBAAiB,CAAC,UAAkB,SAAyB;AAAA,EACpE,OAAO,SAAQ,sBAAsB,OAAO;AAAA;AAI9C,SAAS,kBAAkB,CAAC,aAA6B;AAAA,EACvD,OAAO,YAAY,uBAAuB,WAAW;AAAA;AAQvD,SAAS,YAAY,CAAC,aAAqB,MAA+B;AAAA,EACxE,MAAM,OAAO,UAAU,IAAI,WAAW;AAAA,EACtC,IAAI,CAAC;AAAA,IAAM;AAAA,EAGX,IAAI,KAAK,QAAQ,KAAK;AAAA,IACpB,wBAAwB,KAAK,QAAQ,GAAG;AAAA,EAC1C;AAAA,EAEA,IAAI;AAAA,IACF,KAAK,QAAQ,KAAK,SAAS;AAAA,IAC3B,OAAO,GAAG;AAAA,IACV,OAAO,KAAK,EAAE,KAAK,GAAG,YAAY,GAAG,oCAAoC;AAAA;AAAA,EAEtE,KAAK,YAAY,MAAM;AAAA,EAO5B,KAAK,QAAQ,mBAAmB,OAAO;AAAA,EACvC,KAAK,QAAQ,mBAAmB,MAAM;AAAA,EAEtC,oBAAoB,mBAAmB,WAAW,CAAC;AAAA,EAEnD,IAAI,CAAC,MAAM;AAAA,IAAU,YAAY,KAAK,IAAI;AAAA,EAC1C,UAAU,OAAO,WAAW;AAAA,EAC5B,eAAe,WAAW;AAAA,EAC1B,OAAO,KACL,EAAE,aAAa,MAAM,KAAK,MAAM,UAAU,CAAC,CAAC,MAAM,SAAS,GAC3D,sCACF;AAAA;AAGF,IAAM,kCAAkC,IAAI;AAE5C,SAAS,oBAAoB,CAAC,MAAkC;AAAA,EAC9D,IAAI,OAAO,OAAO,MAAM,CAAC;AAAA,EACzB,KAAK,QAAQ,GAAG,QAAQ,CAAC,UAA2B;AAAA,IAClD,MAAM,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;AAAA,IAC/D,OAAO,OAAO,OAAO,CAAC,MAAM,IAAI,CAAC;AAAA,IACjC,IAAI,KAAK,aAAa,iCAAiC;AAAA,MACrD,OAAO,KAAK,SAAS,KAAK,aAAa,+BAA+B;AAAA,IACxE;AAAA,GACD;AAAA,EACD,OAAO,MAAM,KAAK,SAAS,MAAM,EAAE,KAAK;AAAA;AAGnC,SAAS,iBAAiB,CAC/B,MACA,YAC+C;AAAA,EAC/C,IAAI,UAAU;AAAA,EACd,IAAI,gBAAwC,MAAG;AAAA,IAAG;AAAA;AAAA,EAClD,MAAM,cAAc,MAAM;AAAA,IACxB,MAAM,SAAS,WAAW;AAAA,IAC1B,OAAO,SAAS;AAAA,eAAkB;AAAA,EAA4C,WAAW;AAAA;AAAA,EAE3F,MAAM,UAAU,CAAC,UAAiB;AAAA,IAChC,cACE,IAAI,MAAM,mCAAmC,MAAM,UAAU,YAAY,KAAK;AAAA,MAC5E,OAAO;AAAA,IACT,CAAC,CACH;AAAA;AAAA,EAEF,MAAM,SAAS,CAAC,MAAqB,WAAkC;AAAA,IACrE,cACE,IAAI,MACF,8CAA8C,QAAQ,kBAAkB,UAAU,UAAU,YAAY,GAC1G,CACF;AAAA;AAAA,EAEF,MAAM,UAAU,IAAI,QAAe,CAAC,UAAU,WAAW;AAAA,IACvD,gBAAgB;AAAA,IAChB,KAAK,KAAK,SAAS,OAAO;AAAA,IAC1B,KAAK,KAAK,QAAQ,MAAM;AAAA,GACzB;AAAA,EACD,MAAM,OAAO,MAAM;AAAA,IACjB,IAAI;AAAA,MAAS;AAAA,IACb,UAAU;AAAA,IACV,KAAK,IAAI,SAAS,OAAO;AAAA,IACzB,KAAK,IAAI,QAAQ,MAAM;AAAA;AAAA,EAEzB,OAAO,EAAE,SAAS,KAAK;AAAA;AAczB,eAAe,eAAe,CAC5B,aACA,SACA,cACA,aAAa,YAAY,YACR;AAAA,EACjB,IAAI,CAAC,YAAY,cAAc;AAAA,IAC7B,MAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AAAA,EACA,MAAM,cAAc,mBAAmB,WAAW;AAAA,EAClD,MAAM,OAAO,gBAAiB,MAAM,aAAa;AAAA,EACjD,WAAU,aAAa,EAAE,WAAW,KAAK,CAAC;AAAA,EAE1C,MAAM,UAAU;AAAA,IACd;AAAA,IACA,OAAO,IAAI;AAAA,IAMX;AAAA,IACA;AAAA,IAIA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EAIA,MAAM,QAAQ,YAAY,aAAa;AAAA,EACvC,IAAI,OAAO;AAAA,IACT,YAAY,IAAI;AAAA,IAChB,MAAM,IAAI,MAAM,uEAAuE;AAAA,EACzF;AAAA,EACA,MAAM,aAAa,aAAY,EAAE,EAAE,SAAS,KAAK;AAAA,EACjD,MAAM,aAAa,aAAY,EAAE,EAAE,SAAS,KAAK;AAAA,EACjD,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,cAAc,MAAM,yBAAyB,OAAO;AAAA,IACpD,OAAO,OAAO;AAAA,IACd,YAAY,IAAI;AAAA,IAChB,MAAM;AAAA;AAAA,EAER,MAAM,WAAW;AAAA,OACZ,YAAY,uBAAuB;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,YAAY;AAAA,MAC1B,aAAa,QAAQ;AAAA,IACvB,CAAC;AAAA,IACD,YAAY;AAAA,IACZ,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,IAChB,yBAAyB,YAAY;AAAA,IACrC,wBAAwB,YAAY;AAAA,EACtC;AAAA,EAGA,MAAM,UAAU,WAAW,SAAS,MAAM,IAAI,QAAQ,WAAW;AAAA,EACjE,MAAM,OAAO,WAAW,SAAS,MAAM,IAAI,CAAC,YAAY,GAAG,OAAO,IAAI;AAAA,EACtE,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,YAAY,6BAA6B,SAAS,MAAM,EAAE,aAAa,SAAS,CAAC;AAAA,IACjF,OAAO,KAAK;AAAA,IACZ,MAAM,YAAY,MAAM;AAAA,IACxB,YAAY,IAAI;AAAA,IAChB,MAAM;AAAA;AAAA,EAER,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,MAAM,UAAU,SAAS,UAAU,MAAM;AAAA,MAC9C,OAAO,CAAC,UAAU,UAAU,MAAM;AAAA,MAClC,UAAU;AAAA,MACV,KAAK;AAAA,IACP,CAAC;AAAA,IACD,OAAO,KAAK;AAAA,IACZ,MAAM,YAAY,MAAM;AAAA,IACxB,YAAY,IAAI;AAAA,IAChB,MAAM;AAAA;AAAA,EAER,MAAM,aAAa,qBAAqB,IAAI;AAAA,EAC5C,MAAM,UAAU,kBAAkB,MAAM,UAAU;AAAA,EAOlD,MAAM,qBAAqB,MAAM;AAAA,IAC/B,MAAM,eAAc,mBAAmB,WAAW;AAAA,IAClD,YAAY,kCAAkC,YAAW;AAAA,IACzD,oBAAoB,YAAW;AAAA;AAAA,EAGjC,KAAK,KAAK,SAAS,CAAC,QAAQ;AAAA,IAC1B,OAAO,MAAM,EAAE,KAAK,aAAa,QAAQ,WAAW,KAAK,UAAU,GAAG,sBAAsB;AAAA,IAC5F,IAAI,UAAU,IAAI,WAAW,GAAG,YAAY,MAAM;AAAA,MAChD,YAAY,IAAI;AAAA,MAChB,UAAU,OAAO,WAAW;AAAA,MACvB,YAAY,MAAM;AAAA,MACvB,mBAAmB;AAAA,MACnB,wBAAwB,aAAa;AAAA,QACnC,QAAQ;AAAA,QACR,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,GACD;AAAA,EAED,KAAK,KAAK,QAAQ,CAAC,SAAS;AAAA,IAC1B,OAAO,KAAK,EAAE,aAAa,MAAM,QAAQ,WAAW,KAAK,UAAU,GAAG,uBAAuB;AAAA,IAM7F,MAAM,UAAU,UAAU,IAAI,WAAW,GAAG,YAAY;AAAA,IACxD,IAAI,SAAS;AAAA,MACX,YAAY,IAAI;AAAA,MAChB,UAAU,OAAO,WAAW;AAAA,MACvB,YAAY,MAAM;AAAA,MACvB,mBAAmB;AAAA,MACnB,wBAAwB,aAAa,EAAE,QAAQ,QAAQ,KAAK,CAAC;AAAA,IAC/D;AAAA,GACD;AAAA,EAED,MAAM,MAAM,KAAK,IAAI;AAAA,EACrB,UAAU,IAAI,aAAa;AAAA,IACzB,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX,YAAY;AAAA,IACZ;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EAED,IAAI;AAAA,EACJ,IAAI,QAAQ;AAAA,EACZ,IAAI;AAAA,IACF,QAAQ,MAAM,QAAQ,KAAK;AAAA,OACxB,YACE,MAAM,cAAc,MAAM,YAAY,GAAM,KAC5C,MAAM,qBAAqB,MAAM,UAAU,KAC3C,MAAM,6BAA6B,MAAM,UAAU,GAAI;AAAA,MAC1D,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,eAAe,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,YACvE;AAAA,IACA,QAAQ,KAAK;AAAA;AAAA,EAEf,IAAI,SAAS,CAAC,wBAAwB,UAAU,IAAI,WAAW,GAAG,IAAI,GAAG;AAAA,IACvE,QAAQ;AAAA,IACR,eAAe,IAAI,MACjB,wEAAwE,UACrE,WAAW,IAAI;AAAA;AAAA,EAAc,WAAW,MAAM,GACnD;AAAA,EACF;AAAA,EACA,IAAI,CAAC,OAAO;AAAA,IACV,MAAM,WAAW,KAAK;AAAA,IACtB,aAAa,WAAW;AAAA,IACxB,IAAI;AAAA,MAAc,MAAM;AAAA,IACxB,MAAM,IAAI,MACR,0DAA0D,UACvD,aAAa,OAAO,KAAK,cAAc,gBACvC,WAAW,IAAI;AAAA;AAAA,EAAc,WAAW,MAAM,GACnD;AAAA,EACF;AAAA,EACA,cAAc,aAAa,IAAI;AAAA,EAC/B,OAAO,KACL,EAAE,aAAa,MAAM,KAAK,KAAK,KAAK,OAAO,gBAAgB,UAAU,eAAe,GACpF,wBACF;AAAA,EACA,OAAO;AAAA;AAGT,eAAe,oBAAoB,CAAC,MAAc,YAAsC;AAAA,EACtF,IAAI;AAAA,IACF,MAAM,QAAQ,IAAI,gBAAgB,EAAE,OAAO,gCAAgC,CAAC;AAAA,IAC5E,MAAM,WAAW,MAAM,MAAM,oBAAoB,eAAe,SAAS;AAAA,MACvE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,wBAAwB;AAAA,MAC1B;AAAA,MACA,QAAQ,YAAY,QAAQ,IAAI;AAAA,IAClC,CAAC;AAAA,IACD,MAAM,SAAS,MAAM,OAAO;AAAA,IAC5B,OAAO,SAAS;AAAA,IAChB,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAWX,eAAsB,gBAAgB,CAAC,QAAgB,OAAiC;AAAA,EACtF,MAAM,UAAU,8BAA8B,QAAQ,KAAK;AAAA,EAC3D,QAAQ,aAAa,YAAY;AAAA,EAGjC,MAAM,aAAa,SAAS,IAAI,WAAW;AAAA,EAC3C,IAAI,YAAY;AAAA,IACd,MAAM,OAAO,MAAM;AAAA,IACnB,oBAAoB,aAAa,OAAO;AAAA,IACxC,IAAI,SAAS;AAAA,MAAM,OAAO;AAAA,IAG1B,OAAO,iBAAiB,QAAQ,KAAK;AAAA,EACvC;AAAA,EAUA,MAAM,WAAW,YAA6B;AAAA,IAC5C,MAAM,WAAW,UAAU,IAAI,WAAW;AAAA,IAC1C,oBAAoB,aAAa,OAAO;AAAA,IAExC,IAAI,YAAY,CAAC,SAAS,QAAQ,UAAU,SAAS,QAAQ,aAAa,MAAM;AAAA,MAC9E,IAAI,MAAM,6BAA6B,SAAS,MAAM,SAAS,UAAU,GAAG;AAAA,QAC1E,SAAS,aAAa,KAAK,IAAI;AAAA,QAC/B,OAAO,SAAS;AAAA,MAClB;AAAA,MACA,OAAO,KAAK,EAAE,YAAY,GAAG,yCAAyC;AAAA,MACtE,MAAM,UAAU,SAAS;AAAA,MACzB,aAAa,WAAW;AAAA,MACxB,wBAAwB,aAAa,EAAE,QAAQ,YAAY,CAAC;AAAA,MAC5D,MAAM,mBAAmB,OAAO;AAAA,MAChC,oBAAoB,mBAAmB,WAAW,CAAC;AAAA,IACrD,EAAO,SAAI,UAAU;AAAA,MACnB,YAAY,SAAS,IAAI;AAAA,MACzB,UAAU,OAAO,WAAW;AAAA,MAC5B,oBAAoB,mBAAmB,WAAW,CAAC;AAAA,MACnD,wBAAwB,aAAa;AAAA,QACnC,QAAQ;AAAA,QACR,MAAM,SAAS,QAAQ;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,IAEA,OAAO,gBAAgB,aAAa,OAAO;AAAA,KAC1C,EAAE,QAAQ,MAAM,SAAS,OAAO,WAAW,CAAC;AAAA,EAC/C,SAAS,IAAI,aAAa,OAAO;AAAA,EACjC,OAAO;AAAA;AAGT,eAAe,kBAAkB,CAAC,MAAc,YAAY,MAAqB;AAAA,EAC/E,MAAM,QAAQ,KAAK,IAAI;AAAA,EACvB,OAAO,KAAK,IAAI,IAAI,QAAQ,WAAW;AAAA,IACrC,IAAI,CAAE,MAAM,YAAY,IAAI;AAAA,MAAI;AAAA,IAChC,MAAM,MAAM,GAAG;AAAA,EACjB;AAAA;AAIF,eAAsB,oBAAoB,CAAC,SAAiB,YAAqC;AAAA,EAC/F,MAAM,UAAU,gCAAgC,SAAS,UAAU;AAAA,EACnE,MAAM,cAAc,QAAQ;AAAA,EAC5B,MAAM,aAAa,SAAS,IAAI,WAAW;AAAA,EAC3C,IAAI,YAAY;AAAA,IACd,MAAM,OAAO,MAAM;AAAA,IACnB,oBAAoB,aAAa,QAAQ,OAAO;AAAA,IAChD,MAAM,aAAa,UAAU,IAAI,WAAW,GAAG;AAAA,IAC/C,IAAI,SAAS,QAAQ,cAAe,MAAM,6BAA6B,MAAM,UAAU,GAAI;AAAA,MACzF,OAAO;AAAA,IACT;AAAA,IACA,IAAI,SAAS;AAAA,MAAM,OAAO,qBAAqB,SAAS,UAAU;AAAA,IAClE,MAAM,IAAI,MAAM,oBAAoB,8BAA8B;AAAA,EACpE;AAAA,EAEA,MAAM,WAAW,YAA6B;AAAA,IAC5C,MAAM,gBAAgB,aAAa,WAAW;AAAA,IAC9C,MAAM,WAAW,UAAU,IAAI,WAAW;AAAA,IAC1C,oBAAoB,aAAa,QAAQ,OAAO;AAAA,IAChD,IAAI,kBAAkB,QAAQ,CAAC,UAAU;AAAA,MAKvC,OAAO,KACL,EAAE,aAAa,cAAc,GAC7B,kEACF;AAAA,MACA,YAAY,kCAAkC,mBAAmB,WAAW,CAAC;AAAA,MAC7E,MAAM,mBAAmB,aAAa;AAAA,MACtC,eAAe,WAAW;AAAA,IAC5B;AAAA,IAEA,IAAI,YAAY,CAAC,SAAS,QAAQ,UAAU,SAAS,QAAQ,aAAa,MAAM;AAAA,MAC9E,IAAI,MAAM,6BAA6B,SAAS,MAAM,SAAS,UAAU,GAAG;AAAA,QAC1E,SAAS,aAAa,KAAK,IAAI;AAAA,QAC/B,OAAO,SAAS;AAAA,MAClB;AAAA,MACA,MAAM,UAAU,SAAS;AAAA,MACzB,aAAa,WAAW;AAAA,MACxB,wBAAwB,aAAa,EAAE,QAAQ,YAAY,CAAC;AAAA,MAC5D,MAAM,mBAAmB,OAAO;AAAA,MAChC,oBAAoB,mBAAmB,WAAW,CAAC;AAAA,IACrD,EAAO,SAAI,UAAU;AAAA,MACnB,YAAY,SAAS,IAAI;AAAA,MACzB,UAAU,OAAO,WAAW;AAAA,MAC5B,oBAAoB,mBAAmB,WAAW,CAAC;AAAA,MACnD,wBAAwB,aAAa;AAAA,QACnC,QAAQ;AAAA,QACR,MAAM,SAAS,QAAQ;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,IACA,MAAM,OAAO,MAAM,gBAAgB,aAAa,QAAQ,OAAO;AAAA,IAC/D,MAAM,aAAa,UAAU,IAAI,WAAW,GAAG;AAAA,IAC/C,IAAI,CAAC,cAAc,CAAE,MAAM,6BAA6B,MAAM,UAAU,GAAI;AAAA,MAC1E,aAAa,WAAW;AAAA,MACxB,MAAM,IAAI,MAAM,oBAAoB,4CAA4C;AAAA,IAClF;AAAA,IACA,OAAO;AAAA,KACN,EAAE,QAAQ,MAAM,SAAS,OAAO,WAAW,CAAC;AAAA,EAC/C,SAAS,IAAI,aAAa,OAAO;AAAA,EACjC,OAAO;AAAA;AAIT,eAAsB,qBAAqB,CACzC,SACA,YACA,OACiB;AAAA,EACjB,MAAM,UAAU,gCAAgC,SAAS,UAAU;AAAA,EACnE,MAAM,cAAc,QAAQ;AAAA,EAC5B,MAAM,aAAa,SAAS,IAAI,WAAW;AAAA,EAC3C,IAAI;AAAA,IAAY,MAAM;AAAA,EACtB,oBAAoB,aAAa,QAAQ,OAAO;AAAA,EAChD,MAAM,WAAW,UAAU,IAAI,WAAW;AAAA,EAC1C,IAAI,CAAC;AAAA,IAAU,OAAO;AAAA,EACtB,MAAM,OAAO,SAAS;AAAA,EAEtB,MAAM,QAAQ,IAAI,gBAAgB,EAAE,MAAM,CAAC;AAAA,EAC3C,MAAM,WAAW,MAAM,MAAM,oBAAoB,eAAe,SAAS;AAAA,IACvE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,wBAAwB,SAAS;AAAA,IACnC;AAAA,IACA,QAAQ,YAAY,QAAQ,IAAI;AAAA,EAClC,CAAC;AAAA,EACD,IAAI,CAAC,SAAS;AAAA,IAAI,MAAM,IAAI,MAAM,qCAAqC,SAAS,SAAS;AAAA,EACzF,MAAM,SAAU,MAAM,SAAS,KAAK;AAAA,EACpC,OAAO,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA;AAO7D,eAAe,aAAa,CAC1B,MACA,oBACA,WACkB;AAAA,EAClB,MAAM,QAAQ,KAAK,IAAI;AAAA,EACvB,OAAO,KAAK,IAAI,IAAI,QAAQ,WAAW;AAAA,IACrC,IAAI;AAAA,MACF,MAAM,WAAW,MAAM,MAAM,oBAAoB,eAAe;AAAA,QAC9D,QAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AAAA,MACD,IAAI,SAAS,IAAI;AAAA,QACf,MAAM,SAAkB,MAAM,SAAS,KAAK;AAAA,QAC5C,IAAI,4BAA4B,QAAQ,kBAAkB,GAAG;AAAA,UAC3D,OAAO;AAAA,QACT;AAAA,MACF,EAAO;AAAA,QACL,MAAM,SAAS,MAAM,OAAO;AAAA;AAAA,MAE9B,MAAM;AAAA,IAGR,MAAM,MAAM,GAAG;AAAA,EACjB;AAAA,EACA,OAAO,KAAK,EAAE,MAAM,UAAU,GAAG,yCAAyC;AAAA,EAC1E,OAAO;AAAA;AA0BF,SAAS,sBAAsB,CAAC,QAAgB,OAAuB;AAAA,EAC5E,OAAO,mBAAmB,gBAAgB,QAAQ,KAAK,CAAC;AAAA;AAqJ1D,eAAsB,iBAAiB,GAAkB;AAAA,EACvD,MAAM,QAAQ,CAAC,GAAG,UAAU,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,KAAK,MAAM,KAAK,QAAQ,EAAE;AAAA,EACzF,aAAa,SAAS;AAAA,IAAO,aAAa,GAAG;AAAA,EAE7C,MAAM,QAAQ,IACZ,MAAM,IAAI,SAAS,KAAK,WAAW;AAAA,IACjC,IAAI,MAAM,wBAAwB,MAAM,IAAI;AAAA,MAAG;AAAA,IAC/C,OAAO,KAAK,EAAE,aAAa,KAAK,KAAK,KAAK,IAAI,GAAG,gCAAgC;AAAA,IACjF,IAAI;AAAA,MACF,KAAK,KAAK,SAAS;AAAA,MACnB,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK,EAAE,KAAK,aAAa,KAAK,KAAK,KAAK,IAAI,GAAG,kCAAkC;AAAA;AAAA,IAE1F,IAAI,CAAE,MAAM,wBAAwB,MAAM,IAAI,GAAI;AAAA,MAChD,OAAO,KAAK,EAAE,aAAa,KAAK,KAAK,KAAK,IAAI,GAAG,oCAAoC;AAAA,IACvF;AAAA,GACD,CACH;AAAA;AAUF,YACE,MAAM;AAAA,EACJ,OAAO,kBAAkB,MAAM,MAAM,CAAC;AAAA,EACtC,IAAI;AAAA,IACF,sBAAsB;AAAA,IACtB,OAAO,GAAG;AAAA,IACV,OAAO,MAAM,EAAE,KAAK,EAAE,GAAG,iCAAiC;AAAA;AAAA,GAG9D,KAAK,KAAK,IACZ,EAAE,MAAM;",
-  "debugId": "E1E4675036B694DF64756E2164756E21",
+  "mappings": ";;;;AAAA,yBAAS;AACT;AACA;AACA,oBAAS;;;ACHT;AACA;AACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASA;AACA;AACA;AACA;;;ACVO,SAAS,WAAW,CAAC,KAAyB,KAAiC;AAAA,EACpF,MAAM,QAAQ,IAAI,MAAM,KAAK;AAAA,EAC7B,OAAO,SAAS;AAAA;AAGX,SAAS,gBAAgB,CAAC,OAA2B,UAA0B;AAAA,EACpF,IAAI,CAAC;AAAA,IAAO,OAAO;AAAA,EACnB,MAAM,OAAO,OAAO,SAAS,OAAO,EAAE;AAAA,EACtC,OAAO,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,QAAQ,QAAS,OAAO;AAAA;;;ACZvE;AAmBO,SAAS,iBAAiB,CAAC,UAA8B,CAAC,GAAG;AAAA,EAClE,MAAM,cAAc,QAAQ,eAAe;AAAA,EAC3C,OAAO,KACL;AAAA,IACE,OAAO,QAAQ,SAAS,QAAQ,IAAI,aAAa;AAAA,IACjD,WAAW,cACP;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,UAAU;AAAA,QACV,eAAe;AAAA,QACf,aAAa;AAAA,MACf;AAAA,IACF,IACA;AAAA,EACN,GACA,KAAK,YAAY,CAAC,CACpB;AAAA;AAKK,IAAM,SAAS,kBAAkB;;;ACbjC,IAAM,mBAAyC,CAAC,WAAW,UAAU,OAAO;AAE5E,SAAS,WAAW,CAAC,OAAoC;AAAA,EAC9D,OAAO,OAAO,UAAU,YAAa,iBAAuC,SAAS,KAAK;AAAA;;;AHZrF,SAAS,OAAO,CAAC,QAAoC;AAAA,EAC1D,OAAO,YAAY,QAAQ,KAAK,MAAM;AAAA;AAGxC,SAAS,eAAe,CAAC,QAAgB,UAAqB,cAAkC;AAAA,EAC9F,MAAM,QAAQ,QAAQ,MAAM,MAAM,eAAe,QAAQ,YAAY,IAAI;AAAA,EACzE,OAAO,YAAY,KAAK,IAAI,QAAQ;AAAA;AAGtC,IAAM,OAAO,QAAQ;AAIrB,SAAS,kBAAkB,GAAW;AAAA,EACpC,MAAM,YAAY,QAAQ,cAAc,YAAY,GAAG,CAAC;AAAA,EACxD,MAAM,kBAAkB,QAAQ,WAAW,SAAS;AAAA,EACpD,IAAI,WAAW,QAAQ,iBAAiB,KAAK,CAAC;AAAA,IAAG,OAAO;AAAA,EACxD,OAAO,QAAQ,WAAW,OAAO;AAAA;AAG5B,IAAM,eAAe,mBAAmB;AAG/C,SAAS,oBAAoB,CAAC,MAAsB;AAAA,EAClD,IAAI,MAAM;AAAA,EACV,OAAO,MAAM;AAAA,IACX,MAAM,YAAY,QAAQ,KAAK,gBAAgB,QAAQ,IAAI;AAAA,IAC3D,IAAI,WAAW,SAAS;AAAA,MAAG,OAAO;AAAA,IAClC,MAAM,SAAS,QAAQ,GAAG;AAAA,IAC1B,IAAI,WAAW;AAAA,MAAK,OAAO;AAAA,IAC3B,MAAM;AAAA,EACR;AAAA;AAKF,IAAM,gBAAgB,QAAQ,oBAAoB;AAC3C,IAAM,YAAY,gBAAgB,QAAQ,aAAa,IAAI,QAAQ,MAAM,WAAW;AAE3F,SAAS,oBAAoB,CAAC,QAAgB,WAA2B;AAAA,EACvE,MAAM,WAAW,QAAQ,MAAM;AAAA,EAC/B,IAAI;AAAA,IAAU,OAAO,QAAQ,QAAQ;AAAA,EACrC,OAAO,QAAQ,WAAW,SAAS;AAAA;AAGrC,SAAS,YAAY,CAAC,UAA8B,UAA0B;AAAA,EAC5E,OAAO,iBAAiB,UAAU,QAAQ;AAAA;AAGrC,IAAM,gBAAgB,qBAAqB,0BAA0B,WAAW;AAChF,IAAM,sBAAsB,QAAQ,eAAe,QAAQ;AAC3D,IAAM,kBAAkB,QAAQ,eAAe,MAAM;AACrD,IAAM,qBAAqB,QAAQ,eAAe,MAAM;AACxD,IAAM,cAAc,qBAAqB,wBAAwB,SAAS;AAC1E,IAAM,uBAAuB,QAAQ,aAAa,UAAU;AAC5D,IAAM,eAAe,QAAQ,WAAW,UAAU;AAClD,IAAM,cAAc,QAAQ,WAAW,SAAS;AAEhD,IAAM,eAAe,QAAQ,WAAW,QAAQ,UAAU;AAC1D,IAAM,mBAAmB,QAAQ,WAAW,QAAQ,IAAI;AACxD,IAAM,wBAAwB,QAAQ,WAAW,QAAQ,UAAU;AAK1E,IAAM,wBAAwB,QAAQ,4BAA4B;AAC3D,IAAM,oBAAoB,wBAAwB,QAAQ,qBAAqB,IAAI;AAiBnF,IAAM,qBAAqB;AAE3B,IAAM,gCAAgC;AAE7C,SAAS,cAAc,CAAC,eAAuB,gBAAiC;AAAA,EAC9E,MAAM,SAAS,cAAc,MAAM,GAAG,EAAE,IAAI,MAAM;AAAA,EAClD,MAAM,UAAU,eAAe,MAAM,GAAG,EAAE,IAAI,MAAM;AAAA,EACpD,IAAI,OAAO,KAAK,OAAO,KAAK,KAAK,QAAQ,KAAK,OAAO,KAAK;AAAA,IAAG,OAAO;AAAA,EACpE,SAAS,QAAQ,EAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AAAA,IACtD,KAAK,OAAO,UAAU,MAAM,QAAQ,UAAU;AAAA,MAAI,OAAO;AAAA,IACzD,KAAK,OAAO,UAAU,MAAM,QAAQ,UAAU;AAAA,MAAI,OAAO;AAAA,EAC3D;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,4BAA4B,CAAC,WAA4B;AAAA,EAChE,IAAI;AAAA,IACF,MAAM,SAAS,aAAa,WAAW,CAAC,WAAW,GAAG;AAAA,MACpD,UAAU;AAAA,MACV,SAAS;AAAA,MACT,OAAO,CAAC,UAAU,QAAQ,QAAQ;AAAA,IACpC,CAAC,EAAE,KAAK;AAAA,IACR,MAAM,QAAQ,OAAO,MAAM,kCAAkC;AAAA,IAC7D,IAAI,CAAC;AAAA,MAAO,OAAO;AAAA,IACnB,OAAO,eAAe,MAAM,MAAM,CAAC,EAAE,KAAK,GAAG,GAAG,6BAA6B;AAAA,IAC7E,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AASJ,SAAS,mBAAmB,CAAC,UAAuC;AAAA,EACzE,MAAM,WAAW,UAAU,KAAK;AAAA,EAChC,IACE,CAAC,YACD,CAAC,eAAe,mBAAmB,QAAQ,MAAM,EAAE,GAAG,6BAA6B,GACnF;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM,YAAY,WACd,QAAQ,QAAQ,IAChB,QAAQ,cAAc,cAAc,oBAAoB,YAAY;AAAA,EACxE,IAAI;AAAA,IACF,WAAW,WAAW,UAAU,IAAI;AAAA,IACpC,OAAO,6BAA6B,SAAS,IAAI,YAAY;AAAA,IAC7D,MAAM;AAAA,IACN;AAAA;AAAA;AAIG,IAAM,iBAAiB,oBAAoB,QAAQ,yBAAyB,CAAC;AAG7E,SAAS,oBAAoB,CAAC,UAA2B;AAAA,EAC9D,MAAM,WAAW,UAAU,KAAK;AAAA,EAChC,IAAI;AAAA,IAAU,OAAO,QAAQ,QAAQ;AAAA,EACrC,OAAO,kBAAkB,QAAQ,cAAc,cAAc,oBAAoB,YAAY;AAAA;AAGxF,IAAM,qBAAqB,qBAAqB,QAAQ,0BAA0B,CAAC;AAuBnF,SAAS,mBAAmB,GAA8B;AAAA,EAC/D,MAAM,MAAM,QAAQ,mBAAmB;AAAA,EACvC,IAAI,CAAC;AAAA,IAAK,OAAO;AAAA,EACjB,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,MAAM,IAAI,IAAI,GAAG;AAAA,IACjB,MAAM;AAAA,IACN,OAAO,KAAK,EAAE,IAAI,GAAG,sCAAsC;AAAA,IAC3D,OAAO;AAAA;AAAA,EAGT,MAAM,SAAS,GAAG,IAAI,aAAa,IAAI;AAAA,EACvC,MAAM,QAA4B,EAAE,OAAO;AAAA,EAC3C,IAAI,IAAI;AAAA,IAAU,MAAM,WAAW,mBAAmB,IAAI,QAAQ;AAAA,EAClE,IAAI,IAAI;AAAA,IAAU,MAAM,WAAW,mBAAmB,IAAI,QAAQ;AAAA,EAClE,MAAM,SAAS,QAAQ,sBAAsB;AAAA,EAC7C,IAAI;AAAA,IAAQ,MAAM,SAAS;AAAA,EAC3B,OAAO;AAAA;AAgBF,IAAM,UAAU,qBAAqB,KAAK;AAE1C,IAAM,aAAa,cAAc,YAAY,GAAG,EAAE,QAAQ,KAAK;AAC/D,IAAM,gBAAgB,QAAQ,cAAc,eAAe;AAE3D,IAAM,sBAAsB,QAAQ,cAAc,gCAAgC;AAElF,IAAM,cAAc,QAAQ,cAAc,wBAAwB;AAClE,IAAM,+BAA+B,QAC1C,cACA,qCACF;AACO,IAAM,6BAA6B,QACxC,cACA,mCACF;AAEO,IAAM,cAAc,QAAQ,cAAc,wBAAwB;AAElE,IAAM,qBAAqB,QAAQ,cAAc,+BAA+B;AAEhF,IAAM,wBAAwB,QAAQ,cAAc,kCAAkC;AAEtF,IAAM,uBAAuB,QAAQ,cAAc,iCAAiC;AAEpF,IAAM,sBAAsB,QAAQ,cAAc,gCAAgC;AAElF,IAAM,yBAAyB,QAAQ,cAAc,mCAAmC;AAExF,IAAM,eAAe,QAAQ,cAAc,yBAAyB;AAEpE,IAAM,oBAAoB,aAAa,QAAQ,IAAI,mBAAmB,IAAI;AAC1E,IAAM,mBAAmB,aAAa,QAAQ,IAAI,kBAAkB,IAAI;AAe/E,SAAS,uBAAuB,CAC9B,QACA,UACA,UAAyC,CAAC,GAClC;AAAA,EACR,MAAM,WAAW,QAAQ,MAAM;AAAA,EAC/B,MAAM,aAAa,QAAQ,aAAa,QAAQ;AAAA,EAChD,UAAU,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EAClD,IAAI,UAAU;AAAA,IACZ,IAAI,QAAQ,iBAAiB;AAAA,MAC3B,cAAc,YAAY,GAAG;AAAA,GAAc,EAAE,MAAM,IAAM,CAAC;AAAA,MAC1D,UAAU,YAAY,GAAK;AAAA,IAC7B;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,WAAW,UAAU,GAAG;AAAA,IAC1B,MAAM,SAAS,aAAa,YAAY,OAAO,EAAE,KAAK;AAAA,IACtD,IAAI,QAAQ;AAAA,MACV,UAAU,YAAY,GAAK;AAAA,MAC3B,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,YAAY,EAAE,EAAE,SAAS,WAAW;AAAA,EACnD,IAAI;AAAA,IACF,cAAc,YAAY,GAAG;AAAA,GAAY,EAAE,MAAM,KAAO,MAAM,KAAK,CAAC;AAAA,IACpE,OAAO;AAAA,IACP,OAAO,OAAO;AAAA,IACd,IAAK,MAAgC,SAAS;AAAA,MAAU,MAAM;AAAA,IAC9D,MAAM,SAAS,aAAa,YAAY,OAAO,EAAE,KAAK;AAAA,IACtD,IAAI,CAAC;AAAA,MAAQ,MAAM,IAAI,MAAM,oCAAoC,YAAY;AAAA,IAC7E,UAAU,YAAY,GAAK;AAAA,IAC3B,OAAO;AAAA;AAAA;AAIJ,IAAM,qBAAqB,wBAChC,sBACA,oBACF;AAEO,IAAM,qBAAqB,wBAChC,0BACA,oBACF;AACO,IAAM,mBAAmB,wBAC9B,6BACA,oBACA,EAAE,iBAAiB,KAAK,CAC1B;AAGA,OAAO,QAAQ,IAAI;AAGZ,IAAM,gBAAgB,SAAS,QAAQ,IAAI,iBAAiB,QAAQ,EAAE;AACtE,IAAM,WAAW,QAAQ,IAAI,YAAY;AAGzC,IAAM,WAAW,qBAAqB,qBAAqB,MAAM;AACjE,IAAM,UAAU,qBAAqB,oBAAoB,MAAM;AAC/D,IAAM,cAAc,QAAQ,UAAU,SAAS;AAC/C,IAAM,YAAY,QAAQ,UAAU,OAAO;AAE3C,IAAM,cAAc,QAAQ,IAAI,mBACnC,QAAQ,QAAQ,IAAI,gBAAgB,IACpC,QAAQ,UAAU,aAAa;AAC5B,IAAM,aAAa,QAAQ,UAAU,kBAAkB;AACvD,IAAM,gBAAgB,QAAQ,UAAU,OAAO;AAI/C,IAAM,UAAU,qBAAqB,oBAAoB,SAAS;AAElE,IAAM,eAAe,QAAQ,SAAS,UAAU;AAChD,IAAM,aAAa,QAAQ,SAAS,aAAa;AACjD,IAAM,cAAc,QAAQ,SAAS,cAAc;AACnD,IAAM,oBAAoB,QAAQ,SAAS,eAAe;AAC1D,IAAM,mBAAmB,QAAQ,SAAS,cAAc;AACxD,IAAM,uBAAuB,aAAa,QAAQ,IAAI,sBAAsB,IAAI;AAChF,IAAM,sBAAsB,aAAa,QAAQ,IAAI,qBAAqB,IAAI;AAC9E,IAAM,uBAAuB,QAAQ,SAAS,kBAAkB;AACvE,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;AACxC,UAAU,UAAU,EAAE,WAAW,KAAK,CAAC;AACvC,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;AAC1C,UAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACrD,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,UAAU,cAAc,EAAE,WAAW,KAAK,CAAC;AAC3C,UAAU,YAAY,EAAE,WAAW,KAAK,CAAC;AACzC,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;AAC1C,UAAU,mBAAmB,EAAE,WAAW,KAAK,CAAC;AAChD,UAAU,kBAAkB,EAAE,WAAW,KAAK,CAAC;AAC/C,UAAU,sBAAsB,EAAE,WAAW,KAAK,CAAC;AACnD,UAAU,eAAe,EAAE,WAAW,KAAK,CAAC;AAC5C,UAAU,qBAAqB,EAAE,WAAW,KAAK,CAAC;AAClD,UAAU,iBAAiB,EAAE,WAAW,KAAK,CAAC;AAC9C,UAAU,oBAAoB,EAAE,WAAW,KAAK,CAAC;AACjD,UAAU,cAAc,EAAE,WAAW,KAAK,CAAC;AAC3C,UAAU,kBAAkB,EAAE,WAAW,KAAK,CAAC;AAC/C,UAAU,uBAAuB,EAAE,WAAW,KAAK,CAAC;AACpD,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;AAC1C,UAAU,sBAAsB,EAAE,WAAW,KAAK,CAAC;AACnD,UAAU,cAAc,EAAE,WAAW,KAAK,CAAC;AAC3C,UAAU,aAAa,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAGhD,IAAM,wBAAwB,KAAK,KAAK;AAExC,IAAM,qBAAqB,QAAQ,cAAc,oBAAoB;AACrE,IAAM,gBAAgB,QAAQ,cAAc,eAAe;AA8B3D,IAAM,iBAA4B,gBACvC,kBACA,WACA,eACF;AACO,IAAM,gBAA2B,gBAAgB,iBAAiB,cAAc;AAChF,IAAM,gBAA2B,gBAAgB,iBAAiB,cAAc;AAEhF,IAAM,iBAAiB,QAAQ,gBAAgB,KAAK,QAAQ,eAAe;AAElF,SAAS,eAAe,CAAC,QAAgB,YAA2C;AAAA,EAClF,OAAO,QAAQ,MAAM,MAAM,eAAe,iBAAiB,iBAAiB;AAAA;AAGvE,IAAM,gBAAgB,gBAAgB,iBAAiB,aAAa;AACpE,IAAM,gBAAgB,gBAAgB,iBAAiB,aAAa;AAapE,IAAM,aAAa,QAAQ,YAAY;AACvC,IAAM,cAAc,QAAQ,aAAa;AACzC,IAAM,aAAa,QAAQ,YAAY,KAAK;AAC5C,IAAM,yBACX,QAAQ,wBAAwB,KAAK,QAAQ,cAAc,mCAAmC;AACzF,IAAM,gBAAgB,QAAQ,oBAAoB,KAAK;AACvD,IAAM,gBAAgB,QAAQ,eAAe,KAAK;AAClD,IAAM,gBAAgB,QAAQ,eAAe,KAAK;AAKzD,IAAM,mBAAmB,OAAO,SAAS,QAAQ,IAAI,kBAAkB,IAAI,EAAE;AACtE,IAAM,iBACX,OAAO,UAAU,gBAAgB,KAAK,mBAAmB,IAAI,mBAAmB;;;AIjclF,oBAAS;AAGF,SAAS,uBAAuB,CACrC,SACA,UACS;AAAA,EACT,OACE,SAAS,YAAY,YACrB,SAAS,aAAa,QACtB,SAAS,eAAe,QACxB,CAAC,SAAS;AAAA;AAKP,SAAS,2BAA2B,CAAC,QAAiB,oBAAqC;AAAA,EAChG,IAAI,CAAC,UAAU,OAAO,WAAW;AAAA,IAAU,OAAO;AAAA,EAClD,MAAM,YAAY;AAAA,EAClB,OACE,UAAU,OAAO,QACjB,UAAU,SAAS,8BACnB,UAAU,eAAe;AAAA;AAKtB,SAAS,qBAAqB,CACnC,YACA,YACA,UACA,KACA,WACe;AAAA,EACf,MAAM,SAAS,IAAI,IAAI,UAAU;AAAA,EACjC,MAAM,OAAO,IAAI,IAAI,QAAQ;AAAA,EAC7B,IAAI,SAAqD;AAAA,EACzD,YAAY,KAAK,aAAa,YAAY;AAAA,IACxC,IAAI,OAAO,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG;AAAA,MAAG;AAAA,IACtC,IAAI,MAAM,SAAS,aAAa;AAAA,MAAW;AAAA,IAC3C,IAAI,CAAC,UAAU,SAAS,aAAa,OAAO,YAAY;AAAA,MACtD,SAAS,EAAE,KAAK,YAAY,SAAS,WAAW;AAAA,IAClD;AAAA,EACF;AAAA,EACA,OAAO,QAAQ,OAAO;AAAA;AAIjB,SAAS,kBAAkB,CAChC,SACA,SACA,eACA,YACe;AAAA,EACf,SAAS,OAAO,QAAS,QAAQ,SAAS,QAAQ;AAAA,IAChD,IAAI,cAAc,IAAI,IAAI,KAAK,WAAW,IAAI;AAAA,MAAG;AAAA,IACjD,OAAO;AAAA,EACT;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,qBAAqB,CAAC,SAAgC;AAAA,EACpE,MAAM,QAAQ,QAAQ,MAAM,+BAA+B;AAAA,EAC3D,OAAO,QAAQ,MAAM,KAAK;AAAA;AAIrB,SAAS,oCAAoC,CAClD,SACA,qBACS;AAAA,EACT,MAAM,oBAAoB,sBAAsB,OAAO;AAAA,EACvD,OAAO,sBAAsB,QAAQ,SAAQ,iBAAiB,MAAM,SAAQ,mBAAmB;AAAA;AAI1F,SAAS,uBAAuB,CAAC,MAAoB,WAAqC;AAAA,EAC/F,IAAI,KAAK,aAAa,QAAQ,KAAK,eAAe;AAAA,IAAM,OAAO,QAAQ,QAAQ,IAAI;AAAA,EAEnF,OAAO,IAAI,QAAiB,CAAC,gBAAgB;AAAA,IAC3C,IAAI,UAAU;AAAA,IACd,IAAI;AAAA,IACJ,MAAM,SAAS,CAAC,WAAoB;AAAA,MAClC,IAAI;AAAA,QAAS;AAAA,MACb,UAAU;AAAA,MACV,aAAa,KAAK;AAAA,MAClB,KAAK,IAAI,QAAQ,MAAM;AAAA,MACvB,YAAY,MAAM;AAAA;AAAA,IAEpB,MAAM,SAAS,MAAM,OAAO,IAAI;AAAA,IAEhC,KAAK,KAAK,QAAQ,MAAM;AAAA,IACxB,QAAQ,WAAW,MAAM,OAAO,KAAK,aAAa,QAAQ,KAAK,eAAe,IAAI,GAAG,SAAS;AAAA,IAC9F,IAAI,OAAO,UAAU;AAAA,MAAU,MAAM,QAAQ;AAAA,IAG7C,IAAI,KAAK,aAAa,QAAQ,KAAK,eAAe;AAAA,MAAM,OAAO,IAAI;AAAA,GACpE;AAAA;AAII,SAAS,6BAA6B,CAAC,MAAkD;AAAA,EAC9F,OAAO,IAAI,QAAe,CAAC,UAAU,WAAW;AAAA,IAC9C,KAAK,KAAK,SAAS,MAAM;AAAA,GAC1B;AAAA;;;AC1GH,sBAAS;AACT,oBAAS;AACT,oBAAS,kBAAS,kBAAM;;;AC6BxB,IAAM,QAAQ,OAAO,QAAQ,SAAS,QAAQ;AAI9C,IAAI;AAEJ,IAAI,OAAO;AAAA,GACR,EAAE,SAAS,IAAI,MAAa;AAC/B,EAAO;AAAA,EAmBL,MAAM,sBAAsB,CAAC,QAAQ,QAAQ,EAAE,KAAK,GAAG;AAAA,EACvD,QAAQ,iBAAkB,MAAa;AAAA;AAAA,EAIvC,MAAM,aAAa;AAAA,IACjB;AAAA,IAEA,WAAW,CAAC,MAAc,UAAqB,CAAC,GAAG;AAAA,MAGjD,KAAK,MAAM,QAAQ,WACf,IAAI,aAAa,MAAM,EAAE,UAAU,KAAK,CAAC,IACzC,IAAI,aAAa,IAAI;AAAA;AAAA,IAG3B,KAAK,CAAC,KAAa;AAAA,MACjB,OAAO,KAAK,IAAI,QAAQ,GAAG;AAAA;AAAA,IAG7B,OAAO,CAAC,KAAa;AAAA,MACnB,OAAO,KAAK,IAAI,QAAQ,GAAG;AAAA;AAAA,IAG7B,IAAI,CAAC,KAAmB;AAAA,MACtB,KAAK,IAAI,KAAK,GAAG;AAAA;AAAA,IAGnB,GAAG,CAAC,QAAgB,QAAmB;AAAA,MACrC,OAAO,KAAK,IAAI,QAAQ,GAAG,EAAE,IAAI,GAAG,MAAM;AAAA;AAAA,IAG5C,WAAsC,CAAC,IAAgD;AAAA,MAMrF,MAAM,MACJ,CAAC,UACD,IAAI,SAAkB;AAAA,QACpB,KAAK,IAAI,KAAK,KAAK;AAAA,QACnB,IAAI;AAAA,UACF,MAAM,SAAS,GAAG,GAAG,IAAI;AAAA,UACzB,KAAK,IAAI,KAAK,QAAQ;AAAA,UACtB,OAAO;AAAA,UACP,OAAO,KAAK;AAAA,UACZ,KAAK,IAAI,KAAK,UAAU;AAAA,UACxB,MAAM;AAAA;AAAA;AAAA,MAGZ,MAAM,KAAK,IAAI,OAAO;AAAA,MAKtB,GAAG,WAAW,IAAI,gBAAgB;AAAA,MAClC,GAAG,YAAY,IAAI,iBAAiB;AAAA,MACpC,GAAG,YAAY,IAAI,iBAAiB;AAAA,MACpC,OAAO;AAAA;AAAA,IAGT,KAAK,GAAS;AAAA,MACZ,KAAK,IAAI,MAAM;AAAA;AAAA,EAEnB;AAAA,EAEA,WAAW;AAAA;;;AD7Gb,IAAI,iBAA8C,CAAC;AAGnD,IAAI,mBAAgD;AACpD,IAAI,uBAAsC;AAe1C,IAAM,qBAAoD,CAAC;AAC3D,IAAM,qBAAqB,IAAI;AAC/B,IAAM,wBAAwB,IAAI;AAElC,SAAS,OAAO,CAAC,MAAc,UAA0B;AAAA,EACvD,MAAM,QAAQ,QAAQ,IAAI,OAAO,KAAK;AAAA,EACtC,OAAO,SAAQ,SAAS,QAAQ;AAAA;AAGlC,SAAS,eAAe,GAAW;AAAA,EACjC,OAAO,QAAQ,sBAAsB,MAAK,SAAQ,GAAG,WAAW,CAAC;AAAA;AAGnE,SAAS,cAAc,GAAW;AAAA,EAChC,OAAO,QAAQ,qBAAqB,MAAK,gBAAgB,GAAG,MAAM,CAAC;AAAA;AAgBrE,SAAS,2BAA2B,GAAW;AAAA,EAC7C,OAAO,QAAQ,oBAAoB,MAAK,sBAAsB,GAAG,aAAa,CAAC;AAAA;AAGjF,IAAM,uBAAuB;AAC7B,IAAM,yBAAyB;AAC/B,IAAM,oBAAoB,IAAI,WAAW,IAAI,kBAAkB,WAAW,iBAAiB,CAAC;AAE5F,SAAS,YAAY,CAAC,OAAyB;AAAA,EAC7C,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,EACrE,OAAO,sDAAsD,KAAK,OAAO;AAAA;AAG3E,SAAS,iBAAiB,CACxB,UACA,KACA,YAAY,wBACN;AAAA,EACN,MAAM,WAAW,KAAK,IAAI,IAAI;AAAA,EAC9B,OAAO,MAAM;AAAA,IACX,IAAI;AAAA,MACF,SAAS,KAAK,GAAG;AAAA,MACjB;AAAA,MACA,OAAO,OAAO;AAAA,MACd,IAAI,CAAC,aAAa,KAAK,KAAK,KAAK,IAAI,KAAK;AAAA,QAAU,MAAM;AAAA,MAC1D,QAAQ,KAAK,mBAAmB,GAAG,GAAG,KAAK,IAAI,sBAAsB,WAAW,KAAK,IAAI,CAAC,CAAC;AAAA;AAAA,EAE/F;AAAA;AAGK,SAAS,kBAAkB,CAAC,UAAyC;AAAA,EAQ1E,SAAS,KAAK,4BAA4B;AAAA,EAC1C,kBAAkB,UAAU,2BAA2B;AAAA,EACvD,SAAS,KAAK,0BAA0B;AAAA,EACxC,SAAS,KAAK,kCAAkC;AAAA,EAChD,IAAI;AAAA,IACF,SAAS,KAAK,iCAAiC;AAAA,IAC/C,MAAM;AAAA;AAKV,SAAS,eAAe,GAA4B;AAAA,EAClD,MAAM,OAAO,4BAA4B;AAAA,EACzC,IAAI,oBAAoB,yBAAyB;AAAA,IAAM,OAAO;AAAA,EAC9D,IAAI;AAAA,IAAkB,iBAAiB,MAAM;AAAA,EAC7C,WAAU,SAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5C,mBAAmB,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC;AAAA,EACtD,uBAAuB;AAAA,EACvB,mBAAmB,gBAAgB;AAAA,EACnC,OAAO;AAAA;AAGF,SAAS,sBAAsB,GAA4B;AAAA,EAChE,OAAQ,eAAe,YAAY,gBAAgB;AAAA;AAG9C,SAAS,qBAAqB,GAAW;AAAA,EAC9C,OAAO,eAAe,WAAW,eAAe;AAAA;AA2F3C,SAAS,gCAAgC,CAC9C,YACA,WAAW,KACL;AAAA,EACN,mBAAmB,KAAK,EAAE,YAAY,SAAS,CAAC;AAAA,EAChD,mBAAmB,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAAA;AAGpD,SAAS,oBAAoB,CAClC,WAAoC,uBAAuB,GACrD;AAAA,EACN,IAAI,sBAAsB,IAAI,QAAQ;AAAA,IAAG;AAAA,EACzC,IAAI,cAAc,mBAAmB,IAAI,QAAQ;AAAA,EACjD,IAAI,CAAC,aAAa;AAAA,IAChB,cAAc,IAAI;AAAA,IAClB,mBAAmB,IAAI,UAAU,WAAW;AAAA,EAC9C;AAAA,EACA,sBAAsB,IAAI,QAAQ;AAAA,EAClC,IAAI;AAAA,IACF,WAAW,SAAS,oBAAoB;AAAA,MACtC,IAAI,YAAY,IAAI,MAAM,UAAU;AAAA,QAAG;AAAA,MAGvC,YAAY,IAAI,MAAM,UAAU;AAAA,MAChC,IAAI;AAAA,QACF,MAAM,WAAW,QAAQ;AAAA,QACzB,OAAO,OAAO;AAAA,QACd,YAAY,OAAO,MAAM,UAAU;AAAA,QACnC,MAAM;AAAA;AAAA,IAEV;AAAA,YACA;AAAA,IACA,sBAAsB,OAAO,QAAQ;AAAA;AAAA;AAKlC,IAAM,0BAA0B,IAAI,MAAM,CAAC,GAA8B;AAAA,EAC9E,GAAG,CAAC,SAAS,UAAU;AAAA,IACrB,MAAM,WAAW,uBAAuB;AAAA,IACxC,qBAAqB,QAAQ;AAAA,IAC7B,MAAM,QAAQ,QAAQ,IAAI,UAAoB,UAAU,QAAQ;AAAA,IAChE,OAAO,OAAO,UAAU,aAAa,MAAM,KAAK,QAAQ,IAAI;AAAA;AAAA,EAE9D,GAAG,CAAC,SAAS,UAAU,OAAO;AAAA,IAC5B,MAAM,WAAW,uBAAuB;AAAA,IACxC,qBAAqB,QAAQ;AAAA,IAC7B,OAAO,QAAQ,IAAI,UAAoB,UAAU,OAAO,QAAQ;AAAA;AAEpE,CAAC;;;AE3QM,IAAM,KAAK;;;ACHlB;;;AC+BA,iCAAiC,CAAC,aAAa;AAAA,EAC7C,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAQb;AAAA,GACA,EAAE;;;ADpCE,IAAM,sBAAsB,GAAG,QAAQ,OAAO,WAAW;AAyBhE,iCAAiC,CAAC,aAAa;AAAA,EAC7C,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAYb;AAAA,GACA,EAAE;;;AExCE,IAAM,yBAAyB;AA0CtC,iCAAiC,CAAC,aAAa;AAAA,EAC7C,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GASb;AAAA,GACA,EAAE;AAEL,SAAS,UAAU,CAAC,KAAkD;AAAA,EACpE,OAAO;AAAA,IACL,MAAM,IAAI;AAAA,IACV,SAAS,IAAI;AAAA,IACb,KAAK,OAAO,IAAI,GAAG;AAAA,IACnB,WAAW,OAAO,IAAI,UAAU;AAAA,IAChC,aAAa,OAAO,IAAI,YAAY;AAAA,EACtC;AAAA;AA8BK,SAAS,sBAAsB,CACpC,MACA,MAAM,KAAK,IAAI,GACf,UAAU,wBACkB;AAAA,EAC5B,MAAM,MAAM,GACT,MAAwC,qDAAqD,EAC7F,IAAI,IAAI;AAAA,EACX,IAAI,CAAC;AAAA,IAAK,OAAO;AAAA,EACjB,MAAM,QAAQ,WAAW,GAAG;AAAA,EAC5B,OAAO,MAAM,MAAM,eAAe,UAAU,QAAQ;AAAA;;;AXjG/C,SAAS,WAAW,CAAC,MAAgC;AAAA,EAC1D,OAAO,IAAI,QAAQ,CAAC,iBAAiB;AAAA,IACnC,MAAM,SAAS,aAAa;AAAA,IAC5B,IAAI,UAAU;AAAA,IACd,MAAM,SAAS,CAAC,aAAsB;AAAA,MACpC,IAAI;AAAA,QAAS;AAAA,MACb,UAAU;AAAA,MACV,OAAO,mBAAmB;AAAA,MAC1B,aAAa,QAAQ;AAAA;AAAA,IAGvB,OAAO,MAAM;AAAA,IACb,OAAO,KAAK,SAAS,MAAM,OAAO,IAAI,CAAC;AAAA,IACvC,OAAO,OAAO,EAAE,MAAM,aAAa,MAAM,WAAW,KAAK,GAAG,MAAM;AAAA,MAChE,OAAO,MAAM,CAAC,UAAU,OAAO,UAAU,SAAS,CAAC;AAAA,KACpD;AAAA,GACF;AAAA;AAGH,eAAsB,4BAA4B,CAChD,SACA,SACA,eACA,gBAAoD,aAC5B;AAAA,EACxB,SAAS,OAAO,QAAS,QAAQ,SAAS,QAAQ;AAAA,IAChD,IAAI,cAAc,IAAI,IAAI;AAAA,MAAG;AAAA,IAC7B,cAAc,IAAI,IAAI;AAAA,IACtB,IAAI,MAAM,cAAc,IAAI,GAAG;AAAA,MAC7B,cAAc,OAAO,IAAI;AAAA,MACzB;AAAA,IACF;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,OAAO;AAAA;AA4DF,SAAS,8BAA8B,CAAC,aAA2B;AAAA,EACxE,MAAM,SAAS,SAAQ,WAAW;AAAA,EAClC,MAAM,cAAc,SAAQ,oBAAoB;AAAA,EAChD,IAAI,WAAW,eAAe,CAAC,OAAO,WAAW,GAAG,cAAc,KAAK;AAAA,IAAG;AAAA,EAC1E,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,cAAa,SAAS,CAAC,MAAM,MAAM,WAAW,GAAG,EAAE,OAAO,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK;AAAA,IAC3F,MAAM;AAAA,IACN;AAAA;AAAA,EAEF,IAAI,CAAC;AAAA,IAAM;AAAA,EACX,WAAW,OAAO,KAAK,MAAM;AAAA,CAAI,GAAG;AAAA,IAClC,MAAM,SAAS,SAAS,IAAI,KAAK,GAAG,EAAE;AAAA,IACtC,IAAI,OAAO,MAAM,MAAM,KAAK,WAAW,QAAQ;AAAA,MAAK;AAAA,IACpD,IAAI;AAAA,MACF,MAAM,UAAU,cAAa,MAAM,CAAC,MAAM,OAAO,MAAM,GAAG,MAAM,UAAU,GAAG;AAAA,QAC3E,OAAO;AAAA,MACT,CAAC,EACE,SAAS,EACT,KAAK;AAAA,MACR,MAAM,SAAS,sBAAsB,OAAO;AAAA,MAG5C,IAAI,CAAC,UAAU,SAAQ,MAAM,MAAM;AAAA,QAAQ;AAAA,MAC3C,wBAAwB,MAAM;AAAA,MAC9B,QAAQ,KAAK,QAAQ,SAAS;AAAA,MAC9B,OAAO,KAAK,EAAE,KAAK,QAAQ,YAAY,GAAG,kDAAkD;AAAA,MAC5F,OAAO,GAAG;AAAA,MACV,OAAO,MAAM,EAAE,KAAK,GAAG,KAAK,QAAQ,YAAY,GAAG,oCAAoC;AAAA;AAAA,EAE3F;AAAA;AAUK,SAAS,uBAAuB,CACrC,OACA,kBACA,aACA,SACU;AAAA,EACV,MAAM,OAAO,SAAQ,WAAW;AAAA,EAChC,MAAM,OAAO,IAAI,IAAI,CAAC,GAAG,gBAAgB,EAAE,IAAI,CAAC,MAAM,SAAQ,CAAC,CAAC,CAAC;AAAA,EACjE,MAAM,MAAgB,CAAC;AAAA,EACvB,aAAa,KAAK,iBAAiB,OAAO;AAAA,IACxC,IAAI,QAAQ,WAAW,CAAC;AAAA,MAAa;AAAA,IACrC,MAAM,MAAM,SAAQ,WAAW;AAAA,IAC/B,IAAI,QAAQ,QAAQ,CAAC,IAAI,WAAW,GAAG,OAAO,KAAK;AAAA,MAAG;AAAA,IACtD,IAAI,KAAK,IAAI,GAAG;AAAA,MAAG;AAAA,IACnB,IAAI,KAAK,GAAG;AAAA,EACd;AAAA,EACA,OAAO;AAAA;AAUF,SAAS,qBAAqB,CAAC,eAA8B,SAA0B;AAAA,EAC5F,OAAO,kBAAkB;AAAA;AAUpB,SAAS,kBAAkB,CAAC,kBAA0C;AAAA,EAI3E,MAAM,cAAc,uBAAuB,eAAe,KAAK,IAAI,GAAG,OAAO,iBAAiB;AAAA,EAC9F,IAAI,CAAC,sBAAsB,aAAa,OAAO,MAAM,QAAQ,GAAG;AAAA,IAAG;AAAA,EAEnE,MAAM,cAAc,SAAQ,oBAAoB;AAAA,EAChD,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,cAAa,SAAS,CAAC,MAAM,MAAM,WAAW,GAAG,EAAE,OAAO,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK;AAAA,IAC3F,MAAM;AAAA,IACN;AAAA;AAAA,EAEF,IAAI,CAAC;AAAA,IAAM;AAAA,EAEX,MAAM,QAA4D,CAAC;AAAA,EACnE,WAAW,OAAO,KAAK,MAAM;AAAA,CAAI,GAAG;AAAA,IAClC,MAAM,SAAS,SAAS,IAAI,KAAK,GAAG,EAAE;AAAA,IACtC,IAAI,OAAO,MAAM,MAAM;AAAA,MAAG;AAAA,IAC1B,IAAI;AAAA,MACF,MAAM,UAAU,cAAa,MAAM,CAAC,MAAM,OAAO,MAAM,GAAG,MAAM,UAAU,GAAG;AAAA,QAC3E,OAAO;AAAA,MACT,CAAC,EACE,SAAS,EACT,KAAK;AAAA,MACR,MAAM,KAAK,EAAE,KAAK,QAAQ,aAAa,sBAAsB,OAAO,EAAE,CAAC;AAAA,MACvE,MAAM;AAAA,EAGV;AAAA,EAEA,MAAM,aAAa,wBAAwB,OAAO,kBAAkB,aAAa,QAAQ,GAAG;AAAA,EAC5F,WAAW,OAAO,YAAY;AAAA,IAC5B,IAAI;AAAA,MACF,wBAAwB,GAAG;AAAA,MAC3B,QAAQ,KAAK,KAAK,SAAS;AAAA,MAC3B,OAAO,KAAK,EAAE,IAAI,GAAG,2CAA2C;AAAA,MAChE,OAAO,GAAG;AAAA,MACV,OAAO,MAAM,EAAE,KAAK,GAAG,IAAI,GAAG,iDAAiD;AAAA;AAAA,EAEnF;AAAA;AAyBK,SAAS,mBAAmB,CAAC,aAA2B;AAAA,EAC7D,IAAI;AAAA,IACF,MAAM,QAAQ,YAAY,WAAW;AAAA,IACrC,WAAW,KAAK,OAAO;AAAA,MACrB,IAAI,EAAE,WAAW,WAAW,GAAG;AAAA,QAC7B,IAAI;AAAA,UACF,WAAW,SAAQ,aAAa,CAAC,CAAC;AAAA,UAClC,OAAO,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,8BAA8B;AAAA,UACpE,OAAO,GAAG;AAAA,UACV,OAAO,KAAK,EAAE,KAAK,GAAG,MAAM,EAAE,GAAG,8CAA8C;AAAA;AAAA,MAEnF;AAAA,IACF;AAAA,IACA,MAAM;AAAA;AAYH,SAAS,uBAAuB,CAAC,KAAmB;AAAA,EACzD,IAAI;AAAA,IACF,MAAM,WAAW,cAAa,SAAS,CAAC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,OAAO,OAAO,CAAC,EAC1E,SAAS,EACT,KAAK;AAAA,IACR,IAAI,CAAC;AAAA,MAAU;AAAA,IACf,MAAM,YAAY,SACf,MAAM;AAAA,CAAI,EACV,IAAI,CAAC,SAAS,SAAS,MAAM,EAAE,CAAC,EAChC,OAAO,CAAC,WAAW,CAAC,OAAO,MAAM,MAAM,CAAC;AAAA,IAE3C,WAAW,YAAY,WAAW;AAAA,MAChC,wBAAwB,QAAQ;AAAA,IAClC;AAAA,IAEA,WAAW,UAAU,CAAC,WAAW,SAAS,GAAY;AAAA,MACpD,WAAW,YAAY,WAAW;AAAA,QAChC,IAAI;AAAA,UACF,QAAQ,KAAK,UAAU,MAAM;AAAA,UAC7B,OAAO,GAAG;AAAA,UACV,OAAO,MAAM,EAAE,KAAK,GAAG,KAAK,UAAU,OAAO,GAAG,wCAAwC;AAAA;AAAA,MAE5F;AAAA,IACF;AAAA,IACA,OAAO,KAAK,EAAE,WAAW,KAAK,UAAU,GAAG,uCAAuC;AAAA,IAClF,MAAM;AAAA;;AYxSV,yBAA4B;AAC5B,uBAAS,4BAAY,iCAAa;AAClC;AAAA;AAAA,gBAEE;AAAA,eACA;AAAA,kBACA;AAAA;AAAA,gBAEA;AAAA,mBACA;AAAA;AAEF,oBAAS,kBAAS,kBAAM;;;ACXjB,IAAM,QAAQ,CAAC,OAAe,IAAI,QAAc,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;;;ACA/E,uBAAS,0BAAY;AACrB,2CAAgC;AAchC,SAAS,oBAAoB,CAC3B,SACA,cAAiC,QAAQ,KAC1B;AAAA,EACf,MAAM,aAAa,WAAW,OAAO,IACjC,CAAC,OAAO,KACP,YAAY,QAAQ,IAClB,MAAM,SAAS,EACf,OAAO,OAAO,EACd,IAAI,CAAC,cAAc,SAAQ,WAAW,OAAO,CAAC;AAAA,EACrD,WAAW,aAAa,YAAY;AAAA,IAClC,IAAI;AAAA,MACF,YAAW,WAAW,WAAU,IAAI;AAAA,MACpC,OAAO;AAAA,MACP,MAAM;AAAA,EAGV;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,4BAA4B,CAC1C,SACA,MACA,UAAwC,CAAC,GACd;AAAA,EAC3B,MAAM,WAAW,QAAQ,YAAY,QAAQ;AAAA,EAC7C,MAAM,cAAc,QAAQ,eAAe,QAAQ;AAAA,EACnD,MAAM,aAAa,QAAQ,YAAY,SAAS,KAAK,KAAK,YAAY,iBAAiB,KAAK,CAAC;AAAA,EAC7F,IAAI,aAAa,WAAW,YAAY;AAAA,IACtC,OAAO,EAAE,SAAS,MAAM,CAAC,GAAG,IAAI,GAAG,gBAAgB,MAAM;AAAA,EAC3D;AAAA,EAEA,MAAM,WAAW,QAAQ,kBAAkB,sBAAsB,YAAY,WAAW;AAAA,EACxF,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,MACR,sHACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,SAAS;AAAA,IACT,MAAM,CAAC,MAAM,MAAM,0BAA0B,SAAS,GAAG,IAAI;AAAA,IAC7D,gBAAgB;AAAA,EAClB;AAAA;;;AC3DF;AACA;AACA;;;ACFA;AAEO,SAAS,sBAAsB,CAAC,YAAoB,OAAuB;AAAA,EAChF,OAAO,WAAW,UAAU,UAAU,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAAA;;;ADGpE,IAAM,cAAc;AACpB,IAAM,mBAAmB;AAOzB,eAAsB,iBAAiB,CACrC,WACA,UAAiC,CAAC,GAChB;AAAA,EAClB,MAAM,SAAS,IAAI,OAAO,EAAE,MAAM,gCAAgC,SAAS,QAAQ,CAAC;AAAA,EACpF,IAAI;AAAA,EAEJ,IAAI;AAAA,IACF,MAAM,QAAQ,MAAM,QAAQ,KAAK;AAAA,OAC9B,YAAY;AAAA,QACX,MAAM,OAAO,QAAQ,SAAS;AAAA,QAC9B,MAAM,SAAS,MAAM,OAAO,UAAU;AAAA,QACtC,IAAI,OAAO,MAAM,WAAW;AAAA,UAAG,MAAM,IAAI,MAAM,+BAA+B;AAAA,QAC9E,MAAM,QAAQ,YAAY;AAAA,QAC1B,OAAO,OAAO;AAAA,SACb;AAAA,MACH,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,QAChC,UAAU,WACR,MAAM,OAAO,IAAI,MAAM,uCAAuC,CAAC,GAC/D,QAAQ,aAAa,gBACvB;AAAA,QACA,QAAQ,QAAQ;AAAA,OACjB;AAAA,IACH,CAAC;AAAA,IACD,OAAO,MAAM,SAAS;AAAA,IACtB,MAAM;AAAA,IACN,OAAO;AAAA,YACP;AAAA,IACA,IAAI;AAAA,MAAS,aAAa,OAAO;AAAA,IACjC,IAAI;AAAA,MACF,MAAM,OAAO,MAAM;AAAA,MACnB,MAAM;AAAA;AAAA;AAWZ,eAAsB,4BAA4B,CAChD,MACA,YACA,YAAuB,OACL;AAAA,EAClB,MAAM,QAAQ,IAAI,gBAAgB,EAAE,OAAO,YAAY,CAAC;AAAA,EACxD,MAAM,UAAU,oBAAoB;AAAA,EACpC,MAAM,kBAAkB,uBAAuB,YAAY,WAAW;AAAA,EACtE,MAAM,oBAAoB,EAAE,wBAAwB,gBAAgB;AAAA,EACpE,MAAM,qBAAgC,CAAC,OAAO,SAAS;AAAA,IACrD,MAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;AAAA,IACzC,QAAQ,IAAI,wBAAwB,eAAe;AAAA,IACnD,OAAO,UAAU,OAAO,KAAK,MAAM,QAAQ,CAAC;AAAA;AAAA,EAG9C,MAAM,eAAe,IAAI,mBAAmB,IAAI,IAAI,GAAG,eAAe,OAAO,GAAG;AAAA,IAC9E,OAAO;AAAA,IACP,iBAAiB,EAAE,OAAO,mBAAmB;AAAA,IAC7C,aAAa,EAAE,SAAS,kBAAkB;AAAA,EAC5C,CAAC;AAAA,EACD,IAAI,CAAE,MAAM,kBAAkB,YAAY;AAAA,IAAI,OAAO;AAAA,EAErD,MAAM,sBAAsB,IAAI,8BAC9B,IAAI,IAAI,GAAG,eAAe,OAAO,GACjC;AAAA,IACE,OAAO;AAAA,IACP,aAAa,EAAE,SAAS,kBAAkB;AAAA,EAC5C,CACF;AAAA,EACA,OAAO,kBAAkB,qBAAqB;AAAA,IAC5C,WAAW,MAAM,oBAAoB,iBAAiB;AAAA,EACxD,CAAC;AAAA;;;AEvFH,wBAAS;AACT,sBAAS;AACT,yBAAS;AACT;AACA,iBAAS;;;ACJT,sBAAS,yBAAW;AACpB,iBAAS;;;ACDT,sEAAuD;AAEvD,IAAM,kBAAkB;AACxB,IAAM,WAAW;AACjB,IAAM,YAAY;AAElB,SAAS,aAAa,CAAC,WAA2B;AAAA,EAChD,OAAO,WAAW,QAAQ,EACvB,OAAO,4BAA0B,MAAM,EACvC,OAAO,WAAW,MAAM,EACxB,OAAO,EACP,SAAS,GAAG,SAAS;AAAA;AAG1B,SAAS,GAAG,CAAC,QAAgB,KAAqB;AAAA,EAChD,OAAO,OAAO,KAAK,GAAG,aAAW,IAAI,YAAY,KAAK,MAAM;AAAA;AAGvD,SAAS,qBAAqB,CAAC,OAAwB;AAAA,EAC5D,OAAO,MAAM,WAAW,eAAe;AAAA;AAGlC,SAAS,wBAAwB,CACtC,QACA,KACA,OACA,WACQ;AAAA,EACR,MAAM,KAAK,aAAY,QAAQ;AAAA,EAC/B,MAAM,SAAS,eAAe,eAAe,cAAc,SAAS,GAAG,EAAE;AAAA,EACzE,OAAO,OAAO,IAAI,QAAQ,GAAG,CAAC;AAAA,EAC9B,MAAM,aAAa,OAAO,OAAO,CAAC,OAAO,OAAO,OAAO,MAAM,GAAG,OAAO,MAAM,CAAC,CAAC;AAAA,EAC/E,MAAM,MAAM,OAAO,WAAW;AAAA,EAC9B,OAAO,GAAG,kBAAkB,GAAG,SAAS,WAAW,KAAK,WAAW,SAAS,WAAW,KAAK,IAAI,SAAS,WAAW;AAAA;AAG/G,SAAS,wBAAwB,CACtC,QACA,KACA,aACA,WAC6C;AAAA,EAC7C,IAAI,CAAC,sBAAsB,WAAW,GAAG;AAAA,IACvC,OAAO,EAAE,OAAO,aAAa,iBAAiB,KAAK;AAAA,EACrD;AAAA,EAEA,MAAM,UAAU,YAAY,MAAM,gBAAgB,MAAM;AAAA,EACxD,OAAO,QAAQ,gBAAgB,YAAY,SAAS,QAAQ,MAAM,GAAG;AAAA,EACrE,IAAI,CAAC,UAAU,mBAAmB,aAAa,CAAC,WAAW,MAAM,SAAS,GAAG;AAAA,IAC3E,MAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAAA,EAEA,MAAM,KAAK,OAAO,KAAK,QAAQ,WAAW;AAAA,EAC1C,MAAM,aAAa,OAAO,KAAK,gBAAgB,WAAW;AAAA,EAC1D,MAAM,MAAM,OAAO,KAAK,SAAS,WAAW;AAAA,EAC5C,IAAI,GAAG,WAAW,YAAY,IAAI,WAAW,IAAI;AAAA,IAC/C,MAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAAA,EAEA,MAAM,WAAW,iBAAiB,eAAe,cAAc,SAAS,GAAG,EAAE;AAAA,EAC7E,SAAS,OAAO,IAAI,QAAQ,GAAG,CAAC;AAAA,EAChC,SAAS,WAAW,GAAG;AAAA,EACvB,MAAM,YAAY,OAAO,OAAO,CAAC,SAAS,OAAO,UAAU,GAAG,SAAS,MAAM,CAAC,CAAC;AAAA,EAC/E,OAAO,EAAE,OAAO,UAAU,SAAS,MAAM,GAAG,iBAAiB,MAAM;AAAA;;;ACrD9D,SAAS,iBAAiB,CAC/B,QACA,KACA,OACA,YAAY,kBACJ;AAAA,EACR,OAAO,yBAAyB,QAAQ,KAAK,OAAO,SAAS;AAAA;AAOxD,SAAS,iBAAiB,CAC/B,QACA,KACA,aACA,YAAY,kBACiC;AAAA,EAC7C,OAAO,yBAAyB,QAAQ,KAAK,aAAa,SAAS;AAAA;;;AFfrE,IAAI;AACJ,IAAI,iBAAiB;AAErB,SAAS,uBAAuB,CAAC,UAA+B;AAAA,EAC9D,SAAS,KAAK,2BAA2B;AAAA,EACzC,SAAS,KAAK,4BAA4B;AAAA,EAC1C,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAQb;AAAA,EAMD;AAAA,IACE,MAAM,OAAO,SAAS,QAAQ,0BAA0B,EAAE,IAAI;AAAA,IAI9D,MAAM,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS;AAAA,IACjD,IAAI,OAAO,IAAI,KAAK,YAAY,MAAM,WAAW;AAAA,MAC/C,SAAS,KAAK,OAAO;AAAA,MACrB,SAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAQf;AAAA,MACC,SAAS,KACP,6FACF;AAAA,MACA,SAAS,KAAK,kBAAkB;AAAA,MAChC,SAAS,KAAK,4CAA4C;AAAA,MAC1D,SAAS,KAAK,QAAQ;AAAA,IACxB;AAAA,EACF;AAAA;AAGF,SAAS,iBAAiB,CAAC,SAAgC;AAAA,EACzD,MAAM,WAAW,MAAK,SAAS,OAAO;AAAA,EACtC,MAAM,OAAO,MAAK,UAAU,UAAU;AAAA,EACtC,WAAU,UAAU,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAAA,EACpD,MAAM,WAAW,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC;AAAA,EAGpD,WAAU,MAAM,GAAK;AAAA,EACrB,wBAAwB,QAAQ;AAAA,EAChC,OAAO;AAAA;AAGT,SAAS,mBAAmB,GAAkB;AAAA,EAC5C,IAAI,CAAC;AAAA,IAAS,UAAU,kBAAkB,QAAQ;AAAA,EAClD,OAAO;AAAA;AAqCF,IAAM,wBAAwB,KAAK;AAGnC,SAAS,iBAAiB,CAAC,KAAqB;AAAA,EACrD,OAAO,IAAI,KAAK,EAAE,YAAY;AAAA;AAOhC,SAAS,UAAU,CAAC,QAAgB,KAAa,aAA6B;AAAA,EAC5E,MAAM,WAAW,oBAAoB;AAAA,EACrC,MAAM,UAAU,kBAAkB,QAAQ,KAAK,aAAa,cAAc;AAAA,EAC1E,IAAI,QAAQ,iBAAiB;AAAA,IAC3B,SACG,QAAQ,wEAAwE,EAChF,IAAI,kBAAkB,QAAQ,KAAK,QAAQ,OAAO,cAAc,GAAG,QAAQ,KAAK,WAAW;AAAA,EAChG;AAAA,EACA,OAAO,QAAQ;AAAA;AAqBV,SAAS,0BAA0B,CAAC,QAAuC;AAAA,EAChF,MAAM,OAAO,oBAAoB,EAC9B,QAAQ,0EAA0E,EAClF,IAAI,MAAM;AAAA,EACb,MAAM,UAAiC,CAAC;AAAA,EACxC,WAAW,OAAO,MAAM;AAAA,IACtB,IAAI;AAAA,MACF,QAAQ,KAAK;AAAA,QACX,KAAK,IAAI;AAAA,QACT,aAAa,IAAI;AAAA,QACjB,OAAO,WAAW,QAAQ,IAAI,KAAK,IAAI,KAAK;AAAA,MAC9C,CAAC;AAAA,MACD,MAAM;AAAA,EAIV;AAAA,EACA,OAAO;AAAA;AAgDF,SAAS,aAAa,CAAC,QAAgB,KAAiC;AAAA,EAC7E,MAAM,gBAAgB,kBAAkB,GAAG;AAAA,EAC3C,MAAM,MAAM,oBAAoB,EAC7B,QAAQ,4DAA4D,EACpE,IAAI,QAAQ,aAAa;AAAA,EAC5B,OAAO,MAAM,WAAW,QAAQ,IAAI,KAAK,IAAI,KAAK,IAAI;AAAA;AASjD,SAAS,uBAAuB,CAAC,QAAgB,MAAuC;AAAA,EAC7F,MAAM,UAAU,IAAI;AAAA,EACpB,MAAM,WAAW,IAAI;AAAA,EACrB,MAAM,cAAc,KAAK,QAAQ,oBAAoB,CAAC,OAAO,WAAmB;AAAA,IAC9E,MAAM,MAAM,kBAAkB,MAAM;AAAA,IACpC,IAAI,CAAC,QAAQ,IAAI,GAAG;AAAA,MAAG,QAAQ,IAAI,KAAK,cAAc,QAAQ,GAAG,CAAC;AAAA,IAClE,MAAM,QAAQ,QAAQ,IAAI,GAAG;AAAA,IAC7B,IAAI,UAAU;AAAA,MAAW,OAAO;AAAA,IAChC,SAAS,IAAI,GAAG;AAAA,IAChB,OAAO;AAAA,GACR;AAAA,EACD,OAAO,EAAE,MAAM,aAAa,UAAU,CAAC,GAAG,QAAQ,EAAE;AAAA;AAsBtD,SAAS,kBAAkB,CAAC,OAAyB;AAAA,EACnD,MAAM,QAAQ,IAAI,IAAY;AAAA,IAC5B;AAAA,IACA,mBAAmB,KAAK;AAAA,IACxB,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,QAAQ;AAAA,IAC5C,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,WAAW;AAAA,IAC/C,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,KAAK;AAAA,EAC3C,CAAC;AAAA,EACD,MAAM,OAAO,EAAE;AAAA,EACf,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM;AAAA;AAI/C,SAAS,kBAAkB,CAAC,QAAgB,MAAsB;AAAA,EACvE,MAAM,aAAa,2BAA2B,MAAM,EACjD,QAAQ,CAAC,UAAU,mBAAmB,MAAM,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,IAAI,EAAE,CAAC,EAC5F,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;AAAA,EAC7E,IAAI,WAAW,WAAW;AAAA,IAAG,OAAO;AAAA,EACpC,MAAM,6BAA6B,IAAI;AAAA,EACvC,WAAW,aAAa,YAAY;AAAA,IAClC,MAAM,QAAQ,UAAU,KAAK;AAAA,IAC7B,IAAI,CAAC;AAAA,MAAO;AAAA,IACZ,MAAM,SAAS,2BAA2B,IAAI,KAAK,KAAK,CAAC;AAAA,IACzD,OAAO,KAAK,SAAS;AAAA,IACrB,2BAA2B,IAAI,OAAO,MAAM;AAAA,EAC9C;AAAA,EAEA,IAAI,WAAW;AAAA,EACf,IAAI,SAAS;AAAA,EACb,OAAO,SAAS,KAAK,QAAQ;AAAA,IAC3B,MAAM,QAAQ,2BACX,IAAI,KAAK,WAAW,EAAE,GACrB,KAAK,CAAC,cAAc,KAAK,WAAW,UAAU,MAAM,MAAM,CAAC;AAAA,IAC/D,IAAI,CAAC,OAAO;AAAA,MACV,YAAY,KAAK;AAAA,MACjB,UAAU;AAAA,MACV;AAAA,IACF;AAAA,IACA,YAAY,aAAa,MAAM;AAAA,IAC/B,UAAU,MAAM,KAAK;AAAA,EACvB;AAAA,EACA,OAAO;AAAA;;AD1ST,IAAM,oBAAoB,KAAK,OAAO;AACtC,IAAM,uBAAuB;AAC7B,IAAM,eAAe,IAAI;AACzB,IAAM,oBAAoB;AAC1B,IAAM,kBAAuE;AAAA,EAC3E,kBAAkB,EAAE,UAAU,aAAa,OAAO,WAAW;AAAA,EAC7D,qBAAqB,EAAE,UAAU,YAAY,OAAO,OAAO;AAAA,EAC3D,0BAA0B,EAAE,UAAU,aAAa,OAAO,OAAO;AAAA,EACjE,0BAA0B,EAAE,UAAU,aAAa,OAAO,OAAO;AACnE;AAaA,SAAS,cAAc,CAAC,OAAgB,WAA8C;AAAA,EACpF,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO,UAAU,KAAK;AAAA,EACrD,IAAI,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,MAAM,IAAI,CAAC,UAAU,eAAe,OAAO,SAAS,CAAC;AAAA,EACtF,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EAChD,MAAM,YAAY,OAAO,eAAe,KAAK;AAAA,EAC7C,IAAI,cAAc,OAAO,aAAa,cAAc;AAAA,IAAM,OAAO;AAAA,EACjE,OAAO,OAAO,YACZ,OAAO,QAAQ,KAAK,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,KAAK,eAAe,OAAO,SAAS,CAAC,CAAC,CACrF;AAAA;AAGF,SAAS,mBAAkB,CAAC,OAAyB;AAAA,EACnD,OAAO;AAAA,IACL,GAAG,IAAI,IAAI;AAAA,MACT;AAAA,MACA,mBAAmB,KAAK;AAAA,MACxB,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,QAAQ;AAAA,MAC5C,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,WAAW;AAAA,MAC/C,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,KAAK;AAAA,IAC3C,CAAC;AAAA,EACH,EACG,OAAO,OAAO,EACd,KAAK,CAAC,MAAM,UAAU,MAAM,SAAS,KAAK,MAAM;AAAA;AAGrD,SAAS,YAAY,CACnB,MACA,OACkD;AAAA,EAClD,MAAM,SAAS,gBAAgB;AAAA,EAC/B,IAAI,CAAC,UAAU,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO,EAAE,MAAM;AAAA,EAC3F,MAAM,QAAQ;AAAA,EACd,MAAM,YAAY,MAAM,OAAO;AAAA,EAC/B,IAAI,cAAc,cAAc,CAAC,OAAO,cAAc,SAAS,KAAK,OAAO,SAAS,KAAK,IAAI;AAAA,IAC3F,OAAO,EAAE,MAAM;AAAA,EACjB;AAAA,EACA,MAAM,QAAQ,cAAc,YAAY,uBAAuB,OAAO,SAAS;AAAA,EAC/E,OAAO;AAAA,IACL,OAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,iBAAiB;AAAA,IAC9D,UAAU,EAAE,OAAO,OAAO,OAAO,MAAM;AAAA,EACzC;AAAA;AAGF,SAAS,eAAe,CACtB,OACA,QACA,UACS;AAAA,EACT,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,IAAU,OAAO,OAAO,KAAK;AAAA,EAC5D,MAAM,UAAU;AAAA,EAChB,IAAI,QAAQ,SAAS,UAAU,OAAO,QAAQ,SAAS;AAAA,IAAU,OAAO,OAAO,KAAK;AAAA,EACpF,IAAI;AAAA,IACF,MAAM,SAAS,OAAO,KAAK,MAAM,QAAQ,IAAI,CAAC;AAAA,IAC9C,IAAI,YAAY,UAAU,OAAO,WAAW,UAAU;AAAA,MACpD,MAAM,SAAS;AAAA,MACf,MAAM,aAAa,OAAO,SAAS;AAAA,MACnC,IAAI,OAAO,eAAe,UAAU;AAAA,QAClC,MAAM,mBACJ,OAAO,OAAO,WAAW,YAAY,OAAO,SAAS,SAAS;AAAA,QAChE,IAAI,WAAW,SAAS,SAAS;AAAA,UAC/B,OAAO,SAAS,SAAS,WAAW,MAAM,GAAG,SAAS,KAAK;AAAA,QAC7D,IAAI,oBAAoB,WAAW,SAAS,SAAS;AAAA,UAAO,OAAO,YAAY;AAAA,MACjF;AAAA,IACF;AAAA,IACA,OAAO,KAAK,SAAS,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE;AAAA,IAC3D,MAAM;AAAA,IACN,MAAM,WAAW,OAAO,QAAQ,IAAI;AAAA,IACpC,IAAI,YAAY,OAAO,aAAa,YAAY,SAAS,SAAS,SAAS,OAAO;AAAA,MAChF,OAAO;AAAA,WACF;AAAA,QACH,MAAM,GAAG,SAAS,MAAM,GAAG,SAAS,KAAK;AAAA;AAAA,MAC3C;AAAA,IACF;AAAA,IACA,OAAO,KAAK,SAAS,MAAM,SAAS;AAAA;AAAA;AAIxC,SAAS,YAAY,CACnB,QACA,QACA,UACS;AAAA,EACT,IAAI,CAAC,UAAU,OAAO,WAAW;AAAA,IAAU,OAAO,OAAO,MAAM;AAAA,EAC/D,MAAM,SAAS;AAAA,EACf,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO,IACxC,OAAO,QAAQ,IAAI,CAAC,UAAU,gBAAgB,OAAO,QAAQ,QAAQ,CAAC,IACtE,OAAO;AAAA,EACX,OAAO,OAAO,KAAK,QAAQ,QAAQ,CAAC;AAAA;AAGtC,SAAS,UAAU,CAAC,QAAiB,UAA2B;AAAA,EAC9D,IAAI,OAAO,WAAW;AAAA,IAAU,OAAO;AAAA,EACvC,MAAM,OAAO,OAAO,KAAK,MAAM;AAAA,EAC/B,MAAM,QAAQ,OAAO,KAAK,QAAQ;AAAA,EAClC,OAAO,KAAK,WAAW,MAAM,UAAU,gBAAgB,MAAM,KAAK;AAAA;AAGpE,eAAsB,wBAAwB,CAAC,QAAmD;AAAA,EAChG,MAAM,QAAQ,aAAY,EAAE,EAAE,SAAS,KAAK;AAAA,EAC5C,MAAM,aAAa,MACjB,QAAQ,aAAa,UAAU,OAAO,IAAI,QAC1C,0BAA0B,QAAQ,OAAO,aAAY,CAAC,EAAE,SAAS,KAAK,QACxE;AAAA,EACA,MAAM,gBAAgB,IAAI;AAAA,EAC1B,MAAM,SAAS,IAAI;AAAA,EACnB,MAAM,UAAU,IAAI;AAAA,EAEpB,MAAM,iBAAiB,CAAC,SAAyB;AAAA,IAC/C,IAAI,SAAS;AAAA,IACb,YAAY,MAAM,QAAQ,CAAC,GAAG,aAAa,EAAE,KAC3C,EAAE,QAAQ,WAAW,MAAM,SAAS,KAAK,MAC3C,GAAG;AAAA,MACD,SAAS,OAAO,WAAW,MAAM,aAAa,MAAM;AAAA,IACtD;AAAA,IACA,OAAO;AAAA;AAAA,EAET,MAAM,SAAS,CAAC,UACd,eAAe,OAAO,CAAC,SAAS,eAAe,mBAAmB,QAAQ,IAAI,CAAC,CAAC;AAAA,EAElF,MAAM,gBAAgB,CAAC,YAA8D;AAAA,IACnF,MAAM,KAAK,QAAQ;AAAA,IACnB,IAAI,CAAC,WAAW,QAAQ,OAAO,KAAK;AAAA,MAAG,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,eAAe;AAAA,IACrF,IAAI,QAAQ,OAAO,mBAAmB;AAAA,MACpC,IAAI,OAAO,QAAQ,SAAS;AAAA,QAAU,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,eAAe;AAAA,MACpF,MAAM,cAAc,KAAK,IAAI,IAAI;AAAA,MACjC,YAAY,QAAO,YAAY,QAAQ;AAAA,QACrC,IAAI,QAAQ,YAAY;AAAA,UAAa,OAAO,OAAO,MAAK;AAAA,MAC1D;AAAA,MACA,IAAI,OAAO,QAAQ,mBAAmB;AAAA,QACpC,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,yBAAyB;AAAA,MAC1D;AAAA,MACA,MAAM,cAAc,eAAe,QAAQ,OAAO,CAAC,SAAS;AAAA,QAC1D,MAAM,SAAS,wBAAwB,QAAQ,IAAI;AAAA,QACnD,WAAW,OAAO,OAAO,UAAU;AAAA,UACjC,MAAM,SAAS,cAAc,QAAQ,GAAG;AAAA,UACxC,IAAI,WAAW;AAAA,YAAW;AAAA,UAC1B,WAAW,QAAQ,oBAAmB,MAAM;AAAA,YAAG,cAAc,IAAI,MAAM,GAAG;AAAA,QAC5E;AAAA,QACA,OAAO,OAAO;AAAA,OACf;AAAA,MACD,MAAM,WAAW,aAAa,QAAQ,MAAM,WAAW;AAAA,MACvD,MAAM,QAAQ,aAAY,EAAE,EAAE,SAAS,KAAK;AAAA,MAC5C,OAAO,IAAI,OAAO,EAAE,UAAU,SAAS,UAAU,WAAW,KAAK,IAAI,EAAE,CAAC;AAAA,MACxE,OAAO;AAAA,QACL;AAAA,QACA,IAAI;AAAA,QACJ,OAAO,SAAS;AAAA,QAChB;AAAA,QACA,UAAU,SAAS;AAAA,MACrB;AAAA,IACF;AAAA,IACA,IAAI,QAAQ,OAAO,iBAAiB;AAAA,MAClC,IAAI,OAAO,QAAQ,UAAU,UAAU;AAAA,QACrC,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,gBAAgB;AAAA,MACjD;AAAA,MACA,MAAM,UAAU,OAAO,IAAI,QAAQ,KAAK;AAAA,MACxC,OAAO,OAAO,QAAQ,KAAK;AAAA,MAC3B,IAAI,CAAC,WAAW,QAAQ,YAAY,KAAK,IAAI,IAAI,cAAc;AAAA,QAC7D,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,gBAAgB;AAAA,MACjD;AAAA,MACA,IAAI;AAAA,QACF,MAAM,QAAQ,aAAa,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;AAAA,QAClE,MAAM,aAAa,KAAK,UAAU,KAAK;AAAA,QACvC,IAAI,eAAe,UAAU,MAAM,YAAY;AAAA,UAC7C,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,gCAAgC;AAAA,QACjE;AAAA,QACA,OAAO,EAAE,IAAI,IAAI,MAAM,MAAM;AAAA,QAC7B,MAAM;AAAA,QACN,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,mBAAmB;AAAA;AAAA,IAEtD;AAAA,IACA,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,oBAAoB;AAAA;AAAA,EAGrD,MAAM,SAAiB,cAAa,CAAC,WAAW;AAAA,IAC9C,QAAQ,IAAI,MAAM;AAAA,IAClB,IAAI,UAAU;AAAA,IACd,OAAO,YAAY,MAAM;AAAA,IACzB,OAAO,GAAG,QAAQ,CAAC,UAAkB;AAAA,MACnC,WAAW;AAAA,MACX,IAAI,OAAO,WAAW,OAAO,IAAI,mBAAmB;AAAA,QAClD,OAAO,QAAQ;AAAA,QACf;AAAA,MACF;AAAA,MACA,OAAO,MAAM;AAAA,QACX,MAAM,UAAU,QAAQ,QAAQ;AAAA,CAAI;AAAA,QACpC,IAAI,UAAU;AAAA,UAAG;AAAA,QACjB,MAAM,OAAO,QAAQ,MAAM,GAAG,OAAO;AAAA,QACrC,UAAU,QAAQ,MAAM,UAAU,CAAC;AAAA,QACnC,IAAI,CAAC;AAAA,UAAM;AAAA,QACX,IAAI;AAAA,QACJ,IAAI;AAAA,UACF,WAAW,cAAc,KAAK,MAAM,IAAI,CAA4B;AAAA,UACpE,MAAM;AAAA,UACN,WAAW,EAAE,IAAI,OAAO,OAAO,kBAAkB;AAAA;AAAA,QAEnD,OAAO,MAAM,GAAG,KAAK,UAAU,QAAQ;AAAA,CAAK;AAAA,MAC9C;AAAA,KACD;AAAA,IACD,OAAO,KAAK,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC;AAAA,GAClD;AAAA,EACD,MAAM,IAAI,QAAc,CAAC,eAAe,WAAW;AAAA,IACjD,OAAO,KAAK,SAAS,MAAM;AAAA,IAC3B,OAAO,OAAO,YAAY,aAAa;AAAA,GACxC;AAAA,EACD,WAAU,YAAY,GAAK;AAAA,EAC3B,IAAI,SAAS;AAAA,EAEb,OAAO;AAAA,IACL;AAAA,IACA;AAAA,SACM,MAAK,GAAG;AAAA,MACZ,IAAI;AAAA,QAAQ;AAAA,MACZ,SAAS;AAAA,MACT,OAAO,MAAM;AAAA,MACb,cAAc,MAAM;AAAA,MACpB,WAAW,UAAU;AAAA,QAAS,OAAO,QAAQ;AAAA,MAC7C,MAAM,IAAI,QAAc,CAAC,iBAAiB,OAAO,MAAM,MAAM,aAAa,CAAC,CAAC;AAAA;AAAA,EAEhF;AAAA;;;AIhPK,SAAS,iBAAiB,CAAC,MAAc,YAAY,OAAe;AAAA,EACzE,MAAM,OAAO,KAAK,QAAQ,gCAAqB,GAAG,KAAK;AAAA,EACvD,OAAO,YAAY,KAAK,YAAY,IAAI;AAAA;;;ACRnC,IAAM,0BAA0B;AAShC,SAAS,2BAA2B,CAAC,MAAsB;AAAA,EAChE,MAAM,QAAQ,KAAK,KAAK,EAAE,YAAY;AAAA,EACtC,IAAI,CAAC,6BAA6B,KAAK,KAAK,GAAG;AAAA,IAC7C,MAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AAAA,EACA,OAAO;AAAA;AAGT,GAAG,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOP;AAEM,SAAS,sBAAsB,CAAC,SAAiB,gBAAgC;AAAA,EACtF,OACE,GACG,MACC,2DACF,EACC,IAAI,OAAO,GAAG,yBAAyB;AAAA;AAQvC,SAAS,sBAAsB,CAAC,SAAyB;AAAA,EAC9D,MAAM,QAAQ,GACX,MACC,qDACF,EACC,IAAI,OAAO,GAAG;AAAA,EACjB,OAAO,SAAS;AAAA;AAuFX,SAAS,6BAA6B,CAAC,SAAiB,SAAyB;AAAA,EAEtF,MAAM,OAAO,4BAA4B,OAAO;AAAA,EAChD,IAAI,SAAS;AAAA,IAAyB,MAAM,IAAI,MAAM,wCAAwC;AAAA,EAC9F,MAAM,SAAS,GACZ,MACC;AAAA;AAAA,wBAGF,EACC,IAAI,IAAI;AAAA,EACX,IAAI,OAAO,SAAS,GAAG;AAAA,IACrB,MAAM,WAAW,OAAO,IAAI,CAAC,UAAU,GAAG,MAAM,UAAU,MAAM,KAAK,EAAE,KAAK,IAAI;AAAA,IAChF,MAAM,IAAI,MAAM,YAAY,wBAAwB,OAAO,oBAAoB,WAAW;AAAA,EAC5F;AAAA,EACA,OAAO;AAAA;AAGF,SAAS,oBAAoB,CAAC,SAAiB,SAA0B;AAAA,EAC9E,MAAM,OAAO,8BAA8B,SAAS,OAAO;AAAA,EAC3D,MAAM,SAAS,GACZ,MAAM,8DAA8D,EACpE,IAAI,SAAS,IAAI;AAAA,EACpB,OAAO,OAAO,OAAO,WAAW,CAAC,IAAI;AAAA;;;AVlEvC,SAAS,2BAA2B,CAAC,aAA8B;AAAA,EACjE,MAAM,OAAO,SAAQ,oBAAoB;AAAA,EACzC,MAAM,SAAS,SAAQ,WAAW;AAAA,EAClC,IAAI,SAAQ,MAAM,MAAM,MAAM;AAAA,IAC5B,MAAM,IAAI,MAAM,4DAA4D,QAAQ;AAAA,EACtF;AAAA,EACA,MAAM,UAAU,YAAW,MAAM;AAAA,EACjC,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC/C,OAAO;AAAA;AAuBF,SAAS,eAAe,CAAC,QAAgB,OAAmC;AAAA,EACjF,OAAO,8BAA8B,QAAQ,KAAK,EAAE;AAAA;AAG/C,SAAS,6BAA6B,CAC3C,QACA,OAC0B;AAAA,EAC1B,OAAO,uBAAuB,YAAY,oBAAoB,QAAQ,KAAK,CAAC;AAAA;AAG9E,SAAS,mBAAmB,CAAC,QAAgB,OAAqD;AAAA,EAChG,IAAI,CAAC;AAAA,IAAO,OAAO,YAAY,oBAAoB,QAAQ,SAAS;AAAA,EACpE,MAAM,UAAU,uBAAuB,OAAO,MAAM;AAAA,EACpD,MAAM,UAAU,uBAAuB,KAAK;AAAA,EAC5C,OAAO,YAAY,oBAAoB,SAAS,OAAO;AAAA;AAGlD,SAAS,6BAA6B,CAAC,SAAiB,YAA4B;AAAA,EACzF,OAAO,gCAAgC,SAAS,UAAU,EAAE;AAAA;AAGvD,SAAS,+BAA+B,CAC7C,SACA,YAC0B;AAAA,EAC1B,OAAO,uBAAuB,YAAY,oBAAoB,SAAS,UAAU,CAAC;AAAA;AAGpF,SAAS,sBAAsB,CAAC,SAA6D;AAAA,EAC3F,IACE,CAAC,WACD,OAAO,QAAQ,gBAAgB,YAC/B,CAAC,QAAQ,YAAY,KAAK,KAC1B,OAAO,QAAQ,YAAY,YAC3B,CAAC,QAAQ,QAAQ,KAAK,KACtB,OAAO,QAAQ,YAAY,YAC3B,CAAC,QAAQ,QAAQ,KAAK,GACtB;AAAA,IACA,MAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAAA,EACA,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC;AAAA;AAGrC,SAAS,mBAAmB,CAAC,UAAkB,YAA8C;AAAA,EAC3F,MAAM,UAAU,4BAA4B,UAAU;AAAA,EACtD,MAAM,cAAc,WAAW;AAAA,EAC/B,OAAO;AAAA,IACL;AAAA,IACA,SAAS;AAAA,IACT;AAAA,EACF;AAAA;AAOF,SAAS,uBAAuB,CAAC,SAA+D;AAAA,EAC9F,MAAM,mBAAsC,CAAC;AAAA,EAC7C,WAAW,OAAO;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAG;AAAA,IACD,IAAI,QAAQ,YAAY,SAAS;AAAA,MAAW,iBAAiB,OAAO,QAAQ,YAAY;AAAA,EAC1F;AAAA,EACA,OAAO;AAAA;AAGT,IAAM,qBAAsD,OAAO,OAAO;AAAA,EACxE,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,cAAc;AAAA,EACd,qBAAqB;AAAA,EACrB,qBAAqB;AAAA,EACrB,sBAAsB,CAAC,aAAqB;AAAA,IAC1C,QAAQ,SAAS,YAAY,iBAAiB,WAAW;AAAA,IACzD,OAAO,kBAAkB,SAAS,OAAO;AAAA;AAAA,EAE3C,wBAAwB;AAAA,EACxB,mCAAmC;AAAA,EACnC,sBAAsB;AAAA,EACtB;AACF,CAAC;AAED,IAAI,cAA+C;AAM5C,SAAS,8BAA8B,CAC5C,WACiC;AAAA,EACjC,IAAI,UAAU,OAAO,KAAK,SAAS,OAAO,KAAK,gBAAgB,OAAO,GAAG;AAAA,IACvE,MAAM,IAAI,MAAM,wEAAwE;AAAA,EAC1F;AAAA,EACA,MAAM,OAAO,KAAK,gBAAgB,UAAU;AAAA,EAC5C,IAAI,CAAC,KAAK,YAAY,CAAC,OAAO,UAAU,KAAK,QAAQ,KAAK,CAAC,OAAO,UAAU,KAAK,OAAO,GAAG;AAAA,IACzF,MAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AAAA,EACA,IAAI,KAAK,WAAW,KAAK,KAAK,UAAU,SAAU,KAAK,WAAW,KAAK,SAAS;AAAA,IAC9E,MAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAAA,EACA,IAAI,CAAC,KAAK,YAAY;AAAA,IACpB,MAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AAAA,EACA,IACE,KAAK,2BAA2B,mBAAmB,2BAClD,KAAK,sCACJ,mBAAmB,qCACnB,CAAC,KAAK,wBACN,KAAK,yBAAyB,mBAAmB,wBACjD,KAAK,uBAAuB,mBAAmB,qBACjD;AAAA,IACA,MAAM,IAAI,MACR,qGACF;AAAA,EACF;AAAA,EACA,cAAc,OAAO,OAAO,IAAI;AAAA,EAChC,OAAO;AAAA;AAGF,SAAS,wBAAwB,GAAoC;AAAA,EAC1E,OAAO;AAAA;AAIF,SAAS,0BAA0B,GAAS;AAAA,EACjD,+BAA+B,kBAAkB;AAAA;AAQnD,SAAS,gBAAgB,CAAC,aAAuC;AAAA,EAC/D,MAAM,SAAS,iBAAiB,KAAK,WAAW;AAAA,EAChD,IAAI,UAAU,CAAC,OAAO,GAAI,SAAS,GAAG,GAAG;AAAA,IACvC,OAAO,EAAE,SAAS,SAAS,SAAS,4BAA4B,OAAO,EAAG,EAAE;AAAA,EAC9E;AAAA,EACA,MAAM,QAAQ,yBAAyB,KAAK,WAAW;AAAA,EACvD,IAAI,CAAC;AAAA,IAAO,OAAO,EAAE,SAAS,UAAU,SAAS,kBAAkB,WAAW,EAAE;AAAA,EAChF,OAAO;AAAA,IACL,SAAS,mBAAmB,MAAM,EAAG;AAAA,IACrC,SAAS,4BAA4B,MAAM,EAAG;AAAA,EAChD;AAAA;AAGF,SAAS,YAAY,CAAC,aAA6B;AAAA,EACjD,OAAO,YAAW,QAAQ,EAAE,OAAO,WAAW,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAAA;AAG3E,SAAS,aAAa,CAAC,aAAqB,MAAc;AAAA,EACxD,IAAI;AAAA,IACF,WAAU,YAAY,UAAU,EAAE,WAAW,KAAK,CAAC;AAAA,IACnD,eAAc,MAAK,YAAY,UAAU,aAAa,WAAW,CAAC,GAAG,OAAO,IAAI,CAAC;AAAA,IACjF,OAAO,GAAG;AAAA,IACV,OAAO,KAAK,EAAE,KAAK,GAAG,aAAa,KAAK,GAAG,qCAAqC;AAAA;AAAA;AAIpF,SAAS,cAAc,CAAC,aAAqB;AAAA,EAC3C,IAAI;AAAA,IACF,YAAW,MAAK,YAAY,UAAU,aAAa,WAAW,CAAC,CAAC;AAAA,IAChE,OAAO,GAAG;AAAA,IACV,IAAK,EAA4B,SAAS;AAAA,MAAU;AAAA,IACpD,OAAO,KAAK,EAAE,KAAK,GAAG,YAAY,GAAG,uCAAuC;AAAA;AAAA;AAIhF,SAAS,YAAY,CAAC,aAAoC;AAAA,EACxD,IAAI;AAAA,IACF,MAAM,OAAO,OAAO,SAClB,cAAa,MAAK,YAAY,UAAU,aAAa,WAAW,CAAC,GAAG,MAAM,EAAE,KAAK,GACjF,EACF;AAAA,IACA,OAAO,OAAO,UAAU,IAAI,IAAI,OAAO;AAAA,IACvC,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,IAAM,cAAc,IAAI,KAAK,KAAK;AAYlC,IAAM,YAAY,IAAI;AAEtB,SAAS,mBAAmB,CAAC,aAAqB,SAAuB;AAAA,EACvE,MAAM,WAAW,UAAU,IAAI,WAAW;AAAA,EAC1C,IAAI,YAAY,SAAS,YAAY,SAAS;AAAA,IAC5C,MAAM,IAAI,MACR,iDAAiD,iBAAiB,SAAS,cAAc,UAC3F;AAAA,EACF;AAAA;AAIF,IAAM,YAAY,IAAI;AAGtB,IAAM,WAAW,IAAI;AAQrB,eAAsB,iCAAoC,CACxD,SACA,WACY;AAAA,EACZ,MAAM,OAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK;AAAA,EACxC,MAAM,aAAa,IAAI,IAAI,IAAI;AAAA,EAC/B,UAAS;AAAA,IACP,MAAM,UAAU,KACb,IAAI,CAAC,QAAQ,SAAS,IAAI,GAAG,CAAC,EAC9B,OAAO,CAAC,YAA+C,YAAY,SAAS;AAAA,IAC/E,IAAI,QAAQ,SAAS,GAAG;AAAA,MACtB,MAAM,QAAQ,WAAW,OAAO;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,IAAI;AAAA,IACJ,MAAM,UAAU,IAAI,QAAuB,CAAC,mBAAmB;AAAA,MAC7D,iBAAiB,MAAM,eAAe,IAAI;AAAA,KAC3C;AAAA,IAGD,WAAW,OAAO;AAAA,MAAM,SAAS,IAAI,KAAK,OAAO;AAAA,IAEjD,IAAI;AAAA,MACF,OAAO,MAAM,UAAU;AAAA,aACf,aAAY,CAAC,aAAa;AAAA,UAC9B,IAAI,CAAC,WAAW,IAAI,WAAW,GAAG;AAAA,YAChC,MAAM,IAAI,MAAM,iDAAiD,cAAc;AAAA,UACjF;AAAA,UACA,MAAM,WAAU,UAAU,IAAI,WAAW,GAAG;AAAA,UAC5C,IAAI,CAAC;AAAA,YAAS,OAAO;AAAA,UACrB,aAAa,WAAW;AAAA,UACxB,IAAI,CAAE,MAAM,wBAAwB,UAAS,IAAI,GAAI;AAAA,YACnD,OAAO,KACL,EAAE,aAAa,KAAK,SAAQ,IAAI,GAChC,2DACF;AAAA,YACA,IAAI;AAAA,cACF,SAAQ,KAAK,SAAS;AAAA,cACtB,OAAO,OAAO;AAAA,cACd,OAAO,KACL,EAAE,KAAK,OAAO,aAAa,KAAK,SAAQ,IAAI,GAC5C,6DACF;AAAA;AAAA,YAEF,MAAM,wBAAwB,UAAS,IAAI;AAAA,UAC7C;AAAA,UACA,OAAO;AAAA;AAAA,MAEX,CAAC;AAAA,cACD;AAAA,MACA,WAAW,OAAO,MAAM;AAAA,QACtB,IAAI,SAAS,IAAI,GAAG,MAAM;AAAA,UAAS,SAAS,OAAO,GAAG;AAAA,MACxD;AAAA,MACA,eAAe;AAAA;AAAA,EAEnB;AAAA;AAIK,SAAS,sBAAsB,CAAC,aAAuC;AAAA,EAC5E,OAAO,kCAAkC,CAAC,WAAW,GAAG,GAAG,mBACzD,aAAa,WAAW,CAC1B;AAAA;AAIK,SAAS,gCAAmC,CACjD,SACA,YACA,WAIY;AAAA,EACZ,MAAM,UAAU,gCAAgC,SAAS,UAAU;AAAA,EACnE,OAAO,kCAAkC,CAAC,QAAQ,WAAW,GAAG,OAAO,YAAY;AAAA,IACjF,oBAAoB,QAAQ,aAAa,QAAQ,OAAO;AAAA,IACxD,OAAO,UAAU,SAAS,OAAO;AAAA,GAClC;AAAA;AAII,SAAS,qBAAqB,CAAC,SAAiB,YAAsC;AAAA,EAC3F,OAAO,iCAAiC,SAAS,YAAY,CAAC,WAAW,mBACvE,aAAa,QAAQ,WAAW,CAClC;AAAA;AAiBK,SAAS,2BAA2B,CACzC,SACA,YACA,UAA8C,CAAC,GACH;AAAA,EAC5C,OAAO,iCACL,SACA,YACA,OAAO,WAAW,mBAAmB;AAAA,IACnC,MAAM,UAAU,mBAAmB,QAAQ,WAAW;AAAA,IACtD,MAAM,iBAAiB,MAAM,aAAa,QAAQ,WAAW;AAAA,IAC7D,YAAY,kCAAkC,OAAO;AAAA,IACrD,eAAe,QAAQ,WAAW;AAAA,IAClC,QAAQ,eAAe;AAAA,IACvB,MAAM,uBAAuB,YAAY;AAAA,IACzC,IAAI,CAAC,sBAAsB;AAAA,MACzB,MAAM,IAAI,MAAM,2DAA2D;AAAA,IAC7E;AAAA,IACA,MAAM,cAAc,qBAAqB,OAAO;AAAA,IAChD,QAAQ,cAAc;AAAA,IACtB,OAAO,EAAE,SAAS,gBAAgB,YAAY;AAAA,GAElD;AAAA;AAKF,IAAM,kBAAkB,IAAI;AAErB,SAAS,qBAAqB,CAAC,aAA2B;AAAA,EAC/D,gBAAgB,IAAI,cAAc,gBAAgB,IAAI,WAAW,KAAK,KAAK,CAAC;AAAA;AAGvE,SAAS,uBAAuB,CAAC,aAA2B;AAAA,EACjE,MAAM,QAAQ,gBAAgB,IAAI,WAAW;AAAA,EAC7C,IAAI,UAAU;AAAA,IAAW;AAAA,EACzB,IAAI,SAAS;AAAA,IAAG,gBAAgB,OAAO,WAAW;AAAA,EAC7C;AAAA,oBAAgB,IAAI,aAAa,QAAQ,CAAC;AAAA;AAG1C,SAAS,uBAAuB,CAAC,aAAyC;AAAA,EAC/E,OAAO,UAAU,IAAI,WAAW,GAAG;AAAA;AAI9B,SAAS,gCAAgC,CAAC,YAAwC;AAAA,EACvF,IAAI,CAAC;AAAA,IAAY;AAAA,EACjB,MAAM,WAAW,OAAO,KAAK,UAAU;AAAA,EACvC,WAAW,YAAY,UAAU,OAAO,GAAG;AAAA,IACzC,MAAM,WAAW,OAAO,KAAK,SAAS,UAAU;AAAA,IAChD,IAAI,SAAS,WAAW,SAAS,UAAU,iBAAgB,UAAU,QAAQ,GAAG;AAAA,MAC9E,OAAO,SAAS;AAAA,IAClB;AAAA,EACF;AAAA,EACA;AAAA;AAIK,SAAS,qBAAqB,GAAS;AAAA,EAC5C,YAAY,mBAAmB,CAAC,GAAG,UAAU,KAAK,CAAC,EAAE,IAAI,kBAAkB,CAAC;AAAA;AAa9E,IAAM,4BAA4B,IAAI;AAC/B,SAAS,mBAAmB,CAAC,SAA+C;AAAA,EACjF,0BAA0B,IAAI,OAAO;AAAA,EACrC,OAAO,MAAM,0BAA0B,OAAO,OAAO;AAAA;AAGvD,SAAS,uBAAuB,CAAC,aAAqB,SAAkC;AAAA,EACtF,WAAW,WAAW,2BAA2B;AAAA,IAC/C,IAAI;AAAA,MACF,QAAQ,aAAa,OAAO;AAAA,MAC5B,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK,EAAE,KAAK,aAAa,QAAQ,GAAG,mCAAmC;AAAA;AAAA,EAElF;AAAA;AAOF,SAAS,iBAAiB,GAAkB;AAAA,EAC1C,MAAM,MAAM,KAAK,IAAI;AAAA,EACrB,MAAM,YAAY,sBAChB,WACA,gBAAgB,KAAK,GACrB,SAAS,KAAK,GACd,KACA,WACF;AAAA,EACA,IAAI,WAAW;AAAA,IACb,MAAM,WAAW,UAAU,IAAI,SAAS;AAAA,IACxC,IAAI,CAAC;AAAA,MAAU,OAAO;AAAA,IACtB,MAAM,YAAY,MAAM,SAAS,cAAc,OAAO,QAAQ,CAAC;AAAA,IAC/D,OAAO,KAAK,EAAE,KAAK,WAAW,QAAQ,GAAG,mCAAmC;AAAA,IAC5E,aAAa,SAAS;AAAA,IACtB,OAAO,SAAS;AAAA,EAClB;AAAA,EACA,OAAO;AAAA;AAOT,eAAe,YAAY,GAAoB;AAAA,EAC7C,MAAM,OAAO,MAAM,6BACjB,YAAY,UACZ,YAAY,SACZ,WACA,OAAO,cAAc;AAAA,IAGnB,MAAM,WAAW,MAAM,YAAY,SAAS;AAAA,IAC5C,IAAI;AAAA,MAAU,OAAO,KAAK,EAAE,MAAM,UAAU,GAAG,6CAA6C;AAAA,IAC5F,OAAO;AAAA,GAEX;AAAA,EACA,IAAI,SAAS;AAAA,IAAM,OAAO;AAAA,EAG1B,MAAM,cAAc,kBAAkB;AAAA,EACtC,IAAI,gBAAgB,MAAM;AAAA,IAIxB,MAAM,mBAAmB,WAAW;AAAA,IACpC,OAAO,aAAa;AAAA,EACtB;AAAA,EAEA,MAAM,IAAI,MACR,0CAA0C,UAAU,gCAAgC,YAAY,YAAY,YAAY,UAC1H;AAAA;AAGF,SAAS,WAAW,CAAC,MAAc;AAAA,EACjC,UAAU,OAAO,IAAI;AAAA;AAGvB,SAAS,iBAAiB,CAAC,UAAkB,SAAyB;AAAA,EACpE,OAAO,SAAQ,sBAAsB,OAAO;AAAA;AAI9C,SAAS,kBAAkB,CAAC,aAA6B;AAAA,EACvD,OAAO,YAAY,uBAAuB,WAAW;AAAA;AAQvD,SAAS,YAAY,CAAC,aAAqB,MAA+B;AAAA,EACxE,MAAM,OAAO,UAAU,IAAI,WAAW;AAAA,EACtC,IAAI,CAAC;AAAA,IAAM;AAAA,EAGX,IAAI,KAAK,QAAQ,KAAK;AAAA,IACpB,wBAAwB,KAAK,QAAQ,GAAG;AAAA,EAC1C;AAAA,EAEA,IAAI;AAAA,IACF,KAAK,QAAQ,KAAK,SAAS;AAAA,IAC3B,OAAO,GAAG;AAAA,IACV,OAAO,KAAK,EAAE,KAAK,GAAG,YAAY,GAAG,oCAAoC;AAAA;AAAA,EAEtE,KAAK,YAAY,MAAM;AAAA,EAO5B,KAAK,QAAQ,mBAAmB,OAAO;AAAA,EACvC,KAAK,QAAQ,mBAAmB,MAAM;AAAA,EAEtC,oBAAoB,mBAAmB,WAAW,CAAC;AAAA,EAEnD,IAAI,CAAC,MAAM;AAAA,IAAU,YAAY,KAAK,IAAI;AAAA,EAC1C,UAAU,OAAO,WAAW;AAAA,EAC5B,eAAe,WAAW;AAAA,EAC1B,OAAO,KACL,EAAE,aAAa,MAAM,KAAK,MAAM,UAAU,CAAC,CAAC,MAAM,SAAS,GAC3D,sCACF;AAAA;AAGF,IAAM,kCAAkC,IAAI;AAE5C,SAAS,oBAAoB,CAAC,MAAkC;AAAA,EAC9D,IAAI,OAAO,OAAO,MAAM,CAAC;AAAA,EACzB,KAAK,QAAQ,GAAG,QAAQ,CAAC,UAA2B;AAAA,IAClD,MAAM,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;AAAA,IAC/D,OAAO,OAAO,OAAO,CAAC,MAAM,IAAI,CAAC;AAAA,IACjC,IAAI,KAAK,aAAa,iCAAiC;AAAA,MACrD,OAAO,KAAK,SAAS,KAAK,aAAa,+BAA+B;AAAA,IACxE;AAAA,GACD;AAAA,EACD,OAAO,MAAM,KAAK,SAAS,MAAM,EAAE,KAAK;AAAA;AAGnC,SAAS,iBAAiB,CAC/B,MACA,YAC+C;AAAA,EAC/C,IAAI,UAAU;AAAA,EACd,IAAI,gBAAwC,MAAG;AAAA,IAAG;AAAA;AAAA,EAClD,MAAM,cAAc,MAAM;AAAA,IACxB,MAAM,SAAS,WAAW;AAAA,IAC1B,OAAO,SAAS;AAAA,eAAkB;AAAA,EAA4C,WAAW;AAAA;AAAA,EAE3F,MAAM,UAAU,CAAC,UAAiB;AAAA,IAChC,cACE,IAAI,MAAM,mCAAmC,MAAM,UAAU,YAAY,KAAK;AAAA,MAC5E,OAAO;AAAA,IACT,CAAC,CACH;AAAA;AAAA,EAEF,MAAM,SAAS,CAAC,MAAqB,WAAkC;AAAA,IACrE,cACE,IAAI,MACF,8CAA8C,QAAQ,kBAAkB,UAAU,UAAU,YAAY,GAC1G,CACF;AAAA;AAAA,EAEF,MAAM,UAAU,IAAI,QAAe,CAAC,UAAU,WAAW;AAAA,IACvD,gBAAgB;AAAA,IAChB,KAAK,KAAK,SAAS,OAAO;AAAA,IAC1B,KAAK,KAAK,QAAQ,MAAM;AAAA,GACzB;AAAA,EACD,MAAM,OAAO,MAAM;AAAA,IACjB,IAAI;AAAA,MAAS;AAAA,IACb,UAAU;AAAA,IACV,KAAK,IAAI,SAAS,OAAO;AAAA,IACzB,KAAK,IAAI,QAAQ,MAAM;AAAA;AAAA,EAEzB,OAAO,EAAE,SAAS,KAAK;AAAA;AAczB,eAAe,eAAe,CAC5B,aACA,SACA,cACA,aAAa,YAAY,YACR;AAAA,EACjB,IAAI,CAAC,YAAY,cAAc;AAAA,IAC7B,MAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AAAA,EACA,MAAM,cAAc,mBAAmB,WAAW;AAAA,EAClD,MAAM,OAAO,gBAAiB,MAAM,aAAa;AAAA,EACjD,WAAU,aAAa,EAAE,WAAW,KAAK,CAAC;AAAA,EAE1C,MAAM,UAAU;AAAA,IACd;AAAA,IACA,OAAO,IAAI;AAAA,IAMX;AAAA,IACA;AAAA,IAIA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EAIA,MAAM,QAAQ,YAAY,aAAa;AAAA,EACvC,IAAI,OAAO;AAAA,IACT,YAAY,IAAI;AAAA,IAChB,MAAM,IAAI,MAAM,uEAAuE;AAAA,EACzF;AAAA,EACA,MAAM,aAAa,aAAY,EAAE,EAAE,SAAS,KAAK;AAAA,EACjD,MAAM,aAAa,aAAY,EAAE,EAAE,SAAS,KAAK;AAAA,EACjD,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,cAAc,MAAM,yBAAyB,OAAO;AAAA,IACpD,OAAO,OAAO;AAAA,IACd,YAAY,IAAI;AAAA,IAChB,MAAM;AAAA;AAAA,EAER,MAAM,WAAW;AAAA,OACZ,YAAY,uBAAuB;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,YAAY;AAAA,MAC1B,aAAa,QAAQ;AAAA,IACvB,CAAC;AAAA,IACD,YAAY;AAAA,IACZ,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,IAChB,yBAAyB,YAAY;AAAA,IACrC,wBAAwB,YAAY;AAAA,EACtC;AAAA,EAGA,MAAM,UAAU,WAAW,SAAS,MAAM,IAAI,QAAQ,WAAW;AAAA,EACjE,MAAM,OAAO,WAAW,SAAS,MAAM,IAAI,CAAC,YAAY,GAAG,OAAO,IAAI;AAAA,EACtE,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,YAAY,6BAA6B,SAAS,MAAM,EAAE,aAAa,SAAS,CAAC;AAAA,IACjF,OAAO,KAAK;AAAA,IACZ,MAAM,YAAY,MAAM;AAAA,IACxB,YAAY,IAAI;AAAA,IAChB,MAAM;AAAA;AAAA,EAER,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,MAAM,UAAU,SAAS,UAAU,MAAM;AAAA,MAC9C,OAAO,CAAC,UAAU,UAAU,MAAM;AAAA,MAClC,UAAU;AAAA,MACV,KAAK;AAAA,IACP,CAAC;AAAA,IACD,OAAO,KAAK;AAAA,IACZ,MAAM,YAAY,MAAM;AAAA,IACxB,YAAY,IAAI;AAAA,IAChB,MAAM;AAAA;AAAA,EAER,MAAM,aAAa,qBAAqB,IAAI;AAAA,EAC5C,MAAM,UAAU,kBAAkB,MAAM,UAAU;AAAA,EAOlD,MAAM,qBAAqB,MAAM;AAAA,IAC/B,MAAM,eAAc,mBAAmB,WAAW;AAAA,IAClD,YAAY,kCAAkC,YAAW;AAAA,IACzD,oBAAoB,YAAW;AAAA;AAAA,EAGjC,KAAK,KAAK,SAAS,CAAC,QAAQ;AAAA,IAC1B,OAAO,MAAM,EAAE,KAAK,aAAa,QAAQ,WAAW,KAAK,UAAU,GAAG,sBAAsB;AAAA,IAC5F,IAAI,UAAU,IAAI,WAAW,GAAG,YAAY,MAAM;AAAA,MAChD,YAAY,IAAI;AAAA,MAChB,UAAU,OAAO,WAAW;AAAA,MACvB,YAAY,MAAM;AAAA,MACvB,mBAAmB;AAAA,MACnB,wBAAwB,aAAa;AAAA,QACnC,QAAQ;AAAA,QACR,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,GACD;AAAA,EAED,KAAK,KAAK,QAAQ,CAAC,SAAS;AAAA,IAC1B,OAAO,KAAK,EAAE,aAAa,MAAM,QAAQ,WAAW,KAAK,UAAU,GAAG,uBAAuB;AAAA,IAM7F,MAAM,UAAU,UAAU,IAAI,WAAW,GAAG,YAAY;AAAA,IACxD,IAAI,SAAS;AAAA,MACX,YAAY,IAAI;AAAA,MAChB,UAAU,OAAO,WAAW;AAAA,MACvB,YAAY,MAAM;AAAA,MACvB,mBAAmB;AAAA,MACnB,wBAAwB,aAAa,EAAE,QAAQ,QAAQ,KAAK,CAAC;AAAA,IAC/D;AAAA,GACD;AAAA,EAED,MAAM,MAAM,KAAK,IAAI;AAAA,EACrB,UAAU,IAAI,aAAa;AAAA,IACzB,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX,YAAY;AAAA,IACZ;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EAED,IAAI;AAAA,EACJ,IAAI,QAAQ;AAAA,EACZ,IAAI;AAAA,IACF,QAAQ,MAAM,QAAQ,KAAK;AAAA,OACxB,YACE,MAAM,cAAc,MAAM,YAAY,GAAM,KAC5C,MAAM,qBAAqB,MAAM,UAAU,KAC3C,MAAM,6BAA6B,MAAM,UAAU,GAAI;AAAA,MAC1D,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,eAAe,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,YACvE;AAAA,IACA,QAAQ,KAAK;AAAA;AAAA,EAEf,IAAI,SAAS,CAAC,wBAAwB,UAAU,IAAI,WAAW,GAAG,IAAI,GAAG;AAAA,IACvE,QAAQ;AAAA,IACR,eAAe,IAAI,MACjB,wEAAwE,UACrE,WAAW,IAAI;AAAA;AAAA,EAAc,WAAW,MAAM,GACnD;AAAA,EACF;AAAA,EACA,IAAI,CAAC,OAAO;AAAA,IACV,MAAM,WAAW,KAAK;AAAA,IACtB,aAAa,WAAW;AAAA,IACxB,IAAI;AAAA,MAAc,MAAM;AAAA,IACxB,MAAM,IAAI,MACR,0DAA0D,UACvD,aAAa,OAAO,KAAK,cAAc,gBACvC,WAAW,IAAI;AAAA;AAAA,EAAc,WAAW,MAAM,GACnD;AAAA,EACF;AAAA,EACA,cAAc,aAAa,IAAI;AAAA,EAC/B,OAAO,KACL,EAAE,aAAa,MAAM,KAAK,KAAK,KAAK,OAAO,gBAAgB,UAAU,eAAe,GACpF,wBACF;AAAA,EACA,OAAO;AAAA;AAGT,eAAe,oBAAoB,CAAC,MAAc,YAAsC;AAAA,EACtF,IAAI;AAAA,IACF,MAAM,QAAQ,IAAI,gBAAgB,EAAE,OAAO,gCAAgC,CAAC;AAAA,IAC5E,MAAM,WAAW,MAAM,MAAM,oBAAoB,eAAe,SAAS;AAAA,MACvE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,wBAAwB;AAAA,MAC1B;AAAA,MACA,QAAQ,YAAY,QAAQ,IAAI;AAAA,IAClC,CAAC;AAAA,IACD,MAAM,SAAS,MAAM,OAAO;AAAA,IAC5B,OAAO,SAAS;AAAA,IAChB,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAWX,eAAsB,gBAAgB,CAAC,QAAgB,OAAiC;AAAA,EACtF,MAAM,UAAU,8BAA8B,QAAQ,KAAK;AAAA,EAC3D,QAAQ,aAAa,YAAY;AAAA,EAGjC,MAAM,aAAa,SAAS,IAAI,WAAW;AAAA,EAC3C,IAAI,YAAY;AAAA,IACd,MAAM,OAAO,MAAM;AAAA,IACnB,oBAAoB,aAAa,OAAO;AAAA,IACxC,IAAI,SAAS;AAAA,MAAM,OAAO;AAAA,IAG1B,OAAO,iBAAiB,QAAQ,KAAK;AAAA,EACvC;AAAA,EAUA,MAAM,WAAW,YAA6B;AAAA,IAC5C,MAAM,WAAW,UAAU,IAAI,WAAW;AAAA,IAC1C,oBAAoB,aAAa,OAAO;AAAA,IAExC,IAAI,YAAY,CAAC,SAAS,QAAQ,UAAU,SAAS,QAAQ,aAAa,MAAM;AAAA,MAC9E,IAAI,MAAM,6BAA6B,SAAS,MAAM,SAAS,UAAU,GAAG;AAAA,QAC1E,SAAS,aAAa,KAAK,IAAI;AAAA,QAC/B,OAAO,SAAS;AAAA,MAClB;AAAA,MACA,OAAO,KAAK,EAAE,YAAY,GAAG,yCAAyC;AAAA,MACtE,MAAM,UAAU,SAAS;AAAA,MACzB,aAAa,WAAW;AAAA,MACxB,wBAAwB,aAAa,EAAE,QAAQ,YAAY,CAAC;AAAA,MAC5D,MAAM,mBAAmB,OAAO;AAAA,MAChC,oBAAoB,mBAAmB,WAAW,CAAC;AAAA,IACrD,EAAO,SAAI,UAAU;AAAA,MACnB,YAAY,SAAS,IAAI;AAAA,MACzB,UAAU,OAAO,WAAW;AAAA,MAC5B,oBAAoB,mBAAmB,WAAW,CAAC;AAAA,MACnD,wBAAwB,aAAa;AAAA,QACnC,QAAQ;AAAA,QACR,MAAM,SAAS,QAAQ;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,IAEA,OAAO,gBAAgB,aAAa,OAAO;AAAA,KAC1C,EAAE,QAAQ,MAAM,SAAS,OAAO,WAAW,CAAC;AAAA,EAC/C,SAAS,IAAI,aAAa,OAAO;AAAA,EACjC,OAAO;AAAA;AAGT,eAAe,kBAAkB,CAAC,MAAc,YAAY,MAAqB;AAAA,EAC/E,MAAM,QAAQ,KAAK,IAAI;AAAA,EACvB,OAAO,KAAK,IAAI,IAAI,QAAQ,WAAW;AAAA,IACrC,IAAI,CAAE,MAAM,YAAY,IAAI;AAAA,MAAI;AAAA,IAChC,MAAM,MAAM,GAAG;AAAA,EACjB;AAAA;AAIF,eAAsB,oBAAoB,CAAC,SAAiB,YAAqC;AAAA,EAC/F,MAAM,UAAU,gCAAgC,SAAS,UAAU;AAAA,EACnE,MAAM,cAAc,QAAQ;AAAA,EAC5B,MAAM,aAAa,SAAS,IAAI,WAAW;AAAA,EAC3C,IAAI,YAAY;AAAA,IACd,MAAM,OAAO,MAAM;AAAA,IACnB,oBAAoB,aAAa,QAAQ,OAAO;AAAA,IAChD,MAAM,aAAa,UAAU,IAAI,WAAW,GAAG;AAAA,IAC/C,IAAI,SAAS,QAAQ,cAAe,MAAM,6BAA6B,MAAM,UAAU,GAAI;AAAA,MACzF,OAAO;AAAA,IACT;AAAA,IACA,IAAI,SAAS;AAAA,MAAM,OAAO,qBAAqB,SAAS,UAAU;AAAA,IAClE,MAAM,IAAI,MAAM,oBAAoB,8BAA8B;AAAA,EACpE;AAAA,EAEA,MAAM,WAAW,YAA6B;AAAA,IAC5C,MAAM,gBAAgB,aAAa,WAAW;AAAA,IAC9C,MAAM,WAAW,UAAU,IAAI,WAAW;AAAA,IAC1C,oBAAoB,aAAa,QAAQ,OAAO;AAAA,IAChD,IAAI,kBAAkB,QAAQ,CAAC,UAAU;AAAA,MAKvC,OAAO,KACL,EAAE,aAAa,cAAc,GAC7B,kEACF;AAAA,MACA,YAAY,kCAAkC,mBAAmB,WAAW,CAAC;AAAA,MAC7E,MAAM,mBAAmB,aAAa;AAAA,MACtC,eAAe,WAAW;AAAA,IAC5B;AAAA,IAEA,IAAI,YAAY,CAAC,SAAS,QAAQ,UAAU,SAAS,QAAQ,aAAa,MAAM;AAAA,MAC9E,IAAI,MAAM,6BAA6B,SAAS,MAAM,SAAS,UAAU,GAAG;AAAA,QAC1E,SAAS,aAAa,KAAK,IAAI;AAAA,QAC/B,OAAO,SAAS;AAAA,MAClB;AAAA,MACA,MAAM,UAAU,SAAS;AAAA,MACzB,aAAa,WAAW;AAAA,MACxB,wBAAwB,aAAa,EAAE,QAAQ,YAAY,CAAC;AAAA,MAC5D,MAAM,mBAAmB,OAAO;AAAA,MAChC,oBAAoB,mBAAmB,WAAW,CAAC;AAAA,IACrD,EAAO,SAAI,UAAU;AAAA,MACnB,YAAY,SAAS,IAAI;AAAA,MACzB,UAAU,OAAO,WAAW;AAAA,MAC5B,oBAAoB,mBAAmB,WAAW,CAAC;AAAA,MACnD,wBAAwB,aAAa;AAAA,QACnC,QAAQ;AAAA,QACR,MAAM,SAAS,QAAQ;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,IACA,MAAM,OAAO,MAAM,gBAAgB,aAAa,QAAQ,OAAO;AAAA,IAC/D,MAAM,aAAa,UAAU,IAAI,WAAW,GAAG;AAAA,IAC/C,IAAI,CAAC,cAAc,CAAE,MAAM,6BAA6B,MAAM,UAAU,GAAI;AAAA,MAC1E,aAAa,WAAW;AAAA,MACxB,MAAM,IAAI,MAAM,oBAAoB,4CAA4C;AAAA,IAClF;AAAA,IACA,OAAO;AAAA,KACN,EAAE,QAAQ,MAAM,SAAS,OAAO,WAAW,CAAC;AAAA,EAC/C,SAAS,IAAI,aAAa,OAAO;AAAA,EACjC,OAAO;AAAA;AAIT,eAAsB,qBAAqB,CACzC,SACA,YACA,OACiB;AAAA,EACjB,MAAM,UAAU,gCAAgC,SAAS,UAAU;AAAA,EACnE,MAAM,cAAc,QAAQ;AAAA,EAC5B,MAAM,aAAa,SAAS,IAAI,WAAW;AAAA,EAC3C,IAAI;AAAA,IAAY,MAAM;AAAA,EACtB,oBAAoB,aAAa,QAAQ,OAAO;AAAA,EAChD,MAAM,WAAW,UAAU,IAAI,WAAW;AAAA,EAC1C,IAAI,CAAC;AAAA,IAAU,OAAO;AAAA,EACtB,MAAM,OAAO,SAAS;AAAA,EAEtB,MAAM,QAAQ,IAAI,gBAAgB,EAAE,MAAM,CAAC;AAAA,EAC3C,MAAM,WAAW,MAAM,MAAM,oBAAoB,eAAe,SAAS;AAAA,IACvE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,wBAAwB,SAAS;AAAA,IACnC;AAAA,IACA,QAAQ,YAAY,QAAQ,IAAI;AAAA,EAClC,CAAC;AAAA,EACD,IAAI,CAAC,SAAS;AAAA,IAAI,MAAM,IAAI,MAAM,qCAAqC,SAAS,SAAS;AAAA,EACzF,MAAM,SAAU,MAAM,SAAS,KAAK;AAAA,EACpC,OAAO,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AAAA;AAO7D,eAAe,aAAa,CAC1B,MACA,oBACA,WACkB;AAAA,EAClB,MAAM,QAAQ,KAAK,IAAI;AAAA,EACvB,OAAO,KAAK,IAAI,IAAI,QAAQ,WAAW;AAAA,IACrC,IAAI;AAAA,MACF,MAAM,WAAW,MAAM,MAAM,oBAAoB,eAAe;AAAA,QAC9D,QAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AAAA,MACD,IAAI,SAAS,IAAI;AAAA,QACf,MAAM,SAAkB,MAAM,SAAS,KAAK;AAAA,QAC5C,IAAI,4BAA4B,QAAQ,kBAAkB,GAAG;AAAA,UAC3D,OAAO;AAAA,QACT;AAAA,MACF,EAAO;AAAA,QACL,MAAM,SAAS,MAAM,OAAO;AAAA;AAAA,MAE9B,MAAM;AAAA,IAGR,MAAM,MAAM,GAAG;AAAA,EACjB;AAAA,EACA,OAAO,KAAK,EAAE,MAAM,UAAU,GAAG,yCAAyC;AAAA,EAC1E,OAAO;AAAA;AA0BF,SAAS,sBAAsB,CAAC,QAAgB,OAAuB;AAAA,EAC5E,OAAO,mBAAmB,gBAAgB,QAAQ,KAAK,CAAC;AAAA;AAqJ1D,eAAsB,iBAAiB,GAAkB;AAAA,EACvD,MAAM,QAAQ,CAAC,GAAG,UAAU,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,KAAK,MAAM,KAAK,QAAQ,EAAE;AAAA,EACzF,aAAa,SAAS;AAAA,IAAO,aAAa,GAAG;AAAA,EAE7C,MAAM,QAAQ,IACZ,MAAM,IAAI,SAAS,KAAK,WAAW;AAAA,IACjC,IAAI,MAAM,wBAAwB,MAAM,IAAI;AAAA,MAAG;AAAA,IAC/C,OAAO,KAAK,EAAE,aAAa,KAAK,KAAK,KAAK,IAAI,GAAG,gCAAgC;AAAA,IACjF,IAAI;AAAA,MACF,KAAK,KAAK,SAAS;AAAA,MACnB,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK,EAAE,KAAK,aAAa,KAAK,KAAK,KAAK,IAAI,GAAG,kCAAkC;AAAA;AAAA,IAE1F,IAAI,CAAE,MAAM,wBAAwB,MAAM,IAAI,GAAI;AAAA,MAChD,OAAO,KAAK,EAAE,aAAa,KAAK,KAAK,KAAK,IAAI,GAAG,oCAAoC;AAAA,IACvF;AAAA,GACD,CACH;AAAA;AAUF,YACE,MAAM;AAAA,EACJ,OAAO,kBAAkB,MAAM,MAAM,CAAC;AAAA,EACtC,IAAI;AAAA,IACF,sBAAsB;AAAA,IACtB,OAAO,GAAG;AAAA,IACV,OAAO,MAAM,EAAE,KAAK,EAAE,GAAG,iCAAiC;AAAA;AAAA,GAG9D,KAAK,KAAK,IACZ,EAAE,MAAM;;AWxyCR,eAAsB,2BAA2B,CAC/C,SACA,YAC4C;AAAA,EAC5C,MAAM,UAAU,8BAA8B,SAAS,UAAU;AAAA,EACjE,IAAI,kBAAkB;AAAA,EACtB,MAAM,UAAU,MAAM,4BAA4B,SAAS,SAAS;AAAA,IAClE,cAAc,MAAM;AAAA,MAClB,8BAA8B,SAAS,OAAO;AAAA;AAAA,IAEhD,aAAa,MAAM;AAAA,MACjB,kBAAkB,qBAAqB,SAAS,OAAO;AAAA;AAAA,EAE3D,CAAC;AAAA,EAED,OAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,aAAa,QAAQ;AAAA,IACrB,gBAAgB,QAAQ;AAAA,EAC1B;AAAA;",
+  "debugId": "9ADEFF95734DC7B464756E2164756E21",
   "names": []
 }