@agent-native/core 0.77.8 → 0.77.10

package/dist/resources/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/resources/store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACL,SAAS,EACT,UAAU,EACV,OAAO,EACP,cAAc,GAEf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,gCAAgC,EAChC,4BAA4B,EAC5B,0BAA0B,EAC1B,gCAAgC,EAChC,2BAA2B,EAC3B,gCAAgC,EAChC,0BAA0B,EAC1B,2BAA2B,GAG5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEtE,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;AAE/C,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;AACjC,CAAC;AAgFD,IAAI,YAAuC,CAAC;AAC5C,IAAI,qBAAqB,GAAG,CAAC,CAAC;AAE9B,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,2BAA2B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,oBAAoB,GACxB,2HAA2H,CAAC;AAC9H,MAAM,qCAAqC,GAAG,8BAA8B,CAAC;AAC7E,MAAM,2CAA2C,GAC/C,6BAA6B,CAAC;AAChC,MAAM,CAAC,MAAM,wCAAwC,GACnD,0BAA0B,CAAC;AAE7B,MAAM,2BAA2B,GAAG;;;;;;;;;;;CAWnC,CAAC;AAEF,MAAM,6BAA6B,GAAG;;;;;;;;;CASrC,CAAC;AAEF,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiC9B,CAAC;AAEF,MAAM,6BAA6B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCrC,CAAC;AAEF,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDhC,CAAC;AAEF,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;CAmBlC,CAAC;AAEF,KAAK,UAAU,0BAA0B,CAAC,EACxC,MAAM,EACN,KAAK,EACL,QAAQ,EACR,MAAM,EACN,cAAc,GAOf;IACC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,gEAAgE;YACrE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAEhB,CAAC;QACd,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,cAAc;YAAE,OAAO;QAEnD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACvC,GAAG,EAAE,uDAAuD;YAC5D,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO;QAEhD,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE,4DAA4D;YACjE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAY;IAC1C,MAAM,IAAI,GAAI,GAAyB,EAAE,IAAI,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC;SACnE,WAAW,EAAE;SACb,IAAI,EAAE,CAAC;IACV,OAAO,CACL,IAAI,KAAK,OAAO;QAChB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACpC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,MAAc,EACd,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,oCAAoC,UAAU,EAAE,CAAC,CACjE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM;QAChE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAChB,OAAyC,EACzC,GAAM;IAEN,OAAO,CACL,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,CAAC;QACxD,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAmD;IAEnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA6B;IACrD,OAAO,OAAO,EAAE,mBAAmB,KAAK,IAAI;QAC1C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,4DAA4D,CAAC;AACnE,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAwB;IACrD,OAAO,CACL,uBAAuB,CAAC,QAAQ,CAAC;QACjC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;QAClE,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7C,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9C,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACrD,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAmC;IAIxE,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,mBAAmB,EAAE,IAAI,IAAI,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,IAAI,IAAI,CAAC;IAC1D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC;AACvE,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAkB;IACtD,OAAO,GAAG,qCAAqC,GAAG,UAAU,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,2BAA2B,CAAC,EAAU;IAC7C,OAAO,EAAE,CAAC,UAAU,CAAC,qCAAqC,CAAC;QACzD,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,qCAAqC,CAAC,MAAM,CAAC;QACxD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,6BAA6B,CAAC,GAAQ;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO;QACL,EAAE,EAAE,4BAA4B,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI;QACJ,KAAK,EAAE,eAAe;QACtB,OAAO;QACP,QAAQ,EAAE,yBAAyB,CAAC,IAAI,CAAC;QACzC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;QACxC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;YACvB,MAAM,EAAE,2CAA2C;YACnD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;YACpC,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;YACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;SAChD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,8BAA8B,CACrC,QAAoC;IAEpC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,MAAM,EAAE,wCAAwC;QAChD,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gCAAgC,CACvC,QAAoC;IAEpC,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,SAAS;QACxB,SAAS,EAAE,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,8BAA8B,CAAC,QAAQ,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,QAAoC;IAEpC,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,SAAS;QACxB,SAAS,EAAE,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,8BAA8B,CAAC,QAAQ,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,EAAU;IAEV,MAAM,YAAY,GAAG,gCAAgC,CAAC,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,CAAC,CAAC,gCAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,YAAoB;IAEpB,IAAI,CAAC,gCAAgC,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,CAAC,CAAC,gCAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,UAAmB;IAEnB,MAAM,SAAS,GAAG,CAAC,MAAM,2BAA2B,EAAE,CAAC,CAAC,GAAG,CACzD,4BAA4B,CAC7B,CAAC;IACF,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,YAAoB;IAEpB,OAAO,CACL,gCAAgC,CAAC,YAAY,CAAC;QAC9C,CAAC,MAAM,gCAAgC,EAAE,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oCAAoC,CAAC,YAAoB;IACtE,OAAO,CACL,CAAC,MAAM,gCAAgC,EAAE,CAAC;QAC1C,gCAAgC,CAAC,YAAY,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mCAAmC,CAAC,YAAoB;IACrE,IACE,CAAC,MAAM,gCAAgC,EAAE,CAAC;QAC1C,CAAC,gCAAgC,CAAC,YAAY,CAAC,EAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4HAA4H,CAC7H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC;AAEtC,SAAS,kBAAkB,CACzB,OAAuB,EACvB,SAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC5B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,kCAAkC,CAAC,KAOjD;IACC,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhD,MAAM,UAAU,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;IACtE,MAAM,IAAI,GAAc,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEtD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,UAAU,CAAC,IAAI,CACb,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;;;;;;;;;;;cAcK,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;KAEjC;QACD,IAAI;KACL,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAKxC;IACC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,kCAAkC,CAAC,KAAK,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,EAAU,EACV,OAAmC;IAEnC,MAAM,UAAU,GAAG,2BAA2B,CAAC,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,kCAAkC,CAAC;YACpD,UAAU;YACV,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,IAAY,EACZ,OAAmC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,kCAAkC,CAAC;YACpD,IAAI;YACJ,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mCAAmC,CAChD,MAAc;IAEd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,qBAAqB,GAAG,2BAA2B;QAAE,OAAO;IACtE,qBAAqB,GAAG,GAAG,CAAC;IAC5B,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,2FAA2F;QAChG,IAAI,EAAE,CAAC,eAAe,EAAE,GAAG,CAAC;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC5C,sEAAsE;YACtE,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC;;;;;;;eAOJ,OAAO,EAAE;qBACH,OAAO,EAAE;qBACT,OAAO,EAAE;;;;;qBAKT,OAAO,EAAE;;;;KAIzB,CAAC,CACH,CAAC;IAEF,MAAM,oBAAoB,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC;IAC9E,MAAM,oBAAoB,CACxB,MAAM,EACN,8CAA8C,CAC/C,CAAC;IACF,MAAM,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACrD,MAAM,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,oBAAoB,CAAC,MAAM,EAAE,cAAc,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,oBAAoB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAEpD,mEAAmE;IACnE,uEAAuE;IACvE,oCAAoC;IACpC,MAAM,uBAAuB,CAAC,WAAW,EAAE;QACzC,YAAY;QACZ,YAAY;QACZ,YAAY;KACb,CAAC,CAAC;IAEH,gGAAgG;IAChG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,UAAU,EAAE;QAC1B,CAAC,CAAC,gKAAgK;QAClK,CAAC,CAAC,qIAAqI,CAAC;IAE1I,wCAAwC;IACxC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;IACvE,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,WAAW;YACX,YAAY;YACZ,wBAAwB;YACxB,eAAe;YACf,UAAU;YACV,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,uEAAuE;IACvE,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,cAAc;YACd,YAAY;YACZ,2BAA2B;YAC3B,eAAe;YACf,aAAa;YACb,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,MAAM,0BAA0B,CAAC;QAC/B,MAAM;QACN,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,wBAAwB;QAClC,MAAM,EAAE,8BAA8B;QACtC,cAAc,EAAE,6BAA6B;KAC9C,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CACvC,6BAA6B,EAC7B,MAAM,CACP,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,8BAA8B;YAC9B,YAAY;YACZ,6BAA6B;YAC7B,eAAe;YACf,eAAe;YACf,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,yDAAyD;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,GACpD,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC/C,KAAK,gBAAgB,CAAC,CAAC,4CAA4C;QACnE,MAAM,QAAQ,GAAG,0BAA0B,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAC9B;gBACE,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,cAAc;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,EACD,IAAI,EACJ,CAAC,CACF,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,OAAO,CAAC;gBACnB,GAAG,EAAE,OAAO;gBACZ,IAAI,EAAE;oBACJ,MAAM,CAAC,UAAU,EAAE;oBACnB,iBAAiB,KAAK,CAAC,EAAE,OAAO;oBAChC,YAAY;oBACZ,SAAS;oBACT,kBAAkB;oBAClB,SAAS;oBACT,GAAG;oBACH,GAAG;iBACJ;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,+BAA+B;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,kEAAkE;YACvE,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;SAC7B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAwC,CAAC;QACxE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;YAChE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC;oBACnB,GAAG,EAAE,4DAA4D;oBACjE,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,kEAAkE;gBAClE,wDAAwD;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAa;IACxD,IACE,KAAK,KAAK,YAAY;QACtB,KAAK,KAAK,eAAe;QACzB,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAC1B,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,WAAW,EAAE,CAAC;IAEpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,UAAU,EAAE;QAC1B,CAAC,CAAC,gKAAgK;QAClK,CAAC,CAAC,qIAAqI,CAAC;IAE1I,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,WAAW;YACX,KAAK;YACL,0BAA0B;YAC1B,eAAe;YACf,UAAU;YACV,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CACrC,6BAA6B,EAC7B,MAAM,CACP,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,cAAc;YACd,KAAK;YACL,6BAA6B;YAC7B,eAAe;YACf,aAAa;YACb,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,sDAAsD;IACtD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;IAC9C,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,kBAAkB;YAClB,KAAK;YACL,kBAAkB;YAClB,eAAe;YACf,eAAe;YACf,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,MAAM,0BAA0B,CAAC;QAC/B,MAAM;QACN,KAAK;QACL,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,uBAAuB;QAC/B,cAAc,EAAE,sBAAsB;KACvC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,uBAAuB;YACvB,KAAK;YACL,sBAAsB;YACtB,eAAe;YACf,SAAS;YACT,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,gEAAgE;IAChE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ;IAC7B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,IAAI,EAAE,GAAG,CAAC,IAAc;QACxB,KAAK,EAAE,GAAG,CAAC,KAAe;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAiB;QAC9B,QAAQ,EAAE,GAAG,CAAC,SAAmB;QACjC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7C,UAAU,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC/C,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC;QACvC,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QACjC,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QACzC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAQ;IACzB,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,IAAI,EAAE,GAAG,CAAC,IAAc;QACxB,KAAK,EAAE,GAAG,CAAC,KAAe;QAC1B,QAAQ,EAAE,GAAG,CAAC,SAAmB;QACjC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7C,UAAU,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC/C,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC;QACvC,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QACjC,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QACzC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAkB;IACxC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAU,EACV,OAAmC;IAEnC,MAAM,WAAW,EAAE,CAAC;IACpB,IAAI,0BAA0B,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,OAAO,0BAA0B,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,sCAAsC;QAC3C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,4BAA4B,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,IAAY,EACZ,OAAmC;IAEnC,MAAM,WAAW,EAAE,CAAC;IACpB,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,sDAAsD;QAC3D,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;KACpB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QACnD,OAAO,8BAA8B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAa,EACb,IAAY,EACZ,OAAe,EACf,QAAiB,EACjB,OAA8B;IAE9B,MAAM,WAAW,EAAE,CAAC;IACpB,IACE,KAAK,KAAK,eAAe;QACzB,CAAC,MAAM,oCAAoC,CAAC,IAAI,CAAC,CAAC,EAClD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,gCAAgC,CAAC;YAChD,GAAG,OAAO;YACV,OAAO;SACR,CAAC,CAAC;QACH,kBAAkB,CAChB,QAAQ,CAAC,EAAE,EACX,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,KAAK,EACd,OAAO,EAAE,aAAa,CACvB,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC9B,MAAM,mCAAmC,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,IAAI,eAAe,CAAC;IAEzC,uDAAuD;IACvD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAC9C,GAAG,EAAE,oIAAoI;QACzI,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAWjB,CAAC;IAEd,MAAM,EAAE,GACN,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,WAAW,EAAE,EAAa,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC1E,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,MAAM,SAAS,GAAG,kBAAkB,CAClC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;QAC7B,CAAC,CAAC,OAAO,EAAE,SAAS;QACpB,CAAC,CAAC,WAAW,EAAE,UAAU,CAC5B,CAAC;IACF,MAAM,UAAU,GAAG,mBAAmB,CACpC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;QAC9B,CAAC,CAAC,OAAO,EAAE,UAAU;QACrB,CAAC,CAAC,WAAW,EAAE,UAAU,CAC5B,CAAC;IACF,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC;QAC7C,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;QAC7B,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;QACvC,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC;QAC1B,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;QAC7C,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;QAC9B,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,UAAU,KAAK,eAAe,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACzD,SAAS,GAAG,GAAG,GAAG,oBAAoB,CAAC;IACzC,CAAC;IACD,IAAI,UAAU,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QACnE,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,QAAQ,GACZ,kBAAkB,KAAK,SAAS;QAC9B,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAE5C,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,UAAU,EAAE;YACf,CAAC,CAAC,miBAAmiB;YACriB,CAAC,CAAC,yNAAyN;QAC7N,IAAI,EAAE;YACJ,EAAE;YACF,IAAI;YACJ,KAAK;YACL,OAAO;YACP,IAAI;YACJ,IAAI;YACJ,SAAS;YACT,GAAG;YACH,SAAS;YACT,UAAU;YACV,QAAQ;YACR,KAAK;YACL,SAAS;YACT,QAAQ;SACT;KACF,CAAC,CAAC;IAEH,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAE5D,OAAO;QACL,EAAE;QACF,IAAI;QACJ,KAAK;QACL,OAAO;QACP,QAAQ,EAAE,IAAI;QACd,IAAI;QACJ,SAAS;QACT,SAAS,EAAE,GAAG;QACd,SAAS;QACT,UAAU;QACV,QAAQ;QACR,KAAK;QACL,SAAS;QACT,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAU;IAC7C,MAAM,WAAW,EAAE,CAAC;IACpB,IAAI,0BAA0B,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,gCAAgC,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3E,IAAI,OAAO,EAAE,CAAC;YACZ,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,gDAAgD;IAChD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,gDAAgD;QACrD,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,oCAAoC;QACzC,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,IAAY;IAEZ,MAAM,WAAW,EAAE,CAAC;IACpB,IACE,KAAK,KAAK,eAAe;QACzB,CAAC,MAAM,oCAAoC,CAAC,IAAI,CAAC,CAAC,EAClD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACZ,kBAAkB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC9B,MAAM,mCAAmC,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,gDAAgD;IAChD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,uDAAuD;QAC5D,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;KACpB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,oDAAoD;QACzD,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,UAAmB,EACnB,OAA6B;IAE7B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,UAAU,oBAAoB,8DAA8D,aAAa,EAAE;YAChH,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,eAAe;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;YAC9C,UAAU;YACV,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,OAAO,kBAAkB,CACvB,KAAK,EACL,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,UAAU,oBAAoB,kCAAkC,aAAa,EAAE;QACpF,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,2BAA2B,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;QAC9C,cAAc,EAAE,OAAO,EAAE,cAAc;QACvC,SAAS,EAAE,OAAO,EAAE,SAAS;QAC7B,KAAK,EAAE,OAAO,EAAE,KAAK;KACtB,CAAC,CAAC;IACH,OAAO,kBAAkB,CACvB,KAAK,EACL,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,UAAmB,EACnB,OAA6B;IAE7B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,UAAU,oBAAoB,8DAA8D,aAAa;;qBAE/F,oBAAoB,8DAA8D,aAAa;;qBAE/F,oBAAoB,8DAA8D,aAAa,EAAE;YAChH,IAAI,EAAE;gBACJ,SAAS;gBACT,UAAU,CAAC,UAAU,CAAC;gBACtB,YAAY;gBACZ,UAAU,CAAC,UAAU,CAAC;gBACtB,eAAe;gBACf,UAAU,CAAC,UAAU,CAAC;aACvB;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;YAC9C,UAAU;YACV,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,SAAS;YACT,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,OAAO,kBAAkB,CACvB,KAAK,EACL,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,UAAU,oBAAoB,kCAAkC,aAAa;;mBAEnE,oBAAoB,kCAAkC,aAAa;;mBAEnE,oBAAoB,kCAAkC,aAAa,EAAE;QACpF,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,eAAe,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,2BAA2B,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;QAC9C,cAAc,EAAE,OAAO,EAAE,cAAc;QACvC,SAAS;QACT,KAAK,EAAE,OAAO,EAAE,KAAK;KACtB,CAAC,CAAC;IACH,OAAO,kBAAkB,CACvB,KAAK,EACL,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAiB,EACjB,IAAY,EACZ,OAAmC;IAEnC,MAAM,WAAW,EAAE,CAAC;IAEpB,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,IAAI,EAAE;QAC/D,GAAG,OAAO;QACV,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,QAAQ,IAAI,MAAM,IAAI,SAAS,IAAI,IAAI,CAAC;IAC1D,MAAM,cAAc,GAAoC,QAAQ;QAC9D,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM;YACN,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,IAAI,CAAC;IAEb,MAAM,SAAS,GAMV;QACH;YACE,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK;SACvE;QACD;YACE,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,2BAA2B;YAClC,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,IAAI;SACf;QACD;YACE,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,IAAI;SACf;KACF,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/D,cAAc;QACd,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAChE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,EAAE;YAClE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,EAAE;YACnE,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB;IAElB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,uDAAuD;QAC5D,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;KAC/B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,CACrB,MAAM,OAAO,CAAC,GAAG,CACf,CACE,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAC9C,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAC9C,CACF,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAwB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,OAAO;QACL,GAAG,cAAc;QACjB,GAAG,IAAI;aACJ,GAAG,CAAC,aAAa,CAAC;aAClB,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,OAAe;IAEf,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,4BAA4B;IAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,gDAAgD;QACrD,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,4DAA4D;QACjE,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;KACzB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,EAAE,CAAC;QACV,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import crypto from \"crypto\";\n\nimport {\n  getDbExec,\n  isPostgres,\n  intType,\n  retryOnDdlRace,\n  type DbExec,\n} from \"../db/client.js\";\nimport { widenIntColumnsToBigInt } from \"../db/widen-columns.js\";\nimport {\n  canUseLocalWorkspaceResourcePath,\n  deleteLocalWorkspaceResource,\n  isLocalWorkspaceResourceId,\n  isLocalWorkspaceResourcesEnabled,\n  listLocalWorkspaceResources,\n  localWorkspaceResourcePathFromId,\n  readLocalWorkspaceResource,\n  writeLocalWorkspaceResource,\n  type LocalWorkspaceResourceFile,\n  type LocalWorkspaceResourceMeta,\n} from \"../local-artifacts/index.js\";\nimport {\n  getRequestOrgId,\n  getRequestUserEmail,\n} from \"../server/request-context.js\";\nimport type { StoreWriteOptions } from \"../settings/store.js\";\nimport { emitResourceChange, emitResourceDelete } from \"./emitter.js\";\n\nexport const SHARED_OWNER = \"__shared__\";\nexport const WORKSPACE_OWNER = \"__workspace__\";\n\nfunction escapeLike(value: string): string {\n  return value.replace(/[\\\\%_]/g, (char) => `\\\\${char}`);\n}\n\nfunction prefixLike(value: string): string {\n  return `${escapeLike(value)}%`;\n}\n\nexport interface Resource {\n  id: string;\n  path: string;\n  owner: string;\n  content: string;\n  mimeType: string;\n  size: number;\n  createdAt: number;\n  updatedAt: number;\n  createdBy: ResourceCreatedBy;\n  visibility: ResourceVisibility;\n  threadId: string | null;\n  runId: string | null;\n  expiresAt: number | null;\n  metadata: string | null;\n}\n\nexport interface ResourceMeta {\n  id: string;\n  path: string;\n  owner: string;\n  mimeType: string;\n  size: number;\n  createdAt: number;\n  updatedAt: number;\n  createdBy: ResourceCreatedBy;\n  visibility: ResourceVisibility;\n  threadId: string | null;\n  runId: string | null;\n  expiresAt: number | null;\n  metadata: string | null;\n}\n\nexport type ResourceCreatedBy = \"user\" | \"agent\" | \"system\";\nexport type ResourceVisibility = \"workspace\" | \"agent_scratch\";\n\nexport interface ResourceWriteOptions extends StoreWriteOptions {\n  createdBy?: ResourceCreatedBy;\n  visibility?: ResourceVisibility;\n  threadId?: string | null;\n  runId?: string | null;\n  expiresAt?: number | null;\n  metadata?: string | Record<string, unknown> | null;\n}\n\nexport interface ResourceListOptions {\n  includeAgentScratch?: boolean;\n  workspaceAppId?: string | null;\n  userEmail?: string | null;\n  orgId?: string | null;\n}\n\nexport interface ResourceResolutionOptions {\n  workspaceAppId?: string | null;\n  userEmail?: string | null;\n  orgId?: string | null;\n}\n\nexport type ResourceInheritanceScope = \"workspace\" | \"shared\" | \"personal\";\n\nexport interface EffectiveResourceLayer {\n  scope: ResourceInheritanceScope;\n  label: string;\n  owner: string;\n  resource: ResourceMeta | null;\n  exists: boolean;\n  effective: boolean;\n  overridden: boolean;\n  canWrite: boolean;\n}\n\nexport interface EffectiveResourceContext {\n  path: string;\n  effectiveResource: ResourceMeta | null;\n  effectiveScope: ResourceInheritanceScope | null;\n  layers: EffectiveResourceLayer[];\n}\n\nlet _initPromise: Promise<void> | undefined;\nlet _lastScratchCleanupAt = 0;\n\nconst AGENT_SCRATCH_TTL_MS = 24 * 60 * 60 * 1000;\nconst SCRATCH_CLEANUP_INTERVAL_MS = 60 * 1000;\nconst RESOURCE_META_SELECT =\n  \"id, path, owner, mime_type, size, created_at, updated_at, created_by, visibility, thread_id, run_id, expires_at, metadata\";\nconst DISPATCH_WORKSPACE_RESOURCE_ID_PREFIX = \"dispatch-workspace-resource:\";\nconst DISPATCH_WORKSPACE_RESOURCE_METADATA_SOURCE =\n  \"dispatch-workspace-resource\";\nexport const LOCAL_WORKSPACE_RESOURCE_METADATA_SOURCE =\n  \"local-workspace-resource\";\n\nconst DEFAULT_LEARNINGS_SHARED_MD = `# Learnings\n\nUser preferences, corrections, and patterns. The agent reads this at the start of every conversation.\n\nKeep this file tidy — revise, consolidate, and remove outdated entries. Don't just append forever.\n\n## Preferences\n\n## Corrections\n\n## Patterns\n`;\n\nconst DEFAULT_LEARNINGS_PERSONAL_MD = `# My Learnings\n\nPersonal preferences, corrections, and patterns — only visible to you.\n\n## Preferences\n\n## Corrections\n\n## Patterns\n`;\n\nconst DEFAULT_SKILL_LEARN_MD = `---\nname: learn\ndescription: >-\n  Review the conversation and save structured memories for future sessions.\nuser-invocable: true\n---\n\n# Learn\n\nReview the current conversation and save anything worth remembering using the structured memory system.\n\n## Memory types\n\n- **user** — Preferences, role, personal context, contacts\n- **feedback** — Corrections (\"don't do X, do Y instead\"), confirmed approaches\n- **project** — Ongoing work context, decisions, status\n- **reference** — Pointers to external systems, URLs, API details\n\n## Steps\n\n1. Review the conversation for new insights\n2. Check your memory index with the \\`resources\\` tool: \\`action: \"read\"\\`, \\`path: \"memory/MEMORY.md\"\\`\n3. For each new insight, use \\`save-memory\\` with a descriptive name, type, and content\n4. If updating an existing memory, read it first with the \\`resources\\` tool (\\`action: \"read\"\\`, \\`path: \"memory/<name>.md\"\\`), then save with merged content\n\n## What NOT to capture\n\n- Things obvious from reading the code\n- Standard language/framework behavior\n- Temporary debugging notes\n- Anything already in AGENTS.md or other skills\n\nKeep one memory per logical topic. Descriptions should be concise — the index is loaded every conversation.\n`;\n\nconst DEFAULT_SKILL_LEARN_SHARED_MD = `---\nname: learn-shared\ndescription: >-\n  Update the shared LEARNINGS.md with team-wide preferences, corrections, and\n  patterns from this session.\nuser-invocable: true\n---\n\n# Learn (Shared)\n\nReview the current conversation and update the shared \\`LEARNINGS.md\\` resource with anything the whole team should know.\n\n## What to capture\n\n- **Team conventions** — agreed-upon approaches, code style decisions\n- **Technical learnings** — API quirks, library gotchas, surprising behavior\n- **Architectural decisions** — why something is done a certain way\n- **Corrections** — mistakes that any team member's agent should avoid\n\n## What NOT to capture\n\n- Personal preferences (use \\`/learn\\` for those)\n- Things obvious from reading the code\n- Standard language/framework behavior\n\n## Steps\n\n1. Read shared learnings with the \\`resources\\` tool: \\`action: \"read\"\\`, \\`path: \"LEARNINGS.md\"\\`, \\`scope: \"shared\"\\`\n2. Review the conversation for team-relevant insights\n3. Merge new learnings with existing ones — don't duplicate, refine existing entries\n4. Write back with the \\`resources\\` tool: \\`action: \"write\"\\`, \\`path: \"LEARNINGS.md\"\\`, \\`scope: \"shared\"\\`, \\`content: \"...\"\\`\n\nKeep entries concise — one line per learning, grouped by category (Conventions, Technical, Patterns).\n`;\n\nconst DEFAULT_AGENTS_SHARED_MD = `# Agent Instructions\n\nThis file customizes how the AI agent behaves in this app. Edit it to add your own instructions, preferences, and context.\n\nWorkspace-level resources managed from Dispatch are inherited before this file.\nUse this shared app/organization file to override or narrow those defaults for\nthis app or team.\n\n## What to put here\n\n- **Preferences** — Tone, style, verbosity, response format\n- **Context** — Domain knowledge, terminology, team conventions\n- **Rules** — Things the agent should always/never do\n- **Skills** — Reference skill files for specialized tasks (create them in the \\`skills/\\` folder)\n\n## Skills\n\nYou can create skill files to give the agent specialized knowledge for specific tasks. Create resources under \\`skills/<name>/SKILL.md\\` (e.g., \\`skills/data-analysis/SKILL.md\\`, \\`skills/code-review/SKILL.md\\`) and reference them here:\n\n| Skill | Path | Description |\n|-------|------|-------------|\n| *(add your skills here)* | \\`skills/example/SKILL.md\\` | What this skill teaches the agent |\n\nThe agent will read the relevant skill file when performing that type of task.\n\n## Global instructions\n\nPut always-on guardrails in this shared \\`AGENTS.md\\`. For separate policy files that should also apply every turn, create shared resources under \\`instructions/<name>.md\\`. These are loaded automatically with this file.\n\n## Shared reference resources\n\nPut company, brand, positioning, persona, product, or messaging context in shared resources under paths like \\`context/core-positioning.md\\` or \\`context/brand-guidelines.md\\`. The agent sees an index of shared reference resources and reads the relevant files when a task may depend on them.\n\n## Workspace files\n\nWorkspace resources are for files users intentionally add, edit, or manage. Agents may create hidden \\`agent_scratch\\` resources for temporary working notes, scripts, or intermediate results; only promote those files into workspace visibility when a user explicitly asks to keep them.\n\n## Example\n\n\\`\\`\\`markdown\n## Tone\nBe concise. Lead with the answer. Skip filler.\n\n## Code style\n- Use TypeScript, never JavaScript\n- Prefer named exports\n- Use early returns\n\n## Domain context\nWe sell B2B SaaS. Our customers are enterprise engineering teams.\n\\`\\`\\`\n`;\n\nconst DEFAULT_AGENTS_PERSONAL_MD = `# My Agent Instructions\n\nPersonal agent instructions — only visible to you. Use this for your own contacts, preferences, and context.\n\n## Contacts\n\nAdd people you frequently interact with so the agent can resolve names like \"email my wife\" or \"message John\":\n\n| Name | Email | Notes |\n|------|-------|-------|\n| *(add your contacts here)* | | |\n\n## Preferences\n\n## Context\n\n## Workspace files\n\nFiles you create here are user-facing. Temporary agent working files should stay hidden as \\`agent_scratch\\` unless you ask the agent to keep them.\n`;\n\nasync function migrateDefaultResourcePath({\n  client,\n  owner,\n  fromPath,\n  toPath,\n  defaultContent,\n}: {\n  client: DbExec;\n  owner: string;\n  fromPath: string;\n  toPath: string;\n  defaultContent: string;\n}): Promise<void> {\n  try {\n    const existing = await client.execute({\n      sql: `SELECT id, content FROM resources WHERE owner = ? AND path = ?`,\n      args: [owner, fromPath],\n    });\n    const row = existing.rows?.[0] as\n      | { id: string; content: string }\n      | undefined;\n    if (!row || row.content !== defaultContent) return;\n\n    const destination = await client.execute({\n      sql: `SELECT id FROM resources WHERE owner = ? AND path = ?`,\n      args: [owner, toPath],\n    });\n    if ((destination.rows?.length ?? 0) > 0) return;\n\n    await client.execute({\n      sql: `UPDATE resources SET path = ?, updated_at = ? WHERE id = ?`,\n      args: [toPath, Date.now(), row.id],\n    });\n  } catch {\n    // Best-effort compatibility migration; seeding below still works if it fails.\n  }\n}\n\nfunction isDuplicateColumnError(err: unknown): boolean {\n  const code = (err as { code?: string })?.code;\n  const message = String((err as { message?: unknown })?.message ?? err)\n    .toLowerCase()\n    .trim();\n  return (\n    code === \"42701\" ||\n    message.includes(\"duplicate column\") ||\n    message.includes(\"already exists\")\n  );\n}\n\nasync function ensureResourceColumn(\n  client: DbExec,\n  definition: string,\n): Promise<void> {\n  try {\n    await retryOnDdlRace(() =>\n      client.execute(`ALTER TABLE resources ADD COLUMN ${definition}`),\n    );\n  } catch (err) {\n    if (!isDuplicateColumnError(err)) throw err;\n  }\n}\n\nfunction normalizeCreatedBy(value: unknown): ResourceCreatedBy {\n  return value === \"agent\" || value === \"system\" || value === \"user\"\n    ? value\n    : \"user\";\n}\n\nfunction normalizeVisibility(value: unknown): ResourceVisibility {\n  return value === \"agent_scratch\" ? \"agent_scratch\" : \"workspace\";\n}\n\nfunction nullableString(value: unknown): string | null {\n  return typeof value === \"string\" && value.length > 0 ? value : null;\n}\n\nfunction nullableNumber(value: unknown): number | null {\n  if (value === null || value === undefined) return null;\n  const parsed = Number(value);\n  return Number.isFinite(parsed) ? parsed : null;\n}\n\nfunction hasOption<K extends keyof ResourceWriteOptions>(\n  options: ResourceWriteOptions | undefined,\n  key: K,\n): boolean {\n  return (\n    Object.prototype.hasOwnProperty.call(options ?? {}, key) &&\n    options?.[key] !== undefined\n  );\n}\n\nfunction serializeMetadata(\n  value: ResourceWriteOptions[\"metadata\"] | undefined,\n): string | null | undefined {\n  if (value === undefined) return undefined;\n  if (value === null) return null;\n  return typeof value === \"string\" ? value : JSON.stringify(value);\n}\n\nfunction scratchFilterSql(options?: ResourceListOptions): string {\n  return options?.includeAgentScratch === true\n    ? \"\"\n    : \" AND (visibility IS NULL OR visibility != 'agent_scratch')\";\n}\n\nfunction normalizeWorkspaceAppId(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  const trimmed = value.trim();\n  if (!trimmed) return null;\n  const candidate = trimmed.replace(/^\\/+/, \"\").split(\"/\")[0] ?? \"\";\n  if (!/^[a-z0-9][a-z0-9-]{0,127}$/.test(candidate)) return null;\n  return candidate;\n}\n\nfunction workspaceAppIdFromBasePath(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  return normalizeWorkspaceAppId(value);\n}\n\nfunction currentWorkspaceAppId(explicit?: string | null): string | null {\n  return (\n    normalizeWorkspaceAppId(explicit) ??\n    normalizeWorkspaceAppId(process.env.AGENT_NATIVE_WORKSPACE_APP_ID) ??\n    normalizeWorkspaceAppId(process.env.APP_NAME) ??\n    normalizeWorkspaceAppId(process.env.AGENT_APP) ??\n    workspaceAppIdFromBasePath(process.env.APP_BASE_PATH) ??\n    workspaceAppIdFromBasePath(process.env.VITE_APP_BASE_PATH)\n  );\n}\n\nfunction requestScopedResourceIdentity(options?: ResourceResolutionOptions): {\n  userEmail: string | null;\n  orgId: string | null;\n} {\n  const userEmail = options?.userEmail ?? getRequestUserEmail() ?? null;\n  const orgId = options?.orgId ?? getRequestOrgId() ?? null;\n  return { userEmail, orgId };\n}\n\nfunction workspaceResourceMimeType(path: string): string {\n  return path.endsWith(\".json\") ? \"application/json\" : \"text/markdown\";\n}\n\nfunction syntheticWorkspaceResourceId(resourceId: string): string {\n  return `${DISPATCH_WORKSPACE_RESOURCE_ID_PREFIX}${resourceId}`;\n}\n\nfunction physicalWorkspaceResourceId(id: string): string | null {\n  return id.startsWith(DISPATCH_WORKSPACE_RESOURCE_ID_PREFIX)\n    ? id.slice(DISPATCH_WORKSPACE_RESOURCE_ID_PREFIX.length)\n    : null;\n}\n\nfunction rowToGrantedWorkspaceResource(row: any): Resource {\n  const content = String(row.content ?? \"\");\n  const path = String(row.path ?? \"\");\n  return {\n    id: syntheticWorkspaceResourceId(String(row.id)),\n    path,\n    owner: WORKSPACE_OWNER,\n    content,\n    mimeType: workspaceResourceMimeType(path),\n    size: Buffer.byteLength(content, \"utf8\"),\n    createdAt: Number(row.created_at ?? Date.now()),\n    updatedAt: Number(row.updated_at ?? Date.now()),\n    createdBy: \"system\",\n    visibility: \"workspace\",\n    threadId: null,\n    runId: null,\n    expiresAt: null,\n    metadata: JSON.stringify({\n      source: DISPATCH_WORKSPACE_RESOURCE_METADATA_SOURCE,\n      resourceId: String(row.id),\n      grantId: row.grant_id ? String(row.grant_id) : null,\n      kind: row.kind ?? null,\n      name: row.name ?? null,\n      description: row.description ?? null,\n      scope: \"selected\",\n      appId: row.app_id ?? null,\n      updatedAt: Number(row.updated_at ?? Date.now()),\n    }),\n  };\n}\n\nfunction localResourceTimestamp(value: string): number {\n  const parsed = Date.parse(value);\n  return Number.isFinite(parsed) ? parsed : Date.now();\n}\n\nfunction localWorkspaceResourceMetadata(\n  resource: LocalWorkspaceResourceMeta,\n): string {\n  return JSON.stringify({\n    source: LOCAL_WORKSPACE_RESOURCE_METADATA_SOURCE,\n    absolutePath: resource.absolutePath,\n    hash: resource.hash,\n    mtimeMs: resource.mtimeMs,\n  });\n}\n\nfunction localWorkspaceResourceToResource(\n  resource: LocalWorkspaceResourceFile,\n): Resource {\n  return {\n    id: resource.id,\n    path: resource.path,\n    owner: WORKSPACE_OWNER,\n    content: resource.content,\n    mimeType: resource.mimeType,\n    size: resource.sizeBytes,\n    createdAt: localResourceTimestamp(resource.createdAt),\n    updatedAt: localResourceTimestamp(resource.updatedAt),\n    createdBy: \"system\",\n    visibility: \"workspace\",\n    threadId: null,\n    runId: null,\n    expiresAt: null,\n    metadata: localWorkspaceResourceMetadata(resource),\n  };\n}\n\nfunction localWorkspaceResourceToMeta(\n  resource: LocalWorkspaceResourceMeta,\n): ResourceMeta {\n  return {\n    id: resource.id,\n    path: resource.path,\n    owner: WORKSPACE_OWNER,\n    mimeType: resource.mimeType,\n    size: resource.sizeBytes,\n    createdAt: localResourceTimestamp(resource.createdAt),\n    updatedAt: localResourceTimestamp(resource.updatedAt),\n    createdBy: \"system\",\n    visibility: \"workspace\",\n    threadId: null,\n    runId: null,\n    expiresAt: null,\n    metadata: localWorkspaceResourceMetadata(resource),\n  };\n}\n\nasync function localWorkspaceResourceById(\n  id: string,\n): Promise<Resource | null> {\n  const resourcePath = localWorkspaceResourcePathFromId(id);\n  if (!resourcePath) return null;\n  const resource = await readLocalWorkspaceResource({ path: resourcePath });\n  return resource ? localWorkspaceResourceToResource(resource) : null;\n}\n\nasync function localWorkspaceResourceByPath(\n  resourcePath: string,\n): Promise<Resource | null> {\n  if (!canUseLocalWorkspaceResourcePath(resourcePath)) return null;\n  const resource = await readLocalWorkspaceResource({ path: resourcePath });\n  return resource ? localWorkspaceResourceToResource(resource) : null;\n}\n\nasync function localWorkspaceResourceMetas(\n  pathPrefix?: string,\n): Promise<ResourceMeta[]> {\n  const resources = (await listLocalWorkspaceResources()).map(\n    localWorkspaceResourceToMeta,\n  );\n  if (!pathPrefix) return resources;\n  return resources.filter((resource) => resource.path.startsWith(pathPrefix));\n}\n\nexport async function canWriteLocalWorkspaceResourcePath(\n  resourcePath: string,\n): Promise<boolean> {\n  return (\n    canUseLocalWorkspaceResourcePath(resourcePath) &&\n    (await isLocalWorkspaceResourcesEnabled())\n  );\n}\n\nasync function shouldHandleWorkspaceResourceAsLocal(resourcePath: string) {\n  return (\n    (await isLocalWorkspaceResourcesEnabled()) &&\n    canUseLocalWorkspaceResourcePath(resourcePath)\n  );\n}\n\nasync function assertWritableWorkspaceResourcePath(resourcePath: string) {\n  if (\n    (await isLocalWorkspaceResourcesEnabled()) &&\n    !canUseLocalWorkspaceResourcePath(resourcePath)\n  ) {\n    throw new Error(\n      \"Workspace resources in local file mode must be AGENTS.md, agent-native.json, mcp.config.json, .mcp.json, or under skills/.\",\n    );\n  }\n}\n\nexport { isLocalWorkspaceResourceId };\n\nfunction mergeResourceMetas(\n  primary: ResourceMeta[],\n  inherited: ResourceMeta[],\n): ResourceMeta[] {\n  const seen = new Set(primary.map((resource) => resource.path));\n  const merged = [...primary];\n  for (const resource of inherited) {\n    if (seen.has(resource.path)) continue;\n    seen.add(resource.path);\n    merged.push(resource);\n  }\n  return merged;\n}\n\nasync function selectGrantedWorkspaceResourceRows(input: {\n  resourceId?: string;\n  path?: string;\n  pathPrefix?: string;\n  workspaceAppId?: string | null;\n  userEmail?: string | null;\n  orgId?: string | null;\n}): Promise<any[]> {\n  const appId = currentWorkspaceAppId(input.workspaceAppId);\n  const { userEmail, orgId } = requestScopedResourceIdentity(input);\n  if (!appId || (!userEmail && !orgId)) return [];\n\n  const conditions = [\"wr.scope = ?\", \"wg.status = ?\", \"wg.app_id = ?\"];\n  const args: unknown[] = [\"selected\", \"active\", appId];\n\n  if (input.resourceId) {\n    conditions.push(\"wr.id = ?\");\n    args.push(input.resourceId);\n  }\n  if (input.path) {\n    conditions.push(\"wr.path = ?\");\n    args.push(input.path);\n  }\n  if (input.pathPrefix) {\n    conditions.push(\"wr.path LIKE ? ESCAPE '\\\\'\");\n    args.push(prefixLike(input.pathPrefix));\n  }\n\n  if (orgId) {\n    conditions.push(\"wr.org_id = ?\", \"wg.org_id = ?\");\n    args.push(orgId, orgId);\n  } else if (userEmail) {\n    conditions.push(\n      \"wr.owner_email = ?\",\n      \"wr.org_id IS NULL\",\n      \"wg.owner_email = ?\",\n      \"wg.org_id IS NULL\",\n    );\n    args.push(userEmail, userEmail);\n  }\n\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `\n      SELECT\n        wr.id,\n        wr.kind,\n        wr.name,\n        wr.description,\n        wr.path,\n        wr.content,\n        wr.created_at,\n        wr.updated_at,\n        wg.id AS grant_id,\n        wg.app_id AS app_id\n      FROM workspace_resources wr\n      INNER JOIN workspace_resource_grants wg ON wg.resource_id = wr.id\n      WHERE ${conditions.join(\" AND \")}\n      ORDER BY wr.updated_at DESC\n    `,\n    args,\n  });\n  return rows;\n}\n\nasync function grantedWorkspaceResources(input: {\n  pathPrefix?: string;\n  workspaceAppId?: string | null;\n  userEmail?: string | null;\n  orgId?: string | null;\n}): Promise<Resource[]> {\n  try {\n    const rows = await selectGrantedWorkspaceResourceRows(input);\n    return rows.map(rowToGrantedWorkspaceResource);\n  } catch {\n    // Dispatch workspace-resource tables are optional for standalone apps.\n    return [];\n  }\n}\n\nasync function grantedWorkspaceResourceById(\n  id: string,\n  options?: ResourceResolutionOptions,\n): Promise<Resource | null> {\n  const resourceId = physicalWorkspaceResourceId(id);\n  if (!resourceId) return null;\n  try {\n    const rows = await selectGrantedWorkspaceResourceRows({\n      resourceId,\n      workspaceAppId: options?.workspaceAppId,\n      userEmail: options?.userEmail,\n      orgId: options?.orgId,\n    });\n    return rows[0] ? rowToGrantedWorkspaceResource(rows[0]) : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function grantedWorkspaceResourceByPath(\n  path: string,\n  options?: ResourceResolutionOptions,\n): Promise<Resource | null> {\n  try {\n    const rows = await selectGrantedWorkspaceResourceRows({\n      path,\n      workspaceAppId: options?.workspaceAppId,\n      userEmail: options?.userEmail,\n      orgId: options?.orgId,\n    });\n    return rows[0] ? rowToGrantedWorkspaceResource(rows[0]) : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function cleanupExpiredAgentScratchResources(\n  client: DbExec,\n): Promise<void> {\n  const now = Date.now();\n  if (now - _lastScratchCleanupAt < SCRATCH_CLEANUP_INTERVAL_MS) return;\n  _lastScratchCleanupAt = now;\n  await client.execute({\n    sql: `DELETE FROM resources WHERE visibility = ? AND expires_at IS NOT NULL AND expires_at <= ?`,\n    args: [\"agent_scratch\", now],\n  });\n}\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = _doEnsureTable().catch((err) => {\n      // Don't cache the rejection — let the next caller retry a fresh init.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nasync function _doEnsureTable(): Promise<void> {\n  const client = getDbExec();\n  await retryOnDdlRace(() =>\n    client.execute(`\n      CREATE TABLE IF NOT EXISTS resources (\n        id TEXT PRIMARY KEY,\n        path TEXT NOT NULL,\n        owner TEXT NOT NULL,\n        content TEXT NOT NULL DEFAULT '',\n        mime_type TEXT NOT NULL DEFAULT 'text/markdown',\n        size ${intType()} NOT NULL DEFAULT 0,\n        created_at ${intType()} NOT NULL,\n        updated_at ${intType()} NOT NULL,\n        created_by TEXT NOT NULL DEFAULT 'user',\n        visibility TEXT NOT NULL DEFAULT 'workspace',\n        thread_id TEXT,\n        run_id TEXT,\n        expires_at ${intType()},\n        metadata TEXT,\n        UNIQUE(path, owner)\n      )\n    `),\n  );\n\n  await ensureResourceColumn(client, \"created_by TEXT NOT NULL DEFAULT 'user'\");\n  await ensureResourceColumn(\n    client,\n    \"visibility TEXT NOT NULL DEFAULT 'workspace'\",\n  );\n  await ensureResourceColumn(client, \"thread_id TEXT\");\n  await ensureResourceColumn(client, \"run_id TEXT\");\n  await ensureResourceColumn(client, `expires_at ${intType()}`);\n  await ensureResourceColumn(client, \"metadata TEXT\");\n\n  // Older deployments have 32-bit timestamp columns; on Postgres the\n  // `Date.now()` written on insert/update overflows int4. Widen in place\n  // (no-op once done / on fresh DBs).\n  await widenIntColumnsToBigInt(\"resources\", [\n    \"created_at\",\n    \"updated_at\",\n    \"expires_at\",\n  ]);\n\n  // Seed default shared resources if they don't exist (INSERT OR IGNORE to avoid race conditions)\n  const now = Date.now();\n  const seedSql = isPostgres()\n    ? `INSERT INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT (path, owner) DO NOTHING`\n    : `INSERT OR IGNORE INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`;\n\n  // AGENTS.md — shared agent instructions\n  const agentsSize = Buffer.byteLength(DEFAULT_AGENTS_SHARED_MD, \"utf8\");\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"AGENTS.md\",\n      SHARED_OWNER,\n      DEFAULT_AGENTS_SHARED_MD,\n      \"text/markdown\",\n      agentsSize,\n      now,\n      now,\n    ],\n  });\n\n  // LEARNINGS.md — shared learnings (preferences, corrections, patterns)\n  const learningsSize = Buffer.byteLength(DEFAULT_LEARNINGS_SHARED_MD, \"utf8\");\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"LEARNINGS.md\",\n      SHARED_OWNER,\n      DEFAULT_LEARNINGS_SHARED_MD,\n      \"text/markdown\",\n      learningsSize,\n      now,\n      now,\n    ],\n  });\n\n  await migrateDefaultResourcePath({\n    client,\n    owner: SHARED_OWNER,\n    fromPath: \"skills/learn-shared.md\",\n    toPath: \"skills/learn-shared/SKILL.md\",\n    defaultContent: DEFAULT_SKILL_LEARN_SHARED_MD,\n  });\n\n  // skills/learn-shared/SKILL.md — shared skill for updating shared LEARNINGS.md\n  const learnSharedSize = Buffer.byteLength(\n    DEFAULT_SKILL_LEARN_SHARED_MD,\n    \"utf8\",\n  );\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"skills/learn-shared/SKILL.md\",\n      SHARED_OWNER,\n      DEFAULT_SKILL_LEARN_SHARED_MD,\n      \"text/markdown\",\n      learnSharedSize,\n      now,\n      now,\n    ],\n  });\n\n  // Seed built-in agents as shared resources under remote-agents/. ALWAYS\n  // use the production URL here, never the env-resolved devUrl. The seed\n  // runs once per DB (ON CONFLICT DO NOTHING), so a localhost URL written\n  // during a dev run sticks forever — including when that DB is later used\n  // by a prod deploy and the override wins over the built-in's prod URL.\n  // (Verified problem: `dispatch.agent-native.com` had every remote-agents\n  // entry pointing at localhost from an early-seed run, breaking call-agent\n  // outbound from Lambda for ~12h before this was caught.)\n  try {\n    const { getBuiltinAgents, BUILTIN_AGENTS_FOR_SEEDING } =\n      await import(\"../server/agent-discovery.js\");\n    void getBuiltinAgents; // referenced to keep type-only import alive\n    const builtins = BUILTIN_AGENTS_FOR_SEEDING;\n    for (const agent of builtins) {\n      const agentJson = JSON.stringify(\n        {\n          id: agent.id,\n          name: agent.name,\n          description: agent.description,\n          url: agent.url, // always prod\n          color: agent.color,\n        },\n        null,\n        2,\n      );\n      const agentSize = Buffer.byteLength(agentJson, \"utf8\");\n      await client.execute({\n        sql: seedSql,\n        args: [\n          crypto.randomUUID(),\n          `remote-agents/${agent.id}.json`,\n          SHARED_OWNER,\n          agentJson,\n          \"application/json\",\n          agentSize,\n          now,\n          now,\n        ],\n      });\n    }\n  } catch {\n    // Agent discovery not available — skip seeding\n  }\n\n  // One-time migration: rename legacy agents/*.json (A2A manifests) to\n  // remote-agents/*.json so they live in their own folder, separate from\n  // custom agents (agents/*.md).\n  try {\n    const legacy = await client.execute({\n      sql: `SELECT id, path FROM resources WHERE path LIKE ? AND path LIKE ?`,\n      args: [\"agents/%\", \"%.json\"],\n    });\n    const rows = (legacy.rows ?? []) as Array<{ id: string; path: string }>;\n    for (const row of rows) {\n      const newPath = row.path.replace(/^agents\\//, \"remote-agents/\");\n      try {\n        await client.execute({\n          sql: `UPDATE resources SET path = ?, updated_at = ? WHERE id = ?`,\n          args: [newPath, Date.now(), row.id],\n        });\n      } catch {\n        // Skip if destination path already exists (unique constraint) —\n        // we'll leave the old row in place; readers accept both paths and\n        // canonical remote-agents/ entries win when both exist.\n      }\n    }\n  } catch {\n    // Migration best-effort\n  }\n}\n\nconst _personalSeeded = new Set<string>();\n\n/**\n * Seed personal AGENTS.md and LEARNINGS.md for a user if they don't exist.\n * Called when listing resources or from the agent chat plugin.\n */\nexport async function ensurePersonalDefaults(owner: string): Promise<void> {\n  if (\n    owner === SHARED_OWNER ||\n    owner === WORKSPACE_OWNER ||\n    _personalSeeded.has(owner)\n  ) {\n    return;\n  }\n  await ensureTable();\n\n  const client = getDbExec();\n  const now = Date.now();\n  const seedSql = isPostgres()\n    ? `INSERT INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT (path, owner) DO NOTHING`\n    : `INSERT OR IGNORE INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`;\n\n  const agentsSize = Buffer.byteLength(DEFAULT_AGENTS_PERSONAL_MD, \"utf8\");\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"AGENTS.md\",\n      owner,\n      DEFAULT_AGENTS_PERSONAL_MD,\n      \"text/markdown\",\n      agentsSize,\n      now,\n      now,\n    ],\n  });\n\n  const learningsSize = Buffer.byteLength(\n    DEFAULT_LEARNINGS_PERSONAL_MD,\n    \"utf8\",\n  );\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"LEARNINGS.md\",\n      owner,\n      DEFAULT_LEARNINGS_PERSONAL_MD,\n      \"text/markdown\",\n      learningsSize,\n      now,\n      now,\n    ],\n  });\n\n  // memory/MEMORY.md — personal structured memory index\n  const memoryIndexContent = \"# Memory Index\\n\";\n  const memoryIndexSize = Buffer.byteLength(memoryIndexContent, \"utf8\");\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"memory/MEMORY.md\",\n      owner,\n      memoryIndexContent,\n      \"text/markdown\",\n      memoryIndexSize,\n      now,\n      now,\n    ],\n  });\n\n  await migrateDefaultResourcePath({\n    client,\n    owner,\n    fromPath: \"skills/learn.md\",\n    toPath: \"skills/learn/SKILL.md\",\n    defaultContent: DEFAULT_SKILL_LEARN_MD,\n  });\n\n  // skills/learn/SKILL.md — personal skill for updating memory\n  const learnSize = Buffer.byteLength(DEFAULT_SKILL_LEARN_MD, \"utf8\");\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"skills/learn/SKILL.md\",\n      owner,\n      DEFAULT_SKILL_LEARN_MD,\n      \"text/markdown\",\n      learnSize,\n      now,\n      now,\n    ],\n  });\n\n  // Mark seeded only after all seeds succeed. If any await above throws (e.g. a\n  // transient DB error), the owner is NOT cached as seeded, so the next request\n  // retries instead of permanently skipping seeding. Seeds use INSERT OR IGNORE\n  // / ON CONFLICT DO NOTHING, so a concurrent re-run is harmless.\n  _personalSeeded.add(owner);\n}\n\nfunction rowToResource(row: any): Resource {\n  return {\n    id: row.id as string,\n    path: row.path as string,\n    owner: row.owner as string,\n    content: row.content as string,\n    mimeType: row.mime_type as string,\n    size: Number(row.size),\n    createdAt: Number(row.created_at),\n    updatedAt: Number(row.updated_at),\n    createdBy: normalizeCreatedBy(row.created_by),\n    visibility: normalizeVisibility(row.visibility),\n    threadId: nullableString(row.thread_id),\n    runId: nullableString(row.run_id),\n    expiresAt: nullableNumber(row.expires_at),\n    metadata: nullableString(row.metadata),\n  };\n}\n\nfunction rowToMeta(row: any): ResourceMeta {\n  return {\n    id: row.id as string,\n    path: row.path as string,\n    owner: row.owner as string,\n    mimeType: row.mime_type as string,\n    size: Number(row.size),\n    createdAt: Number(row.created_at),\n    updatedAt: Number(row.updated_at),\n    createdBy: normalizeCreatedBy(row.created_by),\n    visibility: normalizeVisibility(row.visibility),\n    threadId: nullableString(row.thread_id),\n    runId: nullableString(row.run_id),\n    expiresAt: nullableNumber(row.expires_at),\n    metadata: nullableString(row.metadata),\n  };\n}\n\nfunction resourceToMeta(resource: Resource): ResourceMeta {\n  const { content: _content, ...meta } = resource;\n  return meta;\n}\n\nexport async function resourceGet(\n  id: string,\n  options?: ResourceResolutionOptions,\n): Promise<Resource | null> {\n  await ensureTable();\n  if (isLocalWorkspaceResourceId(id)) {\n    return localWorkspaceResourceById(id);\n  }\n  const client = getDbExec();\n  await cleanupExpiredAgentScratchResources(client);\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM resources WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return grantedWorkspaceResourceById(id, options);\n  return rowToResource(rows[0]);\n}\n\nexport async function resourceGetByPath(\n  owner: string,\n  path: string,\n  options?: ResourceResolutionOptions,\n): Promise<Resource | null> {\n  await ensureTable();\n  if (owner === WORKSPACE_OWNER) {\n    const local = await localWorkspaceResourceByPath(path);\n    if (local) return local;\n  }\n  const client = getDbExec();\n  await cleanupExpiredAgentScratchResources(client);\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM resources WHERE owner = ? AND path = ?`,\n    args: [owner, path],\n  });\n  if (rows.length === 0 && owner === WORKSPACE_OWNER) {\n    return grantedWorkspaceResourceByPath(path, options);\n  }\n  if (rows.length === 0) return null;\n  return rowToResource(rows[0]);\n}\n\nexport async function resourcePut(\n  owner: string,\n  path: string,\n  content: string,\n  mimeType?: string,\n  options?: ResourceWriteOptions,\n): Promise<Resource> {\n  await ensureTable();\n  if (\n    owner === WORKSPACE_OWNER &&\n    (await shouldHandleWorkspaceResourceAsLocal(path))\n  ) {\n    const written = await writeLocalWorkspaceResource({ path, content });\n    const resource = localWorkspaceResourceToResource({\n      ...written,\n      content,\n    });\n    emitResourceChange(\n      resource.id,\n      resource.path,\n      resource.owner,\n      options?.requestSource,\n    );\n    return resource;\n  }\n  if (owner === WORKSPACE_OWNER) {\n    await assertWritableWorkspaceResourcePath(path);\n  }\n  const client = getDbExec();\n  const now = Date.now();\n  const size = Buffer.byteLength(content, \"utf8\");\n  const mime = mimeType || \"text/markdown\";\n\n  // Check for existing resource to preserve ID on upsert\n  const { rows: existing } = await client.execute({\n    sql: `SELECT id, created_at, created_by, visibility, thread_id, run_id, expires_at, metadata FROM resources WHERE owner = ? AND path = ?`,\n    args: [owner, path],\n  });\n  const existingRow = existing[0] as\n    | {\n        id: string;\n        created_at: number;\n        created_by?: string | null;\n        visibility?: string | null;\n        thread_id?: string | null;\n        run_id?: string | null;\n        expires_at?: number | null;\n        metadata?: string | null;\n      }\n    | undefined;\n\n  const id =\n    existing.length > 0 ? (existingRow?.id as string) : crypto.randomUUID();\n  const createdAt = existingRow ? Number(existingRow.created_at) : now;\n  const createdBy = normalizeCreatedBy(\n    hasOption(options, \"createdBy\")\n      ? options?.createdBy\n      : existingRow?.created_by,\n  );\n  const visibility = normalizeVisibility(\n    hasOption(options, \"visibility\")\n      ? options?.visibility\n      : existingRow?.visibility,\n  );\n  const threadId = hasOption(options, \"threadId\")\n    ? (options?.threadId ?? null)\n    : nullableString(existingRow?.thread_id);\n  const runId = hasOption(options, \"runId\")\n    ? (options?.runId ?? null)\n    : nullableString(existingRow?.run_id);\n  let expiresAt = hasOption(options, \"expiresAt\")\n    ? (options?.expiresAt ?? null)\n    : nullableNumber(existingRow?.expires_at);\n  if (visibility === \"agent_scratch\" && expiresAt === null) {\n    expiresAt = now + AGENT_SCRATCH_TTL_MS;\n  }\n  if (visibility === \"workspace\" && !hasOption(options, \"expiresAt\")) {\n    expiresAt = null;\n  }\n  const serializedMetadata = serializeMetadata(options?.metadata);\n  const metadata =\n    serializedMetadata !== undefined\n      ? serializedMetadata\n      : nullableString(existingRow?.metadata);\n\n  await client.execute({\n    sql: isPostgres()\n      ? `INSERT INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at, created_by, visibility, thread_id, run_id, expires_at, metadata) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT (path, owner) DO UPDATE SET id=EXCLUDED.id, content=EXCLUDED.content, mime_type=EXCLUDED.mime_type, size=EXCLUDED.size, updated_at=EXCLUDED.updated_at, created_by=EXCLUDED.created_by, visibility=EXCLUDED.visibility, thread_id=EXCLUDED.thread_id, run_id=EXCLUDED.run_id, expires_at=EXCLUDED.expires_at, metadata=EXCLUDED.metadata`\n      : `INSERT OR REPLACE INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at, created_by, visibility, thread_id, run_id, expires_at, metadata) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      path,\n      owner,\n      content,\n      mime,\n      size,\n      createdAt,\n      now,\n      createdBy,\n      visibility,\n      threadId,\n      runId,\n      expiresAt,\n      metadata,\n    ],\n  });\n\n  emitResourceChange(id, path, owner, options?.requestSource);\n\n  return {\n    id,\n    path,\n    owner,\n    content,\n    mimeType: mime,\n    size,\n    createdAt,\n    updatedAt: now,\n    createdBy,\n    visibility,\n    threadId,\n    runId,\n    expiresAt,\n    metadata,\n  };\n}\n\nexport async function resourceDelete(id: string): Promise<boolean> {\n  await ensureTable();\n  if (isLocalWorkspaceResourceId(id)) {\n    const resourcePath = localWorkspaceResourcePathFromId(id);\n    if (!resourcePath) return false;\n    const deleted = await deleteLocalWorkspaceResource({ path: resourcePath });\n    if (deleted) {\n      emitResourceDelete(id, resourcePath, WORKSPACE_OWNER);\n    }\n    return deleted;\n  }\n  const client = getDbExec();\n\n  // Get resource info for emitter before deleting\n  const { rows } = await client.execute({\n    sql: `SELECT path, owner FROM resources WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return false;\n\n  const result = await client.execute({\n    sql: `DELETE FROM resources WHERE id = ?`,\n    args: [id],\n  });\n  const deleted = result.rowsAffected > 0;\n  if (deleted) {\n    emitResourceDelete(id, rows[0].path as string, rows[0].owner as string);\n  }\n  return deleted;\n}\n\nexport async function resourceDeleteByPath(\n  owner: string,\n  path: string,\n): Promise<boolean> {\n  await ensureTable();\n  if (\n    owner === WORKSPACE_OWNER &&\n    (await shouldHandleWorkspaceResourceAsLocal(path))\n  ) {\n    const existing = await localWorkspaceResourceByPath(path);\n    const deleted = await deleteLocalWorkspaceResource({ path });\n    if (deleted) {\n      emitResourceDelete(existing?.id ?? \"\", path, WORKSPACE_OWNER);\n      return true;\n    }\n  }\n  if (owner === WORKSPACE_OWNER) {\n    await assertWritableWorkspaceResourcePath(path);\n  }\n  const client = getDbExec();\n\n  // Get resource info for emitter before deleting\n  const { rows } = await client.execute({\n    sql: `SELECT id FROM resources WHERE owner = ? AND path = ?`,\n    args: [owner, path],\n  });\n  if (rows.length === 0) return false;\n\n  const result = await client.execute({\n    sql: `DELETE FROM resources WHERE owner = ? AND path = ?`,\n    args: [owner, path],\n  });\n  const deleted = result.rowsAffected > 0;\n  if (deleted) {\n    emitResourceDelete(rows[0].id as string, path, owner);\n  }\n  return deleted;\n}\n\nexport async function resourceList(\n  owner: string,\n  pathPrefix?: string,\n  options?: ResourceListOptions,\n): Promise<ResourceMeta[]> {\n  await ensureTable();\n  const client = getDbExec();\n  await cleanupExpiredAgentScratchResources(client);\n  const visibilitySql = scratchFilterSql(options);\n\n  if (pathPrefix) {\n    const { rows } = await client.execute({\n      sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\\\'${visibilitySql}`,\n      args: [owner, prefixLike(pathPrefix)],\n    });\n    const resources = rows.map(rowToMeta);\n    if (owner !== WORKSPACE_OWNER) return resources;\n    const local = await localWorkspaceResourceMetas(pathPrefix);\n    const granted = await grantedWorkspaceResources({\n      pathPrefix,\n      workspaceAppId: options?.workspaceAppId,\n      userEmail: options?.userEmail,\n      orgId: options?.orgId,\n    });\n    return mergeResourceMetas(\n      local,\n      mergeResourceMetas(resources, granted.map(resourceToMeta)),\n    );\n  }\n\n  const { rows } = await client.execute({\n    sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ?${visibilitySql}`,\n    args: [owner],\n  });\n  const resources = rows.map(rowToMeta);\n  if (owner !== WORKSPACE_OWNER) return resources;\n  const local = await localWorkspaceResourceMetas();\n  const granted = await grantedWorkspaceResources({\n    workspaceAppId: options?.workspaceAppId,\n    userEmail: options?.userEmail,\n    orgId: options?.orgId,\n  });\n  return mergeResourceMetas(\n    local,\n    mergeResourceMetas(resources, granted.map(resourceToMeta)),\n  );\n}\n\nexport async function resourceListAccessible(\n  userEmail: string,\n  pathPrefix?: string,\n  options?: ResourceListOptions,\n): Promise<ResourceMeta[]> {\n  await ensureTable();\n  const client = getDbExec();\n  await cleanupExpiredAgentScratchResources(client);\n  const visibilitySql = scratchFilterSql(options);\n\n  if (pathPrefix) {\n    const { rows } = await client.execute({\n      sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\\\'${visibilitySql}\n            UNION\n            SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\\\'${visibilitySql}\n            UNION\n            SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\\\'${visibilitySql}`,\n      args: [\n        userEmail,\n        prefixLike(pathPrefix),\n        SHARED_OWNER,\n        prefixLike(pathPrefix),\n        WORKSPACE_OWNER,\n        prefixLike(pathPrefix),\n      ],\n    });\n    const resources = rows.map(rowToMeta);\n    const local = await localWorkspaceResourceMetas(pathPrefix);\n    const granted = await grantedWorkspaceResources({\n      pathPrefix,\n      workspaceAppId: options?.workspaceAppId,\n      userEmail,\n      orgId: options?.orgId,\n    });\n    return mergeResourceMetas(\n      local,\n      mergeResourceMetas(resources, granted.map(resourceToMeta)),\n    );\n  }\n\n  const { rows } = await client.execute({\n    sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ?${visibilitySql}\n          UNION\n          SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ?${visibilitySql}\n          UNION\n          SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ?${visibilitySql}`,\n    args: [userEmail, SHARED_OWNER, WORKSPACE_OWNER],\n  });\n  const resources = rows.map(rowToMeta);\n  const local = await localWorkspaceResourceMetas();\n  const granted = await grantedWorkspaceResources({\n    workspaceAppId: options?.workspaceAppId,\n    userEmail,\n    orgId: options?.orgId,\n  });\n  return mergeResourceMetas(\n    local,\n    mergeResourceMetas(resources, granted.map(resourceToMeta)),\n  );\n}\n\nexport async function resourceEffectiveContext(\n  userEmail: string,\n  path: string,\n  options?: ResourceResolutionOptions,\n): Promise<EffectiveResourceContext> {\n  await ensureTable();\n\n  const workspace = await resourceGetByPath(WORKSPACE_OWNER, path, {\n    ...options,\n    userEmail,\n  });\n  const shared = await resourceGetByPath(SHARED_OWNER, path);\n  const personal = await resourceGetByPath(userEmail, path);\n  const effective = personal ?? shared ?? workspace ?? null;\n  const effectiveScope: ResourceInheritanceScope | null = personal\n    ? \"personal\"\n    : shared\n      ? \"shared\"\n      : workspace\n        ? \"workspace\"\n        : null;\n\n  const layerDefs: Array<{\n    scope: ResourceInheritanceScope;\n    label: string;\n    owner: string;\n    resource: Resource | null;\n    canWrite: boolean;\n  }> = [\n    {\n      scope: \"workspace\",\n      label: \"Workspace default\",\n      owner: WORKSPACE_OWNER,\n      resource: workspace,\n      canWrite: workspace ? isLocalWorkspaceResourceId(workspace.id) : false,\n    },\n    {\n      scope: \"shared\",\n      label: \"Organization/app override\",\n      owner: SHARED_OWNER,\n      resource: shared,\n      canWrite: true,\n    },\n    {\n      scope: \"personal\",\n      label: \"Personal override\",\n      owner: userEmail,\n      resource: personal,\n      canWrite: true,\n    },\n  ];\n\n  return {\n    path,\n    effectiveResource: effective ? resourceToMeta(effective) : null,\n    effectiveScope,\n    layers: layerDefs.map((layer) => ({\n      scope: layer.scope,\n      label: layer.label,\n      owner: layer.owner,\n      resource: layer.resource ? resourceToMeta(layer.resource) : null,\n      exists: !!layer.resource,\n      effective: !!layer.resource && layer.resource.id === effective?.id,\n      overridden: !!layer.resource && layer.resource.id !== effective?.id,\n      canWrite: layer.canWrite,\n    })),\n  };\n}\n\n/**\n * List all resources matching a path prefix across ALL owners.\n * Used by the recurring jobs scheduler to find all job resources.\n */\nexport async function resourceListAllOwners(\n  pathPrefix: string,\n): Promise<Resource[]> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM resources WHERE path LIKE ? ESCAPE '\\\\'`,\n    args: [prefixLike(pathPrefix)],\n  });\n  const localResources = (\n    await Promise.all(\n      (\n        await localWorkspaceResourceMetas(pathPrefix)\n      ).map((resource) => resourceGet(resource.id)),\n    )\n  ).filter((resource): resource is Resource => !!resource);\n  const localPaths = new Set(localResources.map((resource) => resource.path));\n  return [\n    ...localResources,\n    ...rows\n      .map(rowToResource)\n      .filter((resource) => !localPaths.has(resource.path)),\n  ];\n}\n\nexport async function resourceMove(\n  id: string,\n  newPath: string,\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n\n  // Get current resource info\n  const { rows } = await client.execute({\n    sql: `SELECT path, owner FROM resources WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return false;\n\n  const result = await client.execute({\n    sql: `UPDATE resources SET path = ?, updated_at = ? WHERE id = ?`,\n    args: [newPath, now, id],\n  });\n  const moved = result.rowsAffected > 0;\n  if (moved) {\n    emitResourceChange(id, newPath, rows[0].owner as string);\n  }\n  return moved;\n}\n"]}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/resources/store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACL,SAAS,EACT,UAAU,EACV,OAAO,EACP,cAAc,GAEf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,gCAAgC,EAChC,4BAA4B,EAC5B,0BAA0B,EAC1B,gCAAgC,EAChC,2BAA2B,EAC3B,gCAAgC,EAChC,0BAA0B,EAC1B,2BAA2B,GAG5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEtE,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;AAE/C,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;AACjC,CAAC;AAgFD,IAAI,YAAuC,CAAC;AAC5C,IAAI,qBAAqB,GAAG,CAAC,CAAC;AAE9B,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,2BAA2B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,oBAAoB,GACxB,2HAA2H,CAAC;AAC9H,MAAM,qCAAqC,GAAG,8BAA8B,CAAC;AAC7E,MAAM,2CAA2C,GAC/C,6BAA6B,CAAC;AAChC,MAAM,CAAC,MAAM,wCAAwC,GACnD,0BAA0B,CAAC;AAE7B,MAAM,2BAA2B,GAAG;;;;;;;;;;;CAWnC,CAAC;AAEF,MAAM,6BAA6B,GAAG;;;;;;;;;CASrC,CAAC;AAEF,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiC9B,CAAC;AAEF,MAAM,6BAA6B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCrC,CAAC;AAEF,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDhC,CAAC;AAEF,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;CAmBlC,CAAC;AAEF,KAAK,UAAU,0BAA0B,CAAC,EACxC,MAAM,EACN,KAAK,EACL,QAAQ,EACR,MAAM,EACN,cAAc,GAOf;IACC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,gEAAgE;YACrE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAEhB,CAAC;QACd,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,cAAc;YAAE,OAAO;QAEnD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACvC,GAAG,EAAE,uDAAuD;YAC5D,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO;QAEhD,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE,4DAA4D;YACjE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAY;IAC1C,MAAM,IAAI,GAAI,GAAyB,EAAE,IAAI,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC;SACnE,WAAW,EAAE;SACb,IAAI,EAAE,CAAC;IACV,OAAO,CACL,IAAI,KAAK,OAAO;QAChB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACpC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,MAAc,EACd,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,oCAAoC,UAAU,EAAE,CAAC,CACjE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM;QAChE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAChB,OAAyC,EACzC,GAAM;IAEN,OAAO,CACL,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,CAAC;QACxD,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAmD;IAEnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA6B;IACrD,OAAO,OAAO,EAAE,mBAAmB,KAAK,IAAI;QAC1C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,4DAA4D,CAAC;AACnE,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAwB;IACrD,OAAO,CACL,uBAAuB,CAAC,QAAQ,CAAC;QACjC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;QAClE,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7C,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9C,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACrD,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAmC;IAIxE,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,mBAAmB,EAAE,IAAI,IAAI,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,IAAI,IAAI,CAAC;IAC1D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC;AACvE,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAkB;IACtD,OAAO,GAAG,qCAAqC,GAAG,UAAU,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,2BAA2B,CAAC,EAAU;IAC7C,OAAO,EAAE,CAAC,UAAU,CAAC,qCAAqC,CAAC;QACzD,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,qCAAqC,CAAC,MAAM,CAAC;QACxD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,6BAA6B,CAAC,GAAQ;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO;QACL,EAAE,EAAE,4BAA4B,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI;QACJ,KAAK,EAAE,eAAe;QACtB,OAAO;QACP,QAAQ,EAAE,yBAAyB,CAAC,IAAI,CAAC;QACzC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;QACxC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;YACvB,MAAM,EAAE,2CAA2C;YACnD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;YACpC,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;YACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;SAChD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,8BAA8B,CACrC,QAAoC;IAEpC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,MAAM,EAAE,wCAAwC;QAChD,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gCAAgC,CACvC,QAAoC;IAEpC,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,SAAS;QACxB,SAAS,EAAE,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,8BAA8B,CAAC,QAAQ,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,QAAoC;IAEpC,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,SAAS;QACxB,SAAS,EAAE,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,8BAA8B,CAAC,QAAQ,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,EAAU;IAEV,MAAM,YAAY,GAAG,gCAAgC,CAAC,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,CAAC,CAAC,gCAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,YAAoB;IAEpB,IAAI,CAAC,gCAAgC,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,CAAC,CAAC,gCAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,UAAmB;IAEnB,MAAM,SAAS,GAAG,CAAC,MAAM,2BAA2B,EAAE,CAAC,CAAC,GAAG,CACzD,4BAA4B,CAC7B,CAAC;IACF,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,YAAoB;IAEpB,OAAO,CACL,gCAAgC,CAAC,YAAY,CAAC;QAC9C,CAAC,MAAM,gCAAgC,EAAE,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oCAAoC,CAAC,YAAoB;IACtE,OAAO,CACL,CAAC,MAAM,gCAAgC,EAAE,CAAC;QAC1C,gCAAgC,CAAC,YAAY,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mCAAmC,CAAC,YAAoB;IACrE,IACE,CAAC,MAAM,gCAAgC,EAAE,CAAC;QAC1C,CAAC,gCAAgC,CAAC,YAAY,CAAC,EAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4HAA4H,CAC7H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC;AAEtC,SAAS,kBAAkB,CACzB,OAAuB,EACvB,SAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC5B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,kCAAkC,CAAC,KAOjD;IACC,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhD,MAAM,UAAU,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;IACtE,MAAM,IAAI,GAAc,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEtD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,UAAU,CAAC,IAAI,CACb,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;;;;;;;;;;;cAcK,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;KAEjC;QACD,IAAI;KACL,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAKxC;IACC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,kCAAkC,CAAC,KAAK,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,EAAU,EACV,OAAmC;IAEnC,MAAM,UAAU,GAAG,2BAA2B,CAAC,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,kCAAkC,CAAC;YACpD,UAAU;YACV,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,IAAY,EACZ,OAAmC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,kCAAkC,CAAC;YACpD,IAAI;YACJ,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mCAAmC,CAChD,MAAc;IAEd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,qBAAqB,GAAG,2BAA2B;QAAE,OAAO;IACtE,qBAAqB,GAAG,GAAG,CAAC;IAC5B,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,2FAA2F;QAChG,IAAI,EAAE,CAAC,eAAe,EAAE,GAAG,CAAC;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC5C,sEAAsE;YACtE,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG;;;;;;;aAOP,OAAO,EAAE;mBACH,OAAO,EAAE;mBACT,OAAO,EAAE;;;;;mBAKT,OAAO,EAAE;;;;GAIzB,CAAC;IAEF,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,yEAAyE;QACzE,sEAAsE;QACtE,+DAA+D;QAC/D,yEAAyE;QACzE,+DAA+D;QAC/D,yEAAyE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAChD,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,SAAS,GAA4B;YACzC,CAAC,YAAY,EAAE,8BAA8B,CAAC;YAC9C,CAAC,YAAY,EAAE,mCAAmC,CAAC;YACnD,CAAC,WAAW,EAAE,MAAM,CAAC;YACrB,CAAC,QAAQ,EAAE,MAAM,CAAC;YAClB,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;YACzB,CAAC,UAAU,EAAE,MAAM,CAAC;SACrB,CAAC;QACF,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;YACnC,MAAM,kBAAkB,CACtB,WAAW,EACX,GAAG,EACH,kDAAkD,GAAG,IAAI,GAAG,EAAE,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACtD,MAAM,oBAAoB,CACxB,MAAM,EACN,yCAAyC,CAC1C,CAAC;QACF,MAAM,oBAAoB,CACxB,MAAM,EACN,8CAA8C,CAC/C,CAAC;QACF,MAAM,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACrD,MAAM,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAClD,MAAM,oBAAoB,CAAC,MAAM,EAAE,cAAc,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,oBAAoB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACtD,CAAC;IAED,mEAAmE;IACnE,uEAAuE;IACvE,oCAAoC;IACpC,MAAM,uBAAuB,CAAC,WAAW,EAAE;QACzC,YAAY;QACZ,YAAY;QACZ,YAAY;KACb,CAAC,CAAC;IAEH,gGAAgG;IAChG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,UAAU,EAAE;QAC1B,CAAC,CAAC,gKAAgK;QAClK,CAAC,CAAC,qIAAqI,CAAC;IAE1I,wCAAwC;IACxC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;IACvE,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,WAAW;YACX,YAAY;YACZ,wBAAwB;YACxB,eAAe;YACf,UAAU;YACV,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,uEAAuE;IACvE,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,cAAc;YACd,YAAY;YACZ,2BAA2B;YAC3B,eAAe;YACf,aAAa;YACb,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,MAAM,0BAA0B,CAAC;QAC/B,MAAM;QACN,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,wBAAwB;QAClC,MAAM,EAAE,8BAA8B;QACtC,cAAc,EAAE,6BAA6B;KAC9C,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CACvC,6BAA6B,EAC7B,MAAM,CACP,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,8BAA8B;YAC9B,YAAY;YACZ,6BAA6B;YAC7B,eAAe;YACf,eAAe;YACf,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,yDAAyD;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,GACpD,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC/C,KAAK,gBAAgB,CAAC,CAAC,4CAA4C;QACnE,MAAM,QAAQ,GAAG,0BAA0B,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAC9B;gBACE,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,cAAc;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,EACD,IAAI,EACJ,CAAC,CACF,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,OAAO,CAAC;gBACnB,GAAG,EAAE,OAAO;gBACZ,IAAI,EAAE;oBACJ,MAAM,CAAC,UAAU,EAAE;oBACnB,iBAAiB,KAAK,CAAC,EAAE,OAAO;oBAChC,YAAY;oBACZ,SAAS;oBACT,kBAAkB;oBAClB,SAAS;oBACT,GAAG;oBACH,GAAG;iBACJ;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,+BAA+B;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,kEAAkE;YACvE,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;SAC7B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAwC,CAAC;QACxE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;YAChE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC;oBACnB,GAAG,EAAE,4DAA4D;oBACjE,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,kEAAkE;gBAClE,wDAAwD;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAa;IACxD,IACE,KAAK,KAAK,YAAY;QACtB,KAAK,KAAK,eAAe;QACzB,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAC1B,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,WAAW,EAAE,CAAC;IAEpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,UAAU,EAAE;QAC1B,CAAC,CAAC,gKAAgK;QAClK,CAAC,CAAC,qIAAqI,CAAC;IAE1I,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,WAAW;YACX,KAAK;YACL,0BAA0B;YAC1B,eAAe;YACf,UAAU;YACV,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CACrC,6BAA6B,EAC7B,MAAM,CACP,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,cAAc;YACd,KAAK;YACL,6BAA6B;YAC7B,eAAe;YACf,aAAa;YACb,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,sDAAsD;IACtD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;IAC9C,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,kBAAkB;YAClB,KAAK;YACL,kBAAkB;YAClB,eAAe;YACf,eAAe;YACf,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,MAAM,0BAA0B,CAAC;QAC/B,MAAM;QACN,KAAK;QACL,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,uBAAuB;QAC/B,cAAc,EAAE,sBAAsB;KACvC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE;YACJ,MAAM,CAAC,UAAU,EAAE;YACnB,uBAAuB;YACvB,KAAK;YACL,sBAAsB;YACtB,eAAe;YACf,SAAS;YACT,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,gEAAgE;IAChE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ;IAC7B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,IAAI,EAAE,GAAG,CAAC,IAAc;QACxB,KAAK,EAAE,GAAG,CAAC,KAAe;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAiB;QAC9B,QAAQ,EAAE,GAAG,CAAC,SAAmB;QACjC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7C,UAAU,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC/C,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC;QACvC,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QACjC,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QACzC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAQ;IACzB,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,IAAI,EAAE,GAAG,CAAC,IAAc;QACxB,KAAK,EAAE,GAAG,CAAC,KAAe;QAC1B,QAAQ,EAAE,GAAG,CAAC,SAAmB;QACjC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7C,UAAU,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC/C,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC;QACvC,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QACjC,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QACzC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAkB;IACxC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAU,EACV,OAAmC;IAEnC,MAAM,WAAW,EAAE,CAAC;IACpB,IAAI,0BAA0B,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,OAAO,0BAA0B,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,sCAAsC;QAC3C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,4BAA4B,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,IAAY,EACZ,OAAmC;IAEnC,MAAM,WAAW,EAAE,CAAC;IACpB,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,sDAAsD;QAC3D,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;KACpB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QACnD,OAAO,8BAA8B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAa,EACb,IAAY,EACZ,OAAe,EACf,QAAiB,EACjB,OAA8B;IAE9B,MAAM,WAAW,EAAE,CAAC;IACpB,IACE,KAAK,KAAK,eAAe;QACzB,CAAC,MAAM,oCAAoC,CAAC,IAAI,CAAC,CAAC,EAClD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,gCAAgC,CAAC;YAChD,GAAG,OAAO;YACV,OAAO;SACR,CAAC,CAAC;QACH,kBAAkB,CAChB,QAAQ,CAAC,EAAE,EACX,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,KAAK,EACd,OAAO,EAAE,aAAa,CACvB,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC9B,MAAM,mCAAmC,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,IAAI,eAAe,CAAC;IAEzC,uDAAuD;IACvD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAC9C,GAAG,EAAE,oIAAoI;QACzI,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAWjB,CAAC;IAEd,MAAM,EAAE,GACN,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,WAAW,EAAE,EAAa,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC1E,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,MAAM,SAAS,GAAG,kBAAkB,CAClC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;QAC7B,CAAC,CAAC,OAAO,EAAE,SAAS;QACpB,CAAC,CAAC,WAAW,EAAE,UAAU,CAC5B,CAAC;IACF,MAAM,UAAU,GAAG,mBAAmB,CACpC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;QAC9B,CAAC,CAAC,OAAO,EAAE,UAAU;QACrB,CAAC,CAAC,WAAW,EAAE,UAAU,CAC5B,CAAC;IACF,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC;QAC7C,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;QAC7B,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;QACvC,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC;QAC1B,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;QAC7C,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;QAC9B,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,UAAU,KAAK,eAAe,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACzD,SAAS,GAAG,GAAG,GAAG,oBAAoB,CAAC;IACzC,CAAC;IACD,IAAI,UAAU,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QACnE,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,QAAQ,GACZ,kBAAkB,KAAK,SAAS;QAC9B,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAE5C,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,UAAU,EAAE;YACf,CAAC,CAAC,miBAAmiB;YACriB,CAAC,CAAC,yNAAyN;QAC7N,IAAI,EAAE;YACJ,EAAE;YACF,IAAI;YACJ,KAAK;YACL,OAAO;YACP,IAAI;YACJ,IAAI;YACJ,SAAS;YACT,GAAG;YACH,SAAS;YACT,UAAU;YACV,QAAQ;YACR,KAAK;YACL,SAAS;YACT,QAAQ;SACT;KACF,CAAC,CAAC;IAEH,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAE5D,OAAO;QACL,EAAE;QACF,IAAI;QACJ,KAAK;QACL,OAAO;QACP,QAAQ,EAAE,IAAI;QACd,IAAI;QACJ,SAAS;QACT,SAAS,EAAE,GAAG;QACd,SAAS;QACT,UAAU;QACV,QAAQ;QACR,KAAK;QACL,SAAS;QACT,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAU;IAC7C,MAAM,WAAW,EAAE,CAAC;IACpB,IAAI,0BAA0B,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,gCAAgC,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3E,IAAI,OAAO,EAAE,CAAC;YACZ,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,gDAAgD;IAChD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,gDAAgD;QACrD,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,oCAAoC;QACzC,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,IAAY;IAEZ,MAAM,WAAW,EAAE,CAAC;IACpB,IACE,KAAK,KAAK,eAAe;QACzB,CAAC,MAAM,oCAAoC,CAAC,IAAI,CAAC,CAAC,EAClD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACZ,kBAAkB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC9B,MAAM,mCAAmC,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,gDAAgD;IAChD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,uDAAuD;QAC5D,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;KACpB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,oDAAoD;QACzD,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,UAAmB,EACnB,OAA6B;IAE7B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,UAAU,oBAAoB,8DAA8D,aAAa,EAAE;YAChH,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,eAAe;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;YAC9C,UAAU;YACV,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,OAAO,kBAAkB,CACvB,KAAK,EACL,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,UAAU,oBAAoB,kCAAkC,aAAa,EAAE;QACpF,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,2BAA2B,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;QAC9C,cAAc,EAAE,OAAO,EAAE,cAAc;QACvC,SAAS,EAAE,OAAO,EAAE,SAAS;QAC7B,KAAK,EAAE,OAAO,EAAE,KAAK;KACtB,CAAC,CAAC;IACH,OAAO,kBAAkB,CACvB,KAAK,EACL,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,UAAmB,EACnB,OAA6B;IAE7B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,UAAU,oBAAoB,8DAA8D,aAAa;;qBAE/F,oBAAoB,8DAA8D,aAAa;;qBAE/F,oBAAoB,8DAA8D,aAAa,EAAE;YAChH,IAAI,EAAE;gBACJ,SAAS;gBACT,UAAU,CAAC,UAAU,CAAC;gBACtB,YAAY;gBACZ,UAAU,CAAC,UAAU,CAAC;gBACtB,eAAe;gBACf,UAAU,CAAC,UAAU,CAAC;aACvB;SACF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;YAC9C,UAAU;YACV,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,SAAS;YACT,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,OAAO,kBAAkB,CACvB,KAAK,EACL,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,UAAU,oBAAoB,kCAAkC,aAAa;;mBAEnE,oBAAoB,kCAAkC,aAAa;;mBAEnE,oBAAoB,kCAAkC,aAAa,EAAE;QACpF,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,eAAe,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,2BAA2B,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;QAC9C,cAAc,EAAE,OAAO,EAAE,cAAc;QACvC,SAAS;QACT,KAAK,EAAE,OAAO,EAAE,KAAK;KACtB,CAAC,CAAC;IACH,OAAO,kBAAkB,CACvB,KAAK,EACL,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAiB,EACjB,IAAY,EACZ,OAAmC;IAEnC,MAAM,WAAW,EAAE,CAAC;IAEpB,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,IAAI,EAAE;QAC/D,GAAG,OAAO;QACV,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,QAAQ,IAAI,MAAM,IAAI,SAAS,IAAI,IAAI,CAAC;IAC1D,MAAM,cAAc,GAAoC,QAAQ;QAC9D,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM;YACN,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,IAAI,CAAC;IAEb,MAAM,SAAS,GAMV;QACH;YACE,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK;SACvE;QACD;YACE,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,2BAA2B;YAClC,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,IAAI;SACf;QACD;YACE,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,IAAI;SACf;KACF,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/D,cAAc;QACd,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAChE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,EAAE;YAClE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,EAAE;YACnE,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB;IAElB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,uDAAuD;QAC5D,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;KAC/B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,CACrB,MAAM,OAAO,CAAC,GAAG,CACf,CACE,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAC9C,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAC9C,CACF,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAwB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,OAAO;QACL,GAAG,cAAc;QACjB,GAAG,IAAI;aACJ,GAAG,CAAC,aAAa,CAAC;aAClB,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,OAAe;IAEf,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,4BAA4B;IAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,gDAAgD;QACrD,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,4DAA4D;QACjE,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;KACzB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,EAAE,CAAC;QACV,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import crypto from \"crypto\";\n\nimport {\n  getDbExec,\n  isPostgres,\n  intType,\n  retryOnDdlRace,\n  type DbExec,\n} from \"../db/client.js\";\nimport { ensureColumnExists, ensureTableExists } from \"../db/ddl-guard.js\";\nimport { widenIntColumnsToBigInt } from \"../db/widen-columns.js\";\nimport {\n  canUseLocalWorkspaceResourcePath,\n  deleteLocalWorkspaceResource,\n  isLocalWorkspaceResourceId,\n  isLocalWorkspaceResourcesEnabled,\n  listLocalWorkspaceResources,\n  localWorkspaceResourcePathFromId,\n  readLocalWorkspaceResource,\n  writeLocalWorkspaceResource,\n  type LocalWorkspaceResourceFile,\n  type LocalWorkspaceResourceMeta,\n} from \"../local-artifacts/index.js\";\nimport {\n  getRequestOrgId,\n  getRequestUserEmail,\n} from \"../server/request-context.js\";\nimport type { StoreWriteOptions } from \"../settings/store.js\";\nimport { emitResourceChange, emitResourceDelete } from \"./emitter.js\";\n\nexport const SHARED_OWNER = \"__shared__\";\nexport const WORKSPACE_OWNER = \"__workspace__\";\n\nfunction escapeLike(value: string): string {\n  return value.replace(/[\\\\%_]/g, (char) => `\\\\${char}`);\n}\n\nfunction prefixLike(value: string): string {\n  return `${escapeLike(value)}%`;\n}\n\nexport interface Resource {\n  id: string;\n  path: string;\n  owner: string;\n  content: string;\n  mimeType: string;\n  size: number;\n  createdAt: number;\n  updatedAt: number;\n  createdBy: ResourceCreatedBy;\n  visibility: ResourceVisibility;\n  threadId: string | null;\n  runId: string | null;\n  expiresAt: number | null;\n  metadata: string | null;\n}\n\nexport interface ResourceMeta {\n  id: string;\n  path: string;\n  owner: string;\n  mimeType: string;\n  size: number;\n  createdAt: number;\n  updatedAt: number;\n  createdBy: ResourceCreatedBy;\n  visibility: ResourceVisibility;\n  threadId: string | null;\n  runId: string | null;\n  expiresAt: number | null;\n  metadata: string | null;\n}\n\nexport type ResourceCreatedBy = \"user\" | \"agent\" | \"system\";\nexport type ResourceVisibility = \"workspace\" | \"agent_scratch\";\n\nexport interface ResourceWriteOptions extends StoreWriteOptions {\n  createdBy?: ResourceCreatedBy;\n  visibility?: ResourceVisibility;\n  threadId?: string | null;\n  runId?: string | null;\n  expiresAt?: number | null;\n  metadata?: string | Record<string, unknown> | null;\n}\n\nexport interface ResourceListOptions {\n  includeAgentScratch?: boolean;\n  workspaceAppId?: string | null;\n  userEmail?: string | null;\n  orgId?: string | null;\n}\n\nexport interface ResourceResolutionOptions {\n  workspaceAppId?: string | null;\n  userEmail?: string | null;\n  orgId?: string | null;\n}\n\nexport type ResourceInheritanceScope = \"workspace\" | \"shared\" | \"personal\";\n\nexport interface EffectiveResourceLayer {\n  scope: ResourceInheritanceScope;\n  label: string;\n  owner: string;\n  resource: ResourceMeta | null;\n  exists: boolean;\n  effective: boolean;\n  overridden: boolean;\n  canWrite: boolean;\n}\n\nexport interface EffectiveResourceContext {\n  path: string;\n  effectiveResource: ResourceMeta | null;\n  effectiveScope: ResourceInheritanceScope | null;\n  layers: EffectiveResourceLayer[];\n}\n\nlet _initPromise: Promise<void> | undefined;\nlet _lastScratchCleanupAt = 0;\n\nconst AGENT_SCRATCH_TTL_MS = 24 * 60 * 60 * 1000;\nconst SCRATCH_CLEANUP_INTERVAL_MS = 60 * 1000;\nconst RESOURCE_META_SELECT =\n  \"id, path, owner, mime_type, size, created_at, updated_at, created_by, visibility, thread_id, run_id, expires_at, metadata\";\nconst DISPATCH_WORKSPACE_RESOURCE_ID_PREFIX = \"dispatch-workspace-resource:\";\nconst DISPATCH_WORKSPACE_RESOURCE_METADATA_SOURCE =\n  \"dispatch-workspace-resource\";\nexport const LOCAL_WORKSPACE_RESOURCE_METADATA_SOURCE =\n  \"local-workspace-resource\";\n\nconst DEFAULT_LEARNINGS_SHARED_MD = `# Learnings\n\nUser preferences, corrections, and patterns. The agent reads this at the start of every conversation.\n\nKeep this file tidy — revise, consolidate, and remove outdated entries. Don't just append forever.\n\n## Preferences\n\n## Corrections\n\n## Patterns\n`;\n\nconst DEFAULT_LEARNINGS_PERSONAL_MD = `# My Learnings\n\nPersonal preferences, corrections, and patterns — only visible to you.\n\n## Preferences\n\n## Corrections\n\n## Patterns\n`;\n\nconst DEFAULT_SKILL_LEARN_MD = `---\nname: learn\ndescription: >-\n  Review the conversation and save structured memories for future sessions.\nuser-invocable: true\n---\n\n# Learn\n\nReview the current conversation and save anything worth remembering using the structured memory system.\n\n## Memory types\n\n- **user** — Preferences, role, personal context, contacts\n- **feedback** — Corrections (\"don't do X, do Y instead\"), confirmed approaches\n- **project** — Ongoing work context, decisions, status\n- **reference** — Pointers to external systems, URLs, API details\n\n## Steps\n\n1. Review the conversation for new insights\n2. Check your memory index with the \\`resources\\` tool: \\`action: \"read\"\\`, \\`path: \"memory/MEMORY.md\"\\`\n3. For each new insight, use \\`save-memory\\` with a descriptive name, type, and content\n4. If updating an existing memory, read it first with the \\`resources\\` tool (\\`action: \"read\"\\`, \\`path: \"memory/<name>.md\"\\`), then save with merged content\n\n## What NOT to capture\n\n- Things obvious from reading the code\n- Standard language/framework behavior\n- Temporary debugging notes\n- Anything already in AGENTS.md or other skills\n\nKeep one memory per logical topic. Descriptions should be concise — the index is loaded every conversation.\n`;\n\nconst DEFAULT_SKILL_LEARN_SHARED_MD = `---\nname: learn-shared\ndescription: >-\n  Update the shared LEARNINGS.md with team-wide preferences, corrections, and\n  patterns from this session.\nuser-invocable: true\n---\n\n# Learn (Shared)\n\nReview the current conversation and update the shared \\`LEARNINGS.md\\` resource with anything the whole team should know.\n\n## What to capture\n\n- **Team conventions** — agreed-upon approaches, code style decisions\n- **Technical learnings** — API quirks, library gotchas, surprising behavior\n- **Architectural decisions** — why something is done a certain way\n- **Corrections** — mistakes that any team member's agent should avoid\n\n## What NOT to capture\n\n- Personal preferences (use \\`/learn\\` for those)\n- Things obvious from reading the code\n- Standard language/framework behavior\n\n## Steps\n\n1. Read shared learnings with the \\`resources\\` tool: \\`action: \"read\"\\`, \\`path: \"LEARNINGS.md\"\\`, \\`scope: \"shared\"\\`\n2. Review the conversation for team-relevant insights\n3. Merge new learnings with existing ones — don't duplicate, refine existing entries\n4. Write back with the \\`resources\\` tool: \\`action: \"write\"\\`, \\`path: \"LEARNINGS.md\"\\`, \\`scope: \"shared\"\\`, \\`content: \"...\"\\`\n\nKeep entries concise — one line per learning, grouped by category (Conventions, Technical, Patterns).\n`;\n\nconst DEFAULT_AGENTS_SHARED_MD = `# Agent Instructions\n\nThis file customizes how the AI agent behaves in this app. Edit it to add your own instructions, preferences, and context.\n\nWorkspace-level resources managed from Dispatch are inherited before this file.\nUse this shared app/organization file to override or narrow those defaults for\nthis app or team.\n\n## What to put here\n\n- **Preferences** — Tone, style, verbosity, response format\n- **Context** — Domain knowledge, terminology, team conventions\n- **Rules** — Things the agent should always/never do\n- **Skills** — Reference skill files for specialized tasks (create them in the \\`skills/\\` folder)\n\n## Skills\n\nYou can create skill files to give the agent specialized knowledge for specific tasks. Create resources under \\`skills/<name>/SKILL.md\\` (e.g., \\`skills/data-analysis/SKILL.md\\`, \\`skills/code-review/SKILL.md\\`) and reference them here:\n\n| Skill | Path | Description |\n|-------|------|-------------|\n| *(add your skills here)* | \\`skills/example/SKILL.md\\` | What this skill teaches the agent |\n\nThe agent will read the relevant skill file when performing that type of task.\n\n## Global instructions\n\nPut always-on guardrails in this shared \\`AGENTS.md\\`. For separate policy files that should also apply every turn, create shared resources under \\`instructions/<name>.md\\`. These are loaded automatically with this file.\n\n## Shared reference resources\n\nPut company, brand, positioning, persona, product, or messaging context in shared resources under paths like \\`context/core-positioning.md\\` or \\`context/brand-guidelines.md\\`. The agent sees an index of shared reference resources and reads the relevant files when a task may depend on them.\n\n## Workspace files\n\nWorkspace resources are for files users intentionally add, edit, or manage. Agents may create hidden \\`agent_scratch\\` resources for temporary working notes, scripts, or intermediate results; only promote those files into workspace visibility when a user explicitly asks to keep them.\n\n## Example\n\n\\`\\`\\`markdown\n## Tone\nBe concise. Lead with the answer. Skip filler.\n\n## Code style\n- Use TypeScript, never JavaScript\n- Prefer named exports\n- Use early returns\n\n## Domain context\nWe sell B2B SaaS. Our customers are enterprise engineering teams.\n\\`\\`\\`\n`;\n\nconst DEFAULT_AGENTS_PERSONAL_MD = `# My Agent Instructions\n\nPersonal agent instructions — only visible to you. Use this for your own contacts, preferences, and context.\n\n## Contacts\n\nAdd people you frequently interact with so the agent can resolve names like \"email my wife\" or \"message John\":\n\n| Name | Email | Notes |\n|------|-------|-------|\n| *(add your contacts here)* | | |\n\n## Preferences\n\n## Context\n\n## Workspace files\n\nFiles you create here are user-facing. Temporary agent working files should stay hidden as \\`agent_scratch\\` unless you ask the agent to keep them.\n`;\n\nasync function migrateDefaultResourcePath({\n  client,\n  owner,\n  fromPath,\n  toPath,\n  defaultContent,\n}: {\n  client: DbExec;\n  owner: string;\n  fromPath: string;\n  toPath: string;\n  defaultContent: string;\n}): Promise<void> {\n  try {\n    const existing = await client.execute({\n      sql: `SELECT id, content FROM resources WHERE owner = ? AND path = ?`,\n      args: [owner, fromPath],\n    });\n    const row = existing.rows?.[0] as\n      | { id: string; content: string }\n      | undefined;\n    if (!row || row.content !== defaultContent) return;\n\n    const destination = await client.execute({\n      sql: `SELECT id FROM resources WHERE owner = ? AND path = ?`,\n      args: [owner, toPath],\n    });\n    if ((destination.rows?.length ?? 0) > 0) return;\n\n    await client.execute({\n      sql: `UPDATE resources SET path = ?, updated_at = ? WHERE id = ?`,\n      args: [toPath, Date.now(), row.id],\n    });\n  } catch {\n    // Best-effort compatibility migration; seeding below still works if it fails.\n  }\n}\n\nfunction isDuplicateColumnError(err: unknown): boolean {\n  const code = (err as { code?: string })?.code;\n  const message = String((err as { message?: unknown })?.message ?? err)\n    .toLowerCase()\n    .trim();\n  return (\n    code === \"42701\" ||\n    message.includes(\"duplicate column\") ||\n    message.includes(\"already exists\")\n  );\n}\n\nasync function ensureResourceColumn(\n  client: DbExec,\n  definition: string,\n): Promise<void> {\n  try {\n    await retryOnDdlRace(() =>\n      client.execute(`ALTER TABLE resources ADD COLUMN ${definition}`),\n    );\n  } catch (err) {\n    if (!isDuplicateColumnError(err)) throw err;\n  }\n}\n\nfunction normalizeCreatedBy(value: unknown): ResourceCreatedBy {\n  return value === \"agent\" || value === \"system\" || value === \"user\"\n    ? value\n    : \"user\";\n}\n\nfunction normalizeVisibility(value: unknown): ResourceVisibility {\n  return value === \"agent_scratch\" ? \"agent_scratch\" : \"workspace\";\n}\n\nfunction nullableString(value: unknown): string | null {\n  return typeof value === \"string\" && value.length > 0 ? value : null;\n}\n\nfunction nullableNumber(value: unknown): number | null {\n  if (value === null || value === undefined) return null;\n  const parsed = Number(value);\n  return Number.isFinite(parsed) ? parsed : null;\n}\n\nfunction hasOption<K extends keyof ResourceWriteOptions>(\n  options: ResourceWriteOptions | undefined,\n  key: K,\n): boolean {\n  return (\n    Object.prototype.hasOwnProperty.call(options ?? {}, key) &&\n    options?.[key] !== undefined\n  );\n}\n\nfunction serializeMetadata(\n  value: ResourceWriteOptions[\"metadata\"] | undefined,\n): string | null | undefined {\n  if (value === undefined) return undefined;\n  if (value === null) return null;\n  return typeof value === \"string\" ? value : JSON.stringify(value);\n}\n\nfunction scratchFilterSql(options?: ResourceListOptions): string {\n  return options?.includeAgentScratch === true\n    ? \"\"\n    : \" AND (visibility IS NULL OR visibility != 'agent_scratch')\";\n}\n\nfunction normalizeWorkspaceAppId(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  const trimmed = value.trim();\n  if (!trimmed) return null;\n  const candidate = trimmed.replace(/^\\/+/, \"\").split(\"/\")[0] ?? \"\";\n  if (!/^[a-z0-9][a-z0-9-]{0,127}$/.test(candidate)) return null;\n  return candidate;\n}\n\nfunction workspaceAppIdFromBasePath(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  return normalizeWorkspaceAppId(value);\n}\n\nfunction currentWorkspaceAppId(explicit?: string | null): string | null {\n  return (\n    normalizeWorkspaceAppId(explicit) ??\n    normalizeWorkspaceAppId(process.env.AGENT_NATIVE_WORKSPACE_APP_ID) ??\n    normalizeWorkspaceAppId(process.env.APP_NAME) ??\n    normalizeWorkspaceAppId(process.env.AGENT_APP) ??\n    workspaceAppIdFromBasePath(process.env.APP_BASE_PATH) ??\n    workspaceAppIdFromBasePath(process.env.VITE_APP_BASE_PATH)\n  );\n}\n\nfunction requestScopedResourceIdentity(options?: ResourceResolutionOptions): {\n  userEmail: string | null;\n  orgId: string | null;\n} {\n  const userEmail = options?.userEmail ?? getRequestUserEmail() ?? null;\n  const orgId = options?.orgId ?? getRequestOrgId() ?? null;\n  return { userEmail, orgId };\n}\n\nfunction workspaceResourceMimeType(path: string): string {\n  return path.endsWith(\".json\") ? \"application/json\" : \"text/markdown\";\n}\n\nfunction syntheticWorkspaceResourceId(resourceId: string): string {\n  return `${DISPATCH_WORKSPACE_RESOURCE_ID_PREFIX}${resourceId}`;\n}\n\nfunction physicalWorkspaceResourceId(id: string): string | null {\n  return id.startsWith(DISPATCH_WORKSPACE_RESOURCE_ID_PREFIX)\n    ? id.slice(DISPATCH_WORKSPACE_RESOURCE_ID_PREFIX.length)\n    : null;\n}\n\nfunction rowToGrantedWorkspaceResource(row: any): Resource {\n  const content = String(row.content ?? \"\");\n  const path = String(row.path ?? \"\");\n  return {\n    id: syntheticWorkspaceResourceId(String(row.id)),\n    path,\n    owner: WORKSPACE_OWNER,\n    content,\n    mimeType: workspaceResourceMimeType(path),\n    size: Buffer.byteLength(content, \"utf8\"),\n    createdAt: Number(row.created_at ?? Date.now()),\n    updatedAt: Number(row.updated_at ?? Date.now()),\n    createdBy: \"system\",\n    visibility: \"workspace\",\n    threadId: null,\n    runId: null,\n    expiresAt: null,\n    metadata: JSON.stringify({\n      source: DISPATCH_WORKSPACE_RESOURCE_METADATA_SOURCE,\n      resourceId: String(row.id),\n      grantId: row.grant_id ? String(row.grant_id) : null,\n      kind: row.kind ?? null,\n      name: row.name ?? null,\n      description: row.description ?? null,\n      scope: \"selected\",\n      appId: row.app_id ?? null,\n      updatedAt: Number(row.updated_at ?? Date.now()),\n    }),\n  };\n}\n\nfunction localResourceTimestamp(value: string): number {\n  const parsed = Date.parse(value);\n  return Number.isFinite(parsed) ? parsed : Date.now();\n}\n\nfunction localWorkspaceResourceMetadata(\n  resource: LocalWorkspaceResourceMeta,\n): string {\n  return JSON.stringify({\n    source: LOCAL_WORKSPACE_RESOURCE_METADATA_SOURCE,\n    absolutePath: resource.absolutePath,\n    hash: resource.hash,\n    mtimeMs: resource.mtimeMs,\n  });\n}\n\nfunction localWorkspaceResourceToResource(\n  resource: LocalWorkspaceResourceFile,\n): Resource {\n  return {\n    id: resource.id,\n    path: resource.path,\n    owner: WORKSPACE_OWNER,\n    content: resource.content,\n    mimeType: resource.mimeType,\n    size: resource.sizeBytes,\n    createdAt: localResourceTimestamp(resource.createdAt),\n    updatedAt: localResourceTimestamp(resource.updatedAt),\n    createdBy: \"system\",\n    visibility: \"workspace\",\n    threadId: null,\n    runId: null,\n    expiresAt: null,\n    metadata: localWorkspaceResourceMetadata(resource),\n  };\n}\n\nfunction localWorkspaceResourceToMeta(\n  resource: LocalWorkspaceResourceMeta,\n): ResourceMeta {\n  return {\n    id: resource.id,\n    path: resource.path,\n    owner: WORKSPACE_OWNER,\n    mimeType: resource.mimeType,\n    size: resource.sizeBytes,\n    createdAt: localResourceTimestamp(resource.createdAt),\n    updatedAt: localResourceTimestamp(resource.updatedAt),\n    createdBy: \"system\",\n    visibility: \"workspace\",\n    threadId: null,\n    runId: null,\n    expiresAt: null,\n    metadata: localWorkspaceResourceMetadata(resource),\n  };\n}\n\nasync function localWorkspaceResourceById(\n  id: string,\n): Promise<Resource | null> {\n  const resourcePath = localWorkspaceResourcePathFromId(id);\n  if (!resourcePath) return null;\n  const resource = await readLocalWorkspaceResource({ path: resourcePath });\n  return resource ? localWorkspaceResourceToResource(resource) : null;\n}\n\nasync function localWorkspaceResourceByPath(\n  resourcePath: string,\n): Promise<Resource | null> {\n  if (!canUseLocalWorkspaceResourcePath(resourcePath)) return null;\n  const resource = await readLocalWorkspaceResource({ path: resourcePath });\n  return resource ? localWorkspaceResourceToResource(resource) : null;\n}\n\nasync function localWorkspaceResourceMetas(\n  pathPrefix?: string,\n): Promise<ResourceMeta[]> {\n  const resources = (await listLocalWorkspaceResources()).map(\n    localWorkspaceResourceToMeta,\n  );\n  if (!pathPrefix) return resources;\n  return resources.filter((resource) => resource.path.startsWith(pathPrefix));\n}\n\nexport async function canWriteLocalWorkspaceResourcePath(\n  resourcePath: string,\n): Promise<boolean> {\n  return (\n    canUseLocalWorkspaceResourcePath(resourcePath) &&\n    (await isLocalWorkspaceResourcesEnabled())\n  );\n}\n\nasync function shouldHandleWorkspaceResourceAsLocal(resourcePath: string) {\n  return (\n    (await isLocalWorkspaceResourcesEnabled()) &&\n    canUseLocalWorkspaceResourcePath(resourcePath)\n  );\n}\n\nasync function assertWritableWorkspaceResourcePath(resourcePath: string) {\n  if (\n    (await isLocalWorkspaceResourcesEnabled()) &&\n    !canUseLocalWorkspaceResourcePath(resourcePath)\n  ) {\n    throw new Error(\n      \"Workspace resources in local file mode must be AGENTS.md, agent-native.json, mcp.config.json, .mcp.json, or under skills/.\",\n    );\n  }\n}\n\nexport { isLocalWorkspaceResourceId };\n\nfunction mergeResourceMetas(\n  primary: ResourceMeta[],\n  inherited: ResourceMeta[],\n): ResourceMeta[] {\n  const seen = new Set(primary.map((resource) => resource.path));\n  const merged = [...primary];\n  for (const resource of inherited) {\n    if (seen.has(resource.path)) continue;\n    seen.add(resource.path);\n    merged.push(resource);\n  }\n  return merged;\n}\n\nasync function selectGrantedWorkspaceResourceRows(input: {\n  resourceId?: string;\n  path?: string;\n  pathPrefix?: string;\n  workspaceAppId?: string | null;\n  userEmail?: string | null;\n  orgId?: string | null;\n}): Promise<any[]> {\n  const appId = currentWorkspaceAppId(input.workspaceAppId);\n  const { userEmail, orgId } = requestScopedResourceIdentity(input);\n  if (!appId || (!userEmail && !orgId)) return [];\n\n  const conditions = [\"wr.scope = ?\", \"wg.status = ?\", \"wg.app_id = ?\"];\n  const args: unknown[] = [\"selected\", \"active\", appId];\n\n  if (input.resourceId) {\n    conditions.push(\"wr.id = ?\");\n    args.push(input.resourceId);\n  }\n  if (input.path) {\n    conditions.push(\"wr.path = ?\");\n    args.push(input.path);\n  }\n  if (input.pathPrefix) {\n    conditions.push(\"wr.path LIKE ? ESCAPE '\\\\'\");\n    args.push(prefixLike(input.pathPrefix));\n  }\n\n  if (orgId) {\n    conditions.push(\"wr.org_id = ?\", \"wg.org_id = ?\");\n    args.push(orgId, orgId);\n  } else if (userEmail) {\n    conditions.push(\n      \"wr.owner_email = ?\",\n      \"wr.org_id IS NULL\",\n      \"wg.owner_email = ?\",\n      \"wg.org_id IS NULL\",\n    );\n    args.push(userEmail, userEmail);\n  }\n\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `\n      SELECT\n        wr.id,\n        wr.kind,\n        wr.name,\n        wr.description,\n        wr.path,\n        wr.content,\n        wr.created_at,\n        wr.updated_at,\n        wg.id AS grant_id,\n        wg.app_id AS app_id\n      FROM workspace_resources wr\n      INNER JOIN workspace_resource_grants wg ON wg.resource_id = wr.id\n      WHERE ${conditions.join(\" AND \")}\n      ORDER BY wr.updated_at DESC\n    `,\n    args,\n  });\n  return rows;\n}\n\nasync function grantedWorkspaceResources(input: {\n  pathPrefix?: string;\n  workspaceAppId?: string | null;\n  userEmail?: string | null;\n  orgId?: string | null;\n}): Promise<Resource[]> {\n  try {\n    const rows = await selectGrantedWorkspaceResourceRows(input);\n    return rows.map(rowToGrantedWorkspaceResource);\n  } catch {\n    // Dispatch workspace-resource tables are optional for standalone apps.\n    return [];\n  }\n}\n\nasync function grantedWorkspaceResourceById(\n  id: string,\n  options?: ResourceResolutionOptions,\n): Promise<Resource | null> {\n  const resourceId = physicalWorkspaceResourceId(id);\n  if (!resourceId) return null;\n  try {\n    const rows = await selectGrantedWorkspaceResourceRows({\n      resourceId,\n      workspaceAppId: options?.workspaceAppId,\n      userEmail: options?.userEmail,\n      orgId: options?.orgId,\n    });\n    return rows[0] ? rowToGrantedWorkspaceResource(rows[0]) : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function grantedWorkspaceResourceByPath(\n  path: string,\n  options?: ResourceResolutionOptions,\n): Promise<Resource | null> {\n  try {\n    const rows = await selectGrantedWorkspaceResourceRows({\n      path,\n      workspaceAppId: options?.workspaceAppId,\n      userEmail: options?.userEmail,\n      orgId: options?.orgId,\n    });\n    return rows[0] ? rowToGrantedWorkspaceResource(rows[0]) : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function cleanupExpiredAgentScratchResources(\n  client: DbExec,\n): Promise<void> {\n  const now = Date.now();\n  if (now - _lastScratchCleanupAt < SCRATCH_CLEANUP_INTERVAL_MS) return;\n  _lastScratchCleanupAt = now;\n  await client.execute({\n    sql: `DELETE FROM resources WHERE visibility = ? AND expires_at IS NOT NULL AND expires_at <= ?`,\n    args: [\"agent_scratch\", now],\n  });\n}\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = _doEnsureTable().catch((err) => {\n      // Don't cache the rejection — let the next caller retry a fresh init.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nasync function _doEnsureTable(): Promise<void> {\n  const client = getDbExec();\n  const createSql = `\n    CREATE TABLE IF NOT EXISTS resources (\n      id TEXT PRIMARY KEY,\n      path TEXT NOT NULL,\n      owner TEXT NOT NULL,\n      content TEXT NOT NULL DEFAULT '',\n      mime_type TEXT NOT NULL DEFAULT 'text/markdown',\n      size ${intType()} NOT NULL DEFAULT 0,\n      created_at ${intType()} NOT NULL,\n      updated_at ${intType()} NOT NULL,\n      created_by TEXT NOT NULL DEFAULT 'user',\n      visibility TEXT NOT NULL DEFAULT 'workspace',\n      thread_id TEXT,\n      run_id TEXT,\n      expires_at ${intType()},\n      metadata TEXT,\n      UNIQUE(path, owner)\n    )\n  `;\n\n  if (isPostgres()) {\n    // Hot path: the `resources` table and its additive columns are virtually\n    // always already present in production. Issuing `CREATE TABLE`/`ALTER\n    // TABLE` still takes an ACCESS EXCLUSIVE lock that, in a fresh\n    // background-worker process behind a concurrent connection on the shared\n    // Neon DB, can block ~indefinitely. The ensure* wrappers probe\n    // `information_schema` first (plain reads, no lock) and run DDL ONLY for\n    // what is actually missing, bounded by a transaction-scoped `lock_timeout`.\n    // If a swallowed lock-timeout leaves the schema still missing they RE-PROBE\n    // and THROW rather than letting init memoize success against absent schema.\n    await ensureTableExists(\"resources\", createSql);\n    // Additive columns — guarded so the hot path (columns already present)\n    // skips the ACCESS EXCLUSIVE ALTER entirely.\n    const pgColumns: Array<[string, string]> = [\n      [\"created_by\", \"TEXT NOT NULL DEFAULT 'user'\"],\n      [\"visibility\", \"TEXT NOT NULL DEFAULT 'workspace'\"],\n      [\"thread_id\", \"TEXT\"],\n      [\"run_id\", \"TEXT\"],\n      [\"expires_at\", intType()],\n      [\"metadata\", \"TEXT\"],\n    ];\n    for (const [col, def] of pgColumns) {\n      await ensureColumnExists(\n        \"resources\",\n        col,\n        `ALTER TABLE resources ADD COLUMN IF NOT EXISTS ${col} ${def}`,\n      );\n    }\n  } else {\n    // SQLite (local dev): no lock problem — keep the original behaviour using\n    // `retryOnDdlRace` + `ensureResourceColumn` (duplicate-column catch).\n    await retryOnDdlRace(() => client.execute(createSql));\n    await ensureResourceColumn(\n      client,\n      \"created_by TEXT NOT NULL DEFAULT 'user'\",\n    );\n    await ensureResourceColumn(\n      client,\n      \"visibility TEXT NOT NULL DEFAULT 'workspace'\",\n    );\n    await ensureResourceColumn(client, \"thread_id TEXT\");\n    await ensureResourceColumn(client, \"run_id TEXT\");\n    await ensureResourceColumn(client, `expires_at ${intType()}`);\n    await ensureResourceColumn(client, \"metadata TEXT\");\n  }\n\n  // Older deployments have 32-bit timestamp columns; on Postgres the\n  // `Date.now()` written on insert/update overflows int4. Widen in place\n  // (no-op once done / on fresh DBs).\n  await widenIntColumnsToBigInt(\"resources\", [\n    \"created_at\",\n    \"updated_at\",\n    \"expires_at\",\n  ]);\n\n  // Seed default shared resources if they don't exist (INSERT OR IGNORE to avoid race conditions)\n  const now = Date.now();\n  const seedSql = isPostgres()\n    ? `INSERT INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT (path, owner) DO NOTHING`\n    : `INSERT OR IGNORE INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`;\n\n  // AGENTS.md — shared agent instructions\n  const agentsSize = Buffer.byteLength(DEFAULT_AGENTS_SHARED_MD, \"utf8\");\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"AGENTS.md\",\n      SHARED_OWNER,\n      DEFAULT_AGENTS_SHARED_MD,\n      \"text/markdown\",\n      agentsSize,\n      now,\n      now,\n    ],\n  });\n\n  // LEARNINGS.md — shared learnings (preferences, corrections, patterns)\n  const learningsSize = Buffer.byteLength(DEFAULT_LEARNINGS_SHARED_MD, \"utf8\");\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"LEARNINGS.md\",\n      SHARED_OWNER,\n      DEFAULT_LEARNINGS_SHARED_MD,\n      \"text/markdown\",\n      learningsSize,\n      now,\n      now,\n    ],\n  });\n\n  await migrateDefaultResourcePath({\n    client,\n    owner: SHARED_OWNER,\n    fromPath: \"skills/learn-shared.md\",\n    toPath: \"skills/learn-shared/SKILL.md\",\n    defaultContent: DEFAULT_SKILL_LEARN_SHARED_MD,\n  });\n\n  // skills/learn-shared/SKILL.md — shared skill for updating shared LEARNINGS.md\n  const learnSharedSize = Buffer.byteLength(\n    DEFAULT_SKILL_LEARN_SHARED_MD,\n    \"utf8\",\n  );\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"skills/learn-shared/SKILL.md\",\n      SHARED_OWNER,\n      DEFAULT_SKILL_LEARN_SHARED_MD,\n      \"text/markdown\",\n      learnSharedSize,\n      now,\n      now,\n    ],\n  });\n\n  // Seed built-in agents as shared resources under remote-agents/. ALWAYS\n  // use the production URL here, never the env-resolved devUrl. The seed\n  // runs once per DB (ON CONFLICT DO NOTHING), so a localhost URL written\n  // during a dev run sticks forever — including when that DB is later used\n  // by a prod deploy and the override wins over the built-in's prod URL.\n  // (Verified problem: `dispatch.agent-native.com` had every remote-agents\n  // entry pointing at localhost from an early-seed run, breaking call-agent\n  // outbound from Lambda for ~12h before this was caught.)\n  try {\n    const { getBuiltinAgents, BUILTIN_AGENTS_FOR_SEEDING } =\n      await import(\"../server/agent-discovery.js\");\n    void getBuiltinAgents; // referenced to keep type-only import alive\n    const builtins = BUILTIN_AGENTS_FOR_SEEDING;\n    for (const agent of builtins) {\n      const agentJson = JSON.stringify(\n        {\n          id: agent.id,\n          name: agent.name,\n          description: agent.description,\n          url: agent.url, // always prod\n          color: agent.color,\n        },\n        null,\n        2,\n      );\n      const agentSize = Buffer.byteLength(agentJson, \"utf8\");\n      await client.execute({\n        sql: seedSql,\n        args: [\n          crypto.randomUUID(),\n          `remote-agents/${agent.id}.json`,\n          SHARED_OWNER,\n          agentJson,\n          \"application/json\",\n          agentSize,\n          now,\n          now,\n        ],\n      });\n    }\n  } catch {\n    // Agent discovery not available — skip seeding\n  }\n\n  // One-time migration: rename legacy agents/*.json (A2A manifests) to\n  // remote-agents/*.json so they live in their own folder, separate from\n  // custom agents (agents/*.md).\n  try {\n    const legacy = await client.execute({\n      sql: `SELECT id, path FROM resources WHERE path LIKE ? AND path LIKE ?`,\n      args: [\"agents/%\", \"%.json\"],\n    });\n    const rows = (legacy.rows ?? []) as Array<{ id: string; path: string }>;\n    for (const row of rows) {\n      const newPath = row.path.replace(/^agents\\//, \"remote-agents/\");\n      try {\n        await client.execute({\n          sql: `UPDATE resources SET path = ?, updated_at = ? WHERE id = ?`,\n          args: [newPath, Date.now(), row.id],\n        });\n      } catch {\n        // Skip if destination path already exists (unique constraint) —\n        // we'll leave the old row in place; readers accept both paths and\n        // canonical remote-agents/ entries win when both exist.\n      }\n    }\n  } catch {\n    // Migration best-effort\n  }\n}\n\nconst _personalSeeded = new Set<string>();\n\n/**\n * Seed personal AGENTS.md and LEARNINGS.md for a user if they don't exist.\n * Called when listing resources or from the agent chat plugin.\n */\nexport async function ensurePersonalDefaults(owner: string): Promise<void> {\n  if (\n    owner === SHARED_OWNER ||\n    owner === WORKSPACE_OWNER ||\n    _personalSeeded.has(owner)\n  ) {\n    return;\n  }\n  await ensureTable();\n\n  const client = getDbExec();\n  const now = Date.now();\n  const seedSql = isPostgres()\n    ? `INSERT INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT (path, owner) DO NOTHING`\n    : `INSERT OR IGNORE INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`;\n\n  const agentsSize = Buffer.byteLength(DEFAULT_AGENTS_PERSONAL_MD, \"utf8\");\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"AGENTS.md\",\n      owner,\n      DEFAULT_AGENTS_PERSONAL_MD,\n      \"text/markdown\",\n      agentsSize,\n      now,\n      now,\n    ],\n  });\n\n  const learningsSize = Buffer.byteLength(\n    DEFAULT_LEARNINGS_PERSONAL_MD,\n    \"utf8\",\n  );\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"LEARNINGS.md\",\n      owner,\n      DEFAULT_LEARNINGS_PERSONAL_MD,\n      \"text/markdown\",\n      learningsSize,\n      now,\n      now,\n    ],\n  });\n\n  // memory/MEMORY.md — personal structured memory index\n  const memoryIndexContent = \"# Memory Index\\n\";\n  const memoryIndexSize = Buffer.byteLength(memoryIndexContent, \"utf8\");\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"memory/MEMORY.md\",\n      owner,\n      memoryIndexContent,\n      \"text/markdown\",\n      memoryIndexSize,\n      now,\n      now,\n    ],\n  });\n\n  await migrateDefaultResourcePath({\n    client,\n    owner,\n    fromPath: \"skills/learn.md\",\n    toPath: \"skills/learn/SKILL.md\",\n    defaultContent: DEFAULT_SKILL_LEARN_MD,\n  });\n\n  // skills/learn/SKILL.md — personal skill for updating memory\n  const learnSize = Buffer.byteLength(DEFAULT_SKILL_LEARN_MD, \"utf8\");\n  await client.execute({\n    sql: seedSql,\n    args: [\n      crypto.randomUUID(),\n      \"skills/learn/SKILL.md\",\n      owner,\n      DEFAULT_SKILL_LEARN_MD,\n      \"text/markdown\",\n      learnSize,\n      now,\n      now,\n    ],\n  });\n\n  // Mark seeded only after all seeds succeed. If any await above throws (e.g. a\n  // transient DB error), the owner is NOT cached as seeded, so the next request\n  // retries instead of permanently skipping seeding. Seeds use INSERT OR IGNORE\n  // / ON CONFLICT DO NOTHING, so a concurrent re-run is harmless.\n  _personalSeeded.add(owner);\n}\n\nfunction rowToResource(row: any): Resource {\n  return {\n    id: row.id as string,\n    path: row.path as string,\n    owner: row.owner as string,\n    content: row.content as string,\n    mimeType: row.mime_type as string,\n    size: Number(row.size),\n    createdAt: Number(row.created_at),\n    updatedAt: Number(row.updated_at),\n    createdBy: normalizeCreatedBy(row.created_by),\n    visibility: normalizeVisibility(row.visibility),\n    threadId: nullableString(row.thread_id),\n    runId: nullableString(row.run_id),\n    expiresAt: nullableNumber(row.expires_at),\n    metadata: nullableString(row.metadata),\n  };\n}\n\nfunction rowToMeta(row: any): ResourceMeta {\n  return {\n    id: row.id as string,\n    path: row.path as string,\n    owner: row.owner as string,\n    mimeType: row.mime_type as string,\n    size: Number(row.size),\n    createdAt: Number(row.created_at),\n    updatedAt: Number(row.updated_at),\n    createdBy: normalizeCreatedBy(row.created_by),\n    visibility: normalizeVisibility(row.visibility),\n    threadId: nullableString(row.thread_id),\n    runId: nullableString(row.run_id),\n    expiresAt: nullableNumber(row.expires_at),\n    metadata: nullableString(row.metadata),\n  };\n}\n\nfunction resourceToMeta(resource: Resource): ResourceMeta {\n  const { content: _content, ...meta } = resource;\n  return meta;\n}\n\nexport async function resourceGet(\n  id: string,\n  options?: ResourceResolutionOptions,\n): Promise<Resource | null> {\n  await ensureTable();\n  if (isLocalWorkspaceResourceId(id)) {\n    return localWorkspaceResourceById(id);\n  }\n  const client = getDbExec();\n  await cleanupExpiredAgentScratchResources(client);\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM resources WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return grantedWorkspaceResourceById(id, options);\n  return rowToResource(rows[0]);\n}\n\nexport async function resourceGetByPath(\n  owner: string,\n  path: string,\n  options?: ResourceResolutionOptions,\n): Promise<Resource | null> {\n  await ensureTable();\n  if (owner === WORKSPACE_OWNER) {\n    const local = await localWorkspaceResourceByPath(path);\n    if (local) return local;\n  }\n  const client = getDbExec();\n  await cleanupExpiredAgentScratchResources(client);\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM resources WHERE owner = ? AND path = ?`,\n    args: [owner, path],\n  });\n  if (rows.length === 0 && owner === WORKSPACE_OWNER) {\n    return grantedWorkspaceResourceByPath(path, options);\n  }\n  if (rows.length === 0) return null;\n  return rowToResource(rows[0]);\n}\n\nexport async function resourcePut(\n  owner: string,\n  path: string,\n  content: string,\n  mimeType?: string,\n  options?: ResourceWriteOptions,\n): Promise<Resource> {\n  await ensureTable();\n  if (\n    owner === WORKSPACE_OWNER &&\n    (await shouldHandleWorkspaceResourceAsLocal(path))\n  ) {\n    const written = await writeLocalWorkspaceResource({ path, content });\n    const resource = localWorkspaceResourceToResource({\n      ...written,\n      content,\n    });\n    emitResourceChange(\n      resource.id,\n      resource.path,\n      resource.owner,\n      options?.requestSource,\n    );\n    return resource;\n  }\n  if (owner === WORKSPACE_OWNER) {\n    await assertWritableWorkspaceResourcePath(path);\n  }\n  const client = getDbExec();\n  const now = Date.now();\n  const size = Buffer.byteLength(content, \"utf8\");\n  const mime = mimeType || \"text/markdown\";\n\n  // Check for existing resource to preserve ID on upsert\n  const { rows: existing } = await client.execute({\n    sql: `SELECT id, created_at, created_by, visibility, thread_id, run_id, expires_at, metadata FROM resources WHERE owner = ? AND path = ?`,\n    args: [owner, path],\n  });\n  const existingRow = existing[0] as\n    | {\n        id: string;\n        created_at: number;\n        created_by?: string | null;\n        visibility?: string | null;\n        thread_id?: string | null;\n        run_id?: string | null;\n        expires_at?: number | null;\n        metadata?: string | null;\n      }\n    | undefined;\n\n  const id =\n    existing.length > 0 ? (existingRow?.id as string) : crypto.randomUUID();\n  const createdAt = existingRow ? Number(existingRow.created_at) : now;\n  const createdBy = normalizeCreatedBy(\n    hasOption(options, \"createdBy\")\n      ? options?.createdBy\n      : existingRow?.created_by,\n  );\n  const visibility = normalizeVisibility(\n    hasOption(options, \"visibility\")\n      ? options?.visibility\n      : existingRow?.visibility,\n  );\n  const threadId = hasOption(options, \"threadId\")\n    ? (options?.threadId ?? null)\n    : nullableString(existingRow?.thread_id);\n  const runId = hasOption(options, \"runId\")\n    ? (options?.runId ?? null)\n    : nullableString(existingRow?.run_id);\n  let expiresAt = hasOption(options, \"expiresAt\")\n    ? (options?.expiresAt ?? null)\n    : nullableNumber(existingRow?.expires_at);\n  if (visibility === \"agent_scratch\" && expiresAt === null) {\n    expiresAt = now + AGENT_SCRATCH_TTL_MS;\n  }\n  if (visibility === \"workspace\" && !hasOption(options, \"expiresAt\")) {\n    expiresAt = null;\n  }\n  const serializedMetadata = serializeMetadata(options?.metadata);\n  const metadata =\n    serializedMetadata !== undefined\n      ? serializedMetadata\n      : nullableString(existingRow?.metadata);\n\n  await client.execute({\n    sql: isPostgres()\n      ? `INSERT INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at, created_by, visibility, thread_id, run_id, expires_at, metadata) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT (path, owner) DO UPDATE SET id=EXCLUDED.id, content=EXCLUDED.content, mime_type=EXCLUDED.mime_type, size=EXCLUDED.size, updated_at=EXCLUDED.updated_at, created_by=EXCLUDED.created_by, visibility=EXCLUDED.visibility, thread_id=EXCLUDED.thread_id, run_id=EXCLUDED.run_id, expires_at=EXCLUDED.expires_at, metadata=EXCLUDED.metadata`\n      : `INSERT OR REPLACE INTO resources (id, path, owner, content, mime_type, size, created_at, updated_at, created_by, visibility, thread_id, run_id, expires_at, metadata) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      path,\n      owner,\n      content,\n      mime,\n      size,\n      createdAt,\n      now,\n      createdBy,\n      visibility,\n      threadId,\n      runId,\n      expiresAt,\n      metadata,\n    ],\n  });\n\n  emitResourceChange(id, path, owner, options?.requestSource);\n\n  return {\n    id,\n    path,\n    owner,\n    content,\n    mimeType: mime,\n    size,\n    createdAt,\n    updatedAt: now,\n    createdBy,\n    visibility,\n    threadId,\n    runId,\n    expiresAt,\n    metadata,\n  };\n}\n\nexport async function resourceDelete(id: string): Promise<boolean> {\n  await ensureTable();\n  if (isLocalWorkspaceResourceId(id)) {\n    const resourcePath = localWorkspaceResourcePathFromId(id);\n    if (!resourcePath) return false;\n    const deleted = await deleteLocalWorkspaceResource({ path: resourcePath });\n    if (deleted) {\n      emitResourceDelete(id, resourcePath, WORKSPACE_OWNER);\n    }\n    return deleted;\n  }\n  const client = getDbExec();\n\n  // Get resource info for emitter before deleting\n  const { rows } = await client.execute({\n    sql: `SELECT path, owner FROM resources WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return false;\n\n  const result = await client.execute({\n    sql: `DELETE FROM resources WHERE id = ?`,\n    args: [id],\n  });\n  const deleted = result.rowsAffected > 0;\n  if (deleted) {\n    emitResourceDelete(id, rows[0].path as string, rows[0].owner as string);\n  }\n  return deleted;\n}\n\nexport async function resourceDeleteByPath(\n  owner: string,\n  path: string,\n): Promise<boolean> {\n  await ensureTable();\n  if (\n    owner === WORKSPACE_OWNER &&\n    (await shouldHandleWorkspaceResourceAsLocal(path))\n  ) {\n    const existing = await localWorkspaceResourceByPath(path);\n    const deleted = await deleteLocalWorkspaceResource({ path });\n    if (deleted) {\n      emitResourceDelete(existing?.id ?? \"\", path, WORKSPACE_OWNER);\n      return true;\n    }\n  }\n  if (owner === WORKSPACE_OWNER) {\n    await assertWritableWorkspaceResourcePath(path);\n  }\n  const client = getDbExec();\n\n  // Get resource info for emitter before deleting\n  const { rows } = await client.execute({\n    sql: `SELECT id FROM resources WHERE owner = ? AND path = ?`,\n    args: [owner, path],\n  });\n  if (rows.length === 0) return false;\n\n  const result = await client.execute({\n    sql: `DELETE FROM resources WHERE owner = ? AND path = ?`,\n    args: [owner, path],\n  });\n  const deleted = result.rowsAffected > 0;\n  if (deleted) {\n    emitResourceDelete(rows[0].id as string, path, owner);\n  }\n  return deleted;\n}\n\nexport async function resourceList(\n  owner: string,\n  pathPrefix?: string,\n  options?: ResourceListOptions,\n): Promise<ResourceMeta[]> {\n  await ensureTable();\n  const client = getDbExec();\n  await cleanupExpiredAgentScratchResources(client);\n  const visibilitySql = scratchFilterSql(options);\n\n  if (pathPrefix) {\n    const { rows } = await client.execute({\n      sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\\\'${visibilitySql}`,\n      args: [owner, prefixLike(pathPrefix)],\n    });\n    const resources = rows.map(rowToMeta);\n    if (owner !== WORKSPACE_OWNER) return resources;\n    const local = await localWorkspaceResourceMetas(pathPrefix);\n    const granted = await grantedWorkspaceResources({\n      pathPrefix,\n      workspaceAppId: options?.workspaceAppId,\n      userEmail: options?.userEmail,\n      orgId: options?.orgId,\n    });\n    return mergeResourceMetas(\n      local,\n      mergeResourceMetas(resources, granted.map(resourceToMeta)),\n    );\n  }\n\n  const { rows } = await client.execute({\n    sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ?${visibilitySql}`,\n    args: [owner],\n  });\n  const resources = rows.map(rowToMeta);\n  if (owner !== WORKSPACE_OWNER) return resources;\n  const local = await localWorkspaceResourceMetas();\n  const granted = await grantedWorkspaceResources({\n    workspaceAppId: options?.workspaceAppId,\n    userEmail: options?.userEmail,\n    orgId: options?.orgId,\n  });\n  return mergeResourceMetas(\n    local,\n    mergeResourceMetas(resources, granted.map(resourceToMeta)),\n  );\n}\n\nexport async function resourceListAccessible(\n  userEmail: string,\n  pathPrefix?: string,\n  options?: ResourceListOptions,\n): Promise<ResourceMeta[]> {\n  await ensureTable();\n  const client = getDbExec();\n  await cleanupExpiredAgentScratchResources(client);\n  const visibilitySql = scratchFilterSql(options);\n\n  if (pathPrefix) {\n    const { rows } = await client.execute({\n      sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\\\'${visibilitySql}\n            UNION\n            SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\\\'${visibilitySql}\n            UNION\n            SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\\\'${visibilitySql}`,\n      args: [\n        userEmail,\n        prefixLike(pathPrefix),\n        SHARED_OWNER,\n        prefixLike(pathPrefix),\n        WORKSPACE_OWNER,\n        prefixLike(pathPrefix),\n      ],\n    });\n    const resources = rows.map(rowToMeta);\n    const local = await localWorkspaceResourceMetas(pathPrefix);\n    const granted = await grantedWorkspaceResources({\n      pathPrefix,\n      workspaceAppId: options?.workspaceAppId,\n      userEmail,\n      orgId: options?.orgId,\n    });\n    return mergeResourceMetas(\n      local,\n      mergeResourceMetas(resources, granted.map(resourceToMeta)),\n    );\n  }\n\n  const { rows } = await client.execute({\n    sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ?${visibilitySql}\n          UNION\n          SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ?${visibilitySql}\n          UNION\n          SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ?${visibilitySql}`,\n    args: [userEmail, SHARED_OWNER, WORKSPACE_OWNER],\n  });\n  const resources = rows.map(rowToMeta);\n  const local = await localWorkspaceResourceMetas();\n  const granted = await grantedWorkspaceResources({\n    workspaceAppId: options?.workspaceAppId,\n    userEmail,\n    orgId: options?.orgId,\n  });\n  return mergeResourceMetas(\n    local,\n    mergeResourceMetas(resources, granted.map(resourceToMeta)),\n  );\n}\n\nexport async function resourceEffectiveContext(\n  userEmail: string,\n  path: string,\n  options?: ResourceResolutionOptions,\n): Promise<EffectiveResourceContext> {\n  await ensureTable();\n\n  const workspace = await resourceGetByPath(WORKSPACE_OWNER, path, {\n    ...options,\n    userEmail,\n  });\n  const shared = await resourceGetByPath(SHARED_OWNER, path);\n  const personal = await resourceGetByPath(userEmail, path);\n  const effective = personal ?? shared ?? workspace ?? null;\n  const effectiveScope: ResourceInheritanceScope | null = personal\n    ? \"personal\"\n    : shared\n      ? \"shared\"\n      : workspace\n        ? \"workspace\"\n        : null;\n\n  const layerDefs: Array<{\n    scope: ResourceInheritanceScope;\n    label: string;\n    owner: string;\n    resource: Resource | null;\n    canWrite: boolean;\n  }> = [\n    {\n      scope: \"workspace\",\n      label: \"Workspace default\",\n      owner: WORKSPACE_OWNER,\n      resource: workspace,\n      canWrite: workspace ? isLocalWorkspaceResourceId(workspace.id) : false,\n    },\n    {\n      scope: \"shared\",\n      label: \"Organization/app override\",\n      owner: SHARED_OWNER,\n      resource: shared,\n      canWrite: true,\n    },\n    {\n      scope: \"personal\",\n      label: \"Personal override\",\n      owner: userEmail,\n      resource: personal,\n      canWrite: true,\n    },\n  ];\n\n  return {\n    path,\n    effectiveResource: effective ? resourceToMeta(effective) : null,\n    effectiveScope,\n    layers: layerDefs.map((layer) => ({\n      scope: layer.scope,\n      label: layer.label,\n      owner: layer.owner,\n      resource: layer.resource ? resourceToMeta(layer.resource) : null,\n      exists: !!layer.resource,\n      effective: !!layer.resource && layer.resource.id === effective?.id,\n      overridden: !!layer.resource && layer.resource.id !== effective?.id,\n      canWrite: layer.canWrite,\n    })),\n  };\n}\n\n/**\n * List all resources matching a path prefix across ALL owners.\n * Used by the recurring jobs scheduler to find all job resources.\n */\nexport async function resourceListAllOwners(\n  pathPrefix: string,\n): Promise<Resource[]> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM resources WHERE path LIKE ? ESCAPE '\\\\'`,\n    args: [prefixLike(pathPrefix)],\n  });\n  const localResources = (\n    await Promise.all(\n      (\n        await localWorkspaceResourceMetas(pathPrefix)\n      ).map((resource) => resourceGet(resource.id)),\n    )\n  ).filter((resource): resource is Resource => !!resource);\n  const localPaths = new Set(localResources.map((resource) => resource.path));\n  return [\n    ...localResources,\n    ...rows\n      .map(rowToResource)\n      .filter((resource) => !localPaths.has(resource.path)),\n  ];\n}\n\nexport async function resourceMove(\n  id: string,\n  newPath: string,\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n\n  // Get current resource info\n  const { rows } = await client.execute({\n    sql: `SELECT path, owner FROM resources WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return false;\n\n  const result = await client.execute({\n    sql: `UPDATE resources SET path = ?, updated_at = ? WHERE id = ?`,\n    args: [newPath, now, id],\n  });\n  const moved = result.rowsAffected > 0;\n  if (moved) {\n    emitResourceChange(id, newPath, rows[0].owner as string);\n  }\n  return moved;\n}\n"]}

package/dist/secrets/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/secrets/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAcH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AA8EjD;;;GAGG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI3C;AAMD,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CA0C3E;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAqBlC;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,SAAS,GACb,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAItD;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA2B5B;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,UAAU,EAAE,CAAC,CA0BvB;AAeD,wBAAsB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAStE"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/secrets/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AA8EjD;;;GAGG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI3C;AAMD,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CA0C3E;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAqBlC;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,SAAS,GACb,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAItD;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA2B5B;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,UAAU,EAAE,CAAC,CA0BvB;AAeD,wBAAsB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAStE"}

package/dist/secrets/storage.js

@@ -13,7 +13,7 @@
  */
 import { randomUUID } from "node:crypto";
 import { getDbExec, isPostgres } from "../db/client.js";
-import { pgColumnExists, pgTableExists, runGuardedDdl, } from "../db/ddl-guard.js";
+import { ensureColumnExists, ensureTableExists } from "../db/ddl-guard.js";
 import { encryptSecretValue as encryptValue, decryptSecretValue as decryptValue, } from "./crypto.js";
 import { APP_SECRETS_CREATE_SQL } from "./schema.js";
 // ---------------------------------------------------------------------------
@@ -34,19 +34,15 @@ async function ensureTable() {
                 // virtually always already present. Issuing `CREATE`/`ALTER` would
                 // still take an ACCESS EXCLUSIVE lock — which, in a fresh background
                 // worker process behind a concurrent connection on the shared Neon DB,
-                // can block ~indefinitely. So check `information_schema` first (a plain
-                // read, no lock) and run DDL ONLY for what is actually missing. When
-                // DDL must run, `runGuardedDdl` wraps it in a transaction-scoped
-                // `lock_timeout` so a contended lock fails fast instead of hanging.
-                if (!(await pgTableExists("app_secrets"))) {
-                    await runGuardedDdl(createSql);
-                }
-                if (!(await pgColumnExists("app_secrets", "description"))) {
-                    await runGuardedDdl(`ALTER TABLE app_secrets ADD COLUMN IF NOT EXISTS description TEXT`);
-                }
-                if (!(await pgColumnExists("app_secrets", "url_allowlist"))) {
-                    await runGuardedDdl(`ALTER TABLE app_secrets ADD COLUMN IF NOT EXISTS url_allowlist TEXT`);
-                }
+                // can block ~indefinitely. `ensureTableExists` / `ensureColumnExists`
+                // check `information_schema` first (a plain read, no lock) and run DDL
+                // ONLY for what is actually missing, wrapping any DDL that must run in a
+                // transaction-scoped `lock_timeout` so a contended lock fails fast. They
+                // also re-probe after a swallowed lock-timeout and THROW if the schema
+                // is still missing, so a timed-out DDL never poisons this init memo.
+                await ensureTableExists("app_secrets", createSql);
+                await ensureColumnExists("app_secrets", "description", `ALTER TABLE app_secrets ADD COLUMN IF NOT EXISTS description TEXT`);
+                await ensureColumnExists("app_secrets", "url_allowlist", `ALTER TABLE app_secrets ADD COLUMN IF NOT EXISTS url_allowlist TEXT`);
                 return;
             }
             // SQLite (local dev): no ACCESS EXCLUSIVE lock problem, keep the original

package/dist/secrets/storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/secrets/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,IAAI,YAAY,EAClC,kBAAkB,IAAI,YAAY,GACnC,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,IAAI,YAAuC,CAAC;AAE5C,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,SAAS,GAAG,UAAU,EAAE;gBAC5B,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC;gBAC1D,CAAC,CAAC,sBAAsB,CAAC;YAE3B,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,kEAAkE;gBAClE,mEAAmE;gBACnE,qEAAqE;gBACrE,uEAAuE;gBACvE,wEAAwE;gBACxE,qEAAqE;gBACrE,iEAAiE;gBACjE,oEAAoE;gBACpE,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;oBAC1C,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;gBACjC,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;oBAC1D,MAAM,aAAa,CACjB,mEAAmE,CACpE,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;oBAC5D,MAAM,aAAa,CACjB,qEAAqE,CACtE,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;YAED,0EAA0E;YAC1E,sDAAsD;YACtD,uEAAuE;YACvE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAEhC,2DAA2D;YAC3D,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAClB,qDAAqD,CACtD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;YAED,2CAA2C;YAC3C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAClB,uDAAuD,CACxD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,KAAa;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AAoBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAqB;IACxD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IACvE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEtC,4EAA4E;IAC5E,0BAA0B;IAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,yEAAyE;QAC9E,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;QAChC,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE,6GAA6G;YAClH,IAAI,EAAE,CAAC,SAAS,EAAE,WAAW,IAAI,IAAI,EAAE,YAAY,IAAI,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,4JAA4J;QACjK,IAAI,EAAE;YACJ,EAAE;YACF,KAAK;YACL,OAAO;YACP,GAAG;YACH,SAAS;YACT,WAAW,IAAI,IAAI;YACnB,YAAY,IAAI,IAAI;YACpB,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAc;IAEd,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,0GAA0G;QAC/G,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAyB,CAAC,CAAC;QAC9D,OAAO;YACL,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;YACnB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;SAC3C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc;IAEd,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AAC9D,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc;IAEd,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,kJAAkJ;QACvJ,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,eAAyB,CAAC,CAAC;QAC1D,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IACD,OAAO;QACL,GAAG;QACH,KAAK;QACL,OAAO;QACP,KAAK,EAAE,UAAU;QACjB,WAAW,EAAG,GAAG,CAAC,WAA6B,IAAI,IAAI;QACvD,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,aAA8B,CAAC;QAChE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkB,EAClB,OAAe;IAEf,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,4JAA4J;QACjK,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;KACvB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,eAAyB,CAAC,CAAC;YAC1D,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,EAAE,CAAC;QAClB,CAAC;QACD,OAAO;YACL,GAAG,EAAE,GAAG,CAAC,GAAa;YACtB,KAAK;YACL,OAAO;YACP,KAAK,EAAE,UAAU;YACjB,WAAW,EAAG,GAAG,CAAC,WAA6B,IAAI,IAAI;YACvD,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,aAA8B,CAAC;YAChE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACtC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;SACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,GAAkB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAc;IAClD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAC5C,GAAG,EAAE,sEAAsE;QAC3E,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;KAC5B,CAAC,CAAC;IACH,OAAO,YAAY,GAAG,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["/**\n * Storage layer for the framework secrets registry.\n *\n * Values are encrypted at rest with AES-256-GCM. The encryption key is\n * derived from `SECRETS_ENCRYPTION_KEY` (preferred) or the existing\n * `BETTER_AUTH_SECRET` env var (fallback so templates don't need a second\n * secret during development). If neither is set in production we fall back\n * to a machine-local key derived from the cwd — the secret is still only\n * readable on this machine, but consider setting `SECRETS_ENCRYPTION_KEY`\n * for a stable, rotatable key.\n *\n * Secret values are NEVER logged and NEVER returned from any route handler.\n */\n\nimport { randomUUID } from \"node:crypto\";\n\nimport { getDbExec, isPostgres } from \"../db/client.js\";\nimport {\n  pgColumnExists,\n  pgTableExists,\n  runGuardedDdl,\n} from \"../db/ddl-guard.js\";\nimport {\n  encryptSecretValue as encryptValue,\n  decryptSecretValue as decryptValue,\n} from \"./crypto.js\";\nimport type { SecretScope } from \"./register.js\";\nimport { APP_SECRETS_CREATE_SQL } from \"./schema.js\";\n\n// ---------------------------------------------------------------------------\n// Table bootstrap\n// ---------------------------------------------------------------------------\n\nlet _initPromise: Promise<void> | undefined;\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      // Postgres version of the CREATE TABLE — the generic `INTEGER` maps to\n      // BIGINT on Postgres, which we need for millisecond timestamps.\n      const createSql = isPostgres()\n        ? APP_SECRETS_CREATE_SQL.replace(/\\bINTEGER\\b/g, \"BIGINT\")\n        : APP_SECRETS_CREATE_SQL;\n\n      if (isPostgres()) {\n        // Hot path: in production the table and both additive columns are\n        // virtually always already present. Issuing `CREATE`/`ALTER` would\n        // still take an ACCESS EXCLUSIVE lock — which, in a fresh background\n        // worker process behind a concurrent connection on the shared Neon DB,\n        // can block ~indefinitely. So check `information_schema` first (a plain\n        // read, no lock) and run DDL ONLY for what is actually missing. When\n        // DDL must run, `runGuardedDdl` wraps it in a transaction-scoped\n        // `lock_timeout` so a contended lock fails fast instead of hanging.\n        if (!(await pgTableExists(\"app_secrets\"))) {\n          await runGuardedDdl(createSql);\n        }\n        if (!(await pgColumnExists(\"app_secrets\", \"description\"))) {\n          await runGuardedDdl(\n            `ALTER TABLE app_secrets ADD COLUMN IF NOT EXISTS description TEXT`,\n          );\n        }\n        if (!(await pgColumnExists(\"app_secrets\", \"url_allowlist\"))) {\n          await runGuardedDdl(\n            `ALTER TABLE app_secrets ADD COLUMN IF NOT EXISTS url_allowlist TEXT`,\n          );\n        }\n        return;\n      }\n\n      // SQLite (local dev): no ACCESS EXCLUSIVE lock problem, keep the original\n      // create-then-additive-alter behaviour. SQLite has no\n      // `ADD COLUMN IF NOT EXISTS`, so the ALTERs stay wrapped in try/catch.\n      await client.execute(createSql);\n\n      // Additive migration: description column (for ad-hoc keys)\n      try {\n        await client.execute(\n          `ALTER TABLE app_secrets ADD COLUMN description TEXT`,\n        );\n      } catch {\n        // Column already exists — expected\n      }\n\n      // Additive migration: url_allowlist column\n      try {\n        await client.execute(\n          `ALTER TABLE app_secrets ADD COLUMN url_allowlist TEXT`,\n        );\n      } catch {\n        // Column already exists — expected\n      }\n    })().catch((err) => {\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\n// ---------------------------------------------------------------------------\n// Encryption — see ./crypto.ts (shared with per-user credentials)\n// ---------------------------------------------------------------------------\n\n/**\n * Return the last 4 characters of a secret, with any leading characters\n * masked. Used to show a preview without leaking the value.\n */\nexport function last4(value: string): string {\n  if (!value) return \"\";\n  if (value.length <= 4) return \"••••\";\n  return \"••••\" + value.slice(-4);\n}\n\n// ---------------------------------------------------------------------------\n// CRUD\n// ---------------------------------------------------------------------------\n\nexport interface SecretRef {\n  key: string;\n  scope: SecretScope;\n  scopeId: string;\n}\n\nexport interface WriteSecretArgs extends SecretRef {\n  value: string;\n  /** Optional human-readable description (used for ad-hoc keys). */\n  description?: string;\n  /** Optional JSON-stringified array of allowed URL origins. */\n  urlAllowlist?: string;\n}\n\n/**\n * Write (insert or update) a secret. The value is encrypted before being\n * stored — the caller's plaintext is never persisted. Returns the new\n * record's id.\n */\nexport async function writeAppSecret(args: WriteSecretArgs): Promise<string> {\n  await ensureTable();\n  const { key, value, scope, scopeId, description, urlAllowlist } = args;\n  if (!key || !value || !scope || !scopeId) {\n    throw new Error(\n      \"writeAppSecret: key, value, scope, and scopeId are all required\",\n    );\n  }\n  const client = getDbExec();\n  const now = Date.now();\n  const encrypted = encryptValue(value);\n\n  // Upsert by (scope, scope_id, key). Keep the existing row's id on update so\n  // references stay stable.\n  const { rows } = await client.execute({\n    sql: `SELECT id FROM app_secrets WHERE scope = ? AND scope_id = ? AND key = ?`,\n    args: [scope, scopeId, key],\n  });\n  if (rows.length > 0) {\n    const id = rows[0].id as string;\n    await client.execute({\n      sql: `UPDATE app_secrets SET encrypted_value = ?, description = ?, url_allowlist = ?, updated_at = ? WHERE id = ?`,\n      args: [encrypted, description ?? null, urlAllowlist ?? null, now, id],\n    });\n    return id;\n  }\n  const id = randomUUID();\n  await client.execute({\n    sql: `INSERT INTO app_secrets (id, scope, scope_id, key, encrypted_value, description, url_allowlist, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      scope,\n      scopeId,\n      key,\n      encrypted,\n      description ?? null,\n      urlAllowlist ?? null,\n      now,\n      now,\n    ],\n  });\n  return id;\n}\n\nexport interface ReadSecretResult {\n  value: string;\n  last4: string;\n  updatedAt: number;\n}\n\n/**\n * Read a secret's plaintext value. Returns null when not found. The caller\n * is responsible for never logging the returned value.\n */\nexport async function readAppSecret(\n  ref: SecretRef,\n): Promise<ReadSecretResult | null> {\n  await ensureTable();\n  const { key, scope, scopeId } = ref;\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT encrypted_value, updated_at FROM app_secrets WHERE scope = ? AND scope_id = ? AND key = ? LIMIT 1`,\n    args: [scope, scopeId, key],\n  });\n  if (rows.length === 0) return null;\n  try {\n    const value = decryptValue(rows[0].encrypted_value as string);\n    return {\n      value,\n      last4: last4(value),\n      updatedAt: Number(rows[0].updated_at ?? 0),\n    };\n  } catch {\n    // Decryption failure — key rotated, tampered row, etc. Don't throw up the\n    // stack in a way that could leak the ciphertext; just report missing.\n    return null;\n  }\n}\n\n/**\n * Return just the metadata for a secret (no value). Used by the list route so\n * the UI can show the \"Set\" pill and last-4 without the decrypted value going\n * over the wire.\n */\nexport async function getAppSecretMeta(\n  ref: SecretRef,\n): Promise<{ last4: string; updatedAt: number } | null> {\n  const result = await readAppSecret(ref);\n  if (!result) return null;\n  return { last4: result.last4, updatedAt: result.updatedAt };\n}\n\nexport interface SecretMeta {\n  key: string;\n  scope: SecretScope;\n  scopeId: string;\n  last4: string;\n  description: string | null;\n  urlAllowlist: string[] | null;\n  createdAt: number;\n  updatedAt: number;\n}\n\n/**\n * Read a secret's metadata, including ad-hoc fields (description, allowlist),\n * without ever decrypting or returning the plaintext value. Used by the\n * ad-hoc list route and any UI that wants to render a key tile.\n */\nexport async function readAppSecretMeta(\n  ref: SecretRef,\n): Promise<SecretMeta | null> {\n  await ensureTable();\n  const { key, scope, scopeId } = ref;\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT encrypted_value, description, url_allowlist, created_at, updated_at FROM app_secrets WHERE scope = ? AND scope_id = ? AND key = ? LIMIT 1`,\n    args: [scope, scopeId, key],\n  });\n  if (rows.length === 0) return null;\n  const row = rows[0];\n  let last4Value = \"\";\n  try {\n    const value = decryptValue(row.encrypted_value as string);\n    last4Value = last4(value);\n  } catch {\n    last4Value = \"\";\n  }\n  return {\n    key,\n    scope,\n    scopeId,\n    last4: last4Value,\n    description: (row.description as string | null) ?? null,\n    urlAllowlist: parseAllowlist(row.url_allowlist as string | null),\n    createdAt: Number(row.created_at ?? 0),\n    updatedAt: Number(row.updated_at ?? 0),\n  };\n}\n\n/**\n * List all secrets for a given scope. Returns metadata only — values are\n * never decrypted or returned. Used by the ad-hoc list route to surface\n * user-created keys.\n */\nexport async function listAppSecretsForScope(\n  scope: SecretScope,\n  scopeId: string,\n): Promise<SecretMeta[]> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT key, encrypted_value, description, url_allowlist, created_at, updated_at FROM app_secrets WHERE scope = ? AND scope_id = ? ORDER BY updated_at DESC`,\n    args: [scope, scopeId],\n  });\n  return rows.map((row) => {\n    let last4Value = \"\";\n    try {\n      const value = decryptValue(row.encrypted_value as string);\n      last4Value = last4(value);\n    } catch {\n      last4Value = \"\";\n    }\n    return {\n      key: row.key as string,\n      scope,\n      scopeId,\n      last4: last4Value,\n      description: (row.description as string | null) ?? null,\n      urlAllowlist: parseAllowlist(row.url_allowlist as string | null),\n      createdAt: Number(row.created_at ?? 0),\n      updatedAt: Number(row.updated_at ?? 0),\n    };\n  });\n}\n\nfunction parseAllowlist(raw: string | null): string[] | null {\n  if (!raw) return null;\n  try {\n    const parsed = JSON.parse(raw);\n    if (Array.isArray(parsed) && parsed.every((v) => typeof v === \"string\")) {\n      return parsed;\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport async function deleteAppSecret(ref: SecretRef): Promise<boolean> {\n  await ensureTable();\n  const { key, scope, scopeId } = ref;\n  const client = getDbExec();\n  const { rowsAffected } = await client.execute({\n    sql: `DELETE FROM app_secrets WHERE scope = ? AND scope_id = ? AND key = ?`,\n    args: [scope, scopeId, key],\n  });\n  return rowsAffected > 0;\n}\n"]}
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/secrets/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EACL,kBAAkB,IAAI,YAAY,EAClC,kBAAkB,IAAI,YAAY,GACnC,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,IAAI,YAAuC,CAAC;AAE5C,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,SAAS,GAAG,UAAU,EAAE;gBAC5B,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC;gBAC1D,CAAC,CAAC,sBAAsB,CAAC;YAE3B,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,kEAAkE;gBAClE,mEAAmE;gBACnE,qEAAqE;gBACrE,uEAAuE;gBACvE,sEAAsE;gBACtE,uEAAuE;gBACvE,yEAAyE;gBACzE,yEAAyE;gBACzE,uEAAuE;gBACvE,qEAAqE;gBACrE,MAAM,iBAAiB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBAClD,MAAM,kBAAkB,CACtB,aAAa,EACb,aAAa,EACb,mEAAmE,CACpE,CAAC;gBACF,MAAM,kBAAkB,CACtB,aAAa,EACb,eAAe,EACf,qEAAqE,CACtE,CAAC;gBACF,OAAO;YACT,CAAC;YAED,0EAA0E;YAC1E,sDAAsD;YACtD,uEAAuE;YACvE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAEhC,2DAA2D;YAC3D,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAClB,qDAAqD,CACtD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;YAED,2CAA2C;YAC3C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAClB,uDAAuD,CACxD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,KAAa;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AAoBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAqB;IACxD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IACvE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEtC,4EAA4E;IAC5E,0BAA0B;IAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,yEAAyE;QAC9E,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;QAChC,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE,6GAA6G;YAClH,IAAI,EAAE,CAAC,SAAS,EAAE,WAAW,IAAI,IAAI,EAAE,YAAY,IAAI,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,4JAA4J;QACjK,IAAI,EAAE;YACJ,EAAE;YACF,KAAK;YACL,OAAO;YACP,GAAG;YACH,SAAS;YACT,WAAW,IAAI,IAAI;YACnB,YAAY,IAAI,IAAI;YACpB,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAc;IAEd,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,0GAA0G;QAC/G,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAyB,CAAC,CAAC;QAC9D,OAAO;YACL,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;YACnB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;SAC3C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc;IAEd,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AAC9D,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc;IAEd,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,kJAAkJ;QACvJ,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,eAAyB,CAAC,CAAC;QAC1D,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IACD,OAAO;QACL,GAAG;QACH,KAAK;QACL,OAAO;QACP,KAAK,EAAE,UAAU;QACjB,WAAW,EAAG,GAAG,CAAC,WAA6B,IAAI,IAAI;QACvD,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,aAA8B,CAAC;QAChE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkB,EAClB,OAAe;IAEf,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,4JAA4J;QACjK,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;KACvB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,eAAyB,CAAC,CAAC;YAC1D,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,EAAE,CAAC;QAClB,CAAC;QACD,OAAO;YACL,GAAG,EAAE,GAAG,CAAC,GAAa;YACtB,KAAK;YACL,OAAO;YACP,KAAK,EAAE,UAAU;YACjB,WAAW,EAAG,GAAG,CAAC,WAA6B,IAAI,IAAI;YACvD,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,aAA8B,CAAC;YAChE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACtC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;SACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,GAAkB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAc;IAClD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAC5C,GAAG,EAAE,sEAAsE;QAC3E,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;KAC5B,CAAC,CAAC;IACH,OAAO,YAAY,GAAG,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["/**\n * Storage layer for the framework secrets registry.\n *\n * Values are encrypted at rest with AES-256-GCM. The encryption key is\n * derived from `SECRETS_ENCRYPTION_KEY` (preferred) or the existing\n * `BETTER_AUTH_SECRET` env var (fallback so templates don't need a second\n * secret during development). If neither is set in production we fall back\n * to a machine-local key derived from the cwd — the secret is still only\n * readable on this machine, but consider setting `SECRETS_ENCRYPTION_KEY`\n * for a stable, rotatable key.\n *\n * Secret values are NEVER logged and NEVER returned from any route handler.\n */\n\nimport { randomUUID } from \"node:crypto\";\n\nimport { getDbExec, isPostgres } from \"../db/client.js\";\nimport { ensureColumnExists, ensureTableExists } from \"../db/ddl-guard.js\";\nimport {\n  encryptSecretValue as encryptValue,\n  decryptSecretValue as decryptValue,\n} from \"./crypto.js\";\nimport type { SecretScope } from \"./register.js\";\nimport { APP_SECRETS_CREATE_SQL } from \"./schema.js\";\n\n// ---------------------------------------------------------------------------\n// Table bootstrap\n// ---------------------------------------------------------------------------\n\nlet _initPromise: Promise<void> | undefined;\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      // Postgres version of the CREATE TABLE — the generic `INTEGER` maps to\n      // BIGINT on Postgres, which we need for millisecond timestamps.\n      const createSql = isPostgres()\n        ? APP_SECRETS_CREATE_SQL.replace(/\\bINTEGER\\b/g, \"BIGINT\")\n        : APP_SECRETS_CREATE_SQL;\n\n      if (isPostgres()) {\n        // Hot path: in production the table and both additive columns are\n        // virtually always already present. Issuing `CREATE`/`ALTER` would\n        // still take an ACCESS EXCLUSIVE lock — which, in a fresh background\n        // worker process behind a concurrent connection on the shared Neon DB,\n        // can block ~indefinitely. `ensureTableExists` / `ensureColumnExists`\n        // check `information_schema` first (a plain read, no lock) and run DDL\n        // ONLY for what is actually missing, wrapping any DDL that must run in a\n        // transaction-scoped `lock_timeout` so a contended lock fails fast. They\n        // also re-probe after a swallowed lock-timeout and THROW if the schema\n        // is still missing, so a timed-out DDL never poisons this init memo.\n        await ensureTableExists(\"app_secrets\", createSql);\n        await ensureColumnExists(\n          \"app_secrets\",\n          \"description\",\n          `ALTER TABLE app_secrets ADD COLUMN IF NOT EXISTS description TEXT`,\n        );\n        await ensureColumnExists(\n          \"app_secrets\",\n          \"url_allowlist\",\n          `ALTER TABLE app_secrets ADD COLUMN IF NOT EXISTS url_allowlist TEXT`,\n        );\n        return;\n      }\n\n      // SQLite (local dev): no ACCESS EXCLUSIVE lock problem, keep the original\n      // create-then-additive-alter behaviour. SQLite has no\n      // `ADD COLUMN IF NOT EXISTS`, so the ALTERs stay wrapped in try/catch.\n      await client.execute(createSql);\n\n      // Additive migration: description column (for ad-hoc keys)\n      try {\n        await client.execute(\n          `ALTER TABLE app_secrets ADD COLUMN description TEXT`,\n        );\n      } catch {\n        // Column already exists — expected\n      }\n\n      // Additive migration: url_allowlist column\n      try {\n        await client.execute(\n          `ALTER TABLE app_secrets ADD COLUMN url_allowlist TEXT`,\n        );\n      } catch {\n        // Column already exists — expected\n      }\n    })().catch((err) => {\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\n// ---------------------------------------------------------------------------\n// Encryption — see ./crypto.ts (shared with per-user credentials)\n// ---------------------------------------------------------------------------\n\n/**\n * Return the last 4 characters of a secret, with any leading characters\n * masked. Used to show a preview without leaking the value.\n */\nexport function last4(value: string): string {\n  if (!value) return \"\";\n  if (value.length <= 4) return \"••••\";\n  return \"••••\" + value.slice(-4);\n}\n\n// ---------------------------------------------------------------------------\n// CRUD\n// ---------------------------------------------------------------------------\n\nexport interface SecretRef {\n  key: string;\n  scope: SecretScope;\n  scopeId: string;\n}\n\nexport interface WriteSecretArgs extends SecretRef {\n  value: string;\n  /** Optional human-readable description (used for ad-hoc keys). */\n  description?: string;\n  /** Optional JSON-stringified array of allowed URL origins. */\n  urlAllowlist?: string;\n}\n\n/**\n * Write (insert or update) a secret. The value is encrypted before being\n * stored — the caller's plaintext is never persisted. Returns the new\n * record's id.\n */\nexport async function writeAppSecret(args: WriteSecretArgs): Promise<string> {\n  await ensureTable();\n  const { key, value, scope, scopeId, description, urlAllowlist } = args;\n  if (!key || !value || !scope || !scopeId) {\n    throw new Error(\n      \"writeAppSecret: key, value, scope, and scopeId are all required\",\n    );\n  }\n  const client = getDbExec();\n  const now = Date.now();\n  const encrypted = encryptValue(value);\n\n  // Upsert by (scope, scope_id, key). Keep the existing row's id on update so\n  // references stay stable.\n  const { rows } = await client.execute({\n    sql: `SELECT id FROM app_secrets WHERE scope = ? AND scope_id = ? AND key = ?`,\n    args: [scope, scopeId, key],\n  });\n  if (rows.length > 0) {\n    const id = rows[0].id as string;\n    await client.execute({\n      sql: `UPDATE app_secrets SET encrypted_value = ?, description = ?, url_allowlist = ?, updated_at = ? WHERE id = ?`,\n      args: [encrypted, description ?? null, urlAllowlist ?? null, now, id],\n    });\n    return id;\n  }\n  const id = randomUUID();\n  await client.execute({\n    sql: `INSERT INTO app_secrets (id, scope, scope_id, key, encrypted_value, description, url_allowlist, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      scope,\n      scopeId,\n      key,\n      encrypted,\n      description ?? null,\n      urlAllowlist ?? null,\n      now,\n      now,\n    ],\n  });\n  return id;\n}\n\nexport interface ReadSecretResult {\n  value: string;\n  last4: string;\n  updatedAt: number;\n}\n\n/**\n * Read a secret's plaintext value. Returns null when not found. The caller\n * is responsible for never logging the returned value.\n */\nexport async function readAppSecret(\n  ref: SecretRef,\n): Promise<ReadSecretResult | null> {\n  await ensureTable();\n  const { key, scope, scopeId } = ref;\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT encrypted_value, updated_at FROM app_secrets WHERE scope = ? AND scope_id = ? AND key = ? LIMIT 1`,\n    args: [scope, scopeId, key],\n  });\n  if (rows.length === 0) return null;\n  try {\n    const value = decryptValue(rows[0].encrypted_value as string);\n    return {\n      value,\n      last4: last4(value),\n      updatedAt: Number(rows[0].updated_at ?? 0),\n    };\n  } catch {\n    // Decryption failure — key rotated, tampered row, etc. Don't throw up the\n    // stack in a way that could leak the ciphertext; just report missing.\n    return null;\n  }\n}\n\n/**\n * Return just the metadata for a secret (no value). Used by the list route so\n * the UI can show the \"Set\" pill and last-4 without the decrypted value going\n * over the wire.\n */\nexport async function getAppSecretMeta(\n  ref: SecretRef,\n): Promise<{ last4: string; updatedAt: number } | null> {\n  const result = await readAppSecret(ref);\n  if (!result) return null;\n  return { last4: result.last4, updatedAt: result.updatedAt };\n}\n\nexport interface SecretMeta {\n  key: string;\n  scope: SecretScope;\n  scopeId: string;\n  last4: string;\n  description: string | null;\n  urlAllowlist: string[] | null;\n  createdAt: number;\n  updatedAt: number;\n}\n\n/**\n * Read a secret's metadata, including ad-hoc fields (description, allowlist),\n * without ever decrypting or returning the plaintext value. Used by the\n * ad-hoc list route and any UI that wants to render a key tile.\n */\nexport async function readAppSecretMeta(\n  ref: SecretRef,\n): Promise<SecretMeta | null> {\n  await ensureTable();\n  const { key, scope, scopeId } = ref;\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT encrypted_value, description, url_allowlist, created_at, updated_at FROM app_secrets WHERE scope = ? AND scope_id = ? AND key = ? LIMIT 1`,\n    args: [scope, scopeId, key],\n  });\n  if (rows.length === 0) return null;\n  const row = rows[0];\n  let last4Value = \"\";\n  try {\n    const value = decryptValue(row.encrypted_value as string);\n    last4Value = last4(value);\n  } catch {\n    last4Value = \"\";\n  }\n  return {\n    key,\n    scope,\n    scopeId,\n    last4: last4Value,\n    description: (row.description as string | null) ?? null,\n    urlAllowlist: parseAllowlist(row.url_allowlist as string | null),\n    createdAt: Number(row.created_at ?? 0),\n    updatedAt: Number(row.updated_at ?? 0),\n  };\n}\n\n/**\n * List all secrets for a given scope. Returns metadata only — values are\n * never decrypted or returned. Used by the ad-hoc list route to surface\n * user-created keys.\n */\nexport async function listAppSecretsForScope(\n  scope: SecretScope,\n  scopeId: string,\n): Promise<SecretMeta[]> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT key, encrypted_value, description, url_allowlist, created_at, updated_at FROM app_secrets WHERE scope = ? AND scope_id = ? ORDER BY updated_at DESC`,\n    args: [scope, scopeId],\n  });\n  return rows.map((row) => {\n    let last4Value = \"\";\n    try {\n      const value = decryptValue(row.encrypted_value as string);\n      last4Value = last4(value);\n    } catch {\n      last4Value = \"\";\n    }\n    return {\n      key: row.key as string,\n      scope,\n      scopeId,\n      last4: last4Value,\n      description: (row.description as string | null) ?? null,\n      urlAllowlist: parseAllowlist(row.url_allowlist as string | null),\n      createdAt: Number(row.created_at ?? 0),\n      updatedAt: Number(row.updated_at ?? 0),\n    };\n  });\n}\n\nfunction parseAllowlist(raw: string | null): string[] | null {\n  if (!raw) return null;\n  try {\n    const parsed = JSON.parse(raw);\n    if (Array.isArray(parsed) && parsed.every((v) => typeof v === \"string\")) {\n      return parsed;\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport async function deleteAppSecret(ref: SecretRef): Promise<boolean> {\n  await ensureTable();\n  const { key, scope, scopeId } = ref;\n  const client = getDbExec();\n  const { rowsAffected } = await client.execute({\n    sql: `DELETE FROM app_secrets WHERE scope = ? AND scope_id = ? AND key = ?`,\n    args: [scope, scopeId, key],\n  });\n  return rowsAffected > 0;\n}\n"]}

package/dist/server/agent-engine-api-key-route.d.ts

@@ -23,10 +23,10 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
     error: string;
 }>;
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    ok?: undefined;
     error: any;
     key?: undefined;
     scope?: undefined;
-    ok?: undefined;
 } | {
     ok: boolean;
     key: string;

package/dist/server/agent-teams-run-queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-teams-run-queue.d.ts","sourceRoot":"","sources":["../../src/server/agent-teams-run-queue.ts"],"names":[],"mappings":"AAkBA;;;;;;;;sDAQsD;AACtD,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C;kFACkF;AAClF,eAAO,MAAM,wCAAwC,IAAI,CAAC;AAE1D;;iFAEiF;AACjF,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAElD;2EAC2E;AAC3E,eAAO,MAAM,6BAA6B,QAAgB,CAAC;AAE3D,MAAM,MAAM,uBAAuB,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE/E,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;iCAC6B;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,uBAAuB,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAsCD,iBAAS,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAKpD;AAwBD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAqBtC;AAED;;;;;;;qBAOqB;AACrB,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC,CAelB;AAED;;;;;;;4BAO4B;AAC5B,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBxB;AAED;;;;;iFAKiF;AACjF,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC,CAclB;AAED;2EAC2E;AAC3E,wBAAsB,kCAAkC,CACtD,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,GACT,OAAO,CAAC,MAAM,EAAE,CAAC,CAWnB;AAED,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAStC;AAED,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B;;;CAKtC,CAAC"}
+{"version":3,"file":"agent-teams-run-queue.d.ts","sourceRoot":"","sources":["../../src/server/agent-teams-run-queue.ts"],"names":[],"mappings":"AAwBA;;;;;;;;sDAQsD;AACtD,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C;kFACkF;AAClF,eAAO,MAAM,wCAAwC,IAAI,CAAC;AAE1D;;iFAEiF;AACjF,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAElD;2EAC2E;AAC3E,eAAO,MAAM,6BAA6B,QAAgB,CAAC;AAE3D,MAAM,MAAM,uBAAuB,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE/E,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;iCAC6B;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,uBAAuB,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AA4CD,iBAAS,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAKpD;AAwBD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAqBtC;AAED;;;;;;;qBAOqB;AACrB,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC,CAelB;AAED;;;;;;;4BAO4B;AAC5B,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBxB;AAED;;;;;iFAKiF;AACjF,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC,CAclB;AAED;2EAC2E;AAC3E,wBAAsB,kCAAkC,CACtD,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,GACT,OAAO,CAAC,MAAM,EAAE,CAAC,CAWnB;AAED,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAStC;AAED,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B;;;CAKtC,CAAC"}

package/dist/server/agent-teams-run-queue.js

@@ -14,7 +14,8 @@
  * for UI/status; this table only drives dispatch, idempotent claiming, and
  * cross-invocation continuation.
  */
-import { getDbExec, intType, retryOnDdlRace } from "../db/client.js";
+import { getDbExec, intType, isPostgres, retryOnDdlRace, } from "../db/client.js";
+import { ensureIndexExists, ensureTableExists } from "../db/ddl-guard.js";
 /** Max cross-invocation continuations for one sub-agent run. Each continuation
  * is one ~40s soft-timeout chunk, so ~60 ≈ ~40 minutes of wall-clock work. Two
  * independent guards bound runaway self-fire: this persisted cap and the
@@ -40,7 +41,7 @@ async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();
-            await retryOnDdlRace(() => client.execute(`
+            const createSql = `
           CREATE TABLE IF NOT EXISTS agent_team_run_queue (
             task_id TEXT PRIMARY KEY,
             thread_id TEXT NOT NULL,
@@ -54,8 +55,18 @@ async function ensureTable() {
             created_at ${intType()} NOT NULL,
             updated_at ${intType()} NOT NULL
           )
-        `));
-            await retryOnDdlRace(() => client.execute(`CREATE INDEX IF NOT EXISTS idx_agent_team_run_queue_status ON agent_team_run_queue (status, updated_at)`));
+        `;
+            const indexSql = `CREATE INDEX IF NOT EXISTS idx_agent_team_run_queue_status ON agent_team_run_queue (status, updated_at)`;
+            // PG guard: probe information_schema / pg_indexes first (no lock), run
+            // DDL only when missing, bounded by a transaction-scoped lock_timeout.
+            if (isPostgres()) {
+                await ensureTableExists("agent_team_run_queue", createSql);
+                await ensureIndexExists("idx_agent_team_run_queue_status", indexSql);
+                return;
+            }
+            // SQLite (local dev): no lock problem — keep the original behaviour.
+            await retryOnDdlRace(() => client.execute(createSql));
+            await retryOnDdlRace(() => client.execute(indexSql));
         })().catch((err) => {
             _initPromise = undefined;
             throw err;