agor-live 0.16.1 → 0.16.2

package/dist/cli/commands/daemon/sync.d.ts

@@ -0,0 +1,19 @@
+import * as _oclif_core_interfaces from '@oclif/core/interfaces';
+import { Command } from '@oclif/core';
+
+declare class DaemonSync extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        'dry-run': _oclif_core_interfaces.BooleanFlag<boolean>;
+        config: _oclif_core_interfaces.OptionFlag<string | undefined, _oclif_core_interfaces.CustomOptions>;
+    };
+    run(): Promise<void>;
+    private loadConfigFromPath;
+    private logCounts;
+    private syncRepos;
+    private syncWorktrees;
+    private syncUsers;
+}
+
+export { DaemonSync as default };

package/dist/cli/commands/daemon/sync.js

@@ -0,0 +1,277 @@
+// src/commands/daemon/sync.ts
+import { existsSync, mkdirSync } from "fs";
+import { join } from "path";
+import {
+  buildSlugToRepoIdMap,
+  daemonResourcesConfigSchema,
+  determineRepoAction,
+  determineUserAction,
+  determineWorktreeAction,
+  getReposDir,
+  getWorktreePath,
+  loadConfig,
+  loadConfigFromFile,
+  resolvePassword,
+  validateResourceCrossReferences
+} from "@agor/core/config";
+import {
+  createDatabase,
+  getDatabaseUrl,
+  hash,
+  RepoRepository,
+  UsersRepository,
+  WorktreeRepository
+} from "@agor/core/db";
+import { autoAssignWorktreeUniqueId } from "@agor/core/environment/variable-resolver";
+import { cloneRepo, createWorktree, getWorktreesDir } from "@agor/core/git";
+import { Command, Flags } from "@oclif/core";
+import chalk from "chalk";
+var DaemonSync = class _DaemonSync extends Command {
+  static description = "Sync resources from config.yml into database and filesystem";
+  static examples = [
+    "<%= config.bin %> daemon sync",
+    "<%= config.bin %> daemon sync --dry-run",
+    "<%= config.bin %> daemon sync --config /path/to/config.yml"
+  ];
+  static flags = {
+    "dry-run": Flags.boolean({
+      description: "Validate and report what would change without making changes",
+      default: false
+    }),
+    config: Flags.string({
+      char: "c",
+      description: "Path to config file (default: ~/.agor/config.yaml)"
+    })
+  };
+  async run() {
+    const { flags } = await this.parse(_DaemonSync);
+    const dryRun = flags["dry-run"];
+    const config = flags.config ? await this.loadConfigFromPath(flags.config) : await loadConfig();
+    if (!config.resources) {
+      this.log(chalk.yellow("No resources section in config \u2014 nothing to sync."));
+      return;
+    }
+    const parseResult = daemonResourcesConfigSchema.safeParse(config.resources);
+    if (!parseResult.success) {
+      this.log(chalk.red("Config validation failed:"));
+      for (const issue of parseResult.error.issues) {
+        this.log(chalk.red(`  ${issue.path.join(".")}: ${issue.message}`));
+      }
+      this.exit(1);
+    }
+    const resources = parseResult.data;
+    const crossRefErrors = validateResourceCrossReferences(resources);
+    if (crossRefErrors.length > 0) {
+      this.log(chalk.red("Resource cross-reference errors:"));
+      for (const err of crossRefErrors) {
+        this.log(chalk.red(`  ${err.path}: ${err.message}`));
+      }
+      this.exit(1);
+    }
+    this.log(chalk.bold("Syncing resources from config..."));
+    if (dryRun) {
+      this.log(chalk.yellow("(dry-run mode \u2014 no changes will be made)"));
+    }
+    this.log("");
+    const dbUrl = getDatabaseUrl();
+    const db = createDatabase({ url: dbUrl });
+    const repoRepo = new RepoRepository(db);
+    const worktreeRepo = new WorktreeRepository(db);
+    const usersRepo = new UsersRepository(db);
+    const repoCounts = await this.syncRepos(resources.repos ?? [], repoRepo, dryRun);
+    const worktreeCounts = await this.syncWorktrees(
+      resources.worktrees ?? [],
+      resources.repos ?? [],
+      worktreeRepo,
+      dryRun
+    );
+    const userCounts = await this.syncUsers(resources.users ?? [], usersRepo, dryRun);
+    this.log("");
+    this.log(chalk.bold("Sync complete:"));
+    this.logCounts("Repos", repoCounts);
+    this.logCounts("Worktrees", worktreeCounts);
+    this.logCounts("Users", userCounts);
+  }
+  async loadConfigFromPath(configPath) {
+    try {
+      return await loadConfigFromFile(configPath);
+    } catch (error) {
+      this.log(chalk.red(`Failed to load config from ${configPath}:`));
+      this.log(chalk.red(`  ${error instanceof Error ? error.message : String(error)}`));
+      this.exit(1);
+    }
+  }
+  logCounts(label, counts) {
+    const parts = [];
+    if (counts.created > 0) parts.push(chalk.green(`${counts.created} created`));
+    if (counts.updated > 0) parts.push(chalk.yellow(`${counts.updated} updated`));
+    if (counts.unchanged > 0) parts.push(chalk.dim(`${counts.unchanged} unchanged`));
+    this.log(`  ${label}: ${parts.length > 0 ? parts.join(", ") : chalk.dim("none declared")}`);
+  }
+  // ---------------------------------------------------------------------------
+  // Repo sync
+  // ---------------------------------------------------------------------------
+  async syncRepos(repos, repoRepo, dryRun) {
+    const counts = { created: 0, updated: 0, unchanged: 0 };
+    for (const repoCfg of repos) {
+      const existing = await repoRepo.findBySlug(repoCfg.slug);
+      const repoPath = join(getReposDir(), repoCfg.slug);
+      const fsExists = existsSync(repoPath);
+      const action = determineRepoAction(repoCfg, existing);
+      if (action === "create") {
+        this.log(`  ${chalk.green("create")} repo ${chalk.cyan(repoCfg.slug)}`);
+        if (!dryRun) {
+          if (repoCfg.remote_url) {
+            mkdirSync(getReposDir(), { recursive: true });
+            await cloneRepo({ url: repoCfg.remote_url, targetDir: repoPath });
+          }
+          await repoRepo.create({
+            repo_id: repoCfg.repo_id,
+            slug: repoCfg.slug,
+            name: repoCfg.slug,
+            repo_type: repoCfg.repo_type ?? "remote",
+            remote_url: repoCfg.remote_url,
+            default_branch: repoCfg.default_branch ?? "main",
+            local_path: repoPath
+          });
+        }
+        counts.created++;
+      } else if (action === "update") {
+        this.log(`  ${chalk.yellow("update")} repo ${chalk.cyan(repoCfg.slug)}`);
+        if (!dryRun && existing) {
+          await repoRepo.update(existing.repo_id, {
+            remote_url: repoCfg.remote_url ?? existing.remote_url,
+            default_branch: repoCfg.default_branch ?? existing.default_branch
+          });
+        }
+        counts.updated++;
+      } else {
+        counts.unchanged++;
+      }
+      if (existing && !fsExists && repoCfg.remote_url && !dryRun) {
+        this.log(`  ${chalk.green("clone")} repo ${chalk.cyan(repoCfg.slug)} (filesystem missing)`);
+        mkdirSync(getReposDir(), { recursive: true });
+        await cloneRepo({ url: repoCfg.remote_url, targetDir: repoPath });
+      }
+    }
+    return counts;
+  }
+  // ---------------------------------------------------------------------------
+  // Worktree sync
+  // ---------------------------------------------------------------------------
+  async syncWorktrees(worktrees, repos, worktreeRepo, dryRun) {
+    const counts = { created: 0, updated: 0, unchanged: 0 };
+    const slugToId = buildSlugToRepoIdMap(repos);
+    for (const wtCfg of worktrees) {
+      const repoId = slugToId.get(wtCfg.repo);
+      if (!repoId) {
+        this.log(chalk.red(`  skip worktree "${wtCfg.name}" \u2014 repo "${wtCfg.repo}" not found`));
+        continue;
+      }
+      const existing = await worktreeRepo.findByRepoAndName(repoId, wtCfg.name);
+      const action = determineWorktreeAction(wtCfg, existing);
+      if (action === "create") {
+        this.log(
+          `  ${chalk.green("create")} worktree ${chalk.cyan(`${wtCfg.repo}/${wtCfg.name}`)}`
+        );
+        if (!dryRun) {
+          const repoPath = join(getReposDir(), wtCfg.repo);
+          const worktreePath = getWorktreePath(wtCfg.repo, wtCfg.name);
+          if (!existsSync(worktreePath)) {
+            mkdirSync(join(getWorktreesDir(), wtCfg.repo), { recursive: true });
+            await createWorktree(
+              repoPath,
+              worktreePath,
+              wtCfg.ref,
+              false,
+              false,
+              void 0,
+              void 0,
+              wtCfg.ref_type
+            );
+          }
+          const usedIds = await worktreeRepo.getAllUsedUniqueIds();
+          const nextId = autoAssignWorktreeUniqueId(usedIds);
+          await worktreeRepo.create({
+            worktree_id: wtCfg.worktree_id,
+            repo_id: repoId,
+            name: wtCfg.name,
+            ref: wtCfg.ref,
+            ref_type: wtCfg.ref_type ?? "branch",
+            path: worktreePath,
+            worktree_unique_id: nextId,
+            others_can: wtCfg.others_can ?? "session",
+            mcp_server_ids: wtCfg.mcp_server_ids,
+            new_branch: false,
+            last_used: (/* @__PURE__ */ new Date()).toISOString()
+          });
+        }
+        counts.created++;
+      } else if (action === "update") {
+        this.log(
+          `  ${chalk.yellow("update")} worktree ${chalk.cyan(`${wtCfg.repo}/${wtCfg.name}`)}`
+        );
+        if (!dryRun && existing) {
+          await worktreeRepo.update(existing.worktree_id, {
+            ref: wtCfg.ref,
+            ref_type: wtCfg.ref_type ?? existing.ref_type,
+            others_can: wtCfg.others_can ?? existing.others_can,
+            mcp_server_ids: wtCfg.mcp_server_ids ?? existing.mcp_server_ids
+          });
+        }
+        counts.updated++;
+      } else {
+        counts.unchanged++;
+      }
+    }
+    return counts;
+  }
+  // ---------------------------------------------------------------------------
+  // User sync
+  // ---------------------------------------------------------------------------
+  async syncUsers(users, usersRepo, dryRun) {
+    const counts = { created: 0, updated: 0, unchanged: 0 };
+    for (const userCfg of users) {
+      const existing = await usersRepo.findByEmail(userCfg.email);
+      const action = determineUserAction(userCfg, existing);
+      if (action === "create") {
+        this.log(`  ${chalk.green("create")} user ${chalk.cyan(userCfg.email)}`);
+        if (!dryRun) {
+          const resolved = resolvePassword(userCfg.password);
+          if (resolved.mustChange) {
+            this.log(
+              `    ${chalk.dim("generated temporary password for")} ${userCfg.email}: ${chalk.yellow(resolved.password)}`
+            );
+          }
+          const hashedPassword = await hash(resolved.password, 12);
+          await usersRepo.create({
+            user_id: userCfg.user_id,
+            email: userCfg.email,
+            name: userCfg.name,
+            role: userCfg.role ?? "member",
+            unix_username: userCfg.unix_username,
+            password: hashedPassword,
+            must_change_password: resolved.mustChange
+          });
+        }
+        counts.created++;
+      } else if (action === "update") {
+        this.log(`  ${chalk.yellow("update")} user ${chalk.cyan(userCfg.email)}`);
+        if (!dryRun && existing) {
+          await usersRepo.update(existing.user_id, {
+            name: userCfg.name ?? existing.name,
+            role: userCfg.role ?? existing.role,
+            unix_username: userCfg.unix_username ?? existing.unix_username
+          });
+        }
+        counts.updated++;
+      } else {
+        counts.unchanged++;
+      }
+    }
+    return counts;
+  }
+};
+export {
+  DaemonSync as default
+};

package/dist/core/{agentic-tool-COqFrlmU.d.ts → agentic-tool-1L19ixPC.d.ts}

@@ -1,4 +1,4 @@
-import { A as AgenticToolID } from './id-DSzvIi3c.js';
+import { A as AgenticToolID } from './id-Cv3ntaTJ.js';
 
 /**
  * Agentic coding tool names
@@ -106,5 +106,24 @@ type CodexNetworkAccess = boolean;
  * - bypassPermissions: Auto-approve everything (equivalent to approveAll helper)
  */
 type CopilotPermissionMode = 'default' | 'acceptEdits' | 'bypassPermissions';
+/**
+ * Static capability flags for agentic tools.
+ * Used by the UI to show/hide features based on what a tool supports.
+ * Mirrors the runtime ToolCapabilities in the executor but is available
+ * without instantiating a tool.
+ */
+interface AgenticToolCapabilities {
+    /** Can fork sessions (branch conversation at a decision point) */
+    supportsSessionFork: boolean;
+    /** Can spawn child sessions for subsessions */
+    supportsChildSpawn: boolean;
+    /** Can import historical sessions from tool's storage */
+    supportsSessionImport: boolean;
+}
+/**
+ * Static capability map for all agentic tools.
+ * Source of truth for what each tool supports — avoids scattered `if (tool === 'codex')` checks.
+ */
+declare const AGENTIC_TOOL_CAPABILITIES: Record<AgenticToolName, AgenticToolCapabilities>;
 
-export type { AgenticToolName as A, ClaudeCodePermissionMode as C, GeminiPermissionMode as G, OpenCodePermissionMode as O, CodexPermissionMode as a, AgenticTool as b, CodexSandboxMode as c, CodexApprovalPolicy as d, CodexNetworkAccess as e, CopilotPermissionMode as f };
+export { type AgenticToolName as A, type ClaudeCodePermissionMode as C, type GeminiPermissionMode as G, type OpenCodePermissionMode as O, type CodexPermissionMode as a, type AgenticTool as b, type CodexSandboxMode as c, type CodexApprovalPolicy as d, type CodexNetworkAccess as e, type CopilotPermissionMode as f, type AgenticToolCapabilities as g, AGENTIC_TOOL_CAPABILITIES as h };

package/dist/core/{agentic-tool-o8Io8dDl.d.cts → agentic-tool-3oiAj9Lg.d.cts}

@@ -1,4 +1,4 @@
-import { A as AgenticToolID } from './id-DSzvIi3c.cjs';
+import { A as AgenticToolID } from './id-Cv3ntaTJ.cjs';
 
 /**
  * Agentic coding tool names
@@ -106,5 +106,24 @@ type CodexNetworkAccess = boolean;
  * - bypassPermissions: Auto-approve everything (equivalent to approveAll helper)
  */
 type CopilotPermissionMode = 'default' | 'acceptEdits' | 'bypassPermissions';
+/**
+ * Static capability flags for agentic tools.
+ * Used by the UI to show/hide features based on what a tool supports.
+ * Mirrors the runtime ToolCapabilities in the executor but is available
+ * without instantiating a tool.
+ */
+interface AgenticToolCapabilities {
+    /** Can fork sessions (branch conversation at a decision point) */
+    supportsSessionFork: boolean;
+    /** Can spawn child sessions for subsessions */
+    supportsChildSpawn: boolean;
+    /** Can import historical sessions from tool's storage */
+    supportsSessionImport: boolean;
+}
+/**
+ * Static capability map for all agentic tools.
+ * Source of truth for what each tool supports — avoids scattered `if (tool === 'codex')` checks.
+ */
+declare const AGENTIC_TOOL_CAPABILITIES: Record<AgenticToolName, AgenticToolCapabilities>;
 
-export type { AgenticToolName as A, ClaudeCodePermissionMode as C, GeminiPermissionMode as G, OpenCodePermissionMode as O, CodexPermissionMode as a, AgenticTool as b, CodexSandboxMode as c, CodexApprovalPolicy as d, CodexNetworkAccess as e, CopilotPermissionMode as f };
+export { type AgenticToolName as A, type ClaudeCodePermissionMode as C, type GeminiPermissionMode as G, type OpenCodePermissionMode as O, type CodexPermissionMode as a, type AgenticTool as b, type CodexSandboxMode as c, type CodexApprovalPolicy as d, type CodexNetworkAccess as e, type CopilotPermissionMode as f, type AgenticToolCapabilities as g, AGENTIC_TOOL_CAPABILITIES as h };

package/dist/core/api/index.d.cts

@@ -1,18 +1,18 @@
-import { i as Message } from '../message-ggLv6xJx.cjs';
-import { a as Artifact } from '../artifact-Cv9Bs4Z0.cjs';
-import { g as Board, l as CardWithType, j as CardType, h as BoardExportBlob } from '../board-BTK4RUmB.cjs';
+import { i as Message } from '../message-CbD99EwO.cjs';
+import { a as Artifact } from '../artifact-Bi-1jifF.cjs';
+import { h as Board, m as CardWithType, k as CardType, i as BoardExportBlob } from '../board-CPZGf5wF.cjs';
+import { b as Repo, d as Worktree } from '../repo-CcvhnJDf.cjs';
+import { a as Session } from '../session-DEU5FS0N.cjs';
+import { d as User } from '../user-BpKIlt04.cjs';
 import { a as ContextFileListItem, b as ContextFileDetail } from '../context-ByxGjp5l.cjs';
-import { b as AuthenticationResult } from '../feathers-DstwBmky.cjs';
-import { a as Session } from '../session-DrNmhT4I.cjs';
-import { d as User } from '../user-gTo6uzKE.cjs';
-import { i as MCPServer } from '../mcp-DmSz5NtX.cjs';
-import { b as Repo, d as Worktree } from '../worktree-DQ1rsBlH.cjs';
-import { c as Task } from '../task-Cobwzp1Z.cjs';
+import { b as AuthenticationResult } from '../feathers-CYAHFZ05.cjs';
+import { i as MCPServer } from '../mcp-CtC1DFEm.cjs';
+import { c as Task } from '../task-DCPYEXlG.cjs';
 import { Params, Paginated, Application } from '@feathersjs/feathers';
 import { Socket } from 'socket.io-client';
 export { default as authenticationClient } from '@feathersjs/authentication-client';
-import '../id-DSzvIi3c.cjs';
-import '../agentic-tool-o8Io8dDl.cjs';
+import '../id-Cv3ntaTJ.cjs';
+import '../agentic-tool-3oiAj9Lg.cjs';
 
 /**
  * Feathers Client for Agor

package/dist/core/api/index.d.ts

@@ -1,18 +1,18 @@
-import { i as Message } from '../message-DcNHiQJx.js';
-import { a as Artifact } from '../artifact-KXt7SRRb.js';
-import { g as Board, l as CardWithType, j as CardType, h as BoardExportBlob } from '../board-Bfd4UTxM.js';
+import { i as Message } from '../message-Cwhx2ItQ.js';
+import { a as Artifact } from '../artifact-B5MFR79G.js';
+import { h as Board, m as CardWithType, k as CardType, i as BoardExportBlob } from '../board-B9Xnux_i.js';
+import { b as Repo, d as Worktree } from '../repo-j12tCmyK.js';
+import { a as Session } from '../session-Bw8_FN2l.js';
+import { d as User } from '../user-pO3lB_da.js';
 import { a as ContextFileListItem, b as ContextFileDetail } from '../context-ByxGjp5l.js';
-import { b as AuthenticationResult } from '../feathers-DWfz4X2s.js';
-import { a as Session } from '../session-I7SKR8X0.js';
-import { d as User } from '../user-C-kUEFPf.js';
-import { i as MCPServer } from '../mcp-eYAM1JQj.js';
-import { b as Repo, d as Worktree } from '../worktree-CbBATC-0.js';
-import { c as Task } from '../task-C_4XIEFP.js';
+import { b as AuthenticationResult } from '../feathers-CzuSOZgY.js';
+import { i as MCPServer } from '../mcp-VhU-PMHo.js';
+import { c as Task } from '../task-CKHC1gPj.js';
 import { Params, Paginated, Application } from '@feathersjs/feathers';
 import { Socket } from 'socket.io-client';
 export { default as authenticationClient } from '@feathersjs/authentication-client';
-import '../id-DSzvIi3c.js';
-import '../agentic-tool-COqFrlmU.js';
+import '../id-Cv3ntaTJ.js';
+import '../agentic-tool-1L19ixPC.js';
 
 /**
  * Feathers Client for Agor

package/dist/core/{artifact-Cv9Bs4Z0.d.cts → artifact-B5MFR79G.d.ts}

@@ -1,12 +1,12 @@
-import { S as SandpackTemplate } from './board-BTK4RUmB.cjs';
-import { c as ArtifactID, W as WorktreeID, B as BoardID } from './id-DSzvIi3c.cjs';
+import { S as SandpackTemplate } from './board-B9Xnux_i.js';
+import { d as ArtifactID, W as WorktreeID, B as BoardID } from './id-Cv3ntaTJ.js';
 
 /**
  * Artifact Type Definitions
  *
- * Artifacts are live web applications rendered via Sandpack on the board canvas.
- * Code lives on the filesystem at {worktree_path}/.agor/artifacts/{artifact_id}/
- * with a sandpack.json manifest that maps directly to Sandpack React component props.
+ * Artifacts are board-scoped, DB-backed live web applications rendered via Sandpack.
+ * The filesystem folder is a transient staging area; on publish, the daemon serializes
+ * folder contents into the DB `files` column. Serving reads from DB only.
  */
 
 /**
@@ -16,21 +16,21 @@ type ArtifactBuildStatus = 'unknown' | 'checking' | 'success' | 'error';
 /**
  * Artifact - Live web application rendered via Sandpack on the board canvas
  *
- * Artifacts are filesystem-backed Sandpack applications managed by agents.
- * Code lives at {worktree_path}/.agor/artifacts/{artifact_id}/ with a sandpack.json manifest.
+ * Artifacts are board-scoped, DB-backed objects. The `files` column holds the
+ * serialized source code. `worktree_id` and `path` are provenance only.
  */
 interface Artifact {
     artifact_id: ArtifactID;
-    /** Worktree this artifact belongs to (filesystem location) */
-    worktree_id: WorktreeID;
+    /** Worktree provenance (nullable — survives worktree deletion via SET NULL) */
+    worktree_id: WorktreeID | null;
     /** Board this artifact is displayed on */
     board_id: BoardID;
     /** Display name */
     name: string;
     /** Optional description */
     description?: string;
-    /** Relative path within worktree (always .agor/artifacts/{artifact_id}) */
-    path: string;
+    /** Provenance path — where files were read from (nullable) */
+    path: string | null;
     /** Sandpack template */
     template: SandpackTemplate;
     /** Current build status */
@@ -39,6 +39,16 @@ interface Artifact {
     build_errors?: string[];
     /** Content hash for cache invalidation (MD5 of sorted file contents) */
     content_hash?: string;
+    /** Serialized file contents: path -> code. Null for legacy records not yet re-published. */
+    files?: Record<string, string>;
+    /** NPM dependencies from manifest */
+    dependencies?: Record<string, string>;
+    /** Entry file from manifest */
+    entry?: string;
+    /** Use self-hosted Sandpack bundler */
+    use_local_bundler?: boolean;
+    /** Whether this artifact is visible to all board viewers */
+    public: boolean;
     /** User who created this artifact */
     created_by?: string;
     created_at: string;
@@ -57,6 +67,14 @@ interface SandpackManifest {
     dependencies?: Record<string, string>;
     /** Entry file path */
     entry?: string;
+    /**
+     * Opt into the daemon's self-hosted Sandpack bundler instead of CodeSandbox's
+     * default hosted bundler. Stores intent rather than a concrete URL so the
+     * artifact keeps working if the daemon's origin changes. Resolved to the
+     * daemon's selfHostedBundlerURL at payload read time. If the local bundler
+     * is not available at read time, falls back silently to the hosted bundler.
+     */
+    use_local_bundler?: boolean;
 }
 /**
  * Artifact payload served to frontend via REST
@@ -74,6 +92,8 @@ interface ArtifactPayload {
     content_hash: string;
     /** Env vars referenced in agor.config.js that the requesting user hasn't configured */
     missing_env_vars?: string[];
+    /** Custom Sandpack bundler URL. Set when self-hosted bundler is available or specified in manifest. */
+    bundlerURL?: string;
 }
 /**
  * Console log entry from Sandpack runtime (captured in browser, sent to daemon)

package/dist/core/{artifact-KXt7SRRb.d.ts → artifact-Bi-1jifF.d.cts}

@@ -1,12 +1,12 @@
-import { S as SandpackTemplate } from './board-Bfd4UTxM.js';
-import { c as ArtifactID, W as WorktreeID, B as BoardID } from './id-DSzvIi3c.js';
+import { S as SandpackTemplate } from './board-CPZGf5wF.cjs';
+import { d as ArtifactID, W as WorktreeID, B as BoardID } from './id-Cv3ntaTJ.cjs';
 
 /**
  * Artifact Type Definitions
  *
- * Artifacts are live web applications rendered via Sandpack on the board canvas.
- * Code lives on the filesystem at {worktree_path}/.agor/artifacts/{artifact_id}/
- * with a sandpack.json manifest that maps directly to Sandpack React component props.
+ * Artifacts are board-scoped, DB-backed live web applications rendered via Sandpack.
+ * The filesystem folder is a transient staging area; on publish, the daemon serializes
+ * folder contents into the DB `files` column. Serving reads from DB only.
  */
 
 /**
@@ -16,21 +16,21 @@ type ArtifactBuildStatus = 'unknown' | 'checking' | 'success' | 'error';
 /**
  * Artifact - Live web application rendered via Sandpack on the board canvas
  *
- * Artifacts are filesystem-backed Sandpack applications managed by agents.
- * Code lives at {worktree_path}/.agor/artifacts/{artifact_id}/ with a sandpack.json manifest.
+ * Artifacts are board-scoped, DB-backed objects. The `files` column holds the
+ * serialized source code. `worktree_id` and `path` are provenance only.
  */
 interface Artifact {
     artifact_id: ArtifactID;
-    /** Worktree this artifact belongs to (filesystem location) */
-    worktree_id: WorktreeID;
+    /** Worktree provenance (nullable — survives worktree deletion via SET NULL) */
+    worktree_id: WorktreeID | null;
     /** Board this artifact is displayed on */
     board_id: BoardID;
     /** Display name */
     name: string;
     /** Optional description */
     description?: string;
-    /** Relative path within worktree (always .agor/artifacts/{artifact_id}) */
-    path: string;
+    /** Provenance path — where files were read from (nullable) */
+    path: string | null;
     /** Sandpack template */
     template: SandpackTemplate;
     /** Current build status */
@@ -39,6 +39,16 @@ interface Artifact {
     build_errors?: string[];
     /** Content hash for cache invalidation (MD5 of sorted file contents) */
     content_hash?: string;
+    /** Serialized file contents: path -> code. Null for legacy records not yet re-published. */
+    files?: Record<string, string>;
+    /** NPM dependencies from manifest */
+    dependencies?: Record<string, string>;
+    /** Entry file from manifest */
+    entry?: string;
+    /** Use self-hosted Sandpack bundler */
+    use_local_bundler?: boolean;
+    /** Whether this artifact is visible to all board viewers */
+    public: boolean;
     /** User who created this artifact */
     created_by?: string;
     created_at: string;
@@ -57,6 +67,14 @@ interface SandpackManifest {
     dependencies?: Record<string, string>;
     /** Entry file path */
     entry?: string;
+    /**
+     * Opt into the daemon's self-hosted Sandpack bundler instead of CodeSandbox's
+     * default hosted bundler. Stores intent rather than a concrete URL so the
+     * artifact keeps working if the daemon's origin changes. Resolved to the
+     * daemon's selfHostedBundlerURL at payload read time. If the local bundler
+     * is not available at read time, falls back silently to the hosted bundler.
+     */
+    use_local_bundler?: boolean;
 }
 /**
  * Artifact payload served to frontend via REST
@@ -74,6 +92,8 @@ interface ArtifactPayload {
     content_hash: string;
     /** Env vars referenced in agor.config.js that the requesting user hasn't configured */
     missing_env_vars?: string[];
+    /** Custom Sandpack bundler URL. Set when self-hosted bundler is available or specified in manifest. */
+    bundlerURL?: string;
 }
 /**
  * Console log entry from Sandpack runtime (captured in browser, sent to daemon)

package/dist/core/{board-Bfd4UTxM.d.ts → board-B9Xnux_i.d.ts}

@@ -1,5 +1,5 @@
-import { A as AgenticToolName } from './agentic-tool-COqFrlmU.js';
-import { U as UUID, B as BoardID, c as ArtifactID, W as WorktreeID } from './id-DSzvIi3c.js';
+import { A as AgenticToolName } from './agentic-tool-1L19ixPC.js';
+import { U as UUID, B as BoardID, d as ArtifactID, W as WorktreeID } from './id-Cv3ntaTJ.js';
 
 /**
  * Card identifier
@@ -75,6 +75,13 @@ interface CardWithType extends Card {
     effective_color?: string;
 }
 
+/**
+ * Canvas position (x/y coordinates in board space)
+ */
+type BoardPosition = {
+    x: number;
+    y: number;
+};
 /**
  * Board object types for canvas annotations
  */
@@ -101,10 +108,7 @@ interface BoardEntityObject {
     /** Computed entity type discriminator */
     entity_type: BoardEntityType;
     /** Position on canvas */
-    position: {
-        x: number;
-        y: number;
-    };
+    position: BoardPosition;
     /** Zone this entity is pinned to (optional) */
     zone_id?: string;
     /** When this entity was added to the board */
@@ -317,4 +321,4 @@ interface BoardExportBlob {
     custom_context?: Record<string, unknown>;
 }
 
-export type { AppBoardObject as A, BoardObjectType as B, CardID as C, MarkdownBoardObject as M, SandpackTemplate as S, TextBoardObject as T, ZoneTriggerBehavior as Z, BoardEntityType as a, BoardEntityObject as b, ZoneTrigger as c, ZoneBoardObject as d, ArtifactBoardObject as e, BoardObject as f, Board as g, BoardExportBlob as h, CardTypeID as i, CardType as j, Card as k, CardWithType as l };
+export type { AppBoardObject as A, BoardPosition as B, CardID as C, MarkdownBoardObject as M, SandpackTemplate as S, TextBoardObject as T, ZoneTriggerBehavior as Z, BoardObjectType as a, BoardEntityType as b, BoardEntityObject as c, ZoneTrigger as d, ZoneBoardObject as e, ArtifactBoardObject as f, BoardObject as g, Board as h, BoardExportBlob as i, CardTypeID as j, CardType as k, Card as l, CardWithType as m };