@agent-native/core 0.85.7 → 0.86.1

package/dist/server/poll-events.d.ts

@@ -1,3 +1,5 @@
+import { type AwarenessChangeEvent } from "../collab/awareness.js";
+export declare function canSeeAwarenessChangeForUser(change: Pick<AwarenessChangeEvent, "owner" | "orgId" | "resourceType" | "resourceId">, userEmail: string, orgId: string | undefined): boolean;
 /**
  * Stream in-process poll events over SSE.
  *

package/dist/server/poll-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"poll-events.d.ts","sourceRoot":"","sources":["../../src/server/poll-events.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB;;IA+CtC"}
+{"version":3,"file":"poll-events.d.ts","sourceRoot":"","sources":["../../src/server/poll-events.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAShC,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,IAAI,CACV,oBAAoB,EACpB,OAAO,GAAG,OAAO,GAAG,cAAc,GAAG,YAAY,CAClD,EACD,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAGT;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB;;IA+CtC"}

package/dist/server/poll-events.js

@@ -2,6 +2,11 @@ import { createEventStream, defineEventHandler, setResponseStatus } from "h3";
 import { getAwarenessEmitter, AWARENESS_CHANGE_EVENT, } from "../collab/awareness.js";
 import { getSession } from "./auth.js";
 import { canSeeChangeForUser, getPollEmitter, POLL_CHANGE_EVENT, } from "./poll.js";
+export function canSeeAwarenessChangeForUser(change, userEmail, orgId) {
+    if (!change.owner && !change.orgId && !change.resourceType)
+        return false;
+    return canSeeChangeForUser(change, userEmail, orgId);
+}
 /**
  * Stream in-process poll events over SSE.
  *
@@ -46,9 +51,9 @@ export function createPollEventsHandler() {
         const pushAwareness = (change) => {
             if (closed)
                 return;
-            // Respect org scoping if present.
-            if (change.orgId && session.orgId && change.orgId !== session.orgId)
+            if (!canSeeAwarenessChangeForUser(change, session.email, session.orgId)) {
                 return;
+            }
             safePush(JSON.stringify(change));
         };
         getPollEmitter().on(POLL_CHANGE_EVENT, push);

package/dist/server/poll-events.js.map

@@ -1 +1 @@
-{"version":3,"file":"poll-events.js","sourceRoot":"","sources":["../../src/server/poll-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;AAE9E,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,iBAAiB,GAElB,MAAM,WAAW,CAAC;AAEnB;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;YAChC,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,MAAmB,EAAE,EAAE;YACnC,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO;YACvE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC;QAEF,mEAAmE;QACnE,6EAA6E;QAC7E,MAAM,aAAa,GAAG,CAAC,MAA4B,EAAE,EAAE;YACrD,IAAI,MAAM;gBAAE,OAAO;YACnB,kCAAkC;YAClC,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;gBACjE,OAAO;YACT,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC;QAEF,cAAc,EAAE,CAAC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC7C,mBAAmB,EAAE,CAAC,EAAE,CAAC,sBAAsB,EAAE,aAAa,CAAC,CAAC;QAEhE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,cAAc,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;YAC9C,mBAAmB,EAAE,CAAC,GAAG,CAAC,sBAAsB,EAAE,aAAa,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createEventStream, defineEventHandler, setResponseStatus } from \"h3\";\n\nimport {\n  getAwarenessEmitter,\n  AWARENESS_CHANGE_EVENT,\n  type AwarenessChangeEvent,\n} from \"../collab/awareness.js\";\nimport { getSession } from \"./auth.js\";\nimport {\n  canSeeChangeForUser,\n  getPollEmitter,\n  POLL_CHANGE_EVENT,\n  type ChangeEvent,\n} from \"./poll.js\";\n\n/**\n * Stream in-process poll events over SSE.\n *\n * This is the fast path for agent/tool/action writes that happen in the same\n * server process. The regular /poll endpoint remains the cross-process and\n * serverless cold-start fallback because it can detect DB timestamp changes\n * even when the write happened somewhere this EventEmitter could not see.\n *\n * Also forwards awareness change events (cursor/presence updates) so\n * connected peers receive cursor moves push-style instead of waiting for\n * the next poll cycle. Polling fallback keeps working — cursors degrade\n * gracefully to poll cadence without SSE.\n */\nexport function createPollEventsHandler() {\n  return defineEventHandler(async (event) => {\n    const session = await getSession(event).catch(() => null);\n    if (!session?.email) {\n      setResponseStatus(event, 401);\n      return { error: \"Unauthenticated\" };\n    }\n\n    const stream = createEventStream(event);\n    let closed = false;\n\n    const safePush = (data: string) => {\n      if (closed) return;\n      try {\n        stream.push(data);\n      } catch {\n        // EventSource will reconnect; /poll catches anything missed.\n      }\n    };\n\n    const push = (change: ChangeEvent) => {\n      if (closed) return;\n      if (!canSeeChangeForUser(change, session.email, session.orgId)) return;\n      safePush(JSON.stringify(change));\n    };\n\n    // Awareness fast-path: forward cursor/presence events immediately.\n    // No ring-buffer needed — clients reconcile on the next poll if SSE is down.\n    const pushAwareness = (change: AwarenessChangeEvent) => {\n      if (closed) return;\n      // Respect org scoping if present.\n      if (change.orgId && session.orgId && change.orgId !== session.orgId)\n        return;\n      safePush(JSON.stringify(change));\n    };\n\n    getPollEmitter().on(POLL_CHANGE_EVENT, push);\n    getAwarenessEmitter().on(AWARENESS_CHANGE_EVENT, pushAwareness);\n\n    stream.onClosed(() => {\n      closed = true;\n      getPollEmitter().off(POLL_CHANGE_EVENT, push);\n      getAwarenessEmitter().off(AWARENESS_CHANGE_EVENT, pushAwareness);\n    });\n\n    return stream.send();\n  });\n}\n"]}
+{"version":3,"file":"poll-events.js","sourceRoot":"","sources":["../../src/server/poll-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;AAE9E,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,iBAAiB,GAElB,MAAM,WAAW,CAAC;AAEnB,MAAM,UAAU,4BAA4B,CAC1C,MAGC,EACD,SAAiB,EACjB,KAAyB;IAEzB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IACzE,OAAO,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;YAChC,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,MAAmB,EAAE,EAAE;YACnC,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO;YACvE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC;QAEF,mEAAmE;QACnE,6EAA6E;QAC7E,MAAM,aAAa,GAAG,CAAC,MAA4B,EAAE,EAAE;YACrD,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxE,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC;QAEF,cAAc,EAAE,CAAC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC7C,mBAAmB,EAAE,CAAC,EAAE,CAAC,sBAAsB,EAAE,aAAa,CAAC,CAAC;QAEhE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,cAAc,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;YAC9C,mBAAmB,EAAE,CAAC,GAAG,CAAC,sBAAsB,EAAE,aAAa,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createEventStream, defineEventHandler, setResponseStatus } from \"h3\";\n\nimport {\n  getAwarenessEmitter,\n  AWARENESS_CHANGE_EVENT,\n  type AwarenessChangeEvent,\n} from \"../collab/awareness.js\";\nimport { getSession } from \"./auth.js\";\nimport {\n  canSeeChangeForUser,\n  getPollEmitter,\n  POLL_CHANGE_EVENT,\n  type ChangeEvent,\n} from \"./poll.js\";\n\nexport function canSeeAwarenessChangeForUser(\n  change: Pick<\n    AwarenessChangeEvent,\n    \"owner\" | \"orgId\" | \"resourceType\" | \"resourceId\"\n  >,\n  userEmail: string,\n  orgId: string | undefined,\n): boolean {\n  if (!change.owner && !change.orgId && !change.resourceType) return false;\n  return canSeeChangeForUser(change, userEmail, orgId);\n}\n\n/**\n * Stream in-process poll events over SSE.\n *\n * This is the fast path for agent/tool/action writes that happen in the same\n * server process. The regular /poll endpoint remains the cross-process and\n * serverless cold-start fallback because it can detect DB timestamp changes\n * even when the write happened somewhere this EventEmitter could not see.\n *\n * Also forwards awareness change events (cursor/presence updates) so\n * connected peers receive cursor moves push-style instead of waiting for\n * the next poll cycle. Polling fallback keeps working — cursors degrade\n * gracefully to poll cadence without SSE.\n */\nexport function createPollEventsHandler() {\n  return defineEventHandler(async (event) => {\n    const session = await getSession(event).catch(() => null);\n    if (!session?.email) {\n      setResponseStatus(event, 401);\n      return { error: \"Unauthenticated\" };\n    }\n\n    const stream = createEventStream(event);\n    let closed = false;\n\n    const safePush = (data: string) => {\n      if (closed) return;\n      try {\n        stream.push(data);\n      } catch {\n        // EventSource will reconnect; /poll catches anything missed.\n      }\n    };\n\n    const push = (change: ChangeEvent) => {\n      if (closed) return;\n      if (!canSeeChangeForUser(change, session.email, session.orgId)) return;\n      safePush(JSON.stringify(change));\n    };\n\n    // Awareness fast-path: forward cursor/presence events immediately.\n    // No ring-buffer needed — clients reconcile on the next poll if SSE is down.\n    const pushAwareness = (change: AwarenessChangeEvent) => {\n      if (closed) return;\n      if (!canSeeAwarenessChangeForUser(change, session.email, session.orgId)) {\n        return;\n      }\n      safePush(JSON.stringify(change));\n    };\n\n    getPollEmitter().on(POLL_CHANGE_EVENT, push);\n    getAwarenessEmitter().on(AWARENESS_CHANGE_EVENT, pushAwareness);\n\n    stream.onClosed(() => {\n      closed = true;\n      getPollEmitter().off(POLL_CHANGE_EVENT, push);\n      getAwarenessEmitter().off(AWARENESS_CHANGE_EVENT, pushAwareness);\n    });\n\n    return stream.send();\n  });\n}\n"]}

package/dist/server/poll.d.ts

@@ -28,13 +28,54 @@ export interface ChangeEvent {
     owner?: string;
     /** Optional org ID for org-scoped events. */
     orgId?: string;
+    /**
+     * Shareable resource type this event belongs to (e.g. "document"). When
+     * present together with `resourceId`, the per-user delivery filter
+     * (`canSeeChangeForUser`) can run an access-aware check so non-owner sharees
+     * with explicit viewer+ access receive the push instead of only the poll
+     * fallback. See the SYNC-CACHE note above `canSeeChangeForUser`.
+     */
+    resourceType?: string;
+    /**
+     * Shareable resource id this event belongs to. Paired with `resourceType`
+     * to drive the access-aware delivery check in `canSeeChangeForUser`.
+     */
+    resourceId?: string;
     [k: string]: unknown;
 }
 export declare const POLL_CHANGE_EVENT = "poll-change";
 /** Get the current global version counter. */
 export declare function getVersion(): number;
 export declare function getPollEmitter(): EventEmitter;
-export declare function canSeeChangeForUser(event: ChangeEvent, userEmail: string, orgId: string | undefined): boolean;
+export declare function invalidateCollabAccessCache(resourceType: string, resourceId: string): void;
+/**
+ * Test-only: clear the access cache and in-flight set so cases don't bleed
+ * into each other. Underscore-prefixed and intentionally NOT part of the
+ * public API — do not rely on it outside tests.
+ */
+export declare function __resetCollabAccessCacheForTests(): void;
+/**
+ * Decide whether a poll/SSE change event should be delivered to a user.
+ *
+ * SYNC-CACHE VARIANT — WHY THIS IS SYNCHRONOUS:
+ * This function is called on hot, synchronous paths: the SSE emitter callback
+ * `push(change)` in poll-events.ts (fires per event) and the
+ * `getChangesSinceForUser` loop in this file. Making it async would be
+ * invasive (it would ripple through both call sites and their emitters).
+ * Instead, for the access-aware branch we consult an in-memory cache and, on a
+ * miss, fire a NON-BLOCKING background access check and return `false` for the
+ * current event. Because the poll fallback (`getChangesSinceForUser` on the
+ * next `/poll` cycle) re-evaluates with the now-populated cache, delivery is
+ * eventually guaranteed — the only cost is that the very first event for a
+ * fresh (user, resource) pair goes over poll instead of push, and every
+ * subsequent event within the TTL is pushed.
+ *
+ * Security: a cache MISS returns `false`, so we NEVER deliver to a user before
+ * their access has been affirmatively confirmed by `resolveAccess` — the same
+ * authority that gates the HTTP routes. Errors fail closed (cached deny). The
+ * owner/org fast paths below are unchanged and evaluated first.
+ */
+export declare function canSeeChangeForUser(event: Pick<ChangeEvent, "owner" | "orgId" | "resourceType" | "resourceId">, userEmail: string, orgId: string | undefined): boolean;
 /** Record a change event. Called by emitter listeners. */
 export declare function recordChange(event: {
     source: string;
@@ -52,10 +93,13 @@ export declare function getChangesSince(since: number): {
  * allowed to see.
  *
  * Filtering rules:
- *   - Events without an `owner` are deployment-global (table-level pings,
- *     screen-refresh, etc.) and visible to every authenticated user.
+ *   - Events without an `owner`/`orgId`/`resourceType` are deployment-global
+ *     (table-level pings, screen-refresh, etc.) and visible to every
+ *     authenticated user.
  *   - Events with `owner === userEmail` go to that user.
  *   - Events with `orgId === orgId` go to anyone in that org.
+ *   - Events carrying `resourceType` + `resourceId` additionally reach explicit
+ *     viewer+ sharees via the access-aware cache in `canSeeChangeForUser`.
  *   - All other owned events are filtered out.
  */
 export declare function getChangesSinceForUser(since: number, userEmail: string, orgId: string | undefined): {

package/dist/server/poll.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"poll.d.ts","sourceRoot":"","sources":["../../src/server/poll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAmB3C,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAOD,eAAO,MAAM,iBAAiB,gBAAgB,CAAC;AA0I/C,8CAA8C;AAC9C,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,cAAc,IAAI,YAAY,CAE7C;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAMT;AAED,0DAA0D;AAC1D,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB,GAAG,IAAI,CAWP;AA+GD,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB,CAMA;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAQ5C;AA6SD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB;aAhUnB,MAAM;YAAU,WAAW,EAAE;;;IAiV1C"}
+{"version":3,"file":"poll.d.ts","sourceRoot":"","sources":["../../src/server/poll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAmB3C,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAOD,eAAO,MAAM,iBAAiB,gBAAgB,CAAC;AA0I/C,8CAA8C;AAC9C,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,cAAc,IAAI,YAAY,CAE7C;AAyCD,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GACjB,IAAI,CAaN;AA0DD;;;;GAIG;AACH,wBAAgB,gCAAgC,IAAI,IAAI,CAIvD;AAID;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,OAAO,GAAG,cAAc,GAAG,YAAY,CAAC,EAC3E,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAET;AAuCD,0DAA0D;AAC1D,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB,GAAG,IAAI,CAWP;AA+GD,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB,CAMA;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAmB5C;AA6SD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB;aA3UnB,MAAM;YAAU,WAAW,EAAE;;;IA4V1C"}

package/dist/server/poll.js

@@ -142,15 +142,164 @@ export function getVersion() {
 export function getPollEmitter() {
     return _pollEmitter;
 }
+/**
+ * In-memory, TTL'd access cache for the access-aware branch of
+ * `canSeeChangeForUser`. Keyed by `${userEmail}|${resourceType}|${resourceId}`.
+ *
+ * Insertion order doubles as FIFO for eviction (JS Maps preserve insertion
+ * order), so we can evict the oldest entries when we exceed the cap.
+ */
+const _accessCache = new Map();
+/** In-flight background access checks, keyed identically, to dedupe bursts. */
+const _accessInFlight = new Set();
+/** Per-resource generation bumped when shares/visibility change. */
+const _accessInvalidationEpoch = new Map();
+/** TTL for an allowed (true) cache entry. */
+const ACCESS_CACHE_TTL_MS = 30_000;
+/**
+ * Shorter TTL for a denied (false) entry so a transient DB error (which we
+ * fail-closed on) doesn't lock a legitimate user out of the push path for the
+ * full 30s — they recover on their next event after this window.
+ */
+const ACCESS_CACHE_DENY_TTL_MS = 5_000;
+/** Max cache entries before FIFO eviction kicks in. */
+const ACCESS_CACHE_MAX = 500;
+function accessCacheKey(userEmail, resourceType, resourceId) {
+    return `${userEmail}|${resourceType}|${resourceId}`;
+}
+function accessResourceKey(resourceType, resourceId) {
+    return `${resourceType}|${resourceId}`;
+}
+function accessCacheTtl(allowed) {
+    return allowed ? ACCESS_CACHE_TTL_MS : ACCESS_CACHE_DENY_TTL_MS;
+}
+export function invalidateCollabAccessCache(resourceType, resourceId) {
+    const resourceKey = accessResourceKey(resourceType, resourceId);
+    _accessInvalidationEpoch.set(resourceKey, (_accessInvalidationEpoch.get(resourceKey) ?? 0) + 1);
+    const suffix = `|${resourceKey}`;
+    for (const key of Array.from(_accessCache.keys())) {
+        if (key.endsWith(suffix))
+            _accessCache.delete(key);
+    }
+    for (const key of Array.from(_accessInFlight)) {
+        if (key.endsWith(suffix))
+            _accessInFlight.delete(key);
+    }
+}
+function setAccessCache(key, allowed, now) {
+    // Re-insert so the key moves to the end (most-recent) for FIFO ordering.
+    _accessCache.delete(key);
+    _accessCache.set(key, { allowed, checkedAt: now });
+    if (_accessCache.size > ACCESS_CACHE_MAX) {
+        // Evict the oldest entries (front of insertion order) back under the cap.
+        const overflow = _accessCache.size - ACCESS_CACHE_MAX;
+        let removed = 0;
+        for (const oldestKey of _accessCache.keys()) {
+            _accessCache.delete(oldestKey);
+            if (++removed >= overflow)
+                break;
+        }
+    }
+}
+/**
+ * Fire a background access check for a cache-miss key. Never awaited by the
+ * caller — the current event is NOT delivered (we returned false), but the
+ * result is cached so the user's NEXT event within the TTL is pushed. Dedupes
+ * concurrent checks for the same key via `_accessInFlight`.
+ */
+function scheduleAccessCheck(key, resourceType, resourceId, userEmail, orgId) {
+    if (_accessInFlight.has(key))
+        return;
+    _accessInFlight.add(key);
+    const resourceKey = accessResourceKey(resourceType, resourceId);
+    const epoch = _accessInvalidationEpoch.get(resourceKey) ?? 0;
+    void (async () => {
+        try {
+            // Dynamic import to avoid a load-order/circular-import hazard: poll.ts is
+            // imported very widely, and the sharing/access module pulls in the
+            // resource registry. Importing it lazily inside this background function
+            // keeps the module graph acyclic at load time.
+            const { resolveAccess } = await import("../sharing/access.js");
+            const access = await resolveAccess(resourceType, resourceId, {
+                userEmail,
+                orgId,
+            });
+            if ((_accessInvalidationEpoch.get(resourceKey) ?? 0) !== epoch)
+                return;
+            setAccessCache(key, access != null, Date.now());
+        }
+        catch {
+            // Fail closed on any error (DB not ready, missing registration, etc.),
+            // but with the short deny TTL so a transient failure self-heals quickly.
+            if ((_accessInvalidationEpoch.get(resourceKey) ?? 0) !== epoch)
+                return;
+            setAccessCache(key, false, Date.now());
+        }
+        finally {
+            _accessInFlight.delete(key);
+        }
+    })();
+}
+/**
+ * Test-only: clear the access cache and in-flight set so cases don't bleed
+ * into each other. Underscore-prefixed and intentionally NOT part of the
+ * public API — do not rely on it outside tests.
+ */
+export function __resetCollabAccessCacheForTests() {
+    _accessCache.clear();
+    _accessInFlight.clear();
+    _accessInvalidationEpoch.clear();
+}
+/**
+ * Decide whether a poll/SSE change event should be delivered to a user.
+ *
+ * SYNC-CACHE VARIANT — WHY THIS IS SYNCHRONOUS:
+ * This function is called on hot, synchronous paths: the SSE emitter callback
+ * `push(change)` in poll-events.ts (fires per event) and the
+ * `getChangesSinceForUser` loop in this file. Making it async would be
+ * invasive (it would ripple through both call sites and their emitters).
+ * Instead, for the access-aware branch we consult an in-memory cache and, on a
+ * miss, fire a NON-BLOCKING background access check and return `false` for the
+ * current event. Because the poll fallback (`getChangesSinceForUser` on the
+ * next `/poll` cycle) re-evaluates with the now-populated cache, delivery is
+ * eventually guaranteed — the only cost is that the very first event for a
+ * fresh (user, resource) pair goes over poll instead of push, and every
+ * subsequent event within the TTL is pushed.
+ *
+ * Security: a cache MISS returns `false`, so we NEVER deliver to a user before
+ * their access has been affirmatively confirmed by `resolveAccess` — the same
+ * authority that gates the HTTP routes. Errors fail closed (cached deny). The
+ * owner/org fast paths below are unchanged and evaluated first.
+ */
 export function canSeeChangeForUser(event, userEmail, orgId) {
-    // Global / unowned events: every authenticated user gets them.
-    if (!event.owner && !event.orgId)
-        return true;
+    return getChangeVisibilityForUser(event, userEmail, orgId) === "visible";
+}
+function getChangeVisibilityForUser(event, userEmail, orgId) {
+    // Global / unowned events: every authenticated user gets them. Events that
+    // predate resource tagging (owner/org only, no resourceType) keep the exact
+    // conservative contract they had before.
+    if (!event.owner && !event.orgId && !event.resourceType)
+        return "visible";
     if (event.owner && event.owner === userEmail)
-        return true;
+        return "visible";
     if (event.orgId && orgId && event.orgId === orgId)
-        return true;
-    return false;
+        return "visible";
+    // Access-aware branch: only when the event carries BOTH resourceType and
+    // resourceId and the owner/org fast paths above did not already grant.
+    if (event.resourceType && event.resourceId) {
+        const key = accessCacheKey(userEmail, event.resourceType, event.resourceId);
+        const cached = _accessCache.get(key);
+        const now = Date.now();
+        if (cached && now - cached.checkedAt < accessCacheTtl(cached.allowed)) {
+            // Fresh, non-expired cache hit → trust the cached decision.
+            return cached.allowed ? "visible" : "hidden";
+        }
+        // Miss or expired: do NOT deliver this event, but schedule the async check
+        // so the user's next event (or poll cycle) resolves correctly.
+        scheduleAccessCheck(key, event.resourceType, event.resourceId, userEmail, orgId);
+        return "pending";
+    }
+    return "hidden";
 }
 /** Record a change event. Called by emitter listeners. */
 export function recordChange(event) {
@@ -263,18 +412,35 @@ export function getChangesSince(since) {
  * allowed to see.
  *
  * Filtering rules:
- *   - Events without an `owner` are deployment-global (table-level pings,
- *     screen-refresh, etc.) and visible to every authenticated user.
+ *   - Events without an `owner`/`orgId`/`resourceType` are deployment-global
+ *     (table-level pings, screen-refresh, etc.) and visible to every
+ *     authenticated user.
  *   - Events with `owner === userEmail` go to that user.
  *   - Events with `orgId === orgId` go to anyone in that org.
+ *   - Events carrying `resourceType` + `resourceId` additionally reach explicit
+ *     viewer+ sharees via the access-aware cache in `canSeeChangeForUser`.
  *   - All other owned events are filtered out.
  */
 export function getChangesSinceForUser(since, userEmail, orgId) {
     if (since >= _version) {
         return { version: _version, events: [] };
     }
-    const events = _buffer.filter((e) => e.version > since && canSeeChangeForUser(e, userEmail, orgId));
-    return { version: _version, events };
+    const events = [];
+    let version = _version;
+    for (const event of _buffer) {
+        if (event.version <= since)
+            continue;
+        const visibility = getChangeVisibilityForUser(event, userEmail, orgId);
+        if (visibility === "visible") {
+            events.push(event);
+            continue;
+        }
+        if (visibility === "pending") {
+            version = Math.max(since, event.version - 1);
+            break;
+        }
+    }
+    return { version, events };
 }
 /**
  * Seed _version from DB timestamps on the first call so serverless

package/dist/server/poll.js.map

@@ -1 +1 @@
-{"version":3,"file":"poll.js","sourceRoot":"","sources":["../../src/server/poll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;AAErE,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,GAE3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAoBvC,oEAAoE;AACpE,2EAA2E;AAC3E,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB,MAAM,OAAO,GAAkB,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAC/C,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;AACxC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AAEhC;;;;;GAKG;AACH,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B,sEAAsE;AACtE,IAAI,YAAY,GAAG,CAAC,CAAC;AACrB,+EAA+E;AAC/E,iFAAiF;AACjF,6EAA6E;AAC7E,IAAI,aAAa,GAAyB,IAAI,CAAC;AAC/C,IAAI,eAAe,GAAG,CAAC,CAAC;AACxB,IAAI,eAAe,GAAG,CAAC,CAAC;AACxB,IAAI,iBAAiB,GAAG,CAAC,CAAC;AAC1B,IAAI,wBAAqD,CAAC;AAC1D,IAAI,sBAAsB,GAAG,CAAC,CAAC;AAC/B,IAAI,mBAAmB,GAAG,CAAC,CAAC;AAE5B;;;;;;;;;GASG;AACH,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAC7B,IAAI,yBAAyB,GAAG,KAAK,CAAC;AACtC,4EAA4E;AAC5E,8EAA8E;AAC9E,kEAAkE;AAClE,MAAM,6BAA6B,GAAG,IAAI,GAAG,EAAkB,CAAC;AAChE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,IAAI,mBAAmB,GAAG,KAAK,CAAC;AAEhC,SAAS,iBAAiB;IACxB,IAAI,mBAAmB;QAAE,OAAO;IAChC,mBAAmB,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;QAC7C,IACE,KAAK,CAAC,GAAG,KAAK,2BAA2B;YACzC,KAAK,CAAC,GAAG,KAAK,wBAAwB,EACtC,CAAC;YACD,OAAO;QACT,CAAC;QACD,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,kBAAkB,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;QAC5C,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,EAIC,EACD,KAAiD;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAC7B,yCAAyC,KAAK,EAAE,CACjD,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,EAIC,EACD,KAAiD;IAEjD,OAAO,cAAc,CAAC,MAAM,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,EAI9C;IACC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,uEAAuE;YAC5E,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,EAI3C;IACC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,uEAAuE;YAC5E,IAAI,EAAE,CAAC,wBAAwB,CAAC;SACjC,CAAC,CAAC;QACH,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,UAAU;IACxB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAkB,EAClB,SAAiB,EACjB,KAAyB;IAEzB,+DAA+D;IAC/D,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAAC,KAK5B;IACC,qEAAqE;IACrE,iEAAiE;IACjE,0DAA0D;IAC1D,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAgB,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IACjD,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA6B;IACvD,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,SAAS,MAAM,CAAC,KAAK,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA2C,EAC3C,MAA6B;IAE7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgC;IAC9D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC/D,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACxE,KAAK,MAAM,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,YAAY,CAAC;YACX,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,GAAG;YACR,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA6B;IACxD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,YAAY,CAAC;YACX,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG;YAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAA4B,EAC5B,SAAyC;IAEzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACzD,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,UAAU,GACd,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAElE,IAAI,KAAK;QAAE,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,IAAI,UAAU,KAAK,KAAK,IAAI,KAAK;QAAE,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAE1E,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,aAAa,GACjB,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,WAAW,GACf,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,aAAa,KAAK,MAAM,IAAI,WAAW,EAAE,CAAC;YAC5C,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,aAAa,KAAK,KAAK,IAAI,WAAW,EAAE,CAAC;YAClD,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,EAIC,EACD,IAAoC;IAEpC,MAAM,GAAG,GAAG,IAAI;SACb,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACxD,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA0C,CAAC;IAE7E,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBACnC,GAAG,EAAE,2FAA2F,YAAY,GAAG;gBAC/G,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;gBACrC,MAAM,UAAU,GACd,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACtB,sBAAsB,CACpB,GAAG,EACH,kBAAkB,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CACvE,CACF,CAAC;AACJ,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,eAAe,CAAC,KAAa;IAI3C,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAa,EACb,SAAiB,EACjB,KAAyB;IAEzB,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CACrE,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB;IAC9B,IAAI,cAAc;QAAE,OAAO;IAC3B,cAAc,GAAG,IAAI,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QAEvB,MAAM,CACJ,KAAK,EACL,UAAU,EACV,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACd,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,gBAAgB,CAAC,EAAE,EAAE,mBAAmB,CAAC;YACzC,gBAAgB,CAAC,EAAE,EAAE,UAAU,CAAC;YAChC,mBAAmB,CAAC,EAAE,EAAE,OAAO,CAAC;YAChC,+BAA+B,CAAC,EAAE,CAAC;YACnC,4BAA4B,CAAC,EAAE,CAAC;YAChC,EAAE;iBACC,OAAO,CAAC;gBACP,GAAG,EAAE,oEAAoE;gBACzE,IAAI,EAAE,CAAC,kBAAkB,CAAC;aAC3B,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAA+B,EAAE,CAAC,CAAC;SAC5D,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAC5D,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;YACrC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,qDAAqD;QACrD,QAAQ,GAAG,IAAI,CAAC,GAAG,CACjB,QAAQ,EACR,KAAK,EACL,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,cAAc,CACf,CAAC;QAEF,gEAAgE;QAChE,eAAe,GAAG,KAAK,CAAC;QACxB,eAAe,GAAG,UAAU,CAAC;QAC7B,iBAAiB,GAAG,YAAY,CAAC;QACjC,wBAAwB,GAAG,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QACrE,sBAAsB,GAAG,iBAAiB,CAAC;QAC3C,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,mBAAmB,GAAG,CAAC,CAAC;QACxB,oBAAoB,GAAG,SAAS,CAAC;QACjC,6BAA6B,CAAC,KAAK,EAAE,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACvC,6BAA6B,CAAC,GAAG,CAC/B,GAAG,CAAC,UAAU,EACd,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QACD,yBAAyB,GAAG,IAAI,CAAC;QACjC,4EAA4E;QAC5E,yDAAyD;QACzD,YAAY,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,YAAY,GAAG,IAAI;QAAE,OAAO;IACtC,0EAA0E;IAC1E,yEAAyE;IACzE,mCAAmC;IACnC,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,YAAY,GAAG,GAAG,CAAC;IACnB,aAAa,GAAG,wBAAwB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACtD,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,wBAAwB;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QAEvB,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,CACJ,SAAS,EACT,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,sBAAsB,EACvB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,EAAE,CAAC,OAAO,CAAC;gBACT,GAAG,EAAE,wGAAwG;gBAC7G,IAAI,EAAE,CAAC,eAAe,CAAC;aACxB,CAAC;YACF,4BAA4B,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,OAAO,CAAC;gBACT,GAAG,EAAE,2EAA2E;gBAChF,IAAI,EAAE,CAAC,kBAAkB,CAAC;aAC3B,CAAC;YACF,+BAA+B,CAAC,EAAE,CAAC;YACnC,gBAAgB,CAAC,EAAE,EAAE,UAAU,CAAC;YAChC,mBAAmB,CAAC,EAAE,EAAE,OAAO,CAAC;SACjC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,8EAA8E;QAC9E,mEAAmE;QACnE,wDAAwD;QACxD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CACjC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAC3D,eAAe,CAChB,CAAC;YACF,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;gBACxB,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;oBACjC,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBACxD,IACE,GAAG,KAAK,2BAA2B;wBACnC,GAAG,KAAK,wBAAwB,EAChC,CAAC;wBACD,SAAS;oBACX,CAAC;oBACD,MAAM,KAAK,GACT,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;oBAClE,YAAY,CAAC;wBACX,MAAM,EAAE,WAAW;wBACnB,IAAI,EAAE,QAAQ;wBACd,GAAG;wBACH,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,eAAe,GAAG,KAAK,CAAC;QAC1B,CAAC;QAED,wEAAwE;QACxE,kEAAkE;QAClE,yEAAyE;QACzE,0EAA0E;QAC1E,6EAA6E;QAC7E,2DAA2D;QAC3D,IAAI,cAAc,GAAG,mBAAmB,EAAE,CAAC;YACzC,MAAM,kBAAkB,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBAC1C,GAAG,EAAE,mGAAmG;gBACxG,IAAI,EAAE,CAAC,wBAAwB,CAAC;aACjC,CAAC,CAAC;YACH,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CACzD,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,mBAAmB,CAC9D,CAAC;YACF,mBAAmB,CACjB,oBAAoB;iBACjB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;iBAChE,MAAM,CAAC,CAAC,MAAM,EAAgC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAC9D,CAAC;YACF,mBAAmB,GAAG,cAAc,CAAC;QACvC,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,oEAAoE;QACpE,wEAAwE;QACxE,kCAAkC;QAClC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CACzC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAC3D,CAAC,CACF,CAAC;QACF,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC/B,oBAAoB,GAAG,SAAS,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;gBACrC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACvC,6BAA6B,CAAC,GAAG,CAC/B,GAAG,CAAC,UAAU,EACd,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAC/B,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,yBAAyB,GAAG,IAAI,CAAC;QACnC,CAAC;aAAM,IAAI,SAAS,GAAG,oBAAoB,EAAE,CAAC;YAC5C,mEAAmE;YACnE,wEAAwE;YACxE,iDAAiD;YACjD,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;gBACrC,MAAM,KAAK,GACT,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClE,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC7C,IAAI,KAAK,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACvE,IAAI,KAAyB,CAAC;gBAC9B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;oBACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;wBAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAC/B,IAAI,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ;4BAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;oBAC9D,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;gBACV,YAAY,CAAC;oBACX,MAAM,EAAE,gBAAgB;oBACxB,IAAI,EAAE,QAAQ;oBACd,GAAG,EAAE,kBAAkB;oBACvB,KAAK;oBACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5B,CAAC,CAAC;gBACH,6BAA6B,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;YACD,oBAAoB,GAAG,SAAS,CAAC;QACnC,CAAC;QAED,2EAA2E;QAC3E,wEAAwE;QACxE,oEAAoE;QACpE,6EAA6E;QAC7E,wEAAwE;QACxE,IAAI,iBAAiB,GAAG,sBAAsB,EAAE,CAAC;YAC/C,MAAM,qBAAqB,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBAC7C,GAAG,EAAE,mGAAmG;gBACxG,IAAI,EAAE,CAAC,2BAA2B,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,uBAAuB,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,sBAAsB,CACjE,CAAC;YACF,IAAI,sBAAsB,GAAG,CAAC,EAAE,CAAC;gBAC/B,sBAAsB,CACpB,uBAAuB;qBACpB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;qBACnE,MAAM,CAAC,CAAC,MAAM,EAAmC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CACjE,CAAC;YACJ,CAAC;YACD,sBAAsB,GAAG,iBAAiB,CAAC;QAC7C,CAAC;QAED,mEAAmE;QACnE,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;YACjC,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;gBACxB,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,eAAe,GAAG,UAAU,CAAC;QAC/B,CAAC;QAED,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,sDAAsD;QACtD,MAAM,YAAY,GAAG,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAC5D,IAAI,YAAY,GAAG,iBAAiB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,wBAAwB,CAAC;YACvC,MAAM,eAAe,GACnB,KAAK,KAAK,SAAS;gBACjB,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC;oBACf,GAAG,EAAE,2FAA2F;oBAChG,IAAI,EAAE,EAAE;iBACT,CAAC;gBACJ,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC;oBACf,GAAG,EAAE,gHAAgH;oBACrH,IAAI,EAAE,CAAC,KAAK,CAAC;iBACd,CAAC,CAAC;YACT,MAAM,oBAAoB,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CACtD,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,iBAAiB,CAC5D,CAAC;YACF,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,YAAY,GAAG,MAAM,2BAA2B,CACpD,EAAE,EACF,oBAAoB,CACrB,CAAC;gBACF,KAAK,MAAM,OAAO,IAAI,YAAY;oBAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YACD,iBAAiB,GAAG,YAAY,CAAC;YACjC,wBAAwB,GAAG,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB;IAC/B,iBAAiB,EAAE,CAAC;IACpB,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACtC,CAAC;QACD,qEAAqE;QACrE,MAAM,iBAAiB,EAAE,CAAC;QAC1B,mDAAmD;QACnD,MAAM,sBAAsB,EAAE,CAAC;QAE/B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Polling-based change notification.\n *\n * Replaces SSE with a simple version counter. Each DB mutation (app-state,\n * settings, resources) increments the version. Clients poll `/_agent-native/poll?since=N`\n * and receive any events that occurred after version N.\n *\n * Works in all deployment environments (serverless, edge, long-lived).\n *\n * Also detects cross-process DB writes by periodically checking the\n * application_state and settings tables' updated_at timestamps. This ensures\n * that changes made by external processes (e.g., CLI actions, cron jobs)\n * are picked up even though they don't call recordChange() in this process.\n */\n\nimport { EventEmitter } from \"node:events\";\n\nimport { defineEventHandler, getQuery, setResponseStatus } from \"h3\";\n\nimport {\n  ACTION_CHANGE_MARKER_KEY,\n  parseActionChangeMarker,\n  type ActionChangeTarget,\n} from \"../action-change-marker.js\";\nimport { getAppStateEmitter } from \"../application-state/emitter.js\";\nimport { getDbExec } from \"../db/client.js\";\nimport {\n  EXTENSION_CHANGE_MARKER_KEY,\n  parseExtensionChangeMarker,\n  type ExtensionChangeTarget,\n} from \"../extensions/change-marker.js\";\nimport { getSettingsEmitter } from \"../settings/store.js\";\nimport { getSession } from \"./auth.js\";\n\nexport interface ChangeEvent {\n  version: number;\n  source: string;\n  type: string;\n  key?: string;\n  /**\n   * Owner email for tenant-scoped events. When absent, the event is treated\n   * as deployment-global (e.g. table-level \"something changed\" pings) and\n   * delivered to every authenticated poller. Specific events that should\n   * only fan out to one user MUST set this — otherwise polling clients\n   * across tenants see each other's signals.\n   */\n  owner?: string;\n  /** Optional org ID for org-scoped events. */\n  orgId?: string;\n  [k: string]: unknown;\n}\n\n// In-memory ring buffer of recent changes. Kept small since clients\n// poll frequently (every 2-3s) and only need events since their last poll.\nconst MAX_BUFFER = 200;\nlet _version = 0;\nconst _buffer: ChangeEvent[] = [];\nexport const POLL_CHANGE_EVENT = \"poll-change\";\nconst _pollEmitter = new EventEmitter();\n_pollEmitter.setMaxListeners(0);\n\n/**\n * Whether we've seeded _version from the DB. In serverless (Netlify,\n * Vercel, etc.) each invocation starts fresh — without seeding, _version\n * resets to 0 and polling clients see the version jump backwards, causing\n * duplicate events and stuck UI.\n */\nlet _versionSeeded = false;\n\n/** Tracks the latest updated_at we've seen from the DB, per table. */\nlet _lastDbCheck = 0;\n// Coalesces concurrent checkExternalDbChanges runs. The 1s throttle alone does\n// not prevent overlap when a single check takes longer than 1s — two overlapping\n// runs would each read+advance the shared watermarks and double-emit events.\nlet _checkPromise: Promise<void> | null = null;\nlet _lastAppStateTs = 0;\nlet _lastSettingsTs = 0;\nlet _lastExtensionsTs = 0;\nlet _lastExtensionsUpdatedAt: string | number | undefined;\nlet _lastExtensionMarkerTs = 0;\nlet _lastActionMarkerTs = 0;\n\n/**\n * Tracks the latest updated_at seen on the `__screen_refresh__` key in\n * application_state. Bumped when the agent calls the `refresh-screen` tool,\n * and surfaced as a distinct `screen-refresh` event so clients can remount\n * the main content subtree via React key.\n *\n * `_screenRefreshInitialized` guards against spurious emits on the first\n * poll after a restart (where an existing row would look like a fresh bump).\n * Once we've taken a baseline reading, any subsequent increase emits.\n */\nlet _lastScreenRefreshTs = 0;\nlet _screenRefreshInitialized = false;\n// Per-session high-water marks for `__screen_refresh__`. Each user's row is\n// tracked independently so a refresh triggered by one user only remounts that\n// user's screen (owner-scoped), never every authenticated poller.\nconst _lastScreenRefreshTsBySession = new Map<string, number>();\nconst SCREEN_REFRESH_KEY = \"__screen_refresh__\";\nlet _localEmittersWired = false;\n\nfunction wireLocalEmitters(): void {\n  if (_localEmittersWired) return;\n  _localEmittersWired = true;\n  getAppStateEmitter().on(\"app-state\", (event) => {\n    if (\n      event.key === EXTENSION_CHANGE_MARKER_KEY ||\n      event.key === ACTION_CHANGE_MARKER_KEY\n    ) {\n      return;\n    }\n    recordChange(event);\n  });\n  getSettingsEmitter().on(\"settings\", (event) => {\n    recordChange(event);\n  });\n}\n\nfunction timestampValue(value: unknown): number {\n  if (typeof value === \"number\" && Number.isFinite(value)) return value;\n  if (typeof value !== \"string\") return 0;\n  const numeric = Number(value);\n  if (Number.isFinite(numeric)) return numeric;\n  const parsed = Date.parse(value);\n  return Number.isFinite(parsed) ? parsed : 0;\n}\n\nfunction sqlWatermarkValue(value: unknown): string | number | undefined {\n  if (typeof value === \"string\" && value.length > 0) return value;\n  if (typeof value === \"number\" && Number.isFinite(value)) return value;\n  return undefined;\n}\n\nasync function readMaxUpdatedAtRaw(\n  db: {\n    execute: (\n      query: string | { sql: string; args?: unknown[] },\n    ) => Promise<{ rows: Array<Record<string, unknown>> }>;\n  },\n  table: \"application_state\" | \"settings\" | \"tools\",\n): Promise<unknown> {\n  try {\n    const result = await db.execute(\n      `SELECT MAX(updated_at) as max_ts FROM ${table}`,\n    );\n    return result.rows[0]?.max_ts;\n  } catch {\n    // Optional framework tables may not exist in every app yet.\n    return undefined;\n  }\n}\n\nasync function readMaxUpdatedAt(\n  db: {\n    execute: (\n      query: string | { sql: string; args?: unknown[] },\n    ) => Promise<{ rows: Array<Record<string, unknown>> }>;\n  },\n  table: \"application_state\" | \"settings\" | \"tools\",\n): Promise<number> {\n  return timestampValue(await readMaxUpdatedAtRaw(db, table));\n}\n\nasync function readExtensionMarkerMaxUpdatedAt(db: {\n  execute: (\n    query: string | { sql: string; args?: unknown[] },\n  ) => Promise<{ rows: Array<Record<string, unknown>> }>;\n}): Promise<number> {\n  try {\n    const result = await db.execute({\n      sql: \"SELECT MAX(updated_at) as max_ts FROM application_state WHERE key = ?\",\n      args: [EXTENSION_CHANGE_MARKER_KEY],\n    });\n    return timestampValue(result.rows[0]?.max_ts);\n  } catch {\n    return 0;\n  }\n}\n\nasync function readActionMarkerMaxUpdatedAt(db: {\n  execute: (\n    query: string | { sql: string; args?: unknown[] },\n  ) => Promise<{ rows: Array<Record<string, unknown>> }>;\n}): Promise<number> {\n  try {\n    const result = await db.execute({\n      sql: \"SELECT MAX(updated_at) as max_ts FROM application_state WHERE key = ?\",\n      args: [ACTION_CHANGE_MARKER_KEY],\n    });\n    return timestampValue(result.rows[0]?.max_ts);\n  } catch {\n    return 0;\n  }\n}\n\n/** Get the current global version counter. */\nexport function getVersion(): number {\n  return _version;\n}\n\nexport function getPollEmitter(): EventEmitter {\n  return _pollEmitter;\n}\n\nexport function canSeeChangeForUser(\n  event: ChangeEvent,\n  userEmail: string,\n  orgId: string | undefined,\n): boolean {\n  // Global / unowned events: every authenticated user gets them.\n  if (!event.owner && !event.orgId) return true;\n  if (event.owner && event.owner === userEmail) return true;\n  if (event.orgId && orgId && event.orgId === orgId) return true;\n  return false;\n}\n\n/** Record a change event. Called by emitter listeners. */\nexport function recordChange(event: {\n  source: string;\n  type: string;\n  key?: string;\n  [k: string]: unknown;\n}): void {\n  // Use timestamp-aligned versions so all serverless instances produce\n  // values in the same range (seeded from DB, then incremented via\n  // Date.now). Plain ++counter diverges across cold starts.\n  _version = Math.max(_version + 1, Date.now());\n  const entry: ChangeEvent = { ...event, version: _version };\n  _buffer.push(entry);\n  if (_buffer.length > MAX_BUFFER) {\n    _buffer.splice(0, _buffer.length - MAX_BUFFER);\n  }\n  _pollEmitter.emit(POLL_CHANGE_EVENT, entry);\n}\n\nfunction extensionTargetKey(target: ExtensionChangeTarget): string | null {\n  if (target.owner) return `owner:${target.owner}`;\n  if (target.orgId) return `org:${target.orgId}`;\n  return null;\n}\n\nfunction addExtensionTarget(\n  targets: Map<string, ExtensionChangeTarget>,\n  target: ExtensionChangeTarget,\n): void {\n  const key = extensionTargetKey(target);\n  if (key) targets.set(key, target);\n}\n\nfunction recordExtensionChanges(targets: ExtensionChangeTarget[]): void {\n  const uniqueTargets = new Map<string, ExtensionChangeTarget>();\n  for (const target of targets) addExtensionTarget(uniqueTargets, target);\n  for (const target of uniqueTargets.values()) {\n    recordChange({\n      source: \"extensions\",\n      type: \"change\",\n      key: \"*\",\n      ...(target.owner ? { owner: target.owner } : {}),\n      ...(target.orgId ? { orgId: target.orgId } : {}),\n    });\n  }\n}\n\nfunction recordActionChanges(targets: ActionChangeTarget[]): void {\n  for (const target of targets) {\n    recordChange({\n      source: \"action\",\n      type: \"change\",\n      key: target.actionName ?? \"*\",\n      ...(target.owner ? { owner: target.owner } : {}),\n      ...(target.orgId ? { orgId: target.orgId } : {}),\n    });\n  }\n}\n\nfunction extensionTargetsForRow(\n  row: Record<string, unknown>,\n  shareRows: Array<Record<string, unknown>>,\n): ExtensionChangeTarget[] {\n  const targets = new Map<string, ExtensionChangeTarget>();\n  const owner = typeof row.owner_email === \"string\" ? row.owner_email : \"\";\n  const orgId = typeof row.org_id === \"string\" ? row.org_id : \"\";\n  const visibility =\n    typeof row.visibility === \"string\" ? row.visibility : \"private\";\n\n  if (owner) addExtensionTarget(targets, { owner });\n  if (visibility === \"org\" && orgId) addExtensionTarget(targets, { orgId });\n\n  for (const share of shareRows) {\n    const principalType =\n      typeof share.principal_type === \"string\" ? share.principal_type : \"\";\n    const principalId =\n      typeof share.principal_id === \"string\" ? share.principal_id : \"\";\n    if (principalType === \"user\" && principalId) {\n      addExtensionTarget(targets, { owner: principalId });\n    } else if (principalType === \"org\" && principalId) {\n      addExtensionTarget(targets, { orgId: principalId });\n    }\n  }\n\n  return Array.from(targets.values());\n}\n\nasync function readExtensionTargetsForRows(\n  db: {\n    execute: (\n      query: string | { sql: string; args?: unknown[] },\n    ) => Promise<{ rows: Array<Record<string, unknown>> }>;\n  },\n  rows: Array<Record<string, unknown>>,\n): Promise<ExtensionChangeTarget[][]> {\n  const ids = rows\n    .map((row) => (typeof row.id === \"string\" ? row.id : \"\"))\n    .filter(Boolean);\n  const sharesByResourceId = new Map<string, Array<Record<string, unknown>>>();\n\n  if (ids.length > 0) {\n    try {\n      const placeholders = ids.map(() => \"?\").join(\", \");\n      const shareResult = await db.execute({\n        sql: `SELECT resource_id, principal_type, principal_id FROM tool_shares WHERE resource_id IN (${placeholders})`,\n        args: ids,\n      });\n      for (const share of shareResult.rows) {\n        const resourceId =\n          typeof share.resource_id === \"string\" ? share.resource_id : \"\";\n        if (!resourceId) continue;\n        const bucket = sharesByResourceId.get(resourceId) ?? [];\n        bucket.push(share);\n        sharesByResourceId.set(resourceId, bucket);\n      }\n    } catch {\n      // Sharing tables are optional during early app initialization.\n    }\n  }\n\n  return rows.map((row) =>\n    extensionTargetsForRow(\n      row,\n      sharesByResourceId.get(typeof row.id === \"string\" ? row.id : \"\") ?? [],\n    ),\n  );\n}\n\n/** Get all changes after a given version. */\nexport function getChangesSince(since: number): {\n  version: number;\n  events: ChangeEvent[];\n} {\n  if (since >= _version) {\n    return { version: _version, events: [] };\n  }\n  const events = _buffer.filter((e) => e.version > since);\n  return { version: _version, events };\n}\n\n/**\n * Get changes after a given version, filtered to events the caller is\n * allowed to see.\n *\n * Filtering rules:\n *   - Events without an `owner` are deployment-global (table-level pings,\n *     screen-refresh, etc.) and visible to every authenticated user.\n *   - Events with `owner === userEmail` go to that user.\n *   - Events with `orgId === orgId` go to anyone in that org.\n *   - All other owned events are filtered out.\n */\nexport function getChangesSinceForUser(\n  since: number,\n  userEmail: string,\n  orgId: string | undefined,\n): { version: number; events: ChangeEvent[] } {\n  if (since >= _version) {\n    return { version: _version, events: [] };\n  }\n  const events = _buffer.filter(\n    (e) => e.version > since && canSeeChangeForUser(e, userEmail, orgId),\n  );\n  return { version: _version, events };\n}\n\n/**\n * Seed _version from DB timestamps on the first call so serverless\n * cold starts don't return version 0 and confuse polling clients.\n */\nasync function seedVersionFromDb(): Promise<void> {\n  if (_versionSeeded) return;\n  _versionSeeded = true;\n\n  try {\n    const db = getDbExec();\n\n    const [\n      appTs,\n      settingsTs,\n      extensionsMaxUpdatedAt,\n      extensionMarkerTs,\n      actionMarkerTs,\n      refreshResult,\n    ] = await Promise.all([\n      readMaxUpdatedAt(db, \"application_state\"),\n      readMaxUpdatedAt(db, \"settings\"),\n      readMaxUpdatedAtRaw(db, \"tools\"),\n      readExtensionMarkerMaxUpdatedAt(db),\n      readActionMarkerMaxUpdatedAt(db),\n      db\n        .execute({\n          sql: \"SELECT session_id, updated_at FROM application_state WHERE key = ?\",\n          args: [SCREEN_REFRESH_KEY],\n        })\n        .catch(() => ({ rows: [] as Record<string, unknown>[] })),\n    ]);\n\n    const extensionsTs = timestampValue(extensionsMaxUpdatedAt);\n    let refreshTs = 0;\n    for (const row of refreshResult.rows) {\n      refreshTs = Math.max(refreshTs, timestampValue(row.updated_at));\n    }\n\n    // Seed version — never decrease an already-set value\n    _version = Math.max(\n      _version,\n      appTs,\n      settingsTs,\n      extensionsTs,\n      extensionMarkerTs,\n      actionMarkerTs,\n    );\n\n    // Set baselines so checkExternalDbChanges detects future writes\n    _lastAppStateTs = appTs;\n    _lastSettingsTs = settingsTs;\n    _lastExtensionsTs = extensionsTs;\n    _lastExtensionsUpdatedAt = sqlWatermarkValue(extensionsMaxUpdatedAt);\n    _lastExtensionMarkerTs = extensionMarkerTs;\n    // Action markers are durable specifically so a web server can observe work\n    // performed by a separate action process. Do not baseline past an existing\n    // marker on cold start, or the first poll after the action will miss it.\n    _lastActionMarkerTs = 0;\n    _lastScreenRefreshTs = refreshTs;\n    _lastScreenRefreshTsBySession.clear();\n    for (const row of refreshResult.rows) {\n      if (typeof row.session_id === \"string\") {\n        _lastScreenRefreshTsBySession.set(\n          row.session_id,\n          timestampValue(row.updated_at),\n        );\n      }\n    }\n    _screenRefreshInitialized = true;\n    // Skip the redundant cold-start recheck unless there is an existing durable\n    // action marker that the first poll still needs to emit.\n    _lastDbCheck = actionMarkerTs > 0 ? 0 : Date.now();\n  } catch {\n    // Tables may not exist yet — ignore\n  }\n}\n\n/**\n * Check for cross-process DB writes by comparing updated_at timestamps.\n * Runs at most once per second to avoid excessive queries.\n */\nasync function checkExternalDbChanges(): Promise<void> {\n  const now = Date.now();\n  if (now - _lastDbCheck < 1000) return;\n  // Coalesce: if a check is already running, await it instead of starting a\n  // second overlapping run that would double-advance the shared watermarks\n  // (and double-emit change events).\n  if (_checkPromise) return _checkPromise;\n  _lastDbCheck = now;\n  _checkPromise = doCheckExternalDbChanges().finally(() => {\n    _checkPromise = null;\n  });\n  return _checkPromise;\n}\n\nasync function doCheckExternalDbChanges(): Promise<void> {\n  try {\n    const db = getDbExec();\n\n    // These reads are independent — each compares the DB against module-level\n    // high-water marks (`_lastAppStateTs`, etc.) rather than another query's\n    // result, and none of them mutate state before processing below. On a\n    // serverless SQL backend every `await` is a network round-trip, so running\n    // them concurrently shaves stacked latency off every poll cycle. Results\n    // are still processed in the original sequential order, and conditional\n    // follow-up queries (action/extension marker detail rows, tool-shares) stay\n    // sequential within their branch where they depend on these results.\n    const [\n      appResult,\n      actionMarkerTs,\n      refreshResult,\n      extensionMarkerTs,\n      settingsTs,\n      extensionsMaxUpdatedAt,\n    ] = await Promise.all([\n      db.execute({\n        sql: \"SELECT session_id, key, updated_at FROM application_state WHERE updated_at > ? ORDER BY updated_at ASC\",\n        args: [_lastAppStateTs],\n      }),\n      readActionMarkerMaxUpdatedAt(db),\n      db.execute({\n        sql: \"SELECT session_id, updated_at, value FROM application_state WHERE key = ?\",\n        args: [SCREEN_REFRESH_KEY],\n      }),\n      readExtensionMarkerMaxUpdatedAt(db),\n      readMaxUpdatedAt(db, \"settings\"),\n      readMaxUpdatedAtRaw(db, \"tools\"),\n    ]);\n\n    // Check application_state for external writes. Preserve the changed key so\n    // clients can invalidate one-shot command queries (`navigate`, `__set_url__`)\n    // only when those command rows actually change; noisy keys such as\n    // `slide-fit-check` should not wake navigation readers.\n    if (appResult.rows.length > 0) {\n      const appTs = appResult.rows.reduce(\n        (max, row) => Math.max(max, timestampValue(row.updated_at)),\n        _lastAppStateTs,\n      );\n      if (_lastAppStateTs > 0) {\n        for (const row of appResult.rows) {\n          const key = typeof row.key === \"string\" ? row.key : \"*\";\n          if (\n            key === EXTENSION_CHANGE_MARKER_KEY ||\n            key === ACTION_CHANGE_MARKER_KEY\n          ) {\n            continue;\n          }\n          const owner =\n            typeof row.session_id === \"string\" ? row.session_id : undefined;\n          recordChange({\n            source: \"app-state\",\n            type: \"change\",\n            key,\n            ...(owner ? { owner } : {}),\n          });\n        }\n      }\n      _lastAppStateTs = appTs;\n    }\n\n    // Mutating actions write a durable marker in addition to the in-process\n    // event. This lets dev-mode `pnpm action ...` child processes and\n    // serverless action invocations wake the web server's SSE/poll loop as a\n    // first-class source:\"action\" event rather than a generic app-state bump.\n    // `actionMarkerTs` was read above; the detail-row query below is conditional\n    // on it and depends on its result, so it stays sequential.\n    if (actionMarkerTs > _lastActionMarkerTs) {\n      const actionMarkerResult = await db.execute({\n        sql: \"SELECT session_id, value, updated_at FROM application_state WHERE key = ? ORDER BY updated_at ASC\",\n        args: [ACTION_CHANGE_MARKER_KEY],\n      });\n      const changedActionMarkers = actionMarkerResult.rows.filter(\n        (row) => timestampValue(row.updated_at) > _lastActionMarkerTs,\n      );\n      recordActionChanges(\n        changedActionMarkers\n          .map((row) => parseActionChangeMarker(row.session_id, row.value))\n          .filter((target): target is ActionChangeTarget => !!target),\n      );\n      _lastActionMarkerTs = actionMarkerTs;\n    }\n\n    // Check for screen-refresh requests from the agent. The `refresh-screen`\n    // tool writes to application_state under a well-known key; when its\n    // updated_at bumps, emit a distinct event so the client invalidates\n    // all queries (not just the ones matching its default queryKey prefix).\n    // `refreshResult` was read above.\n    const refreshTs = refreshResult.rows.reduce(\n      (max, row) => Math.max(max, timestampValue(row.updated_at)),\n      0,\n    );\n    if (!_screenRefreshInitialized) {\n      _lastScreenRefreshTs = refreshTs;\n      for (const row of refreshResult.rows) {\n        if (typeof row.session_id === \"string\") {\n          _lastScreenRefreshTsBySession.set(\n            row.session_id,\n            timestampValue(row.updated_at),\n          );\n        }\n      }\n      _screenRefreshInitialized = true;\n    } else if (refreshTs > _lastScreenRefreshTs) {\n      // Emit a per-user event only for the session(s) whose row actually\n      // advanced, scoped with `owner` so canSeeChangeForUser delivers it only\n      // to that user — not every authenticated poller.\n      for (const row of refreshResult.rows) {\n        const owner =\n          typeof row.session_id === \"string\" ? row.session_id : undefined;\n        if (!owner) continue;\n        const rowTs = timestampValue(row.updated_at);\n        if (rowTs <= (_lastScreenRefreshTsBySession.get(owner) ?? 0)) continue;\n        let scope: string | undefined;\n        try {\n          const raw = row.value;\n          if (typeof raw === \"string\") {\n            const parsed = JSON.parse(raw);\n            if (typeof parsed?.scope === \"string\") scope = parsed.scope;\n          }\n        } catch {}\n        recordChange({\n          source: \"screen-refresh\",\n          type: \"change\",\n          key: SCREEN_REFRESH_KEY,\n          owner,\n          ...(scope ? { scope } : {}),\n        });\n        _lastScreenRefreshTsBySession.set(owner, rowTs);\n      }\n      _lastScreenRefreshTs = refreshTs;\n    }\n\n    // Extension mutations write a durable marker row so delete and hide/unhide\n    // operations are visible across serverless invocations. Translate those\n    // marker rows back into extension-source events for targeted client\n    // invalidation while preserving user/org scope. `extensionMarkerTs` was read\n    // above; the detail-row query below depends on it and stays sequential.\n    if (extensionMarkerTs > _lastExtensionMarkerTs) {\n      const extensionMarkerResult = await db.execute({\n        sql: \"SELECT session_id, value, updated_at FROM application_state WHERE key = ? ORDER BY updated_at ASC\",\n        args: [EXTENSION_CHANGE_MARKER_KEY],\n      });\n      const changedExtensionMarkers = extensionMarkerResult.rows.filter(\n        (row) => timestampValue(row.updated_at) > _lastExtensionMarkerTs,\n      );\n      if (_lastExtensionMarkerTs > 0) {\n        recordExtensionChanges(\n          changedExtensionMarkers\n            .map((row) => parseExtensionChangeMarker(row.session_id, row.value))\n            .filter((target): target is ExtensionChangeTarget => !!target),\n        );\n      }\n      _lastExtensionMarkerTs = extensionMarkerTs;\n    }\n\n    // Check settings for external writes. `settingsTs` was read above.\n    if (settingsTs > _lastSettingsTs) {\n      if (_lastSettingsTs > 0) {\n        recordChange({ source: \"settings\", type: \"change\", key: \"*\" });\n      }\n      _lastSettingsTs = settingsTs;\n    }\n\n    // Extension rows live in the legacy physical `tools` table. Keep this as a\n    // compatibility fallback for direct table writes, but scope events to the\n    // resource owner/share targets instead of broadcasting deployment-wide.\n    // `extensionsMaxUpdatedAt` was read above; the per-row query below is\n    // conditional on `extensionsTs` and stays sequential.\n    const extensionsTs = timestampValue(extensionsMaxUpdatedAt);\n    if (extensionsTs > _lastExtensionsTs) {\n      const since = _lastExtensionsUpdatedAt;\n      const extensionResult =\n        since === undefined\n          ? await db.execute({\n              sql: \"SELECT id, owner_email, org_id, visibility, updated_at FROM tools ORDER BY updated_at ASC\",\n              args: [],\n            })\n          : await db.execute({\n              sql: \"SELECT id, owner_email, org_id, visibility, updated_at FROM tools WHERE updated_at > ? ORDER BY updated_at ASC\",\n              args: [since],\n            });\n      const changedExtensionRows = extensionResult.rows.filter(\n        (row) => timestampValue(row.updated_at) > _lastExtensionsTs,\n      );\n      if (_lastExtensionsTs > 0) {\n        const targetsByRow = await readExtensionTargetsForRows(\n          db,\n          changedExtensionRows,\n        );\n        for (const targets of targetsByRow) recordExtensionChanges(targets);\n      }\n      _lastExtensionsTs = extensionsTs;\n      _lastExtensionsUpdatedAt = sqlWatermarkValue(extensionsMaxUpdatedAt);\n    }\n  } catch {\n    // Tables may not exist yet — ignore\n  }\n}\n\n/**\n * Create an H3 handler for the poll endpoint.\n *\n * GET /_agent-native/poll?since=N → { version, events[] }\n *\n * Requires an authenticated session. Events are filtered to the caller's\n * tenant — global events (owner-less, table-level pings) reach every\n * authenticated caller; owned events reach only the matching user/org.\n * Without auth + filtering, an anonymous attacker could poll the deployment\n * and infer cross-tenant activity from the global event stream.\n */\nexport function createPollHandler() {\n  wireLocalEmitters();\n  return defineEventHandler(async (event) => {\n    const session = await getSession(event).catch(() => null);\n    if (!session?.email) {\n      setResponseStatus(event, 401);\n      return { error: \"Unauthenticated\" };\n    }\n    // On cold start, seed _version from DB so we don't return version: 0\n    await seedVersionFromDb();\n    // Check for cross-process writes before responding\n    await checkExternalDbChanges();\n\n    const query = getQuery(event);\n    const since = parseInt(String(query.since ?? \"0\"), 10) || 0;\n    return getChangesSinceForUser(since, session.email, session.orgId);\n  });\n}\n"]}
+{"version":3,"file":"poll.js","sourceRoot":"","sources":["../../src/server/poll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;AAErE,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,GAE3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAiCvC,oEAAoE;AACpE,2EAA2E;AAC3E,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB,MAAM,OAAO,GAAkB,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAC/C,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;AACxC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AAEhC;;;;;GAKG;AACH,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B,sEAAsE;AACtE,IAAI,YAAY,GAAG,CAAC,CAAC;AACrB,+EAA+E;AAC/E,iFAAiF;AACjF,6EAA6E;AAC7E,IAAI,aAAa,GAAyB,IAAI,CAAC;AAC/C,IAAI,eAAe,GAAG,CAAC,CAAC;AACxB,IAAI,eAAe,GAAG,CAAC,CAAC;AACxB,IAAI,iBAAiB,GAAG,CAAC,CAAC;AAC1B,IAAI,wBAAqD,CAAC;AAC1D,IAAI,sBAAsB,GAAG,CAAC,CAAC;AAC/B,IAAI,mBAAmB,GAAG,CAAC,CAAC;AAE5B;;;;;;;;;GASG;AACH,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAC7B,IAAI,yBAAyB,GAAG,KAAK,CAAC;AACtC,4EAA4E;AAC5E,8EAA8E;AAC9E,kEAAkE;AAClE,MAAM,6BAA6B,GAAG,IAAI,GAAG,EAAkB,CAAC;AAChE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,IAAI,mBAAmB,GAAG,KAAK,CAAC;AAEhC,SAAS,iBAAiB;IACxB,IAAI,mBAAmB;QAAE,OAAO;IAChC,mBAAmB,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;QAC7C,IACE,KAAK,CAAC,GAAG,KAAK,2BAA2B;YACzC,KAAK,CAAC,GAAG,KAAK,wBAAwB,EACtC,CAAC;YACD,OAAO;QACT,CAAC;QACD,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,kBAAkB,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;QAC5C,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,EAIC,EACD,KAAiD;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAC7B,yCAAyC,KAAK,EAAE,CACjD,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,EAIC,EACD,KAAiD;IAEjD,OAAO,cAAc,CAAC,MAAM,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,EAI9C;IACC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,uEAAuE;YAC5E,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,EAI3C;IACC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,uEAAuE;YAC5E,IAAI,EAAE,CAAC,wBAAwB,CAAC;SACjC,CAAC,CAAC;QACH,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,UAAU;IACxB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmD,CAAC;AAChF,+EAA+E;AAC/E,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;AAC1C,oEAAoE;AACpE,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC3D,6CAA6C;AAC7C,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,uDAAuD;AACvD,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,SAAS,cAAc,CACrB,SAAiB,EACjB,YAAoB,EACpB,UAAkB;IAElB,OAAO,GAAG,SAAS,IAAI,YAAY,IAAI,UAAU,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB,EAAE,UAAkB;IACjE,OAAO,GAAG,YAAY,IAAI,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB;IACtC,OAAO,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,wBAAwB,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,YAAoB,EACpB,UAAkB;IAElB,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAChE,wBAAwB,CAAC,GAAG,CAC1B,WAAW,EACX,CAAC,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CACrD,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,OAAgB,EAAE,GAAW;IAChE,yEAAyE;IACzE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,IAAI,YAAY,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;QACzC,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,GAAG,gBAAgB,CAAC;QACtD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,EAAE,OAAO,IAAI,QAAQ;gBAAE,MAAM;QACnC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,GAAW,EACX,YAAoB,EACpB,UAAkB,EAClB,SAAiB,EACjB,KAAyB;IAEzB,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IACrC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7D,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,0EAA0E;YAC1E,mEAAmE;YACnE,yEAAyE;YACzE,+CAA+C;YAC/C,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,UAAU,EAAE;gBAC3D,SAAS;gBACT,KAAK;aACN,CAAC,CAAC;YACH,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK;gBAAE,OAAO;YACvE,cAAc,CAAC,GAAG,EAAE,MAAM,IAAI,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,yEAAyE;YACzE,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK;gBAAE,OAAO;YACvE,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;gBAAS,CAAC;YACT,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gCAAgC;IAC9C,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,wBAAwB,CAAC,KAAK,EAAE,CAAC;AACnC,CAAC;AAID;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAA2E,EAC3E,SAAiB,EACjB,KAAyB;IAEzB,OAAO,0BAA0B,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,0BAA0B,CACjC,KAA2E,EAC3E,SAAiB,EACjB,KAAyB;IAEzB,2EAA2E;IAC3E,4EAA4E;IAC5E,yCAAyC;IACzC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAC1E,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAEpE,yEAAyE;IACzE,uEAAuE;IACvE,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,4DAA4D;YAC5D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/C,CAAC;QACD,2EAA2E;QAC3E,+DAA+D;QAC/D,mBAAmB,CACjB,GAAG,EACH,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,UAAU,EAChB,SAAS,EACT,KAAK,CACN,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAAC,KAK5B;IACC,qEAAqE;IACrE,iEAAiE;IACjE,0DAA0D;IAC1D,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAgB,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IACjD,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA6B;IACvD,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,SAAS,MAAM,CAAC,KAAK,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA2C,EAC3C,MAA6B;IAE7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgC;IAC9D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC/D,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACxE,KAAK,MAAM,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,YAAY,CAAC;YACX,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,GAAG;YACR,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA6B;IACxD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,YAAY,CAAC;YACX,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG;YAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAA4B,EAC5B,SAAyC;IAEzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACzD,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,UAAU,GACd,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAElE,IAAI,KAAK;QAAE,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,IAAI,UAAU,KAAK,KAAK,IAAI,KAAK;QAAE,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAE1E,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,aAAa,GACjB,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,WAAW,GACf,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,aAAa,KAAK,MAAM,IAAI,WAAW,EAAE,CAAC;YAC5C,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,aAAa,KAAK,KAAK,IAAI,WAAW,EAAE,CAAC;YAClD,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,EAIC,EACD,IAAoC;IAEpC,MAAM,GAAG,GAAG,IAAI;SACb,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACxD,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA0C,CAAC;IAE7E,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBACnC,GAAG,EAAE,2FAA2F,YAAY,GAAG;gBAC/G,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;gBACrC,MAAM,UAAU,GACd,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACtB,sBAAsB,CACpB,GAAG,EACH,kBAAkB,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CACvE,CACF,CAAC;AACJ,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,eAAe,CAAC,KAAa;IAI3C,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAa,EACb,SAAiB,EACjB,KAAyB;IAEzB,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK;YAAE,SAAS;QACrC,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YAC7C,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB;IAC9B,IAAI,cAAc;QAAE,OAAO;IAC3B,cAAc,GAAG,IAAI,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QAEvB,MAAM,CACJ,KAAK,EACL,UAAU,EACV,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACd,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,gBAAgB,CAAC,EAAE,EAAE,mBAAmB,CAAC;YACzC,gBAAgB,CAAC,EAAE,EAAE,UAAU,CAAC;YAChC,mBAAmB,CAAC,EAAE,EAAE,OAAO,CAAC;YAChC,+BAA+B,CAAC,EAAE,CAAC;YACnC,4BAA4B,CAAC,EAAE,CAAC;YAChC,EAAE;iBACC,OAAO,CAAC;gBACP,GAAG,EAAE,oEAAoE;gBACzE,IAAI,EAAE,CAAC,kBAAkB,CAAC;aAC3B,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAA+B,EAAE,CAAC,CAAC;SAC5D,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAC5D,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;YACrC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,qDAAqD;QACrD,QAAQ,GAAG,IAAI,CAAC,GAAG,CACjB,QAAQ,EACR,KAAK,EACL,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,cAAc,CACf,CAAC;QAEF,gEAAgE;QAChE,eAAe,GAAG,KAAK,CAAC;QACxB,eAAe,GAAG,UAAU,CAAC;QAC7B,iBAAiB,GAAG,YAAY,CAAC;QACjC,wBAAwB,GAAG,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QACrE,sBAAsB,GAAG,iBAAiB,CAAC;QAC3C,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,mBAAmB,GAAG,CAAC,CAAC;QACxB,oBAAoB,GAAG,SAAS,CAAC;QACjC,6BAA6B,CAAC,KAAK,EAAE,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACvC,6BAA6B,CAAC,GAAG,CAC/B,GAAG,CAAC,UAAU,EACd,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QACD,yBAAyB,GAAG,IAAI,CAAC;QACjC,4EAA4E;QAC5E,yDAAyD;QACzD,YAAY,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,YAAY,GAAG,IAAI;QAAE,OAAO;IACtC,0EAA0E;IAC1E,yEAAyE;IACzE,mCAAmC;IACnC,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,YAAY,GAAG,GAAG,CAAC;IACnB,aAAa,GAAG,wBAAwB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACtD,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,wBAAwB;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QAEvB,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,CACJ,SAAS,EACT,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,sBAAsB,EACvB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,EAAE,CAAC,OAAO,CAAC;gBACT,GAAG,EAAE,wGAAwG;gBAC7G,IAAI,EAAE,CAAC,eAAe,CAAC;aACxB,CAAC;YACF,4BAA4B,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,OAAO,CAAC;gBACT,GAAG,EAAE,2EAA2E;gBAChF,IAAI,EAAE,CAAC,kBAAkB,CAAC;aAC3B,CAAC;YACF,+BAA+B,CAAC,EAAE,CAAC;YACnC,gBAAgB,CAAC,EAAE,EAAE,UAAU,CAAC;YAChC,mBAAmB,CAAC,EAAE,EAAE,OAAO,CAAC;SACjC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,8EAA8E;QAC9E,mEAAmE;QACnE,wDAAwD;QACxD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CACjC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAC3D,eAAe,CAChB,CAAC;YACF,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;gBACxB,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;oBACjC,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBACxD,IACE,GAAG,KAAK,2BAA2B;wBACnC,GAAG,KAAK,wBAAwB,EAChC,CAAC;wBACD,SAAS;oBACX,CAAC;oBACD,MAAM,KAAK,GACT,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;oBAClE,YAAY,CAAC;wBACX,MAAM,EAAE,WAAW;wBACnB,IAAI,EAAE,QAAQ;wBACd,GAAG;wBACH,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,eAAe,GAAG,KAAK,CAAC;QAC1B,CAAC;QAED,wEAAwE;QACxE,kEAAkE;QAClE,yEAAyE;QACzE,0EAA0E;QAC1E,6EAA6E;QAC7E,2DAA2D;QAC3D,IAAI,cAAc,GAAG,mBAAmB,EAAE,CAAC;YACzC,MAAM,kBAAkB,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBAC1C,GAAG,EAAE,mGAAmG;gBACxG,IAAI,EAAE,CAAC,wBAAwB,CAAC;aACjC,CAAC,CAAC;YACH,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CACzD,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,mBAAmB,CAC9D,CAAC;YACF,mBAAmB,CACjB,oBAAoB;iBACjB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;iBAChE,MAAM,CAAC,CAAC,MAAM,EAAgC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAC9D,CAAC;YACF,mBAAmB,GAAG,cAAc,CAAC;QACvC,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,oEAAoE;QACpE,wEAAwE;QACxE,kCAAkC;QAClC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CACzC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAC3D,CAAC,CACF,CAAC;QACF,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC/B,oBAAoB,GAAG,SAAS,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;gBACrC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACvC,6BAA6B,CAAC,GAAG,CAC/B,GAAG,CAAC,UAAU,EACd,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAC/B,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,yBAAyB,GAAG,IAAI,CAAC;QACnC,CAAC;aAAM,IAAI,SAAS,GAAG,oBAAoB,EAAE,CAAC;YAC5C,mEAAmE;YACnE,wEAAwE;YACxE,iDAAiD;YACjD,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;gBACrC,MAAM,KAAK,GACT,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClE,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC7C,IAAI,KAAK,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACvE,IAAI,KAAyB,CAAC;gBAC9B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;oBACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;wBAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAC/B,IAAI,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ;4BAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;oBAC9D,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;gBACV,YAAY,CAAC;oBACX,MAAM,EAAE,gBAAgB;oBACxB,IAAI,EAAE,QAAQ;oBACd,GAAG,EAAE,kBAAkB;oBACvB,KAAK;oBACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5B,CAAC,CAAC;gBACH,6BAA6B,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;YACD,oBAAoB,GAAG,SAAS,CAAC;QACnC,CAAC;QAED,2EAA2E;QAC3E,wEAAwE;QACxE,oEAAoE;QACpE,6EAA6E;QAC7E,wEAAwE;QACxE,IAAI,iBAAiB,GAAG,sBAAsB,EAAE,CAAC;YAC/C,MAAM,qBAAqB,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBAC7C,GAAG,EAAE,mGAAmG;gBACxG,IAAI,EAAE,CAAC,2BAA2B,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,uBAAuB,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAC/D,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,sBAAsB,CACjE,CAAC;YACF,IAAI,sBAAsB,GAAG,CAAC,EAAE,CAAC;gBAC/B,sBAAsB,CACpB,uBAAuB;qBACpB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;qBACnE,MAAM,CAAC,CAAC,MAAM,EAAmC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CACjE,CAAC;YACJ,CAAC;YACD,sBAAsB,GAAG,iBAAiB,CAAC;QAC7C,CAAC;QAED,mEAAmE;QACnE,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;YACjC,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;gBACxB,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,eAAe,GAAG,UAAU,CAAC;QAC/B,CAAC;QAED,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,sDAAsD;QACtD,MAAM,YAAY,GAAG,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAC5D,IAAI,YAAY,GAAG,iBAAiB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,wBAAwB,CAAC;YACvC,MAAM,eAAe,GACnB,KAAK,KAAK,SAAS;gBACjB,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC;oBACf,GAAG,EAAE,2FAA2F;oBAChG,IAAI,EAAE,EAAE;iBACT,CAAC;gBACJ,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC;oBACf,GAAG,EAAE,gHAAgH;oBACrH,IAAI,EAAE,CAAC,KAAK,CAAC;iBACd,CAAC,CAAC;YACT,MAAM,oBAAoB,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CACtD,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,iBAAiB,CAC5D,CAAC;YACF,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,YAAY,GAAG,MAAM,2BAA2B,CACpD,EAAE,EACF,oBAAoB,CACrB,CAAC;gBACF,KAAK,MAAM,OAAO,IAAI,YAAY;oBAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YACD,iBAAiB,GAAG,YAAY,CAAC;YACjC,wBAAwB,GAAG,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB;IAC/B,iBAAiB,EAAE,CAAC;IACpB,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACtC,CAAC;QACD,qEAAqE;QACrE,MAAM,iBAAiB,EAAE,CAAC;QAC1B,mDAAmD;QACnD,MAAM,sBAAsB,EAAE,CAAC;QAE/B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Polling-based change notification.\n *\n * Replaces SSE with a simple version counter. Each DB mutation (app-state,\n * settings, resources) increments the version. Clients poll `/_agent-native/poll?since=N`\n * and receive any events that occurred after version N.\n *\n * Works in all deployment environments (serverless, edge, long-lived).\n *\n * Also detects cross-process DB writes by periodically checking the\n * application_state and settings tables' updated_at timestamps. This ensures\n * that changes made by external processes (e.g., CLI actions, cron jobs)\n * are picked up even though they don't call recordChange() in this process.\n */\n\nimport { EventEmitter } from \"node:events\";\n\nimport { defineEventHandler, getQuery, setResponseStatus } from \"h3\";\n\nimport {\n  ACTION_CHANGE_MARKER_KEY,\n  parseActionChangeMarker,\n  type ActionChangeTarget,\n} from \"../action-change-marker.js\";\nimport { getAppStateEmitter } from \"../application-state/emitter.js\";\nimport { getDbExec } from \"../db/client.js\";\nimport {\n  EXTENSION_CHANGE_MARKER_KEY,\n  parseExtensionChangeMarker,\n  type ExtensionChangeTarget,\n} from \"../extensions/change-marker.js\";\nimport { getSettingsEmitter } from \"../settings/store.js\";\nimport { getSession } from \"./auth.js\";\n\nexport interface ChangeEvent {\n  version: number;\n  source: string;\n  type: string;\n  key?: string;\n  /**\n   * Owner email for tenant-scoped events. When absent, the event is treated\n   * as deployment-global (e.g. table-level \"something changed\" pings) and\n   * delivered to every authenticated poller. Specific events that should\n   * only fan out to one user MUST set this — otherwise polling clients\n   * across tenants see each other's signals.\n   */\n  owner?: string;\n  /** Optional org ID for org-scoped events. */\n  orgId?: string;\n  /**\n   * Shareable resource type this event belongs to (e.g. \"document\"). When\n   * present together with `resourceId`, the per-user delivery filter\n   * (`canSeeChangeForUser`) can run an access-aware check so non-owner sharees\n   * with explicit viewer+ access receive the push instead of only the poll\n   * fallback. See the SYNC-CACHE note above `canSeeChangeForUser`.\n   */\n  resourceType?: string;\n  /**\n   * Shareable resource id this event belongs to. Paired with `resourceType`\n   * to drive the access-aware delivery check in `canSeeChangeForUser`.\n   */\n  resourceId?: string;\n  [k: string]: unknown;\n}\n\n// In-memory ring buffer of recent changes. Kept small since clients\n// poll frequently (every 2-3s) and only need events since their last poll.\nconst MAX_BUFFER = 200;\nlet _version = 0;\nconst _buffer: ChangeEvent[] = [];\nexport const POLL_CHANGE_EVENT = \"poll-change\";\nconst _pollEmitter = new EventEmitter();\n_pollEmitter.setMaxListeners(0);\n\n/**\n * Whether we've seeded _version from the DB. In serverless (Netlify,\n * Vercel, etc.) each invocation starts fresh — without seeding, _version\n * resets to 0 and polling clients see the version jump backwards, causing\n * duplicate events and stuck UI.\n */\nlet _versionSeeded = false;\n\n/** Tracks the latest updated_at we've seen from the DB, per table. */\nlet _lastDbCheck = 0;\n// Coalesces concurrent checkExternalDbChanges runs. The 1s throttle alone does\n// not prevent overlap when a single check takes longer than 1s — two overlapping\n// runs would each read+advance the shared watermarks and double-emit events.\nlet _checkPromise: Promise<void> | null = null;\nlet _lastAppStateTs = 0;\nlet _lastSettingsTs = 0;\nlet _lastExtensionsTs = 0;\nlet _lastExtensionsUpdatedAt: string | number | undefined;\nlet _lastExtensionMarkerTs = 0;\nlet _lastActionMarkerTs = 0;\n\n/**\n * Tracks the latest updated_at seen on the `__screen_refresh__` key in\n * application_state. Bumped when the agent calls the `refresh-screen` tool,\n * and surfaced as a distinct `screen-refresh` event so clients can remount\n * the main content subtree via React key.\n *\n * `_screenRefreshInitialized` guards against spurious emits on the first\n * poll after a restart (where an existing row would look like a fresh bump).\n * Once we've taken a baseline reading, any subsequent increase emits.\n */\nlet _lastScreenRefreshTs = 0;\nlet _screenRefreshInitialized = false;\n// Per-session high-water marks for `__screen_refresh__`. Each user's row is\n// tracked independently so a refresh triggered by one user only remounts that\n// user's screen (owner-scoped), never every authenticated poller.\nconst _lastScreenRefreshTsBySession = new Map<string, number>();\nconst SCREEN_REFRESH_KEY = \"__screen_refresh__\";\nlet _localEmittersWired = false;\n\nfunction wireLocalEmitters(): void {\n  if (_localEmittersWired) return;\n  _localEmittersWired = true;\n  getAppStateEmitter().on(\"app-state\", (event) => {\n    if (\n      event.key === EXTENSION_CHANGE_MARKER_KEY ||\n      event.key === ACTION_CHANGE_MARKER_KEY\n    ) {\n      return;\n    }\n    recordChange(event);\n  });\n  getSettingsEmitter().on(\"settings\", (event) => {\n    recordChange(event);\n  });\n}\n\nfunction timestampValue(value: unknown): number {\n  if (typeof value === \"number\" && Number.isFinite(value)) return value;\n  if (typeof value !== \"string\") return 0;\n  const numeric = Number(value);\n  if (Number.isFinite(numeric)) return numeric;\n  const parsed = Date.parse(value);\n  return Number.isFinite(parsed) ? parsed : 0;\n}\n\nfunction sqlWatermarkValue(value: unknown): string | number | undefined {\n  if (typeof value === \"string\" && value.length > 0) return value;\n  if (typeof value === \"number\" && Number.isFinite(value)) return value;\n  return undefined;\n}\n\nasync function readMaxUpdatedAtRaw(\n  db: {\n    execute: (\n      query: string | { sql: string; args?: unknown[] },\n    ) => Promise<{ rows: Array<Record<string, unknown>> }>;\n  },\n  table: \"application_state\" | \"settings\" | \"tools\",\n): Promise<unknown> {\n  try {\n    const result = await db.execute(\n      `SELECT MAX(updated_at) as max_ts FROM ${table}`,\n    );\n    return result.rows[0]?.max_ts;\n  } catch {\n    // Optional framework tables may not exist in every app yet.\n    return undefined;\n  }\n}\n\nasync function readMaxUpdatedAt(\n  db: {\n    execute: (\n      query: string | { sql: string; args?: unknown[] },\n    ) => Promise<{ rows: Array<Record<string, unknown>> }>;\n  },\n  table: \"application_state\" | \"settings\" | \"tools\",\n): Promise<number> {\n  return timestampValue(await readMaxUpdatedAtRaw(db, table));\n}\n\nasync function readExtensionMarkerMaxUpdatedAt(db: {\n  execute: (\n    query: string | { sql: string; args?: unknown[] },\n  ) => Promise<{ rows: Array<Record<string, unknown>> }>;\n}): Promise<number> {\n  try {\n    const result = await db.execute({\n      sql: \"SELECT MAX(updated_at) as max_ts FROM application_state WHERE key = ?\",\n      args: [EXTENSION_CHANGE_MARKER_KEY],\n    });\n    return timestampValue(result.rows[0]?.max_ts);\n  } catch {\n    return 0;\n  }\n}\n\nasync function readActionMarkerMaxUpdatedAt(db: {\n  execute: (\n    query: string | { sql: string; args?: unknown[] },\n  ) => Promise<{ rows: Array<Record<string, unknown>> }>;\n}): Promise<number> {\n  try {\n    const result = await db.execute({\n      sql: \"SELECT MAX(updated_at) as max_ts FROM application_state WHERE key = ?\",\n      args: [ACTION_CHANGE_MARKER_KEY],\n    });\n    return timestampValue(result.rows[0]?.max_ts);\n  } catch {\n    return 0;\n  }\n}\n\n/** Get the current global version counter. */\nexport function getVersion(): number {\n  return _version;\n}\n\nexport function getPollEmitter(): EventEmitter {\n  return _pollEmitter;\n}\n\n/**\n * In-memory, TTL'd access cache for the access-aware branch of\n * `canSeeChangeForUser`. Keyed by `${userEmail}|${resourceType}|${resourceId}`.\n *\n * Insertion order doubles as FIFO for eviction (JS Maps preserve insertion\n * order), so we can evict the oldest entries when we exceed the cap.\n */\nconst _accessCache = new Map<string, { allowed: boolean; checkedAt: number }>();\n/** In-flight background access checks, keyed identically, to dedupe bursts. */\nconst _accessInFlight = new Set<string>();\n/** Per-resource generation bumped when shares/visibility change. */\nconst _accessInvalidationEpoch = new Map<string, number>();\n/** TTL for an allowed (true) cache entry. */\nconst ACCESS_CACHE_TTL_MS = 30_000;\n/**\n * Shorter TTL for a denied (false) entry so a transient DB error (which we\n * fail-closed on) doesn't lock a legitimate user out of the push path for the\n * full 30s — they recover on their next event after this window.\n */\nconst ACCESS_CACHE_DENY_TTL_MS = 5_000;\n/** Max cache entries before FIFO eviction kicks in. */\nconst ACCESS_CACHE_MAX = 500;\n\nfunction accessCacheKey(\n  userEmail: string,\n  resourceType: string,\n  resourceId: string,\n): string {\n  return `${userEmail}|${resourceType}|${resourceId}`;\n}\n\nfunction accessResourceKey(resourceType: string, resourceId: string): string {\n  return `${resourceType}|${resourceId}`;\n}\n\nfunction accessCacheTtl(allowed: boolean): number {\n  return allowed ? ACCESS_CACHE_TTL_MS : ACCESS_CACHE_DENY_TTL_MS;\n}\n\nexport function invalidateCollabAccessCache(\n  resourceType: string,\n  resourceId: string,\n): void {\n  const resourceKey = accessResourceKey(resourceType, resourceId);\n  _accessInvalidationEpoch.set(\n    resourceKey,\n    (_accessInvalidationEpoch.get(resourceKey) ?? 0) + 1,\n  );\n  const suffix = `|${resourceKey}`;\n  for (const key of Array.from(_accessCache.keys())) {\n    if (key.endsWith(suffix)) _accessCache.delete(key);\n  }\n  for (const key of Array.from(_accessInFlight)) {\n    if (key.endsWith(suffix)) _accessInFlight.delete(key);\n  }\n}\n\nfunction setAccessCache(key: string, allowed: boolean, now: number): void {\n  // Re-insert so the key moves to the end (most-recent) for FIFO ordering.\n  _accessCache.delete(key);\n  _accessCache.set(key, { allowed, checkedAt: now });\n  if (_accessCache.size > ACCESS_CACHE_MAX) {\n    // Evict the oldest entries (front of insertion order) back under the cap.\n    const overflow = _accessCache.size - ACCESS_CACHE_MAX;\n    let removed = 0;\n    for (const oldestKey of _accessCache.keys()) {\n      _accessCache.delete(oldestKey);\n      if (++removed >= overflow) break;\n    }\n  }\n}\n\n/**\n * Fire a background access check for a cache-miss key. Never awaited by the\n * caller — the current event is NOT delivered (we returned false), but the\n * result is cached so the user's NEXT event within the TTL is pushed. Dedupes\n * concurrent checks for the same key via `_accessInFlight`.\n */\nfunction scheduleAccessCheck(\n  key: string,\n  resourceType: string,\n  resourceId: string,\n  userEmail: string,\n  orgId: string | undefined,\n): void {\n  if (_accessInFlight.has(key)) return;\n  _accessInFlight.add(key);\n  const resourceKey = accessResourceKey(resourceType, resourceId);\n  const epoch = _accessInvalidationEpoch.get(resourceKey) ?? 0;\n  void (async () => {\n    try {\n      // Dynamic import to avoid a load-order/circular-import hazard: poll.ts is\n      // imported very widely, and the sharing/access module pulls in the\n      // resource registry. Importing it lazily inside this background function\n      // keeps the module graph acyclic at load time.\n      const { resolveAccess } = await import(\"../sharing/access.js\");\n      const access = await resolveAccess(resourceType, resourceId, {\n        userEmail,\n        orgId,\n      });\n      if ((_accessInvalidationEpoch.get(resourceKey) ?? 0) !== epoch) return;\n      setAccessCache(key, access != null, Date.now());\n    } catch {\n      // Fail closed on any error (DB not ready, missing registration, etc.),\n      // but with the short deny TTL so a transient failure self-heals quickly.\n      if ((_accessInvalidationEpoch.get(resourceKey) ?? 0) !== epoch) return;\n      setAccessCache(key, false, Date.now());\n    } finally {\n      _accessInFlight.delete(key);\n    }\n  })();\n}\n\n/**\n * Test-only: clear the access cache and in-flight set so cases don't bleed\n * into each other. Underscore-prefixed and intentionally NOT part of the\n * public API — do not rely on it outside tests.\n */\nexport function __resetCollabAccessCacheForTests(): void {\n  _accessCache.clear();\n  _accessInFlight.clear();\n  _accessInvalidationEpoch.clear();\n}\n\ntype ChangeVisibility = \"visible\" | \"hidden\" | \"pending\";\n\n/**\n * Decide whether a poll/SSE change event should be delivered to a user.\n *\n * SYNC-CACHE VARIANT — WHY THIS IS SYNCHRONOUS:\n * This function is called on hot, synchronous paths: the SSE emitter callback\n * `push(change)` in poll-events.ts (fires per event) and the\n * `getChangesSinceForUser` loop in this file. Making it async would be\n * invasive (it would ripple through both call sites and their emitters).\n * Instead, for the access-aware branch we consult an in-memory cache and, on a\n * miss, fire a NON-BLOCKING background access check and return `false` for the\n * current event. Because the poll fallback (`getChangesSinceForUser` on the\n * next `/poll` cycle) re-evaluates with the now-populated cache, delivery is\n * eventually guaranteed — the only cost is that the very first event for a\n * fresh (user, resource) pair goes over poll instead of push, and every\n * subsequent event within the TTL is pushed.\n *\n * Security: a cache MISS returns `false`, so we NEVER deliver to a user before\n * their access has been affirmatively confirmed by `resolveAccess` — the same\n * authority that gates the HTTP routes. Errors fail closed (cached deny). The\n * owner/org fast paths below are unchanged and evaluated first.\n */\nexport function canSeeChangeForUser(\n  event: Pick<ChangeEvent, \"owner\" | \"orgId\" | \"resourceType\" | \"resourceId\">,\n  userEmail: string,\n  orgId: string | undefined,\n): boolean {\n  return getChangeVisibilityForUser(event, userEmail, orgId) === \"visible\";\n}\n\nfunction getChangeVisibilityForUser(\n  event: Pick<ChangeEvent, \"owner\" | \"orgId\" | \"resourceType\" | \"resourceId\">,\n  userEmail: string,\n  orgId: string | undefined,\n): ChangeVisibility {\n  // Global / unowned events: every authenticated user gets them. Events that\n  // predate resource tagging (owner/org only, no resourceType) keep the exact\n  // conservative contract they had before.\n  if (!event.owner && !event.orgId && !event.resourceType) return \"visible\";\n  if (event.owner && event.owner === userEmail) return \"visible\";\n  if (event.orgId && orgId && event.orgId === orgId) return \"visible\";\n\n  // Access-aware branch: only when the event carries BOTH resourceType and\n  // resourceId and the owner/org fast paths above did not already grant.\n  if (event.resourceType && event.resourceId) {\n    const key = accessCacheKey(userEmail, event.resourceType, event.resourceId);\n    const cached = _accessCache.get(key);\n    const now = Date.now();\n    if (cached && now - cached.checkedAt < accessCacheTtl(cached.allowed)) {\n      // Fresh, non-expired cache hit → trust the cached decision.\n      return cached.allowed ? \"visible\" : \"hidden\";\n    }\n    // Miss or expired: do NOT deliver this event, but schedule the async check\n    // so the user's next event (or poll cycle) resolves correctly.\n    scheduleAccessCheck(\n      key,\n      event.resourceType,\n      event.resourceId,\n      userEmail,\n      orgId,\n    );\n    return \"pending\";\n  }\n\n  return \"hidden\";\n}\n\n/** Record a change event. Called by emitter listeners. */\nexport function recordChange(event: {\n  source: string;\n  type: string;\n  key?: string;\n  [k: string]: unknown;\n}): void {\n  // Use timestamp-aligned versions so all serverless instances produce\n  // values in the same range (seeded from DB, then incremented via\n  // Date.now). Plain ++counter diverges across cold starts.\n  _version = Math.max(_version + 1, Date.now());\n  const entry: ChangeEvent = { ...event, version: _version };\n  _buffer.push(entry);\n  if (_buffer.length > MAX_BUFFER) {\n    _buffer.splice(0, _buffer.length - MAX_BUFFER);\n  }\n  _pollEmitter.emit(POLL_CHANGE_EVENT, entry);\n}\n\nfunction extensionTargetKey(target: ExtensionChangeTarget): string | null {\n  if (target.owner) return `owner:${target.owner}`;\n  if (target.orgId) return `org:${target.orgId}`;\n  return null;\n}\n\nfunction addExtensionTarget(\n  targets: Map<string, ExtensionChangeTarget>,\n  target: ExtensionChangeTarget,\n): void {\n  const key = extensionTargetKey(target);\n  if (key) targets.set(key, target);\n}\n\nfunction recordExtensionChanges(targets: ExtensionChangeTarget[]): void {\n  const uniqueTargets = new Map<string, ExtensionChangeTarget>();\n  for (const target of targets) addExtensionTarget(uniqueTargets, target);\n  for (const target of uniqueTargets.values()) {\n    recordChange({\n      source: \"extensions\",\n      type: \"change\",\n      key: \"*\",\n      ...(target.owner ? { owner: target.owner } : {}),\n      ...(target.orgId ? { orgId: target.orgId } : {}),\n    });\n  }\n}\n\nfunction recordActionChanges(targets: ActionChangeTarget[]): void {\n  for (const target of targets) {\n    recordChange({\n      source: \"action\",\n      type: \"change\",\n      key: target.actionName ?? \"*\",\n      ...(target.owner ? { owner: target.owner } : {}),\n      ...(target.orgId ? { orgId: target.orgId } : {}),\n    });\n  }\n}\n\nfunction extensionTargetsForRow(\n  row: Record<string, unknown>,\n  shareRows: Array<Record<string, unknown>>,\n): ExtensionChangeTarget[] {\n  const targets = new Map<string, ExtensionChangeTarget>();\n  const owner = typeof row.owner_email === \"string\" ? row.owner_email : \"\";\n  const orgId = typeof row.org_id === \"string\" ? row.org_id : \"\";\n  const visibility =\n    typeof row.visibility === \"string\" ? row.visibility : \"private\";\n\n  if (owner) addExtensionTarget(targets, { owner });\n  if (visibility === \"org\" && orgId) addExtensionTarget(targets, { orgId });\n\n  for (const share of shareRows) {\n    const principalType =\n      typeof share.principal_type === \"string\" ? share.principal_type : \"\";\n    const principalId =\n      typeof share.principal_id === \"string\" ? share.principal_id : \"\";\n    if (principalType === \"user\" && principalId) {\n      addExtensionTarget(targets, { owner: principalId });\n    } else if (principalType === \"org\" && principalId) {\n      addExtensionTarget(targets, { orgId: principalId });\n    }\n  }\n\n  return Array.from(targets.values());\n}\n\nasync function readExtensionTargetsForRows(\n  db: {\n    execute: (\n      query: string | { sql: string; args?: unknown[] },\n    ) => Promise<{ rows: Array<Record<string, unknown>> }>;\n  },\n  rows: Array<Record<string, unknown>>,\n): Promise<ExtensionChangeTarget[][]> {\n  const ids = rows\n    .map((row) => (typeof row.id === \"string\" ? row.id : \"\"))\n    .filter(Boolean);\n  const sharesByResourceId = new Map<string, Array<Record<string, unknown>>>();\n\n  if (ids.length > 0) {\n    try {\n      const placeholders = ids.map(() => \"?\").join(\", \");\n      const shareResult = await db.execute({\n        sql: `SELECT resource_id, principal_type, principal_id FROM tool_shares WHERE resource_id IN (${placeholders})`,\n        args: ids,\n      });\n      for (const share of shareResult.rows) {\n        const resourceId =\n          typeof share.resource_id === \"string\" ? share.resource_id : \"\";\n        if (!resourceId) continue;\n        const bucket = sharesByResourceId.get(resourceId) ?? [];\n        bucket.push(share);\n        sharesByResourceId.set(resourceId, bucket);\n      }\n    } catch {\n      // Sharing tables are optional during early app initialization.\n    }\n  }\n\n  return rows.map((row) =>\n    extensionTargetsForRow(\n      row,\n      sharesByResourceId.get(typeof row.id === \"string\" ? row.id : \"\") ?? [],\n    ),\n  );\n}\n\n/** Get all changes after a given version. */\nexport function getChangesSince(since: number): {\n  version: number;\n  events: ChangeEvent[];\n} {\n  if (since >= _version) {\n    return { version: _version, events: [] };\n  }\n  const events = _buffer.filter((e) => e.version > since);\n  return { version: _version, events };\n}\n\n/**\n * Get changes after a given version, filtered to events the caller is\n * allowed to see.\n *\n * Filtering rules:\n *   - Events without an `owner`/`orgId`/`resourceType` are deployment-global\n *     (table-level pings, screen-refresh, etc.) and visible to every\n *     authenticated user.\n *   - Events with `owner === userEmail` go to that user.\n *   - Events with `orgId === orgId` go to anyone in that org.\n *   - Events carrying `resourceType` + `resourceId` additionally reach explicit\n *     viewer+ sharees via the access-aware cache in `canSeeChangeForUser`.\n *   - All other owned events are filtered out.\n */\nexport function getChangesSinceForUser(\n  since: number,\n  userEmail: string,\n  orgId: string | undefined,\n): { version: number; events: ChangeEvent[] } {\n  if (since >= _version) {\n    return { version: _version, events: [] };\n  }\n  const events: ChangeEvent[] = [];\n  let version = _version;\n  for (const event of _buffer) {\n    if (event.version <= since) continue;\n    const visibility = getChangeVisibilityForUser(event, userEmail, orgId);\n    if (visibility === \"visible\") {\n      events.push(event);\n      continue;\n    }\n    if (visibility === \"pending\") {\n      version = Math.max(since, event.version - 1);\n      break;\n    }\n  }\n  return { version, events };\n}\n\n/**\n * Seed _version from DB timestamps on the first call so serverless\n * cold starts don't return version 0 and confuse polling clients.\n */\nasync function seedVersionFromDb(): Promise<void> {\n  if (_versionSeeded) return;\n  _versionSeeded = true;\n\n  try {\n    const db = getDbExec();\n\n    const [\n      appTs,\n      settingsTs,\n      extensionsMaxUpdatedAt,\n      extensionMarkerTs,\n      actionMarkerTs,\n      refreshResult,\n    ] = await Promise.all([\n      readMaxUpdatedAt(db, \"application_state\"),\n      readMaxUpdatedAt(db, \"settings\"),\n      readMaxUpdatedAtRaw(db, \"tools\"),\n      readExtensionMarkerMaxUpdatedAt(db),\n      readActionMarkerMaxUpdatedAt(db),\n      db\n        .execute({\n          sql: \"SELECT session_id, updated_at FROM application_state WHERE key = ?\",\n          args: [SCREEN_REFRESH_KEY],\n        })\n        .catch(() => ({ rows: [] as Record<string, unknown>[] })),\n    ]);\n\n    const extensionsTs = timestampValue(extensionsMaxUpdatedAt);\n    let refreshTs = 0;\n    for (const row of refreshResult.rows) {\n      refreshTs = Math.max(refreshTs, timestampValue(row.updated_at));\n    }\n\n    // Seed version — never decrease an already-set value\n    _version = Math.max(\n      _version,\n      appTs,\n      settingsTs,\n      extensionsTs,\n      extensionMarkerTs,\n      actionMarkerTs,\n    );\n\n    // Set baselines so checkExternalDbChanges detects future writes\n    _lastAppStateTs = appTs;\n    _lastSettingsTs = settingsTs;\n    _lastExtensionsTs = extensionsTs;\n    _lastExtensionsUpdatedAt = sqlWatermarkValue(extensionsMaxUpdatedAt);\n    _lastExtensionMarkerTs = extensionMarkerTs;\n    // Action markers are durable specifically so a web server can observe work\n    // performed by a separate action process. Do not baseline past an existing\n    // marker on cold start, or the first poll after the action will miss it.\n    _lastActionMarkerTs = 0;\n    _lastScreenRefreshTs = refreshTs;\n    _lastScreenRefreshTsBySession.clear();\n    for (const row of refreshResult.rows) {\n      if (typeof row.session_id === \"string\") {\n        _lastScreenRefreshTsBySession.set(\n          row.session_id,\n          timestampValue(row.updated_at),\n        );\n      }\n    }\n    _screenRefreshInitialized = true;\n    // Skip the redundant cold-start recheck unless there is an existing durable\n    // action marker that the first poll still needs to emit.\n    _lastDbCheck = actionMarkerTs > 0 ? 0 : Date.now();\n  } catch {\n    // Tables may not exist yet — ignore\n  }\n}\n\n/**\n * Check for cross-process DB writes by comparing updated_at timestamps.\n * Runs at most once per second to avoid excessive queries.\n */\nasync function checkExternalDbChanges(): Promise<void> {\n  const now = Date.now();\n  if (now - _lastDbCheck < 1000) return;\n  // Coalesce: if a check is already running, await it instead of starting a\n  // second overlapping run that would double-advance the shared watermarks\n  // (and double-emit change events).\n  if (_checkPromise) return _checkPromise;\n  _lastDbCheck = now;\n  _checkPromise = doCheckExternalDbChanges().finally(() => {\n    _checkPromise = null;\n  });\n  return _checkPromise;\n}\n\nasync function doCheckExternalDbChanges(): Promise<void> {\n  try {\n    const db = getDbExec();\n\n    // These reads are independent — each compares the DB against module-level\n    // high-water marks (`_lastAppStateTs`, etc.) rather than another query's\n    // result, and none of them mutate state before processing below. On a\n    // serverless SQL backend every `await` is a network round-trip, so running\n    // them concurrently shaves stacked latency off every poll cycle. Results\n    // are still processed in the original sequential order, and conditional\n    // follow-up queries (action/extension marker detail rows, tool-shares) stay\n    // sequential within their branch where they depend on these results.\n    const [\n      appResult,\n      actionMarkerTs,\n      refreshResult,\n      extensionMarkerTs,\n      settingsTs,\n      extensionsMaxUpdatedAt,\n    ] = await Promise.all([\n      db.execute({\n        sql: \"SELECT session_id, key, updated_at FROM application_state WHERE updated_at > ? ORDER BY updated_at ASC\",\n        args: [_lastAppStateTs],\n      }),\n      readActionMarkerMaxUpdatedAt(db),\n      db.execute({\n        sql: \"SELECT session_id, updated_at, value FROM application_state WHERE key = ?\",\n        args: [SCREEN_REFRESH_KEY],\n      }),\n      readExtensionMarkerMaxUpdatedAt(db),\n      readMaxUpdatedAt(db, \"settings\"),\n      readMaxUpdatedAtRaw(db, \"tools\"),\n    ]);\n\n    // Check application_state for external writes. Preserve the changed key so\n    // clients can invalidate one-shot command queries (`navigate`, `__set_url__`)\n    // only when those command rows actually change; noisy keys such as\n    // `slide-fit-check` should not wake navigation readers.\n    if (appResult.rows.length > 0) {\n      const appTs = appResult.rows.reduce(\n        (max, row) => Math.max(max, timestampValue(row.updated_at)),\n        _lastAppStateTs,\n      );\n      if (_lastAppStateTs > 0) {\n        for (const row of appResult.rows) {\n          const key = typeof row.key === \"string\" ? row.key : \"*\";\n          if (\n            key === EXTENSION_CHANGE_MARKER_KEY ||\n            key === ACTION_CHANGE_MARKER_KEY\n          ) {\n            continue;\n          }\n          const owner =\n            typeof row.session_id === \"string\" ? row.session_id : undefined;\n          recordChange({\n            source: \"app-state\",\n            type: \"change\",\n            key,\n            ...(owner ? { owner } : {}),\n          });\n        }\n      }\n      _lastAppStateTs = appTs;\n    }\n\n    // Mutating actions write a durable marker in addition to the in-process\n    // event. This lets dev-mode `pnpm action ...` child processes and\n    // serverless action invocations wake the web server's SSE/poll loop as a\n    // first-class source:\"action\" event rather than a generic app-state bump.\n    // `actionMarkerTs` was read above; the detail-row query below is conditional\n    // on it and depends on its result, so it stays sequential.\n    if (actionMarkerTs > _lastActionMarkerTs) {\n      const actionMarkerResult = await db.execute({\n        sql: \"SELECT session_id, value, updated_at FROM application_state WHERE key = ? ORDER BY updated_at ASC\",\n        args: [ACTION_CHANGE_MARKER_KEY],\n      });\n      const changedActionMarkers = actionMarkerResult.rows.filter(\n        (row) => timestampValue(row.updated_at) > _lastActionMarkerTs,\n      );\n      recordActionChanges(\n        changedActionMarkers\n          .map((row) => parseActionChangeMarker(row.session_id, row.value))\n          .filter((target): target is ActionChangeTarget => !!target),\n      );\n      _lastActionMarkerTs = actionMarkerTs;\n    }\n\n    // Check for screen-refresh requests from the agent. The `refresh-screen`\n    // tool writes to application_state under a well-known key; when its\n    // updated_at bumps, emit a distinct event so the client invalidates\n    // all queries (not just the ones matching its default queryKey prefix).\n    // `refreshResult` was read above.\n    const refreshTs = refreshResult.rows.reduce(\n      (max, row) => Math.max(max, timestampValue(row.updated_at)),\n      0,\n    );\n    if (!_screenRefreshInitialized) {\n      _lastScreenRefreshTs = refreshTs;\n      for (const row of refreshResult.rows) {\n        if (typeof row.session_id === \"string\") {\n          _lastScreenRefreshTsBySession.set(\n            row.session_id,\n            timestampValue(row.updated_at),\n          );\n        }\n      }\n      _screenRefreshInitialized = true;\n    } else if (refreshTs > _lastScreenRefreshTs) {\n      // Emit a per-user event only for the session(s) whose row actually\n      // advanced, scoped with `owner` so canSeeChangeForUser delivers it only\n      // to that user — not every authenticated poller.\n      for (const row of refreshResult.rows) {\n        const owner =\n          typeof row.session_id === \"string\" ? row.session_id : undefined;\n        if (!owner) continue;\n        const rowTs = timestampValue(row.updated_at);\n        if (rowTs <= (_lastScreenRefreshTsBySession.get(owner) ?? 0)) continue;\n        let scope: string | undefined;\n        try {\n          const raw = row.value;\n          if (typeof raw === \"string\") {\n            const parsed = JSON.parse(raw);\n            if (typeof parsed?.scope === \"string\") scope = parsed.scope;\n          }\n        } catch {}\n        recordChange({\n          source: \"screen-refresh\",\n          type: \"change\",\n          key: SCREEN_REFRESH_KEY,\n          owner,\n          ...(scope ? { scope } : {}),\n        });\n        _lastScreenRefreshTsBySession.set(owner, rowTs);\n      }\n      _lastScreenRefreshTs = refreshTs;\n    }\n\n    // Extension mutations write a durable marker row so delete and hide/unhide\n    // operations are visible across serverless invocations. Translate those\n    // marker rows back into extension-source events for targeted client\n    // invalidation while preserving user/org scope. `extensionMarkerTs` was read\n    // above; the detail-row query below depends on it and stays sequential.\n    if (extensionMarkerTs > _lastExtensionMarkerTs) {\n      const extensionMarkerResult = await db.execute({\n        sql: \"SELECT session_id, value, updated_at FROM application_state WHERE key = ? ORDER BY updated_at ASC\",\n        args: [EXTENSION_CHANGE_MARKER_KEY],\n      });\n      const changedExtensionMarkers = extensionMarkerResult.rows.filter(\n        (row) => timestampValue(row.updated_at) > _lastExtensionMarkerTs,\n      );\n      if (_lastExtensionMarkerTs > 0) {\n        recordExtensionChanges(\n          changedExtensionMarkers\n            .map((row) => parseExtensionChangeMarker(row.session_id, row.value))\n            .filter((target): target is ExtensionChangeTarget => !!target),\n        );\n      }\n      _lastExtensionMarkerTs = extensionMarkerTs;\n    }\n\n    // Check settings for external writes. `settingsTs` was read above.\n    if (settingsTs > _lastSettingsTs) {\n      if (_lastSettingsTs > 0) {\n        recordChange({ source: \"settings\", type: \"change\", key: \"*\" });\n      }\n      _lastSettingsTs = settingsTs;\n    }\n\n    // Extension rows live in the legacy physical `tools` table. Keep this as a\n    // compatibility fallback for direct table writes, but scope events to the\n    // resource owner/share targets instead of broadcasting deployment-wide.\n    // `extensionsMaxUpdatedAt` was read above; the per-row query below is\n    // conditional on `extensionsTs` and stays sequential.\n    const extensionsTs = timestampValue(extensionsMaxUpdatedAt);\n    if (extensionsTs > _lastExtensionsTs) {\n      const since = _lastExtensionsUpdatedAt;\n      const extensionResult =\n        since === undefined\n          ? await db.execute({\n              sql: \"SELECT id, owner_email, org_id, visibility, updated_at FROM tools ORDER BY updated_at ASC\",\n              args: [],\n            })\n          : await db.execute({\n              sql: \"SELECT id, owner_email, org_id, visibility, updated_at FROM tools WHERE updated_at > ? ORDER BY updated_at ASC\",\n              args: [since],\n            });\n      const changedExtensionRows = extensionResult.rows.filter(\n        (row) => timestampValue(row.updated_at) > _lastExtensionsTs,\n      );\n      if (_lastExtensionsTs > 0) {\n        const targetsByRow = await readExtensionTargetsForRows(\n          db,\n          changedExtensionRows,\n        );\n        for (const targets of targetsByRow) recordExtensionChanges(targets);\n      }\n      _lastExtensionsTs = extensionsTs;\n      _lastExtensionsUpdatedAt = sqlWatermarkValue(extensionsMaxUpdatedAt);\n    }\n  } catch {\n    // Tables may not exist yet — ignore\n  }\n}\n\n/**\n * Create an H3 handler for the poll endpoint.\n *\n * GET /_agent-native/poll?since=N → { version, events[] }\n *\n * Requires an authenticated session. Events are filtered to the caller's\n * tenant — global events (owner-less, table-level pings) reach every\n * authenticated caller; owned events reach only the matching user/org.\n * Without auth + filtering, an anonymous attacker could poll the deployment\n * and infer cross-tenant activity from the global event stream.\n */\nexport function createPollHandler() {\n  wireLocalEmitters();\n  return defineEventHandler(async (event) => {\n    const session = await getSession(event).catch(() => null);\n    if (!session?.email) {\n      setResponseStatus(event, 401);\n      return { error: \"Unauthenticated\" };\n    }\n    // On cold start, seed _version from DB so we don't return version: 0\n    await seedVersionFromDb();\n    // Check for cross-process writes before responding\n    await checkExternalDbChanges();\n\n    const query = getQuery(event);\n    const since = parseInt(String(query.since ?? \"0\"), 10) || 0;\n    return getChangesSinceForUser(since, session.email, session.orgId);\n  });\n}\n"]}

package/dist/server/schema-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-prompt.d.ts","sourceRoot":"","sources":["../../src/server/schema-prompt.ts"],"names":[],"mappings":"AAqBA,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AA4KpC,gFAAgF;AAChF,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AA6CD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gEAAgE;IAChE,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,6CAA6C;IAC7C,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuJlB"}
+{"version":3,"file":"schema-prompt.d.ts","sourceRoot":"","sources":["../../src/server/schema-prompt.ts"],"names":[],"mappings":"AAqBA,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AA+LpC,gFAAgF;AAChF,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AA6CD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gEAAgE;IAChE,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,6CAA6C;IAC7C,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuJlB"}