@agent-native/core 0.41.1 → 0.43.0

package/dist/extensions/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/extensions/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EACL,UAAU,EACV,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,EACzB,4BAA4B,EAC5B,6BAA6B,EAC7B,gCAAgC,EAChC,iCAAiC,EACjC,oCAAoC,EACpC,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,+BAA+B,EAC/B,+BAA+B,EAC/B,8BAA8B,EAC9B,mCAAmC,EACnC,0BAA0B,EAC1B,6BAA6B,EAC7B,gCAAgC,EAChC,+BAA+B,EAC/B,4BAA4B,EAC5B,+BAA+B,EAC/B,mCAAmC,EACnC,mCAAmC,EACnC,6BAA6B,EAC7B,gCAAgC,EAChC,mCAAmC,GACpC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,GAE3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,GAG5B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,KAAK,GAAG,WAAW,CAAC;IACxB,UAAU;IACV,eAAe;IACf,cAAc;IACd,gBAAgB;CACjB,CAAC,CAAC;AAEH,IAAI,YAAuC,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CACtE,CAAC;YACF,MAAM,8BAA8B,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,2BAA2B,CAClE,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,yBAAyB,CAC9D,CACF,CAAC;YACF,MAAM,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,wBAAwB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,OAAO,CAClB,EAAE;gBACA,CAAC,CAAC,oCAAoC;gBACtC,CAAC,CAAC,iCAAiC,CACtC,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,6BAA6B,CACtE,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACvE,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACrE,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC;YACzE,MAAM,iCAAiC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAC/C,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CACpD,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,0BAA0B,CAChE,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CACjD,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAChD,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,4BAA4B,CACpE,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CACpD,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CACpD,CAAC;YACF,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,iEAAiE;YACjE,8DAA8D;YAC9D,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,6BAA6B,CACtE,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CACpD,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,GAAG,SAAS,CAAC;QACzB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,MAAoC,EACpC,EAAW;IAEX,MAAM,GAAG,GAAG,EAAE;QACZ,CAAC,CAAC;;;mCAG6B;QAC/B,CAAC,CAAC;;uBAEiB,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,IACE,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YAC7C,OAAO,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACxD,OAAO,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EACtD,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,MAAoC,EACpC,EAAW;IAEX,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,MAAM,CAAC,OAAO,CAClB,6DAA6D,CAC9D,CAAC;QACF,OAAO;IACT,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IACE,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC;aACzB,WAAW,EAAE;aACb,QAAQ,CAAC,WAAW,CAAC,EACxB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAAoC,EACpC,EAAW;IAEX,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,GAAW,EAAE,EAAE;QAC3C,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,MAAM,CAAC,OAAO,CACnB,kDAAkD,IAAI,IAAI,GAAG,EAAE,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM;aACV,OAAO,CAAC,oCAAoC,IAAI,IAAI,GAAG,EAAE,CAAC;aAC1D,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE;YAClB,IACE,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC;iBACzB,WAAW,EAAE;iBACb,QAAQ,CAAC,WAAW,CAAC;gBAExB,MAAM,GAAG,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACtD,MAAM,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,MAAM,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;IACrE,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,MAAM,CAAC,OAAO;IAClB,oIAAoI;IACpI,uHAAuH,CACxH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,MAAoC,EACpC,EAAW;IAEX,oEAAoE;IACpE,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE;QAC1D,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM;aACV,OAAO,CAAC,gCAAgC,IAAI,IAAI,GAAG,EAAE,CAAC;aACtD,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE;YAClB,IACE,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC;iBACzB,WAAW,EAAE;iBACb,QAAQ,CAAC,WAAW,CAAC;gBAExB,MAAM,GAAG,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,+BAA+B,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,MAAM,CAAC,+BAA+B,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,yBAAyB,CAAC;QACxB,IAAI,EAAE,WAAW;QACjB,aAAa,EAAE,UAAU;QACzB,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,MAAM;QACnB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE;QACpB,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,0BAA0B;QAC1B,WAAW,EAAE,KAAK;QAClB,6BAA6B,EAAE,IAAI;KACpC,CAAC,CAAC;AACL,CAAC;AAiFD,SAAS,SAAS,CAAC,MAA6B;IAC9C,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,SAAS,MAAM,CAAC,KAAK,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAA2C,EAC3C,MAA6B;IAE7B,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,GAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACzD,wBAAwB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,UAAU,KAAK,KAAK,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC1C,wBAAwB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE;SACrB,MAAM,CAAC;QACN,aAAa,EAAE,eAAe,CAAC,aAAa;QAC5C,WAAW,EAAE,eAAe,CAAC,WAAW;KACzC,CAAC;SACD,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAG9C,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YACnC,wBAAwB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;YACzC,wBAAwB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,EAAU;IAEV,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAA6B,CAAC;IAChD,OAAO,GAAG,CAAC,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAU;IAEV,MAAM,sBAAsB,EAAE,CAAC;IAC/B,OAAO,2BAA2B,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,4BAA4B,CACnC,OAAgC;IAEhC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IACxD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,OAAgC;IAEhC,MAAM,aAAa,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEvC,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,YAAY,CAAC;YACX,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,GAAG;YACR,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CACf,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,MAAM,WAAW,CACf,SAAS,EACT,2BAA2B,EAC3B,0BAA0B,CAAC,MAAM,CAAC,CACnC,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,EAAU,EACV,gBAAyC,EAAE;IAE3C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,sBAAsB,CAAC;QAC3B,GAAG,aAAa;QAChB,GAAG,CAAC,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,4BAA4B,CACnC,GAA2B,EAC3B,cAAuB;IAEvB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;QAClC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;QACtB,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI;QACrD,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE;QACnD,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI;QACtC,UAAU;QACV,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACvE,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,OAAO,CAAC,MAAM;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CACzC,GAAiB,EACjB,cAAuB;IAEvB,OAAO;QACL,EAAE,EAAE,WAAW,GAAG,CAAC,EAAE,EAAE;QACvB,WAAW,EAAE,GAAG,CAAC,EAAE;QACnB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,UAAU;QACrB,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,mBAAmB,EAAE,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IACpD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE,oEAAoE;QACzE,IAAI,EAAE,CAAC,WAAW,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,KAAK,GAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAS,EAAE,OAAO,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IACpD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE,uDAAuD;QAC5D,IAAI,EAAE,CAAC,WAAW,CAAC;KACpB,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,GAAiB,EACjB,SAAoC,EACpC,OAAe;IAEf,MAAM,OAAO,GAAG,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE;;;wDAG+C;QACpD,IAAI,EAAE;YACJ,SAAS;YACT,GAAG,CAAC,EAAE;YACN,OAAO;YACP,SAAS;YACT,OAAO;YACP,GAAG,CAAC,IAAI;YACR,GAAG,CAAC,WAAW;YACf,GAAG,CAAC,OAAO;YACX,GAAG,CAAC,IAAI;YACR,iBAAiB,EAAE;YACnB,GAAG,CAAC,UAAU;YACd,GAAG,CAAC,KAAK;YACT,GAAG,CAAC,UAAU;YACd,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,GAAG,CAAC,EAAE;QACnB,OAAO;QACP,SAAS;QACT,OAAO;QACP,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,iBAAiB,EAAE;QAC/B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;KAClC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,GAAiB;IAEjB,IAAI,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO;IAC9C,MAAM,8BAA8B,CAClC,GAAG,EACH,UAAU,EACV,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAAoB,EACpB,KAAmB;IAEnB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,yBAAyB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC;AACjD,CAAC;AAED,SAAS,sBAAsB,CAC7B,aAAqB,EACrB,YAAoB;IAEpB,MAAM,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,eAAe,CAAC;IAC3C,OAAO,qBAAqB,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,YAAY,SAAS,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,WAAmB,EACnB,OAAe,EACf,cAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE;;;;cAIK;QACV,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;KAC7B,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAuC,CAAC;IACnE,OAAO,GAAG,CAAC,CAAC,CAAC,4BAA4B,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACrE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CACrB,UAAkB,EAClB,SAAiB;IAEjB,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3C,IAAI,KAAK,GAAG,MAAM;QAAE,OAAO,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CACxD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAChC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACN,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;oBACpB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;oBACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAA+B,EAAE,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC,IAAI,CAAC,CAAC;YACP,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/C,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAgB,EAChB,KAAe;IAEf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OACE,MAAM,GAAG,MAAM,CAAC,MAAM;QACtB,MAAM,GAAG,KAAK,CAAC,MAAM;QACrB,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IAED,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OACE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM;QAC/B,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;QAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,EACvE,CAAC;QACD,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IAED,OAAO;QACL,GAAG,MAAM;aACN,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC;aAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,GAAG,MAAM;aACN,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;aACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,GAAG,KAAK;aACL,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;aACpC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,GAAG,MAAM;aACN,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;aAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAgC;IAKjD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC1E,OAAO;QACL,UAAU;QACV,YAAY;QACZ,OAAO,EAAE,UAAU,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC;KAC5C,CAAC;AACJ,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAiC,EAAE;IAEnC,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,sEAAsE;IACtE,qEAAqE;IACrE,2CAA2C;IAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,qBAAqB;QACzC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,KAAK,CAAC,CAAmB,CAAC;IAEnC,IAAI,OAAO,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,SAAS,GAAG,MAAM,mCAAmC,EAAE,CAAC;IAC9D,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU;IAC3C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpD,OAAQ,MAAM,EAAE,QAAqC,IAAI,IAAI,CAAC;AAChE,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAU,EACV,UAAuC,EAAE;IAEzC,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAE1B,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE;;;;;cAKK;QACV,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC;KAClB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC9C,4BAA4B,CAAC,GAA6B,EAAE,cAAc,CAAC,CAC5E,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,CAAC,kCAAkC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAU,EACV,YAA6B;IAE7B,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,KAAK,GACT,SAAS;QACT,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC;YAChD,CAAC,CAAC,kCAAkC,CAAC,SAAS,EAAE,IAAI,CAAC;YACrD,CAAC,CAAC,IAAI,CAAC,CAAC;IACZ,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,QAAQ,GACZ,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,wBAAwB,CAAC,EAAE,EAAE,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,MAAM,eAAe,GAAG,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;IAChD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAE7D,OAAO;QACL,KAAK;QACL,QAAQ;QACR,IAAI;QACJ,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,EAAU,EACV,YAA6B;IAE7B,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,YAAY,GAAG,MAAM,KAAK,EAAE;SAC/B,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAA6B,CAAC;IAC7D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,EAAE;SACV,MAAM,CAAC,UAAU,CAAC;SAClB,GAAG,CAAC;QACH,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAEhC,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE;SACvB,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,GAAG,GAAI,IAAI,CAAC,CAAC,CAAkB,IAAI,IAAI,CAAC;IAC9C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,8BAA8B,CAClC,GAAG,EACH,SAAS,EACT,oBAAoB,OAAO,EAAE,CAC9B,CAAC;QACF,MAAM,sBAAsB,CAAC;YAC3B,GAAG,aAAa;YAChB,GAAG,CAAC,MAAM,4BAA4B,CAAC,GAAG,CAAC,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAyB;IAEzB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAiB;QACxB,EAAE;QACF,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,KAAK,IAAI,IAAI;QACpB,UAAU,EAAE,SAAS;KACtB,CAAC;IACF,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,8BAA8B,CAAC,GAAG,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACzE,MAAM,sBAAsB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAU,EACV,IAAyB;IAEzB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACjC,wDAAwD;QACxD,qEAAqE;QACrE,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,IAAI,cAAc,CACtB,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,OAAO,GAA4B;QACvC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACtD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAC3E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACtD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACxE,MAAM,YAAY,GAAG,MAAM,EAAE;SAC1B,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAA6B,CAAC;IAC7D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAI,IAAI,CAAC,CAAC,CAAkB,IAAI,IAAI,CAAC;IAC9C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,8BAA8B,CAClC,GAAG,EACH,iBAAiB,EACjB,uBAAuB,CAAC,QAAQ,EAAE,GAAG,CAAC,CACvC,CAAC;QACF,MAAM,sBAAsB,CAAC;YAC3B,GAAG,aAAa;YAChB,GAAG,CAAC,MAAM,4BAA4B,CAAC,GAAG,CAAC,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAU,EACV,IAAgC;IAEhC,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IAEnB,IACE,IAAI,CAAC,OAAO,KAAK,SAAS;QAC1B,IAAI,CAAC,OAAO,KAAK,SAAS;QAC1B,IAAI,CAAC,KAAK,KAAK,SAAS;QACxB,CAAC,IAAI,CAAC,MAAM,EACZ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,EAAE;SAC1B,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAiB,CAAC;IACjD,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC;IACzC,MAAM,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAExE,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE;SACL,MAAM,CAAC,UAAU,CAAC;SAClB,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;SACrE,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAI,IAAI,CAAC,CAAC,CAAkB,IAAI,IAAI,CAAC;IAC9C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,8BAA8B,CAClC,GAAG,EACH,gBAAgB,EAChB,sBAAsB,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CACrD,CAAC;QACF,MAAM,sBAAsB,CAAC;YAC3B,GAAG,aAAa;YAChB,GAAG,CAAC,MAAM,4BAA4B,CAAC,GAAG,CAAC,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU;IAC9C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAA6B,CAAC;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,yCAAyC;QAC9C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,4CAA4C;QACjD,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACzE,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC;IAGvD,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAEjC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC;SACnD,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAU;IAC5C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE;;oDAE2C;QAChD,IAAI,EAAE,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC;KACzC,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU;IAC9C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEzD,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,0EAA0E;QAC/E,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAU;IAClD,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEzD,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,4EAA4E;QACjF,IAAI,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;KAChC,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC;QAC3B,GAAG,aAAa;QAChB,GAAG,CAAC,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;KAC3C,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAAU;IACpD,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEzD,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,kFAAkF;QACvF,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;KAChB,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC;QAC3B,GAAG,aAAa;QAChB,GAAG,CAAC,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;KAC3C,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { and, eq, isNull } from \"drizzle-orm\";\nimport { appStatePut } from \"../application-state/store.js\";\nimport { getDbExec, isPostgres, retryOnDdlRace } from \"../db/client.js\";\nimport { createGetDb } from \"../db/create-get-db.js\";\nimport { recordChange } from \"../server/poll.js\";\nimport {\n  accessFilter,\n  assertAccess,\n  resolveAccess,\n  ForbiddenError,\n} from \"../sharing/access.js\";\nimport {\n  getRequestUserEmail,\n  getRequestOrgId,\n} from \"../server/request-context.js\";\nimport { registerShareableResource } from \"../sharing/registry.js\";\nimport {\n  extensions,\n  extensionHides,\n  extensionShares,\n  extensionHistory,\n  EXTENSIONS_CREATE_SQL,\n  EXTENSIONS_CREATE_SQL_PG,\n  EXTENSION_SHARES_CREATE_SQL,\n  EXTENSION_SHARES_CREATE_SQL_PG,\n  EXTENSION_DATA_CREATE_SQL,\n  EXTENSION_DATA_CREATE_SQL_PG,\n  EXTENSION_DATA_ITEM_INDEX_SQL,\n  EXTENSION_DATA_ITEM_INDEX_SQL_PG,\n  EXTENSION_DATA_DROP_OLD_INDEX_SQL,\n  EXTENSION_DATA_DROP_OLD_INDEX_SQL_PG,\n  EXTENSIONS_OWNER_INDEX_SQL,\n  EXTENSIONS_ORG_INDEX_SQL,\n  EXTENSIONS_UPDATED_INDEX_SQL,\n  EXTENSIONS_HIDDEN_AT_COLUMN_SQL,\n  EXTENSIONS_HIDDEN_BY_COLUMN_SQL,\n  EXTENSIONS_HIDDEN_AT_INDEX_SQL,\n  EXTENSION_SHARES_RESOURCE_INDEX_SQL,\n  EXTENSION_HIDES_CREATE_SQL,\n  EXTENSION_HIDES_CREATE_SQL_PG,\n  EXTENSION_HIDES_UNIQUE_INDEX_SQL,\n  EXTENSION_HIDES_OWNER_INDEX_SQL,\n  EXTENSION_HISTORY_CREATE_SQL,\n  EXTENSION_HISTORY_CREATE_SQL_PG,\n  EXTENSION_HISTORY_VERSION_INDEX_SQL,\n  EXTENSION_HISTORY_CREATED_INDEX_SQL,\n  EXTENSION_CONSENTS_CREATE_SQL,\n  EXTENSION_CONSENTS_CREATE_SQL_PG,\n  EXTENSION_CONSENTS_VIEWER_INDEX_SQL,\n} from \"./schema.js\";\nimport {\n  EXTENSION_CHANGE_MARKER_KEY,\n  extensionChangeMarkerSession,\n  extensionChangeMarkerValue,\n  type ExtensionChangeTarget,\n} from \"./change-marker.js\";\nimport {\n  applyExtensionContentUpdate,\n  type ExtensionContentEdit,\n  type ExtensionLegacyPatch,\n} from \"./content-patch.js\";\n\nconst getDb = createGetDb({\n  extensions,\n  extensionShares,\n  extensionHides,\n  extensionHistory,\n});\n\nlet _initPromise: Promise<void> | undefined;\n\nexport async function ensureExtensionsTables(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      const pg = isPostgres();\n      await retryOnDdlRace(() =>\n        client.execute(pg ? EXTENSIONS_CREATE_SQL_PG : EXTENSIONS_CREATE_SQL),\n      );\n      await migrateMisnamedExtensionsTable(client, pg);\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_SHARES_CREATE_SQL_PG : EXTENSION_SHARES_CREATE_SQL,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_DATA_CREATE_SQL_PG : EXTENSION_DATA_CREATE_SQL,\n        ),\n      );\n      await ensureExtensionDataItemId(client, pg);\n      await ensureExtensionDataScope(client, pg);\n      await client.execute(\n        pg\n          ? EXTENSION_DATA_DROP_OLD_INDEX_SQL_PG\n          : EXTENSION_DATA_DROP_OLD_INDEX_SQL,\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_DATA_ITEM_INDEX_SQL_PG : EXTENSION_DATA_ITEM_INDEX_SQL,\n        ),\n      );\n      await retryOnDdlRace(() => client.execute(EXTENSIONS_OWNER_INDEX_SQL));\n      await retryOnDdlRace(() => client.execute(EXTENSIONS_ORG_INDEX_SQL));\n      await retryOnDdlRace(() => client.execute(EXTENSIONS_UPDATED_INDEX_SQL));\n      await ensureExtensionsGlobalHideColumns(client, pg);\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSIONS_HIDDEN_AT_INDEX_SQL),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_SHARES_RESOURCE_INDEX_SQL),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_HIDES_CREATE_SQL_PG : EXTENSION_HIDES_CREATE_SQL,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_HIDES_UNIQUE_INDEX_SQL),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_HIDES_OWNER_INDEX_SQL),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_HISTORY_CREATE_SQL_PG : EXTENSION_HISTORY_CREATE_SQL,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_HISTORY_VERSION_INDEX_SQL),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_HISTORY_CREATED_INDEX_SQL),\n      );\n      // tool_consents was introduced for an audit-C1 per-viewer consent\n      // gate that we removed once we settled on intra-org trust as the\n      // baseline. The table is kept (additive — never drop) so deploys\n      // that already created it stay healthy; the runtime consent code\n      // is gone. Idempotent CREATE IF NOT EXISTS for fresh schemas.\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_CONSENTS_CREATE_SQL_PG : EXTENSION_CONSENTS_CREATE_SQL,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_CONSENTS_VIEWER_INDEX_SQL),\n      );\n    })();\n  }\n\n  try {\n    await _initPromise;\n  } catch (err) {\n    _initPromise = undefined;\n    throw err;\n  }\n}\n\nasync function migrateMisnamedExtensionsTable(\n  client: ReturnType<typeof getDbExec>,\n  pg: boolean,\n): Promise<void> {\n  const sql = pg\n    ? `INSERT INTO tools (id, name, description, content, icon, created_at, updated_at, owner_email, org_id, visibility)\n       SELECT id, name, description, content, icon, created_at, updated_at, owner_email, org_id, visibility\n       FROM extensions\n       ON CONFLICT (id) DO NOTHING`\n    : `INSERT OR IGNORE INTO tools (id, name, description, content, icon, created_at, updated_at, owner_email, org_id, visibility)\n       SELECT id, name, description, content, icon, created_at, updated_at, owner_email, org_id, visibility\n       FROM extensions`;\n\n  try {\n    await client.execute(sql);\n  } catch (err: any) {\n    const message = String(err?.message ?? err).toLowerCase();\n    if (\n      message.includes(\"no such table: extensions\") ||\n      message.includes('relation \"extensions\" does not exist') ||\n      message.includes(\"relation extensions does not exist\")\n    ) {\n      return;\n    }\n    throw err;\n  }\n}\n\nasync function ensureExtensionDataItemId(\n  client: ReturnType<typeof getDbExec>,\n  pg: boolean,\n): Promise<void> {\n  if (pg) {\n    await client.execute(\n      `ALTER TABLE tool_data ADD COLUMN IF NOT EXISTS item_id TEXT`,\n    );\n    return;\n  }\n\n  // Keep this additive: legacy rows with item_id=id are still read correctly\n  // through COALESCE(item_id, id), so SQLite never needs a table rebuild here.\n  try {\n    await client.execute(`ALTER TABLE tool_data ADD COLUMN item_id TEXT`);\n  } catch (err: any) {\n    if (\n      !String(err?.message ?? err)\n        .toLowerCase()\n        .includes(\"duplicate\")\n    ) {\n      throw err;\n    }\n  }\n}\n\nasync function ensureExtensionDataScope(\n  client: ReturnType<typeof getDbExec>,\n  pg: boolean,\n): Promise<void> {\n  const addCol = (name: string, def: string) => {\n    if (pg) {\n      return client.execute(\n        `ALTER TABLE tool_data ADD COLUMN IF NOT EXISTS ${name} ${def}`,\n      );\n    }\n    return client\n      .execute(`ALTER TABLE tool_data ADD COLUMN ${name} ${def}`)\n      .catch((err: any) => {\n        if (\n          !String(err?.message ?? err)\n            .toLowerCase()\n            .includes(\"duplicate\")\n        )\n          throw err;\n      });\n  };\n  await addCol(\"scope\", \"TEXT NOT NULL DEFAULT 'user'\");\n  await addCol(\"org_id\", \"TEXT\");\n  await addCol(\"scope_key\", \"TEXT NOT NULL DEFAULT 'local@localhost'\");\n  // One-time backfill migration: replaces the dev-mode DEFAULT scope_key\n  // with each row's real owner_email. Not a per-request fallback.\n  await client.execute(\n    // guard:allow-localhost-fallback — one-time backfill migration replacing dev-mode default scope_key with the row's real owner_email\n    `UPDATE tool_data SET scope_key = owner_email WHERE scope_key = 'local@localhost' AND owner_email != 'local@localhost'`,\n  );\n}\n\nasync function ensureExtensionsGlobalHideColumns(\n  client: ReturnType<typeof getDbExec>,\n  pg: boolean,\n): Promise<void> {\n  // Global (admin) hide columns on the `tools` row, distinct from the\n  // per-user `tool_hidden_extensions` table. Additive — keep this idempotent\n  // for both dialects. Postgres supports `ADD COLUMN IF NOT EXISTS`; SQLite\n  // does not, so we drop the clause and swallow the duplicate-column error.\n  const addCol = (pgSql: string, name: string, def: string) => {\n    if (pg) {\n      return retryOnDdlRace(() => client.execute(pgSql));\n    }\n    return client\n      .execute(`ALTER TABLE tools ADD COLUMN ${name} ${def}`)\n      .catch((err: any) => {\n        if (\n          !String(err?.message ?? err)\n            .toLowerCase()\n            .includes(\"duplicate\")\n        )\n          throw err;\n      });\n  };\n  await addCol(EXTENSIONS_HIDDEN_AT_COLUMN_SQL, \"hidden_at\", \"TEXT\");\n  await addCol(EXTENSIONS_HIDDEN_BY_COLUMN_SQL, \"hidden_by\", \"TEXT\");\n}\n\nexport function registerExtensionsShareable() {\n  registerShareableResource({\n    type: \"extension\",\n    resourceTable: extensions,\n    sharesTable: extensionShares,\n    displayName: \"Extension\",\n    titleColumn: \"name\",\n    getDb: () => getDb(),\n    // Extension HTML executes inside an iframe and calls actions / SQL / the\n    // secrets-injecting proxy as the *viewer*. A public extension would let a\n    // random authenticated user run code with the viewer's credentials — and\n    // a malicious shared extension could re-share itself wider. Lock both:\n    // no public visibility, and individual user shares must already be (or\n    // be invited to) the org.\n    allowPublic: false,\n    requireOrgMemberForUserShares: true,\n  });\n}\n\nexport interface ExtensionRow {\n  id: string;\n  name: string;\n  description: string;\n  content: string;\n  icon: string | null;\n  createdAt: string;\n  updatedAt: string;\n  hiddenAt: string | null;\n  hiddenBy: string | null;\n  ownerEmail: string;\n  orgId: string | null;\n  visibility: \"private\" | \"org\" | \"public\";\n}\n\nexport type ExtensionHistoryOperation =\n  | \"create\"\n  | \"baseline\"\n  | \"metadata-update\"\n  | \"content-update\"\n  | \"restore\";\n\nexport interface ExtensionHistoryEntry {\n  id: string;\n  extensionId: string;\n  version: number;\n  operation: ExtensionHistoryOperation | string;\n  summary: string;\n  name: string;\n  description: string;\n  content?: string;\n  icon: string | null;\n  actorEmail: string | null;\n  ownerEmail: string;\n  orgId: string | null;\n  visibility: \"private\" | \"org\" | \"public\";\n  createdAt: string;\n  persisted: boolean;\n  contentLength: number;\n}\n\nexport interface ExtensionHistoryDiffLine {\n  type: \"equal\" | \"insert\" | \"delete\";\n  text: string;\n}\n\nexport interface ExtensionHistoryDetail {\n  entry: ExtensionHistoryEntry;\n  previous: ExtensionHistoryEntry | null;\n  diff: ExtensionHistoryDiffLine[];\n  stats: {\n    addedLines: number;\n    deletedLines: number;\n    changed: boolean;\n  };\n}\n\ninterface RawExtensionHistoryRow {\n  id: string;\n  tool_id?: string;\n  extensionId?: string;\n  version: number | string;\n  operation: string;\n  summary?: string | null;\n  name: string;\n  description?: string | null;\n  content?: string | null;\n  icon?: string | null;\n  actor_email?: string | null;\n  actorEmail?: string | null;\n  owner_email?: string | null;\n  ownerEmail?: string | null;\n  org_id?: string | null;\n  orgId?: string | null;\n  visibility?: string | null;\n  created_at?: string;\n  createdAt?: string;\n}\n\nfunction targetKey(target: ExtensionChangeTarget): string | null {\n  if (target.owner) return `owner:${target.owner}`;\n  if (target.orgId) return `org:${target.orgId}`;\n  return null;\n}\n\nfunction addExtensionChangeTarget(\n  targets: Map<string, ExtensionChangeTarget>,\n  target: ExtensionChangeTarget,\n): void {\n  const key = targetKey(target);\n  if (key) targets.set(key, target);\n}\n\nasync function extensionChangeTargetsForRow(\n  row: ExtensionRow,\n): Promise<ExtensionChangeTarget[]> {\n  const targets = new Map<string, ExtensionChangeTarget>();\n  addExtensionChangeTarget(targets, { owner: row.ownerEmail });\n  if (row.visibility === \"org\" && row.orgId) {\n    addExtensionChangeTarget(targets, { orgId: row.orgId });\n  }\n\n  const db = getDb();\n  const shares = (await db\n    .select({\n      principalType: extensionShares.principalType,\n      principalId: extensionShares.principalId,\n    })\n    .from(extensionShares)\n    .where(eq(extensionShares.resourceId, row.id))) as Array<{\n    principalType: \"user\" | \"org\";\n    principalId: string;\n  }>;\n\n  for (const share of shares) {\n    if (share.principalType === \"user\") {\n      addExtensionChangeTarget(targets, { owner: share.principalId });\n    } else if (share.principalType === \"org\") {\n      addExtensionChangeTarget(targets, { orgId: share.principalId });\n    }\n  }\n\n  return Array.from(targets.values());\n}\n\nasync function extensionChangeTargetsForId(\n  id: string,\n): Promise<ExtensionChangeTarget[]> {\n  const db = getDb();\n  const rows = await db.select().from(extensions).where(eq(extensions.id, id));\n  const row = rows[0] as ExtensionRow | undefined;\n  return row ? extensionChangeTargetsForRow(row) : [];\n}\n\nexport async function getExtensionChangeTargets(\n  id: string,\n): Promise<ExtensionChangeTarget[]> {\n  await ensureExtensionsTables();\n  return extensionChangeTargetsForId(id);\n}\n\nfunction dedupeExtensionChangeTargets(\n  targets: ExtensionChangeTarget[],\n): ExtensionChangeTarget[] {\n  const unique = new Map<string, ExtensionChangeTarget>();\n  for (const target of targets) {\n    const key = targetKey(target);\n    if (key) unique.set(key, target);\n  }\n  return Array.from(unique.values());\n}\n\nasync function notifyExtensionChanged(\n  targets: ExtensionChangeTarget[],\n): Promise<void> {\n  const uniqueTargets = dedupeExtensionChangeTargets(targets);\n  if (uniqueTargets.length === 0) return;\n\n  for (const target of uniqueTargets) {\n    recordChange({\n      source: \"extensions\",\n      type: \"change\",\n      key: \"*\",\n      ...(target.owner ? { owner: target.owner } : {}),\n      ...(target.orgId ? { orgId: target.orgId } : {}),\n    });\n  }\n\n  await Promise.all(\n    uniqueTargets.map(async (target) => {\n      const sessionId = extensionChangeMarkerSession(target);\n      if (!sessionId) return;\n      await appStatePut(\n        sessionId,\n        EXTENSION_CHANGE_MARKER_KEY,\n        extensionChangeMarkerValue(target),\n      );\n    }),\n  );\n}\n\nexport async function notifyExtensionChangeForResource(\n  id: string,\n  beforeTargets: ExtensionChangeTarget[] = [],\n): Promise<void> {\n  await ensureExtensionsTables();\n  await notifyExtensionChanged([\n    ...beforeTargets,\n    ...(await extensionChangeTargetsForId(id)),\n  ]);\n}\n\nfunction extensionHistoryEntryFromRaw(\n  row: RawExtensionHistoryRow,\n  includeContent: boolean,\n): ExtensionHistoryEntry {\n  const content = row.content ?? \"\";\n  const visibility = normalizeVisibility(row.visibility);\n  return {\n    id: row.id,\n    extensionId: String(row.tool_id ?? row.extensionId ?? \"\"),\n    version: Number(row.version) || 1,\n    operation: row.operation,\n    summary: row.summary ?? \"\",\n    name: row.name,\n    description: row.description ?? \"\",\n    ...(includeContent ? { content } : {}),\n    icon: row.icon ?? null,\n    actorEmail: row.actor_email ?? row.actorEmail ?? null,\n    ownerEmail: row.owner_email ?? row.ownerEmail ?? \"\",\n    orgId: row.org_id ?? row.orgId ?? null,\n    visibility,\n    createdAt: row.created_at ?? row.createdAt ?? new Date(0).toISOString(),\n    persisted: true,\n    contentLength: content.length,\n  };\n}\n\nfunction extensionHistoryEntryFromExtension(\n  row: ExtensionRow,\n  includeContent: boolean,\n): ExtensionHistoryEntry {\n  return {\n    id: `current:${row.id}`,\n    extensionId: row.id,\n    version: 1,\n    operation: \"baseline\",\n    summary: \"Current version\",\n    name: row.name,\n    description: row.description,\n    ...(includeContent ? { content: row.content } : {}),\n    icon: row.icon,\n    actorEmail: null,\n    ownerEmail: row.ownerEmail,\n    orgId: row.orgId,\n    visibility: row.visibility,\n    createdAt: row.updatedAt,\n    persisted: false,\n    contentLength: row.content.length,\n  };\n}\n\nfunction normalizeVisibility(value: unknown): \"private\" | \"org\" | \"public\" {\n  return value === \"org\" || value === \"public\" ? value : \"private\";\n}\n\nfunction currentActorEmail(): string | null {\n  return getRequestUserEmail() ?? null;\n}\n\nfunction clampHistoryLimit(value: unknown): number {\n  const limit = Number(value ?? 50);\n  if (!Number.isFinite(limit)) return 50;\n  return Math.min(Math.max(1, Math.floor(limit)), 100);\n}\n\nasync function historyVersionCount(extensionId: string): Promise<number> {\n  const result = await getDbExec().execute({\n    sql: `SELECT MAX(version) AS version FROM tool_history WHERE tool_id = ?`,\n    args: [extensionId],\n  });\n  const value = (result.rows?.[0] as any)?.version;\n  const version = Number(value ?? 0);\n  return Number.isFinite(version) ? version : 0;\n}\n\nasync function hasExtensionHistory(extensionId: string): Promise<boolean> {\n  const result = await getDbExec().execute({\n    sql: `SELECT id FROM tool_history WHERE tool_id = ? LIMIT 1`,\n    args: [extensionId],\n  });\n  return (result.rows?.length ?? 0) > 0;\n}\n\nasync function recordExtensionHistorySnapshot(\n  row: ExtensionRow,\n  operation: ExtensionHistoryOperation,\n  summary: string,\n): Promise<ExtensionHistoryEntry> {\n  const version = (await historyVersionCount(row.id)) + 1;\n  const now = new Date().toISOString();\n  const historyId = randomUUID();\n  await getDbExec().execute({\n    sql: `INSERT INTO tool_history (\n      id, tool_id, version, operation, summary, name, description, content,\n      icon, actor_email, owner_email, org_id, visibility, created_at\n    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      historyId,\n      row.id,\n      version,\n      operation,\n      summary,\n      row.name,\n      row.description,\n      row.content,\n      row.icon,\n      currentActorEmail(),\n      row.ownerEmail,\n      row.orgId,\n      row.visibility,\n      now,\n    ],\n  });\n\n  return {\n    id: historyId,\n    extensionId: row.id,\n    version,\n    operation,\n    summary,\n    name: row.name,\n    description: row.description,\n    content: row.content,\n    icon: row.icon,\n    actorEmail: currentActorEmail(),\n    ownerEmail: row.ownerEmail,\n    orgId: row.orgId,\n    visibility: row.visibility,\n    createdAt: now,\n    persisted: true,\n    contentLength: row.content.length,\n  };\n}\n\nasync function ensureExtensionHistoryBaseline(\n  row: ExtensionRow,\n): Promise<void> {\n  if (await hasExtensionHistory(row.id)) return;\n  await recordExtensionHistorySnapshot(\n    row,\n    \"baseline\",\n    \"Saved starting version\",\n  );\n}\n\nfunction summarizeMetadataChange(\n  before: ExtensionRow,\n  after: ExtensionRow,\n): string {\n  const changes: string[] = [];\n  if (before.name !== after.name) {\n    changes.push(`Renamed from \"${before.name}\" to \"${after.name}\"`);\n  }\n  if (before.description !== after.description) {\n    changes.push(\"Updated description\");\n  }\n  if (before.icon !== after.icon) {\n    changes.push(\"Updated icon\");\n  }\n  if (before.visibility !== after.visibility) {\n    changes.push(`Changed visibility to ${after.visibility}`);\n  }\n  return changes.join(\"; \") || \"Updated details\";\n}\n\nfunction summarizeContentChange(\n  beforeContent: string,\n  afterContent: string,\n): string {\n  const stats = diffStats(createLineDiff(beforeContent, afterContent));\n  if (!stats.changed) return \"Saved content\";\n  return `Updated content (+${stats.addedLines} -${stats.deletedLines} lines)`;\n}\n\nfunction parseHistoryVersion(version: unknown): number | null {\n  const parsed = Number(version);\n  if (!Number.isInteger(parsed) || parsed < 1) return null;\n  return parsed;\n}\n\nasync function getPersistedHistoryEntry(\n  extensionId: string,\n  version: number,\n  includeContent: boolean,\n): Promise<ExtensionHistoryEntry | null> {\n  const result = await getDbExec().execute({\n    sql: `SELECT id, tool_id, version, operation, summary, name, description,\n      content, icon, actor_email, owner_email, org_id, visibility, created_at\n      FROM tool_history\n      WHERE tool_id = ? AND version = ?\n      LIMIT 1`,\n    args: [extensionId, version],\n  });\n  const row = result.rows?.[0] as RawExtensionHistoryRow | undefined;\n  return row ? extensionHistoryEntryFromRaw(row, includeContent) : null;\n}\n\nfunction splitLines(text: string): string[] {\n  if (!text) return [];\n  const parts = text.split(\"\\n\");\n  return parts\n    .map((line, index) => (index < parts.length - 1 ? `${line}\\n` : line))\n    .filter((line) => line.length > 0);\n}\n\nfunction createLineDiff(\n  beforeText: string,\n  afterText: string,\n): ExtensionHistoryDiffLine[] {\n  const before = splitLines(beforeText);\n  const after = splitLines(afterText);\n  if (before.length === 0 && after.length === 0) return [];\n\n  const cells = before.length * after.length;\n  if (cells > 40_000) return createBoundaryDiff(before, after);\n\n  const dp = Array.from({ length: before.length + 1 }, () =>\n    Array(after.length + 1).fill(0),\n  );\n  for (let i = before.length - 1; i >= 0; i -= 1) {\n    for (let j = after.length - 1; j >= 0; j -= 1) {\n      dp[i][j] =\n        before[i] === after[j]\n          ? dp[i + 1][j + 1] + 1\n          : Math.max(dp[i + 1][j], dp[i][j + 1]);\n    }\n  }\n\n  const diff: ExtensionHistoryDiffLine[] = [];\n  let i = 0;\n  let j = 0;\n  while (i < before.length && j < after.length) {\n    if (before[i] === after[j]) {\n      diff.push({ type: \"equal\", text: before[i] });\n      i += 1;\n      j += 1;\n    } else if (dp[i + 1][j] >= dp[i][j + 1]) {\n      diff.push({ type: \"delete\", text: before[i] });\n      i += 1;\n    } else {\n      diff.push({ type: \"insert\", text: after[j] });\n      j += 1;\n    }\n  }\n  while (i < before.length) {\n    diff.push({ type: \"delete\", text: before[i] });\n    i += 1;\n  }\n  while (j < after.length) {\n    diff.push({ type: \"insert\", text: after[j] });\n    j += 1;\n  }\n  return diff;\n}\n\nfunction createBoundaryDiff(\n  before: string[],\n  after: string[],\n): ExtensionHistoryDiffLine[] {\n  let prefix = 0;\n  while (\n    prefix < before.length &&\n    prefix < after.length &&\n    before[prefix] === after[prefix]\n  ) {\n    prefix += 1;\n  }\n\n  let suffix = 0;\n  while (\n    suffix + prefix < before.length &&\n    suffix + prefix < after.length &&\n    before[before.length - 1 - suffix] === after[after.length - 1 - suffix]\n  ) {\n    suffix += 1;\n  }\n\n  return [\n    ...before\n      .slice(0, prefix)\n      .map((text) => ({ type: \"equal\" as const, text })),\n    ...before\n      .slice(prefix, before.length - suffix)\n      .map((text) => ({ type: \"delete\" as const, text })),\n    ...after\n      .slice(prefix, after.length - suffix)\n      .map((text) => ({ type: \"insert\" as const, text })),\n    ...before\n      .slice(before.length - suffix)\n      .map((text) => ({ type: \"equal\" as const, text })),\n  ];\n}\n\nfunction diffStats(diff: ExtensionHistoryDiffLine[]): {\n  addedLines: number;\n  deletedLines: number;\n  changed: boolean;\n} {\n  const addedLines = diff.filter((line) => line.type === \"insert\").length;\n  const deletedLines = diff.filter((line) => line.type === \"delete\").length;\n  return {\n    addedLines,\n    deletedLines,\n    changed: addedLines > 0 || deletedLines > 0,\n  };\n}\n\nexport interface ListExtensionsOptions {\n  includeHidden?: boolean;\n  /**\n   * Include extensions an admin/owner has globally hidden via `hidden_at`.\n   * Off by default so globally-hidden extensions disappear for everyone.\n   */\n  includeGloballyHidden?: boolean;\n}\n\nexport async function listExtensions(\n  options: ListExtensionsOptions = {},\n): Promise<ExtensionRow[]> {\n  await ensureExtensionsTables();\n  const db = getDb();\n  // Build the WHERE with a single `and()` — drizzle replaces (not ANDs)\n  // on repeated `.where()` calls, so combine the access filter and the\n  // global-hidden filter into one condition.\n  const base = accessFilter(extensions, extensionShares);\n  const where = options.includeGloballyHidden\n    ? base\n    : and(base, isNull(extensions.hiddenAt));\n  const rows = (await db\n    .select()\n    .from(extensions)\n    .where(where)) as ExtensionRow[];\n\n  if (options.includeHidden) return rows;\n\n  const hiddenIds = await getHiddenExtensionIdsForCurrentUser();\n  if (hiddenIds.size === 0) return rows;\n  return rows.filter((row) => !hiddenIds.has(row.id));\n}\n\nexport async function getExtension(id: string): Promise<ExtensionRow | null> {\n  await ensureExtensionsTables();\n  const access = await resolveAccess(\"extension\", id);\n  return (access?.resource as ExtensionRow | undefined) ?? null;\n}\n\nexport interface ListExtensionHistoryOptions {\n  limit?: number;\n  includeContent?: boolean;\n}\n\nexport async function listExtensionHistory(\n  id: string,\n  options: ListExtensionHistoryOptions = {},\n): Promise<ExtensionHistoryEntry[]> {\n  await ensureExtensionsTables();\n  const extension = await getExtension(id);\n  if (!extension) return [];\n\n  const includeContent = options.includeContent === true;\n  const limit = clampHistoryLimit(options.limit);\n  const result = await getDbExec().execute({\n    sql: `SELECT id, tool_id, version, operation, summary, name, description,\n      content, icon, actor_email, owner_email, org_id, visibility, created_at\n      FROM tool_history\n      WHERE tool_id = ?\n      ORDER BY version DESC\n      LIMIT ?`,\n    args: [id, limit],\n  });\n\n  const entries = (result.rows ?? []).map((row) =>\n    extensionHistoryEntryFromRaw(row as RawExtensionHistoryRow, includeContent),\n  );\n\n  if (entries.length > 0) return entries;\n  return [extensionHistoryEntryFromExtension(extension, includeContent)];\n}\n\nexport async function getExtensionHistoryVersion(\n  id: string,\n  versionValue: number | string,\n): Promise<ExtensionHistoryDetail | null> {\n  await ensureExtensionsTables();\n  const extension = await getExtension(id);\n  if (!extension) return null;\n\n  const version = parseHistoryVersion(versionValue);\n  if (!version) return null;\n\n  const persisted = await getPersistedHistoryEntry(id, version, true);\n  const entry =\n    persisted ??\n    (!(await hasExtensionHistory(id)) && version === 1\n      ? extensionHistoryEntryFromExtension(extension, true)\n      : null);\n  if (!entry) return null;\n\n  const previous =\n    version > 1 ? await getPersistedHistoryEntry(id, version - 1, true) : null;\n  const previousContent = previous?.content ?? \"\";\n  const currentContent = entry.content ?? \"\";\n  const diff = createLineDiff(previousContent, currentContent);\n\n  return {\n    entry,\n    previous,\n    diff,\n    stats: diffStats(diff),\n  };\n}\n\nexport async function restoreExtensionHistoryVersion(\n  id: string,\n  versionValue: number | string,\n): Promise<ExtensionRow | null> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"editor\");\n\n  const version = parseHistoryVersion(versionValue);\n  if (!version) return null;\n\n  const existingRows = await getDb()\n    .select()\n    .from(extensions)\n    .where(eq(extensions.id, id));\n  const existing = existingRows[0] as ExtensionRow | undefined;\n  if (!existing) return null;\n\n  await ensureExtensionHistoryBaseline(existing);\n  const target = await getPersistedHistoryEntry(id, version, true);\n  if (!target) return null;\n\n  const beforeTargets = await extensionChangeTargetsForId(id);\n  await getDb()\n    .update(extensions)\n    .set({\n      name: target.name,\n      description: target.description,\n      content: target.content ?? \"\",\n      icon: target.icon,\n      updatedAt: new Date().toISOString(),\n    })\n    .where(eq(extensions.id, id));\n\n  const rows = await getDb()\n    .select()\n    .from(extensions)\n    .where(eq(extensions.id, id));\n  const row = (rows[0] as ExtensionRow) ?? null;\n  if (row) {\n    await recordExtensionHistorySnapshot(\n      row,\n      \"restore\",\n      `Restored version ${version}`,\n    );\n    await notifyExtensionChanged([\n      ...beforeTargets,\n      ...(await extensionChangeTargetsForRow(row)),\n    ]);\n  }\n  return row;\n}\n\nexport interface CreateExtensionData {\n  name: string;\n  description?: string;\n  content?: string;\n  icon?: string;\n}\n\nexport async function createExtension(\n  data: CreateExtensionData,\n): Promise<ExtensionRow> {\n  await ensureExtensionsTables();\n  const db = getDb();\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) throw new Error(\"no authenticated user\");\n  const orgId = getRequestOrgId();\n  const id = randomUUID();\n  const now = new Date().toISOString();\n  const row: ExtensionRow = {\n    id,\n    name: data.name,\n    description: data.description ?? \"\",\n    content: data.content ?? \"\",\n    icon: data.icon ?? null,\n    createdAt: now,\n    updatedAt: now,\n    hiddenAt: null,\n    hiddenBy: null,\n    ownerEmail: userEmail,\n    orgId: orgId ?? null,\n    visibility: \"private\",\n  };\n  await db.insert(extensions).values(row);\n  await recordExtensionHistorySnapshot(row, \"create\", \"Created extension\");\n  await notifyExtensionChanged([{ owner: row.ownerEmail }]);\n  return row;\n}\n\nexport interface UpdateExtensionData {\n  name?: string;\n  description?: string;\n  icon?: string;\n  /**\n   * Extensions cannot be public — `set-resource-visibility` and this store\n   * helper both reject `\"public\"`. The type lists it so the framework's\n   * generic share UI compiles, not because it's allowed at runtime.\n   */\n  visibility?: \"private\" | \"org\" | \"public\";\n}\n\nexport async function updateExtension(\n  id: string,\n  data: UpdateExtensionData,\n): Promise<ExtensionRow | null> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"editor\");\n  if (data.visibility === \"public\") {\n    // Defense in depth — `registerExtensionsShareable` sets\n    // `allowPublic: false`, so `set-resource-visibility` already rejects\n    // this. Block direct callers too (HTTP `PUT /extensions/:id`, internal\n    // refactors) so the rule holds regardless of entry point.\n    throw new ForbiddenError(\n      \"Extensions cannot be made public — share with specific people or your organization instead.\",\n    );\n  }\n  const db = getDb();\n  const beforeTargets = await extensionChangeTargetsForId(id);\n  const updates: Record<string, unknown> = {\n    updatedAt: new Date().toISOString(),\n  };\n  if (data.name !== undefined) updates.name = data.name;\n  if (data.description !== undefined) updates.description = data.description;\n  if (data.icon !== undefined) updates.icon = data.icon;\n  if (data.visibility !== undefined) updates.visibility = data.visibility;\n  const existingRows = await db\n    .select()\n    .from(extensions)\n    .where(eq(extensions.id, id));\n  const existing = existingRows[0] as ExtensionRow | undefined;\n  if (!existing) return null;\n  await ensureExtensionHistoryBaseline(existing);\n  await db.update(extensions).set(updates).where(eq(extensions.id, id));\n  const rows = await db.select().from(extensions).where(eq(extensions.id, id));\n  const row = (rows[0] as ExtensionRow) ?? null;\n  if (row) {\n    await recordExtensionHistorySnapshot(\n      row,\n      \"metadata-update\",\n      summarizeMetadataChange(existing, row),\n    );\n    await notifyExtensionChanged([\n      ...beforeTargets,\n      ...(await extensionChangeTargetsForRow(row)),\n    ]);\n  }\n  return row;\n}\n\nexport interface UpdateExtensionContentOpts {\n  content?: string;\n  patches?: ExtensionLegacyPatch[];\n  edits?: ExtensionContentEdit[];\n  format?: boolean;\n}\n\nexport async function updateExtensionContent(\n  id: string,\n  opts: UpdateExtensionContentOpts,\n): Promise<ExtensionRow | null> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"editor\");\n  const db = getDb();\n\n  if (\n    opts.content === undefined &&\n    opts.patches === undefined &&\n    opts.edits === undefined &&\n    !opts.format\n  ) {\n    return null;\n  }\n\n  const existingRows = await db\n    .select()\n    .from(extensions)\n    .where(eq(extensions.id, id));\n  if (!existingRows[0]) return null;\n  const existing = existingRows[0] as ExtensionRow;\n  const existingContent = existing.content;\n  await ensureExtensionHistoryBaseline(existing);\n  const update = await applyExtensionContentUpdate(existingContent, opts);\n\n  const beforeTargets = await extensionChangeTargetsForId(id);\n  await db\n    .update(extensions)\n    .set({ content: update.content, updatedAt: new Date().toISOString() })\n    .where(eq(extensions.id, id));\n  const rows = await db.select().from(extensions).where(eq(extensions.id, id));\n  const row = (rows[0] as ExtensionRow) ?? null;\n  if (row) {\n    await recordExtensionHistorySnapshot(\n      row,\n      \"content-update\",\n      summarizeContentChange(existingContent, row.content),\n    );\n    await notifyExtensionChanged([\n      ...beforeTargets,\n      ...(await extensionChangeTargetsForRow(row)),\n    ]);\n  }\n  return row;\n}\n\nexport async function deleteExtension(id: string): Promise<boolean> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"admin\");\n  const db = getDb();\n  const rows = await db.select().from(extensions).where(eq(extensions.id, id));\n  const row = rows[0] as ExtensionRow | undefined;\n  if (!row) return false;\n  const targets = await extensionChangeTargetsForRow(row);\n  await db.delete(extensionShares).where(eq(extensionShares.resourceId, id));\n  await db.delete(extensionHides).where(eq(extensionHides.extensionId, id));\n  await getDbExec().execute({\n    sql: `DELETE FROM tool_data WHERE tool_id = ?`,\n    args: [id],\n  });\n  await getDbExec().execute({\n    sql: `DELETE FROM tool_history WHERE tool_id = ?`,\n    args: [id],\n  });\n  const { cascadeDeleteExtensionSlots } = await import(\"./slots/store.js\");\n  await cascadeDeleteExtensionSlots(id);\n  await db.delete(extensions).where(eq(extensions.id, id));\n  await notifyExtensionChanged(targets);\n  return true;\n}\n\nexport async function getHiddenExtensionIdsForCurrentUser(): Promise<\n  Set<string>\n> {\n  await ensureExtensionsTables();\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) return new Set();\n\n  const db = getDb();\n  const rows = await db\n    .select({ extensionId: extensionHides.extensionId })\n    .from(extensionHides)\n    .where(eq(extensionHides.ownerEmail, userEmail));\n  return new Set(rows.map((row) => row.extensionId));\n}\n\nexport async function hideExtension(id: string): Promise<boolean> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"viewer\");\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) throw new Error(\"no authenticated user\");\n\n  const now = new Date().toISOString();\n  await getDbExec().execute({\n    sql: `INSERT INTO tool_hidden_extensions (id, tool_id, owner_email, created_at)\n      VALUES (?, ?, ?, ?)\n      ON CONFLICT (owner_email, tool_id) DO NOTHING`,\n    args: [randomUUID(), id, userEmail, now],\n  });\n  await notifyExtensionChanged([{ owner: userEmail }]);\n  return true;\n}\n\nexport async function unhideExtension(id: string): Promise<boolean> {\n  await ensureExtensionsTables();\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) throw new Error(\"no authenticated user\");\n\n  await getDbExec().execute({\n    sql: `DELETE FROM tool_hidden_extensions WHERE tool_id = ? AND owner_email = ?`,\n    args: [id, userEmail],\n  });\n  await notifyExtensionChanged([{ owner: userEmail }]);\n  return true;\n}\n\n/**\n * Globally hide an extension from EVERYONE's list by stamping `hidden_at` /\n * `hidden_by` on the `tools` row. Distinct from the per-user `hideExtension`\n * (`tool_hidden_extensions`) — this affects all viewers. Requires admin/owner\n * access. The extension is not deleted and stays accessible by id; pass\n * `includeGloballyHidden: true` to `listExtensions` to surface it again.\n */\nexport async function globalHideExtension(id: string): Promise<boolean> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"admin\");\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) throw new Error(\"no authenticated user\");\n\n  const beforeTargets = await extensionChangeTargetsForId(id);\n  const now = new Date().toISOString();\n  await getDbExec().execute({\n    sql: `UPDATE tools SET hidden_at = ?, hidden_by = ?, updated_at = ? WHERE id = ?`,\n    args: [now, userEmail, now, id],\n  });\n  await notifyExtensionChanged([\n    ...beforeTargets,\n    ...(await extensionChangeTargetsForId(id)),\n  ]);\n  return true;\n}\n\n/**\n * Clear a global hide so the extension reappears in everyone's list. Requires\n * admin/owner access. Mirrors `globalHideExtension`.\n */\nexport async function globalUnhideExtension(id: string): Promise<boolean> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"admin\");\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) throw new Error(\"no authenticated user\");\n\n  const beforeTargets = await extensionChangeTargetsForId(id);\n  const now = new Date().toISOString();\n  await getDbExec().execute({\n    sql: `UPDATE tools SET hidden_at = NULL, hidden_by = NULL, updated_at = ? WHERE id = ?`,\n    args: [now, id],\n  });\n  await notifyExtensionChanged([\n    ...beforeTargets,\n    ...(await extensionChangeTargetsForId(id)),\n  ]);\n  return true;\n}\n"]}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/extensions/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EACL,UAAU,EACV,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,EACzB,4BAA4B,EAC5B,6BAA6B,EAC7B,gCAAgC,EAChC,iCAAiC,EACjC,oCAAoC,EACpC,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,+BAA+B,EAC/B,+BAA+B,EAC/B,8BAA8B,EAC9B,mCAAmC,EACnC,0BAA0B,EAC1B,6BAA6B,EAC7B,gCAAgC,EAChC,+BAA+B,EAC/B,4BAA4B,EAC5B,+BAA+B,EAC/B,mCAAmC,EACnC,mCAAmC,EACnC,6BAA6B,EAC7B,gCAAgC,EAChC,mCAAmC,GACpC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,GAE3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,GAG5B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,KAAK,GAAG,WAAW,CAAC;IACxB,UAAU;IACV,eAAe;IACf,cAAc;IACd,gBAAgB;CACjB,CAAC,CAAC;AAEH,IAAI,YAAuC,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CACtE,CAAC;YACF,MAAM,8BAA8B,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,2BAA2B,CAClE,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,yBAAyB,CAC9D,CACF,CAAC;YACF,MAAM,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,wBAAwB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,OAAO,CAClB,EAAE;gBACA,CAAC,CAAC,oCAAoC;gBACtC,CAAC,CAAC,iCAAiC,CACtC,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,6BAA6B,CACtE,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACvE,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACrE,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC;YACzE,MAAM,iCAAiC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAC/C,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CACpD,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,0BAA0B,CAChE,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CACjD,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAChD,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,4BAA4B,CACpE,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CACpD,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CACpD,CAAC;YACF,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,iEAAiE;YACjE,8DAA8D;YAC9D,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,EAAE,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,6BAA6B,CACtE,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CACpD,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,GAAG,SAAS,CAAC;QACzB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,MAAoC,EACpC,EAAW;IAEX,MAAM,GAAG,GAAG,EAAE;QACZ,CAAC,CAAC;;;mCAG6B;QAC/B,CAAC,CAAC;;uBAEiB,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,IACE,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YAC7C,OAAO,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACxD,OAAO,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EACtD,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,MAAoC,EACpC,EAAW;IAEX,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,MAAM,CAAC,OAAO,CAClB,6DAA6D,CAC9D,CAAC;QACF,OAAO;IACT,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IACE,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC;aACzB,WAAW,EAAE;aACb,QAAQ,CAAC,WAAW,CAAC,EACxB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAAoC,EACpC,EAAW;IAEX,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,GAAW,EAAE,EAAE;QAC3C,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,MAAM,CAAC,OAAO,CACnB,kDAAkD,IAAI,IAAI,GAAG,EAAE,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM;aACV,OAAO,CAAC,oCAAoC,IAAI,IAAI,GAAG,EAAE,CAAC;aAC1D,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE;YAClB,IACE,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC;iBACzB,WAAW,EAAE;iBACb,QAAQ,CAAC,WAAW,CAAC;gBAExB,MAAM,GAAG,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACtD,MAAM,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,MAAM,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;IACrE,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,MAAM,CAAC,OAAO;IAClB,oIAAoI;IACpI,uHAAuH,CACxH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,MAAoC,EACpC,EAAW;IAEX,oEAAoE;IACpE,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE;QAC1D,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM;aACV,OAAO,CAAC,gCAAgC,IAAI,IAAI,GAAG,EAAE,CAAC;aACtD,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE;YAClB,IACE,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC;iBACzB,WAAW,EAAE;iBACb,QAAQ,CAAC,WAAW,CAAC;gBAExB,MAAM,GAAG,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,+BAA+B,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,MAAM,CAAC,+BAA+B,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,yBAAyB,CAAC;QACxB,IAAI,EAAE,WAAW;QACjB,aAAa,EAAE,UAAU;QACzB,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,MAAM;QACnB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE;QACpB,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,0BAA0B;QAC1B,WAAW,EAAE,KAAK;QAClB,6BAA6B,EAAE,IAAI;KACpC,CAAC,CAAC;AACL,CAAC;AAiFD,SAAS,SAAS,CAAC,MAA6B;IAC9C,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,SAAS,MAAM,CAAC,KAAK,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAA2C,EAC3C,MAA6B;IAE7B,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,GAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACzD,wBAAwB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,UAAU,KAAK,KAAK,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC1C,wBAAwB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE;SACrB,MAAM,CAAC;QACN,aAAa,EAAE,eAAe,CAAC,aAAa;QAC5C,WAAW,EAAE,eAAe,CAAC,WAAW;KACzC,CAAC;SACD,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAG9C,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YACnC,wBAAwB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;YACzC,wBAAwB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,EAAU;IAEV,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAA6B,CAAC;IAChD,OAAO,GAAG,CAAC,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAU;IAEV,MAAM,sBAAsB,EAAE,CAAC;IAC/B,OAAO,2BAA2B,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,4BAA4B,CACnC,OAAgC;IAEhC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IACxD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,OAAgC;IAEhC,MAAM,aAAa,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEvC,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,YAAY,CAAC;YACX,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,GAAG;YACR,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CACf,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,MAAM,WAAW,CACf,SAAS,EACT,2BAA2B,EAC3B,0BAA0B,CAAC,MAAM,CAAC,CACnC,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,EAAU,EACV,gBAAyC,EAAE;IAE3C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,sBAAsB,CAAC;QAC3B,GAAG,aAAa;QAChB,GAAG,CAAC,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,4BAA4B,CACnC,GAA2B,EAC3B,cAAuB;IAEvB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;QAClC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;QACtB,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI;QACrD,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE;QACnD,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI;QACtC,UAAU;QACV,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACvE,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,OAAO,CAAC,MAAM;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CACzC,GAAiB,EACjB,cAAuB;IAEvB,OAAO;QACL,EAAE,EAAE,WAAW,GAAG,CAAC,EAAE,EAAE;QACvB,WAAW,EAAE,GAAG,CAAC,EAAE;QACnB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,UAAU;QACrB,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,mBAAmB,EAAE,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IACpD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE,oEAAoE;QACzE,IAAI,EAAE,CAAC,WAAW,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,KAAK,GAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAS,EAAE,OAAO,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IACpD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE,uDAAuD;QAC5D,IAAI,EAAE,CAAC,WAAW,CAAC;KACpB,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,GAAiB,EACjB,SAAoC,EACpC,OAAe;IAEf,MAAM,OAAO,GAAG,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE;;;wDAG+C;QACpD,IAAI,EAAE;YACJ,SAAS;YACT,GAAG,CAAC,EAAE;YACN,OAAO;YACP,SAAS;YACT,OAAO;YACP,GAAG,CAAC,IAAI;YACR,GAAG,CAAC,WAAW;YACf,GAAG,CAAC,OAAO;YACX,GAAG,CAAC,IAAI;YACR,iBAAiB,EAAE;YACnB,GAAG,CAAC,UAAU;YACd,GAAG,CAAC,KAAK;YACT,GAAG,CAAC,UAAU;YACd,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,GAAG,CAAC,EAAE;QACnB,OAAO;QACP,SAAS;QACT,OAAO;QACP,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,iBAAiB,EAAE;QAC/B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;KAClC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,GAAiB;IAEjB,IAAI,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO;IAC9C,MAAM,8BAA8B,CAClC,GAAG,EACH,UAAU,EACV,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAAoB,EACpB,KAAmB;IAEnB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,yBAAyB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC;AACjD,CAAC;AAED,SAAS,sBAAsB,CAC7B,aAAqB,EACrB,YAAoB;IAEpB,MAAM,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,eAAe,CAAC;IAC3C,OAAO,qBAAqB,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,YAAY,SAAS,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,WAAmB,EACnB,OAAe,EACf,cAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE;;;;cAIK;QACV,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;KAC7B,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAuC,CAAC;IACnE,OAAO,GAAG,CAAC,CAAC,CAAC,4BAA4B,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACrE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CACrB,UAAkB,EAClB,SAAiB;IAEjB,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3C,IAAI,KAAK,GAAG,MAAM;QAAE,OAAO,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CACxD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAChC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACN,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;oBACpB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;oBACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAA+B,EAAE,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC,IAAI,CAAC,CAAC;YACP,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/C,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAgB,EAChB,KAAe;IAEf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OACE,MAAM,GAAG,MAAM,CAAC,MAAM;QACtB,MAAM,GAAG,KAAK,CAAC,MAAM;QACrB,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IAED,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OACE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM;QAC/B,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;QAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,EACvE,CAAC;QACD,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IAED,OAAO;QACL,GAAG,MAAM;aACN,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC;aAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,GAAG,MAAM;aACN,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;aACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,GAAG,KAAK;aACL,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;aACpC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,GAAG,MAAM;aACN,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;aAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAgC;IAKjD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC1E,OAAO;QACL,UAAU;QACV,YAAY;QACZ,OAAO,EAAE,UAAU,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC;KAC5C,CAAC;AACJ,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAiC,EAAE;IAEnC,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,sEAAsE;IACtE,qEAAqE;IACrE,2CAA2C;IAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,qBAAqB;QACzC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,KAAK,CAAC,CAAmB,CAAC;IAEnC,IAAI,OAAO,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,SAAS,GAAG,MAAM,mCAAmC,EAAE,CAAC;IAC9D,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU;IAC3C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpD,OAAQ,MAAM,EAAE,QAAqC,IAAI,IAAI,CAAC;AAChE,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAU,EACV,UAAuC,EAAE;IAEzC,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAE1B,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE;;;;;cAKK;QACV,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC;KAClB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC9C,4BAA4B,CAAC,GAA6B,EAAE,cAAc,CAAC,CAC5E,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,CAAC,kCAAkC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAU,EACV,YAA6B;IAE7B,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,KAAK,GACT,SAAS;QACT,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC;YAChD,CAAC,CAAC,kCAAkC,CAAC,SAAS,EAAE,IAAI,CAAC;YACrD,CAAC,CAAC,IAAI,CAAC,CAAC;IACZ,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,QAAQ,GACZ,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,wBAAwB,CAAC,EAAE,EAAE,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,MAAM,eAAe,GAAG,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;IAChD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAE7D,OAAO;QACL,KAAK;QACL,QAAQ;QACR,IAAI;QACJ,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,EAAU,EACV,YAA6B;IAE7B,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,YAAY,GAAG,MAAM,KAAK,EAAE;SAC/B,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAA6B,CAAC;IAC7D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,EAAE;SACV,MAAM,CAAC,UAAU,CAAC;SAClB,GAAG,CAAC;QACH,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAEhC,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE;SACvB,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,GAAG,GAAI,IAAI,CAAC,CAAC,CAAkB,IAAI,IAAI,CAAC;IAC9C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,8BAA8B,CAClC,GAAG,EACH,SAAS,EACT,oBAAoB,OAAO,EAAE,CAC9B,CAAC;QACF,MAAM,sBAAsB,CAAC;YAC3B,GAAG,aAAa;YAChB,GAAG,CAAC,MAAM,4BAA4B,CAAC,GAAG,CAAC,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAyB;IAEzB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAiB;QACxB,EAAE;QACF,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,KAAK,IAAI,IAAI;QACpB,UAAU,EAAE,SAAS;KACtB,CAAC;IACF,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,8BAA8B,CAAC,GAAG,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACzE,MAAM,sBAAsB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAKlD;IACC,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,KAAK,GAAG,eAAe,EAAE,IAAI,IAAI,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAC/B,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,EACpC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,EACvE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAC9B,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EACpC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,WAAW,CAAC,EACvC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,EACnE,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,cAAc,CAAC,EACzC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAC5B,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACzB,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAU,EACV,IAAyB;IAEzB,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACjC,wDAAwD;QACxD,qEAAqE;QACrE,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,IAAI,cAAc,CACtB,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,OAAO,GAA4B;QACvC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACtD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAC3E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACtD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACxE,MAAM,YAAY,GAAG,MAAM,EAAE;SAC1B,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAA6B,CAAC;IAC7D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAI,IAAI,CAAC,CAAC,CAAkB,IAAI,IAAI,CAAC;IAC9C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,8BAA8B,CAClC,GAAG,EACH,iBAAiB,EACjB,uBAAuB,CAAC,QAAQ,EAAE,GAAG,CAAC,CACvC,CAAC;QACF,MAAM,sBAAsB,CAAC;YAC3B,GAAG,aAAa;YAChB,GAAG,CAAC,MAAM,4BAA4B,CAAC,GAAG,CAAC,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAU,EACV,IAAgC;IAEhC,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IAEnB,IACE,IAAI,CAAC,OAAO,KAAK,SAAS;QAC1B,IAAI,CAAC,OAAO,KAAK,SAAS;QAC1B,IAAI,CAAC,KAAK,KAAK,SAAS;QACxB,CAAC,IAAI,CAAC,MAAM,EACZ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,EAAE;SAC1B,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAiB,CAAC;IACjD,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC;IACzC,MAAM,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAExE,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE;SACL,MAAM,CAAC,UAAU,CAAC;SAClB,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;SACrE,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAI,IAAI,CAAC,CAAC,CAAkB,IAAI,IAAI,CAAC;IAC9C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,8BAA8B,CAClC,GAAG,EACH,gBAAgB,EAChB,sBAAsB,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CACrD,CAAC;QACF,MAAM,sBAAsB,CAAC;YAC3B,GAAG,aAAa;YAChB,GAAG,CAAC,MAAM,4BAA4B,CAAC,GAAG,CAAC,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU;IAC9C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAA6B,CAAC;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,yCAAyC;QAC9C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,4CAA4C;QACjD,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACzE,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC;IAGvD,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAEjC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC;SACnD,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAU;IAC5C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE;;oDAE2C;QAChD,IAAI,EAAE,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC;KACzC,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU;IAC9C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEzD,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,0EAA0E;QAC/E,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAU;IAClD,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEzD,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,4EAA4E;QACjF,IAAI,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;KAChC,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC;QAC3B,GAAG,aAAa;QAChB,GAAG,CAAC,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;KAC3C,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAAU;IACpD,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,YAAY,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEzD,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,kFAAkF;QACvF,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;KAChB,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC;QAC3B,GAAG,aAAa;QAChB,GAAG,CAAC,MAAM,2BAA2B,CAAC,EAAE,CAAC,CAAC;KAC3C,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { and, eq, gte, isNull } from \"drizzle-orm\";\nimport { appStatePut } from \"../application-state/store.js\";\nimport { getDbExec, isPostgres, retryOnDdlRace } from \"../db/client.js\";\nimport { createGetDb } from \"../db/create-get-db.js\";\nimport { recordChange } from \"../server/poll.js\";\nimport {\n  accessFilter,\n  assertAccess,\n  resolveAccess,\n  ForbiddenError,\n} from \"../sharing/access.js\";\nimport {\n  getRequestUserEmail,\n  getRequestOrgId,\n} from \"../server/request-context.js\";\nimport { registerShareableResource } from \"../sharing/registry.js\";\nimport {\n  extensions,\n  extensionHides,\n  extensionShares,\n  extensionHistory,\n  EXTENSIONS_CREATE_SQL,\n  EXTENSIONS_CREATE_SQL_PG,\n  EXTENSION_SHARES_CREATE_SQL,\n  EXTENSION_SHARES_CREATE_SQL_PG,\n  EXTENSION_DATA_CREATE_SQL,\n  EXTENSION_DATA_CREATE_SQL_PG,\n  EXTENSION_DATA_ITEM_INDEX_SQL,\n  EXTENSION_DATA_ITEM_INDEX_SQL_PG,\n  EXTENSION_DATA_DROP_OLD_INDEX_SQL,\n  EXTENSION_DATA_DROP_OLD_INDEX_SQL_PG,\n  EXTENSIONS_OWNER_INDEX_SQL,\n  EXTENSIONS_ORG_INDEX_SQL,\n  EXTENSIONS_UPDATED_INDEX_SQL,\n  EXTENSIONS_HIDDEN_AT_COLUMN_SQL,\n  EXTENSIONS_HIDDEN_BY_COLUMN_SQL,\n  EXTENSIONS_HIDDEN_AT_INDEX_SQL,\n  EXTENSION_SHARES_RESOURCE_INDEX_SQL,\n  EXTENSION_HIDES_CREATE_SQL,\n  EXTENSION_HIDES_CREATE_SQL_PG,\n  EXTENSION_HIDES_UNIQUE_INDEX_SQL,\n  EXTENSION_HIDES_OWNER_INDEX_SQL,\n  EXTENSION_HISTORY_CREATE_SQL,\n  EXTENSION_HISTORY_CREATE_SQL_PG,\n  EXTENSION_HISTORY_VERSION_INDEX_SQL,\n  EXTENSION_HISTORY_CREATED_INDEX_SQL,\n  EXTENSION_CONSENTS_CREATE_SQL,\n  EXTENSION_CONSENTS_CREATE_SQL_PG,\n  EXTENSION_CONSENTS_VIEWER_INDEX_SQL,\n} from \"./schema.js\";\nimport {\n  EXTENSION_CHANGE_MARKER_KEY,\n  extensionChangeMarkerSession,\n  extensionChangeMarkerValue,\n  type ExtensionChangeTarget,\n} from \"./change-marker.js\";\nimport {\n  applyExtensionContentUpdate,\n  type ExtensionContentEdit,\n  type ExtensionLegacyPatch,\n} from \"./content-patch.js\";\n\nconst getDb = createGetDb({\n  extensions,\n  extensionShares,\n  extensionHides,\n  extensionHistory,\n});\n\nlet _initPromise: Promise<void> | undefined;\n\nexport async function ensureExtensionsTables(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      const pg = isPostgres();\n      await retryOnDdlRace(() =>\n        client.execute(pg ? EXTENSIONS_CREATE_SQL_PG : EXTENSIONS_CREATE_SQL),\n      );\n      await migrateMisnamedExtensionsTable(client, pg);\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_SHARES_CREATE_SQL_PG : EXTENSION_SHARES_CREATE_SQL,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_DATA_CREATE_SQL_PG : EXTENSION_DATA_CREATE_SQL,\n        ),\n      );\n      await ensureExtensionDataItemId(client, pg);\n      await ensureExtensionDataScope(client, pg);\n      await client.execute(\n        pg\n          ? EXTENSION_DATA_DROP_OLD_INDEX_SQL_PG\n          : EXTENSION_DATA_DROP_OLD_INDEX_SQL,\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_DATA_ITEM_INDEX_SQL_PG : EXTENSION_DATA_ITEM_INDEX_SQL,\n        ),\n      );\n      await retryOnDdlRace(() => client.execute(EXTENSIONS_OWNER_INDEX_SQL));\n      await retryOnDdlRace(() => client.execute(EXTENSIONS_ORG_INDEX_SQL));\n      await retryOnDdlRace(() => client.execute(EXTENSIONS_UPDATED_INDEX_SQL));\n      await ensureExtensionsGlobalHideColumns(client, pg);\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSIONS_HIDDEN_AT_INDEX_SQL),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_SHARES_RESOURCE_INDEX_SQL),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_HIDES_CREATE_SQL_PG : EXTENSION_HIDES_CREATE_SQL,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_HIDES_UNIQUE_INDEX_SQL),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_HIDES_OWNER_INDEX_SQL),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_HISTORY_CREATE_SQL_PG : EXTENSION_HISTORY_CREATE_SQL,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_HISTORY_VERSION_INDEX_SQL),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_HISTORY_CREATED_INDEX_SQL),\n      );\n      // tool_consents was introduced for an audit-C1 per-viewer consent\n      // gate that we removed once we settled on intra-org trust as the\n      // baseline. The table is kept (additive — never drop) so deploys\n      // that already created it stay healthy; the runtime consent code\n      // is gone. Idempotent CREATE IF NOT EXISTS for fresh schemas.\n      await retryOnDdlRace(() =>\n        client.execute(\n          pg ? EXTENSION_CONSENTS_CREATE_SQL_PG : EXTENSION_CONSENTS_CREATE_SQL,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(EXTENSION_CONSENTS_VIEWER_INDEX_SQL),\n      );\n    })();\n  }\n\n  try {\n    await _initPromise;\n  } catch (err) {\n    _initPromise = undefined;\n    throw err;\n  }\n}\n\nasync function migrateMisnamedExtensionsTable(\n  client: ReturnType<typeof getDbExec>,\n  pg: boolean,\n): Promise<void> {\n  const sql = pg\n    ? `INSERT INTO tools (id, name, description, content, icon, created_at, updated_at, owner_email, org_id, visibility)\n       SELECT id, name, description, content, icon, created_at, updated_at, owner_email, org_id, visibility\n       FROM extensions\n       ON CONFLICT (id) DO NOTHING`\n    : `INSERT OR IGNORE INTO tools (id, name, description, content, icon, created_at, updated_at, owner_email, org_id, visibility)\n       SELECT id, name, description, content, icon, created_at, updated_at, owner_email, org_id, visibility\n       FROM extensions`;\n\n  try {\n    await client.execute(sql);\n  } catch (err: any) {\n    const message = String(err?.message ?? err).toLowerCase();\n    if (\n      message.includes(\"no such table: extensions\") ||\n      message.includes('relation \"extensions\" does not exist') ||\n      message.includes(\"relation extensions does not exist\")\n    ) {\n      return;\n    }\n    throw err;\n  }\n}\n\nasync function ensureExtensionDataItemId(\n  client: ReturnType<typeof getDbExec>,\n  pg: boolean,\n): Promise<void> {\n  if (pg) {\n    await client.execute(\n      `ALTER TABLE tool_data ADD COLUMN IF NOT EXISTS item_id TEXT`,\n    );\n    return;\n  }\n\n  // Keep this additive: legacy rows with item_id=id are still read correctly\n  // through COALESCE(item_id, id), so SQLite never needs a table rebuild here.\n  try {\n    await client.execute(`ALTER TABLE tool_data ADD COLUMN item_id TEXT`);\n  } catch (err: any) {\n    if (\n      !String(err?.message ?? err)\n        .toLowerCase()\n        .includes(\"duplicate\")\n    ) {\n      throw err;\n    }\n  }\n}\n\nasync function ensureExtensionDataScope(\n  client: ReturnType<typeof getDbExec>,\n  pg: boolean,\n): Promise<void> {\n  const addCol = (name: string, def: string) => {\n    if (pg) {\n      return client.execute(\n        `ALTER TABLE tool_data ADD COLUMN IF NOT EXISTS ${name} ${def}`,\n      );\n    }\n    return client\n      .execute(`ALTER TABLE tool_data ADD COLUMN ${name} ${def}`)\n      .catch((err: any) => {\n        if (\n          !String(err?.message ?? err)\n            .toLowerCase()\n            .includes(\"duplicate\")\n        )\n          throw err;\n      });\n  };\n  await addCol(\"scope\", \"TEXT NOT NULL DEFAULT 'user'\");\n  await addCol(\"org_id\", \"TEXT\");\n  await addCol(\"scope_key\", \"TEXT NOT NULL DEFAULT 'local@localhost'\");\n  // One-time backfill migration: replaces the dev-mode DEFAULT scope_key\n  // with each row's real owner_email. Not a per-request fallback.\n  await client.execute(\n    // guard:allow-localhost-fallback — one-time backfill migration replacing dev-mode default scope_key with the row's real owner_email\n    `UPDATE tool_data SET scope_key = owner_email WHERE scope_key = 'local@localhost' AND owner_email != 'local@localhost'`,\n  );\n}\n\nasync function ensureExtensionsGlobalHideColumns(\n  client: ReturnType<typeof getDbExec>,\n  pg: boolean,\n): Promise<void> {\n  // Global (admin) hide columns on the `tools` row, distinct from the\n  // per-user `tool_hidden_extensions` table. Additive — keep this idempotent\n  // for both dialects. Postgres supports `ADD COLUMN IF NOT EXISTS`; SQLite\n  // does not, so we drop the clause and swallow the duplicate-column error.\n  const addCol = (pgSql: string, name: string, def: string) => {\n    if (pg) {\n      return retryOnDdlRace(() => client.execute(pgSql));\n    }\n    return client\n      .execute(`ALTER TABLE tools ADD COLUMN ${name} ${def}`)\n      .catch((err: any) => {\n        if (\n          !String(err?.message ?? err)\n            .toLowerCase()\n            .includes(\"duplicate\")\n        )\n          throw err;\n      });\n  };\n  await addCol(EXTENSIONS_HIDDEN_AT_COLUMN_SQL, \"hidden_at\", \"TEXT\");\n  await addCol(EXTENSIONS_HIDDEN_BY_COLUMN_SQL, \"hidden_by\", \"TEXT\");\n}\n\nexport function registerExtensionsShareable() {\n  registerShareableResource({\n    type: \"extension\",\n    resourceTable: extensions,\n    sharesTable: extensionShares,\n    displayName: \"Extension\",\n    titleColumn: \"name\",\n    getDb: () => getDb(),\n    // Extension HTML executes inside an iframe and calls actions / SQL / the\n    // secrets-injecting proxy as the *viewer*. A public extension would let a\n    // random authenticated user run code with the viewer's credentials — and\n    // a malicious shared extension could re-share itself wider. Lock both:\n    // no public visibility, and individual user shares must already be (or\n    // be invited to) the org.\n    allowPublic: false,\n    requireOrgMemberForUserShares: true,\n  });\n}\n\nexport interface ExtensionRow {\n  id: string;\n  name: string;\n  description: string;\n  content: string;\n  icon: string | null;\n  createdAt: string;\n  updatedAt: string;\n  hiddenAt: string | null;\n  hiddenBy: string | null;\n  ownerEmail: string;\n  orgId: string | null;\n  visibility: \"private\" | \"org\" | \"public\";\n}\n\nexport type ExtensionHistoryOperation =\n  | \"create\"\n  | \"baseline\"\n  | \"metadata-update\"\n  | \"content-update\"\n  | \"restore\";\n\nexport interface ExtensionHistoryEntry {\n  id: string;\n  extensionId: string;\n  version: number;\n  operation: ExtensionHistoryOperation | string;\n  summary: string;\n  name: string;\n  description: string;\n  content?: string;\n  icon: string | null;\n  actorEmail: string | null;\n  ownerEmail: string;\n  orgId: string | null;\n  visibility: \"private\" | \"org\" | \"public\";\n  createdAt: string;\n  persisted: boolean;\n  contentLength: number;\n}\n\nexport interface ExtensionHistoryDiffLine {\n  type: \"equal\" | \"insert\" | \"delete\";\n  text: string;\n}\n\nexport interface ExtensionHistoryDetail {\n  entry: ExtensionHistoryEntry;\n  previous: ExtensionHistoryEntry | null;\n  diff: ExtensionHistoryDiffLine[];\n  stats: {\n    addedLines: number;\n    deletedLines: number;\n    changed: boolean;\n  };\n}\n\ninterface RawExtensionHistoryRow {\n  id: string;\n  tool_id?: string;\n  extensionId?: string;\n  version: number | string;\n  operation: string;\n  summary?: string | null;\n  name: string;\n  description?: string | null;\n  content?: string | null;\n  icon?: string | null;\n  actor_email?: string | null;\n  actorEmail?: string | null;\n  owner_email?: string | null;\n  ownerEmail?: string | null;\n  org_id?: string | null;\n  orgId?: string | null;\n  visibility?: string | null;\n  created_at?: string;\n  createdAt?: string;\n}\n\nfunction targetKey(target: ExtensionChangeTarget): string | null {\n  if (target.owner) return `owner:${target.owner}`;\n  if (target.orgId) return `org:${target.orgId}`;\n  return null;\n}\n\nfunction addExtensionChangeTarget(\n  targets: Map<string, ExtensionChangeTarget>,\n  target: ExtensionChangeTarget,\n): void {\n  const key = targetKey(target);\n  if (key) targets.set(key, target);\n}\n\nasync function extensionChangeTargetsForRow(\n  row: ExtensionRow,\n): Promise<ExtensionChangeTarget[]> {\n  const targets = new Map<string, ExtensionChangeTarget>();\n  addExtensionChangeTarget(targets, { owner: row.ownerEmail });\n  if (row.visibility === \"org\" && row.orgId) {\n    addExtensionChangeTarget(targets, { orgId: row.orgId });\n  }\n\n  const db = getDb();\n  const shares = (await db\n    .select({\n      principalType: extensionShares.principalType,\n      principalId: extensionShares.principalId,\n    })\n    .from(extensionShares)\n    .where(eq(extensionShares.resourceId, row.id))) as Array<{\n    principalType: \"user\" | \"org\";\n    principalId: string;\n  }>;\n\n  for (const share of shares) {\n    if (share.principalType === \"user\") {\n      addExtensionChangeTarget(targets, { owner: share.principalId });\n    } else if (share.principalType === \"org\") {\n      addExtensionChangeTarget(targets, { orgId: share.principalId });\n    }\n  }\n\n  return Array.from(targets.values());\n}\n\nasync function extensionChangeTargetsForId(\n  id: string,\n): Promise<ExtensionChangeTarget[]> {\n  const db = getDb();\n  const rows = await db.select().from(extensions).where(eq(extensions.id, id));\n  const row = rows[0] as ExtensionRow | undefined;\n  return row ? extensionChangeTargetsForRow(row) : [];\n}\n\nexport async function getExtensionChangeTargets(\n  id: string,\n): Promise<ExtensionChangeTarget[]> {\n  await ensureExtensionsTables();\n  return extensionChangeTargetsForId(id);\n}\n\nfunction dedupeExtensionChangeTargets(\n  targets: ExtensionChangeTarget[],\n): ExtensionChangeTarget[] {\n  const unique = new Map<string, ExtensionChangeTarget>();\n  for (const target of targets) {\n    const key = targetKey(target);\n    if (key) unique.set(key, target);\n  }\n  return Array.from(unique.values());\n}\n\nasync function notifyExtensionChanged(\n  targets: ExtensionChangeTarget[],\n): Promise<void> {\n  const uniqueTargets = dedupeExtensionChangeTargets(targets);\n  if (uniqueTargets.length === 0) return;\n\n  for (const target of uniqueTargets) {\n    recordChange({\n      source: \"extensions\",\n      type: \"change\",\n      key: \"*\",\n      ...(target.owner ? { owner: target.owner } : {}),\n      ...(target.orgId ? { orgId: target.orgId } : {}),\n    });\n  }\n\n  await Promise.all(\n    uniqueTargets.map(async (target) => {\n      const sessionId = extensionChangeMarkerSession(target);\n      if (!sessionId) return;\n      await appStatePut(\n        sessionId,\n        EXTENSION_CHANGE_MARKER_KEY,\n        extensionChangeMarkerValue(target),\n      );\n    }),\n  );\n}\n\nexport async function notifyExtensionChangeForResource(\n  id: string,\n  beforeTargets: ExtensionChangeTarget[] = [],\n): Promise<void> {\n  await ensureExtensionsTables();\n  await notifyExtensionChanged([\n    ...beforeTargets,\n    ...(await extensionChangeTargetsForId(id)),\n  ]);\n}\n\nfunction extensionHistoryEntryFromRaw(\n  row: RawExtensionHistoryRow,\n  includeContent: boolean,\n): ExtensionHistoryEntry {\n  const content = row.content ?? \"\";\n  const visibility = normalizeVisibility(row.visibility);\n  return {\n    id: row.id,\n    extensionId: String(row.tool_id ?? row.extensionId ?? \"\"),\n    version: Number(row.version) || 1,\n    operation: row.operation,\n    summary: row.summary ?? \"\",\n    name: row.name,\n    description: row.description ?? \"\",\n    ...(includeContent ? { content } : {}),\n    icon: row.icon ?? null,\n    actorEmail: row.actor_email ?? row.actorEmail ?? null,\n    ownerEmail: row.owner_email ?? row.ownerEmail ?? \"\",\n    orgId: row.org_id ?? row.orgId ?? null,\n    visibility,\n    createdAt: row.created_at ?? row.createdAt ?? new Date(0).toISOString(),\n    persisted: true,\n    contentLength: content.length,\n  };\n}\n\nfunction extensionHistoryEntryFromExtension(\n  row: ExtensionRow,\n  includeContent: boolean,\n): ExtensionHistoryEntry {\n  return {\n    id: `current:${row.id}`,\n    extensionId: row.id,\n    version: 1,\n    operation: \"baseline\",\n    summary: \"Current version\",\n    name: row.name,\n    description: row.description,\n    ...(includeContent ? { content: row.content } : {}),\n    icon: row.icon,\n    actorEmail: null,\n    ownerEmail: row.ownerEmail,\n    orgId: row.orgId,\n    visibility: row.visibility,\n    createdAt: row.updatedAt,\n    persisted: false,\n    contentLength: row.content.length,\n  };\n}\n\nfunction normalizeVisibility(value: unknown): \"private\" | \"org\" | \"public\" {\n  return value === \"org\" || value === \"public\" ? value : \"private\";\n}\n\nfunction currentActorEmail(): string | null {\n  return getRequestUserEmail() ?? null;\n}\n\nfunction clampHistoryLimit(value: unknown): number {\n  const limit = Number(value ?? 50);\n  if (!Number.isFinite(limit)) return 50;\n  return Math.min(Math.max(1, Math.floor(limit)), 100);\n}\n\nasync function historyVersionCount(extensionId: string): Promise<number> {\n  const result = await getDbExec().execute({\n    sql: `SELECT MAX(version) AS version FROM tool_history WHERE tool_id = ?`,\n    args: [extensionId],\n  });\n  const value = (result.rows?.[0] as any)?.version;\n  const version = Number(value ?? 0);\n  return Number.isFinite(version) ? version : 0;\n}\n\nasync function hasExtensionHistory(extensionId: string): Promise<boolean> {\n  const result = await getDbExec().execute({\n    sql: `SELECT id FROM tool_history WHERE tool_id = ? LIMIT 1`,\n    args: [extensionId],\n  });\n  return (result.rows?.length ?? 0) > 0;\n}\n\nasync function recordExtensionHistorySnapshot(\n  row: ExtensionRow,\n  operation: ExtensionHistoryOperation,\n  summary: string,\n): Promise<ExtensionHistoryEntry> {\n  const version = (await historyVersionCount(row.id)) + 1;\n  const now = new Date().toISOString();\n  const historyId = randomUUID();\n  await getDbExec().execute({\n    sql: `INSERT INTO tool_history (\n      id, tool_id, version, operation, summary, name, description, content,\n      icon, actor_email, owner_email, org_id, visibility, created_at\n    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      historyId,\n      row.id,\n      version,\n      operation,\n      summary,\n      row.name,\n      row.description,\n      row.content,\n      row.icon,\n      currentActorEmail(),\n      row.ownerEmail,\n      row.orgId,\n      row.visibility,\n      now,\n    ],\n  });\n\n  return {\n    id: historyId,\n    extensionId: row.id,\n    version,\n    operation,\n    summary,\n    name: row.name,\n    description: row.description,\n    content: row.content,\n    icon: row.icon,\n    actorEmail: currentActorEmail(),\n    ownerEmail: row.ownerEmail,\n    orgId: row.orgId,\n    visibility: row.visibility,\n    createdAt: now,\n    persisted: true,\n    contentLength: row.content.length,\n  };\n}\n\nasync function ensureExtensionHistoryBaseline(\n  row: ExtensionRow,\n): Promise<void> {\n  if (await hasExtensionHistory(row.id)) return;\n  await recordExtensionHistorySnapshot(\n    row,\n    \"baseline\",\n    \"Saved starting version\",\n  );\n}\n\nfunction summarizeMetadataChange(\n  before: ExtensionRow,\n  after: ExtensionRow,\n): string {\n  const changes: string[] = [];\n  if (before.name !== after.name) {\n    changes.push(`Renamed from \"${before.name}\" to \"${after.name}\"`);\n  }\n  if (before.description !== after.description) {\n    changes.push(\"Updated description\");\n  }\n  if (before.icon !== after.icon) {\n    changes.push(\"Updated icon\");\n  }\n  if (before.visibility !== after.visibility) {\n    changes.push(`Changed visibility to ${after.visibility}`);\n  }\n  return changes.join(\"; \") || \"Updated details\";\n}\n\nfunction summarizeContentChange(\n  beforeContent: string,\n  afterContent: string,\n): string {\n  const stats = diffStats(createLineDiff(beforeContent, afterContent));\n  if (!stats.changed) return \"Saved content\";\n  return `Updated content (+${stats.addedLines} -${stats.deletedLines} lines)`;\n}\n\nfunction parseHistoryVersion(version: unknown): number | null {\n  const parsed = Number(version);\n  if (!Number.isInteger(parsed) || parsed < 1) return null;\n  return parsed;\n}\n\nasync function getPersistedHistoryEntry(\n  extensionId: string,\n  version: number,\n  includeContent: boolean,\n): Promise<ExtensionHistoryEntry | null> {\n  const result = await getDbExec().execute({\n    sql: `SELECT id, tool_id, version, operation, summary, name, description,\n      content, icon, actor_email, owner_email, org_id, visibility, created_at\n      FROM tool_history\n      WHERE tool_id = ? AND version = ?\n      LIMIT 1`,\n    args: [extensionId, version],\n  });\n  const row = result.rows?.[0] as RawExtensionHistoryRow | undefined;\n  return row ? extensionHistoryEntryFromRaw(row, includeContent) : null;\n}\n\nfunction splitLines(text: string): string[] {\n  if (!text) return [];\n  const parts = text.split(\"\\n\");\n  return parts\n    .map((line, index) => (index < parts.length - 1 ? `${line}\\n` : line))\n    .filter((line) => line.length > 0);\n}\n\nfunction createLineDiff(\n  beforeText: string,\n  afterText: string,\n): ExtensionHistoryDiffLine[] {\n  const before = splitLines(beforeText);\n  const after = splitLines(afterText);\n  if (before.length === 0 && after.length === 0) return [];\n\n  const cells = before.length * after.length;\n  if (cells > 40_000) return createBoundaryDiff(before, after);\n\n  const dp = Array.from({ length: before.length + 1 }, () =>\n    Array(after.length + 1).fill(0),\n  );\n  for (let i = before.length - 1; i >= 0; i -= 1) {\n    for (let j = after.length - 1; j >= 0; j -= 1) {\n      dp[i][j] =\n        before[i] === after[j]\n          ? dp[i + 1][j + 1] + 1\n          : Math.max(dp[i + 1][j], dp[i][j + 1]);\n    }\n  }\n\n  const diff: ExtensionHistoryDiffLine[] = [];\n  let i = 0;\n  let j = 0;\n  while (i < before.length && j < after.length) {\n    if (before[i] === after[j]) {\n      diff.push({ type: \"equal\", text: before[i] });\n      i += 1;\n      j += 1;\n    } else if (dp[i + 1][j] >= dp[i][j + 1]) {\n      diff.push({ type: \"delete\", text: before[i] });\n      i += 1;\n    } else {\n      diff.push({ type: \"insert\", text: after[j] });\n      j += 1;\n    }\n  }\n  while (i < before.length) {\n    diff.push({ type: \"delete\", text: before[i] });\n    i += 1;\n  }\n  while (j < after.length) {\n    diff.push({ type: \"insert\", text: after[j] });\n    j += 1;\n  }\n  return diff;\n}\n\nfunction createBoundaryDiff(\n  before: string[],\n  after: string[],\n): ExtensionHistoryDiffLine[] {\n  let prefix = 0;\n  while (\n    prefix < before.length &&\n    prefix < after.length &&\n    before[prefix] === after[prefix]\n  ) {\n    prefix += 1;\n  }\n\n  let suffix = 0;\n  while (\n    suffix + prefix < before.length &&\n    suffix + prefix < after.length &&\n    before[before.length - 1 - suffix] === after[after.length - 1 - suffix]\n  ) {\n    suffix += 1;\n  }\n\n  return [\n    ...before\n      .slice(0, prefix)\n      .map((text) => ({ type: \"equal\" as const, text })),\n    ...before\n      .slice(prefix, before.length - suffix)\n      .map((text) => ({ type: \"delete\" as const, text })),\n    ...after\n      .slice(prefix, after.length - suffix)\n      .map((text) => ({ type: \"insert\" as const, text })),\n    ...before\n      .slice(before.length - suffix)\n      .map((text) => ({ type: \"equal\" as const, text })),\n  ];\n}\n\nfunction diffStats(diff: ExtensionHistoryDiffLine[]): {\n  addedLines: number;\n  deletedLines: number;\n  changed: boolean;\n} {\n  const addedLines = diff.filter((line) => line.type === \"insert\").length;\n  const deletedLines = diff.filter((line) => line.type === \"delete\").length;\n  return {\n    addedLines,\n    deletedLines,\n    changed: addedLines > 0 || deletedLines > 0,\n  };\n}\n\nexport interface ListExtensionsOptions {\n  includeHidden?: boolean;\n  /**\n   * Include extensions an admin/owner has globally hidden via `hidden_at`.\n   * Off by default so globally-hidden extensions disappear for everyone.\n   */\n  includeGloballyHidden?: boolean;\n}\n\nexport async function listExtensions(\n  options: ListExtensionsOptions = {},\n): Promise<ExtensionRow[]> {\n  await ensureExtensionsTables();\n  const db = getDb();\n  // Build the WHERE with a single `and()` — drizzle replaces (not ANDs)\n  // on repeated `.where()` calls, so combine the access filter and the\n  // global-hidden filter into one condition.\n  const base = accessFilter(extensions, extensionShares);\n  const where = options.includeGloballyHidden\n    ? base\n    : and(base, isNull(extensions.hiddenAt));\n  const rows = (await db\n    .select()\n    .from(extensions)\n    .where(where)) as ExtensionRow[];\n\n  if (options.includeHidden) return rows;\n\n  const hiddenIds = await getHiddenExtensionIdsForCurrentUser();\n  if (hiddenIds.size === 0) return rows;\n  return rows.filter((row) => !hiddenIds.has(row.id));\n}\n\nexport async function getExtension(id: string): Promise<ExtensionRow | null> {\n  await ensureExtensionsTables();\n  const access = await resolveAccess(\"extension\", id);\n  return (access?.resource as ExtensionRow | undefined) ?? null;\n}\n\nexport interface ListExtensionHistoryOptions {\n  limit?: number;\n  includeContent?: boolean;\n}\n\nexport async function listExtensionHistory(\n  id: string,\n  options: ListExtensionHistoryOptions = {},\n): Promise<ExtensionHistoryEntry[]> {\n  await ensureExtensionsTables();\n  const extension = await getExtension(id);\n  if (!extension) return [];\n\n  const includeContent = options.includeContent === true;\n  const limit = clampHistoryLimit(options.limit);\n  const result = await getDbExec().execute({\n    sql: `SELECT id, tool_id, version, operation, summary, name, description,\n      content, icon, actor_email, owner_email, org_id, visibility, created_at\n      FROM tool_history\n      WHERE tool_id = ?\n      ORDER BY version DESC\n      LIMIT ?`,\n    args: [id, limit],\n  });\n\n  const entries = (result.rows ?? []).map((row) =>\n    extensionHistoryEntryFromRaw(row as RawExtensionHistoryRow, includeContent),\n  );\n\n  if (entries.length > 0) return entries;\n  return [extensionHistoryEntryFromExtension(extension, includeContent)];\n}\n\nexport async function getExtensionHistoryVersion(\n  id: string,\n  versionValue: number | string,\n): Promise<ExtensionHistoryDetail | null> {\n  await ensureExtensionsTables();\n  const extension = await getExtension(id);\n  if (!extension) return null;\n\n  const version = parseHistoryVersion(versionValue);\n  if (!version) return null;\n\n  const persisted = await getPersistedHistoryEntry(id, version, true);\n  const entry =\n    persisted ??\n    (!(await hasExtensionHistory(id)) && version === 1\n      ? extensionHistoryEntryFromExtension(extension, true)\n      : null);\n  if (!entry) return null;\n\n  const previous =\n    version > 1 ? await getPersistedHistoryEntry(id, version - 1, true) : null;\n  const previousContent = previous?.content ?? \"\";\n  const currentContent = entry.content ?? \"\";\n  const diff = createLineDiff(previousContent, currentContent);\n\n  return {\n    entry,\n    previous,\n    diff,\n    stats: diffStats(diff),\n  };\n}\n\nexport async function restoreExtensionHistoryVersion(\n  id: string,\n  versionValue: number | string,\n): Promise<ExtensionRow | null> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"editor\");\n\n  const version = parseHistoryVersion(versionValue);\n  if (!version) return null;\n\n  const existingRows = await getDb()\n    .select()\n    .from(extensions)\n    .where(eq(extensions.id, id));\n  const existing = existingRows[0] as ExtensionRow | undefined;\n  if (!existing) return null;\n\n  await ensureExtensionHistoryBaseline(existing);\n  const target = await getPersistedHistoryEntry(id, version, true);\n  if (!target) return null;\n\n  const beforeTargets = await extensionChangeTargetsForId(id);\n  await getDb()\n    .update(extensions)\n    .set({\n      name: target.name,\n      description: target.description,\n      content: target.content ?? \"\",\n      icon: target.icon,\n      updatedAt: new Date().toISOString(),\n    })\n    .where(eq(extensions.id, id));\n\n  const rows = await getDb()\n    .select()\n    .from(extensions)\n    .where(eq(extensions.id, id));\n  const row = (rows[0] as ExtensionRow) ?? null;\n  if (row) {\n    await recordExtensionHistorySnapshot(\n      row,\n      \"restore\",\n      `Restored version ${version}`,\n    );\n    await notifyExtensionChanged([\n      ...beforeTargets,\n      ...(await extensionChangeTargetsForRow(row)),\n    ]);\n  }\n  return row;\n}\n\nexport interface CreateExtensionData {\n  name: string;\n  description?: string;\n  content?: string;\n  icon?: string;\n}\n\nexport async function createExtension(\n  data: CreateExtensionData,\n): Promise<ExtensionRow> {\n  await ensureExtensionsTables();\n  const db = getDb();\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) throw new Error(\"no authenticated user\");\n  const orgId = getRequestOrgId();\n  const id = randomUUID();\n  const now = new Date().toISOString();\n  const row: ExtensionRow = {\n    id,\n    name: data.name,\n    description: data.description ?? \"\",\n    content: data.content ?? \"\",\n    icon: data.icon ?? null,\n    createdAt: now,\n    updatedAt: now,\n    hiddenAt: null,\n    hiddenBy: null,\n    ownerEmail: userEmail,\n    orgId: orgId ?? null,\n    visibility: \"private\",\n  };\n  await db.insert(extensions).values(row);\n  await recordExtensionHistorySnapshot(row, \"create\", \"Created extension\");\n  await notifyExtensionChanged([{ owner: row.ownerEmail }]);\n  return row;\n}\n\n/**\n * Returns an extension with the exact same name and content created by the\n * current user — in the current org/workspace scope — in the last 5 minutes,\n * or null if none exists. Used to make create-extension idempotent when a\n * connection drop causes the agent to retry the same tool call.\n *\n * Scoped by `orgId` the same way `createExtension` stamps it, so the same\n * `ownerEmail` working in two different orgs can create identically-named,\n * identical-content extensions without this lookup cross-matching and skipping\n * the second insert. Keyed on the FULL create inputs (name + content +\n * description + icon, normalized exactly as `createExtension` stores them), so\n * two creates that differ in any of them are treated as distinct — only a\n * byte-identical re-create (the connection-retry case) recovers the prior row,\n * and no intentional second create silently loses its metadata.\n */\nexport async function findRecentDuplicateExtension(data: {\n  name: string;\n  content: string;\n  description?: string;\n  icon?: string;\n}): Promise<ExtensionRow | null> {\n  await ensureExtensionsTables();\n  const db = getDb();\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) return null;\n  const orgId = getRequestOrgId() ?? null;\n  const description = data.description ?? \"\";\n  const icon = data.icon ?? null;\n  const fiveMinutesAgo = new Date(Date.now() - 5 * 60 * 1000).toISOString();\n  const rows = await db\n    .select()\n    .from(extensions)\n    .where(\n      and(\n        eq(extensions.ownerEmail, userEmail),\n        orgId === null ? isNull(extensions.orgId) : eq(extensions.orgId, orgId),\n        eq(extensions.name, data.name),\n        eq(extensions.content, data.content),\n        eq(extensions.description, description),\n        icon === null ? isNull(extensions.icon) : eq(extensions.icon, icon),\n        gte(extensions.createdAt, fiveMinutesAgo),\n        isNull(extensions.hiddenAt),\n      ),\n    )\n    .limit(1);\n  return rows[0] ?? null;\n}\n\nexport interface UpdateExtensionData {\n  name?: string;\n  description?: string;\n  icon?: string;\n  /**\n   * Extensions cannot be public — `set-resource-visibility` and this store\n   * helper both reject `\"public\"`. The type lists it so the framework's\n   * generic share UI compiles, not because it's allowed at runtime.\n   */\n  visibility?: \"private\" | \"org\" | \"public\";\n}\n\nexport async function updateExtension(\n  id: string,\n  data: UpdateExtensionData,\n): Promise<ExtensionRow | null> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"editor\");\n  if (data.visibility === \"public\") {\n    // Defense in depth — `registerExtensionsShareable` sets\n    // `allowPublic: false`, so `set-resource-visibility` already rejects\n    // this. Block direct callers too (HTTP `PUT /extensions/:id`, internal\n    // refactors) so the rule holds regardless of entry point.\n    throw new ForbiddenError(\n      \"Extensions cannot be made public — share with specific people or your organization instead.\",\n    );\n  }\n  const db = getDb();\n  const beforeTargets = await extensionChangeTargetsForId(id);\n  const updates: Record<string, unknown> = {\n    updatedAt: new Date().toISOString(),\n  };\n  if (data.name !== undefined) updates.name = data.name;\n  if (data.description !== undefined) updates.description = data.description;\n  if (data.icon !== undefined) updates.icon = data.icon;\n  if (data.visibility !== undefined) updates.visibility = data.visibility;\n  const existingRows = await db\n    .select()\n    .from(extensions)\n    .where(eq(extensions.id, id));\n  const existing = existingRows[0] as ExtensionRow | undefined;\n  if (!existing) return null;\n  await ensureExtensionHistoryBaseline(existing);\n  await db.update(extensions).set(updates).where(eq(extensions.id, id));\n  const rows = await db.select().from(extensions).where(eq(extensions.id, id));\n  const row = (rows[0] as ExtensionRow) ?? null;\n  if (row) {\n    await recordExtensionHistorySnapshot(\n      row,\n      \"metadata-update\",\n      summarizeMetadataChange(existing, row),\n    );\n    await notifyExtensionChanged([\n      ...beforeTargets,\n      ...(await extensionChangeTargetsForRow(row)),\n    ]);\n  }\n  return row;\n}\n\nexport interface UpdateExtensionContentOpts {\n  content?: string;\n  patches?: ExtensionLegacyPatch[];\n  edits?: ExtensionContentEdit[];\n  format?: boolean;\n}\n\nexport async function updateExtensionContent(\n  id: string,\n  opts: UpdateExtensionContentOpts,\n): Promise<ExtensionRow | null> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"editor\");\n  const db = getDb();\n\n  if (\n    opts.content === undefined &&\n    opts.patches === undefined &&\n    opts.edits === undefined &&\n    !opts.format\n  ) {\n    return null;\n  }\n\n  const existingRows = await db\n    .select()\n    .from(extensions)\n    .where(eq(extensions.id, id));\n  if (!existingRows[0]) return null;\n  const existing = existingRows[0] as ExtensionRow;\n  const existingContent = existing.content;\n  await ensureExtensionHistoryBaseline(existing);\n  const update = await applyExtensionContentUpdate(existingContent, opts);\n\n  const beforeTargets = await extensionChangeTargetsForId(id);\n  await db\n    .update(extensions)\n    .set({ content: update.content, updatedAt: new Date().toISOString() })\n    .where(eq(extensions.id, id));\n  const rows = await db.select().from(extensions).where(eq(extensions.id, id));\n  const row = (rows[0] as ExtensionRow) ?? null;\n  if (row) {\n    await recordExtensionHistorySnapshot(\n      row,\n      \"content-update\",\n      summarizeContentChange(existingContent, row.content),\n    );\n    await notifyExtensionChanged([\n      ...beforeTargets,\n      ...(await extensionChangeTargetsForRow(row)),\n    ]);\n  }\n  return row;\n}\n\nexport async function deleteExtension(id: string): Promise<boolean> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"admin\");\n  const db = getDb();\n  const rows = await db.select().from(extensions).where(eq(extensions.id, id));\n  const row = rows[0] as ExtensionRow | undefined;\n  if (!row) return false;\n  const targets = await extensionChangeTargetsForRow(row);\n  await db.delete(extensionShares).where(eq(extensionShares.resourceId, id));\n  await db.delete(extensionHides).where(eq(extensionHides.extensionId, id));\n  await getDbExec().execute({\n    sql: `DELETE FROM tool_data WHERE tool_id = ?`,\n    args: [id],\n  });\n  await getDbExec().execute({\n    sql: `DELETE FROM tool_history WHERE tool_id = ?`,\n    args: [id],\n  });\n  const { cascadeDeleteExtensionSlots } = await import(\"./slots/store.js\");\n  await cascadeDeleteExtensionSlots(id);\n  await db.delete(extensions).where(eq(extensions.id, id));\n  await notifyExtensionChanged(targets);\n  return true;\n}\n\nexport async function getHiddenExtensionIdsForCurrentUser(): Promise<\n  Set<string>\n> {\n  await ensureExtensionsTables();\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) return new Set();\n\n  const db = getDb();\n  const rows = await db\n    .select({ extensionId: extensionHides.extensionId })\n    .from(extensionHides)\n    .where(eq(extensionHides.ownerEmail, userEmail));\n  return new Set(rows.map((row) => row.extensionId));\n}\n\nexport async function hideExtension(id: string): Promise<boolean> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"viewer\");\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) throw new Error(\"no authenticated user\");\n\n  const now = new Date().toISOString();\n  await getDbExec().execute({\n    sql: `INSERT INTO tool_hidden_extensions (id, tool_id, owner_email, created_at)\n      VALUES (?, ?, ?, ?)\n      ON CONFLICT (owner_email, tool_id) DO NOTHING`,\n    args: [randomUUID(), id, userEmail, now],\n  });\n  await notifyExtensionChanged([{ owner: userEmail }]);\n  return true;\n}\n\nexport async function unhideExtension(id: string): Promise<boolean> {\n  await ensureExtensionsTables();\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) throw new Error(\"no authenticated user\");\n\n  await getDbExec().execute({\n    sql: `DELETE FROM tool_hidden_extensions WHERE tool_id = ? AND owner_email = ?`,\n    args: [id, userEmail],\n  });\n  await notifyExtensionChanged([{ owner: userEmail }]);\n  return true;\n}\n\n/**\n * Globally hide an extension from EVERYONE's list by stamping `hidden_at` /\n * `hidden_by` on the `tools` row. Distinct from the per-user `hideExtension`\n * (`tool_hidden_extensions`) — this affects all viewers. Requires admin/owner\n * access. The extension is not deleted and stays accessible by id; pass\n * `includeGloballyHidden: true` to `listExtensions` to surface it again.\n */\nexport async function globalHideExtension(id: string): Promise<boolean> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"admin\");\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) throw new Error(\"no authenticated user\");\n\n  const beforeTargets = await extensionChangeTargetsForId(id);\n  const now = new Date().toISOString();\n  await getDbExec().execute({\n    sql: `UPDATE tools SET hidden_at = ?, hidden_by = ?, updated_at = ? WHERE id = ?`,\n    args: [now, userEmail, now, id],\n  });\n  await notifyExtensionChanged([\n    ...beforeTargets,\n    ...(await extensionChangeTargetsForId(id)),\n  ]);\n  return true;\n}\n\n/**\n * Clear a global hide so the extension reappears in everyone's list. Requires\n * admin/owner access. Mirrors `globalHideExtension`.\n */\nexport async function globalUnhideExtension(id: string): Promise<boolean> {\n  await ensureExtensionsTables();\n  await assertAccess(\"extension\", id, \"admin\");\n  const userEmail = getRequestUserEmail();\n  if (!userEmail) throw new Error(\"no authenticated user\");\n\n  const beforeTargets = await extensionChangeTargetsForId(id);\n  const now = new Date().toISOString();\n  await getDbExec().execute({\n    sql: `UPDATE tools SET hidden_at = NULL, hidden_by = NULL, updated_at = ? WHERE id = ?`,\n    args: [now, id],\n  });\n  await notifyExtensionChanged([\n    ...beforeTargets,\n    ...(await extensionChangeTargetsForId(id)),\n  ]);\n  return true;\n}\n"]}

package/dist/server/recap-image-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recap-image-route.d.ts","sourceRoot":"","sources":["../../src/server/recap-image-route.ts"],"names":[],"mappings":"AA+MA;;;;;GAKG;AACH,wBAAgB,uBAAuB,2FAoBtC"}
+{"version":3,"file":"recap-image-route.d.ts","sourceRoot":"","sources":["../../src/server/recap-image-route.ts"],"names":[],"mappings":"AAyNA;;;;;GAKG;AACH,wBAAgB,uBAAuB,2FAoBtC"}

package/dist/server/recap-image-route.js

@@ -81,11 +81,20 @@ async function resolveUploadSession(event) {
  * `{ pngBase64 }`. Returns `null` on a malformed/oversized/non-PNG payload.
  */
 async function readPngFromRequest(event) {
-    const raw = await readRawBody(event, false).catch(() => undefined);
-    if (!raw || raw.byteLength === 0)
+    const rawBody = await readRawBody(event, false).catch(() => undefined);
+    if (!rawBody || rawBody.byteLength === 0)
         return null;
-    if (raw.byteLength > RECAP_IMAGE_MAX_BYTES)
+    if (rawBody.byteLength > RECAP_IMAGE_MAX_BYTES)
         return null;
+    // h3 v2's `readRawBody(event, false)` resolves a bare `Uint8Array`, not a Node
+    // `Buffer`. Normalize once so the downstream Buffer-only operations behave:
+    // `isPngBuffer`'s `Buffer#equals` THROWS on a Uint8Array (no such method), and
+    // `saveRecapImage`'s `png.toString("base64")` SILENTLY mis-encodes it (a bare
+    // Uint8Array ignores the encoding arg and returns comma-joined digits). Either
+    // sinks the upload — the thrown TypeError surfaced as a 500, so the recap CLI
+    // saw `!res.ok`, returned a null imageUrl, and the PR comment lost its inline
+    // thumbnail. Copying into a Buffer is cheap for a ~5 MB-capped screenshot.
+    const raw = Buffer.isBuffer(rawBody) ? rawBody : Buffer.from(rawBody);
     const contentType = (getHeader(event, "content-type") || "").toLowerCase();
     if (contentType.includes("application/json")) {
         let parsed;

package/dist/server/recap-image-route.js.map

@@ -1 +1 @@
-{"version":3,"file":"recap-image-route.js","sourceRoot":"","sources":["../../src/server/recap-image-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,WAAW,EACX,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,UAAU,EAAoB,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAEhC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhF,uEAAuE;AACvE,MAAM,yBAAyB,GAC7B,0FAA0F,CAAC;AAE7F,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,CACL,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU;QACtC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CACrC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,oBAAoB,CACjC,KAAc;IAEd,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,OAAO,EAAE,KAAK;QAAE,OAAO,OAAO,CAAC;IAEnC,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,gDAAgD;IAChD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC,GACrE,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,MAAM,CAAC,uBAAuB,CAAC;YAC/B,MAAM,CAAC,wBAAwB,CAAC;SACjC,CAAC,CAAC;QACL,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE;YACrD,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC;YACvC,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IAAI,CAAC,QAAQ,EAAE,SAAS;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,KAAK,GACT,QAAQ,CAAC,KAAK,IAAI,CAAC,MAAM,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACvE,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,SAAS;YACzB,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;YAChD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAAC,KAAc;IAC9C,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,GAAG,CAAC,UAAU,GAAG,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAExD,MAAM,WAAW,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAE3E,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAI,MAAkC,EAAE,SAAS,CAAC;QAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,qBAAqB,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,uEAAuE;IACvE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,8DAA8D;AAC9D,KAAK,UAAU,YAAY,CAAC,KAAc;IACxC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,gGAAgG;SACnG,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,SAAS,CACxB,KAAK,EACL,8BAA8B,KAAK,MAAM,CAC1C,CAAC;QACF,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAC7D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,WAAW,CAAC,KAAc,EAAE,OAAe;IACxD,oEAAoE;IACpE,gDAAgD;IAChD,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,sEAAsE;IACtE,4EAA4E;IAC5E,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,wBAAwB;QACxC,eAAe,EAAE,yBAAyB;QAC1C,mBAAmB,EAAE,yBAAyB;QAC9C,8BAA8B,EAAE,cAAc;QAC9C,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;KAClD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QACjD,MAAM,OAAO,GACX,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAEhC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;YAClD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Routes for signed, content-only recap PNG images.\n *\n *   POST /_agent-native/recap-image\n *     Auth: `Authorization: Bearer <token>` — accepts the SAME tokens the MCP /\n *     action surface accepts: a legacy `sessions` bearer (desktop/native) OR a\n *     connect-minted MCP OAuth access token (the `agent-native connect` token,\n *     audience-bound to this app's `{origin}/_agent-native/mcp` resource). A\n *     normal browser session cookie is also accepted. Rejects unauthenticated\n *     callers with 401.\n *     Body: raw `image/png` bytes, or JSON `{ \"pngBase64\": \"...\" }`. Capped at\n *     ~5 MB. Stores the PNG and returns `{ imageUrl: \"<origin>/_agent-native/\n *     recap-image/<token>.png\" }`.\n *\n *   GET /_agent-native/recap-image/<token>.png\n *     ANONYMOUS (no auth) so GitHub's camo image proxy can fetch it into a\n *     private-repo PR comment. Returns the stored PNG with a strict\n *     `Content-Type: image/png` and a long immutable cache header. 404 on an\n *     unknown/malformed token. Only ever serves opaque image bytes — no plan\n *     data leaks through this route.\n */\nimport {\n  defineEventHandler,\n  getHeader,\n  getMethod,\n  readRawBody,\n  setResponseHeader,\n  setResponseStatus,\n  type H3Event,\n} from \"h3\";\nimport { getSession, type AuthSession } from \"./auth.js\";\nimport { getAppUrl } from \"./google-oauth.js\";\nimport {\n  RECAP_IMAGE_CONTENT_TYPE,\n  RECAP_IMAGE_MAX_BYTES,\n  getRecapImage,\n  isValidRecapImageToken,\n  saveRecapImage,\n} from \"./recap-image-store.js\";\n\nconst PNG_MAGIC = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);\n\n/** Long immutable cache — the bytes for a given token never change. */\nconst RECAP_IMAGE_CACHE_CONTROL =\n  \"public, max-age=31536000, immutable, stale-while-revalidate=604800, stale-if-error=86400\";\n\nfunction isPngBuffer(buf: Buffer): boolean {\n  return (\n    buf.byteLength >= PNG_MAGIC.byteLength &&\n    buf.subarray(0, 8).equals(PNG_MAGIC)\n  );\n}\n\n/**\n * Resolve a session for the upload route. Reuses the SAME acceptance the MCP /\n * action surface uses:\n *   1. `getSession(event)` — browser cookie, ACCESS_TOKEN, and legacy bearer\n *      (`sessions` table) tokens.\n *   2. A connect-minted MCP OAuth access token, verified through the MCP\n *      surface's canonical `verifyAuth` with this app's MCP resource as the\n *      expected audience and `allowDevOpen: false`. `getSession` only honors\n *      this token on the `/_agent-native/actions/*` surface, so we mirror that\n *      verification here for the recap-image upload route.\n */\nasync function resolveUploadSession(\n  event: H3Event,\n): Promise<AuthSession | null> {\n  const session = await getSession(event).catch(() => null);\n  if (session?.email) return session;\n\n  // Trim once and reuse the trimmed value everywhere. Match verifyAuth's check\n  // exactly — a literal, case-sensitive `Bearer ` prefix (not `/i`, not `\\s+`) —\n  // so this pre-check never accepts a header that verifyAuth would then reject\n  // (e.g. lowercase `bearer` or a tab separator).\n  const authHeader = getHeader(event, \"authorization\")?.trim();\n  if (!authHeader || !/^Bearer \\S/.test(authHeader)) return null;\n\n  try {\n    const [{ getMcpOAuthResource }, { verifyAuth, resolveOrgIdFromDomain }] =\n      await Promise.all([\n        import(\"../mcp/oauth-route.js\"),\n        import(\"../mcp/build-server.js\"),\n      ]);\n    const result = await verifyAuth(authHeader, undefined, {\n      resourceUrl: getMcpOAuthResource(event),\n      allowDevOpen: false,\n    });\n    const identity = result.authed ? result.identity : undefined;\n    if (!identity?.userEmail) return null;\n    const orgId =\n      identity.orgId ?? (await resolveOrgIdFromDomain(identity.orgDomain));\n    return {\n      email: identity.userEmail,\n      token: authHeader.replace(/^Bearer /, \"\").trim(),\n      ...(orgId ? { orgId } : {}),\n    };\n  } catch (error) {\n    console.error(\"[recap-image] bearer verification error:\", error);\n    return null;\n  }\n}\n\n/**\n * Extract PNG bytes from the request. Supports raw `image/png` bytes and JSON\n * `{ pngBase64 }`. Returns `null` on a malformed/oversized/non-PNG payload.\n */\nasync function readPngFromRequest(event: H3Event): Promise<Buffer | null> {\n  const raw = await readRawBody(event, false).catch(() => undefined);\n  if (!raw || raw.byteLength === 0) return null;\n  if (raw.byteLength > RECAP_IMAGE_MAX_BYTES) return null;\n\n  const contentType = (getHeader(event, \"content-type\") || \"\").toLowerCase();\n\n  if (contentType.includes(\"application/json\")) {\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(raw.toString(\"utf8\"));\n    } catch {\n      return null;\n    }\n    const base64 = (parsed as { pngBase64?: unknown })?.pngBase64;\n    if (typeof base64 !== \"string\" || !base64) return null;\n    let bytes: Buffer;\n    try {\n      bytes = Buffer.from(base64, \"base64\");\n    } catch {\n      return null;\n    }\n    if (bytes.byteLength === 0 || bytes.byteLength > RECAP_IMAGE_MAX_BYTES) {\n      return null;\n    }\n    return isPngBuffer(bytes) ? bytes : null;\n  }\n\n  // Default: treat the raw body as PNG bytes (image/png or unspecified).\n  return isPngBuffer(raw) ? raw : null;\n}\n\n/** POST /_agent-native/recap-image — authenticated upload. */\nasync function handleUpload(event: H3Event): Promise<unknown> {\n  const session = await resolveUploadSession(event);\n  if (!session?.email) {\n    setResponseStatus(event, 401);\n    return { error: \"Authentication required\" };\n  }\n\n  const png = await readPngFromRequest(event);\n  if (!png) {\n    setResponseStatus(event, 400);\n    return {\n      error:\n        \"Expected a PNG image (Content-Type: image/png raw bytes, or JSON { pngBase64 }), at most 5 MB.\",\n    };\n  }\n\n  try {\n    const { token } = await saveRecapImage(png, { ownerEmail: session.email });\n    const imageUrl = getAppUrl(\n      event,\n      `/_agent-native/recap-image/${token}.png`,\n    );\n    setResponseStatus(event, 201);\n    return { imageUrl };\n  } catch (error) {\n    console.error(\"[recap-image] failed to store image:\", error);\n    setResponseStatus(event, 500);\n    return { error: \"Failed to store recap image\" };\n  }\n}\n\n/** GET/HEAD /_agent-native/recap-image/<token>.png — anonymous, content-only. */\nasync function handleServe(event: H3Event, segment: string): Promise<unknown> {\n  // Require the strict `<hex>.png` shape — no directory traversal, no\n  // alternate extensions, no extra path segments.\n  const match = /^([0-9a-f]+)\\.png$/i.exec(segment);\n  const token = match?.[1]?.toLowerCase() ?? \"\";\n  if (!isValidRecapImageToken(token)) {\n    setResponseStatus(event, 404);\n    return { error: \"Not found\" };\n  }\n\n  const stored = await getRecapImage(token).catch(() => null);\n  if (!stored) {\n    setResponseStatus(event, 404);\n    return { error: \"Not found\" };\n  }\n\n  // Strict image/png on read regardless of what was stored, plus a long\n  // immutable cache and a cross-origin policy so the camo proxy can fetch it.\n  const headers: Record<string, string> = {\n    \"Content-Type\": RECAP_IMAGE_CONTENT_TYPE,\n    \"Cache-Control\": RECAP_IMAGE_CACHE_CONTROL,\n    \"CDN-Cache-Control\": RECAP_IMAGE_CACHE_CONTROL,\n    \"Cross-Origin-Resource-Policy\": \"cross-origin\",\n    \"Content-Length\": String(stored.bytes.byteLength),\n  };\n  for (const [name, value] of Object.entries(headers)) {\n    setResponseHeader(event, name, value);\n  }\n\n  if (getMethod(event) === \"HEAD\") return \"\";\n\n  const body = new ArrayBuffer(stored.bytes.byteLength);\n  new Uint8Array(body).set(stored.bytes);\n  return new Response(body, { headers });\n}\n\n/**\n * Combined handler for the recap-image routes. Mount as a PREFIX handler at\n * `/_agent-native/recap-image`; the framework strips the mount prefix, so:\n *   - `event.url.pathname === \"/\"`           → POST upload (authenticated)\n *   - `event.url.pathname === \"/<token>.png\"` → GET/HEAD serve (anonymous)\n */\nexport function createRecapImageHandler() {\n  return defineEventHandler(async (event: H3Event) => {\n    const segment =\n      (event.url?.pathname || \"\").replace(/^\\/+/, \"\").split(\"/\")[0] || \"\";\n    const method = getMethod(event);\n\n    if (!segment) {\n      if (method === \"POST\") return handleUpload(event);\n      setResponseStatus(event, 405);\n      setResponseHeader(event, \"Allow\", \"POST\");\n      return { error: \"Method not allowed\" };\n    }\n\n    if (method === \"GET\" || method === \"HEAD\") {\n      return handleServe(event, segment);\n    }\n    setResponseStatus(event, 405);\n    setResponseHeader(event, \"Allow\", \"GET, HEAD\");\n    return { error: \"Method not allowed\" };\n  });\n}\n"]}
+{"version":3,"file":"recap-image-route.js","sourceRoot":"","sources":["../../src/server/recap-image-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,WAAW,EACX,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,UAAU,EAAoB,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAEhC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhF,uEAAuE;AACvE,MAAM,yBAAyB,GAC7B,0FAA0F,CAAC;AAE7F,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,CACL,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU;QACtC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CACrC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,oBAAoB,CACjC,KAAc;IAEd,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,OAAO,EAAE,KAAK;QAAE,OAAO,OAAO,CAAC;IAEnC,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,gDAAgD;IAChD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC,GACrE,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,MAAM,CAAC,uBAAuB,CAAC;YAC/B,MAAM,CAAC,wBAAwB,CAAC;SACjC,CAAC,CAAC;QACL,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE;YACrD,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC;YACvC,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IAAI,CAAC,QAAQ,EAAE,SAAS;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,KAAK,GACT,QAAQ,CAAC,KAAK,IAAI,CAAC,MAAM,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACvE,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,SAAS;YACzB,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;YAChD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAAC,KAAc;IAC9C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,OAAO,CAAC,UAAU,GAAG,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAE5D,+EAA+E;IAC/E,4EAA4E;IAC5E,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEtE,MAAM,WAAW,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAE3E,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAI,MAAkC,EAAE,SAAS,CAAC;QAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,qBAAqB,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,uEAAuE;IACvE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,8DAA8D;AAC9D,KAAK,UAAU,YAAY,CAAC,KAAc;IACxC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,gGAAgG;SACnG,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,SAAS,CACxB,KAAK,EACL,8BAA8B,KAAK,MAAM,CAC1C,CAAC;QACF,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAC7D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,WAAW,CAAC,KAAc,EAAE,OAAe;IACxD,oEAAoE;IACpE,gDAAgD;IAChD,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,sEAAsE;IACtE,4EAA4E;IAC5E,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,wBAAwB;QACxC,eAAe,EAAE,yBAAyB;QAC1C,mBAAmB,EAAE,yBAAyB;QAC9C,8BAA8B,EAAE,cAAc;QAC9C,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;KAClD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QACjD,MAAM,OAAO,GACX,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAEhC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;YAClD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Routes for signed, content-only recap PNG images.\n *\n *   POST /_agent-native/recap-image\n *     Auth: `Authorization: Bearer <token>` — accepts the SAME tokens the MCP /\n *     action surface accepts: a legacy `sessions` bearer (desktop/native) OR a\n *     connect-minted MCP OAuth access token (the `agent-native connect` token,\n *     audience-bound to this app's `{origin}/_agent-native/mcp` resource). A\n *     normal browser session cookie is also accepted. Rejects unauthenticated\n *     callers with 401.\n *     Body: raw `image/png` bytes, or JSON `{ \"pngBase64\": \"...\" }`. Capped at\n *     ~5 MB. Stores the PNG and returns `{ imageUrl: \"<origin>/_agent-native/\n *     recap-image/<token>.png\" }`.\n *\n *   GET /_agent-native/recap-image/<token>.png\n *     ANONYMOUS (no auth) so GitHub's camo image proxy can fetch it into a\n *     private-repo PR comment. Returns the stored PNG with a strict\n *     `Content-Type: image/png` and a long immutable cache header. 404 on an\n *     unknown/malformed token. Only ever serves opaque image bytes — no plan\n *     data leaks through this route.\n */\nimport {\n  defineEventHandler,\n  getHeader,\n  getMethod,\n  readRawBody,\n  setResponseHeader,\n  setResponseStatus,\n  type H3Event,\n} from \"h3\";\nimport { getSession, type AuthSession } from \"./auth.js\";\nimport { getAppUrl } from \"./google-oauth.js\";\nimport {\n  RECAP_IMAGE_CONTENT_TYPE,\n  RECAP_IMAGE_MAX_BYTES,\n  getRecapImage,\n  isValidRecapImageToken,\n  saveRecapImage,\n} from \"./recap-image-store.js\";\n\nconst PNG_MAGIC = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);\n\n/** Long immutable cache — the bytes for a given token never change. */\nconst RECAP_IMAGE_CACHE_CONTROL =\n  \"public, max-age=31536000, immutable, stale-while-revalidate=604800, stale-if-error=86400\";\n\nfunction isPngBuffer(buf: Buffer): boolean {\n  return (\n    buf.byteLength >= PNG_MAGIC.byteLength &&\n    buf.subarray(0, 8).equals(PNG_MAGIC)\n  );\n}\n\n/**\n * Resolve a session for the upload route. Reuses the SAME acceptance the MCP /\n * action surface uses:\n *   1. `getSession(event)` — browser cookie, ACCESS_TOKEN, and legacy bearer\n *      (`sessions` table) tokens.\n *   2. A connect-minted MCP OAuth access token, verified through the MCP\n *      surface's canonical `verifyAuth` with this app's MCP resource as the\n *      expected audience and `allowDevOpen: false`. `getSession` only honors\n *      this token on the `/_agent-native/actions/*` surface, so we mirror that\n *      verification here for the recap-image upload route.\n */\nasync function resolveUploadSession(\n  event: H3Event,\n): Promise<AuthSession | null> {\n  const session = await getSession(event).catch(() => null);\n  if (session?.email) return session;\n\n  // Trim once and reuse the trimmed value everywhere. Match verifyAuth's check\n  // exactly — a literal, case-sensitive `Bearer ` prefix (not `/i`, not `\\s+`) —\n  // so this pre-check never accepts a header that verifyAuth would then reject\n  // (e.g. lowercase `bearer` or a tab separator).\n  const authHeader = getHeader(event, \"authorization\")?.trim();\n  if (!authHeader || !/^Bearer \\S/.test(authHeader)) return null;\n\n  try {\n    const [{ getMcpOAuthResource }, { verifyAuth, resolveOrgIdFromDomain }] =\n      await Promise.all([\n        import(\"../mcp/oauth-route.js\"),\n        import(\"../mcp/build-server.js\"),\n      ]);\n    const result = await verifyAuth(authHeader, undefined, {\n      resourceUrl: getMcpOAuthResource(event),\n      allowDevOpen: false,\n    });\n    const identity = result.authed ? result.identity : undefined;\n    if (!identity?.userEmail) return null;\n    const orgId =\n      identity.orgId ?? (await resolveOrgIdFromDomain(identity.orgDomain));\n    return {\n      email: identity.userEmail,\n      token: authHeader.replace(/^Bearer /, \"\").trim(),\n      ...(orgId ? { orgId } : {}),\n    };\n  } catch (error) {\n    console.error(\"[recap-image] bearer verification error:\", error);\n    return null;\n  }\n}\n\n/**\n * Extract PNG bytes from the request. Supports raw `image/png` bytes and JSON\n * `{ pngBase64 }`. Returns `null` on a malformed/oversized/non-PNG payload.\n */\nasync function readPngFromRequest(event: H3Event): Promise<Buffer | null> {\n  const rawBody = await readRawBody(event, false).catch(() => undefined);\n  if (!rawBody || rawBody.byteLength === 0) return null;\n  if (rawBody.byteLength > RECAP_IMAGE_MAX_BYTES) return null;\n\n  // h3 v2's `readRawBody(event, false)` resolves a bare `Uint8Array`, not a Node\n  // `Buffer`. Normalize once so the downstream Buffer-only operations behave:\n  // `isPngBuffer`'s `Buffer#equals` THROWS on a Uint8Array (no such method), and\n  // `saveRecapImage`'s `png.toString(\"base64\")` SILENTLY mis-encodes it (a bare\n  // Uint8Array ignores the encoding arg and returns comma-joined digits). Either\n  // sinks the upload — the thrown TypeError surfaced as a 500, so the recap CLI\n  // saw `!res.ok`, returned a null imageUrl, and the PR comment lost its inline\n  // thumbnail. Copying into a Buffer is cheap for a ~5 MB-capped screenshot.\n  const raw = Buffer.isBuffer(rawBody) ? rawBody : Buffer.from(rawBody);\n\n  const contentType = (getHeader(event, \"content-type\") || \"\").toLowerCase();\n\n  if (contentType.includes(\"application/json\")) {\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(raw.toString(\"utf8\"));\n    } catch {\n      return null;\n    }\n    const base64 = (parsed as { pngBase64?: unknown })?.pngBase64;\n    if (typeof base64 !== \"string\" || !base64) return null;\n    let bytes: Buffer;\n    try {\n      bytes = Buffer.from(base64, \"base64\");\n    } catch {\n      return null;\n    }\n    if (bytes.byteLength === 0 || bytes.byteLength > RECAP_IMAGE_MAX_BYTES) {\n      return null;\n    }\n    return isPngBuffer(bytes) ? bytes : null;\n  }\n\n  // Default: treat the raw body as PNG bytes (image/png or unspecified).\n  return isPngBuffer(raw) ? raw : null;\n}\n\n/** POST /_agent-native/recap-image — authenticated upload. */\nasync function handleUpload(event: H3Event): Promise<unknown> {\n  const session = await resolveUploadSession(event);\n  if (!session?.email) {\n    setResponseStatus(event, 401);\n    return { error: \"Authentication required\" };\n  }\n\n  const png = await readPngFromRequest(event);\n  if (!png) {\n    setResponseStatus(event, 400);\n    return {\n      error:\n        \"Expected a PNG image (Content-Type: image/png raw bytes, or JSON { pngBase64 }), at most 5 MB.\",\n    };\n  }\n\n  try {\n    const { token } = await saveRecapImage(png, { ownerEmail: session.email });\n    const imageUrl = getAppUrl(\n      event,\n      `/_agent-native/recap-image/${token}.png`,\n    );\n    setResponseStatus(event, 201);\n    return { imageUrl };\n  } catch (error) {\n    console.error(\"[recap-image] failed to store image:\", error);\n    setResponseStatus(event, 500);\n    return { error: \"Failed to store recap image\" };\n  }\n}\n\n/** GET/HEAD /_agent-native/recap-image/<token>.png — anonymous, content-only. */\nasync function handleServe(event: H3Event, segment: string): Promise<unknown> {\n  // Require the strict `<hex>.png` shape — no directory traversal, no\n  // alternate extensions, no extra path segments.\n  const match = /^([0-9a-f]+)\\.png$/i.exec(segment);\n  const token = match?.[1]?.toLowerCase() ?? \"\";\n  if (!isValidRecapImageToken(token)) {\n    setResponseStatus(event, 404);\n    return { error: \"Not found\" };\n  }\n\n  const stored = await getRecapImage(token).catch(() => null);\n  if (!stored) {\n    setResponseStatus(event, 404);\n    return { error: \"Not found\" };\n  }\n\n  // Strict image/png on read regardless of what was stored, plus a long\n  // immutable cache and a cross-origin policy so the camo proxy can fetch it.\n  const headers: Record<string, string> = {\n    \"Content-Type\": RECAP_IMAGE_CONTENT_TYPE,\n    \"Cache-Control\": RECAP_IMAGE_CACHE_CONTROL,\n    \"CDN-Cache-Control\": RECAP_IMAGE_CACHE_CONTROL,\n    \"Cross-Origin-Resource-Policy\": \"cross-origin\",\n    \"Content-Length\": String(stored.bytes.byteLength),\n  };\n  for (const [name, value] of Object.entries(headers)) {\n    setResponseHeader(event, name, value);\n  }\n\n  if (getMethod(event) === \"HEAD\") return \"\";\n\n  const body = new ArrayBuffer(stored.bytes.byteLength);\n  new Uint8Array(body).set(stored.bytes);\n  return new Response(body, { headers });\n}\n\n/**\n * Combined handler for the recap-image routes. Mount as a PREFIX handler at\n * `/_agent-native/recap-image`; the framework strips the mount prefix, so:\n *   - `event.url.pathname === \"/\"`           → POST upload (authenticated)\n *   - `event.url.pathname === \"/<token>.png\"` → GET/HEAD serve (anonymous)\n */\nexport function createRecapImageHandler() {\n  return defineEventHandler(async (event: H3Event) => {\n    const segment =\n      (event.url?.pathname || \"\").replace(/^\\/+/, \"\").split(\"/\")[0] || \"\";\n    const method = getMethod(event);\n\n    if (!segment) {\n      if (method === \"POST\") return handleUpload(event);\n      setResponseStatus(event, 405);\n      setResponseHeader(event, \"Allow\", \"POST\");\n      return { error: \"Method not allowed\" };\n    }\n\n    if (method === \"GET\" || method === \"HEAD\") {\n      return handleServe(event, segment);\n    }\n    setResponseStatus(event, 405);\n    setResponseHeader(event, \"Allow\", \"GET, HEAD\");\n    return { error: \"Method not allowed\" };\n  });\n}\n"]}

package/dist/styles/agent-native.css

@@ -24,6 +24,7 @@
 
 @import "./agent-conversation.css";
 @import "./rich-markdown-editor.css";
+@import "./blocks.css";
 
 /* Scan @agent-native/core's compiled client output for Tailwind classes.
    Path is resolved relative to THIS file. After build, this CSS lives at