agor-live 0.23.1 → 0.23.2

package/dist/core/lib/feathers-validation.cjs

@@ -248,6 +248,9 @@ var mcpServerQuerySchema = createQuerySchema(
     source: import_typebox.Type.Optional(
       import_typebox.Type.Union([import_typebox.Type.Literal("user"), import_typebox.Type.Literal("imported"), import_typebox.Type.Literal("agor")])
     ),
+    // Executor/session-token callers pass this so hooks can inject the
+    // task creator's per-user OAuth token instead of the session owner's.
+    forUserId: import_typebox.Type.Optional(CommonSchemas.uuid),
     created_at: import_typebox.Type.Optional(CommonSchemas.timestamp)
   })
 );

package/dist/core/lib/feathers-validation.d.ts

@@ -178,6 +178,7 @@ export declare const mcpServerQuerySchema: import("@feathersjs/typebox").TInters
     transport: import("@feathersjs/typebox").TOptional<import("@feathersjs/typebox").TUnion<[import("@feathersjs/typebox").TLiteral<"stdio">, import("@feathersjs/typebox").TLiteral<"http">, import("@feathersjs/typebox").TLiteral<"sse">]>>;
     enabled: import("@feathersjs/typebox").TOptional<import("@feathersjs/typebox").TBoolean>;
     source: import("@feathersjs/typebox").TOptional<import("@feathersjs/typebox").TUnion<[import("@feathersjs/typebox").TLiteral<"user">, import("@feathersjs/typebox").TLiteral<"imported">, import("@feathersjs/typebox").TLiteral<"agor">]>>;
+    forUserId: import("@feathersjs/typebox").TOptional<import("@feathersjs/typebox").TString<string>>;
     created_at: import("@feathersjs/typebox").TOptional<import("@feathersjs/typebox").TInteger>;
 }>, TObject<{
     $limit: import("@feathersjs/typebox").TOptional<import("@feathersjs/typebox").TInteger>;

package/dist/core/lib/feathers-validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feathers-validation.d.ts","sourceRoot":"","sources":["../../src/lib/feathers-validation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGhE;;;GAGG;AACH,eAAO,MAAM,cAAc,KAIzB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;CAoDzB,CAAC;AAEF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;;;;;KAe9E;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;IAe9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;IAqB3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;IAW7B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;IAc5B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;IAsB3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;IASlC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;IAMnC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;IAO3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;IAehC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,kDAAmD,CAAC;AACtF,eAAO,MAAM,kBAAkB,kDAAgD,CAAC;AAChF,eAAO,MAAM,oBAAoB,kDAAkD,CAAC;AACpF,eAAO,MAAM,mBAAmB,kDAAiD,CAAC;AAClF,eAAO,MAAM,kBAAkB,kDAAgD,CAAC;AAChF,eAAO,MAAM,yBAAyB,kDAAuD,CAAC;AAC9F,eAAO,MAAM,0BAA0B,kDAAwD,CAAC;AAChG,eAAO,MAAM,kBAAkB,kDAAgD,CAAC;AAChF,eAAO,MAAM,uBAAuB,kDAAqD,CAAC;AAE1F;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,GAC/C,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAErC;AAGD,OAAO,EAAE,aAAa,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"feathers-validation.d.ts","sourceRoot":"","sources":["../../src/lib/feathers-validation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGhE;;;GAGG;AACH,eAAO,MAAM,cAAc,KAIzB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;CAoDzB,CAAC;AAEF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;;;;;KAe9E;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;IAe9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;IAqB3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;IAW7B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;IAc5B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;IAsB3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;IASlC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;IAMnC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;IAO3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;IAkBhC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,kDAAmD,CAAC;AACtF,eAAO,MAAM,kBAAkB,kDAAgD,CAAC;AAChF,eAAO,MAAM,oBAAoB,kDAAkD,CAAC;AACpF,eAAO,MAAM,mBAAmB,kDAAiD,CAAC;AAClF,eAAO,MAAM,kBAAkB,kDAAgD,CAAC;AAChF,eAAO,MAAM,yBAAyB,kDAAuD,CAAC;AAC9F,eAAO,MAAM,0BAA0B,kDAAwD,CAAC;AAChG,eAAO,MAAM,kBAAkB,kDAAgD,CAAC;AAChF,eAAO,MAAM,uBAAuB,kDAAqD,CAAC;AAE1F;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,GAC/C,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAErC;AAGD,OAAO,EAAE,aAAa,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/core/lib/feathers-validation.js

@@ -203,6 +203,9 @@ var mcpServerQuerySchema = createQuerySchema(
     source: Type.Optional(
       Type.Union([Type.Literal("user"), Type.Literal("imported"), Type.Literal("agor")])
     ),
+    // Executor/session-token callers pass this so hooks can inject the
+    // task creator's per-user OAuth token instead of the session owner's.
+    forUserId: Type.Optional(CommonSchemas.uuid),
     created_at: Type.Optional(CommonSchemas.timestamp)
   })
 );

package/dist/core/local-actions/index.cjs

@@ -4309,7 +4309,7 @@ init_cjs_shims();
 
 // src/db/index.ts
 init_cjs_shims();
-var import_drizzle_orm36 = require("drizzle-orm");
+var import_drizzle_orm37 = require("drizzle-orm");
 var import_bcryptjs3 = __toESM(require("bcryptjs"), 1);
 init_ids();
 
@@ -5771,6 +5771,63 @@ var BranchRepository = class {
     }
     return Array.from(userIds);
   }
+  /**
+   * Find non-archived branches whose explicit filesystem access set can change
+   * when membership in the given group changes.
+   *
+   * Keep this inverse lookup in lockstep with findExplicitFsAccessUserIds():
+   * both encode which group grants materialize into branch-folder access.
+   * App-only grants (`fs_access = 'none'`) are intentionally excluded because
+   * membership changes for those grants do not require branch-folder mutation.
+   */
+  async findExplicitFsAccessBranchIdsForGroup(groupId) {
+    const directRows = await select(this.db, { branch_id: branchGroupGrants3.branch_id }).from(branchGroupGrants3).innerJoin(branches3, (0, import_drizzle_orm15.eq)(branches3.branch_id, branchGroupGrants3.branch_id)).innerJoin(
+      groups3,
+      (0, import_drizzle_orm15.and)((0, import_drizzle_orm15.eq)(groups3.group_id, branchGroupGrants3.group_id), (0, import_drizzle_orm15.eq)(groups3.archived, false))
+    ).where(
+      (0, import_drizzle_orm15.and)(
+        (0, import_drizzle_orm15.eq)(branchGroupGrants3.group_id, groupId),
+        (0, import_drizzle_orm15.eq)(branches3.archived, false),
+        (0, import_drizzle_orm15.inArray)(
+          import_drizzle_orm15.sql`coalesce(${branchGroupGrants3.fs_access}, 'read')`,
+          FS_ACCESS_BRANCH_PERMISSIONS
+        )
+      )
+    ).all();
+    const boardRows = await select(this.db, { branch_id: branches3.branch_id }).from(boardGroupGrants3).innerJoin(
+      groups3,
+      (0, import_drizzle_orm15.and)((0, import_drizzle_orm15.eq)(groups3.group_id, boardGroupGrants3.group_id), (0, import_drizzle_orm15.eq)(groups3.archived, false))
+    ).innerJoin(
+      boards3,
+      (0, import_drizzle_orm15.and)(
+        (0, import_drizzle_orm15.eq)(boards3.board_id, boardGroupGrants3.board_id),
+        (0, import_drizzle_orm15.eq)(import_drizzle_orm15.sql`coalesce(${jsonExtract(this.db, boards3.data, "access_mode")}, 'shared')`, "shared")
+      )
+    ).innerJoin(
+      branches3,
+      (0, import_drizzle_orm15.and)(
+        (0, import_drizzle_orm15.eq)(branches3.board_id, boardGroupGrants3.board_id),
+        (0, import_drizzle_orm15.eq)(branches3.permission_source, "board"),
+        (0, import_drizzle_orm15.eq)(branches3.archived, false)
+      )
+    ).where(
+      (0, import_drizzle_orm15.and)(
+        (0, import_drizzle_orm15.eq)(boardGroupGrants3.group_id, groupId),
+        (0, import_drizzle_orm15.inArray)(
+          import_drizzle_orm15.sql`coalesce(${boardGroupGrants3.fs_access}, 'read')`,
+          FS_ACCESS_BRANCH_PERMISSIONS
+        )
+      )
+    ).all();
+    const branchIds = /* @__PURE__ */ new Set();
+    for (const row of directRows) {
+      branchIds.add(row.branch_id);
+    }
+    for (const row of boardRows) {
+      branchIds.add(row.branch_id);
+    }
+    return Array.from(branchIds);
+  }
   async findBoardAlignedBranches(boardId) {
     const rows = await select(this.db).from(branches3).where(
       (0, import_drizzle_orm15.and)(
@@ -6158,12 +6215,49 @@ init_schema();
 
 // src/db/repositories/mcp-servers.ts
 init_cjs_shims();
-var import_drizzle_orm22 = require("drizzle-orm");
+var import_drizzle_orm24 = require("drizzle-orm");
 init_ids();
 
 // src/tools/mcp/auth-secrets.ts
 init_cjs_shims();
 
+// src/mcp/template-resolver.ts
+init_cjs_shims();
+
+// src/config/env-resolver.ts
+init_cjs_shims();
+var import_drizzle_orm23 = require("drizzle-orm");
+init_database_wrapper();
+
+// src/db/repositories/session-env-selections.ts
+init_cjs_shims();
+var import_drizzle_orm22 = require("drizzle-orm");
+init_database_wrapper();
+init_schema();
+
+// src/config/env-resolver.ts
+init_schema();
+
+// src/config/env-blocklist.ts
+init_cjs_shims();
+var BLOCKED_ENV_PATTERNS = Object.freeze([
+  /^LD_/i,
+  /^DYLD_/i,
+  /^PYTHON(?!_AGOR_)/i
+]);
+
+// src/config/env-vars.ts
+init_cjs_shims();
+var V05_SCOPES = ["global", "session"];
+var V05_SCOPE_SET = new Set(V05_SCOPES);
+
+// src/templates/handlebars-helpers.ts
+init_cjs_shims();
+var import_handlebars = __toESM(require("handlebars"), 1);
+
+// src/mcp/template-patterns.ts
+init_cjs_shims();
+
 // src/tools/mcp/http-headers.ts
 init_cjs_shims();
 
@@ -6173,13 +6267,13 @@ init_schema();
 
 // src/db/repositories/messages.ts
 init_cjs_shims();
-var import_drizzle_orm23 = require("drizzle-orm");
+var import_drizzle_orm25 = require("drizzle-orm");
 init_database_wrapper();
 init_schema();
 
 // src/db/repositories/repos.ts
 init_cjs_shims();
-var import_drizzle_orm24 = require("drizzle-orm");
+var import_drizzle_orm26 = require("drizzle-orm");
 
 // src/config/variant-resolver.ts
 init_cjs_shims();
@@ -6329,7 +6423,7 @@ var RepoRepository = class {
    */
   async resolveId(id) {
     return resolveByShortIdPrefix(id, "Repo", async (pattern) => {
-      const rows = await select(this.db).from(repos3).where((0, import_drizzle_orm24.like)(repos3.repo_id, pattern)).limit(RESOLVE_SHORT_ID_FETCH_LIMIT).all();
+      const rows = await select(this.db).from(repos3).where((0, import_drizzle_orm26.like)(repos3.repo_id, pattern)).limit(RESOLVE_SHORT_ID_FETCH_LIMIT).all();
       return rows.map((r) => r.repo_id);
     });
   }
@@ -6340,7 +6434,7 @@ var RepoRepository = class {
     try {
       const insertData = this.repoToInsert(data);
       await insert(this.db, repos3).values(insertData).run();
-      const row = await select(this.db).from(repos3).where((0, import_drizzle_orm24.eq)(repos3.repo_id, insertData.repo_id)).one();
+      const row = await select(this.db).from(repos3).where((0, import_drizzle_orm26.eq)(repos3.repo_id, insertData.repo_id)).one();
       if (!row) {
         throw new RepositoryError("Failed to retrieve created repo");
       }
@@ -6359,7 +6453,7 @@ var RepoRepository = class {
   async findById(id) {
     try {
       const fullId = await this.resolveId(id);
-      const row = await select(this.db).from(repos3).where((0, import_drizzle_orm24.eq)(repos3.repo_id, fullId)).one();
+      const row = await select(this.db).from(repos3).where((0, import_drizzle_orm26.eq)(repos3.repo_id, fullId)).one();
       return row ? this.rowToRepo(row) : null;
     } catch (error) {
       if (error instanceof EntityNotFoundError) return null;
@@ -6375,7 +6469,7 @@ var RepoRepository = class {
    */
   async findBySlug(slug) {
     try {
-      const row = await select(this.db).from(repos3).where((0, import_drizzle_orm24.eq)(repos3.slug, slug)).one();
+      const row = await select(this.db).from(repos3).where((0, import_drizzle_orm26.eq)(repos3.slug, slug)).one();
       return row ? this.rowToRepo(row) : null;
     } catch (error) {
       throw new RepositoryError(
@@ -6443,8 +6537,8 @@ var RepoRepository = class {
       let changed = 0;
       for (const finding of scan.findings) {
         await this.db.transaction(async (tx) => {
-          await lockRowForUpdate(txAsDb(tx), this.db, repos3, (0, import_drizzle_orm24.eq)(repos3.repo_id, finding.repo_id));
-          const currentRow = await select(txAsDb(tx)).from(repos3).where((0, import_drizzle_orm24.eq)(repos3.repo_id, finding.repo_id)).one();
+          await lockRowForUpdate(txAsDb(tx), this.db, repos3, (0, import_drizzle_orm26.eq)(repos3.repo_id, finding.repo_id));
+          const currentRow = await select(txAsDb(tx)).from(repos3).where((0, import_drizzle_orm26.eq)(repos3.repo_id, finding.repo_id)).one();
           if (!currentRow) return;
           const data = currentRow.data;
           if (typeof data.remote_url !== "string" || !httpUrlHasUserinfo(data.remote_url)) {
@@ -6456,7 +6550,7 @@ var RepoRepository = class {
               ...data,
               remote_url: stripHttpUrlUserinfo(data.remote_url)
             }
-          }).where((0, import_drizzle_orm24.eq)(repos3.repo_id, finding.repo_id)).run();
+          }).where((0, import_drizzle_orm26.eq)(repos3.repo_id, finding.repo_id)).run();
           changed += 1;
         });
       }
@@ -6478,8 +6572,8 @@ var RepoRepository = class {
     try {
       const fullId = await this.resolveId(id);
       return await this.db.transaction(async (tx) => {
-        await lockRowForUpdate(txAsDb(tx), this.db, repos3, (0, import_drizzle_orm24.eq)(repos3.repo_id, fullId));
-        const currentRow = await select(txAsDb(tx)).from(repos3).where((0, import_drizzle_orm24.eq)(repos3.repo_id, fullId)).one();
+        await lockRowForUpdate(txAsDb(tx), this.db, repos3, (0, import_drizzle_orm26.eq)(repos3.repo_id, fullId));
+        const currentRow = await select(txAsDb(tx)).from(repos3).where((0, import_drizzle_orm26.eq)(repos3.repo_id, fullId)).one();
         if (!currentRow) {
           throw new EntityNotFoundError("Repo", id);
         }
@@ -6493,7 +6587,7 @@ var RepoRepository = class {
           repo_type: insertData.repo_type,
           unix_group: merged.unix_group ?? null,
           data: insertData.data
-        }).where((0, import_drizzle_orm24.eq)(repos3.repo_id, fullId)).run();
+        }).where((0, import_drizzle_orm26.eq)(repos3.repo_id, fullId)).run();
         merged.clone_error = insertData.data.clone_error;
         merged.remote_url = insertData.data.remote_url;
         merged.last_updated = newUpdatedAt.toISOString();
@@ -6527,8 +6621,8 @@ var RepoRepository = class {
     try {
       const fullId = await this.resolveId(id);
       return await this.db.transaction(async (tx) => {
-        await lockRowForUpdate(txAsDb(tx), this.db, repos3, (0, import_drizzle_orm24.eq)(repos3.repo_id, fullId));
-        const currentRow = await select(txAsDb(tx)).from(repos3).where((0, import_drizzle_orm24.eq)(repos3.repo_id, fullId)).one();
+        await lockRowForUpdate(txAsDb(tx), this.db, repos3, (0, import_drizzle_orm26.eq)(repos3.repo_id, fullId));
+        const currentRow = await select(txAsDb(tx)).from(repos3).where((0, import_drizzle_orm26.eq)(repos3.repo_id, fullId)).one();
         if (!currentRow) {
           throw new EntityNotFoundError("Repo", id);
         }
@@ -6542,7 +6636,7 @@ var RepoRepository = class {
           repo_type: insertData.repo_type,
           unix_group: next.unix_group ?? null,
           data: insertData.data
-        }).where((0, import_drizzle_orm24.eq)(repos3.repo_id, fullId)).run();
+        }).where((0, import_drizzle_orm26.eq)(repos3.repo_id, fullId)).run();
         next.environment = insertData.data.environment;
         next.environment_config = insertData.data.environment_config;
         next.remote_url = insertData.data.remote_url;
@@ -6582,7 +6676,7 @@ var RepoRepository = class {
   async delete(id) {
     try {
       const fullId = await this.resolveId(id);
-      const result = await deleteFrom(this.db, repos3).where((0, import_drizzle_orm24.eq)(repos3.repo_id, fullId)).run();
+      const result = await deleteFrom(this.db, repos3).where((0, import_drizzle_orm26.eq)(repos3.repo_id, fullId)).run();
       if (result.rowsAffected === 0) {
         throw new EntityNotFoundError("Repo", id);
       }
@@ -6613,7 +6707,7 @@ var RepoRepository = class {
    */
   async count() {
     try {
-      const result = await select(this.db, { count: import_drizzle_orm24.sql`count(*)` }).from(repos3).one();
+      const result = await select(this.db, { count: import_drizzle_orm26.sql`count(*)` }).from(repos3).one();
       return result?.count ?? 0;
     } catch (error) {
       throw new RepositoryError(
@@ -6626,34 +6720,28 @@ var RepoRepository = class {
 
 // src/db/repositories/schedules.ts
 init_cjs_shims();
-var import_drizzle_orm25 = require("drizzle-orm");
+var import_drizzle_orm27 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
 
 // src/db/repositories/serialized-sessions.ts
 init_cjs_shims();
-var import_drizzle_orm26 = require("drizzle-orm");
+var import_drizzle_orm28 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
 
-// src/db/repositories/session-env-selections.ts
-init_cjs_shims();
-var import_drizzle_orm27 = require("drizzle-orm");
-init_database_wrapper();
-init_schema();
-
 // src/db/repositories/session-mcp-servers.ts
 init_cjs_shims();
-var import_drizzle_orm29 = require("drizzle-orm");
+var import_drizzle_orm30 = require("drizzle-orm");
 init_database_wrapper();
 init_schema();
 
 // src/db/repositories/sessions.ts
 init_cjs_shims();
 init_types2();
-var import_drizzle_orm28 = require("drizzle-orm");
+var import_drizzle_orm29 = require("drizzle-orm");
 init_config_manager();
 init_ids();
 init_database_wrapper();
@@ -6661,7 +6749,7 @@ init_schema();
 
 // src/db/repositories/session-relationships.ts
 init_cjs_shims();
-var import_drizzle_orm30 = require("drizzle-orm");
+var import_drizzle_orm31 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
@@ -6669,7 +6757,7 @@ init_schema();
 // src/db/repositories/tasks.ts
 init_cjs_shims();
 init_types2();
-var import_drizzle_orm31 = require("drizzle-orm");
+var import_drizzle_orm32 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
@@ -6677,7 +6765,7 @@ init_schema();
 // src/db/repositories/thread-session-map.ts
 init_cjs_shims();
 init_types2();
-var import_drizzle_orm32 = require("drizzle-orm");
+var import_drizzle_orm33 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
@@ -6686,7 +6774,7 @@ init_schema();
 init_cjs_shims();
 var import_node_crypto5 = require("crypto");
 var import_bcryptjs2 = __toESM(require("bcryptjs"), 1);
-var import_drizzle_orm33 = require("drizzle-orm");
+var import_drizzle_orm34 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
@@ -6694,21 +6782,14 @@ init_tenant_context();
 
 // src/db/repositories/user-mcp-oauth-tokens.ts
 init_cjs_shims();
-var import_drizzle_orm34 = require("drizzle-orm");
+var import_drizzle_orm35 = require("drizzle-orm");
 init_database_wrapper();
 init_schema();
 
 // src/db/repositories/users.ts
 init_cjs_shims();
 init_types2();
-var import_drizzle_orm35 = require("drizzle-orm");
-
-// src/config/env-vars.ts
-init_cjs_shims();
-var V05_SCOPES = ["global", "session"];
-var V05_SCOPE_SET = new Set(V05_SCOPES);
-
-// src/db/repositories/users.ts
+var import_drizzle_orm36 = require("drizzle-orm");
 init_ids();
 init_database_wrapper();
 init_schema();
@@ -7101,23 +7182,9 @@ var import_node_fs2 = __toESM(require("fs"), 1);
 init_config_manager();
 init_constants();
 
-// src/config/env-blocklist.ts
-init_cjs_shims();
-var BLOCKED_ENV_PATTERNS = Object.freeze([
-  /^LD_/i,
-  /^DYLD_/i,
-  /^PYTHON(?!_AGOR_)/i
-]);
-
 // src/config/env-locking.ts
 init_cjs_shims();
 
-// src/config/env-resolver.ts
-init_cjs_shims();
-var import_drizzle_orm37 = require("drizzle-orm");
-init_database_wrapper();
-init_schema();
-
 // src/config/env-validation.ts
 init_cjs_shims();
 var ENV_VAR_CONSTRAINTS = {