agor-live 0.22.0 → 0.23.2

package/dist/core/db/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAIzC;;GAEG;AACH,qBAAa,cAAe,SAAQ,KAAK;aAGrB,KAAK,CAAC,EAAE,OAAO;gBAD/B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,OAAO,YAAA;CAKlC;AAiHD;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,QAAQ,GACX,OAAO,CAAC;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAwDxE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAgD/D;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAGpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuCrF"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAKzC;;GAEG;AACH,qBAAa,cAAe,SAAQ,KAAK;aAGrB,KAAK,CAAC,EAAE,OAAO;gBAD/B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,OAAO,YAAA;CAKlC;AAiHD;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,QAAQ,GACX,OAAO,CAAC;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAwDxE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAgD/D;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAGpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoDrF"}

package/dist/core/db/repositories/artifacts.d.ts

@@ -6,7 +6,7 @@
  * helper, so drizzle handles serialization at the column boundary on both
  * dialects (SQLite `text` with `mode: 'json'`, Postgres native `jsonb`).
  */
-import type { Artifact, ArtifactBuildStatus, BoardID, BranchID } from '@agor/core/types';
+import type { Artifact, ArtifactBuildStatus, BoardID, BranchID, UUID } from '@agor/core/types';
 import type { Database } from '../client';
 import { type BaseRepository } from './base';
 export declare class ArtifactRepository implements BaseRepository<Artifact, Partial<Artifact>> {
@@ -24,7 +24,32 @@ export declare class ArtifactRepository implements BaseRepository<Artifact, Part
     resolveId(id: string): Promise<string>;
     create(data: Partial<Artifact>): Promise<Artifact>;
     findById(id: string): Promise<Artifact | null>;
-    findAll(): Promise<Artifact[]>;
+    /**
+     * Find all artifacts (with optional filters).
+     *
+     * The `board_id`, `archived`, and `branchIds` filters let the list read path
+     * (`ArtifactsService.find`) push its high-selectivity predicates — including
+     * the accessible-branch set injected by RBAC scoping — into SQL so it no
+     * longer materializes the whole table before filtering in memory. Rows with a
+     * null `branch_id` (orphaned artifacts) are excluded by a `branchIds` filter,
+     * matching the in-memory `{ $in }` semantics.
+     *
+     * @param filter - Optional filters
+     * @param filter.board_id - Filter to a single board
+     * @param filter.archived - Filter to an exact archived state
+     * @param filter.branchIds - Restrict to a set of branch IDs (empty set yields
+     *   no rows, matching an `{ $in: [] }` filter)
+     * @param filter.visibleToUserId - Restrict to artifacts whose branch is
+     *   visible to this user under branch RBAC, pushed down as a correlated SQL
+     *   EXISTS instead of a preloaded `branch_id IN (...)` list. Null-branch
+     *   artifacts are excluded, matching the existing RBAC find-hook behavior.
+     */
+    findAll(filter?: {
+        board_id?: BoardID;
+        archived?: boolean;
+        branchIds?: BranchID[];
+        visibleToUserId?: UUID;
+    }): Promise<Artifact[]>;
     /**
      * Find all visible artifacts for a user: public + private owned by userId.
      */

package/dist/core/db/repositories/artifacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,QAAQ,EACR,mBAAmB,EAEnB,OAAO,EACP,QAAQ,EAIT,MAAM,kBAAkB,CAAC;AAK1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AAEhB,qBAAa,kBAAmB,YAAW,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAkCf,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWtC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAmDlD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAoB9C,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAapC;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAqB9E,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAgBvD,aAAa,CACjB,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAChE,OAAO,CAAC,QAAQ,EAAE,CAAC;IA+BhB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAsEjE,iBAAiB,CACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,mBAAmB,EAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,QAAQ,CAAC;IAOd,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI9D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAgBxC"}
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,QAAQ,EACR,mBAAmB,EAEnB,OAAO,EACP,QAAQ,EAGR,IAAI,EACL,MAAM,kBAAkB,CAAC;AAK1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AAGhB,qBAAa,kBAAmB,YAAW,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAkCf,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWtC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAmDlD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAoBpD;;;;;;;;;;;;;;;;;;;OAmBG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE;QACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;QACvB,eAAe,CAAC,EAAE,IAAI,CAAC;KACxB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAqCvB;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAqB9E,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAgBvD,aAAa,CACjB,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAChE,OAAO,CAAC,QAAQ,EAAE,CAAC;IA+BhB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAsEjE,iBAAiB,CACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,mBAAmB,EAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,QAAQ,CAAC;IAOd,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI9D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAgBxC"}

package/dist/core/db/repositories/base.d.ts

@@ -77,4 +77,22 @@ export declare function resolveByShortIdPrefix(id: string, entityType: string, f
  * rows feed a richer `AmbiguousIdError.matches` list without unbounded growth.
  */
 export declare const RESOLVE_SHORT_ID_FETCH_LIMIT = 11;
+/**
+ * Tenant column values for inserts performed inside the canonical database
+ * scope. SQLite schemas do not have tenant_id, so callers should only spread
+ * this into Postgres tenant-ready tables; when no scope is active we omit it
+ * and let the database default preserve single-tenant behavior.
+ */
+export declare function currentTenantInsert(): {
+    tenant_id?: string;
+};
+/**
+ * Preserve tenant metadata for in-process service isolation without exposing it
+ * through JSON API responses. Some repositories map DB rows to public DTOs that
+ * intentionally omit tenant_id; Feathers' defensive tenant filter still needs
+ * to see it before serialization, especially in dev databases whose owner role
+ * can bypass RLS.
+ */
+export declare function getHiddenTenantId(row: unknown): string | undefined;
+export declare function attachHiddenTenant<T extends object>(dto: T, row: unknown): T;
 //# sourceMappingURL=base.d.ts.map

package/dist/core/db/repositories/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/base.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH;;GAEG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC;IAC5C;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAElC;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAExC;;OAEG;IACH,OAAO,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAExB;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE1D;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,KAAK,CAAC,EAAE,OAAO;gBAD/B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,OAAO,YAAA;CAKlC;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;aAEpC,UAAU,EAAE,MAAM;aAClB,EAAE,EAAE,MAAM;gBADV,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM;CAK7B;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,eAAe;aAEjC,UAAU,EAAE,MAAM;aAClB,MAAM,EAAE,MAAM;aACd,OAAO,EAAE,MAAM,EAAE;gBAFjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EAAE;CAOpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,GACnD,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAED;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/base.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;GAEG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC;IAC5C;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAElC;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAExC;;OAEG;IACH,OAAO,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAExB;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE1D;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,KAAK,CAAC,EAAE,OAAO;gBAD/B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,OAAO,YAAA;CAKlC;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;aAEpC,UAAU,EAAE,MAAM;aAClB,EAAE,EAAE,MAAM;gBADV,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM;CAK7B;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,eAAe;aAEjC,UAAU,EAAE,MAAM;aAClB,MAAM,EAAE,MAAM;aACd,OAAO,EAAE,MAAM,EAAE;gBAFjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EAAE;CAOpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,GACnD,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAED;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAG5D;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGlE;AAED,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,CAAC,CAU5E"}

package/dist/core/db/repositories/board-comments.d.ts

@@ -4,7 +4,7 @@
  * Type-safe CRUD operations for board comments with short ID support.
  * Supports flexible attachments (board, session, task, message, branch, spatial).
  */
-import type { BoardComment } from '@agor/core/types';
+import type { BoardComment, UUID } from '@agor/core/types';
 import type { Database } from '../client';
 import { type BaseRepository } from './base';
 /**
@@ -33,6 +33,8 @@ export declare class BoardCommentsRepository implements BaseRepository<BoardComm
      * Find comment by ID (supports short ID)
      */
     findById(id: string): Promise<BoardComment | null>;
+    private buildFindConditions;
+    private buildVisibleToUserCondition;
     /**
      * Find all comments (optionally filtered by board, session, task, etc.)
      */
@@ -44,7 +46,21 @@ export declare class BoardCommentsRepository implements BaseRepository<BoardComm
         branch_id?: string;
         resolved?: boolean;
         created_by?: string;
+        visibleToUserId?: UUID;
+    }, options?: {
+        limit?: number;
+        offset?: number;
     }): Promise<BoardComment[]>;
+    count(filters?: {
+        board_id?: string;
+        session_id?: string | null;
+        task_id?: string | null;
+        message_id?: string | null;
+        branch_id?: string | null;
+        resolved?: boolean;
+        created_by?: string;
+        visibleToUserId?: UUID;
+    }): Promise<number>;
     /**
      * Update comment by ID
      */

package/dist/core/db/repositories/board-comments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"board-comments.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/board-comments.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAmB,MAAM,kBAAkB,CAAC;AAGtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AAShB;;GAEG;AACH,qBAAa,uBACX,YAAW,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAElD,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;OAEG;IACH,OAAO,CAAC,YAAY;IAkCpB;;OAEG;IACH,OAAO,CAAC,eAAe;IAkCvB;;OAEG;YACW,SAAS;IAWvB;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAwBhE;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAmBxD;;OAEG;IACG,OAAO,CAAC,OAAO,CAAC,EAAE;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IA0D3B;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IA0D/E;;;OAGG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BvC;;OAEG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAIhD;;OAEG;IACG,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAIlD;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GACA,OAAO,CAAC,YAAY,EAAE,CAAC;IAI1B;;OAEG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAI/D;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIzD;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAK7E;;OAEG;IACG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAgC5E;;;OAGG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA6B7F;;;OAGG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;CAsCxF"}
+{"version":3,"file":"board-comments.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/board-comments.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAa,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAGtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AAgBhB;;GAEG;AACH,qBAAa,uBACX,YAAW,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAElD,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;OAEG;IACH,OAAO,CAAC,YAAY;IAkCpB;;OAEG;IACH,OAAO,CAAC,eAAe;IAkCvB;;OAEG;YACW,SAAS;IAWvB;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAwBhE;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAmBxD,OAAO,CAAC,mBAAmB;IAsD3B,OAAO,CAAC,2BAA2B;IAwCnC;;OAEG;IACG,OAAO,CACX,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,IAAI,CAAC;KACxB,EACD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5C,OAAO,CAAC,YAAY,EAAE,CAAC;IA0BpB,KAAK,CAAC,OAAO,CAAC,EAAE;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,IAAI,CAAC;KACxB,GAAG,OAAO,CAAC,MAAM,CAAC;IAenB;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IA0D/E;;;OAGG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BvC;;OAEG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAIhD;;OAEG;IACG,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAIlD;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GACA,OAAO,CAAC,YAAY,EAAE,CAAC;IAI1B;;OAEG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAI/D;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIzD;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAK7E;;OAEG;IACG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAgC5E;;;OAGG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA6B7F;;;OAGG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;CAuCxF"}

package/dist/core/db/repositories/board-objects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"board-objects.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/board-objects.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,OAAO,EACP,QAAQ,EACR,MAAM,EACN,IAAI,EACL,MAAM,kBAAkB,CAAC;AAI1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAY1C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,qBAAa,qBAAqB;IACpB,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC,OAAO,CAAC,mBAAmB;IA0B3B,OAAO,CAAC,2BAA2B;IAOnC;;OAEG;IACG,OAAO,CACX,OAAO,GAAE,sBAA2B,EACpC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,iBAAiB,EAAE,CAAC;IA2B/B;;OAEG;IACG,KAAK,CAAC,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBlE;;;;;OAKG;IACG,iBAAiB,CACrB,MAAM,EAAE,IAAI,EACZ,OAAO,GAAE,sBAA2B,EACpC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAiC/B;;OAEG;IACG,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,MAAM,CAAC;IAyB7F;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAInE;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAgBzE;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAgB3E;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAgBrE;;OAEG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWnD;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,CAAC,EAAE,QAAQ,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE;YAAE,CAAC,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAuD9B;;OAEG;IACG,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,GACjC,OAAO,CAAC,iBAAiB,CAAC;IA4C7B;;OAEG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAChC,OAAO,CAAC,iBAAiB,CAAC;IA6C7B;;OAEG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB7C;;;OAGG;IACG,mBAAmB,CACvB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,GACtC,OAAO,CAAC,iBAAiB,EAAE,CAAC;IA2C/B;;OAEG;IACG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzD;;OAEG;IACH,OAAO,CAAC,WAAW;CAgBpB"}
+{"version":3,"file":"board-objects.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/board-objects.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,OAAO,EACP,QAAQ,EACR,MAAM,EACN,IAAI,EACL,MAAM,kBAAkB,CAAC;AAI1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAY1C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,qBAAa,qBAAqB;IACpB,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC,OAAO,CAAC,mBAAmB;IA0B3B,OAAO,CAAC,2BAA2B;IAYnC;;OAEG;IACG,OAAO,CACX,OAAO,GAAE,sBAA2B,EACpC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,iBAAiB,EAAE,CAAC;IA2B/B;;OAEG;IACG,KAAK,CAAC,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBlE;;;;;OAKG;IACG,iBAAiB,CACrB,MAAM,EAAE,IAAI,EACZ,OAAO,GAAE,sBAA2B,EACpC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAiC/B;;OAEG;IACG,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,MAAM,CAAC;IAyB7F;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAInE;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAgBzE;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAgB3E;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAgBrE;;OAEG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWnD;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,CAAC,EAAE,QAAQ,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE;YAAE,CAAC,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAuD9B;;OAEG;IACG,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,GACjC,OAAO,CAAC,iBAAiB,CAAC;IA4C7B;;OAEG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAChC,OAAO,CAAC,iBAAiB,CAAC;IA6C7B;;OAEG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB7C;;;OAGG;IACG,mBAAmB,CACvB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,GACtC,OAAO,CAAC,iBAAiB,EAAE,CAAC;IA2C/B;;OAEG;IACG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzD;;OAEG;IACH,OAAO,CAAC,WAAW;CAgBpB"}

package/dist/core/db/repositories/boards.d.ts

@@ -3,7 +3,7 @@
  *
  * Type-safe CRUD operations for boards with short ID support.
  */
-import type { Board, BoardExportBlob, BoardObject, Branch, UUID } from '@agor/core/types';
+import type { Board, BoardExportBlob, BoardID, BoardObject, Branch, UUID } from '@agor/core/types';
 import type { Database } from '../client';
 import { type BaseRepository } from './base';
 /**
@@ -17,6 +17,8 @@ export declare class BoardRepository implements BaseRepository<Board, Partial<Bo
      *
      * @param row - Database row
      * @param baseUrl - Base URL for generating board URLs
+     * @param options.lean - Omit the heavy `objects` / `custom_css` annotations
+     *   (used by the boards list path; single-board reads always stay full).
      */
     private rowToBoard;
     /**
@@ -57,10 +59,32 @@ export declare class BoardRepository implements BaseRepository<Board, Partial<Bo
      * and handles edge cases like hex-looking slugs (e.g., board named "deadbeef")
      */
     findBySlugOrId(param: string): Promise<Board | null>;
+    private visibleBoardCondition;
     /**
-     * Find all boards
+     * Find all boards (with optional filters and projection).
+     *
+     * The `boardIds`, `archived`, and `visibleToUserId` filters let the list read
+     * path (`BoardsService.find` via the adapter's `fetchData`) push
+     * high-selectivity predicates — including board RBAC visibility — into SQL so
+     * it no longer materializes the whole table before filtering in memory.
+     *
+     * @param filter - Optional filters and projection
+     * @param filter.archived - Filter to an exact archived state
+     * @param filter.boardIds - Restrict to a set of board IDs (empty set yields no
+     *   rows, matching an `{ $in: [] }` filter)
+     * @param filter.visibleToUserId - Restrict to boards visible to this user
+     *   under branch RBAC.
+     * @param filter.lean - Omit each board's heavy `objects` / `custom_css`
+     *   annotations from the result. The displayed board's full record is fetched
+     *   separately via `findById`, so the list path never needs them. RBAC and
+     *   the id pushdown stay in force, so the lean list can never widen visibility.
      */
-    findAll(): Promise<Board[]>;
+    findAll(filter?: {
+        archived?: boolean;
+        boardIds?: BoardID[];
+        visibleToUserId?: UUID;
+        lean?: boolean;
+    }): Promise<Board[]>;
     /**
      * Find the ids of boards visible to a user under branch RBAC.
      *
@@ -156,6 +180,33 @@ export declare class BoardRepository implements BaseRepository<Board, Partial<Bo
      * This is safe for independent objects but may have partial failures.
      */
     batchUpsertBoardObjects(boardId: string, objects: Record<string, BoardObject>): Promise<Board>;
+    /**
+     * Shallow-merge field patches into existing board objects in a single
+     * read-modify-write.
+     *
+     * Unlike upsertBoardObject (which fully replaces the object value, dropping
+     * omitted fields), this overwrites ONLY the provided keys and leaves the rest
+     * of each object intact — so a narrow change (e.g. a zIndex reorder) has a
+     * smaller blast radius and won't clobber a field edited via a different patch
+     * call. Multiple objects in one call are merged before a single write, so a
+     * forward/backward swap touches both neighbors in one update.
+     *
+     * Objects that no longer exist are SKIPPED, never re-created — so a swap can't
+     * resurrect a neighbor deleted between the client's read and this write.
+     *
+     * Only an explicit allowlist of fields can be merged (currently just `zIndex`,
+     * which is also clamped into the board-object band [1, 499] so it can never be
+     * pushed onto the card (500) / comment (1000) layers). Any other key in a
+     * patch is ignored, so this narrow action cannot reshape an object (e.g. flip
+     * its `type`) the way a full upsert could.
+     *
+     * NOTE: this is NOT atomic against concurrent writers. Like every other board
+     * writer, the findById → update sequence has a lost-update window: a write
+     * that lands between the read and the update can be overwritten (last-write-
+     * wins). Merging only the patched keys narrows that window's blast radius
+     * versus a full-object upsert, but does not close it.
+     */
+    mergeBoardObjectFields(boardId: string, patches: Record<string, Partial<BoardObject>>): Promise<Board>;
     /**
      * DEPRECATED: Delete a zone and handle associated sessions
      * TODO: Reimplement using board-objects table

package/dist/core/db/repositories/boards.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boards.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/boards.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,KAAK,EAEL,eAAe,EACf,WAAW,EACX,MAAM,EAEN,IAAI,EACL,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAa1C,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AA4BhB;;GAEG;AACH,qBAAa,eAAgB,YAAW,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;;;;OAKG;IACH,OAAO,CAAC,UAAU;IA2ClB;;OAEG;IACH,OAAO,CAAC,aAAa;IAiCrB,OAAO,CAAC,kCAAkC;IAQ1C;;OAEG;YACW,SAAS;IAWvB;;;;;;;OAOG;YACW,kBAAkB;IAkChC;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IA8ClD;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAiBjD;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAcrD;;;;;;OAMG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAU1D;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;IAajC;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,mBAAmB,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAwDpD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAQxD,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IA0B1D,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAOxD,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAU3C,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAatD,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/D;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IAkEjE;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBvC;;OAEG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAiBlE;;;OAGG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IA8B5E;;;;;;;OAOG;IACG,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IA6B1F;;;;;OAKG;IACG,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IA6B9F;;OAEG;IACG,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;YAsB9C,kCAAkC;IAqBhD;;;OAGG;IAKH;;;OAGG;IAKH;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC;IA2BlC;;;;OAIG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,GACtB,OAAO,CAAC,KAAK,CAAC;IAwBjB;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAyB1E;;;;;OAKG;IACG,uBAAuB,CAC3B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,OAAO,CAAC,KAAK,CAAC;IAuBjB;;;OAGG;IACG,UAAU,CACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,yBAAyB,EAAE,OAAO,GACjC,OAAO,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAUxD;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAuBvD;;;;;OAKG;IACG,QAAQ,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAqBrE;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAc9C;;OAEG;IACG,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAKnE;;;;OAIG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe;IAgBrD;;;;OAIG;IACG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAmB7E;;OAEG;IACI,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,eAAe;CA8CzE"}
+{"version":3,"file":"boards.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/boards.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,KAAK,EAEL,eAAe,EACf,OAAO,EACP,WAAW,EACX,MAAM,EAEN,IAAI,EACL,MAAM,kBAAkB,CAAC;AAS1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAW1C,OAAO,EAGL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AA4BhB;;GAEG;AACH,qBAAa,eAAgB,YAAW,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;;;;;;OAOG;IACH,OAAO,CAAC,UAAU;IAqDlB;;OAEG;IACH,OAAO,CAAC,aAAa;IAiCrB,OAAO,CAAC,kCAAkC;IAQ1C;;OAEG;YACW,SAAS;IAWvB;;;;;;;OAOG;YACW,kBAAkB;IAkChC;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IA8ClD;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAiBjD;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAcrD;;;;;;OAMG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAU1D,OAAO,CAAC,qBAAqB;IAI7B;;;;;;;;;;;;;;;;;;OAkBG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE;QACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;QACrB,eAAe,CAAC,EAAE,IAAI,CAAC;QACvB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAgCpB;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,mBAAmB,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQpD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAQxD,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IA0B1D,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAOxD,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAU3C,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAatD,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/D;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IAkEjE;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBvC;;OAEG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAiBlE;;;OAGG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IA8B5E;;;;;;;OAOG;IACG,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IA6B1F;;;;;OAKG;IACG,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IA6B9F;;OAEG;IACG,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;YAsB9C,kCAAkC;IAqBhD;;;OAGG;IAKH;;;OAGG;IAKH;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC;IA2BlC;;;;OAIG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,GACtB,OAAO,CAAC,KAAK,CAAC;IAwBjB;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAyB1E;;;;;OAKG;IACG,uBAAuB,CAC3B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,OAAO,CAAC,KAAK,CAAC;IAuBjB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,sBAAsB,CAC1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,GAC5C,OAAO,CAAC,KAAK,CAAC;IAqCjB;;;OAGG;IACG,UAAU,CACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,yBAAyB,EAAE,OAAO,GACjC,OAAO,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAUxD;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAuBvD;;;;;OAKG;IACG,QAAQ,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAqBrE;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAc9C;;OAEG;IACG,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAKnE;;;;OAIG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe;IAgBrD;;;;OAIG;IACG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAmB7E;;OAEG;IACI,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,eAAe;CA8CzE"}

package/dist/core/db/repositories/branch-access.d.ts

@@ -30,4 +30,36 @@ export declare function alignedBoardDefaultVisible(db: Database): SQL<unknown>;
  * - covered by a public/fallback others_can level of view+
  */
 export declare function visibleBranchAccessCondition(db: Database, userId: UUID): SQL;
+/**
+ * Board visibility predicate correlated against the `boards` table in scope.
+ *
+ * A board is visible if the user owns it, is an explicit board owner, the board
+ * is shared, or at least one of its branches / primary assistant branch is
+ * visible through the branch RBAC predicate. All branch-derived checks are
+ * EXISTS-based so the outer row is never multiplied and no DISTINCT is needed.
+ */
+export declare function visibleBoardAccessCondition(db: Database, userId: UUID): SQL;
+/** Correlated board-visibility predicate for tables that carry a board_id. */
+export declare function visibleBoardReferenceAccessExists(db: Database, userId: UUID, boardId: any): SQL;
+/**
+ * Correlated branch-visibility predicate for tables that carry a branch_id.
+ *
+ * This is the SQL-pushdown equivalent of resolving all accessible branch ids
+ * first and applying `branch_id IN (...)`, but it avoids hydrating branch rows
+ * and avoids very large parameter lists. The `branchId` expression is normally
+ * a column from the outer query (for example `artifacts.branch_id`).
+ */
+export declare function visibleBranchReferenceAccessExists(db: Database, userId: UUID, branchId: any): SQL;
+/**
+ * Correlated visibility predicate for tables that carry a session_id.
+ *
+ * The referenced session is visible when its branch is visible to the user.
+ * This avoids resolving all accessible sessions into `session_id IN (...)` and
+ * works for high-cardinality child tables such as messages and tasks.
+ */
+export declare function visibleSessionReferenceAccessExists(db: Database, userId: UUID, sessionId: any): SQL;
+/** Correlated visibility predicate for tables that carry a task_id. */
+export declare function visibleTaskReferenceAccessExists(db: Database, userId: UUID, taskId: any): SQL;
+/** Correlated visibility predicate for tables that carry a message_id. */
+export declare function visibleMessageReferenceAccessExists(db: Database, userId: UUID, messageId: any): SQL;
 //# sourceMappingURL=branch-access.d.ts.map

package/dist/core/db/repositories/branch-access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branch-access.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/branch-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAA4B,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAA2C,KAAK,GAAG,EAAO,MAAM,aAAa,CAAC;AACrF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAa1C,eAAO,MAAM,gCAAgC,2CAE5C,CAAC;AAEF;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,gBAwBtE;AAED,wBAAgB,iCAAiC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,gBA+B3E;AAED,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,gBAQtE;AAED,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,QAAQ,gBAiBtD;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAG,GAAG,CAc5E"}
+{"version":3,"file":"branch-access.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/branch-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAA4B,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAA2C,KAAK,GAAG,EAAO,MAAM,aAAa,CAAC;AACrF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAgB1C,eAAO,MAAM,gCAAgC,2CAE5C,CAAC;AAEF;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,gBAwBtE;AAED,wBAAgB,iCAAiC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,gBA+B3E;AAED,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,gBAQtE;AAED,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,QAAQ,gBAiBtD;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAG,GAAG,CAc5E;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAG,GAAG,CA4C3E;AAED,8EAA8E;AAC9E,wBAAgB,iCAAiC,CAC/C,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,IAAI,EAEZ,OAAO,EAAE,GAAG,GACX,GAAG,CAQL;AAED;;;;;;;GAOG;AACH,wBAAgB,kCAAkC,CAChD,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,IAAI,EAEZ,QAAQ,EAAE,GAAG,GACZ,GAAG,CAYL;AAED;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CACjD,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,IAAI,EAEZ,SAAS,EAAE,GAAG,GACb,GAAG,CAaL;AAED,uEAAuE;AACvE,wBAAgB,gCAAgC,CAC9C,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,IAAI,EAEZ,MAAM,EAAE,GAAG,GACV,GAAG,CAaL;AAED,0EAA0E;AAC1E,wBAAgB,mCAAmC,CACjD,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,IAAI,EAEZ,SAAS,EAAE,GAAG,GACb,GAAG,CAaL"}

package/dist/core/db/repositories/branches.d.ts

@@ -3,7 +3,7 @@
  *
  * Type-safe CRUD operations for branches with short ID support.
  */
-import type { AgenticToolName, BoardID, Branch, BranchID, EffectiveBranchAccess, SessionStatus, UUID } from '@agor/core/types';
+import type { AgenticToolName, BoardID, Branch, BranchID, EffectiveBranchAccess, GroupID, SessionStatus, UUID } from '@agor/core/types';
 import type { Database } from '../client';
 import { type BaseRepository } from './base';
 /**
@@ -36,6 +36,10 @@ export interface BranchWithZone extends Branch {
 export interface BranchWithZoneAndSessions extends BranchWithZone {
     sessions?: BranchSessionActivity[];
 }
+export interface ActiveEnvironmentBranchRef {
+    branch_id: BranchID;
+    tenant_id?: string;
+}
 /**
  * Branch repository implementation
  */
@@ -84,13 +88,49 @@ export declare class BranchRepository implements BaseRepository<Branch, Partial<
      * Callers that explicitly want to exclude archived branches should pass
      * `{ includeArchived: false }`.
      *
-     * @param filter - Optional filters (repo_id, includeArchived)
+     * The `board_id`, `archived`, and `branchIds` filters let the list read path
+     * (`BranchesService.find`) push its high-selectivity predicates into SQL so it
+     * no longer materializes the whole table before filtering in memory.
+     *
+     * @param filter - Optional filters
      * @param filter.repo_id - Filter by repository ID
      * @param filter.includeArchived - Include archived branches (default: true)
+     * @param filter.board_id - Filter to a single board
+     * @param filter.archived - Filter to an exact archived state (takes precedence
+     *   over `includeArchived`)
+     * @param filter.branchIds - Restrict to a set of branch IDs (empty set yields
+     *   no rows, matching an `{ $in: [] }` filter)
+     * @param filter.visibleToUserId - Restrict to branches visible to this user
+     *   under branch RBAC, pushed down as a SQL predicate instead of a preloaded
+     *   `branch_id IN (...)` list.
      */
     findAll(filter?: {
         repo_id?: UUID;
         includeArchived?: boolean;
+        board_id?: BoardID;
+        archived?: boolean;
+        branchIds?: BranchID[];
+        visibleToUserId?: UUID;
+    }): Promise<Branch[]>;
+    /**
+     * Health-monitor discovery query. Returns only routing metadata so the
+     * background monitor can enter the correct tenant DB scope before loading
+     * branch contents or patching health state.
+     */
+    findActiveEnvironmentRefs(): Promise<ActiveEnvironmentBranchRef[]>;
+    /**
+     * Find active assistant branches without paginating the whole branch list first.
+     *
+     * A branch is discoverable as an assistant when it has the canonical assistant
+     * marker in custom_context (new or legacy key), or as a read-time backfill for
+     * older hand-bootstrapped assistants, when it has at least one enabled
+     * first-class schedule.
+     */
+    findAssistantBranches(filter?: {
+        repo_id?: UUID;
+        archived?: boolean;
+        userId?: UUID;
+        limit?: number;
     }): Promise<Branch[]>;
     /**
      * Update branch by ID (atomic with database-level transaction)
@@ -171,6 +211,16 @@ export declare class BranchRepository implements BaseRepository<Branch, Partial<
      * must not inherit board grants.
      */
     findExplicitFsAccessUserIds(branchId: BranchID): Promise<UUID[]>;
+    /**
+     * Find non-archived branches whose explicit filesystem access set can change
+     * when membership in the given group changes.
+     *
+     * Keep this inverse lookup in lockstep with findExplicitFsAccessUserIds():
+     * both encode which group grants materialize into branch-folder access.
+     * App-only grants (`fs_access = 'none'`) are intentionally excluded because
+     * membership changes for those grants do not require branch-folder mutation.
+     */
+    findExplicitFsAccessBranchIdsForGroup(groupId: GroupID): Promise<BranchID[]>;
     findBoardAlignedBranches(boardId: BoardID): Promise<Branch[]>;
     /**
      * Get all owners of a branch

package/dist/core/db/repositories/branches.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branches.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/branches.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,OAAO,EACP,MAAM,EAEN,QAAQ,EACR,qBAAqB,EACrB,aAAa,EACb,IAAI,EACL,MAAM,kBAAkB,CAAC;AAM1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAuB1C,OAAO,EACL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AAiBhB;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,eAAe,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,MAAM;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAC/D,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAC;CACpC;AAED;;GAEG;AACH,qBAAa,gBAAiB,YAAW,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAyCnB;;OAEG;IACH,OAAO,CAAC,cAAc;IAkEtB;;OAEG;IACG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BtD;;;;;;;;OAQG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAoBlD;;OAEG;IACG,4BAA4B,CAChC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC;IA2C3D;;;;;;;;;;;;;OAaG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,IAAI,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAoBxF;;;;;OAKG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAsDnE;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASvC;;OAEG;IACG,iBAAiB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAW3E;;OAEG;IACG,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAajF;;;OAGG;IACG,mBAAmB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAO9C;;;OAGG;IACG,oBAAoB,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAU3D;;;;;;OAMG;IACG,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IASjE;;;;;OAKG;IACG,wBAAwB,CAC5B,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,IAAI,GACX,OAAO,CAAC;QAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAkCjF;;;OAGG;IACG,qBAAqB,CACzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAI7C;;;;;;;OAOG;IACG,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAsGrF;;;;;OAKG;IACG,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAiFlE;;;;;;;;;OASG;IACG,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAsFhE,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAgBnE;;;;;OAKG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAelD;;;;;;;OAOG;IACG,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB7D;;;;;;;OAOG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAahE;;;;;;;;OAQG;IACG,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IA0B3E;;;;;;;;;;;;;;;OAeG;IACG,sBAAsB,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA8B9F;;;;;;OAMG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAqB9D;;;;;;;;OAQG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAMjE;;;;;;;;;;;;OAYG;IACG,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IA6G3E;;;;;;OAMG;IACG,yBAAyB,CAC7B,MAAM,EAAE,cAAc,EACtB,gBAAgB,SAAM,GACrB,OAAO,CAAC,yBAAyB,CAAC;IAKrC;;;;;;;;;OASG;IACG,6BAA6B,CACjC,QAAQ,EAAE,cAAc,EAAE,EAC1B,gBAAgB,SAAM,GACrB,OAAO,CAAC,yBAAyB,EAAE,CAAC;CA+IxC"}
+{"version":3,"file":"branches.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/branches.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,OAAO,EACP,MAAM,EAEN,QAAQ,EACR,qBAAqB,EACrB,OAAO,EACP,aAAa,EACb,IAAI,EACL,MAAM,kBAAkB,CAAC;AAM1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAyB1C,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AAiBhB;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,eAAe,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,MAAM;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAC/D,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,QAAQ,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,gBAAiB,YAAW,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IA4CnB;;OAEG;IACH,OAAO,CAAC,cAAc;IAkEtB;;OAEG;IACG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BtD;;;;;;;;OAQG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAoBlD;;OAEG;IACG,4BAA4B,CAChC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC;IA2C3D;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE;QACrB,OAAO,CAAC,EAAE,IAAI,CAAC;QACf,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;QACvB,eAAe,CAAC,EAAE,IAAI,CAAC;KACxB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAqDrB;;;;OAIG;IACG,yBAAyB,IAAI,OAAO,CAAC,0BAA0B,EAAE,CAAC;IAqBxE;;;;;;;OAOG;IACG,qBAAqB,CAAC,MAAM,CAAC,EAAE;QACnC,OAAO,CAAC,EAAE,IAAI,CAAC;QACf,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,IAAI,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA+CrB;;;;;OAKG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAsDnE;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASvC;;OAEG;IACG,iBAAiB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAW3E;;OAEG;IACG,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAajF;;;OAGG;IACG,mBAAmB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAO9C;;;OAGG;IACG,oBAAoB,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAU3D;;;;;;OAMG;IACG,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IASjE;;;;;OAKG;IACG,wBAAwB,CAC5B,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,IAAI,GACX,OAAO,CAAC;QAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAkCjF;;;OAGG;IACG,qBAAqB,CACzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAI7C;;;;;;;OAOG;IACG,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAsGrF;;;;;OAKG;IACG,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAiFlE;;;;;;;;;OASG;IACG,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAsFtE;;;;;;;;OAQG;IACG,qCAAqC,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IA8D5E,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAgBnE;;;;;OAKG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAelD;;;;;;;OAOG;IACG,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB7D;;;;;;;OAOG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAahE;;;;;;;;OAQG;IACG,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IA0B3E;;;;;;;;;;;;;;;OAeG;IACG,sBAAsB,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA8B9F;;;;;;OAMG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAqB9D;;;;;;;;OAQG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAMjE;;;;;;;;;;;;OAYG;IACG,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IA6G3E;;;;;;OAMG;IACG,yBAAyB,CAC7B,MAAM,EAAE,cAAc,EACtB,gBAAgB,SAAM,GACrB,OAAO,CAAC,yBAAyB,CAAC;IAKrC;;;;;;;;;OASG;IACG,6BAA6B,CACjC,QAAQ,EAAE,cAAc,EAAE,EAC1B,gBAAgB,SAAM,GACrB,OAAO,CAAC,yBAAyB,EAAE,CAAC;CA+IxC"}

package/dist/core/db/repositories/cards.d.ts

@@ -22,7 +22,21 @@ export declare class CardRepository implements BaseRepository<Card, Partial<Card
      * Resolve CardType info for a card
      */
     private resolveCardType;
-    findAll(): Promise<Card[]>;
+    /**
+     * Find all cards (with optional filters).
+     *
+     * The `board_id` and `archived` filters let the list read path
+     * (`CardsService.find`) push its high-selectivity predicates into SQL so it no
+     * longer materializes the whole table before filtering in memory.
+     *
+     * @param filter - Optional filters
+     * @param filter.board_id - Filter to a single board
+     * @param filter.archived - Filter to an exact archived state
+     */
+    findAll(filter?: {
+        board_id?: BoardID;
+        archived?: boolean;
+    }): Promise<Card[]>;
     /**
      * Find cards by board ID
      */

package/dist/core/db/repositories/cards.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cards.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/cards.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAY,UAAU,EAAE,YAAY,EAAQ,MAAM,kBAAkB,CAAC;AAGhG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AAehB,qBAAa,cAAe,YAAW,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC,OAAO,CAAC,SAAS;YAoBH,SAAS;IAWjB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAsC1C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAehD;;OAEG;IACG,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAMhE;;OAEG;YACW,eAAe;IA6BvB,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAYhC;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAChE,OAAO,CAAC,IAAI,EAAE,CAAC;IA4BlB;;OAEG;IACG,gBAAgB,CACpB,UAAU,EAAE,UAAU,EACtB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5C,OAAO,CAAC,IAAI,EAAE,CAAC;IAiBlB;;OAEG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACnF,OAAO,CAAC,IAAI,EAAE,CAAC;IAsBlB;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAiC/D,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAwC/D;;OAEG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxC;;OAEG;IACG,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAcxC"}
+{"version":3,"file":"cards.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/cards.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAY,UAAU,EAAE,YAAY,EAAQ,MAAM,kBAAkB,CAAC;AAGhG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AAehB,qBAAa,cAAe,YAAW,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC,OAAO,CAAC,SAAS;YAoBH,SAAS;IAWjB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAsC1C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAehD;;OAEG;IACG,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAMhE;;OAEG;YACW,eAAe;IA6B7B;;;;;;;;;;OAUG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAsBnF;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAChE,OAAO,CAAC,IAAI,EAAE,CAAC;IA4BlB;;OAEG;IACG,gBAAgB,CACpB,UAAU,EAAE,UAAU,EACtB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5C,OAAO,CAAC,IAAI,EAAE,CAAC;IAiBlB;;OAEG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACnF,OAAO,CAAC,IAAI,EAAE,CAAC;IAsBlB;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAiC/D,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAwC/D;;OAEG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxC;;OAEG;IACG,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAcxC"}

package/dist/core/db/repositories/gateway-channels.d.ts

@@ -21,6 +21,15 @@ export declare class GatewayChannelRepository implements BaseRepository<GatewayC
      * Convert GatewayChannel to database insert format
      */
     private channelToInsert;
+    /**
+     * Enforce the "enabled requires secrets" invariant on every write path.
+     *
+     * An enabled channel can never exist without the secrets its type needs to
+     * function. Runs on the post-merge, decrypted config so a patch that only
+     * flips `enabled: true` on a channel with already-stored tokens passes.
+     * Disabled ("draft") channels are exempt.
+     */
+    private assertRequiredSecretsWhenEnabled;
     /**
      * Resolve short ID to full ID
      */

package/dist/core/db/repositories/gateway-channels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-channels.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/gateway-channels.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAGV,cAAc,EACd,gBAAgB,EAGjB,MAAM,kBAAkB,CAAC;AAI1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAI1C,OAAO,EAEL,KAAK,cAAc,EAGpB,MAAM,QAAQ,CAAC;AAkHhB;;GAEG;AACH,qBAAa,wBACX,YAAW,cAAc,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAEtD,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;OAEG;IACH,OAAO,CAAC,YAAY;IAuBpB;;OAEG;IACH,OAAO,CAAC,eAAe;IA4BvB;;OAEG;YACW,SAAS;IA2BvB;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IA6BpE;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAmB1D;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAY1C;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IA0DnF;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBvC;;OAEG;IACG,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAgBnE;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAgB3D;;OAEG;IACG,iBAAiB,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;CAgB7D"}
+{"version":3,"file":"gateway-channels.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/gateway-channels.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAGV,cAAc,EACd,gBAAgB,EAGjB,MAAM,kBAAkB,CAAC;AAS1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAI1C,OAAO,EAGL,KAAK,cAAc,EAGpB,MAAM,QAAQ,CAAC;AAqGhB;;GAEG;AACH,qBAAa,wBACX,YAAW,cAAc,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAEtD,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;OAEG;IACH,OAAO,CAAC,YAAY;IA0BpB;;OAEG;IACH,OAAO,CAAC,eAAe;IA4BvB;;;;;;;OAOG;IACH,OAAO,CAAC,gCAAgC;IAoBxC;;OAEG;YACW,SAAS;IA2BvB;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IA+BpE;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAmB1D;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAY1C;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IA+DnF;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBvC;;OAEG;IACG,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAgBnE;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAgB3D;;OAEG;IACG,iBAAiB,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;CAgB7D"}

package/dist/core/db/repositories/gateway-outbound-messages.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Gateway Outbound Message Repository
+ *
+ * Durable audit/seed rows for proactive gateway outbound messages.
+ */
+import type { GatewayOutboundMessage, GatewayOutboundMessageID, SessionID } from '@agor/core/types';
+import type { Database } from '../client';
+export declare class GatewayOutboundMessageRepository {
+    private db;
+    constructor(db: Database);
+    private rowToMessage;
+    private toInsert;
+    private resolveId;
+    create(data: Partial<GatewayOutboundMessage>): Promise<GatewayOutboundMessage>;
+    findById(id: string): Promise<GatewayOutboundMessage | null>;
+    findUnconsumedByChannelAndThread(gatewayChannelId: string, platformThreadId: string): Promise<GatewayOutboundMessage | null>;
+    markConsumed(id: GatewayOutboundMessageID, sessionId: SessionID): Promise<GatewayOutboundMessage>;
+}
+//# sourceMappingURL=gateway-outbound-messages.d.ts.map

package/dist/core/db/repositories/gateway-outbound-messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-outbound-messages.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/gateway-outbound-messages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAGV,sBAAsB,EACtB,wBAAwB,EACxB,SAAS,EACV,MAAM,kBAAkB,CAAC;AAI1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAS1C,qBAAa,gCAAgC;IAC/B,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC,OAAO,CAAC,YAAY;IA0BpB,OAAO,CAAC,QAAQ;YAyBF,SAAS;IAiBjB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAmB9E,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAkB5D,gCAAgC,CACpC,gBAAgB,EAAE,MAAM,EACxB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAqBnC,YAAY,CAChB,EAAE,EAAE,wBAAwB,EAC5B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,sBAAsB,CAAC;CAsBnC"}

package/dist/core/db/repositories/index.d.ts

@@ -8,10 +8,12 @@ export * from './base';
 export * from './board-comments';
 export * from './board-objects';
 export * from './boards';
+export * from './branch-access';
 export * from './branches';
 export * from './card-types';
 export * from './cards';
 export * from './gateway-channels';
+export * from './gateway-outbound-messages';
 export * from './groups';
 export * from './knowledge';
 export * from './mcp-servers';

package/dist/core/db/repositories/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC;AACxB,cAAc,oBAAoB,CAAC;AACnC,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC;AACxB,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,SAAS,CAAC"}

package/dist/core/db/repositories/messages.d.ts

@@ -4,7 +4,7 @@
  * CRUD operations for conversation messages.
  * Supports bulk inserts for session loading and queries by session/task.
  */
-import type { Message, MessageID, SessionID, TaskID } from '@agor/core/types';
+import type { Message, MessageID, SessionID, TaskID, UUID } from '@agor/core/types';
 import type { Database } from '../client';
 export declare class MessagesRepository {
     private db;
@@ -32,7 +32,14 @@ export declare class MessagesRepository {
     /**
      * Get all messages (used by FeathersJS service adapter)
      */
-    findAll(): Promise<Message[]>;
+    findAll(filter?: {
+        sessionId?: SessionID;
+        sessionIds?: SessionID[];
+        taskId?: TaskID;
+        type?: Message['type'];
+        role?: Message['role'];
+        visibleToUserId?: UUID;
+    }): Promise<Message[]>;
     /**
      * Get all messages for a session (ordered by index)
      */

package/dist/core/db/repositories/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/messages.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAQ,MAAM,kBAAkB,CAAC;AAEpF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAI1C,qBAAa,kBAAkB;IACjB,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;OAEG;IACH,OAAO,CAAC,YAAY;IAiBpB;;OAEG;IACH,OAAO,CAAC,YAAY;IAoBpB;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAMhD;;OAEG;IACG,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAM5D;;OAEG;IACG,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAS7D;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAKnC;;OAEG;IACG,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAU/D;;OAEG;IACG,sBAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAU7F;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAUtD;;;OAGG;IACG,WAAW,CACf,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,EAAE,CAAC;IAarB;;OAEG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAmB5E;;OAEG;IACG,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU1E;;OAEG;IACG,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5D;;OAEG;IACG,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;CAGlD"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/messages.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAK1C,qBAAa,kBAAkB;IACjB,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;OAEG;IACH,OAAO,CAAC,YAAY;IAiBpB;;OAEG;IACH,OAAO,CAAC,YAAY;IAoBpB;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAMhD;;OAEG;IACG,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAM5D;;OAEG;IACG,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAS7D;;OAEG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE;QACrB,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,eAAe,CAAC,EAAE,IAAI,CAAC;KACxB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAsBtB;;OAEG;IACG,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAU/D;;OAEG;IACG,sBAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAU7F;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAUtD;;;OAGG;IACG,WAAW,CACf,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,EAAE,CAAC;IAarB;;OAEG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAmB5E;;OAEG;IACG,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU1E;;OAEG;IACG,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5D;;OAEG;IACG,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;CAGlD"}

package/dist/core/db/repositories/repos.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repos.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/repos.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,eAAe,EAA2B,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAK7F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AA8BhB,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,qBAAa,cAAe,YAAW,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;;;;;;;OAQG;IACH,OAAO,CAAC,SAAS;IA4BjB;;OAEG;IACH,OAAO,CAAC,YAAY;IAoDpB;;OAEG;YACW,SAAS;IAWvB;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBhD;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgBhD;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAapD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAYhC;;;;OAIG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAIpC;;;;;OAKG;IACG,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,8BAA8B,EAAE,CAAA;KAAE,CAAC;IAoBhG;;;;;;OAMG;IACG,eAAe,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA2CtE;;;;;OAKG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA6D/D;;;;;;;;;;;;;;OAcG;YACW,aAAa;IAqD3B;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAWpF;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBvC;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;IAIjC;;;OAGG;IACG,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC;IAIpC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;CAY/B"}
+{"version":3,"file":"repos.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/repos.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,eAAe,EAA2B,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAK7F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAGL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AA8BhB,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,qBAAa,cAAe,YAAW,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;;;;;;;OAQG;IACH,OAAO,CAAC,SAAS;IA+BjB;;OAEG;IACH,OAAO,CAAC,YAAY;IAoDpB;;OAEG;YACW,SAAS;IAWvB;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBhD;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgBhD;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAapD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAYhC;;;;OAIG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAIpC;;;;;OAKG;IACG,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,8BAA8B,EAAE,CAAA;KAAE,CAAC;IAoBhG;;;;;;OAMG;IACG,eAAe,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA2CtE;;;;;OAKG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA6D/D;;;;;;;;;;;;;;OAcG;YACW,aAAa;IAqD3B;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAWpF;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBvC;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;IAIjC;;;OAGG;IACG,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC;IAIpC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;CAY/B"}

package/dist/core/db/repositories/schedules.d.ts

@@ -4,9 +4,13 @@
  * Type-safe CRUD operations for the first-class `schedules` table.
  * See docs/internal/schedules-first-class-design-2026-05-24.md.
  */
-import type { BranchID, Schedule, UUID } from '@agor/core/types';
+import type { BranchID, Schedule, ScheduleID, UUID } from '@agor/core/types';
 import type { Database } from '../client';
 import { type BaseRepository } from './base';
+export interface DueScheduleRef {
+    schedule_id: ScheduleID;
+    tenant_id?: string;
+}
 export declare class ScheduleRepository implements BaseRepository<Schedule, Partial<Schedule>> {
     private db;
     constructor(db: Database);
@@ -52,7 +56,14 @@ export declare class ScheduleRepository implements BaseRepository<Schedule, Part
      *
      * Uses the `schedules_enabled_next_run_idx` covering index.
      */
+    private dueCondition;
     findDue(now?: number): Promise<Schedule[]>;
+    /**
+     * Scheduler discovery query. Returns only routing metadata so background
+     * workers can enter the correct tenant DB scope before loading schedule
+     * contents or spawning sessions.
+     */
+    findDueRefs(now?: number): Promise<DueScheduleRef[]>;
     /**
      * Find schedules visible to a user via branch RBAC.
      *

package/dist/core/db/repositories/schedules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedules.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/schedules.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,QAAQ,EACR,QAAQ,EAKR,IAAI,EACL,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAS1C,OAAO,EACL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AAIhB,qBAAa,kBAAmB,YAAW,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IA4BrB,OAAO,CAAC,gBAAgB;IAqCxB;;OAEG;YACW,SAAS;IAWjB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkBlD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAepD;;;;;;OAMG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE;QACrB,SAAS,CAAC,EAAE,QAAQ,CAAC;QACrB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,IAAI,CAAC;KACnB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAavB;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAS7D;;;;;;;;;;;OAWG;IACG,OAAO,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAc5D;;;;;;;;;OASG;IACG,uBAAuB,CAC3B,MAAM,EAAE,IAAI,EACZ,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,QAAQ,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,IAAI,CAAA;KAAE,GACtE,OAAO,CAAC,QAAQ,EAAE,CAAC;IA0BtB;;;;;;;OAOG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkCjE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvC;;OAEG;IACG,KAAK,CAAC,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,QAAQ,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;CAUnF"}
+{"version":3,"file":"schedules.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/schedules.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,QAAQ,EACR,QAAQ,EAER,UAAU,EAGV,IAAI,EACL,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAiB1C,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,QAAQ,CAAC;AAIhB,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,kBAAmB,YAAW,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEhC;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IA+BrB,OAAO,CAAC,gBAAgB;IAqCxB;;OAEG;YACW,SAAS;IAWjB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkBlD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAepD;;;;;;OAMG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE;QACrB,SAAS,CAAC,EAAE,QAAQ,CAAC;QACrB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,IAAI,CAAC;KACnB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAavB;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAS7D;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,YAAY;IAOd,OAAO,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAS5D;;;;OAIG;IACG,WAAW,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAqBtE;;;;;;;;;OASG;IACG,uBAAuB,CAC3B,MAAM,EAAE,IAAI,EACZ,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,QAAQ,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,IAAI,CAAA;KAAE,GACtE,OAAO,CAAC,QAAQ,EAAE,CAAC;IA0BtB;;;;;;;OAOG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkCjE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvC;;OAEG;IACG,KAAK,CAAC,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,QAAQ,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;CAUnF"}