agor-live 0.22.0 → 0.23.2

package/dist/daemon/services/boards.d.ts

@@ -4,9 +4,9 @@
  * Provides REST + WebSocket API for board management.
  * Uses DrizzleService adapter with BoardRepository.
  */
-import { type Database } from '@agor/core/db';
-import type { AssistantWelcomeNoteRequest, AuthenticatedParams, Board, BoardExportBlob, BoardObject, QueryParams } from '@agor/core/types';
-import { DrizzleService } from '../adapters/drizzle';
+import { type TenantScopeAwareDatabase } from '@agor/core/db';
+import type { AssistantWelcomeNoteRequest, AuthenticatedParams, Board, BoardExportBlob, BoardObject, QueryParams, UUID } from '@agor/core/types';
+import { DrizzleService, type Query } from '../adapters/drizzle';
 import { type BoardObjectPatchedEventPayload } from './board-objects.js';
 /**
  * Board service params
@@ -18,6 +18,8 @@ export interface BoardParams extends QueryParams<{
     user?: AuthenticatedParams['user'];
     /** Internal hook signal; set only when ensureAssistantWelcomeNote writes. */
     assistantWelcomeNoteMutated?: boolean;
+    /** Internal RBAC SQL pushdown marker set by register-hooks for external regular users. */
+    _agorSqlBoardAccessUserId?: UUID;
 }
 /**
  * Extended boards service with custom methods
@@ -26,7 +28,34 @@ export declare class BoardsService extends DrizzleService<Board, Partial<Board>,
     private boardRepo;
     private boardObjectRepo;
     private emitBoardObjectPatched?;
-    constructor(db: Database, emitBoardObjectPatched?: (boardObject: BoardObjectPatchedEventPayload) => void);
+    constructor(db: TenantScopeAwareDatabase, emitBoardObjectPatched?: (boardObject: BoardObjectPatchedEventPayload) => void);
+    /**
+     * Push the list read's high-selectivity predicates into SQL.
+     *
+     * The generic adapter would read the entire boards table and filter in
+     * memory. `boards` is fetched on initial app load, so we narrow the read to
+     * explicit board ids and any RBAC SQL visibility marker before rows leave the
+     * database. `find` still re-applies every query filter in memory, so this
+     * only ever returns a superset of the matching rows and the downstream
+     * sort/pagination is unaffected.
+     *
+     * `lean` is a list-only projection flag — it omits each board's heavy
+     * `data.objects` / `data.custom_css` (a client `$select` can't trim them:
+     * they live inside the `data` JSON column). Routing it through this one
+     * repository read is exactly what keeps the lean list from ever widening
+     * board visibility — it inherits the same RBAC + id pushdown as every other
+     * list read. It is NOT a board column, so we strip it from `query` before
+     * `find` hands the query to `filterData`, which would otherwise treat it as an
+     * equality filter on a non-existent `lean` column and empty the result;
+     * `$sort` / `$select` / pagination never touch the omitted fields, and
+     * `boards.get(id)` is unaffected and always returns the full board.
+     *
+     * The boards query validator (`boardQuerySchema`) accepts `board_id` and
+     * `lean` but strips `archived`, so there is no archived predicate to push. A
+     * `{ $in }` is only pushed when every element is a string, keeping the
+     * superset invariant unconditional.
+     */
+    protected fetchData(query: Query, params?: BoardParams): Promise<Board[]>;
     /**
      * Custom method: Find board by slug
      */
@@ -78,6 +107,11 @@ export declare class BoardsService extends DrizzleService<Board, Partial<Board>,
      * Custom method: Batch upsert board objects
      */
     batchUpsertBoardObjects(boardId: string, objects: Record<string, BoardObject>, _params?: BoardParams): Promise<Board>;
+    /**
+     * Custom method: Atomically shallow-merge field patches into existing board
+     * objects (used by z-order reorder to persist only the changed zIndex).
+     */
+    mergeBoardObjectFields(boardId: string, patches: Record<string, Partial<BoardObject>>, _params?: BoardParams): Promise<Board>;
     /**
      * Custom method: Delete a zone and handle associated sessions
      */
@@ -135,5 +169,5 @@ export declare class BoardsService extends DrizzleService<Board, Partial<Board>,
 /**
  * Service factory function
  */
-export declare function createBoardsService(db: Database, emitBoardObjectPatched?: (boardObject: BoardObjectPatchedEventPayload) => void): BoardsService;
+export declare function createBoardsService(db: TenantScopeAwareDatabase, emitBoardObjectPatched?: (boardObject: BoardObjectPatchedEventPayload) => void): BoardsService;
 //# sourceMappingURL=boards.d.ts.map

package/dist/daemon/services/boards.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boards.d.ts","sourceRoot":"","sources":["../../src/services/boards.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAA0C,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAKtF,OAAO,KAAK,EACV,2BAA2B,EAC3B,mBAAmB,EACnB,KAAK,EACL,eAAe,EACf,WAAW,EACX,WAAW,EAEZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,KAAK,8BAA8B,EAEpC,MAAM,oBAAoB,CAAC;AAE5B;;GAEG;AACH,MAAM,WAAW,WACf,SAAQ,WAAW,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;IACF,IAAI,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACnC,6EAA6E;IAC7E,2BAA2B,CAAC,EAAE,OAAO,CAAC;CACvC;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;IACnF,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,eAAe,CAAwB;IAC/C,OAAO,CAAC,sBAAsB,CAAC,CAAwD;gBAGrF,EAAE,EAAE,QAAQ,EACZ,sBAAsB,CAAC,EAAE,CAAC,WAAW,EAAE,8BAA8B,KAAK,IAAI;IAiBhF;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAItE,MAAM,CACV,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,EACvC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC;IAY3B;;OAEG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAIjF;;;OAGG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAIxF;;;OAGG;IACG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAI3F;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,EACvB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,KAAK,CAAC;IAIjB;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,KAAK,CAAC;IAuBjB;;;;;;OAMG;IACG,0BAA0B,CAC9B,IAAI,EAAE,2BAA2B,EACjC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,KAAK,CAAC;IAyBjB;;OAEG;IACG,mBAAmB,CACvB,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EACnE,gBAAgB,CAAC,EAAE,MAAM,GAAG,WAAW,EACvC,YAAY,CAAC,EAAE,WAAW,GACzB,OAAO,CAAC,KAAK,CAAC;IAQjB;;OAEG;IACG,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAInF;;OAEG;IACG,uBAAuB,CAC3B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACpC,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,KAAK,CAAC;IAIjB;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,yBAAyB,EAAE,OAAO,EAClC,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAQxD;;OAEG;IACG,MAAM,CACV,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAC/D,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,eAAe,CAAC;IAK3B;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAgB3E;;OAEG;IACG,MAAM,CACV,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAC/D,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,MAAM,CAAC;IAKlB;;OAEG;IACG,QAAQ,CACZ,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAClD,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,KAAK,CAAC;IAOjB;;OAEG;IACG,KAAK,CACT,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAC9E,eAAe,CAAC,EAAE,MAAM,GAAG,WAAW,EACtC,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,KAAK,CAAC;IAqCjB;;OAEG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAyB/D;;OAEG;IACG,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;YAuBnD,cAAc;IAiB5B,OAAO,CAAC,sBAAsB;CAqB/B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,QAAQ,EACZ,sBAAsB,CAAC,EAAE,CAAC,WAAW,EAAE,8BAA8B,KAAK,IAAI,GAC7E,aAAa,CAEf"}
+{"version":3,"file":"boards.d.ts","sourceRoot":"","sources":["../../src/services/boards.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,eAAe,CAAC;AAKvB,OAAO,KAAK,EACV,2BAA2B,EAC3B,mBAAmB,EACnB,KAAK,EACL,eAAe,EAEf,WAAW,EACX,WAAW,EACX,IAAI,EACL,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EACL,KAAK,8BAA8B,EAEpC,MAAM,oBAAoB,CAAC;AAE5B;;GAEG;AACH,MAAM,WAAW,WACf,SAAQ,WAAW,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;IACF,IAAI,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACnC,6EAA6E;IAC7E,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,0FAA0F;IAC1F,yBAAyB,CAAC,EAAE,IAAI,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;IACnF,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,eAAe,CAAwB;IAC/C,OAAO,CAAC,sBAAsB,CAAC,CAAwD;gBAGrF,EAAE,EAAE,wBAAwB,EAC5B,sBAAsB,CAAC,EAAE,CAAC,WAAW,EAAE,8BAA8B,KAAK,IAAI;IAiBhF;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;cACa,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IA4B/E;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAItE,MAAM,CACV,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,EACvC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC;IAY3B;;OAEG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAIjF;;;OAGG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAIxF;;;OAGG;IACG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAI3F;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,EACvB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,KAAK,CAAC;IAIjB;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,KAAK,CAAC;IAuBjB;;;;;;OAMG;IACG,0BAA0B,CAC9B,IAAI,EAAE,2BAA2B,EACjC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,KAAK,CAAC;IAyBjB;;OAEG;IACG,mBAAmB,CACvB,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EACnE,gBAAgB,CAAC,EAAE,MAAM,GAAG,WAAW,EACvC,YAAY,CAAC,EAAE,WAAW,GACzB,OAAO,CAAC,KAAK,CAAC;IAQjB;;OAEG;IACG,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAInF;;OAEG;IACG,uBAAuB,CAC3B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACpC,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,KAAK,CAAC;IAIjB;;;OAGG;IACG,sBAAsB,CAC1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,EAC7C,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,KAAK,CAAC;IAIjB;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,yBAAyB,EAAE,OAAO,EAClC,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAQxD;;OAEG;IACG,MAAM,CACV,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAC/D,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,eAAe,CAAC;IAK3B;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAgB3E;;OAEG;IACG,MAAM,CACV,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAC/D,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,MAAM,CAAC;IAKlB;;OAEG;IACG,QAAQ,CACZ,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAClD,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,KAAK,CAAC;IAOjB;;OAEG;IACG,KAAK,CACT,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAC9E,eAAe,CAAC,EAAE,MAAM,GAAG,WAAW,EACtC,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,KAAK,CAAC;IAqCjB;;OAEG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAyB/D;;OAEG;IACG,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;YAuBnD,cAAc;IAiB5B,OAAO,CAAC,sBAAsB;CAqB/B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,wBAAwB,EAC5B,sBAAsB,CAAC,EAAE,CAAC,WAAW,EAAE,8BAA8B,KAAK,IAAI,GAC7E,aAAa,CAEf"}

package/dist/daemon/services/boards.js

@@ -1,6 +1,9 @@
 // src/services/boards.ts
 import { PAGINATION } from "@agor/core/config";
-import { BoardObjectRepository as BoardObjectRepository2, BoardRepository } from "@agor/core/db";
+import {
+  BoardObjectRepository as BoardObjectRepository2,
+  BoardRepository
+} from "@agor/core/db";
 import {
   ASSISTANT_WELCOME_NOTE_OBJECT_ID,
   buildAssistantWelcomeNoteObject
@@ -24,6 +27,34 @@ var DrizzleService = class {
   // Event emitter for FeathersJS (will be injected by framework)
   // biome-ignore lint/suspicious/noExplicitAny: FeathersJS event system
   emit;
+  /** Extract resolved tenant context from Feathers params. */
+  getTenant(params) {
+    return params?.tenant;
+  }
+  /**
+   * Whether a row belongs to the current tenant. Rows from pre-migration test
+   * fixtures that do not expose tenant_id are treated as visible so existing
+   * single-tenant unit tests keep working; migrated DB rows always carry it.
+   */
+  rowBelongsToTenant(row, tenant) {
+    if (!tenant) return true;
+    const record = row;
+    if (!("tenant_id" in record)) return true;
+    return record.tenant_id === tenant.tenant_id;
+  }
+  /** Stamp tenant_id onto created rows and prevent client-supplied drift. */
+  withTenant(data, params) {
+    const tenant = this.getTenant(params);
+    if (!tenant || !data || typeof data !== "object" || Array.isArray(data)) return data;
+    return { ...data, tenant_id: tenant.tenant_id };
+  }
+  /** Never allow a patch/update to move a row across tenants. */
+  stripTenantMutation(data) {
+    if (!data || typeof data !== "object" || Array.isArray(data)) return data;
+    const clone = { ...data };
+    delete clone.tenant_id;
+    return clone;
+  }
   /**
    * Extract query parameters from params
    */
@@ -115,12 +146,28 @@ var DrizzleService = class {
       data: paginated
     };
   }
+  /**
+   * Resolve the candidate row set that `find` filters, sorts, and paginates.
+   *
+   * The base implementation reads the whole table and relies on `filterData` to
+   * narrow it in memory. Subclasses may override this to push high-selectivity
+   * predicates into SQL; because `find` always re-applies every query filter via
+   * `filterData`, an override only needs to return a superset of the matching
+   * rows for the result to stay identical.
+   */
+  async fetchData(_query, _params) {
+    return this.repository.findAll();
+  }
   /**
    * Find records
    */
   async find(params) {
     const query = this.getQuery(params);
-    let data = await this.repository.findAll();
+    let data = await this.fetchData(query, params);
+    const tenant = this.getTenant(params);
+    if (tenant) {
+      data = data.filter((row) => this.rowBelongsToTenant(row, tenant));
+    }
     data = this.filterData(data, query);
     const total = data.length;
     data = this.sortData(data, query.$sort);
@@ -132,10 +179,13 @@ var DrizzleService = class {
    */
   async get(id, _params) {
     const prefetched = _params?._agorPrefetchedRecord;
-    if (prefetched && prefetched.idField === this.id && prefetched.id === String(id) && String(prefetched.record[this.id]) === String(id)) {
+    if (prefetched && prefetched.idField === this.id && prefetched.id === String(id) && String(prefetched.record[this.id]) === String(id) && this.rowBelongsToTenant(prefetched.record, this.getTenant(_params))) {
       return prefetched.record;
     }
     const result = await this.repository.findById(String(id));
+    if (result && !this.rowBelongsToTenant(result, this.getTenant(_params))) {
+      throw new NotFoundError(this.resourceType, String(id));
+    }
     if (!result) {
       throw new NotFoundError(this.resourceType, String(id));
     }
@@ -147,14 +197,18 @@ var DrizzleService = class {
   async create(data, params) {
     if (Array.isArray(data)) {
       const results = await Promise.all(
-        data.map((item) => this.repository.create(item))
+        data.map(
+          (item) => this.repository.create(this.withTenant(item, params))
+        )
       );
       for (const result2 of results) {
         this.emit?.("created", result2, params);
       }
       return results;
     }
-    const result = await this.repository.create(data);
+    const result = await this.repository.create(
+      this.withTenant(data, params)
+    );
     this.emit?.("created", result, params);
     return result;
   }
@@ -170,7 +224,10 @@ var DrizzleService = class {
    */
   async update(id, data, params) {
     await this.get(id, params);
-    const result = await this.repository.update(String(id), data);
+    const result = await this.repository.update(
+      String(id),
+      this.stripTenantMutation(data)
+    );
     this.emit?.("updated", result, params);
     return result;
   }
@@ -184,12 +241,14 @@ var DrizzleService = class {
       }
       const query = this.getQuery(params);
       let records = await this.repository.findAll();
+      const tenant = this.getTenant(params);
+      if (tenant) records = records.filter((row) => this.rowBelongsToTenant(row, tenant));
       records = this.filterData(records, query);
       const results = await Promise.all(
         records.map(
           (record) => this.repository.update(
             record[this.id],
-            data
+            this.stripTenantMutation(data)
           )
         )
       );
@@ -199,7 +258,10 @@ var DrizzleService = class {
       return results;
     }
     await this.get(id, params);
-    const result = await this.repository.update(String(id), data);
+    const result = await this.repository.update(
+      String(id),
+      this.stripTenantMutation(data)
+    );
     this.emit?.("patched", result, params);
     return result;
   }
@@ -213,6 +275,8 @@ var DrizzleService = class {
       }
       const query = this.getQuery(params);
       let records = await this.repository.findAll();
+      const tenant = this.getTenant(params);
+      if (tenant) records = records.filter((row) => this.rowBelongsToTenant(row, tenant));
       records = this.filterData(records, query);
       await Promise.all(records.map((record) => this.repository.delete(record[this.id])));
       for (const record of records) {
@@ -257,6 +321,50 @@ var BoardsService = class extends DrizzleService {
     this.boardObjectRepo = new BoardObjectRepository2(db);
     this.emitBoardObjectPatched = emitBoardObjectPatched;
   }
+  /**
+   * Push the list read's high-selectivity predicates into SQL.
+   *
+   * The generic adapter would read the entire boards table and filter in
+   * memory. `boards` is fetched on initial app load, so we narrow the read to
+   * explicit board ids and any RBAC SQL visibility marker before rows leave the
+   * database. `find` still re-applies every query filter in memory, so this
+   * only ever returns a superset of the matching rows and the downstream
+   * sort/pagination is unaffected.
+   *
+   * `lean` is a list-only projection flag — it omits each board's heavy
+   * `data.objects` / `data.custom_css` (a client `$select` can't trim them:
+   * they live inside the `data` JSON column). Routing it through this one
+   * repository read is exactly what keeps the lean list from ever widening
+   * board visibility — it inherits the same RBAC + id pushdown as every other
+   * list read. It is NOT a board column, so we strip it from `query` before
+   * `find` hands the query to `filterData`, which would otherwise treat it as an
+   * equality filter on a non-existent `lean` column and empty the result;
+   * `$sort` / `$select` / pagination never touch the omitted fields, and
+   * `boards.get(id)` is unaffected and always returns the full board.
+   *
+   * The boards query validator (`boardQuerySchema`) accepts `board_id` and
+   * `lean` but strips `archived`, so there is no archived predicate to push. A
+   * `{ $in }` is only pushed when every element is a string, keeping the
+   * superset invariant unconditional.
+   */
+  async fetchData(query, params) {
+    const filter = {};
+    if (params?._agorSqlBoardAccessUserId) {
+      filter.visibleToUserId = params._agorSqlBoardAccessUserId;
+    }
+    const leanQuery = query;
+    if (leanQuery.lean) {
+      filter.lean = true;
+    }
+    delete leanQuery.lean;
+    const boardId = query.board_id;
+    if (typeof boardId === "string") {
+      filter.boardIds = [boardId];
+    } else if (boardId && typeof boardId === "object" && Array.isArray(boardId.$in) && boardId.$in.every((el) => typeof el === "string")) {
+      filter.boardIds = boardId.$in;
+    }
+    return this.boardRepo.findAll(filter);
+  }
   /**
    * Custom method: Find board by slug
    */
@@ -365,6 +473,13 @@ var BoardsService = class extends DrizzleService {
   async batchUpsertBoardObjects(boardId, objects, _params) {
     return this.boardRepo.batchUpsertBoardObjects(boardId, objects);
   }
+  /**
+   * Custom method: Atomically shallow-merge field patches into existing board
+   * objects (used by z-order reorder to persist only the changed zIndex).
+   */
+  async mergeBoardObjectFields(boardId, patches, _params) {
+    return this.boardRepo.mergeBoardObjectFields(boardId, patches);
+  }
   /**
    * Custom method: Delete a zone and handle associated sessions
    */

package/dist/daemon/services/branch-owners.d.ts

@@ -13,7 +13,7 @@
  * - Only branch owners can manage other owners (requires 'all' permission)
  *
  * Unix Integration:
- * - When owners are added/removed, fire-and-forget sync to executor
+ * - When Unix filesystem isolation is enabled, owner changes fire-and-forget sync to executor
  *
  * @see context/guides/rbac-and-unix-isolation.md
  */
@@ -27,6 +27,8 @@ export interface BranchOwnersServiceConfig {
     jwtSecret?: string;
     /** Daemon Unix user (for group membership) */
     daemonUser?: string;
+    /** Whether Unix filesystem isolation is enabled */
+    unixFsIsolationEnabled?: boolean;
     /** Whether superadmin bypass is enabled (default: true) */
     allowSuperadmin?: boolean;
 }

package/dist/daemon/services/branch-owners.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branch-owners.d.ts","sourceRoot":"","sources":["../../src/services/branch-owners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,EAAE,KAAK,WAAW,EAA+B,MAAM,qBAAqB,CAAC;AAmHpF;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,WAAW,EAChB,UAAU,EAAE,gBAAgB,EAC5B,MAAM,GAAE,yBAA8B,QA0JvC"}
+{"version":3,"file":"branch-owners.d.ts","sourceRoot":"","sources":["../../src/services/branch-owners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,EAAE,KAAK,WAAW,EAA+B,MAAM,qBAAqB,CAAC;AAoHpF;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,WAAW,EAChB,UAAU,EAAE,gBAAgB,EAC5B,MAAM,GAAE,yBAA8B,QA4JvC"}

package/dist/daemon/services/branch-owners.js

@@ -124,6 +124,13 @@ function generateTaskId() {
   return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 function findExecutorPath() {
+  const configuredPath = process.env.AGOR_EXECUTOR_PATH;
+  if (configuredPath) {
+    if (!existsSync(configuredPath)) {
+      throw new Error(`Configured AGOR_EXECUTOR_PATH does not exist: ${configuredPath}`);
+    }
+    return configuredPath;
+  }
   const dirname = typeof __dirname !== "undefined" ? __dirname : path.dirname(fileURLToPath(import.meta.url));
   const possiblePaths = [
     path.join(dirname, "../executor/cli.js"),
@@ -234,6 +241,12 @@ function spawnExecutorLocal(payload, options) {
     options.onExit?.(127);
     return;
   }
+  let reportedExit = false;
+  const reportExit = (code) => {
+    if (reportedExit) return;
+    reportedExit = true;
+    options.onExit?.(code);
+  };
   const executorProcess = spawn(cmd, args, {
     cwd,
     env: asUser ? void 0 : { ...envWithDaemonUrl },
@@ -247,6 +260,7 @@ function spawnExecutorLocal(payload, options) {
   onSpawn?.(executorProcess);
   executorProcess.on("error", (error) => {
     console.error(`${logPrefix} Spawn error:`, error.message);
+    reportExit(127);
   });
   executorProcess.on("exit", (code) => {
     if (code === 0) {
@@ -254,7 +268,7 @@ function spawnExecutorLocal(payload, options) {
     } else {
       console.error(`${logPrefix} Executor exited with code ${code}`);
     }
-    options.onExit?.(code);
+    reportExit(code);
   });
   executorProcess.stdin?.write(JSON.stringify(payload));
   executorProcess.stdin?.end();
@@ -267,6 +281,12 @@ function spawnExecutorWithTemplate(payload, options) {
   console.log(`${logPrefix} Task ID: ${templateVariables.task_id}`);
   console.log(`${logPrefix} Command: ${payload.command}`);
   console.log(`${logPrefix} Template command (first 200 chars): ${command.slice(0, 200)}...`);
+  let reportedExit = false;
+  const reportExit = (code) => {
+    if (reportedExit) return;
+    reportedExit = true;
+    options.onExit?.(code);
+  };
   const executorProcess = spawn("sh", ["-c", command], {
     env: { ...process.env, LOG_LEVEL: logLevel },
     stdio: ["pipe", "pipe", "pipe"]
@@ -280,6 +300,7 @@ function spawnExecutorWithTemplate(payload, options) {
   });
   executorProcess.on("error", (error) => {
     console.error(`${logPrefix} Spawn error:`, error.message);
+    reportExit(127);
   });
   executorProcess.on("exit", (code) => {
     if (code === 0) {
@@ -291,7 +312,7 @@ function spawnExecutorWithTemplate(payload, options) {
         `${logPrefix} Executor exited with code ${code} (task: ${templateVariables.task_id})`
       );
     }
-    options.onExit?.(code);
+    reportExit(code);
   });
   executorProcess.stdin?.write(JSON.stringify(payload));
   executorProcess.stdin?.end();
@@ -314,6 +335,10 @@ function createServiceToken(jwtSecret, expiresIn, scope = {}) {
     expiresIn || "5m"
   );
 }
+function serviceTokenScopeForParams(params) {
+  const tenantId = params?.tenant?.tenant_id ?? params?.tenant_id ?? params?.user?.tenant_id;
+  return tenantId ? { tenant_id: tenantId } : {};
+}
 var spawnExecutorFireAndForget = spawnExecutor;
 
 // src/services/branch-owners.ts
@@ -444,12 +469,13 @@ function setupBranchOwnersService(app, branchRepo, config = {}) {
       // The executor will handle adding user to branch group, repo group, and creating symlinks
       create: [
         async (context) => {
-          if (!config.jwtSecret) {
+          if (!config.unixFsIsolationEnabled || !config.jwtSecret) {
             return context;
           }
           const branchId = context.params.route?.id;
           console.log(`[Unix Integration] Syncing branch ${shortId2(branchId)} after owner added`);
           const serviceToken = createServiceToken(config.jwtSecret, void 0, {
+            ...serviceTokenScopeForParams(context.params),
             branch_id: branchId,
             command: "unix.sync-branch"
           });
@@ -472,12 +498,13 @@ function setupBranchOwnersService(app, branchRepo, config = {}) {
       // The executor will handle removing user from groups and updating permissions
       remove: [
         async (context) => {
-          if (!config.jwtSecret) {
+          if (!config.unixFsIsolationEnabled || !config.jwtSecret) {
             return context;
           }
           const branchId = context.params.route?.id;
           console.log(`[Unix Integration] Syncing branch ${shortId2(branchId)} after owner removed`);
           const serviceToken = createServiceToken(config.jwtSecret, void 0, {
+            ...serviceTokenScopeForParams(context.params),
             branch_id: branchId,
             command: "unix.sync-branch"
           });

package/dist/daemon/services/branches.d.ts

@@ -4,10 +4,10 @@
  * Provides REST + WebSocket API for branch management.
  * Uses DrizzleService adapter with BranchRepository.
  */
-import { type BranchWithZoneAndSessions, type Database } from '@agor/core/db';
+import { type BranchWithZoneAndSessions, type TenantScopeAwareDatabase } from '@agor/core/db';
 import { type Application } from '@agor/core/feathers';
-import type { AuthenticatedParams, BoardID, Branch, BranchID, KnowledgeNamespace, QueryParams, UUID } from '@agor/core/types';
-import { DrizzleService } from '../adapters/drizzle';
+import type { AuthenticatedParams, BoardID, Branch, BranchEnvironmentUpdate, BranchID, KnowledgeNamespace, QueryParams, UUID } from '@agor/core/types';
+import { DrizzleService, type Query } from '../adapters/drizzle';
 import type { InternalEnrichmentParams } from './sessions';
 /**
  * Branch service params
@@ -26,6 +26,8 @@ export type BranchParams = QueryParams<{
 }> & AuthenticatedParams & InternalEnrichmentParams & {
     /** Root-level include_sessions flag (bypasses Feathers query filtering, used by internal service calls) */
     _include_sessions?: boolean | 'true' | 'false';
+    /** Internal RBAC SQL pushdown marker set by register-hooks for external regular users. */
+    _agorSqlBranchAccessUserId?: UUID;
 };
 /**
  * Extended branches service with custom methods
@@ -37,7 +39,7 @@ export declare class BranchesService extends DrizzleService<Branch, Partial<Bran
     private app;
     private processes;
     private boardObjectsService?;
-    constructor(db: Database, app: Application);
+    constructor(db: TenantScopeAwareDatabase, app: Application);
     /**
      * Canonical control gate for managed environment custom methods.
      * Runs for REST, WebSocket, and MCP callers since all trigger paths reach
@@ -140,6 +142,27 @@ export declare class BranchesService extends DrizzleService<Branch, Partial<Bran
      * Session activity enrichment is opt-in via include_sessions query parameter
      */
     get(id: BranchID, params?: BranchParams): Promise<BranchWithZoneAndSessions>;
+    /**
+     * Push the list read's high-selectivity predicates into SQL.
+     *
+     * The generic adapter would read the entire branches table and filter in
+     * memory, so the cost scaled with total branch count rather than the scoped
+     * result. `branches` is the highest-cardinality entity fetched during initial
+     * app load, so we narrow the read to the board scope, archived state,
+     * explicit/zone-derived branch ids, and any RBAC SQL visibility marker before
+     * rows leave the database. `find` still re-applies every query filter
+     * in memory, so this only ever returns a superset of the matching rows and the
+     * downstream sort/pagination/enrichment is unaffected.
+     *
+     * `zone_id` is deliberately not pushed here — it is virtual (backed by
+     * board_objects, not a branches column) and is already resolved to a
+     * `branch_id` filter in `find` before this runs.
+     *
+     * A `{ $in }` is only pushed when every element is a string. `branches.branch_id`
+     * is non-null so it can't diverge today, but the guard keeps the superset
+     * invariant unconditional and avoids handing a malformed element to SQL.
+     */
+    protected fetchData(query: Query, params?: BranchParams): Promise<Branch[]>;
     /**
      * Override find to enrich with zone information only
      *
@@ -209,9 +232,9 @@ export declare class BranchesService extends DrizzleService<Branch, Partial<Bran
     updateEnvironment(idOrData: BranchID | {
         branch_id?: BranchID;
         branchId?: BranchID;
-        environment_update?: Partial<Branch['environment_instance']>;
-        environmentUpdate?: Partial<Branch['environment_instance']>;
-    }, environmentUpdateOrParams?: Partial<Branch['environment_instance']> | BranchParams, params?: BranchParams): Promise<BranchWithZoneAndSessions>;
+        environment_update?: BranchEnvironmentUpdate;
+        environmentUpdate?: BranchEnvironmentUpdate;
+    }, environmentUpdateOrParams?: BranchEnvironmentUpdate | BranchParams, params?: BranchParams): Promise<BranchWithZoneAndSessions>;
     /**
      * Custom method: Start environment
      */
@@ -260,5 +283,5 @@ export declare class BranchesService extends DrizzleService<Branch, Partial<Bran
 /**
  * Service factory function
  */
-export declare function createBranchesService(db: Database, app: Application): BranchesService;
+export declare function createBranchesService(db: TenantScopeAwareDatabase, app: Application): BranchesService;
 //# sourceMappingURL=branches.d.ts.map

package/dist/daemon/services/branches.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branches.d.ts","sourceRoot":"","sources":["../../src/services/branches.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,QAAQ,EAGd,MAAM,eAAe,CAAC;AAWvB,OAAO,EAAE,KAAK,WAAW,EAA2C,MAAM,qBAAqB,CAAC;AAEhG,OAAO,KAAK,EACV,mBAAmB,EAEnB,OAAO,EACP,MAAM,EACN,QAAQ,EACR,kBAAkB,EAClB,WAAW,EAGX,IAAI,EACL,MAAM,kBAAkB,CAAC;AAS1B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAcrD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC;IACrC,SAAS,CAAC,EAAE,QAAQ,GAAG;QAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC;IAC5C,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAC9C,8BAA8B,CAAC,EAAE,MAAM,CAAC;CACzC,CAAC,GACA,mBAAmB,GACnB,wBAAwB,GAAG;IACzB,2GAA2G;IAC3G,iBAAiB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;CAChD,CAAC;AA+BJ;;GAEG;AACH,qBAAa,eAAgB,SAAQ,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IACxF,OAAO,CAAC,UAAU,CAAmB;IACrC,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,EAAE,CAAW;IACrB,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,SAAS,CAAuC;IAExD,OAAO,CAAC,mBAAmB,CAAC,CAM1B;gBAEU,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW;IAiB1C;;;;OAIG;YACW,mBAAmB;YAQnB,0BAA0B;YAK1B,yBAAyB;YAQzB,kCAAkC;YAmBlC,yBAAyB;YAgEzB,sBAAsB;YAyCtB,iCAAiC;YA2BjC,gCAAgC;YAgDhC,2BAA2B;YAkB3B,sBAAsB;YAiCtB,+BAA+B;IAqD7C;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAQ1B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAe9B;;;OAGG;YACW,oCAAoC;IAsDlD;;;;;;;;;;OAUG;YACW,yBAAyB;IAiCvC;;;;;;;;;OASG;IACG,mBAAmB,CACvB,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;KAAE,EACpE,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAsBjC;;OAEG;IACG,MAAM,CACV,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,EACzC,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;IA+B7B,OAAO,CAAC,kBAAkB;YAMZ,6BAA6B;YAmB7B,sCAAsC;YActC,iCAAiC;IAY/C,OAAO,CAAC,wCAAwC;YAgBlC,uCAAuC;IAWrD,OAAO,CAAC,oCAAoC;YAoB9B,kCAAkC;IAoC1C,iCAAiC,CACrC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EACxD,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC;QAAE,SAAS,EAAE,kBAAkB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAc7D,OAAO,CAAC,aAAa;IAUrB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IA6BzB,OAAO,CAAC,2BAA2B;YAYrB,kCAAkC;IAoDhD;;;;;;OAMG;IACG,KAAK,CACT,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EACrB,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;IAqF/B,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBzF;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAuBlF;;;;;;;;;OASG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY;;;;;;IA+ChC;;;;OAIG;IACG,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAmElE;;;;;;;;;OASG;IACG,eAAe,CACnB,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE;QACP,cAAc,EAAE,SAAS,GAAG,QAAQ,CAAC;QACrC,gBAAgB,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;KACvD,EACD,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,GAAG;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,QAAQ,CAAA;KAAE,CAAC;IA4J9E;;OAEG;IACG,SAAS,CACb,EAAE,EAAE,QAAQ,EACZ,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,EAC/B,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;IA0LrC;;OAEG;IACG,iBAAiB,CACrB,MAAM,EAAE,IAAI,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIzB;;;;;OAKG;IACG,UAAU,CACd,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,IAAI,EACb,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;IAsBrC;;;;;OAKG;IACG,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAsB9F;;OAEG;IACG,iBAAiB,CACrB,QAAQ,EACJ,QAAQ,GACR;QACE,SAAS,CAAC,EAAE,QAAQ,CAAC;QACrB,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7D,iBAAiB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;KAC7D,EACL,yBAAyB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,GAAG,YAAY,EAClF,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;IA0DrC;;OAEG;IACG,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAgF/F;;OAEG;IACG,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA+E9F;;OAEG;IACG,kBAAkB,CACtB,EAAE,EAAE,QAAQ,EACZ,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;IAmDrC;;OAEG;IACG,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAuE9F;;OAEG;IACG,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAyI1F;;OAEG;IACG,OAAO,CACX,EAAE,EAAE,QAAQ,EACZ,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;IAyEF;;;;;;;;;;;OAWG;IACG,iBAAiB,CACrB,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,EACtC,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;CAyEtC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,GAAG,eAAe,CAErF"}
+{"version":3,"file":"branches.d.ts","sourceRoot":"","sources":["../../src/services/branches.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,OAAO,EAGL,KAAK,yBAAyB,EAE9B,KAAK,wBAAwB,EAE9B,MAAM,eAAe,CAAC;AAWvB,OAAO,EAAE,KAAK,WAAW,EAA2C,MAAM,qBAAqB,CAAC;AAEhG,OAAO,KAAK,EACV,mBAAmB,EAEnB,OAAO,EACP,MAAM,EACN,uBAAuB,EACvB,QAAQ,EACR,kBAAkB,EAClB,WAAW,EAGX,IAAI,EACL,MAAM,kBAAkB,CAAC;AAa1B,OAAO,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAgBjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC;IACrC,SAAS,CAAC,EAAE,QAAQ,GAAG;QAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC;IAC5C,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAC9C,8BAA8B,CAAC,EAAE,MAAM,CAAC;CACzC,CAAC,GACA,mBAAmB,GACnB,wBAAwB,GAAG;IACzB,2GAA2G;IAC3G,iBAAiB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAC/C,0FAA0F;IAC1F,0BAA0B,CAAC,EAAE,IAAI,CAAC;CACnC,CAAC;AAiCJ;;GAEG;AACH,qBAAa,eAAgB,SAAQ,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IACxF,OAAO,CAAC,UAAU,CAAmB;IACrC,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,EAAE,CAA2B;IACrC,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,SAAS,CAAuC;IAExD,OAAO,CAAC,mBAAmB,CAAC,CAM1B;gBAEU,EAAE,EAAE,wBAAwB,EAAE,GAAG,EAAE,WAAW;IAiB1D;;;;OAIG;YACW,mBAAmB;YAQnB,0BAA0B;YAK1B,yBAAyB;YAQzB,kCAAkC;YAmBlC,yBAAyB;YAgEzB,sBAAsB;YAyCtB,iCAAiC;YA2BjC,gCAAgC;YAgDhC,2BAA2B;YA4C3B,sBAAsB;YAiCtB,+BAA+B;IAqD7C;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAQ1B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAe9B;;;OAGG;YACW,oCAAoC;IAsDlD;;;;;;;;;;OAUG;YACW,yBAAyB;IAiCvC;;;;;;;;;OASG;IACG,mBAAmB,CACvB,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;KAAE,EACpE,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAsBjC;;OAEG;IACG,MAAM,CACV,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,EACzC,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;IA+B7B,OAAO,CAAC,kBAAkB;YAMZ,6BAA6B;YAmB7B,sCAAsC;YActC,iCAAiC;IAY/C,OAAO,CAAC,wCAAwC;YAgBlC,uCAAuC;IAWrD,OAAO,CAAC,oCAAoC;YAoB9B,kCAAkC;IAoC1C,iCAAiC,CACrC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EACxD,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC;QAAE,SAAS,EAAE,kBAAkB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAc7D,OAAO,CAAC,aAAa;IAUrB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IA6BzB,OAAO,CAAC,2BAA2B;YAYrB,kCAAkC;IAoDhD;;;;;;OAMG;IACG,KAAK,CACT,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EACrB,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;IAqF/B,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBzF;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAuBlF;;;;;;;;;;;;;;;;;;;OAmBG;cACa,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA+BjF;;;;;;;;;OASG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY;;;;;;IA+ChC;;;;OAIG;IACG,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAmElE;;;;;;;;;OASG;IACG,eAAe,CACnB,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE;QACP,cAAc,EAAE,SAAS,GAAG,QAAQ,CAAC;QACrC,gBAAgB,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;KACvD,EACD,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,GAAG;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,QAAQ,CAAA;KAAE,CAAC;IA4J9E;;OAEG;IACG,SAAS,CACb,EAAE,EAAE,QAAQ,EACZ,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,EAC/B,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;IA8LrC;;OAEG;IACG,iBAAiB,CACrB,MAAM,EAAE,IAAI,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIzB;;;;;OAKG;IACG,UAAU,CACd,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,IAAI,EACb,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;IAsBrC;;;;;OAKG;IACG,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAsB9F;;OAEG;IACG,iBAAiB,CACrB,QAAQ,EACJ,QAAQ,GACR;QACE,SAAS,CAAC,EAAE,QAAQ,CAAC;QACrB,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;QAC7C,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;KAC7C,EACL,yBAAyB,CAAC,EAAE,uBAAuB,GAAG,YAAY,EAClE,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;IAoFrC;;OAEG;IACG,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAgF/F;;OAEG;IACG,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA+E9F;;OAEG;IACG,kBAAkB,CACtB,EAAE,EAAE,QAAQ,EACZ,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;IAmDrC;;OAEG;IACG,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAuE9F;;OAEG;IACG,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA8I1F;;OAEG;IACG,OAAO,CACX,EAAE,EAAE,QAAQ,EACZ,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;IAyEF;;;;;;;;;;;OAWG;IACG,iBAAiB,CACrB,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,EACtC,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,yBAAyB,CAAC;CA2EtC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,wBAAwB,EAC5B,GAAG,EAAE,WAAW,GACf,eAAe,CAEjB"}