@agent-native/core 0.43.0 → 0.44.1

package/dist/chat-threads/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/chat-threads/store.ts"],"names":[],"mappings":"AA4BA,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAeZ;AAuDD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAChC;AAmGD,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,GACrE,OAAO,CAAC,UAAU,CAAC,CAmCrB;AAKD,wBAAsB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAStE;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAA;CAAE,GAC/D,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAkF5B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,qEAAqE;IACrE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,kBAAkB,GAAG,MAAW,EACzC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA6B9B;AAMD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,EACV,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAO,GACrD,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAsB9B;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,OAAO,EACjB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,MAAM,WAAW,uBAAuB;IACtC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAUD,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CAmEf;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAQlC;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,aAAa,EAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/D"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/chat-threads/store.ts"],"names":[],"mappings":"AA4BA,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAeZ;AAyGD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAChC;AAoGD,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,GACrE,OAAO,CAAC,UAAU,CAAC,CAmCrB;AAYD,wBAAsB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAStE;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAA;CAAE,GAC/D,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAkF5B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,qEAAqE;IACrE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,kBAAkB,GAAG,MAAW,EACzC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA8B9B;AAMD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,EACV,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAO,GACrD,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAyB9B;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,OAAO,EACjB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,MAAM,WAAW,uBAAuB;IACtC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAUD,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CAmEf;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAQlC;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,aAAa,EAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/D"}

package/dist/chat-threads/store.js

@@ -74,6 +74,32 @@ async function ensureTable() {
                     // Column already exists.
                 }
             }
+            // Indexes for the hot read paths. Both the sidebar list and the
+            // scoped/per-resource list filter on owner_email (and optionally
+            // scope) and sort by updated_at. Keep these dialect-agnostic (no
+            // DESC, partial, or PG-only syntax) so they apply identically on
+            // SQLite and the configured Postgres. `IF NOT EXISTS` makes them
+            // idempotent across restarts.
+            for (const ddl of [
+                `CREATE INDEX IF NOT EXISTS chat_threads_owner_updated_idx ON chat_threads (owner_email, updated_at)`,
+                `CREATE INDEX IF NOT EXISTS chat_threads_scope_updated_idx ON chat_threads (scope_type, scope_id, updated_at)`,
+            ]) {
+                try {
+                    await client.execute(ddl);
+                }
+                catch {
+                    // Index already exists or the dialect rejected a duplicate.
+                }
+            }
+            // One-time backfill of message_count for legacy rows written before
+            // the column was maintained. The list/summary path now reads
+            // message_count directly (instead of re-parsing the thread_data blob)
+            // and filters on `message_count > 0`, so any legacy row that has
+            // messages but a stale `message_count = 0` would otherwise vanish from
+            // the sidebar. Recompute the count from thread_data and persist it so
+            // the hot path can stay blob-free. Idempotent: only touches rows where
+            // the count is still 0 but the blob clearly contains a messages array.
+            await backfillLegacyMessageCounts(client);
         })().catch((err) => {
             // Retry init on the next call after a failed startup.
             _initPromise = undefined;
@@ -82,6 +108,29 @@ async function ensureTable() {
     }
     return _initPromise;
 }
+/**
+ * Recompute `message_count` from `thread_data` for legacy rows that still
+ * have a stale `message_count = 0` despite carrying a messages array in the
+ * blob. Without this, dropping the `thread_data` payload (and the
+ * `OR thread_data LIKE '%"messages"%'` filter) from the list path would make
+ * those rows disappear from the sidebar. Runs once at table bootstrap and is
+ * idempotent — after the first pass no row matches the WHERE clause again.
+ */
+async function backfillLegacyMessageCounts(client) {
+    const { rows } = await client.execute({
+        sql: `SELECT id, thread_data, message_count FROM chat_threads WHERE message_count = 0 AND thread_data LIKE '%"messages"%'`,
+        args: [],
+    });
+    for (const r of rows) {
+        const count = deriveMessageCount(r.thread_data, 0);
+        if (count <= 0)
+            continue;
+        await client.execute({
+            sql: `UPDATE chat_threads SET message_count = ? WHERE id = ? AND message_count = 0`,
+            args: [count, r.id],
+        });
+    }
+}
 function generateId() {
     return `thread-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
 }
@@ -158,10 +207,11 @@ function rowToThread(r) {
     };
 }
 function rowToSummary(r) {
-    const threadData = r.thread_data;
-    const storedCount = Number(r.message_count);
-    const messageCount = deriveMessageCount(threadData, storedCount);
-    if (messageCount <= 0)
+    // The summary path never loads `thread_data`; the count comes from the
+    // dedicated `message_count` column (maintained on write, backfilled for
+    // legacy rows at bootstrap). Empty threads are filtered out of the list.
+    const messageCount = Number(r.message_count);
+    if (!Number.isFinite(messageCount) || messageCount <= 0)
         return null;
     return {
         id: r.id,
@@ -210,7 +260,14 @@ export async function createThread(ownerEmail, opts) {
     };
 }
 const THREAD_COLUMNS = `id, owner_email, title, preview, thread_data, message_count, created_at, updated_at, scope_type, scope_id, scope_label, pinned_at, archived_at`;
-const SUMMARY_COLUMNS = `id, title, preview, thread_data, message_count, created_at, updated_at, scope_type, scope_id, scope_label, pinned_at, archived_at`;
+// The list/summary path deliberately omits `thread_data`: it is the full
+// message-history JSON blob and selecting it for every row turns "open the
+// sidebar" into "download every conversation". The summary derives nothing
+// from the blob anymore — preview and message_count are dedicated columns
+// (message_count is maintained on write and backfilled for legacy rows at
+// bootstrap). The detail path (`THREAD_COLUMNS` / `getThread`) still returns
+// the full blob.
+const SUMMARY_COLUMNS = `id, title, preview, message_count, created_at, updated_at, scope_type, scope_id, scope_label, pinned_at, archived_at`;
 export async function getThread(id) {
     await ensureTable();
     const client = getDbExec();
@@ -309,10 +366,11 @@ export async function listThreads(ownerEmail, options = {}, legacyOffset) {
     const limit = opts.limit ?? 50;
     const offset = opts.offset ?? 0;
     const client = getDbExec();
-    const filters = [
-        `owner_email = ?`,
-        `(message_count > 0 OR thread_data LIKE '%"messages"%')`,
-    ];
+    // `message_count > 0` is the authoritative "has messages" signal: it is
+    // maintained on every write and backfilled for legacy rows at bootstrap,
+    // so the old `OR thread_data LIKE '%"messages"%'` substring scan over the
+    // full blob is no longer needed here.
+    const filters = [`owner_email = ?`, `message_count > 0`];
     const args = [ownerEmail];
     if (opts.scope) {
         filters.push(`scope_type = ? AND scope_id = ?`);
@@ -337,9 +395,12 @@ export async function searchThreads(ownerEmail, query, limit = 50, options = {})
     await ensureTable();
     const client = getDbExec();
     const pattern = `%${escapeLike(query)}%`;
+    // The count-guard uses the maintained/backfilled `message_count` column
+    // (same as listThreads). The content match still scans `thread_data` —
+    // search legitimately needs to look inside message history.
     const filters = [
         `owner_email = ?`,
-        `(message_count > 0 OR thread_data LIKE '%"messages"%')`,
+        `message_count > 0`,
         `(title LIKE ? ESCAPE '\\' OR preview LIKE ? ESCAPE '\\' OR thread_data LIKE ? ESCAPE '\\')`,
     ];
     const args = [ownerEmail, pattern, pattern, pattern];

package/dist/chat-threads/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/chat-threads/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,IAAI,YAAuC,CAAC;AAE5C;;;;;;;;;;;;;GAaG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA4B,CAAC;AAC7D,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAC/C,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAE3C,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,EAAoB;IAEpB,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/B,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrC,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,kDAAkD;IAClD,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5C,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,IAAkB,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,CAAC,OAAO,CAAC;;;;;;;0BAOD,OAAO,EAAE;uBACZ,OAAO,EAAE;uBACT,OAAO,EAAE;;;;sBAIV,OAAO,EAAE;wBACP,OAAO,EAAE;;OAE1B,CAAC,CAAC;YACH,mEAAmE;YACnE,iEAAiE;YACjE,iEAAiE;YACjE,+DAA+D;YAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI;gBACxB,CAAC,YAAY,EAAE,MAAM,CAAC;gBACtB,CAAC,UAAU,EAAE,MAAM,CAAC;gBACpB,CAAC,aAAa,EAAE,MAAM,CAAC;gBACvB,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;gBACxB,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;aAClB,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,OAAO,CAClB,uCAAuC,GAAG,IAAI,IAAI,EAAE,CACrD,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,sDAAsD;YACtD,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,UAAU,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC1E,CAAC;AAkDD,SAAS,SAAS,CAAC,CAA0B;IAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,UAAuC,CAAC;IACvD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAqC,CAAC;IACnD,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,WAAwC,CAAC;IACzD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,2BAA2B,CAClC,MAAmD;IAQnD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM;QACxB,CAAC,CAAC,CAAC,CAAC;IACN,IAAI,gBAAgB,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAClC,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAC3D,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACjE,YAAY,EAAE,gBAAgB;QAC9B,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YACvD,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE;YACjC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAmB,EAAE,QAAgB;IAC/D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,CAA0B;IAC7C,MAAM,UAAU,GAAI,CAAC,CAAC,WAAsB,IAAI,IAAI,CAAC;IACrD,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC5C,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAY;QAClB,UAAU,EAAE,CAAC,CAAC,WAAqB;QACnC,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,OAAO,EAAE,CAAC,CAAC,OAAiB;QAC5B,UAAU;QACV,YAAY,EAAE,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC;QACzD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACnB,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;QACzC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAA0B;IAC9C,MAAM,UAAU,GAAG,CAAC,CAAC,WAAiC,CAAC;IACvD,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACjE,IAAI,YAAY,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAY;QAClB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,OAAO,EAAE,CAAC,CAAC,OAAiB;QAC5B,YAAY;QACZ,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACnB,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;QACzC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,IAAsE;IAEtE,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC;IAElC,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,gMAAgM;QACrM,IAAI,EAAE;YACJ,EAAE;YACF,UAAU;YACV,KAAK;YACL,GAAG;YACH,GAAG;YACH,KAAK,EAAE,IAAI,IAAI,IAAI;YACnB,KAAK,EAAE,EAAE,IAAI,IAAI;YACjB,KAAK,EAAE,KAAK,IAAI,IAAI;SACrB;KACF,CAAC,CAAC;IAEH,OAAO;QACL,EAAE;QACF,UAAU;QACV,KAAK;QACL,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,KAAK;QACL,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,gJAAgJ,CAAC;AACxK,MAAM,eAAe,GAAG,mIAAmI,CAAC;AAE5J,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,EAAU;IACxC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,UAAU,cAAc,iCAAiC;QAC9D,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAgB,EAChB,UAAkB,EAClB,IAAgE;IAEhE,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,UAAU,EAAE;oBAC7B,EAAE,EAAE,QAAQ;oBACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI;iBAC9B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;YACxE,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;gBACvC,MAAM,gBAAgB,CACpB,QAAQ,EACR,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,EAC/B,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EACnC,QAAQ,CAAC,YAAY,CACtB,CAAC;gBACF,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;oBAC5D,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBACzD,CAAC;gBACD,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IACL,QAAQ;QACR,MAAM,CAAC,UAAU,KAAK,UAAU;QAChC,QAAQ,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,EAC3C,CAAC;QACD,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,OAAO;QACP,MAAM,GAAG;YACP,GAAG,MAAM;YACT,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;YACrC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO;YAC3C,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,4LAA4L;QACjM,IAAI,EAAE;YACJ,EAAE;YACF,UAAU;YACV,KAAK;YACL,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,UAAU;YACjB,MAAM,CAAC,YAAY;YACnB,GAAG;YACH,GAAG;YACH,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI;YAC1B,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI;YACxB,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI;SAC5B;KACF,CAAC,CAAC;IACH,OAAO;QACL,EAAE;QACF,UAAU;QACV,KAAK;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,UAAuC,EAAE,EACzC,YAAqB;IAErB,MAAM,WAAW,EAAE,CAAC;IACpB,mEAAmE;IACnE,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,EAAE;QAC/C,CAAC,CAAC,OAAO,CAAC;IACd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa;QACxB,iBAAiB;QACjB,wDAAwD;KACzD,CAAC;IACF,MAAM,IAAI,GAAwB,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,UAAU,eAAe,4BAA4B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,2GAA2G;QAC1L,IAAI;KACL,CAAC,CAAC;IACH,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAA0B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,KAAa,EACb,KAAK,GAAG,EAAE,EACV,UAAoD,EAAE;IAEtD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;IACzC,MAAM,OAAO,GAAa;QACxB,iBAAiB;QACjB,wDAAwD;QACxD,4FAA4F;KAC7F,CAAC;IACF,MAAM,IAAI,GAAwB,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,UAAU,eAAe,4BAA4B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,kGAAkG;QACjL,IAAI;KACL,CAAC,CAAC;IACH,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAA0B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,KAA6B;IAE7B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,oGAAoG;QACzG,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI,IAAI,IAAI;YACnB,KAAK,EAAE,EAAE,IAAI,IAAI;YACjB,KAAK,EAAE,KAAK,IAAI,IAAI;YACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACvB,EAAE;SACH;KACF,CAAC,CAAC;IACH,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,KAAa,EACb,UAAmC,EAAE;IAErC,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7B,OAAO,MAAM,kBAAkB,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,MAAM,gBAAgB,CACpB,EAAE,EACF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,SAAS,EACT,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,YAAY,CACpB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAU,EACV,MAAe,EACf,UAAmC,EAAE;IAErC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAA+B,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACnE,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,WAAW,GAAG,sBAAsB,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,qDAAqD,WAAW,EAAE;QACvE,IAAI;KACL,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAU,EACV,QAAiB,EACjB,UAAmC,EAAE;IAErC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAA+B,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,WAAW,GAAG,sBAAsB,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,uDAAuD,WAAW,EAAE;QACzE,IAAI;KACL,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAU,EACV,UAAkB,EAClB,KAAa,EACb,OAAe,EACf,YAAoB,EACpB,UAAmC,EAAE;IAErC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,IAAI,mCAAmC,CAAC;IAC7D,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,cAAc,GAAG,UAAU,CAAC;QAChC,IAAI,gBAAgB,GAAG,YAAY,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,4BAA4B,CACzC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,EACnC,eAAe,CAAC,UAAU,CAAC,EAC3B;gBACE,8BAA8B,EAC5B,OAAO,CAAC,8BAA8B,IAAI,IAAI;gBAChD,4BAA4B,EAC1B,OAAO,CAAC,4BAA4B,IAAI,IAAI;aAC/C,CACF,CAAC;YACF,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnC,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,oIAAoI;YACzI,IAAI,EAAE;gBACJ,cAAc;gBACd,KAAK;gBACL,OAAO;gBACP,gBAAgB;gBAChB,aAAa;gBACb,EAAE;gBACF,OAAO,CAAC,SAAS;aAClB;SACF,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YAC5B,oBAAoB,CAAC,EAAE,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QAED,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,OAAO,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5B,UAAU,CACR,OAAO,EACP,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,+BAA+B,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAC/D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,gCAAgC,EAAE,oCAAoC,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,UAAU;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU;YAAE,OAAO,IAAI,CAAC,UAA8B,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,IAAsB;IAEtB,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,IAAI,GAA4B,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,MAAM,gBAAgB,CACpB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,YAAY,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,cAA+B;IAE/B,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,IAAI,GAA4B,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACvC,CAAC;QACD,MAAM,gBAAgB,CACpB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,YAAY,EACnB,EAAE,8BAA8B,EAAE,KAAK,EAAE,CAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU;IAC3C,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,uCAAuC;QAC5C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { getDbExec, intType } from \"../db/client.js\";\nimport {\n  mergeThreadDataForClientSave,\n  normalizeThreadRepository,\n  normalizeThreadTitle,\n} from \"../agent/thread-data-builder.js\";\nimport { emitChatThreadChange } from \"./emitter.js\";\n\nlet _initPromise: Promise<void> | undefined;\n\n/**\n * Per-thread async mutex. Read-modify-write on the `thread_data` JSON blob\n * is not atomic at the DB level — two concurrent callers (e.g. the UI\n * persisting queued messages while `onRunComplete` appends agent output)\n * would both read the same row, each mutate it independently, and the\n * second write clobbers the first. Serializing on thread id inside this\n * process eliminates the race for the usual single-process deployment\n * while leaving straight reads and other thread-data-unrelated updates\n * untouched.\n *\n * Cross-process races are handled by `updateThreadData`, which performs a\n * compare-and-swap on `updated_at`, rereads the latest row on conflict, and\n * remerges message history before retrying.\n */\nconst _threadDataLocks = new Map<string, Promise<unknown>>();\nconst DEFAULT_THREAD_DATA_UPDATE_ATTEMPTS = 12;\nconst THREAD_DATA_CONFLICT_BACKOFF_MS = 25;\n\nexport function withThreadDataLock<T>(\n  threadId: string,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const prev = _threadDataLocks.get(threadId) ?? Promise.resolve();\n  const next = prev.then(fn, fn);\n  _threadDataLocks.set(threadId, next);\n  // Use `.then(cleanup, cleanup)` (not `.finally`) so the rejection is\n  // observed on this chained promise — otherwise any failure inside `fn`\n  // triggers `unhandledRejection` on the discarded `finally()` return.\n  // The caller still sees the rejection via `next`.\n  const cleanup = () => {\n    if (_threadDataLocks.get(threadId) === next) {\n      _threadDataLocks.delete(threadId);\n    }\n  };\n  next.then(cleanup, cleanup);\n  return next as Promise<T>;\n}\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      await client.execute(`\n        CREATE TABLE IF NOT EXISTS chat_threads (\n          id TEXT PRIMARY KEY,\n          owner_email TEXT NOT NULL,\n          title TEXT NOT NULL DEFAULT '',\n          preview TEXT NOT NULL DEFAULT '',\n          thread_data TEXT NOT NULL DEFAULT '{}',\n          message_count ${intType()} NOT NULL DEFAULT 0,\n          created_at ${intType()} NOT NULL,\n          updated_at ${intType()} NOT NULL,\n          scope_type TEXT,\n          scope_id TEXT,\n          scope_label TEXT,\n          pinned_at ${intType()},\n          archived_at ${intType()}\n        )\n      `);\n      // Additive migration for existing tables. Both SQLite and Postgres\n      // accept `ALTER TABLE ADD COLUMN` and will raise when the column\n      // already exists; the try/catch makes the call idempotent across\n      // both dialects without requiring an information_schema probe.\n      for (const [col, type] of [\n        [\"scope_type\", \"TEXT\"],\n        [\"scope_id\", \"TEXT\"],\n        [\"scope_label\", \"TEXT\"],\n        [\"pinned_at\", intType()],\n        [\"archived_at\", intType()],\n      ] as const) {\n        try {\n          await client.execute(\n            `ALTER TABLE chat_threads ADD COLUMN ${col} ${type}`,\n          );\n        } catch {\n          // Column already exists.\n        }\n      }\n    })().catch((err) => {\n      // Retry init on the next call after a failed startup.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nfunction generateId(): string {\n  return `thread-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;\n}\n\n/**\n * A resource the chat is bound to, e.g. `{ type: \"deck\", id: \"deck-abc\" }`.\n * The framework is opaque to the type string — each template chooses what\n * its primary resource is and the surface it scopes to (deck, design,\n * dashboard, etc.). `label` is a denormalized snapshot for display when\n * the resource isn't on hand at render time; the live template can\n * overwrite it via the next createThread call.\n */\nexport interface ChatThreadScope {\n  type: string;\n  id: string;\n  label?: string;\n}\n\nexport interface ChatThread {\n  id: string;\n  ownerEmail: string;\n  title: string;\n  preview: string;\n  threadData: string;\n  messageCount: number;\n  createdAt: number;\n  updatedAt: number;\n  scope: ChatThreadScope | null;\n  pinnedAt: number | null;\n  archivedAt: number | null;\n}\n\nexport interface ChatThreadSummary {\n  id: string;\n  title: string;\n  preview: string;\n  messageCount: number;\n  createdAt: number;\n  updatedAt: number;\n  scope: ChatThreadScope | null;\n  pinnedAt: number | null;\n  archivedAt: number | null;\n}\n\nexport interface ForkThreadSourceSnapshot {\n  threadData: string;\n  title?: string;\n  preview?: string;\n  messageCount?: number;\n  scope?: ChatThreadScope | null;\n}\n\nfunction readScope(r: Record<string, unknown>): ChatThreadScope | null {\n  const type = r.scope_type as string | null | undefined;\n  const id = r.scope_id as string | null | undefined;\n  if (!type || !id) return null;\n  const label = r.scope_label as string | null | undefined;\n  return label ? { type, id, label } : { type, id };\n}\n\nfunction readNullableNumber(value: unknown): number | null {\n  if (value == null) return null;\n  const n = Number(value);\n  return Number.isFinite(n) && n > 0 ? n : null;\n}\n\nfunction normalizeForkSourceSnapshot(\n  source: ForkThreadSourceSnapshot | null | undefined,\n): {\n  threadData: string;\n  title: string;\n  preview: string;\n  messageCount: number;\n  scope?: ChatThreadScope | null;\n} | null {\n  if (!source || typeof source.threadData !== \"string\") return null;\n  const threadData = source.threadData.trim();\n  if (!threadData) return null;\n\n  let parsed: any;\n  try {\n    parsed = normalizeThreadRepository(JSON.parse(threadData));\n  } catch {\n    return null;\n  }\n\n  const repoMessageCount = Array.isArray(parsed.messages)\n    ? parsed.messages.length\n    : 0;\n  if (repoMessageCount <= 0) return null;\n\n  return {\n    threadData: JSON.stringify(parsed),\n    title: typeof source.title === \"string\" ? source.title : \"\",\n    preview: typeof source.preview === \"string\" ? source.preview : \"\",\n    messageCount: repoMessageCount,\n    ...(Object.prototype.hasOwnProperty.call(source, \"scope\")\n      ? { scope: source.scope ?? null }\n      : {}),\n  };\n}\n\nfunction deriveMessageCount(threadData: unknown, fallback: number): number {\n  if (typeof threadData !== \"string\" || !threadData.trim()) return fallback;\n  try {\n    const repo = normalizeThreadRepository(JSON.parse(threadData));\n    if (Array.isArray(repo.messages)) return repo.messages.length;\n  } catch {\n    // Keep the stored count if the JSON blob is malformed.\n  }\n  return fallback;\n}\n\nfunction rowToThread(r: Record<string, unknown>): ChatThread {\n  const threadData = (r.thread_data as string) ?? \"{}\";\n  const storedCount = Number(r.message_count);\n  return {\n    id: r.id as string,\n    ownerEmail: r.owner_email as string,\n    title: r.title as string,\n    preview: r.preview as string,\n    threadData,\n    messageCount: deriveMessageCount(threadData, storedCount),\n    createdAt: Number(r.created_at),\n    updatedAt: Number(r.updated_at),\n    scope: readScope(r),\n    pinnedAt: readNullableNumber(r.pinned_at),\n    archivedAt: readNullableNumber(r.archived_at),\n  };\n}\n\nfunction rowToSummary(r: Record<string, unknown>): ChatThreadSummary | null {\n  const threadData = r.thread_data as string | undefined;\n  const storedCount = Number(r.message_count);\n  const messageCount = deriveMessageCount(threadData, storedCount);\n  if (messageCount <= 0) return null;\n  return {\n    id: r.id as string,\n    title: r.title as string,\n    preview: r.preview as string,\n    messageCount,\n    createdAt: Number(r.created_at),\n    updatedAt: Number(r.updated_at),\n    scope: readScope(r),\n    pinnedAt: readNullableNumber(r.pinned_at),\n    archivedAt: readNullableNumber(r.archived_at),\n  };\n}\n\nexport async function createThread(\n  ownerEmail: string,\n  opts?: { id?: string; title?: string; scope?: ChatThreadScope | null },\n): Promise<ChatThread> {\n  await ensureTable();\n  const client = getDbExec();\n  const id = opts?.id ?? generateId();\n  const now = Date.now();\n  const title = opts?.title ?? \"\";\n  const scope = opts?.scope ?? null;\n\n  await client.execute({\n    sql: `INSERT INTO chat_threads (id, owner_email, title, preview, thread_data, message_count, created_at, updated_at, scope_type, scope_id, scope_label) VALUES (?, ?, ?, '', '{}', 0, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      ownerEmail,\n      title,\n      now,\n      now,\n      scope?.type ?? null,\n      scope?.id ?? null,\n      scope?.label ?? null,\n    ],\n  });\n\n  return {\n    id,\n    ownerEmail,\n    title,\n    preview: \"\",\n    threadData: \"{}\",\n    messageCount: 0,\n    createdAt: now,\n    updatedAt: now,\n    scope,\n    pinnedAt: null,\n    archivedAt: null,\n  };\n}\n\nconst THREAD_COLUMNS = `id, owner_email, title, preview, thread_data, message_count, created_at, updated_at, scope_type, scope_id, scope_label, pinned_at, archived_at`;\nconst SUMMARY_COLUMNS = `id, title, preview, thread_data, message_count, created_at, updated_at, scope_type, scope_id, scope_label, pinned_at, archived_at`;\n\nexport async function getThread(id: string): Promise<ChatThread | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT ${THREAD_COLUMNS} FROM chat_threads WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return null;\n  return rowToThread(rows[0]);\n}\n\nexport async function forkThread(\n  sourceId: string,\n  ownerEmail: string,\n  opts?: { id?: string; source?: ForkThreadSourceSnapshot | null },\n): Promise<ChatThread | null> {\n  const snapshot = normalizeForkSourceSnapshot(opts?.source);\n  let source = await getThread(sourceId);\n  if (!source) {\n    if (snapshot) {\n      try {\n        await createThread(ownerEmail, {\n          id: sourceId,\n          title: snapshot.title,\n          scope: snapshot.scope ?? null,\n        });\n      } catch {\n        // The agent run may have created the row while the user clicked Fork.\n      }\n      const created = await getThread(sourceId);\n      if (created?.ownerEmail === ownerEmail) {\n        await updateThreadData(\n          sourceId,\n          snapshot.threadData,\n          snapshot.title || created.title,\n          snapshot.preview || created.preview,\n          snapshot.messageCount,\n        );\n        if (Object.prototype.hasOwnProperty.call(snapshot, \"scope\")) {\n          await setThreadScope(sourceId, snapshot.scope ?? null);\n        }\n        source = await getThread(sourceId);\n      }\n    }\n  } else if (\n    snapshot &&\n    source.ownerEmail === ownerEmail &&\n    snapshot.messageCount > source.messageCount\n  ) {\n    // The source row exists but the in-memory snapshot is fresher — the agent\n    // run flushed an older state to SQL, but the tab has additional unflushed\n    // messages. Overlay the snapshot before cloning so the fork captures the\n    // latest user-visible content. Guard with messageCount > stored to avoid\n    // clobbering a fresher persisted row with a stale snapshot from another\n    // tab.\n    source = {\n      ...source,\n      threadData: snapshot.threadData,\n      title: snapshot.title || source.title,\n      preview: snapshot.preview || source.preview,\n      messageCount: snapshot.messageCount,\n    };\n  }\n  if (!source || source.ownerEmail !== ownerEmail) return null;\n  const id = opts?.id ?? generateId();\n  const now = Date.now();\n  const title = source.title ? `${source.title} (fork)` : \"\";\n  const client = getDbExec();\n  await client.execute({\n    sql: `INSERT INTO chat_threads (id, owner_email, title, preview, thread_data, message_count, created_at, updated_at, scope_type, scope_id, scope_label) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      ownerEmail,\n      title,\n      source.preview,\n      source.threadData,\n      source.messageCount,\n      now,\n      now,\n      source.scope?.type ?? null,\n      source.scope?.id ?? null,\n      source.scope?.label ?? null,\n    ],\n  });\n  return {\n    id,\n    ownerEmail,\n    title,\n    preview: source.preview,\n    threadData: source.threadData,\n    messageCount: source.messageCount,\n    createdAt: now,\n    updatedAt: now,\n    scope: source.scope,\n    pinnedAt: null,\n    archivedAt: null,\n  };\n}\n\nexport interface ListThreadsOptions {\n  limit?: number;\n  offset?: number;\n  /**\n   * Filter for chats bound to a specific resource. The default (undefined)\n   * returns every thread the user owns. `{ type: \"deck\", id: \"abc\" }`\n   * returns only that resource's threads. `{ type: \"deck\", id: null }` is\n   * NOT supported — pass `unscopedOnly: true` to get only general chats.\n   */\n  scope?: { type: string; id: string };\n  /** When true, returns only threads with no scope (general chats). */\n  unscopedOnly?: boolean;\n}\n\nexport async function listThreads(\n  ownerEmail: string,\n  options: ListThreadsOptions | number = {},\n  legacyOffset?: number,\n): Promise<ChatThreadSummary[]> {\n  await ensureTable();\n  // Back-compat shim: previous signature was (owner, limit, offset).\n  const opts: ListThreadsOptions =\n    typeof options === \"number\"\n      ? { limit: options, offset: legacyOffset ?? 0 }\n      : options;\n  const limit = opts.limit ?? 50;\n  const offset = opts.offset ?? 0;\n  const client = getDbExec();\n  const filters: string[] = [\n    `owner_email = ?`,\n    `(message_count > 0 OR thread_data LIKE '%\"messages\"%')`,\n  ];\n  const args: (string | number)[] = [ownerEmail];\n  if (opts.scope) {\n    filters.push(`scope_type = ? AND scope_id = ?`);\n    args.push(opts.scope.type, opts.scope.id);\n  } else if (opts.unscopedOnly) {\n    filters.push(`scope_type IS NULL`);\n  }\n  args.push(limit, offset);\n  const { rows } = await client.execute({\n    sql: `SELECT ${SUMMARY_COLUMNS} FROM chat_threads WHERE ${filters.join(\" AND \")} ORDER BY CASE WHEN pinned_at IS NULL THEN 1 ELSE 0 END, pinned_at DESC, updated_at DESC LIMIT ? OFFSET ?`,\n    args,\n  });\n  return rows\n    .map((r) => rowToSummary(r))\n    .filter((r): r is ChatThreadSummary => r !== null);\n}\n\nfunction escapeLike(s: string): string {\n  return s.replace(/([\\\\%_])/g, \"\\\\$1\");\n}\n\nexport async function searchThreads(\n  ownerEmail: string,\n  query: string,\n  limit = 50,\n  options: { scope?: { type: string; id: string } } = {},\n): Promise<ChatThreadSummary[]> {\n  await ensureTable();\n  const client = getDbExec();\n  const pattern = `%${escapeLike(query)}%`;\n  const filters: string[] = [\n    `owner_email = ?`,\n    `(message_count > 0 OR thread_data LIKE '%\"messages\"%')`,\n    `(title LIKE ? ESCAPE '\\\\' OR preview LIKE ? ESCAPE '\\\\' OR thread_data LIKE ? ESCAPE '\\\\')`,\n  ];\n  const args: (string | number)[] = [ownerEmail, pattern, pattern, pattern];\n  if (options.scope) {\n    filters.push(`scope_type = ? AND scope_id = ?`);\n    args.push(options.scope.type, options.scope.id);\n  }\n  args.push(limit);\n  const { rows } = await client.execute({\n    sql: `SELECT ${SUMMARY_COLUMNS} FROM chat_threads WHERE ${filters.join(\" AND \")} ORDER BY CASE WHEN pinned_at IS NULL THEN 1 ELSE 0 END, pinned_at DESC, updated_at DESC LIMIT ?`,\n    args,\n  });\n  return rows\n    .map((r) => rowToSummary(r))\n    .filter((r): r is ChatThreadSummary => r !== null);\n}\n\n/**\n * Detach or rebind a chat's scope. Used by the UI's \"Detach from <resource>\"\n * action and by templates that need to retag a chat after a rename. Pass\n * `null` to clear the scope (chat becomes general).\n */\nexport async function setThreadScope(\n  id: string,\n  scope: ChatThreadScope | null,\n): Promise<void> {\n  await ensureTable();\n  const client = getDbExec();\n  await client.execute({\n    sql: `UPDATE chat_threads SET scope_type = ?, scope_id = ?, scope_label = ?, updated_at = ? WHERE id = ?`,\n    args: [\n      scope?.type ?? null,\n      scope?.id ?? null,\n      scope?.label ?? null,\n      Math.max(Date.now(), 1),\n      id,\n    ],\n  });\n  emitChatThreadChange(id);\n}\n\nexport async function renameThread(\n  id: string,\n  title: string,\n  options: { ownerEmail?: string } = {},\n): Promise<boolean> {\n  const nextTitle = normalizeThreadTitle(title);\n  if (!nextTitle) return false;\n\n  return await withThreadDataLock(id, async () => {\n    const thread = await getThread(id);\n    if (!thread) return false;\n    if (options.ownerEmail && thread.ownerEmail !== options.ownerEmail) {\n      return false;\n    }\n\n    const repo = parseThreadData(thread.threadData);\n    repo._titleOverride = nextTitle;\n    await updateThreadData(\n      id,\n      JSON.stringify(repo),\n      nextTitle,\n      thread.preview,\n      thread.messageCount,\n    );\n    return true;\n  });\n}\n\nexport async function setThreadPinned(\n  id: string,\n  pinned: boolean,\n  options: { ownerEmail?: string } = {},\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Math.max(Date.now(), 1);\n  const args: (string | number | null)[] = [pinned ? now : null, id];\n  let ownerFilter = \"\";\n  if (options.ownerEmail) {\n    ownerFilter = \" AND owner_email = ?\";\n    args.push(options.ownerEmail);\n  }\n  const result = await client.execute({\n    sql: `UPDATE chat_threads SET pinned_at = ? WHERE id = ?${ownerFilter}`,\n    args,\n  });\n  if (result.rowsAffected > 0) {\n    emitChatThreadChange(id);\n    return true;\n  }\n  return false;\n}\n\nexport async function setThreadArchived(\n  id: string,\n  archived: boolean,\n  options: { ownerEmail?: string } = {},\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Math.max(Date.now(), 1);\n  const args: (string | number | null)[] = [archived ? now : null, id];\n  let ownerFilter = \"\";\n  if (options.ownerEmail) {\n    ownerFilter = \" AND owner_email = ?\";\n    args.push(options.ownerEmail);\n  }\n  const result = await client.execute({\n    sql: `UPDATE chat_threads SET archived_at = ? WHERE id = ?${ownerFilter}`,\n    args,\n  });\n  if (result.rowsAffected > 0) {\n    emitChatThreadChange(id);\n    return true;\n  }\n  return false;\n}\n\nexport interface UpdateThreadDataOptions {\n  preserveExistingQueuedMessages?: boolean;\n  preserveExistingTopLevelKeys?: boolean;\n  maxAttempts?: number;\n}\n\nfunction parseThreadData(value: string): any {\n  try {\n    return JSON.parse(value || \"{}\");\n  } catch {\n    return {};\n  }\n}\n\nexport async function updateThreadData(\n  id: string,\n  threadData: string,\n  title: string,\n  preview: string,\n  messageCount: number,\n  options: UpdateThreadDataOptions = {},\n): Promise<void> {\n  await ensureTable();\n  const client = getDbExec();\n  const maxAttempts =\n    options.maxAttempts ?? DEFAULT_THREAD_DATA_UPDATE_ATTEMPTS;\n  let lastConflict = false;\n\n  for (let attempt = 0; attempt < maxAttempts; attempt++) {\n    const current = await getThread(id);\n    if (!current) return;\n\n    let nextThreadData = threadData;\n    let nextMessageCount = messageCount;\n    try {\n      const merged = mergeThreadDataForClientSave(\n        parseThreadData(current.threadData),\n        parseThreadData(threadData),\n        {\n          preserveExistingQueuedMessages:\n            options.preserveExistingQueuedMessages ?? true,\n          preserveExistingTopLevelKeys:\n            options.preserveExistingTopLevelKeys ?? true,\n        },\n      );\n      nextThreadData = JSON.stringify(merged);\n      if (Array.isArray(merged.messages)) {\n        nextMessageCount = merged.messages.length;\n      }\n    } catch {\n      // Keep the caller's serialized value if either JSON blob is malformed.\n    }\n\n    const nextUpdatedAt = Math.max(Date.now(), current.updatedAt + 1);\n    const result = await client.execute({\n      sql: `UPDATE chat_threads SET thread_data = ?, title = ?, preview = ?, message_count = ?, updated_at = ? WHERE id = ? AND updated_at = ?`,\n      args: [\n        nextThreadData,\n        title,\n        preview,\n        nextMessageCount,\n        nextUpdatedAt,\n        id,\n        current.updatedAt,\n      ],\n    });\n\n    if (result.rowsAffected > 0) {\n      emitChatThreadChange(id);\n      return;\n    }\n\n    lastConflict = true;\n    if (attempt < maxAttempts - 1) {\n      await new Promise((resolve) =>\n        setTimeout(\n          resolve,\n          Math.min(250, THREAD_DATA_CONFLICT_BACKOFF_MS * (attempt + 1)),\n        ),\n      );\n    }\n  }\n\n  if (lastConflict) {\n    throw new Error(\n      `Failed to update chat thread ${id} after concurrent write conflicts.`,\n    );\n  }\n}\n\nexport interface ThreadEngineMeta {\n  engineName: string;\n  model: string;\n}\n\n/**\n * Read the engine pinned to a thread (stored in thread_data JSON).\n * Returns null if no engine is pinned.\n */\nexport async function getThreadEngineMeta(\n  threadId: string,\n): Promise<ThreadEngineMeta | null> {\n  const thread = await getThread(threadId);\n  if (!thread?.threadData) return null;\n  try {\n    const data = JSON.parse(thread.threadData);\n    if (data.engineMeta?.engineName) return data.engineMeta as ThreadEngineMeta;\n  } catch {}\n  return null;\n}\n\n/**\n * Pin an engine to a thread by storing engineMeta in thread_data JSON.\n * Does not change messages, title, or preview.\n */\nexport async function setThreadEngineMeta(\n  threadId: string,\n  meta: ThreadEngineMeta,\n): Promise<void> {\n  return withThreadDataLock(threadId, async () => {\n    const thread = await getThread(threadId);\n    if (!thread) return;\n    let data: Record<string, unknown> = {};\n    try {\n      data = JSON.parse(thread.threadData);\n    } catch {}\n    data.engineMeta = meta;\n    await updateThreadData(\n      threadId,\n      JSON.stringify(data),\n      thread.title,\n      thread.preview,\n      thread.messageCount,\n    );\n  });\n}\n\nexport interface QueuedMessage {\n  id: string;\n  text: string;\n  images?: string[];\n  references?: unknown[];\n}\n\n/**\n * Persist the user's queued (not-yet-sent) messages onto the thread.\n * Stored in thread_data JSON so it survives reloads without a schema\n * change. Safe to call often — the frontend debounces writes.\n */\nexport async function setThreadQueuedMessages(\n  threadId: string,\n  queuedMessages: QueuedMessage[],\n): Promise<void> {\n  return withThreadDataLock(threadId, async () => {\n    const thread = await getThread(threadId);\n    if (!thread) return;\n    let data: Record<string, unknown> = {};\n    try {\n      data = JSON.parse(thread.threadData);\n    } catch {}\n    if (queuedMessages.length === 0) {\n      delete data.queuedMessages;\n    } else {\n      data.queuedMessages = queuedMessages;\n    }\n    await updateThreadData(\n      threadId,\n      JSON.stringify(data),\n      thread.title,\n      thread.preview,\n      thread.messageCount,\n      { preserveExistingQueuedMessages: false },\n    );\n  });\n}\n\nexport async function deleteThread(id: string): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const result = await client.execute({\n    sql: `DELETE FROM chat_threads WHERE id = ?`,\n    args: [id],\n  });\n  if (result.rowsAffected > 0) {\n    emitChatThreadChange(id);\n    return true;\n  }\n  return false;\n}\n"]}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/chat-threads/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,IAAI,YAAuC,CAAC;AAE5C;;;;;;;;;;;;;GAaG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA4B,CAAC;AAC7D,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAC/C,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAE3C,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,EAAoB;IAEpB,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/B,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrC,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,kDAAkD;IAClD,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5C,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,IAAkB,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,CAAC,OAAO,CAAC;;;;;;;0BAOD,OAAO,EAAE;uBACZ,OAAO,EAAE;uBACT,OAAO,EAAE;;;;sBAIV,OAAO,EAAE;wBACP,OAAO,EAAE;;OAE1B,CAAC,CAAC;YACH,mEAAmE;YACnE,iEAAiE;YACjE,iEAAiE;YACjE,+DAA+D;YAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI;gBACxB,CAAC,YAAY,EAAE,MAAM,CAAC;gBACtB,CAAC,UAAU,EAAE,MAAM,CAAC;gBACpB,CAAC,aAAa,EAAE,MAAM,CAAC;gBACvB,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;gBACxB,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;aAClB,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,OAAO,CAClB,uCAAuC,GAAG,IAAI,IAAI,EAAE,CACrD,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;YACD,gEAAgE;YAChE,iEAAiE;YACjE,iEAAiE;YACjE,iEAAiE;YACjE,iEAAiE;YACjE,8BAA8B;YAC9B,KAAK,MAAM,GAAG,IAAI;gBAChB,qGAAqG;gBACrG,8GAA8G;aAC/G,EAAE,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC;YACD,oEAAoE;YACpE,6DAA6D;YAC7D,sEAAsE;YACtE,iEAAiE;YACjE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,sDAAsD;YACtD,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,2BAA2B,CACxC,MAAoC;IAEpC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,qHAAqH;QAC1H,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,KAAK,IAAI,CAAC;YAAE,SAAS;QACzB,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE,8EAA8E;YACnF,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,EAAY,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,UAAU,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC1E,CAAC;AAkDD,SAAS,SAAS,CAAC,CAA0B;IAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,UAAuC,CAAC;IACvD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAqC,CAAC;IACnD,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,WAAwC,CAAC;IACzD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,2BAA2B,CAClC,MAAmD;IAQnD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM;QACxB,CAAC,CAAC,CAAC,CAAC;IACN,IAAI,gBAAgB,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAClC,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAC3D,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACjE,YAAY,EAAE,gBAAgB;QAC9B,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YACvD,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE;YACjC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAmB,EAAE,QAAgB;IAC/D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,CAA0B;IAC7C,MAAM,UAAU,GAAI,CAAC,CAAC,WAAsB,IAAI,IAAI,CAAC;IACrD,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC5C,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAY;QAClB,UAAU,EAAE,CAAC,CAAC,WAAqB;QACnC,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,OAAO,EAAE,CAAC,CAAC,OAAiB;QAC5B,UAAU;QACV,YAAY,EAAE,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC;QACzD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACnB,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;QACzC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAA0B;IAC9C,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAY;QAClB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,OAAO,EAAE,CAAC,CAAC,OAAiB;QAC5B,YAAY;QACZ,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACnB,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;QACzC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,IAAsE;IAEtE,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC;IAElC,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,gMAAgM;QACrM,IAAI,EAAE;YACJ,EAAE;YACF,UAAU;YACV,KAAK;YACL,GAAG;YACH,GAAG;YACH,KAAK,EAAE,IAAI,IAAI,IAAI;YACnB,KAAK,EAAE,EAAE,IAAI,IAAI;YACjB,KAAK,EAAE,KAAK,IAAI,IAAI;SACrB;KACF,CAAC,CAAC;IAEH,OAAO;QACL,EAAE;QACF,UAAU;QACV,KAAK;QACL,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,KAAK;QACL,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,gJAAgJ,CAAC;AACxK,yEAAyE;AACzE,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,6EAA6E;AAC7E,iBAAiB;AACjB,MAAM,eAAe,GAAG,sHAAsH,CAAC;AAE/I,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,EAAU;IACxC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,UAAU,cAAc,iCAAiC;QAC9D,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAgB,EAChB,UAAkB,EAClB,IAAgE;IAEhE,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,UAAU,EAAE;oBAC7B,EAAE,EAAE,QAAQ;oBACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI;iBAC9B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;YACxE,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;gBACvC,MAAM,gBAAgB,CACpB,QAAQ,EACR,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,EAC/B,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EACnC,QAAQ,CAAC,YAAY,CACtB,CAAC;gBACF,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;oBAC5D,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBACzD,CAAC;gBACD,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IACL,QAAQ;QACR,MAAM,CAAC,UAAU,KAAK,UAAU;QAChC,QAAQ,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,EAC3C,CAAC;QACD,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,OAAO;QACP,MAAM,GAAG;YACP,GAAG,MAAM;YACT,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;YACrC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO;YAC3C,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,4LAA4L;QACjM,IAAI,EAAE;YACJ,EAAE;YACF,UAAU;YACV,KAAK;YACL,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,UAAU;YACjB,MAAM,CAAC,YAAY;YACnB,GAAG;YACH,GAAG;YACH,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI;YAC1B,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI;YACxB,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI;SAC5B;KACF,CAAC,CAAC;IACH,OAAO;QACL,EAAE;QACF,UAAU;QACV,KAAK;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,UAAuC,EAAE,EACzC,YAAqB;IAErB,MAAM,WAAW,EAAE,CAAC;IACpB,mEAAmE;IACnE,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,EAAE;QAC/C,CAAC,CAAC,OAAO,CAAC;IACd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,sCAAsC;IACtC,MAAM,OAAO,GAAa,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IACnE,MAAM,IAAI,GAAwB,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,UAAU,eAAe,4BAA4B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,2GAA2G;QAC1L,IAAI;KACL,CAAC,CAAC;IACH,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAA0B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,KAAa,EACb,KAAK,GAAG,EAAE,EACV,UAAoD,EAAE;IAEtD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;IACzC,wEAAwE;IACxE,uEAAuE;IACvE,4DAA4D;IAC5D,MAAM,OAAO,GAAa;QACxB,iBAAiB;QACjB,mBAAmB;QACnB,4FAA4F;KAC7F,CAAC;IACF,MAAM,IAAI,GAAwB,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,UAAU,eAAe,4BAA4B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,kGAAkG;QACjL,IAAI;KACL,CAAC,CAAC;IACH,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAA0B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,KAA6B;IAE7B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,oGAAoG;QACzG,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI,IAAI,IAAI;YACnB,KAAK,EAAE,EAAE,IAAI,IAAI;YACjB,KAAK,EAAE,KAAK,IAAI,IAAI;YACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACvB,EAAE;SACH;KACF,CAAC,CAAC;IACH,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,KAAa,EACb,UAAmC,EAAE;IAErC,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7B,OAAO,MAAM,kBAAkB,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,MAAM,gBAAgB,CACpB,EAAE,EACF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,SAAS,EACT,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,YAAY,CACpB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAU,EACV,MAAe,EACf,UAAmC,EAAE;IAErC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAA+B,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACnE,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,WAAW,GAAG,sBAAsB,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,qDAAqD,WAAW,EAAE;QACvE,IAAI;KACL,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAU,EACV,QAAiB,EACjB,UAAmC,EAAE;IAErC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAA+B,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,WAAW,GAAG,sBAAsB,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,uDAAuD,WAAW,EAAE;QACzE,IAAI;KACL,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAU,EACV,UAAkB,EAClB,KAAa,EACb,OAAe,EACf,YAAoB,EACpB,UAAmC,EAAE;IAErC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,IAAI,mCAAmC,CAAC;IAC7D,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,cAAc,GAAG,UAAU,CAAC;QAChC,IAAI,gBAAgB,GAAG,YAAY,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,4BAA4B,CACzC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,EACnC,eAAe,CAAC,UAAU,CAAC,EAC3B;gBACE,8BAA8B,EAC5B,OAAO,CAAC,8BAA8B,IAAI,IAAI;gBAChD,4BAA4B,EAC1B,OAAO,CAAC,4BAA4B,IAAI,IAAI;aAC/C,CACF,CAAC;YACF,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnC,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,oIAAoI;YACzI,IAAI,EAAE;gBACJ,cAAc;gBACd,KAAK;gBACL,OAAO;gBACP,gBAAgB;gBAChB,aAAa;gBACb,EAAE;gBACF,OAAO,CAAC,SAAS;aAClB;SACF,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YAC5B,oBAAoB,CAAC,EAAE,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QAED,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,OAAO,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5B,UAAU,CACR,OAAO,EACP,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,+BAA+B,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAC/D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,gCAAgC,EAAE,oCAAoC,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,UAAU;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU;YAAE,OAAO,IAAI,CAAC,UAA8B,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,IAAsB;IAEtB,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,IAAI,GAA4B,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,MAAM,gBAAgB,CACpB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,YAAY,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,cAA+B;IAE/B,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,IAAI,GAA4B,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACvC,CAAC;QACD,MAAM,gBAAgB,CACpB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,YAAY,EACnB,EAAE,8BAA8B,EAAE,KAAK,EAAE,CAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU;IAC3C,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,uCAAuC;QAC5C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { getDbExec, intType } from \"../db/client.js\";\nimport {\n  mergeThreadDataForClientSave,\n  normalizeThreadRepository,\n  normalizeThreadTitle,\n} from \"../agent/thread-data-builder.js\";\nimport { emitChatThreadChange } from \"./emitter.js\";\n\nlet _initPromise: Promise<void> | undefined;\n\n/**\n * Per-thread async mutex. Read-modify-write on the `thread_data` JSON blob\n * is not atomic at the DB level — two concurrent callers (e.g. the UI\n * persisting queued messages while `onRunComplete` appends agent output)\n * would both read the same row, each mutate it independently, and the\n * second write clobbers the first. Serializing on thread id inside this\n * process eliminates the race for the usual single-process deployment\n * while leaving straight reads and other thread-data-unrelated updates\n * untouched.\n *\n * Cross-process races are handled by `updateThreadData`, which performs a\n * compare-and-swap on `updated_at`, rereads the latest row on conflict, and\n * remerges message history before retrying.\n */\nconst _threadDataLocks = new Map<string, Promise<unknown>>();\nconst DEFAULT_THREAD_DATA_UPDATE_ATTEMPTS = 12;\nconst THREAD_DATA_CONFLICT_BACKOFF_MS = 25;\n\nexport function withThreadDataLock<T>(\n  threadId: string,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const prev = _threadDataLocks.get(threadId) ?? Promise.resolve();\n  const next = prev.then(fn, fn);\n  _threadDataLocks.set(threadId, next);\n  // Use `.then(cleanup, cleanup)` (not `.finally`) so the rejection is\n  // observed on this chained promise — otherwise any failure inside `fn`\n  // triggers `unhandledRejection` on the discarded `finally()` return.\n  // The caller still sees the rejection via `next`.\n  const cleanup = () => {\n    if (_threadDataLocks.get(threadId) === next) {\n      _threadDataLocks.delete(threadId);\n    }\n  };\n  next.then(cleanup, cleanup);\n  return next as Promise<T>;\n}\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      await client.execute(`\n        CREATE TABLE IF NOT EXISTS chat_threads (\n          id TEXT PRIMARY KEY,\n          owner_email TEXT NOT NULL,\n          title TEXT NOT NULL DEFAULT '',\n          preview TEXT NOT NULL DEFAULT '',\n          thread_data TEXT NOT NULL DEFAULT '{}',\n          message_count ${intType()} NOT NULL DEFAULT 0,\n          created_at ${intType()} NOT NULL,\n          updated_at ${intType()} NOT NULL,\n          scope_type TEXT,\n          scope_id TEXT,\n          scope_label TEXT,\n          pinned_at ${intType()},\n          archived_at ${intType()}\n        )\n      `);\n      // Additive migration for existing tables. Both SQLite and Postgres\n      // accept `ALTER TABLE ADD COLUMN` and will raise when the column\n      // already exists; the try/catch makes the call idempotent across\n      // both dialects without requiring an information_schema probe.\n      for (const [col, type] of [\n        [\"scope_type\", \"TEXT\"],\n        [\"scope_id\", \"TEXT\"],\n        [\"scope_label\", \"TEXT\"],\n        [\"pinned_at\", intType()],\n        [\"archived_at\", intType()],\n      ] as const) {\n        try {\n          await client.execute(\n            `ALTER TABLE chat_threads ADD COLUMN ${col} ${type}`,\n          );\n        } catch {\n          // Column already exists.\n        }\n      }\n      // Indexes for the hot read paths. Both the sidebar list and the\n      // scoped/per-resource list filter on owner_email (and optionally\n      // scope) and sort by updated_at. Keep these dialect-agnostic (no\n      // DESC, partial, or PG-only syntax) so they apply identically on\n      // SQLite and the configured Postgres. `IF NOT EXISTS` makes them\n      // idempotent across restarts.\n      for (const ddl of [\n        `CREATE INDEX IF NOT EXISTS chat_threads_owner_updated_idx ON chat_threads (owner_email, updated_at)`,\n        `CREATE INDEX IF NOT EXISTS chat_threads_scope_updated_idx ON chat_threads (scope_type, scope_id, updated_at)`,\n      ]) {\n        try {\n          await client.execute(ddl);\n        } catch {\n          // Index already exists or the dialect rejected a duplicate.\n        }\n      }\n      // One-time backfill of message_count for legacy rows written before\n      // the column was maintained. The list/summary path now reads\n      // message_count directly (instead of re-parsing the thread_data blob)\n      // and filters on `message_count > 0`, so any legacy row that has\n      // messages but a stale `message_count = 0` would otherwise vanish from\n      // the sidebar. Recompute the count from thread_data and persist it so\n      // the hot path can stay blob-free. Idempotent: only touches rows where\n      // the count is still 0 but the blob clearly contains a messages array.\n      await backfillLegacyMessageCounts(client);\n    })().catch((err) => {\n      // Retry init on the next call after a failed startup.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\n/**\n * Recompute `message_count` from `thread_data` for legacy rows that still\n * have a stale `message_count = 0` despite carrying a messages array in the\n * blob. Without this, dropping the `thread_data` payload (and the\n * `OR thread_data LIKE '%\"messages\"%'` filter) from the list path would make\n * those rows disappear from the sidebar. Runs once at table bootstrap and is\n * idempotent — after the first pass no row matches the WHERE clause again.\n */\nasync function backfillLegacyMessageCounts(\n  client: ReturnType<typeof getDbExec>,\n): Promise<void> {\n  const { rows } = await client.execute({\n    sql: `SELECT id, thread_data, message_count FROM chat_threads WHERE message_count = 0 AND thread_data LIKE '%\"messages\"%'`,\n    args: [],\n  });\n  for (const r of rows) {\n    const count = deriveMessageCount(r.thread_data, 0);\n    if (count <= 0) continue;\n    await client.execute({\n      sql: `UPDATE chat_threads SET message_count = ? WHERE id = ? AND message_count = 0`,\n      args: [count, r.id as string],\n    });\n  }\n}\n\nfunction generateId(): string {\n  return `thread-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;\n}\n\n/**\n * A resource the chat is bound to, e.g. `{ type: \"deck\", id: \"deck-abc\" }`.\n * The framework is opaque to the type string — each template chooses what\n * its primary resource is and the surface it scopes to (deck, design,\n * dashboard, etc.). `label` is a denormalized snapshot for display when\n * the resource isn't on hand at render time; the live template can\n * overwrite it via the next createThread call.\n */\nexport interface ChatThreadScope {\n  type: string;\n  id: string;\n  label?: string;\n}\n\nexport interface ChatThread {\n  id: string;\n  ownerEmail: string;\n  title: string;\n  preview: string;\n  threadData: string;\n  messageCount: number;\n  createdAt: number;\n  updatedAt: number;\n  scope: ChatThreadScope | null;\n  pinnedAt: number | null;\n  archivedAt: number | null;\n}\n\nexport interface ChatThreadSummary {\n  id: string;\n  title: string;\n  preview: string;\n  messageCount: number;\n  createdAt: number;\n  updatedAt: number;\n  scope: ChatThreadScope | null;\n  pinnedAt: number | null;\n  archivedAt: number | null;\n}\n\nexport interface ForkThreadSourceSnapshot {\n  threadData: string;\n  title?: string;\n  preview?: string;\n  messageCount?: number;\n  scope?: ChatThreadScope | null;\n}\n\nfunction readScope(r: Record<string, unknown>): ChatThreadScope | null {\n  const type = r.scope_type as string | null | undefined;\n  const id = r.scope_id as string | null | undefined;\n  if (!type || !id) return null;\n  const label = r.scope_label as string | null | undefined;\n  return label ? { type, id, label } : { type, id };\n}\n\nfunction readNullableNumber(value: unknown): number | null {\n  if (value == null) return null;\n  const n = Number(value);\n  return Number.isFinite(n) && n > 0 ? n : null;\n}\n\nfunction normalizeForkSourceSnapshot(\n  source: ForkThreadSourceSnapshot | null | undefined,\n): {\n  threadData: string;\n  title: string;\n  preview: string;\n  messageCount: number;\n  scope?: ChatThreadScope | null;\n} | null {\n  if (!source || typeof source.threadData !== \"string\") return null;\n  const threadData = source.threadData.trim();\n  if (!threadData) return null;\n\n  let parsed: any;\n  try {\n    parsed = normalizeThreadRepository(JSON.parse(threadData));\n  } catch {\n    return null;\n  }\n\n  const repoMessageCount = Array.isArray(parsed.messages)\n    ? parsed.messages.length\n    : 0;\n  if (repoMessageCount <= 0) return null;\n\n  return {\n    threadData: JSON.stringify(parsed),\n    title: typeof source.title === \"string\" ? source.title : \"\",\n    preview: typeof source.preview === \"string\" ? source.preview : \"\",\n    messageCount: repoMessageCount,\n    ...(Object.prototype.hasOwnProperty.call(source, \"scope\")\n      ? { scope: source.scope ?? null }\n      : {}),\n  };\n}\n\nfunction deriveMessageCount(threadData: unknown, fallback: number): number {\n  if (typeof threadData !== \"string\" || !threadData.trim()) return fallback;\n  try {\n    const repo = normalizeThreadRepository(JSON.parse(threadData));\n    if (Array.isArray(repo.messages)) return repo.messages.length;\n  } catch {\n    // Keep the stored count if the JSON blob is malformed.\n  }\n  return fallback;\n}\n\nfunction rowToThread(r: Record<string, unknown>): ChatThread {\n  const threadData = (r.thread_data as string) ?? \"{}\";\n  const storedCount = Number(r.message_count);\n  return {\n    id: r.id as string,\n    ownerEmail: r.owner_email as string,\n    title: r.title as string,\n    preview: r.preview as string,\n    threadData,\n    messageCount: deriveMessageCount(threadData, storedCount),\n    createdAt: Number(r.created_at),\n    updatedAt: Number(r.updated_at),\n    scope: readScope(r),\n    pinnedAt: readNullableNumber(r.pinned_at),\n    archivedAt: readNullableNumber(r.archived_at),\n  };\n}\n\nfunction rowToSummary(r: Record<string, unknown>): ChatThreadSummary | null {\n  // The summary path never loads `thread_data`; the count comes from the\n  // dedicated `message_count` column (maintained on write, backfilled for\n  // legacy rows at bootstrap). Empty threads are filtered out of the list.\n  const messageCount = Number(r.message_count);\n  if (!Number.isFinite(messageCount) || messageCount <= 0) return null;\n  return {\n    id: r.id as string,\n    title: r.title as string,\n    preview: r.preview as string,\n    messageCount,\n    createdAt: Number(r.created_at),\n    updatedAt: Number(r.updated_at),\n    scope: readScope(r),\n    pinnedAt: readNullableNumber(r.pinned_at),\n    archivedAt: readNullableNumber(r.archived_at),\n  };\n}\n\nexport async function createThread(\n  ownerEmail: string,\n  opts?: { id?: string; title?: string; scope?: ChatThreadScope | null },\n): Promise<ChatThread> {\n  await ensureTable();\n  const client = getDbExec();\n  const id = opts?.id ?? generateId();\n  const now = Date.now();\n  const title = opts?.title ?? \"\";\n  const scope = opts?.scope ?? null;\n\n  await client.execute({\n    sql: `INSERT INTO chat_threads (id, owner_email, title, preview, thread_data, message_count, created_at, updated_at, scope_type, scope_id, scope_label) VALUES (?, ?, ?, '', '{}', 0, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      ownerEmail,\n      title,\n      now,\n      now,\n      scope?.type ?? null,\n      scope?.id ?? null,\n      scope?.label ?? null,\n    ],\n  });\n\n  return {\n    id,\n    ownerEmail,\n    title,\n    preview: \"\",\n    threadData: \"{}\",\n    messageCount: 0,\n    createdAt: now,\n    updatedAt: now,\n    scope,\n    pinnedAt: null,\n    archivedAt: null,\n  };\n}\n\nconst THREAD_COLUMNS = `id, owner_email, title, preview, thread_data, message_count, created_at, updated_at, scope_type, scope_id, scope_label, pinned_at, archived_at`;\n// The list/summary path deliberately omits `thread_data`: it is the full\n// message-history JSON blob and selecting it for every row turns \"open the\n// sidebar\" into \"download every conversation\". The summary derives nothing\n// from the blob anymore — preview and message_count are dedicated columns\n// (message_count is maintained on write and backfilled for legacy rows at\n// bootstrap). The detail path (`THREAD_COLUMNS` / `getThread`) still returns\n// the full blob.\nconst SUMMARY_COLUMNS = `id, title, preview, message_count, created_at, updated_at, scope_type, scope_id, scope_label, pinned_at, archived_at`;\n\nexport async function getThread(id: string): Promise<ChatThread | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT ${THREAD_COLUMNS} FROM chat_threads WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return null;\n  return rowToThread(rows[0]);\n}\n\nexport async function forkThread(\n  sourceId: string,\n  ownerEmail: string,\n  opts?: { id?: string; source?: ForkThreadSourceSnapshot | null },\n): Promise<ChatThread | null> {\n  const snapshot = normalizeForkSourceSnapshot(opts?.source);\n  let source = await getThread(sourceId);\n  if (!source) {\n    if (snapshot) {\n      try {\n        await createThread(ownerEmail, {\n          id: sourceId,\n          title: snapshot.title,\n          scope: snapshot.scope ?? null,\n        });\n      } catch {\n        // The agent run may have created the row while the user clicked Fork.\n      }\n      const created = await getThread(sourceId);\n      if (created?.ownerEmail === ownerEmail) {\n        await updateThreadData(\n          sourceId,\n          snapshot.threadData,\n          snapshot.title || created.title,\n          snapshot.preview || created.preview,\n          snapshot.messageCount,\n        );\n        if (Object.prototype.hasOwnProperty.call(snapshot, \"scope\")) {\n          await setThreadScope(sourceId, snapshot.scope ?? null);\n        }\n        source = await getThread(sourceId);\n      }\n    }\n  } else if (\n    snapshot &&\n    source.ownerEmail === ownerEmail &&\n    snapshot.messageCount > source.messageCount\n  ) {\n    // The source row exists but the in-memory snapshot is fresher — the agent\n    // run flushed an older state to SQL, but the tab has additional unflushed\n    // messages. Overlay the snapshot before cloning so the fork captures the\n    // latest user-visible content. Guard with messageCount > stored to avoid\n    // clobbering a fresher persisted row with a stale snapshot from another\n    // tab.\n    source = {\n      ...source,\n      threadData: snapshot.threadData,\n      title: snapshot.title || source.title,\n      preview: snapshot.preview || source.preview,\n      messageCount: snapshot.messageCount,\n    };\n  }\n  if (!source || source.ownerEmail !== ownerEmail) return null;\n  const id = opts?.id ?? generateId();\n  const now = Date.now();\n  const title = source.title ? `${source.title} (fork)` : \"\";\n  const client = getDbExec();\n  await client.execute({\n    sql: `INSERT INTO chat_threads (id, owner_email, title, preview, thread_data, message_count, created_at, updated_at, scope_type, scope_id, scope_label) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      ownerEmail,\n      title,\n      source.preview,\n      source.threadData,\n      source.messageCount,\n      now,\n      now,\n      source.scope?.type ?? null,\n      source.scope?.id ?? null,\n      source.scope?.label ?? null,\n    ],\n  });\n  return {\n    id,\n    ownerEmail,\n    title,\n    preview: source.preview,\n    threadData: source.threadData,\n    messageCount: source.messageCount,\n    createdAt: now,\n    updatedAt: now,\n    scope: source.scope,\n    pinnedAt: null,\n    archivedAt: null,\n  };\n}\n\nexport interface ListThreadsOptions {\n  limit?: number;\n  offset?: number;\n  /**\n   * Filter for chats bound to a specific resource. The default (undefined)\n   * returns every thread the user owns. `{ type: \"deck\", id: \"abc\" }`\n   * returns only that resource's threads. `{ type: \"deck\", id: null }` is\n   * NOT supported — pass `unscopedOnly: true` to get only general chats.\n   */\n  scope?: { type: string; id: string };\n  /** When true, returns only threads with no scope (general chats). */\n  unscopedOnly?: boolean;\n}\n\nexport async function listThreads(\n  ownerEmail: string,\n  options: ListThreadsOptions | number = {},\n  legacyOffset?: number,\n): Promise<ChatThreadSummary[]> {\n  await ensureTable();\n  // Back-compat shim: previous signature was (owner, limit, offset).\n  const opts: ListThreadsOptions =\n    typeof options === \"number\"\n      ? { limit: options, offset: legacyOffset ?? 0 }\n      : options;\n  const limit = opts.limit ?? 50;\n  const offset = opts.offset ?? 0;\n  const client = getDbExec();\n  // `message_count > 0` is the authoritative \"has messages\" signal: it is\n  // maintained on every write and backfilled for legacy rows at bootstrap,\n  // so the old `OR thread_data LIKE '%\"messages\"%'` substring scan over the\n  // full blob is no longer needed here.\n  const filters: string[] = [`owner_email = ?`, `message_count > 0`];\n  const args: (string | number)[] = [ownerEmail];\n  if (opts.scope) {\n    filters.push(`scope_type = ? AND scope_id = ?`);\n    args.push(opts.scope.type, opts.scope.id);\n  } else if (opts.unscopedOnly) {\n    filters.push(`scope_type IS NULL`);\n  }\n  args.push(limit, offset);\n  const { rows } = await client.execute({\n    sql: `SELECT ${SUMMARY_COLUMNS} FROM chat_threads WHERE ${filters.join(\" AND \")} ORDER BY CASE WHEN pinned_at IS NULL THEN 1 ELSE 0 END, pinned_at DESC, updated_at DESC LIMIT ? OFFSET ?`,\n    args,\n  });\n  return rows\n    .map((r) => rowToSummary(r))\n    .filter((r): r is ChatThreadSummary => r !== null);\n}\n\nfunction escapeLike(s: string): string {\n  return s.replace(/([\\\\%_])/g, \"\\\\$1\");\n}\n\nexport async function searchThreads(\n  ownerEmail: string,\n  query: string,\n  limit = 50,\n  options: { scope?: { type: string; id: string } } = {},\n): Promise<ChatThreadSummary[]> {\n  await ensureTable();\n  const client = getDbExec();\n  const pattern = `%${escapeLike(query)}%`;\n  // The count-guard uses the maintained/backfilled `message_count` column\n  // (same as listThreads). The content match still scans `thread_data` —\n  // search legitimately needs to look inside message history.\n  const filters: string[] = [\n    `owner_email = ?`,\n    `message_count > 0`,\n    `(title LIKE ? ESCAPE '\\\\' OR preview LIKE ? ESCAPE '\\\\' OR thread_data LIKE ? ESCAPE '\\\\')`,\n  ];\n  const args: (string | number)[] = [ownerEmail, pattern, pattern, pattern];\n  if (options.scope) {\n    filters.push(`scope_type = ? AND scope_id = ?`);\n    args.push(options.scope.type, options.scope.id);\n  }\n  args.push(limit);\n  const { rows } = await client.execute({\n    sql: `SELECT ${SUMMARY_COLUMNS} FROM chat_threads WHERE ${filters.join(\" AND \")} ORDER BY CASE WHEN pinned_at IS NULL THEN 1 ELSE 0 END, pinned_at DESC, updated_at DESC LIMIT ?`,\n    args,\n  });\n  return rows\n    .map((r) => rowToSummary(r))\n    .filter((r): r is ChatThreadSummary => r !== null);\n}\n\n/**\n * Detach or rebind a chat's scope. Used by the UI's \"Detach from <resource>\"\n * action and by templates that need to retag a chat after a rename. Pass\n * `null` to clear the scope (chat becomes general).\n */\nexport async function setThreadScope(\n  id: string,\n  scope: ChatThreadScope | null,\n): Promise<void> {\n  await ensureTable();\n  const client = getDbExec();\n  await client.execute({\n    sql: `UPDATE chat_threads SET scope_type = ?, scope_id = ?, scope_label = ?, updated_at = ? WHERE id = ?`,\n    args: [\n      scope?.type ?? null,\n      scope?.id ?? null,\n      scope?.label ?? null,\n      Math.max(Date.now(), 1),\n      id,\n    ],\n  });\n  emitChatThreadChange(id);\n}\n\nexport async function renameThread(\n  id: string,\n  title: string,\n  options: { ownerEmail?: string } = {},\n): Promise<boolean> {\n  const nextTitle = normalizeThreadTitle(title);\n  if (!nextTitle) return false;\n\n  return await withThreadDataLock(id, async () => {\n    const thread = await getThread(id);\n    if (!thread) return false;\n    if (options.ownerEmail && thread.ownerEmail !== options.ownerEmail) {\n      return false;\n    }\n\n    const repo = parseThreadData(thread.threadData);\n    repo._titleOverride = nextTitle;\n    await updateThreadData(\n      id,\n      JSON.stringify(repo),\n      nextTitle,\n      thread.preview,\n      thread.messageCount,\n    );\n    return true;\n  });\n}\n\nexport async function setThreadPinned(\n  id: string,\n  pinned: boolean,\n  options: { ownerEmail?: string } = {},\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Math.max(Date.now(), 1);\n  const args: (string | number | null)[] = [pinned ? now : null, id];\n  let ownerFilter = \"\";\n  if (options.ownerEmail) {\n    ownerFilter = \" AND owner_email = ?\";\n    args.push(options.ownerEmail);\n  }\n  const result = await client.execute({\n    sql: `UPDATE chat_threads SET pinned_at = ? WHERE id = ?${ownerFilter}`,\n    args,\n  });\n  if (result.rowsAffected > 0) {\n    emitChatThreadChange(id);\n    return true;\n  }\n  return false;\n}\n\nexport async function setThreadArchived(\n  id: string,\n  archived: boolean,\n  options: { ownerEmail?: string } = {},\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Math.max(Date.now(), 1);\n  const args: (string | number | null)[] = [archived ? now : null, id];\n  let ownerFilter = \"\";\n  if (options.ownerEmail) {\n    ownerFilter = \" AND owner_email = ?\";\n    args.push(options.ownerEmail);\n  }\n  const result = await client.execute({\n    sql: `UPDATE chat_threads SET archived_at = ? WHERE id = ?${ownerFilter}`,\n    args,\n  });\n  if (result.rowsAffected > 0) {\n    emitChatThreadChange(id);\n    return true;\n  }\n  return false;\n}\n\nexport interface UpdateThreadDataOptions {\n  preserveExistingQueuedMessages?: boolean;\n  preserveExistingTopLevelKeys?: boolean;\n  maxAttempts?: number;\n}\n\nfunction parseThreadData(value: string): any {\n  try {\n    return JSON.parse(value || \"{}\");\n  } catch {\n    return {};\n  }\n}\n\nexport async function updateThreadData(\n  id: string,\n  threadData: string,\n  title: string,\n  preview: string,\n  messageCount: number,\n  options: UpdateThreadDataOptions = {},\n): Promise<void> {\n  await ensureTable();\n  const client = getDbExec();\n  const maxAttempts =\n    options.maxAttempts ?? DEFAULT_THREAD_DATA_UPDATE_ATTEMPTS;\n  let lastConflict = false;\n\n  for (let attempt = 0; attempt < maxAttempts; attempt++) {\n    const current = await getThread(id);\n    if (!current) return;\n\n    let nextThreadData = threadData;\n    let nextMessageCount = messageCount;\n    try {\n      const merged = mergeThreadDataForClientSave(\n        parseThreadData(current.threadData),\n        parseThreadData(threadData),\n        {\n          preserveExistingQueuedMessages:\n            options.preserveExistingQueuedMessages ?? true,\n          preserveExistingTopLevelKeys:\n            options.preserveExistingTopLevelKeys ?? true,\n        },\n      );\n      nextThreadData = JSON.stringify(merged);\n      if (Array.isArray(merged.messages)) {\n        nextMessageCount = merged.messages.length;\n      }\n    } catch {\n      // Keep the caller's serialized value if either JSON blob is malformed.\n    }\n\n    const nextUpdatedAt = Math.max(Date.now(), current.updatedAt + 1);\n    const result = await client.execute({\n      sql: `UPDATE chat_threads SET thread_data = ?, title = ?, preview = ?, message_count = ?, updated_at = ? WHERE id = ? AND updated_at = ?`,\n      args: [\n        nextThreadData,\n        title,\n        preview,\n        nextMessageCount,\n        nextUpdatedAt,\n        id,\n        current.updatedAt,\n      ],\n    });\n\n    if (result.rowsAffected > 0) {\n      emitChatThreadChange(id);\n      return;\n    }\n\n    lastConflict = true;\n    if (attempt < maxAttempts - 1) {\n      await new Promise((resolve) =>\n        setTimeout(\n          resolve,\n          Math.min(250, THREAD_DATA_CONFLICT_BACKOFF_MS * (attempt + 1)),\n        ),\n      );\n    }\n  }\n\n  if (lastConflict) {\n    throw new Error(\n      `Failed to update chat thread ${id} after concurrent write conflicts.`,\n    );\n  }\n}\n\nexport interface ThreadEngineMeta {\n  engineName: string;\n  model: string;\n}\n\n/**\n * Read the engine pinned to a thread (stored in thread_data JSON).\n * Returns null if no engine is pinned.\n */\nexport async function getThreadEngineMeta(\n  threadId: string,\n): Promise<ThreadEngineMeta | null> {\n  const thread = await getThread(threadId);\n  if (!thread?.threadData) return null;\n  try {\n    const data = JSON.parse(thread.threadData);\n    if (data.engineMeta?.engineName) return data.engineMeta as ThreadEngineMeta;\n  } catch {}\n  return null;\n}\n\n/**\n * Pin an engine to a thread by storing engineMeta in thread_data JSON.\n * Does not change messages, title, or preview.\n */\nexport async function setThreadEngineMeta(\n  threadId: string,\n  meta: ThreadEngineMeta,\n): Promise<void> {\n  return withThreadDataLock(threadId, async () => {\n    const thread = await getThread(threadId);\n    if (!thread) return;\n    let data: Record<string, unknown> = {};\n    try {\n      data = JSON.parse(thread.threadData);\n    } catch {}\n    data.engineMeta = meta;\n    await updateThreadData(\n      threadId,\n      JSON.stringify(data),\n      thread.title,\n      thread.preview,\n      thread.messageCount,\n    );\n  });\n}\n\nexport interface QueuedMessage {\n  id: string;\n  text: string;\n  images?: string[];\n  references?: unknown[];\n}\n\n/**\n * Persist the user's queued (not-yet-sent) messages onto the thread.\n * Stored in thread_data JSON so it survives reloads without a schema\n * change. Safe to call often — the frontend debounces writes.\n */\nexport async function setThreadQueuedMessages(\n  threadId: string,\n  queuedMessages: QueuedMessage[],\n): Promise<void> {\n  return withThreadDataLock(threadId, async () => {\n    const thread = await getThread(threadId);\n    if (!thread) return;\n    let data: Record<string, unknown> = {};\n    try {\n      data = JSON.parse(thread.threadData);\n    } catch {}\n    if (queuedMessages.length === 0) {\n      delete data.queuedMessages;\n    } else {\n      data.queuedMessages = queuedMessages;\n    }\n    await updateThreadData(\n      threadId,\n      JSON.stringify(data),\n      thread.title,\n      thread.preview,\n      thread.messageCount,\n      { preserveExistingQueuedMessages: false },\n    );\n  });\n}\n\nexport async function deleteThread(id: string): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const result = await client.execute({\n    sql: `DELETE FROM chat_threads WHERE id = ?`,\n    args: [id],\n  });\n  if (result.rowsAffected > 0) {\n    emitChatThreadChange(id);\n    return true;\n  }\n  return false;\n}\n"]}

package/dist/cli/pr-visual-recap-workflow.d.ts

@@ -7,5 +7,5 @@
  * recap.spec.ts fails if these drift. Regenerate from the YAML with the snippet
  * in recap.spec.ts.
  */
-export declare const PR_VISUAL_RECAP_WORKFLOW_YML = "name: PR Visual Recap\n\n# Turns every PR into a \"visual code review\" \u2014 a reverse plan \u2014 by letting a real\n# coding agent RUN THE REPO'S visual-recap SKILL against the diff. The agent\n# (Claude Code by default, or Codex) reads the skill, reasons over the change,\n# publishes an Agent-Native Plan via the plan MCP tools, and writes the plan URL\n# to recap-url.txt. The workflow then screenshots that plan in headless Chrome,\n# uploads the PNG to the plan app's signed public image route, and upserts ONE\n# sticky PR comment with the inline screenshot + the interactive link.\n#\n# Design notes:\n#  - Plain `pull_request` (NOT `pull_request_target`) so fork code can never see\n#    the publish/agent secrets. Fork PRs are a silent no-op.\n#  - The `gate` job is a cheap switch: drafts, forks, bot authors, and the\n#    missing-secret case short-circuit with NO comment and NO compute. Merging\n#    this workflow before the secrets exist is a safe no-op.\n#  - The recap is INFORMATIONAL ONLY. It is not a required check and failures\n#    surface as an explanatory sticky comment, never a red X on unrelated code.\n#  - Backend is selectable with the `VISUAL_RECAP_AGENT` repo variable\n#    (claude | codex; default claude). Model and reasoning depth are tunable with\n#    `VISUAL_RECAP_MODEL` (e.g. gpt-5.5) and `VISUAL_RECAP_REASONING`\n#    (none|minimal|low|medium|high|xhigh; Codex only). The CLI invocation is\n#    auto-detected: local source inside this monorepo, the published\n#    @agent-native/core elsewhere \u2014 no repo variable needed.\n#  - Only two secrets are required: PLAN_RECAP_TOKEN (publish) and the chosen\n#    backend's API key. PLAN_RECAP_APP_URL defaults to the hosted plan app.\n#  - Nothing here is deterministic: the skill's instructions drive the recap.\n\non:\n  # Run on PRs into any base branch \u2014 the generated workflow ships to repos whose\n  # default branch may not be `main`. The gate job below still no-ops drafts,\n  # forks, bots, and the missing-secret case, so this stays cheap.\n  pull_request:\n    types: [opened, synchronize, reopened, ready_for_review]\n\npermissions:\n  contents: read\n  issues: write\n  pull-requests: write\n\nconcurrency:\n  group: pr-visual-recap-${{ github.event.pull_request.number }}\n  cancel-in-progress: true\n\nenv:\n  VISUAL_RECAP_AGENT: ${{ vars.VISUAL_RECAP_AGENT || 'claude' }}\n\njobs:\n  # --------------------------------------------------------------------------\n  # Cheap gate: decide whether to do any work at all. Sets run=false (silent\n  # no-op) for drafts, forks, bot authors, or when the publish secret / the\n  # chosen backend's API key is absent.\n  # --------------------------------------------------------------------------\n  gate:\n    name: Gate\n    runs-on: ubuntu-latest\n    outputs:\n      run: ${{ steps.decide.outputs.run }}\n    steps:\n      - id: decide\n        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7\n        env:\n          # Presence-only signals \u2014 we never expose the secret VALUES to the gate.\n          # PLAN_RECAP_APP_URL defaults to the hosted app, so only the token is required.\n          HAS_PLAN: ${{ secrets.PLAN_RECAP_TOKEN != '' }}\n          HAS_ANTHROPIC: ${{ secrets.ANTHROPIC_API_KEY != '' }}\n          HAS_OPENAI: ${{ secrets.OPENAI_API_KEY != '' }}\n          AGENT: ${{ env.VISUAL_RECAP_AGENT }}\n        with:\n          script: |\n            const pr = context.payload.pull_request;\n            const reasons = [];\n\n            if (!pr) reasons.push('no pull_request payload');\n            if (pr && pr.draft) reasons.push('draft PR');\n\n            // Fork PRs: head repo differs from this repo. Plain pull_request runs\n            // fork code with NO secrets, so publishing would fail anyway \u2014 skip.\n            const headRepo = pr && pr.head && pr.head.repo && pr.head.repo.full_name;\n            if (pr && headRepo && headRepo !== process.env.GITHUB_REPOSITORY) {\n              reasons.push(`fork PR (${headRepo})`);\n            }\n\n            // Skip noisy automated authors.\n            const login = (pr && pr.user && pr.user.login || '').toLowerCase();\n            const botAuthors = ['dependabot[bot]', 'dependabot', 'renovate[bot]', 'renovate'];\n            if (botAuthors.includes(login)) reasons.push(`bot author (${login})`);\n            if (pr && pr.user && pr.user.type === 'Bot') reasons.push('bot author (type=Bot)');\n\n            // Publish secret must be configured \u2014 otherwise this is a no-op so the\n            // workflow can be merged before secrets exist.\n            if (process.env.HAS_PLAN !== 'true') reasons.push('PLAN_RECAP_TOKEN not configured');\n\n            // The chosen backend's API key must be present.\n            const agent = (process.env.AGENT || 'claude').toLowerCase();\n            if (agent === 'codex') {\n              if (process.env.HAS_OPENAI !== 'true') reasons.push('OPENAI_API_KEY not configured (codex backend)');\n            } else {\n              if (process.env.HAS_ANTHROPIC !== 'true') reasons.push('ANTHROPIC_API_KEY not configured (claude backend)');\n            }\n\n            const run = reasons.length === 0;\n            core.setOutput('run', run ? 'true' : 'false');\n            core.info(run ? `Visual recap will run (${agent}).` : `Visual recap skipped: ${reasons.join('; ')}`);\n\n  # --------------------------------------------------------------------------\n  # Recap: collect the diff, let the agent run the skill + publish, screenshot\n  # the result, and upsert the sticky comment.\n  # --------------------------------------------------------------------------\n  recap:\n    name: Generate visual recap\n    needs: gate\n    if: needs.gate.outputs.run == 'true'\n    runs-on: ubuntu-latest\n    env:\n      PLAN_RECAP_APP_URL: ${{ secrets.PLAN_RECAP_APP_URL || 'https://plan.agent-native.com' }}\n      PLAN_RECAP_TOKEN: ${{ secrets.PLAN_RECAP_TOKEN }}\n      GH_TOKEN: ${{ github.token }}\n      PR_NUMBER: ${{ github.event.pull_request.number }}\n      HEAD_SHA: ${{ github.event.pull_request.head.sha }}\n      VISUAL_RECAP_MODEL: ${{ vars.VISUAL_RECAP_MODEL }}\n      VISUAL_RECAP_REASONING: ${{ vars.VISUAL_RECAP_REASONING }}\n    steps:\n      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1\n        with:\n          fetch-depth: 0\n\n      # Resolve the CLI invocation once: dogfood local source inside this\n      # monorepo, otherwise the published package. No repo variable needed. The\n      # pnpm setup/install steps below run ONLY for the local-source path, so the\n      # generated workflow works out-of-box in npm/yarn consumer repos (which\n      # have no pnpm-lock.yaml) by falling back to `npx @agent-native/core`.\n      - name: Resolve recap CLI\n        id: cli\n        run: |\n          if [ -f packages/core/src/cli/index.ts ]; then\n            echo \"RECAP_CLI=pnpm exec tsx packages/core/src/cli/index.ts\" >> \"$GITHUB_ENV\"\n            echo \"local=true\" >> \"$GITHUB_OUTPUT\"\n          else\n            echo \"RECAP_CLI=npx -y @agent-native/core@latest\" >> \"$GITHUB_ENV\"\n            echo \"local=false\" >> \"$GITHUB_OUTPUT\"\n          fi\n\n      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0\n        if: steps.cli.outputs.local == 'true'\n\n      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0\n        with:\n          node-version: \"22\"\n          cache: ${{ steps.cli.outputs.local == 'true' && 'pnpm' || '' }}\n\n      - name: Install workspace (local source only)\n        if: steps.cli.outputs.local == 'true'\n        run: pnpm install --frozen-lockfile\n\n      # Collect a BOUNDED diff between the PR base and head. We exclude lockfiles,\n      # build output, and snapshots (noise), and cap the byte size \u2014 over the cap\n      # we set `huge=true` so the agent is told to produce a summarized recap.\n      - name: Collect bounded diff\n        id: diff\n        env:\n          BASE_SHA: ${{ github.event.pull_request.base.sha }}\n        run: |\n          set -euo pipefail\n          git diff --no-color \"$BASE_SHA\"...\"$HEAD_SHA\" -- \\\n            . \\\n            ':(exclude)pnpm-lock.yaml' \\\n            ':(exclude)**/dist/**' \\\n            ':(exclude)**/*.snap' \\\n            ':(exclude)**/*.lock' \\\n            > recap.diff || true\n          git diff --stat --no-color \"$BASE_SHA\"...\"$HEAD_SHA\" -- \\\n            . \\\n            ':(exclude)pnpm-lock.yaml' \\\n            ':(exclude)**/dist/**' \\\n            ':(exclude)**/*.snap' \\\n            ':(exclude)**/*.lock' \\\n            > recap.stat || true\n\n          BYTES=$(wc -c < recap.diff | tr -d ' ')\n          CHANGED=$(git diff --name-only \"$BASE_SHA\"...\"$HEAD_SHA\" -- \\\n            . \\\n            ':(exclude)pnpm-lock.yaml' \\\n            ':(exclude)**/dist/**' \\\n            ':(exclude)**/*.snap' \\\n            ':(exclude)**/*.lock' \\\n            | wc -l | tr -d ' ')\n          echo \"bytes=$BYTES\" >> \"$GITHUB_OUTPUT\"\n          echo \"changed=$CHANGED\" >> \"$GITHUB_OUTPUT\"\n\n          # ~600KB cap.\n          if [ \"$BYTES\" -gt 614400 ]; then\n            echo \"huge=true\" >> \"$GITHUB_OUTPUT\"\n          else\n            echo \"huge=false\" >> \"$GITHUB_OUTPUT\"\n          fi\n\n          # Tiny diffs (<= 1 changed file AND <= 8 changed lines) aren't worth a\n          # recap \u2014 skip generation cleanly.\n          LINES=$(grep -cE '^[+-]' recap.diff || true)\n          if [ \"$CHANGED\" -le 1 ] && [ \"${LINES:-0}\" -le 8 ]; then\n            echo \"tiny=true\" >> \"$GITHUB_OUTPUT\"\n          else\n            echo \"tiny=false\" >> \"$GITHUB_OUTPUT\"\n          fi\n\n      # Secret pre-scan: refuse to hand a diff that looks like it leaks\n      # credentials to the agent. Prints { suppressed, reason } and always exits 0.\n      - name: Secret scan\n        id: scan\n        if: steps.diff.outputs.tiny != 'true'\n        run: |\n          set -uo pipefail\n          SCAN_JSON=\"$($RECAP_CLI recap scan --diff recap.diff || echo '{}')\"\n          echo \"json=$SCAN_JSON\" >> \"$GITHUB_OUTPUT\"\n          SUPPRESSED=$(node -e 'try{process.stdout.write(JSON.parse(process.argv[1]).suppressed?\"true\":\"false\")}catch{process.stdout.write(\"false\")}' \"$SCAN_JSON\")\n          echo \"suppressed=$SUPPRESSED\" >> \"$GITHUB_OUTPUT\"\n\n      # Find the planId from the previous sticky comment so a re-push REPLACES the\n      # same hosted plan (synchronize updates in place, no orphaned plans).\n      - name: Read previous plan id\n        id: prev\n        continue-on-error: true\n        run: |\n          set -euo pipefail\n          PLAN_ID=\"$($RECAP_CLI recap comment find-plan-id --repo \"$GITHUB_REPOSITORY\" --issue \"$PR_NUMBER\" --token \"$GH_TOKEN\")\"\n          echo \"plan_id=$PLAN_ID\" >> \"$GITHUB_OUTPUT\"\n\n      # Build the agent prompt = the repo's visual-recap SKILL.md + a task wrapper.\n      - name: Build recap prompt\n        id: prompt\n        if: steps.diff.outputs.tiny != 'true' && steps.scan.outputs.suppressed != 'true'\n        run: |\n          set -euo pipefail\n          PREV=\"\"\n          if [ -n \"${{ steps.prev.outputs.plan_id }}\" ]; then PREV=\"--prev-plan-id ${{ steps.prev.outputs.plan_id }}\"; fi\n          HUGE=\"\"\n          if [ \"${{ steps.diff.outputs.huge }}\" = \"true\" ]; then HUGE=\"--huge\"; fi\n          $RECAP_CLI recap build-prompt \\\n            --diff recap.diff --stat recap.stat \\\n            --pr \"$PR_NUMBER\" --head \"$HEAD_SHA\" \\\n            --app-url \"$PLAN_RECAP_APP_URL\" \\\n            --out recap-prompt.md \\\n            $HUGE $PREV\n\n      # Wire the plan MCP server for the chosen backend, then run the agent. The\n      # agent follows the skill, calls create-visual-recap + set-resource-visibility,\n      # and writes the published plan URL to recap-url.txt. continue-on-error so a\n      # failed agent run becomes an explanatory comment, not a red X.\n      - name: Run agent (Claude Code)\n        id: claude\n        if: env.VISUAL_RECAP_AGENT == 'claude' && steps.diff.outputs.tiny != 'true' && steps.scan.outputs.suppressed != 'true'\n        continue-on-error: true\n        env:\n          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}\n        run: |\n          set -uo pipefail\n          MCP_CONFIG=\"$RUNNER_TEMP/plan-mcp.json\"\n          node -e 'const fs=require(\"fs\");fs.writeFileSync(process.argv[1],JSON.stringify({mcpServers:{plan:{type:\"http\",url:process.env.PLAN_RECAP_APP_URL.replace(/\\/$/,\"\")+\"/_agent-native/mcp\",headers:{Authorization:\"Bearer \"+process.env.PLAN_RECAP_TOKEN}}}}))' \"$MCP_CONFIG\"\n          # VISUAL_RECAP_MODEL picks the Claude model; reasoning depth is model-driven\n          # for Claude Code, so VISUAL_RECAP_REASONING only applies to the Codex backend.\n          CLAUDE_ARGS=(-p \"$(cat recap-prompt.md)\" --mcp-config \"$MCP_CONFIG\" --allowedTools \"Read,Write,Bash(git diff:*),mcp__plan__create-visual-recap,mcp__plan__set-resource-visibility\" --permission-mode dontAsk)\n          if [ -n \"${VISUAL_RECAP_MODEL:-}\" ]; then CLAUDE_ARGS+=(--model \"$VISUAL_RECAP_MODEL\"); fi\n          npx -y @anthropic-ai/claude-code@2 \"${CLAUDE_ARGS[@]}\" || true\n          rm -f \"$MCP_CONFIG\" || true\n\n      - name: Run agent (Codex)\n        id: codex\n        if: env.VISUAL_RECAP_AGENT == 'codex' && steps.diff.outputs.tiny != 'true' && steps.scan.outputs.suppressed != 'true'\n        continue-on-error: true\n        env:\n          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}\n        run: |\n          set -uo pipefail\n          mkdir -p \"$HOME/.codex\"\n          # JSON.stringify the URL into the TOML value so a stray quote/newline\n          # in PLAN_RECAP_APP_URL can't break out of the string (TOML basic\n          # strings share JSON's escaping); the key/env name stay literal.\n          node -e 'const fs=require(\"fs\");const url=process.env.PLAN_RECAP_APP_URL.replace(/\\/$/,\"\")+\"/_agent-native/mcp\";fs.writeFileSync(process.env.HOME+\"/.codex/config.toml\",\"[mcp_servers.plan]\\nurl = \"+JSON.stringify(url)+\"\\nbearer_token_env_var = \\\"PLAN_RECAP_TOKEN\\\"\\n\")'\n          # Authenticate with the API key explicitly. Relying on the bare\n          # OPENAI_API_KEY env var alone is unreliable on the gpt-5.5 WebSocket\n          # transport: the Authorization header is dropped on the wss path and\n          # its HTTPS fallback, surfacing as `401 Missing bearer or basic\n          # authentication in header` (openai/codex#15492). `codex login\n          # --with-api-key` reads the key from stdin and writes ~/.codex/auth.json,\n          # which the exec path reads reliably; piping via stdin keeps the key out\n          # of the process args. Non-fatal so a login hiccup still yields the\n          # explanatory recap comment rather than a red X.\n          printenv OPENAI_API_KEY | npx -y @openai/codex@0 login --with-api-key || true\n          # VISUAL_RECAP_MODEL (e.g. gpt-5.5) and VISUAL_RECAP_REASONING\n          # (none|minimal|low|medium|high|xhigh) tune the Codex run.\n          #\n          # The GitHub runner is itself an ephemeral, throwaway sandbox, so run\n          # Codex with sandboxing and approvals disabled. Codex's own bubblewrap\n          # sandbox cannot initialize on the runner (\"could not find bubblewrap\n          # on PATH\"), which makes every shell command fail at startup so the\n          # agent cannot even read recap.diff; and under an approval gate the\n          # write-side plan MCP call (create-visual-recap) is auto-cancelled\n          # (\"user cancelled MCP tool call\"). --dangerously-bypass-approvals-and-sandbox\n          # is the documented invocation for externally-sandboxed CI and clears both.\n          CODEX_ARGS=(exec --dangerously-bypass-approvals-and-sandbox --skip-git-repo-check)\n          if [ -n \"${VISUAL_RECAP_MODEL:-}\" ]; then CODEX_ARGS+=(--model \"$VISUAL_RECAP_MODEL\"); fi\n          # Validate reasoning against the known enum before embedding it in the\n          # codex `-c` TOML override, so an unexpected value can't alter the config.\n          case \"${VISUAL_RECAP_REASONING:-}\" in\n            none|minimal|low|medium|high|xhigh)\n              CODEX_ARGS+=(-c \"model_reasoning_effort=\\\"$VISUAL_RECAP_REASONING\\\"\") ;;\n            \"\") ;;\n            *) echo \"Ignoring invalid VISUAL_RECAP_REASONING: $VISUAL_RECAP_REASONING\" ;;\n          esac\n          npx -y @openai/codex@0 \"${CODEX_ARGS[@]}\" \"$(cat recap-prompt.md)\" || true\n\n      # The agent's only hand-off: recap-url.txt with the published plan URL.\n      - name: Read plan URL\n        id: url\n        if: steps.diff.outputs.tiny != 'true' && steps.scan.outputs.suppressed != 'true'\n        run: |\n          set -uo pipefail\n          PLAN_URL=\"\"\n          if [ -f recap-url.txt ]; then PLAN_URL=\"$(tr -d '\\r\\n' < recap-url.txt | tr -d ' ')\"; fi\n          echo \"plan_url=$PLAN_URL\" >> \"$GITHUB_OUTPUT\"\n          if [ -n \"$PLAN_URL\" ]; then echo \"ok=true\" >> \"$GITHUB_OUTPUT\"; else echo \"ok=false\" >> \"$GITHUB_OUTPUT\"; fi\n\n      # Screenshot the published plan in headless Chrome and upload the PNG to the\n      # plan app's signed public image route. Best-effort: never fails the job.\n      - name: Screenshot + upload\n        id: shot\n        if: steps.url.outputs.ok == 'true'\n        continue-on-error: true\n        env:\n          # Pass the agent-produced plan URL through the environment, never via\n          # ${{ }} interpolation into the run script: recap-url.txt is untrusted\n          # agent output, so inlining it would be a shell-injection vector.\n          PLAN_URL: ${{ steps.url.outputs.plan_url }}\n        run: |\n          set -uo pipefail\n          pnpm exec playwright install --with-deps chromium 2>/dev/null || npx -y playwright@1 install --with-deps chromium || true\n          SHOT_JSON=\"$($RECAP_CLI recap shot --url \"$PLAN_URL\" --token \"$PLAN_RECAP_TOKEN\" --app-url \"$PLAN_RECAP_APP_URL\" --out recap.png || echo '{}')\"\n          IMAGE_URL=$(node -e 'try{process.stdout.write(JSON.parse(process.argv[1]).imageUrl||\"\")}catch{process.stdout.write(\"\")}' \"$SHOT_JSON\")\n          echo \"image_url=$IMAGE_URL\" >> \"$GITHUB_OUTPUT\"\n          if [ -f recap.png ]; then echo \"captured=true\" >> \"$GITHUB_OUTPUT\"; else echo \"captured=false\" >> \"$GITHUB_OUTPUT\"; fi\n\n      - name: Upload recap screenshot artifact\n        if: steps.shot.outputs.captured == 'true'\n        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2\n        with:\n          name: pr-visual-recap-${{ github.event.pull_request.number }}\n          path: recap.png\n          if-no-files-found: ignore\n          retention-days: 14\n\n      # Upsert the single sticky comment: inline screenshot + link on success,\n      # suppressed / failed / tiny variants otherwise. Runs even on a tiny diff\n      # so a prior recap comment is refreshed (not left pointing at a stale SHA).\n      - name: Upsert sticky comment\n        if: always()\n        env:\n          PLAN_URL: ${{ steps.url.outputs.plan_url }}\n          RECAP_IMAGE_URL: ${{ steps.shot.outputs.image_url }}\n          SUPPRESSED: ${{ steps.scan.outputs.suppressed }}\n          SUPPRESSED_JSON: ${{ steps.scan.outputs.json }}\n          DIFF_HUGE: ${{ steps.diff.outputs.huge }}\n          DIFF_TINY: ${{ steps.diff.outputs.tiny }}\n        run: |\n          set -euo pipefail\n          ARGS=(recap comment upsert --repo \"$GITHUB_REPOSITORY\" --issue \"$PR_NUMBER\" --token \"$GH_TOKEN\")\n          # On a tiny diff only REFRESH an existing recap comment \u2014 never create a\n          # new one \u2014 so a tiny push doesn't add noise but also can't leave a\n          # stale prior recap behind.\n          if [ \"${DIFF_TINY:-}\" = \"true\" ]; then ARGS+=(--update-only); fi\n          $RECAP_CLI \"${ARGS[@]}\"\n";
+export declare const PR_VISUAL_RECAP_WORKFLOW_YML = "name: PR Visual Recap\n\n# Turns every PR into a \"visual code review\" \u2014 a reverse plan \u2014 by letting a real\n# coding agent RUN THE REPO'S visual-recap SKILL against the diff. The agent\n# (Claude Code by default, or Codex) reads the skill, reasons over the change,\n# publishes an Agent-Native Plan via the plan MCP tools, and writes the plan URL\n# to recap-url.txt. The workflow then screenshots that plan in headless Chrome,\n# uploads the PNG to the plan app's signed public image route, and upserts ONE\n# sticky PR comment with the inline screenshot + the interactive link.\n#\n# Design notes:\n#  - Plain `pull_request` (NOT `pull_request_target`) so fork code can never see\n#    the publish/agent secrets. Fork PRs are a silent no-op.\n#  - The `gate` job is a cheap switch: drafts, forks, bot authors, and the\n#    missing-secret case short-circuit with NO comment and NO compute. Merging\n#    this workflow before the secrets exist is a safe no-op.\n#  - The recap is INFORMATIONAL ONLY. It is not a required check and failures\n#    surface as an explanatory sticky comment, never a red X on unrelated code.\n#  - Backend is selectable with the `VISUAL_RECAP_AGENT` repo variable\n#    (claude | codex; default claude). Model and reasoning depth are tunable with\n#    `VISUAL_RECAP_MODEL` (e.g. gpt-5.5) and `VISUAL_RECAP_REASONING`\n#    (none|minimal|low|medium|high|xhigh; Codex only). The CLI invocation is\n#    auto-detected: local source inside this monorepo, the published\n#    @agent-native/core elsewhere \u2014 no repo variable needed.\n#  - Only two secrets are required: PLAN_RECAP_TOKEN (publish) and the chosen\n#    backend's API key. PLAN_RECAP_APP_URL defaults to the hosted plan app.\n#  - Nothing here is deterministic: the skill's instructions drive the recap.\n\non:\n  # Run on PRs into any base branch \u2014 the generated workflow ships to repos whose\n  # default branch may not be `main`. The gate job below still no-ops drafts,\n  # forks, bots, and the missing-secret case, so this stays cheap.\n  pull_request:\n    types: [opened, synchronize, reopened, ready_for_review]\n\npermissions:\n  contents: read\n  issues: write\n  pull-requests: write\n\nconcurrency:\n  group: pr-visual-recap-${{ github.event.pull_request.number }}\n  cancel-in-progress: true\n\nenv:\n  VISUAL_RECAP_AGENT: ${{ vars.VISUAL_RECAP_AGENT || 'claude' }}\n\njobs:\n  # --------------------------------------------------------------------------\n  # Cheap gate: decide whether to do any work at all. Sets run=false (silent\n  # no-op) for drafts, forks, bot authors, or when the publish secret / the\n  # chosen backend's API key is absent.\n  # --------------------------------------------------------------------------\n  gate:\n    name: Gate\n    runs-on: ubuntu-latest\n    outputs:\n      run: ${{ steps.decide.outputs.run }}\n      agent: ${{ steps.decide.outputs.agent }}\n    steps:\n      - id: decide\n        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7\n        env:\n          # Presence-only signals \u2014 we never expose the secret VALUES to the gate.\n          # PLAN_RECAP_APP_URL defaults to the hosted app, so only the token is required.\n          HAS_PLAN: ${{ secrets.PLAN_RECAP_TOKEN != '' }}\n          HAS_ANTHROPIC: ${{ secrets.ANTHROPIC_API_KEY != '' }}\n          HAS_OPENAI: ${{ secrets.OPENAI_API_KEY != '' }}\n          AGENT: ${{ env.VISUAL_RECAP_AGENT }}\n        with:\n          script: |\n            const pr = context.payload.pull_request;\n            const reasons = [];\n\n            if (!pr) reasons.push('no pull_request payload');\n            if (pr && pr.draft) reasons.push('draft PR');\n\n            // Fork PRs: head repo differs from this repo. Plain pull_request runs\n            // fork code with NO secrets, so publishing would fail anyway \u2014 skip.\n            const headRepo = pr && pr.head && pr.head.repo && pr.head.repo.full_name;\n            if (pr && headRepo && headRepo !== process.env.GITHUB_REPOSITORY) {\n              reasons.push(`fork PR (${headRepo})`);\n            }\n\n            // Skip noisy automated authors.\n            const login = (pr && pr.user && pr.user.login || '').toLowerCase();\n            const botAuthors = ['dependabot[bot]', 'dependabot', 'renovate[bot]', 'renovate'];\n            if (botAuthors.includes(login)) reasons.push(`bot author (${login})`);\n            if (pr && pr.user && pr.user.type === 'Bot') reasons.push('bot author (type=Bot)');\n\n            // Publish secret must be configured \u2014 otherwise this is a no-op so the\n            // workflow can be merged before secrets exist.\n            if (process.env.HAS_PLAN !== 'true') reasons.push('PLAN_RECAP_TOKEN not configured');\n\n            // The chosen backend's API key must be present. Normalize the agent\n            // value once here and validate it: an unknown or mis-cased value\n            // (e.g. \"Claude\", \"gpt\") must NOT silently pass the gate and then\n            // match neither agent step below.\n            const agent = (process.env.AGENT || 'claude').toLowerCase();\n            if (agent !== 'claude' && agent !== 'codex') {\n              reasons.push(`unsupported VISUAL_RECAP_AGENT \"${process.env.AGENT}\" (expected \"claude\" or \"codex\")`);\n            } else if (agent === 'codex') {\n              if (process.env.HAS_OPENAI !== 'true') reasons.push('OPENAI_API_KEY not configured (codex backend)');\n            } else {\n              if (process.env.HAS_ANTHROPIC !== 'true') reasons.push('ANTHROPIC_API_KEY not configured (claude backend)');\n            }\n\n            // Self-modifying guard, evaluated in the GATE (trusted github-script\n            // that runs NO PR-checked-out code): if this PR changes the workflow,\n            // the visual-recap/visual-plan skill, the local CLI (packages/core),\n            // or any agent config the runner would load (.claude/**, CLAUDE.md,\n            // .mcp.json), skip the ENTIRE job \u2014 not just the agent \u2014 so a PR can\n            // never rewrite what runs (skill, hooks, settings, CLI) and exfiltrate\n            // the publish/API secrets.\n            if (pr) {\n              try {\n                const files = await github.paginate(github.rest.pulls.listFiles, {\n                  owner: context.repo.owner,\n                  repo: context.repo.repo,\n                  pull_number: pr.number,\n                  per_page: 100,\n                });\n                const isSensitive = (p) =>\n                  p === '.github/workflows/pr-visual-recap.yml' ||\n                  /(^|\\/)skills\\/visual-(recap|plan|plans)\\//.test(p) ||\n                  /(^|\\/)\\.claude\\//.test(p) ||\n                  /(^|\\/)CLAUDE\\.md$/.test(p) ||\n                  /(^|\\/)AGENTS\\.md$/.test(p) ||\n                  /(^|\\/)\\.mcp\\.json$/.test(p) ||\n                  /(^|\\/)packages\\/core\\//.test(p);\n                const hits = files.map((f) => f.filename).filter(isSensitive);\n                if (hits.length) {\n                  reasons.push(`PR modifies recap-control files (${hits.slice(0, 3).join(', ')}${hits.length > 3 ? ', \u2026' : ''}) \u2014 skipping so untrusted PR code never runs with secrets`);\n                }\n              } catch (e) {\n                reasons.push(`could not list PR files for the self-modifying guard (${e.message}); skipping to be safe`);\n              }\n            }\n\n            const run = reasons.length === 0;\n            core.setOutput('run', run ? 'true' : 'false');\n            // Export the NORMALIZED agent so the recap job's step conditions match\n            // case-insensitively via needs.gate.outputs.agent.\n            core.setOutput('agent', agent);\n            core.info(run ? `Visual recap will run (${agent}).` : `Visual recap skipped: ${reasons.join('; ')}`);\n\n  # --------------------------------------------------------------------------\n  # Recap: collect the diff, let the agent run the skill + publish, screenshot\n  # the result, and upsert the sticky comment.\n  # --------------------------------------------------------------------------\n  recap:\n    name: Generate visual recap\n    needs: gate\n    if: needs.gate.outputs.run == 'true'\n    runs-on: ubuntu-latest\n    env:\n      PLAN_RECAP_APP_URL: ${{ secrets.PLAN_RECAP_APP_URL || 'https://plan.agent-native.com' }}\n      PLAN_RECAP_TOKEN: ${{ secrets.PLAN_RECAP_TOKEN }}\n      GH_TOKEN: ${{ github.token }}\n      PR_NUMBER: ${{ github.event.pull_request.number }}\n      HEAD_SHA: ${{ github.event.pull_request.head.sha }}\n      VISUAL_RECAP_MODEL: ${{ vars.VISUAL_RECAP_MODEL }}\n      VISUAL_RECAP_REASONING: ${{ vars.VISUAL_RECAP_REASONING }}\n    steps:\n      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1\n        with:\n          fetch-depth: 0\n\n      # Resolve the CLI invocation once: dogfood local source inside this\n      # monorepo, otherwise the published package. No repo variable needed. The\n      # pnpm setup/install steps below run ONLY for the local-source path, so the\n      # generated workflow works out-of-box in npm/yarn consumer repos (which\n      # have no pnpm-lock.yaml) by falling back to `npx @agent-native/core`.\n      - name: Resolve recap CLI\n        id: cli\n        run: |\n          if [ -f packages/core/src/cli/index.ts ]; then\n            echo \"RECAP_CLI=pnpm exec tsx packages/core/src/cli/index.ts\" >> \"$GITHUB_ENV\"\n            echo \"local=true\" >> \"$GITHUB_OUTPUT\"\n          else\n            echo \"RECAP_CLI=npx -y @agent-native/core@latest\" >> \"$GITHUB_ENV\"\n            echo \"local=false\" >> \"$GITHUB_OUTPUT\"\n          fi\n\n      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0\n        if: steps.cli.outputs.local == 'true'\n\n      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0\n        with:\n          node-version: \"22\"\n          cache: ${{ steps.cli.outputs.local == 'true' && 'pnpm' || '' }}\n\n      - name: Install workspace (local source only)\n        if: steps.cli.outputs.local == 'true'\n        run: pnpm install --frozen-lockfile --ignore-scripts\n\n      # Collect a BOUNDED diff between the PR base and head. We exclude lockfiles,\n      # build output, and snapshots (noise), and cap the byte size \u2014 over the cap\n      # we set `huge=true` so the agent is told to produce a summarized recap.\n      - name: Collect bounded diff\n        id: diff\n        env:\n          BASE_SHA: ${{ github.event.pull_request.base.sha }}\n        run: |\n          set -euo pipefail\n          git diff --no-color \"$BASE_SHA\"...\"$HEAD_SHA\" -- \\\n            . \\\n            ':(exclude)pnpm-lock.yaml' \\\n            ':(exclude)**/dist/**' \\\n            ':(exclude)**/*.snap' \\\n            ':(exclude)**/*.lock' \\\n            > recap.diff || true\n          git diff --stat --no-color \"$BASE_SHA\"...\"$HEAD_SHA\" -- \\\n            . \\\n            ':(exclude)pnpm-lock.yaml' \\\n            ':(exclude)**/dist/**' \\\n            ':(exclude)**/*.snap' \\\n            ':(exclude)**/*.lock' \\\n            > recap.stat || true\n\n          BYTES=$(wc -c < recap.diff | tr -d ' ')\n          CHANGED=$(git diff --name-only \"$BASE_SHA\"...\"$HEAD_SHA\" -- \\\n            . \\\n            ':(exclude)pnpm-lock.yaml' \\\n            ':(exclude)**/dist/**' \\\n            ':(exclude)**/*.snap' \\\n            ':(exclude)**/*.lock' \\\n            | wc -l | tr -d ' ')\n          echo \"bytes=$BYTES\" >> \"$GITHUB_OUTPUT\"\n          echo \"changed=$CHANGED\" >> \"$GITHUB_OUTPUT\"\n\n          # ~600KB cap. Over the cap we both flag `huge` (so the agent is told to\n          # summarize) AND physically truncate recap.diff, so an oversized diff\n          # cannot overflow the agent's prompt budget when it reads the file.\n          # Truncate at a COMPLETE LINE boundary (`sed '$d'` drops the last,\n          # possibly-partial, line) so the byte cap can never cut a multi-byte\n          # UTF-8 char or a diff line mid-way and corrupt the agent's input.\n          if [ \"$BYTES\" -gt 614400 ]; then\n            echo \"huge=true\" >> \"$GITHUB_OUTPUT\"\n            head -c 614400 recap.diff | sed '$d' > recap.diff.capped && mv recap.diff.capped recap.diff\n            printf '\\n\\n[diff truncated at 600KB for the recap agent]\\n' >> recap.diff\n          else\n            echo \"huge=false\" >> \"$GITHUB_OUTPUT\"\n          fi\n\n          # Tiny diffs (<= 1 changed file AND <= 8 changed lines) aren't worth a\n          # recap \u2014 skip generation cleanly.\n          LINES=$(grep -cE '^[+-]' recap.diff || true)\n          if [ \"$CHANGED\" -le 1 ] && [ \"${LINES:-0}\" -le 8 ]; then\n            echo \"tiny=true\" >> \"$GITHUB_OUTPUT\"\n          else\n            echo \"tiny=false\" >> \"$GITHUB_OUTPUT\"\n          fi\n\n      # Secret pre-scan: refuse to hand a diff that looks like it leaks\n      # credentials to the agent. Prints { suppressed, reason } and always exits 0.\n      - name: Secret scan\n        id: scan\n        if: steps.diff.outputs.tiny != 'true'\n        run: |\n          set -uo pipefail\n          # Fail CLOSED: if the scanner errors or emits invalid JSON, treat the\n          # diff as suppressed, so a scan failure can never hand a possibly\n          # credential-bearing diff to the agent / plan service.\n          if ! SCAN_JSON=\"$($RECAP_CLI recap scan --diff recap.diff)\"; then\n            SCAN_JSON='{\"suppressed\":true,\"reason\":\"secret scan failed to run; failing closed\"}'\n          fi\n          # Multi-line-safe write: SCAN_JSON could contain newlines, which would\n          # otherwise corrupt $GITHUB_OUTPUT or inject extra keys.\n          {\n            echo 'json<<__RECAP_SCAN_EOF__'\n            echo \"$SCAN_JSON\"\n            echo '__RECAP_SCAN_EOF__'\n          } >> \"$GITHUB_OUTPUT\"\n          SUPPRESSED=$(node -e 'try{process.stdout.write(JSON.parse(process.argv[1]).suppressed?\"true\":\"false\")}catch{process.stdout.write(\"true\")}' \"$SCAN_JSON\")\n          echo \"suppressed=$SUPPRESSED\" >> \"$GITHUB_OUTPUT\"\n\n      # Find the planId from the previous sticky comment so a re-push REPLACES the\n      # same hosted plan (synchronize updates in place, no orphaned plans).\n      - name: Read previous plan id\n        id: prev\n        continue-on-error: true\n        run: |\n          set -euo pipefail\n          PLAN_ID=\"$($RECAP_CLI recap comment find-plan-id --repo \"$GITHUB_REPOSITORY\" --issue \"$PR_NUMBER\" --token \"$GH_TOKEN\")\"\n          echo \"plan_id=$PLAN_ID\" >> \"$GITHUB_OUTPUT\"\n\n      # Build the agent prompt = the repo's visual-recap SKILL.md + a task wrapper.\n      - name: Build recap prompt\n        id: prompt\n        if: steps.diff.outputs.tiny != 'true' && steps.scan.outputs.suppressed != 'true'\n        run: |\n          set -euo pipefail\n          PREV=\"\"\n          if [ -n \"${{ steps.prev.outputs.plan_id }}\" ]; then PREV=\"--prev-plan-id ${{ steps.prev.outputs.plan_id }}\"; fi\n          HUGE=\"\"\n          if [ \"${{ steps.diff.outputs.huge }}\" = \"true\" ]; then HUGE=\"--huge\"; fi\n          $RECAP_CLI recap build-prompt \\\n            --diff recap.diff --stat recap.stat \\\n            --pr \"$PR_NUMBER\" --head \"$HEAD_SHA\" \\\n            --app-url \"$PLAN_RECAP_APP_URL\" \\\n            --out recap-prompt.md \\\n            $HUGE $PREV\n\n      # Wire the plan MCP server for the chosen backend, then run the agent. The\n      # agent follows the skill, calls create-visual-recap + set-resource-visibility,\n      # and writes the published plan URL to recap-url.txt. continue-on-error so a\n      # failed agent run becomes an explanatory comment, not a red X.\n      - name: Run agent (Claude Code)\n        id: claude\n        if: needs.gate.outputs.agent == 'claude' && steps.diff.outputs.tiny != 'true' && steps.scan.outputs.suppressed != 'true'\n        continue-on-error: true\n        env:\n          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}\n        run: |\n          set -uo pipefail\n          MCP_CONFIG=\"$RUNNER_TEMP/plan-mcp.json\"\n          node -e 'const fs=require(\"fs\");fs.writeFileSync(process.argv[1],JSON.stringify({mcpServers:{plan:{type:\"http\",url:process.env.PLAN_RECAP_APP_URL.replace(/\\/$/,\"\")+\"/_agent-native/mcp\",headers:{Authorization:\"Bearer \"+process.env.PLAN_RECAP_TOKEN}}}}))' \"$MCP_CONFIG\"\n          # VISUAL_RECAP_MODEL picks the Claude model; reasoning depth is model-driven\n          # for Claude Code, so VISUAL_RECAP_REASONING only applies to the Codex backend.\n          CLAUDE_ARGS=(-p \"$(cat recap-prompt.md)\" --mcp-config \"$MCP_CONFIG\" --allowedTools \"Read,Write,Bash(git diff:*),mcp__plan__create-visual-recap,mcp__plan__set-resource-visibility\" --permission-mode dontAsk --output-format json)\n          if [ -n \"${VISUAL_RECAP_MODEL:-}\" ]; then CLAUDE_ARGS+=(--model \"$VISUAL_RECAP_MODEL\"); fi\n          # Capture the final JSON result (usage + total_cost_usd) for the usage step.\n          npx -y @anthropic-ai/claude-code@2 \"${CLAUDE_ARGS[@]}\" > claude-result.json || true\n          rm -f \"$MCP_CONFIG\" || true\n\n      - name: Run agent (Codex)\n        id: codex\n        if: needs.gate.outputs.agent == 'codex' && steps.diff.outputs.tiny != 'true' && steps.scan.outputs.suppressed != 'true'\n        continue-on-error: true\n        env:\n          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}\n        run: |\n          set -uo pipefail\n          mkdir -p \"$HOME/.codex\"\n          # JSON.stringify the URL into the TOML value so a stray quote/newline\n          # in PLAN_RECAP_APP_URL can't break out of the string (TOML basic\n          # strings share JSON's escaping); the key/env name stay literal.\n          node -e 'const fs=require(\"fs\");const url=process.env.PLAN_RECAP_APP_URL.replace(/\\/$/,\"\")+\"/_agent-native/mcp\";fs.writeFileSync(process.env.HOME+\"/.codex/config.toml\",\"[mcp_servers.plan]\\nurl = \"+JSON.stringify(url)+\"\\nbearer_token_env_var = \\\"PLAN_RECAP_TOKEN\\\"\\n\")'\n          # Authenticate with the API key explicitly. Relying on the bare\n          # OPENAI_API_KEY env var alone is unreliable on the gpt-5.5 WebSocket\n          # transport: the Authorization header is dropped on the wss path and\n          # its HTTPS fallback, surfacing as `401 Missing bearer or basic\n          # authentication in header` (openai/codex#15492). `codex login\n          # --with-api-key` reads the key from stdin and writes ~/.codex/auth.json,\n          # which the exec path reads reliably; piping via stdin keeps the key out\n          # of the process args. Non-fatal so a login hiccup still yields the\n          # explanatory recap comment rather than a red X.\n          printenv OPENAI_API_KEY | npx -y @openai/codex@0 login --with-api-key || true\n          # VISUAL_RECAP_MODEL (e.g. gpt-5.5) and VISUAL_RECAP_REASONING\n          # (none|minimal|low|medium|high|xhigh) tune the Codex run.\n          #\n          # The GitHub runner is itself an ephemeral, throwaway sandbox, so run\n          # Codex with sandboxing and approvals disabled. Codex's own bubblewrap\n          # sandbox cannot initialize on the runner (\"could not find bubblewrap\n          # on PATH\"), which makes every shell command fail at startup so the\n          # agent cannot even read recap.diff; and under an approval gate the\n          # write-side plan MCP call (create-visual-recap) is auto-cancelled\n          # (\"user cancelled MCP tool call\"). --dangerously-bypass-approvals-and-sandbox\n          # is the documented invocation for externally-sandboxed CI and clears both.\n          CODEX_ARGS=(exec --dangerously-bypass-approvals-and-sandbox --skip-git-repo-check)\n          if [ -n \"${VISUAL_RECAP_MODEL:-}\" ]; then CODEX_ARGS+=(--model \"$VISUAL_RECAP_MODEL\"); fi\n          # Validate reasoning against the known enum before embedding it in the\n          # codex `-c` TOML override, so an unexpected value can't alter the config.\n          case \"${VISUAL_RECAP_REASONING:-}\" in\n            none|minimal|low|medium|high|xhigh)\n              CODEX_ARGS+=(-c \"model_reasoning_effort=\\\"$VISUAL_RECAP_REASONING\\\"\") ;;\n            \"\") ;;\n            *) echo \"Ignoring invalid VISUAL_RECAP_REASONING: $VISUAL_RECAP_REASONING\" ;;\n          esac\n          npx -y @openai/codex@0 \"${CODEX_ARGS[@]}\" --json \"$(cat recap-prompt.md)\" | tee codex-events.jsonl || true\n\n      # The agent's only hand-off: recap-url.txt with the published plan URL.\n      - name: Read plan URL\n        id: url\n        if: steps.diff.outputs.tiny != 'true' && steps.scan.outputs.suppressed != 'true'\n        run: |\n          set -uo pipefail\n          PLAN_URL=\"\"\n          if [ -f recap-url.txt ]; then PLAN_URL=\"$(tr -d '\\r\\n' < recap-url.txt | tr -d ' ')\"; fi\n          echo \"plan_url=$PLAN_URL\" >> \"$GITHUB_OUTPUT\"\n          if [ -n \"$PLAN_URL\" ]; then echo \"ok=true\" >> \"$GITHUB_OUTPUT\"; else echo \"ok=false\" >> \"$GITHUB_OUTPUT\"; fi\n\n      # Capture the agent run token usage and attach it to the published recap\n      # so the recap row carries input/output/cached tokens, the model, and a\n      # cost estimate. Informational and best-effort: never fails the job.\n      - name: Attach usage\n        if: steps.url.outputs.ok == 'true'\n        continue-on-error: true\n        env:\n          PLAN_URL: ${{ steps.url.outputs.plan_url }}\n        run: |\n          set -uo pipefail\n          RESULT=claude-result.json\n          if [ \"$VISUAL_RECAP_AGENT\" = \"codex\" ]; then RESULT=codex-events.jsonl; fi\n          if [ -f \"$RESULT\" ]; then $RECAP_CLI recap usage --plan-url \"$PLAN_URL\" --agent \"$VISUAL_RECAP_AGENT\" --result-file \"$RESULT\" --model \"${VISUAL_RECAP_MODEL:-}\" --app-url \"$PLAN_RECAP_APP_URL\" --token \"$PLAN_RECAP_TOKEN\" || true; fi\n\n      # Screenshot the published plan in headless Chrome and upload the PNG to the\n      # plan app's signed public image route. Best-effort: never fails the job.\n      - name: Screenshot + upload\n        id: shot\n        if: steps.url.outputs.ok == 'true'\n        continue-on-error: true\n        env:\n          # Pass the agent-produced plan URL through the environment, never via\n          # ${{ }} interpolation into the run script: recap-url.txt is untrusted\n          # agent output, so inlining it would be a shell-injection vector.\n          PLAN_URL: ${{ steps.url.outputs.plan_url }}\n        run: |\n          set -uo pipefail\n          pnpm exec playwright install --with-deps chromium 2>/dev/null || npx -y playwright@1 install --with-deps chromium || true\n          SHOT_JSON=\"$($RECAP_CLI recap shot --url \"$PLAN_URL\" --token \"$PLAN_RECAP_TOKEN\" --app-url \"$PLAN_RECAP_APP_URL\" --out recap.png || echo '{}')\"\n          IMAGE_URL=$(node -e 'try{process.stdout.write(JSON.parse(process.argv[1]).imageUrl||\"\")}catch{process.stdout.write(\"\")}' \"$SHOT_JSON\")\n          echo \"image_url=$IMAGE_URL\" >> \"$GITHUB_OUTPUT\"\n          if [ -f recap.png ]; then echo \"captured=true\" >> \"$GITHUB_OUTPUT\"; else echo \"captured=false\" >> \"$GITHUB_OUTPUT\"; fi\n\n      - name: Upload recap screenshot artifact\n        if: steps.shot.outputs.captured == 'true'\n        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2\n        with:\n          name: pr-visual-recap-${{ github.event.pull_request.number }}\n          path: recap.png\n          if-no-files-found: ignore\n          retention-days: 14\n\n      # Upsert the single sticky comment: inline screenshot + link on success,\n      # suppressed / failed / tiny variants otherwise. Runs even on a tiny diff\n      # so a prior recap comment is refreshed (not left pointing at a stale SHA).\n      - name: Upsert sticky comment\n        if: always()\n        # The recap is informational/non-blocking: a failed comment upsert must\n        # not turn the whole job red (the agent + screenshot steps are already\n        # continue-on-error).\n        continue-on-error: true\n        env:\n          PLAN_URL: ${{ steps.url.outputs.plan_url }}\n          RECAP_IMAGE_URL: ${{ steps.shot.outputs.image_url }}\n          SUPPRESSED: ${{ steps.scan.outputs.suppressed }}\n          SUPPRESSED_JSON: ${{ steps.scan.outputs.json }}\n          DIFF_HUGE: ${{ steps.diff.outputs.huge }}\n          DIFF_TINY: ${{ steps.diff.outputs.tiny }}\n        run: |\n          set -euo pipefail\n          ARGS=(recap comment upsert --repo \"$GITHUB_REPOSITORY\" --issue \"$PR_NUMBER\" --token \"$GH_TOKEN\")\n          # On a tiny diff, only REFRESH an existing recap comment \u2014 never create\n          # a new one \u2014 so we add no noise but also can't leave a stale prior\n          # recap behind.\n          if [ \"${DIFF_TINY:-}\" = \"true\" ]; then ARGS+=(--update-only); fi\n          $RECAP_CLI \"${ARGS[@]}\"\n";
 //# sourceMappingURL=pr-visual-recap-workflow.d.ts.map

package/dist/cli/pr-visual-recap-workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pr-visual-recap-workflow.d.ts","sourceRoot":"","sources":["../../src/cli/pr-visual-recap-workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,4BAA4B,knnBAC+7mB,CAAC"}
+{"version":3,"file":"pr-visual-recap-workflow.d.ts","sourceRoot":"","sources":["../../src/cli/pr-visual-recap-workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,4BAA4B,2+wBAC8xwB,CAAC"}

package/dist/cli/pr-visual-recap-workflow.js

@@ -7,5 +7,5 @@
  * recap.spec.ts fails if these drift. Regenerate from the YAML with the snippet
  * in recap.spec.ts.
  */
-export const PR_VISUAL_RECAP_WORKFLOW_YML = 'name: PR Visual Recap\n\n# Turns every PR into a "visual code review" — a reverse plan — by letting a real\n# coding agent RUN THE REPO\'S visual-recap SKILL against the diff. The agent\n# (Claude Code by default, or Codex) reads the skill, reasons over the change,\n# publishes an Agent-Native Plan via the plan MCP tools, and writes the plan URL\n# to recap-url.txt. The workflow then screenshots that plan in headless Chrome,\n# uploads the PNG to the plan app\'s signed public image route, and upserts ONE\n# sticky PR comment with the inline screenshot + the interactive link.\n#\n# Design notes:\n#  - Plain `pull_request` (NOT `pull_request_target`) so fork code can never see\n#    the publish/agent secrets. Fork PRs are a silent no-op.\n#  - The `gate` job is a cheap switch: drafts, forks, bot authors, and the\n#    missing-secret case short-circuit with NO comment and NO compute. Merging\n#    this workflow before the secrets exist is a safe no-op.\n#  - The recap is INFORMATIONAL ONLY. It is not a required check and failures\n#    surface as an explanatory sticky comment, never a red X on unrelated code.\n#  - Backend is selectable with the `VISUAL_RECAP_AGENT` repo variable\n#    (claude | codex; default claude). Model and reasoning depth are tunable with\n#    `VISUAL_RECAP_MODEL` (e.g. gpt-5.5) and `VISUAL_RECAP_REASONING`\n#    (none|minimal|low|medium|high|xhigh; Codex only). The CLI invocation is\n#    auto-detected: local source inside this monorepo, the published\n#    @agent-native/core elsewhere — no repo variable needed.\n#  - Only two secrets are required: PLAN_RECAP_TOKEN (publish) and the chosen\n#    backend\'s API key. PLAN_RECAP_APP_URL defaults to the hosted plan app.\n#  - Nothing here is deterministic: the skill\'s instructions drive the recap.\n\non:\n  # Run on PRs into any base branch — the generated workflow ships to repos whose\n  # default branch may not be `main`. The gate job below still no-ops drafts,\n  # forks, bots, and the missing-secret case, so this stays cheap.\n  pull_request:\n    types: [opened, synchronize, reopened, ready_for_review]\n\npermissions:\n  contents: read\n  issues: write\n  pull-requests: write\n\nconcurrency:\n  group: pr-visual-recap-${{ github.event.pull_request.number }}\n  cancel-in-progress: true\n\nenv:\n  VISUAL_RECAP_AGENT: ${{ vars.VISUAL_RECAP_AGENT || \'claude\' }}\n\njobs:\n  # --------------------------------------------------------------------------\n  # Cheap gate: decide whether to do any work at all. Sets run=false (silent\n  # no-op) for drafts, forks, bot authors, or when the publish secret / the\n  # chosen backend\'s API key is absent.\n  # --------------------------------------------------------------------------\n  gate:\n    name: Gate\n    runs-on: ubuntu-latest\n    outputs:\n      run: ${{ steps.decide.outputs.run }}\n    steps:\n      - id: decide\n        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7\n        env:\n          # Presence-only signals — we never expose the secret VALUES to the gate.\n          # PLAN_RECAP_APP_URL defaults to the hosted app, so only the token is required.\n          HAS_PLAN: ${{ secrets.PLAN_RECAP_TOKEN != \'\' }}\n          HAS_ANTHROPIC: ${{ secrets.ANTHROPIC_API_KEY != \'\' }}\n          HAS_OPENAI: ${{ secrets.OPENAI_API_KEY != \'\' }}\n          AGENT: ${{ env.VISUAL_RECAP_AGENT }}\n        with:\n          script: |\n            const pr = context.payload.pull_request;\n            const reasons = [];\n\n            if (!pr) reasons.push(\'no pull_request payload\');\n            if (pr && pr.draft) reasons.push(\'draft PR\');\n\n            // Fork PRs: head repo differs from this repo. Plain pull_request runs\n            // fork code with NO secrets, so publishing would fail anyway — skip.\n            const headRepo = pr && pr.head && pr.head.repo && pr.head.repo.full_name;\n            if (pr && headRepo && headRepo !== process.env.GITHUB_REPOSITORY) {\n              reasons.push(`fork PR (${headRepo})`);\n            }\n\n            // Skip noisy automated authors.\n            const login = (pr && pr.user && pr.user.login || \'\').toLowerCase();\n            const botAuthors = [\'dependabot[bot]\', \'dependabot\', \'renovate[bot]\', \'renovate\'];\n            if (botAuthors.includes(login)) reasons.push(`bot author (${login})`);\n            if (pr && pr.user && pr.user.type === \'Bot\') reasons.push(\'bot author (type=Bot)\');\n\n            // Publish secret must be configured — otherwise this is a no-op so the\n            // workflow can be merged before secrets exist.\n            if (process.env.HAS_PLAN !== \'true\') reasons.push(\'PLAN_RECAP_TOKEN not configured\');\n\n            // The chosen backend\'s API key must be present.\n            const agent = (process.env.AGENT || \'claude\').toLowerCase();\n            if (agent === \'codex\') {\n              if (process.env.HAS_OPENAI !== \'true\') reasons.push(\'OPENAI_API_KEY not configured (codex backend)\');\n            } else {\n              if (process.env.HAS_ANTHROPIC !== \'true\') reasons.push(\'ANTHROPIC_API_KEY not configured (claude backend)\');\n            }\n\n            const run = reasons.length === 0;\n            core.setOutput(\'run\', run ? \'true\' : \'false\');\n            core.info(run ? `Visual recap will run (${agent}).` : `Visual recap skipped: ${reasons.join(\'; \')}`);\n\n  # --------------------------------------------------------------------------\n  # Recap: collect the diff, let the agent run the skill + publish, screenshot\n  # the result, and upsert the sticky comment.\n  # --------------------------------------------------------------------------\n  recap:\n    name: Generate visual recap\n    needs: gate\n    if: needs.gate.outputs.run == \'true\'\n    runs-on: ubuntu-latest\n    env:\n      PLAN_RECAP_APP_URL: ${{ secrets.PLAN_RECAP_APP_URL || \'https://plan.agent-native.com\' }}\n      PLAN_RECAP_TOKEN: ${{ secrets.PLAN_RECAP_TOKEN }}\n      GH_TOKEN: ${{ github.token }}\n      PR_NUMBER: ${{ github.event.pull_request.number }}\n      HEAD_SHA: ${{ github.event.pull_request.head.sha }}\n      VISUAL_RECAP_MODEL: ${{ vars.VISUAL_RECAP_MODEL }}\n      VISUAL_RECAP_REASONING: ${{ vars.VISUAL_RECAP_REASONING }}\n    steps:\n      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1\n        with:\n          fetch-depth: 0\n\n      # Resolve the CLI invocation once: dogfood local source inside this\n      # monorepo, otherwise the published package. No repo variable needed. The\n      # pnpm setup/install steps below run ONLY for the local-source path, so the\n      # generated workflow works out-of-box in npm/yarn consumer repos (which\n      # have no pnpm-lock.yaml) by falling back to `npx @agent-native/core`.\n      - name: Resolve recap CLI\n        id: cli\n        run: |\n          if [ -f packages/core/src/cli/index.ts ]; then\n            echo "RECAP_CLI=pnpm exec tsx packages/core/src/cli/index.ts" >> "$GITHUB_ENV"\n            echo "local=true" >> "$GITHUB_OUTPUT"\n          else\n            echo "RECAP_CLI=npx -y @agent-native/core@latest" >> "$GITHUB_ENV"\n            echo "local=false" >> "$GITHUB_OUTPUT"\n          fi\n\n      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0\n        if: steps.cli.outputs.local == \'true\'\n\n      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0\n        with:\n          node-version: "22"\n          cache: ${{ steps.cli.outputs.local == \'true\' && \'pnpm\' || \'\' }}\n\n      - name: Install workspace (local source only)\n        if: steps.cli.outputs.local == \'true\'\n        run: pnpm install --frozen-lockfile\n\n      # Collect a BOUNDED diff between the PR base and head. We exclude lockfiles,\n      # build output, and snapshots (noise), and cap the byte size — over the cap\n      # we set `huge=true` so the agent is told to produce a summarized recap.\n      - name: Collect bounded diff\n        id: diff\n        env:\n          BASE_SHA: ${{ github.event.pull_request.base.sha }}\n        run: |\n          set -euo pipefail\n          git diff --no-color "$BASE_SHA"..."$HEAD_SHA" -- \\\n            . \\\n            \':(exclude)pnpm-lock.yaml\' \\\n            \':(exclude)**/dist/**\' \\\n            \':(exclude)**/*.snap\' \\\n            \':(exclude)**/*.lock\' \\\n            > recap.diff || true\n          git diff --stat --no-color "$BASE_SHA"..."$HEAD_SHA" -- \\\n            . \\\n            \':(exclude)pnpm-lock.yaml\' \\\n            \':(exclude)**/dist/**\' \\\n            \':(exclude)**/*.snap\' \\\n            \':(exclude)**/*.lock\' \\\n            > recap.stat || true\n\n          BYTES=$(wc -c < recap.diff | tr -d \' \')\n          CHANGED=$(git diff --name-only "$BASE_SHA"..."$HEAD_SHA" -- \\\n            . \\\n            \':(exclude)pnpm-lock.yaml\' \\\n            \':(exclude)**/dist/**\' \\\n            \':(exclude)**/*.snap\' \\\n            \':(exclude)**/*.lock\' \\\n            | wc -l | tr -d \' \')\n          echo "bytes=$BYTES" >> "$GITHUB_OUTPUT"\n          echo "changed=$CHANGED" >> "$GITHUB_OUTPUT"\n\n          # ~600KB cap.\n          if [ "$BYTES" -gt 614400 ]; then\n            echo "huge=true" >> "$GITHUB_OUTPUT"\n          else\n            echo "huge=false" >> "$GITHUB_OUTPUT"\n          fi\n\n          # Tiny diffs (<= 1 changed file AND <= 8 changed lines) aren\'t worth a\n          # recap — skip generation cleanly.\n          LINES=$(grep -cE \'^[+-]\' recap.diff || true)\n          if [ "$CHANGED" -le 1 ] && [ "${LINES:-0}" -le 8 ]; then\n            echo "tiny=true" >> "$GITHUB_OUTPUT"\n          else\n            echo "tiny=false" >> "$GITHUB_OUTPUT"\n          fi\n\n      # Secret pre-scan: refuse to hand a diff that looks like it leaks\n      # credentials to the agent. Prints { suppressed, reason } and always exits 0.\n      - name: Secret scan\n        id: scan\n        if: steps.diff.outputs.tiny != \'true\'\n        run: |\n          set -uo pipefail\n          SCAN_JSON="$($RECAP_CLI recap scan --diff recap.diff || echo \'{}\')"\n          echo "json=$SCAN_JSON" >> "$GITHUB_OUTPUT"\n          SUPPRESSED=$(node -e \'try{process.stdout.write(JSON.parse(process.argv[1]).suppressed?"true":"false")}catch{process.stdout.write("false")}\' "$SCAN_JSON")\n          echo "suppressed=$SUPPRESSED" >> "$GITHUB_OUTPUT"\n\n      # Find the planId from the previous sticky comment so a re-push REPLACES the\n      # same hosted plan (synchronize updates in place, no orphaned plans).\n      - name: Read previous plan id\n        id: prev\n        continue-on-error: true\n        run: |\n          set -euo pipefail\n          PLAN_ID="$($RECAP_CLI recap comment find-plan-id --repo "$GITHUB_REPOSITORY" --issue "$PR_NUMBER" --token "$GH_TOKEN")"\n          echo "plan_id=$PLAN_ID" >> "$GITHUB_OUTPUT"\n\n      # Build the agent prompt = the repo\'s visual-recap SKILL.md + a task wrapper.\n      - name: Build recap prompt\n        id: prompt\n        if: steps.diff.outputs.tiny != \'true\' && steps.scan.outputs.suppressed != \'true\'\n        run: |\n          set -euo pipefail\n          PREV=""\n          if [ -n "${{ steps.prev.outputs.plan_id }}" ]; then PREV="--prev-plan-id ${{ steps.prev.outputs.plan_id }}"; fi\n          HUGE=""\n          if [ "${{ steps.diff.outputs.huge }}" = "true" ]; then HUGE="--huge"; fi\n          $RECAP_CLI recap build-prompt \\\n            --diff recap.diff --stat recap.stat \\\n            --pr "$PR_NUMBER" --head "$HEAD_SHA" \\\n            --app-url "$PLAN_RECAP_APP_URL" \\\n            --out recap-prompt.md \\\n            $HUGE $PREV\n\n      # Wire the plan MCP server for the chosen backend, then run the agent. The\n      # agent follows the skill, calls create-visual-recap + set-resource-visibility,\n      # and writes the published plan URL to recap-url.txt. continue-on-error so a\n      # failed agent run becomes an explanatory comment, not a red X.\n      - name: Run agent (Claude Code)\n        id: claude\n        if: env.VISUAL_RECAP_AGENT == \'claude\' && steps.diff.outputs.tiny != \'true\' && steps.scan.outputs.suppressed != \'true\'\n        continue-on-error: true\n        env:\n          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}\n        run: |\n          set -uo pipefail\n          MCP_CONFIG="$RUNNER_TEMP/plan-mcp.json"\n          node -e \'const fs=require("fs");fs.writeFileSync(process.argv[1],JSON.stringify({mcpServers:{plan:{type:"http",url:process.env.PLAN_RECAP_APP_URL.replace(/\\/$/,"")+"/_agent-native/mcp",headers:{Authorization:"Bearer "+process.env.PLAN_RECAP_TOKEN}}}}))\' "$MCP_CONFIG"\n          # VISUAL_RECAP_MODEL picks the Claude model; reasoning depth is model-driven\n          # for Claude Code, so VISUAL_RECAP_REASONING only applies to the Codex backend.\n          CLAUDE_ARGS=(-p "$(cat recap-prompt.md)" --mcp-config "$MCP_CONFIG" --allowedTools "Read,Write,Bash(git diff:*),mcp__plan__create-visual-recap,mcp__plan__set-resource-visibility" --permission-mode dontAsk)\n          if [ -n "${VISUAL_RECAP_MODEL:-}" ]; then CLAUDE_ARGS+=(--model "$VISUAL_RECAP_MODEL"); fi\n          npx -y @anthropic-ai/claude-code@2 "${CLAUDE_ARGS[@]}" || true\n          rm -f "$MCP_CONFIG" || true\n\n      - name: Run agent (Codex)\n        id: codex\n        if: env.VISUAL_RECAP_AGENT == \'codex\' && steps.diff.outputs.tiny != \'true\' && steps.scan.outputs.suppressed != \'true\'\n        continue-on-error: true\n        env:\n          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}\n        run: |\n          set -uo pipefail\n          mkdir -p "$HOME/.codex"\n          # JSON.stringify the URL into the TOML value so a stray quote/newline\n          # in PLAN_RECAP_APP_URL can\'t break out of the string (TOML basic\n          # strings share JSON\'s escaping); the key/env name stay literal.\n          node -e \'const fs=require("fs");const url=process.env.PLAN_RECAP_APP_URL.replace(/\\/$/,"")+"/_agent-native/mcp";fs.writeFileSync(process.env.HOME+"/.codex/config.toml","[mcp_servers.plan]\\nurl = "+JSON.stringify(url)+"\\nbearer_token_env_var = \\"PLAN_RECAP_TOKEN\\"\\n")\'\n          # Authenticate with the API key explicitly. Relying on the bare\n          # OPENAI_API_KEY env var alone is unreliable on the gpt-5.5 WebSocket\n          # transport: the Authorization header is dropped on the wss path and\n          # its HTTPS fallback, surfacing as `401 Missing bearer or basic\n          # authentication in header` (openai/codex#15492). `codex login\n          # --with-api-key` reads the key from stdin and writes ~/.codex/auth.json,\n          # which the exec path reads reliably; piping via stdin keeps the key out\n          # of the process args. Non-fatal so a login hiccup still yields the\n          # explanatory recap comment rather than a red X.\n          printenv OPENAI_API_KEY | npx -y @openai/codex@0 login --with-api-key || true\n          # VISUAL_RECAP_MODEL (e.g. gpt-5.5) and VISUAL_RECAP_REASONING\n          # (none|minimal|low|medium|high|xhigh) tune the Codex run.\n          #\n          # The GitHub runner is itself an ephemeral, throwaway sandbox, so run\n          # Codex with sandboxing and approvals disabled. Codex\'s own bubblewrap\n          # sandbox cannot initialize on the runner ("could not find bubblewrap\n          # on PATH"), which makes every shell command fail at startup so the\n          # agent cannot even read recap.diff; and under an approval gate the\n          # write-side plan MCP call (create-visual-recap) is auto-cancelled\n          # ("user cancelled MCP tool call"). --dangerously-bypass-approvals-and-sandbox\n          # is the documented invocation for externally-sandboxed CI and clears both.\n          CODEX_ARGS=(exec --dangerously-bypass-approvals-and-sandbox --skip-git-repo-check)\n          if [ -n "${VISUAL_RECAP_MODEL:-}" ]; then CODEX_ARGS+=(--model "$VISUAL_RECAP_MODEL"); fi\n          # Validate reasoning against the known enum before embedding it in the\n          # codex `-c` TOML override, so an unexpected value can\'t alter the config.\n          case "${VISUAL_RECAP_REASONING:-}" in\n            none|minimal|low|medium|high|xhigh)\n              CODEX_ARGS+=(-c "model_reasoning_effort=\\"$VISUAL_RECAP_REASONING\\"") ;;\n            "") ;;\n            *) echo "Ignoring invalid VISUAL_RECAP_REASONING: $VISUAL_RECAP_REASONING" ;;\n          esac\n          npx -y @openai/codex@0 "${CODEX_ARGS[@]}" "$(cat recap-prompt.md)" || true\n\n      # The agent\'s only hand-off: recap-url.txt with the published plan URL.\n      - name: Read plan URL\n        id: url\n        if: steps.diff.outputs.tiny != \'true\' && steps.scan.outputs.suppressed != \'true\'\n        run: |\n          set -uo pipefail\n          PLAN_URL=""\n          if [ -f recap-url.txt ]; then PLAN_URL="$(tr -d \'\\r\\n\' < recap-url.txt | tr -d \' \')"; fi\n          echo "plan_url=$PLAN_URL" >> "$GITHUB_OUTPUT"\n          if [ -n "$PLAN_URL" ]; then echo "ok=true" >> "$GITHUB_OUTPUT"; else echo "ok=false" >> "$GITHUB_OUTPUT"; fi\n\n      # Screenshot the published plan in headless Chrome and upload the PNG to the\n      # plan app\'s signed public image route. Best-effort: never fails the job.\n      - name: Screenshot + upload\n        id: shot\n        if: steps.url.outputs.ok == \'true\'\n        continue-on-error: true\n        env:\n          # Pass the agent-produced plan URL through the environment, never via\n          # ${{ }} interpolation into the run script: recap-url.txt is untrusted\n          # agent output, so inlining it would be a shell-injection vector.\n          PLAN_URL: ${{ steps.url.outputs.plan_url }}\n        run: |\n          set -uo pipefail\n          pnpm exec playwright install --with-deps chromium 2>/dev/null || npx -y playwright@1 install --with-deps chromium || true\n          SHOT_JSON="$($RECAP_CLI recap shot --url "$PLAN_URL" --token "$PLAN_RECAP_TOKEN" --app-url "$PLAN_RECAP_APP_URL" --out recap.png || echo \'{}\')"\n          IMAGE_URL=$(node -e \'try{process.stdout.write(JSON.parse(process.argv[1]).imageUrl||"")}catch{process.stdout.write("")}\' "$SHOT_JSON")\n          echo "image_url=$IMAGE_URL" >> "$GITHUB_OUTPUT"\n          if [ -f recap.png ]; then echo "captured=true" >> "$GITHUB_OUTPUT"; else echo "captured=false" >> "$GITHUB_OUTPUT"; fi\n\n      - name: Upload recap screenshot artifact\n        if: steps.shot.outputs.captured == \'true\'\n        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2\n        with:\n          name: pr-visual-recap-${{ github.event.pull_request.number }}\n          path: recap.png\n          if-no-files-found: ignore\n          retention-days: 14\n\n      # Upsert the single sticky comment: inline screenshot + link on success,\n      # suppressed / failed / tiny variants otherwise. Runs even on a tiny diff\n      # so a prior recap comment is refreshed (not left pointing at a stale SHA).\n      - name: Upsert sticky comment\n        if: always()\n        env:\n          PLAN_URL: ${{ steps.url.outputs.plan_url }}\n          RECAP_IMAGE_URL: ${{ steps.shot.outputs.image_url }}\n          SUPPRESSED: ${{ steps.scan.outputs.suppressed }}\n          SUPPRESSED_JSON: ${{ steps.scan.outputs.json }}\n          DIFF_HUGE: ${{ steps.diff.outputs.huge }}\n          DIFF_TINY: ${{ steps.diff.outputs.tiny }}\n        run: |\n          set -euo pipefail\n          ARGS=(recap comment upsert --repo "$GITHUB_REPOSITORY" --issue "$PR_NUMBER" --token "$GH_TOKEN")\n          # On a tiny diff only REFRESH an existing recap comment — never create a\n          # new one — so a tiny push doesn\'t add noise but also can\'t leave a\n          # stale prior recap behind.\n          if [ "${DIFF_TINY:-}" = "true" ]; then ARGS+=(--update-only); fi\n          $RECAP_CLI "${ARGS[@]}"\n';
+export const PR_VISUAL_RECAP_WORKFLOW_YML = 'name: PR Visual Recap\n\n# Turns every PR into a "visual code review" — a reverse plan — by letting a real\n# coding agent RUN THE REPO\'S visual-recap SKILL against the diff. The agent\n# (Claude Code by default, or Codex) reads the skill, reasons over the change,\n# publishes an Agent-Native Plan via the plan MCP tools, and writes the plan URL\n# to recap-url.txt. The workflow then screenshots that plan in headless Chrome,\n# uploads the PNG to the plan app\'s signed public image route, and upserts ONE\n# sticky PR comment with the inline screenshot + the interactive link.\n#\n# Design notes:\n#  - Plain `pull_request` (NOT `pull_request_target`) so fork code can never see\n#    the publish/agent secrets. Fork PRs are a silent no-op.\n#  - The `gate` job is a cheap switch: drafts, forks, bot authors, and the\n#    missing-secret case short-circuit with NO comment and NO compute. Merging\n#    this workflow before the secrets exist is a safe no-op.\n#  - The recap is INFORMATIONAL ONLY. It is not a required check and failures\n#    surface as an explanatory sticky comment, never a red X on unrelated code.\n#  - Backend is selectable with the `VISUAL_RECAP_AGENT` repo variable\n#    (claude | codex; default claude). Model and reasoning depth are tunable with\n#    `VISUAL_RECAP_MODEL` (e.g. gpt-5.5) and `VISUAL_RECAP_REASONING`\n#    (none|minimal|low|medium|high|xhigh; Codex only). The CLI invocation is\n#    auto-detected: local source inside this monorepo, the published\n#    @agent-native/core elsewhere — no repo variable needed.\n#  - Only two secrets are required: PLAN_RECAP_TOKEN (publish) and the chosen\n#    backend\'s API key. PLAN_RECAP_APP_URL defaults to the hosted plan app.\n#  - Nothing here is deterministic: the skill\'s instructions drive the recap.\n\non:\n  # Run on PRs into any base branch — the generated workflow ships to repos whose\n  # default branch may not be `main`. The gate job below still no-ops drafts,\n  # forks, bots, and the missing-secret case, so this stays cheap.\n  pull_request:\n    types: [opened, synchronize, reopened, ready_for_review]\n\npermissions:\n  contents: read\n  issues: write\n  pull-requests: write\n\nconcurrency:\n  group: pr-visual-recap-${{ github.event.pull_request.number }}\n  cancel-in-progress: true\n\nenv:\n  VISUAL_RECAP_AGENT: ${{ vars.VISUAL_RECAP_AGENT || \'claude\' }}\n\njobs:\n  # --------------------------------------------------------------------------\n  # Cheap gate: decide whether to do any work at all. Sets run=false (silent\n  # no-op) for drafts, forks, bot authors, or when the publish secret / the\n  # chosen backend\'s API key is absent.\n  # --------------------------------------------------------------------------\n  gate:\n    name: Gate\n    runs-on: ubuntu-latest\n    outputs:\n      run: ${{ steps.decide.outputs.run }}\n      agent: ${{ steps.decide.outputs.agent }}\n    steps:\n      - id: decide\n        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7\n        env:\n          # Presence-only signals — we never expose the secret VALUES to the gate.\n          # PLAN_RECAP_APP_URL defaults to the hosted app, so only the token is required.\n          HAS_PLAN: ${{ secrets.PLAN_RECAP_TOKEN != \'\' }}\n          HAS_ANTHROPIC: ${{ secrets.ANTHROPIC_API_KEY != \'\' }}\n          HAS_OPENAI: ${{ secrets.OPENAI_API_KEY != \'\' }}\n          AGENT: ${{ env.VISUAL_RECAP_AGENT }}\n        with:\n          script: |\n            const pr = context.payload.pull_request;\n            const reasons = [];\n\n            if (!pr) reasons.push(\'no pull_request payload\');\n            if (pr && pr.draft) reasons.push(\'draft PR\');\n\n            // Fork PRs: head repo differs from this repo. Plain pull_request runs\n            // fork code with NO secrets, so publishing would fail anyway — skip.\n            const headRepo = pr && pr.head && pr.head.repo && pr.head.repo.full_name;\n            if (pr && headRepo && headRepo !== process.env.GITHUB_REPOSITORY) {\n              reasons.push(`fork PR (${headRepo})`);\n            }\n\n            // Skip noisy automated authors.\n            const login = (pr && pr.user && pr.user.login || \'\').toLowerCase();\n            const botAuthors = [\'dependabot[bot]\', \'dependabot\', \'renovate[bot]\', \'renovate\'];\n            if (botAuthors.includes(login)) reasons.push(`bot author (${login})`);\n            if (pr && pr.user && pr.user.type === \'Bot\') reasons.push(\'bot author (type=Bot)\');\n\n            // Publish secret must be configured — otherwise this is a no-op so the\n            // workflow can be merged before secrets exist.\n            if (process.env.HAS_PLAN !== \'true\') reasons.push(\'PLAN_RECAP_TOKEN not configured\');\n\n            // The chosen backend\'s API key must be present. Normalize the agent\n            // value once here and validate it: an unknown or mis-cased value\n            // (e.g. "Claude", "gpt") must NOT silently pass the gate and then\n            // match neither agent step below.\n            const agent = (process.env.AGENT || \'claude\').toLowerCase();\n            if (agent !== \'claude\' && agent !== \'codex\') {\n              reasons.push(`unsupported VISUAL_RECAP_AGENT "${process.env.AGENT}" (expected "claude" or "codex")`);\n            } else if (agent === \'codex\') {\n              if (process.env.HAS_OPENAI !== \'true\') reasons.push(\'OPENAI_API_KEY not configured (codex backend)\');\n            } else {\n              if (process.env.HAS_ANTHROPIC !== \'true\') reasons.push(\'ANTHROPIC_API_KEY not configured (claude backend)\');\n            }\n\n            // Self-modifying guard, evaluated in the GATE (trusted github-script\n            // that runs NO PR-checked-out code): if this PR changes the workflow,\n            // the visual-recap/visual-plan skill, the local CLI (packages/core),\n            // or any agent config the runner would load (.claude/**, CLAUDE.md,\n            // .mcp.json), skip the ENTIRE job — not just the agent — so a PR can\n            // never rewrite what runs (skill, hooks, settings, CLI) and exfiltrate\n            // the publish/API secrets.\n            if (pr) {\n              try {\n                const files = await github.paginate(github.rest.pulls.listFiles, {\n                  owner: context.repo.owner,\n                  repo: context.repo.repo,\n                  pull_number: pr.number,\n                  per_page: 100,\n                });\n                const isSensitive = (p) =>\n                  p === \'.github/workflows/pr-visual-recap.yml\' ||\n                  /(^|\\/)skills\\/visual-(recap|plan|plans)\\//.test(p) ||\n                  /(^|\\/)\\.claude\\//.test(p) ||\n                  /(^|\\/)CLAUDE\\.md$/.test(p) ||\n                  /(^|\\/)AGENTS\\.md$/.test(p) ||\n                  /(^|\\/)\\.mcp\\.json$/.test(p) ||\n                  /(^|\\/)packages\\/core\\//.test(p);\n                const hits = files.map((f) => f.filename).filter(isSensitive);\n                if (hits.length) {\n                  reasons.push(`PR modifies recap-control files (${hits.slice(0, 3).join(\', \')}${hits.length > 3 ? \', …\' : \'\'}) — skipping so untrusted PR code never runs with secrets`);\n                }\n              } catch (e) {\n                reasons.push(`could not list PR files for the self-modifying guard (${e.message}); skipping to be safe`);\n              }\n            }\n\n            const run = reasons.length === 0;\n            core.setOutput(\'run\', run ? \'true\' : \'false\');\n            // Export the NORMALIZED agent so the recap job\'s step conditions match\n            // case-insensitively via needs.gate.outputs.agent.\n            core.setOutput(\'agent\', agent);\n            core.info(run ? `Visual recap will run (${agent}).` : `Visual recap skipped: ${reasons.join(\'; \')}`);\n\n  # --------------------------------------------------------------------------\n  # Recap: collect the diff, let the agent run the skill + publish, screenshot\n  # the result, and upsert the sticky comment.\n  # --------------------------------------------------------------------------\n  recap:\n    name: Generate visual recap\n    needs: gate\n    if: needs.gate.outputs.run == \'true\'\n    runs-on: ubuntu-latest\n    env:\n      PLAN_RECAP_APP_URL: ${{ secrets.PLAN_RECAP_APP_URL || \'https://plan.agent-native.com\' }}\n      PLAN_RECAP_TOKEN: ${{ secrets.PLAN_RECAP_TOKEN }}\n      GH_TOKEN: ${{ github.token }}\n      PR_NUMBER: ${{ github.event.pull_request.number }}\n      HEAD_SHA: ${{ github.event.pull_request.head.sha }}\n      VISUAL_RECAP_MODEL: ${{ vars.VISUAL_RECAP_MODEL }}\n      VISUAL_RECAP_REASONING: ${{ vars.VISUAL_RECAP_REASONING }}\n    steps:\n      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1\n        with:\n          fetch-depth: 0\n\n      # Resolve the CLI invocation once: dogfood local source inside this\n      # monorepo, otherwise the published package. No repo variable needed. The\n      # pnpm setup/install steps below run ONLY for the local-source path, so the\n      # generated workflow works out-of-box in npm/yarn consumer repos (which\n      # have no pnpm-lock.yaml) by falling back to `npx @agent-native/core`.\n      - name: Resolve recap CLI\n        id: cli\n        run: |\n          if [ -f packages/core/src/cli/index.ts ]; then\n            echo "RECAP_CLI=pnpm exec tsx packages/core/src/cli/index.ts" >> "$GITHUB_ENV"\n            echo "local=true" >> "$GITHUB_OUTPUT"\n          else\n            echo "RECAP_CLI=npx -y @agent-native/core@latest" >> "$GITHUB_ENV"\n            echo "local=false" >> "$GITHUB_OUTPUT"\n          fi\n\n      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0\n        if: steps.cli.outputs.local == \'true\'\n\n      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0\n        with:\n          node-version: "22"\n          cache: ${{ steps.cli.outputs.local == \'true\' && \'pnpm\' || \'\' }}\n\n      - name: Install workspace (local source only)\n        if: steps.cli.outputs.local == \'true\'\n        run: pnpm install --frozen-lockfile --ignore-scripts\n\n      # Collect a BOUNDED diff between the PR base and head. We exclude lockfiles,\n      # build output, and snapshots (noise), and cap the byte size — over the cap\n      # we set `huge=true` so the agent is told to produce a summarized recap.\n      - name: Collect bounded diff\n        id: diff\n        env:\n          BASE_SHA: ${{ github.event.pull_request.base.sha }}\n        run: |\n          set -euo pipefail\n          git diff --no-color "$BASE_SHA"..."$HEAD_SHA" -- \\\n            . \\\n            \':(exclude)pnpm-lock.yaml\' \\\n            \':(exclude)**/dist/**\' \\\n            \':(exclude)**/*.snap\' \\\n            \':(exclude)**/*.lock\' \\\n            > recap.diff || true\n          git diff --stat --no-color "$BASE_SHA"..."$HEAD_SHA" -- \\\n            . \\\n            \':(exclude)pnpm-lock.yaml\' \\\n            \':(exclude)**/dist/**\' \\\n            \':(exclude)**/*.snap\' \\\n            \':(exclude)**/*.lock\' \\\n            > recap.stat || true\n\n          BYTES=$(wc -c < recap.diff | tr -d \' \')\n          CHANGED=$(git diff --name-only "$BASE_SHA"..."$HEAD_SHA" -- \\\n            . \\\n            \':(exclude)pnpm-lock.yaml\' \\\n            \':(exclude)**/dist/**\' \\\n            \':(exclude)**/*.snap\' \\\n            \':(exclude)**/*.lock\' \\\n            | wc -l | tr -d \' \')\n          echo "bytes=$BYTES" >> "$GITHUB_OUTPUT"\n          echo "changed=$CHANGED" >> "$GITHUB_OUTPUT"\n\n          # ~600KB cap. Over the cap we both flag `huge` (so the agent is told to\n          # summarize) AND physically truncate recap.diff, so an oversized diff\n          # cannot overflow the agent\'s prompt budget when it reads the file.\n          # Truncate at a COMPLETE LINE boundary (`sed \'$d\'` drops the last,\n          # possibly-partial, line) so the byte cap can never cut a multi-byte\n          # UTF-8 char or a diff line mid-way and corrupt the agent\'s input.\n          if [ "$BYTES" -gt 614400 ]; then\n            echo "huge=true" >> "$GITHUB_OUTPUT"\n            head -c 614400 recap.diff | sed \'$d\' > recap.diff.capped && mv recap.diff.capped recap.diff\n            printf \'\\n\\n[diff truncated at 600KB for the recap agent]\\n\' >> recap.diff\n          else\n            echo "huge=false" >> "$GITHUB_OUTPUT"\n          fi\n\n          # Tiny diffs (<= 1 changed file AND <= 8 changed lines) aren\'t worth a\n          # recap — skip generation cleanly.\n          LINES=$(grep -cE \'^[+-]\' recap.diff || true)\n          if [ "$CHANGED" -le 1 ] && [ "${LINES:-0}" -le 8 ]; then\n            echo "tiny=true" >> "$GITHUB_OUTPUT"\n          else\n            echo "tiny=false" >> "$GITHUB_OUTPUT"\n          fi\n\n      # Secret pre-scan: refuse to hand a diff that looks like it leaks\n      # credentials to the agent. Prints { suppressed, reason } and always exits 0.\n      - name: Secret scan\n        id: scan\n        if: steps.diff.outputs.tiny != \'true\'\n        run: |\n          set -uo pipefail\n          # Fail CLOSED: if the scanner errors or emits invalid JSON, treat the\n          # diff as suppressed, so a scan failure can never hand a possibly\n          # credential-bearing diff to the agent / plan service.\n          if ! SCAN_JSON="$($RECAP_CLI recap scan --diff recap.diff)"; then\n            SCAN_JSON=\'{"suppressed":true,"reason":"secret scan failed to run; failing closed"}\'\n          fi\n          # Multi-line-safe write: SCAN_JSON could contain newlines, which would\n          # otherwise corrupt $GITHUB_OUTPUT or inject extra keys.\n          {\n            echo \'json<<__RECAP_SCAN_EOF__\'\n            echo "$SCAN_JSON"\n            echo \'__RECAP_SCAN_EOF__\'\n          } >> "$GITHUB_OUTPUT"\n          SUPPRESSED=$(node -e \'try{process.stdout.write(JSON.parse(process.argv[1]).suppressed?"true":"false")}catch{process.stdout.write("true")}\' "$SCAN_JSON")\n          echo "suppressed=$SUPPRESSED" >> "$GITHUB_OUTPUT"\n\n      # Find the planId from the previous sticky comment so a re-push REPLACES the\n      # same hosted plan (synchronize updates in place, no orphaned plans).\n      - name: Read previous plan id\n        id: prev\n        continue-on-error: true\n        run: |\n          set -euo pipefail\n          PLAN_ID="$($RECAP_CLI recap comment find-plan-id --repo "$GITHUB_REPOSITORY" --issue "$PR_NUMBER" --token "$GH_TOKEN")"\n          echo "plan_id=$PLAN_ID" >> "$GITHUB_OUTPUT"\n\n      # Build the agent prompt = the repo\'s visual-recap SKILL.md + a task wrapper.\n      - name: Build recap prompt\n        id: prompt\n        if: steps.diff.outputs.tiny != \'true\' && steps.scan.outputs.suppressed != \'true\'\n        run: |\n          set -euo pipefail\n          PREV=""\n          if [ -n "${{ steps.prev.outputs.plan_id }}" ]; then PREV="--prev-plan-id ${{ steps.prev.outputs.plan_id }}"; fi\n          HUGE=""\n          if [ "${{ steps.diff.outputs.huge }}" = "true" ]; then HUGE="--huge"; fi\n          $RECAP_CLI recap build-prompt \\\n            --diff recap.diff --stat recap.stat \\\n            --pr "$PR_NUMBER" --head "$HEAD_SHA" \\\n            --app-url "$PLAN_RECAP_APP_URL" \\\n            --out recap-prompt.md \\\n            $HUGE $PREV\n\n      # Wire the plan MCP server for the chosen backend, then run the agent. The\n      # agent follows the skill, calls create-visual-recap + set-resource-visibility,\n      # and writes the published plan URL to recap-url.txt. continue-on-error so a\n      # failed agent run becomes an explanatory comment, not a red X.\n      - name: Run agent (Claude Code)\n        id: claude\n        if: needs.gate.outputs.agent == \'claude\' && steps.diff.outputs.tiny != \'true\' && steps.scan.outputs.suppressed != \'true\'\n        continue-on-error: true\n        env:\n          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}\n        run: |\n          set -uo pipefail\n          MCP_CONFIG="$RUNNER_TEMP/plan-mcp.json"\n          node -e \'const fs=require("fs");fs.writeFileSync(process.argv[1],JSON.stringify({mcpServers:{plan:{type:"http",url:process.env.PLAN_RECAP_APP_URL.replace(/\\/$/,"")+"/_agent-native/mcp",headers:{Authorization:"Bearer "+process.env.PLAN_RECAP_TOKEN}}}}))\' "$MCP_CONFIG"\n          # VISUAL_RECAP_MODEL picks the Claude model; reasoning depth is model-driven\n          # for Claude Code, so VISUAL_RECAP_REASONING only applies to the Codex backend.\n          CLAUDE_ARGS=(-p "$(cat recap-prompt.md)" --mcp-config "$MCP_CONFIG" --allowedTools "Read,Write,Bash(git diff:*),mcp__plan__create-visual-recap,mcp__plan__set-resource-visibility" --permission-mode dontAsk --output-format json)\n          if [ -n "${VISUAL_RECAP_MODEL:-}" ]; then CLAUDE_ARGS+=(--model "$VISUAL_RECAP_MODEL"); fi\n          # Capture the final JSON result (usage + total_cost_usd) for the usage step.\n          npx -y @anthropic-ai/claude-code@2 "${CLAUDE_ARGS[@]}" > claude-result.json || true\n          rm -f "$MCP_CONFIG" || true\n\n      - name: Run agent (Codex)\n        id: codex\n        if: needs.gate.outputs.agent == \'codex\' && steps.diff.outputs.tiny != \'true\' && steps.scan.outputs.suppressed != \'true\'\n        continue-on-error: true\n        env:\n          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}\n        run: |\n          set -uo pipefail\n          mkdir -p "$HOME/.codex"\n          # JSON.stringify the URL into the TOML value so a stray quote/newline\n          # in PLAN_RECAP_APP_URL can\'t break out of the string (TOML basic\n          # strings share JSON\'s escaping); the key/env name stay literal.\n          node -e \'const fs=require("fs");const url=process.env.PLAN_RECAP_APP_URL.replace(/\\/$/,"")+"/_agent-native/mcp";fs.writeFileSync(process.env.HOME+"/.codex/config.toml","[mcp_servers.plan]\\nurl = "+JSON.stringify(url)+"\\nbearer_token_env_var = \\"PLAN_RECAP_TOKEN\\"\\n")\'\n          # Authenticate with the API key explicitly. Relying on the bare\n          # OPENAI_API_KEY env var alone is unreliable on the gpt-5.5 WebSocket\n          # transport: the Authorization header is dropped on the wss path and\n          # its HTTPS fallback, surfacing as `401 Missing bearer or basic\n          # authentication in header` (openai/codex#15492). `codex login\n          # --with-api-key` reads the key from stdin and writes ~/.codex/auth.json,\n          # which the exec path reads reliably; piping via stdin keeps the key out\n          # of the process args. Non-fatal so a login hiccup still yields the\n          # explanatory recap comment rather than a red X.\n          printenv OPENAI_API_KEY | npx -y @openai/codex@0 login --with-api-key || true\n          # VISUAL_RECAP_MODEL (e.g. gpt-5.5) and VISUAL_RECAP_REASONING\n          # (none|minimal|low|medium|high|xhigh) tune the Codex run.\n          #\n          # The GitHub runner is itself an ephemeral, throwaway sandbox, so run\n          # Codex with sandboxing and approvals disabled. Codex\'s own bubblewrap\n          # sandbox cannot initialize on the runner ("could not find bubblewrap\n          # on PATH"), which makes every shell command fail at startup so the\n          # agent cannot even read recap.diff; and under an approval gate the\n          # write-side plan MCP call (create-visual-recap) is auto-cancelled\n          # ("user cancelled MCP tool call"). --dangerously-bypass-approvals-and-sandbox\n          # is the documented invocation for externally-sandboxed CI and clears both.\n          CODEX_ARGS=(exec --dangerously-bypass-approvals-and-sandbox --skip-git-repo-check)\n          if [ -n "${VISUAL_RECAP_MODEL:-}" ]; then CODEX_ARGS+=(--model "$VISUAL_RECAP_MODEL"); fi\n          # Validate reasoning against the known enum before embedding it in the\n          # codex `-c` TOML override, so an unexpected value can\'t alter the config.\n          case "${VISUAL_RECAP_REASONING:-}" in\n            none|minimal|low|medium|high|xhigh)\n              CODEX_ARGS+=(-c "model_reasoning_effort=\\"$VISUAL_RECAP_REASONING\\"") ;;\n            "") ;;\n            *) echo "Ignoring invalid VISUAL_RECAP_REASONING: $VISUAL_RECAP_REASONING" ;;\n          esac\n          npx -y @openai/codex@0 "${CODEX_ARGS[@]}" --json "$(cat recap-prompt.md)" | tee codex-events.jsonl || true\n\n      # The agent\'s only hand-off: recap-url.txt with the published plan URL.\n      - name: Read plan URL\n        id: url\n        if: steps.diff.outputs.tiny != \'true\' && steps.scan.outputs.suppressed != \'true\'\n        run: |\n          set -uo pipefail\n          PLAN_URL=""\n          if [ -f recap-url.txt ]; then PLAN_URL="$(tr -d \'\\r\\n\' < recap-url.txt | tr -d \' \')"; fi\n          echo "plan_url=$PLAN_URL" >> "$GITHUB_OUTPUT"\n          if [ -n "$PLAN_URL" ]; then echo "ok=true" >> "$GITHUB_OUTPUT"; else echo "ok=false" >> "$GITHUB_OUTPUT"; fi\n\n      # Capture the agent run token usage and attach it to the published recap\n      # so the recap row carries input/output/cached tokens, the model, and a\n      # cost estimate. Informational and best-effort: never fails the job.\n      - name: Attach usage\n        if: steps.url.outputs.ok == \'true\'\n        continue-on-error: true\n        env:\n          PLAN_URL: ${{ steps.url.outputs.plan_url }}\n        run: |\n          set -uo pipefail\n          RESULT=claude-result.json\n          if [ "$VISUAL_RECAP_AGENT" = "codex" ]; then RESULT=codex-events.jsonl; fi\n          if [ -f "$RESULT" ]; then $RECAP_CLI recap usage --plan-url "$PLAN_URL" --agent "$VISUAL_RECAP_AGENT" --result-file "$RESULT" --model "${VISUAL_RECAP_MODEL:-}" --app-url "$PLAN_RECAP_APP_URL" --token "$PLAN_RECAP_TOKEN" || true; fi\n\n      # Screenshot the published plan in headless Chrome and upload the PNG to the\n      # plan app\'s signed public image route. Best-effort: never fails the job.\n      - name: Screenshot + upload\n        id: shot\n        if: steps.url.outputs.ok == \'true\'\n        continue-on-error: true\n        env:\n          # Pass the agent-produced plan URL through the environment, never via\n          # ${{ }} interpolation into the run script: recap-url.txt is untrusted\n          # agent output, so inlining it would be a shell-injection vector.\n          PLAN_URL: ${{ steps.url.outputs.plan_url }}\n        run: |\n          set -uo pipefail\n          pnpm exec playwright install --with-deps chromium 2>/dev/null || npx -y playwright@1 install --with-deps chromium || true\n          SHOT_JSON="$($RECAP_CLI recap shot --url "$PLAN_URL" --token "$PLAN_RECAP_TOKEN" --app-url "$PLAN_RECAP_APP_URL" --out recap.png || echo \'{}\')"\n          IMAGE_URL=$(node -e \'try{process.stdout.write(JSON.parse(process.argv[1]).imageUrl||"")}catch{process.stdout.write("")}\' "$SHOT_JSON")\n          echo "image_url=$IMAGE_URL" >> "$GITHUB_OUTPUT"\n          if [ -f recap.png ]; then echo "captured=true" >> "$GITHUB_OUTPUT"; else echo "captured=false" >> "$GITHUB_OUTPUT"; fi\n\n      - name: Upload recap screenshot artifact\n        if: steps.shot.outputs.captured == \'true\'\n        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2\n        with:\n          name: pr-visual-recap-${{ github.event.pull_request.number }}\n          path: recap.png\n          if-no-files-found: ignore\n          retention-days: 14\n\n      # Upsert the single sticky comment: inline screenshot + link on success,\n      # suppressed / failed / tiny variants otherwise. Runs even on a tiny diff\n      # so a prior recap comment is refreshed (not left pointing at a stale SHA).\n      - name: Upsert sticky comment\n        if: always()\n        # The recap is informational/non-blocking: a failed comment upsert must\n        # not turn the whole job red (the agent + screenshot steps are already\n        # continue-on-error).\n        continue-on-error: true\n        env:\n          PLAN_URL: ${{ steps.url.outputs.plan_url }}\n          RECAP_IMAGE_URL: ${{ steps.shot.outputs.image_url }}\n          SUPPRESSED: ${{ steps.scan.outputs.suppressed }}\n          SUPPRESSED_JSON: ${{ steps.scan.outputs.json }}\n          DIFF_HUGE: ${{ steps.diff.outputs.huge }}\n          DIFF_TINY: ${{ steps.diff.outputs.tiny }}\n        run: |\n          set -euo pipefail\n          ARGS=(recap comment upsert --repo "$GITHUB_REPOSITORY" --issue "$PR_NUMBER" --token "$GH_TOKEN")\n          # On a tiny diff, only REFRESH an existing recap comment — never create\n          # a new one — so we add no noise but also can\'t leave a stale prior\n          # recap behind.\n          if [ "${DIFF_TINY:-}" = "true" ]; then ARGS+=(--update-only); fi\n          $RECAP_CLI "${ARGS[@]}"\n';
 //# sourceMappingURL=pr-visual-recap-workflow.js.map