ryugi-artifacts 1.67.0 → 1.68.1

package/dist/server.cjs

@@ -48383,7 +48383,7 @@ var import_node_os2 = __toESM(require("node:os"), 1);
 var import_node_path42 = __toESM(require("node:path"), 1);
 
 // package.json
-var version = "1.67.0";
+var version = "1.68.1";
 
 // src/server/browser-focus.ts
 var import_node_child_process = require("node:child_process");
@@ -50270,10 +50270,10 @@ function blocksOf(diff) {
 }
 function countStates(items) {
   const summary = /* @__PURE__ */ new Map();
-  for (const item2 of items) {
-    const status = item2.kind === "choose" ? item2.choice ? "chosen" : "empty" : String(item2.state ?? item2.verdict ?? item2.status ?? "unknown");
+  for (const item3 of items) {
+    const status = item3.kind === "choose" ? item3.choice ? "chosen" : "empty" : String(item3.state ?? item3.verdict ?? item3.status ?? "unknown");
     summary.set(status, (summary.get(status) ?? 0) + 1);
-    if (item2.waitingOn === "agent")
+    if (item3.waitingOn === "agent")
       summary.set("waitingOnAgent", (summary.get("waitingOnAgent") ?? 0) + 1);
   }
   return Object.fromEntries(summary);
@@ -50391,7 +50391,7 @@ function createAgentReview(stateDir, options2 = {}) {
       throw new ReviewError("E_ARGUMENT_INVALID", "limit must be between 1 and 100.");
     let values = snap.value.items ?? [];
     if (input.thread) {
-      values = values.filter((item2) => item2.id === input.thread);
+      values = values.filter((item3) => item3.id === input.thread);
       if (!values.length)
         throw new ReviewError("E_THREAD_NOT_FOUND", "Thread not found in this snapshot.", 404);
     }
@@ -50404,12 +50404,12 @@ function createAgentReview(stateDir, options2 = {}) {
     }) : null;
     let receipt;
     if (detail && !input.all && !snap.value.all && !input.fields && snap.value.kind === "threads" && selected.length) {
-      const tokens = selected.flatMap((item2) => snap.value.tokens?.[String(item2.id)] ?? []);
+      const tokens = selected.flatMap((item3) => snap.value.tokens?.[String(item3.id)] ?? []);
       if (tokens.length) receipt = lease("receipt", input, { kind: "threads", tokens });
     }
-    const materialized = selected.map((item2) => {
-      if (detail || snap.value.kind !== "threads") return item2;
-      const thread = item2;
+    const materialized = selected.map((item3) => {
+      if (detail || snap.value.kind !== "threads") return item3;
+      const thread = item3;
       const messages = thread.messages.filter((message2) => !message2.deleted);
       const last = messages.filter((message2) => message2.author === "human").at(-1) ?? messages.at(-1);
       return {
@@ -50417,10 +50417,10 @@ function createAgentReview(stateDir, options2 = {}) {
         status: thread.status,
         waitingOn: waitingOn(thread),
         anchor: thread.anchor,
-        stale: item2.stale ?? false,
-        ...item2.orphan === true ? { orphan: true } : {},
-        ...item2.draft === true ? { draft: true } : {},
-        ...typeof item2.page === "string" ? { page: item2.page } : {},
+        stale: item3.stale ?? false,
+        ...item3.orphan === true ? { orphan: true } : {},
+        ...item3.draft === true ? { draft: true } : {},
+        ...typeof item3.page === "string" ? { page: item3.page } : {},
         preview: preview(
           last?.text ?? (thread.messages.some((message2) => message2.deleted) ? "[deleted]" : "")
         ),
@@ -50430,8 +50430,8 @@ function createAgentReview(stateDir, options2 = {}) {
     });
     const required = snap.value.kind === "changes" ? ["id"] : requiredReviewFields[snap.value.kind];
     const items = input.fields ? materialized.map(
-      (item2) => Object.fromEntries(
-        Object.entries(item2).filter(
+      (item3) => Object.fromEntries(
+        Object.entries(item3).filter(
           ([key2]) => input.fields.includes(key2) || required.includes(key2)
         )
       )
@@ -50480,7 +50480,7 @@ function createAgentReview(stateDir, options2 = {}) {
       const snap = snapshot2(input, input.section, () => ({
         counts: countStates(input.items),
         items: input.items.filter(
-          (item2) => keep(item2) && (!input.filters?.status || item2.state === input.filters.status || item2.verdict === input.filters.status) && (!input.filters?.kind || item2.kind === input.filters.kind) && (!input.filters?.choiceState || (input.filters.choiceState === "chosen" ? !!item2.choice : !item2.choice))
+          (item3) => keep(item3) && (!input.filters?.status || item3.state === input.filters.status || item3.verdict === input.filters.status) && (!input.filters?.kind || item3.kind === input.filters.kind) && (!input.filters?.choiceState || (input.filters.choiceState === "chosen" ? !!item3.choice : !item3.choice))
         )
       }));
       return page(input, snap, !!input.detail);
@@ -50522,7 +50522,7 @@ function createAgentReview(stateDir, options2 = {}) {
         { ...snap, value: { ...snap.value, items: blocks.map((block) => ({ ...block })) } },
         false
       );
-      const selected = summary ? new Set(summary.items.map((item2) => item2.id)) : void 0;
+      const selected = summary ? new Set(summary.items.map((item3) => item3.id)) : void 0;
       let receipt;
       if (input.detail && !input.all && !snap.value.all && !input.fields && !snap.value.empty)
         receipt = lease("receipt", input, { kind: "changes", to: snap.value.to });
@@ -51861,6 +51861,17 @@ function referencesOf(root, key2) {
     return !!each && resolveArtifactDir(root, each.type, each.id) !== null;
   });
 }
+function referrersOf(root, key2) {
+  const found = [];
+  for (const each of listArtifacts(root).artifacts) {
+    const extract = REFERENCES_OF[each.type];
+    const from = `${each.type}/${each.id}`;
+    if (!extract || from === key2) continue;
+    const uses = extract(each.dir).filter((target) => target === key2).length;
+    if (uses > 0) found.push({ key: from, uses });
+  }
+  return found.sort((a5, b6) => a5.key.localeCompare(b6.key));
+}
 
 // src/server/cloud.ts
 var import_node_crypto10 = __toESM(require("node:crypto"), 1);
@@ -51918,38 +51929,38 @@ async function buildCascade(root, visibility, deps) {
   return resolveSelection([...items.values()], {}, root);
 }
 function resolveSelection(items, overrides, root) {
-  const byKey = new Map(items.map((item2) => [item2.artifact, item2]));
-  const wanted = (item2) => ACTIONABLE.includes(item2.state) && (overrides[item2.artifact] ?? CHECKED_BY_DEFAULT.includes(item2.state));
+  const byKey = new Map(items.map((item3) => [item3.artifact, item3]));
+  const wanted = (item3) => ACTIONABLE.includes(item3.state) && (overrides[item3.artifact] ?? CHECKED_BY_DEFAULT.includes(item3.state));
   const isRoot = (key2) => root ? key2 === root : !byKey.has(key2);
   const reachable = /* @__PURE__ */ new Set();
   const opens = (key2) => {
     if (isRoot(key2)) return true;
-    const item2 = byKey.get(key2);
-    return !!item2 && reachable.has(key2) && (item2.open || wanted(item2));
+    const item3 = byKey.get(key2);
+    return !!item3 && reachable.has(key2) && (item3.open || wanted(item3));
   };
   for (let changed = true; changed; ) {
     changed = false;
-    for (const item2 of items) {
-      if (reachable.has(item2.artifact) || !item2.parents.some(opens)) continue;
-      reachable.add(item2.artifact);
+    for (const item3 of items) {
+      if (reachable.has(item3.artifact) || !item3.parents.some(opens)) continue;
+      reachable.add(item3.artifact);
       changed = true;
     }
   }
-  return items.map((item2) => {
-    const { reason: _reason, upstream: _upstream, ...rest } = item2;
-    const reason = item2.state === "blocked" ? item2.blocked : void 0;
-    if (!reachable.has(item2.artifact))
+  return items.map((item3) => {
+    const { reason: _reason, upstream: _upstream, ...rest } = item3;
+    const reason = item3.state === "blocked" ? item3.blocked : void 0;
+    if (!reachable.has(item3.artifact))
       return {
         ...rest,
         checked: false,
         selectable: false,
         reason: "upstream",
-        upstream: item2.via ?? item2.parents[0]
+        upstream: item3.via ?? item3.parents[0]
       };
     return {
       ...rest,
-      checked: wanted(item2),
-      selectable: ACTIONABLE.includes(item2.state),
+      checked: wanted(item3),
+      selectable: ACTIONABLE.includes(item3.state),
       ...reason ? { reason } : {}
     };
   });
@@ -51975,6 +51986,53 @@ function cloudErrorDetails(value) {
   return details;
 }
 
+// src/shared/referrers.ts
+var SELECTABLE = ["private", "unpublished", "unlinked"];
+var item = (base) => ({
+  ...base,
+  selectable: SELECTABLE.includes(base.state),
+  checked: false
+});
+function localState(status, cloudKnown) {
+  if (!status.published) {
+    if (status.withdrawn) return { state: "withdrawn" };
+    if (status.blocked) return { state: "blocked", reason: status.blocked };
+    return { state: "unpublished" };
+  }
+  const isPrivate = status.visibility === "private";
+  if (!cloudKnown) return { state: isPrivate ? "private" : "ready" };
+  return isPrivate ? { state: "private", needsUpdate: true } : { state: "unlinked" };
+}
+function mergeReferrers({
+  cloud,
+  local
+}) {
+  const byCloudId = new Map(
+    local.filter((each) => each.cloudId).map((each) => [each.cloudId, each])
+  );
+  const fromCloud = (cloud ?? []).map((each) => {
+    const match = byCloudId.get(each.cloudId);
+    return item({
+      artifact: match?.key ?? `cloud:${each.cloudId}`,
+      cloudId: each.cloudId,
+      title: match?.status.title ?? each.title,
+      uses: each.uses,
+      state: each.visibility === "private" ? "private" : "ready"
+    });
+  });
+  const known = new Set((cloud ?? []).map((each) => each.cloudId));
+  const fromLocal = local.filter((each) => !each.cloudId || !known.has(each.cloudId)).map(
+    (each) => item({
+      artifact: each.key,
+      cloudId: each.cloudId,
+      title: each.status.title,
+      uses: each.uses,
+      ...localState(each.status, cloud !== null)
+    })
+  );
+  return [...fromCloud, ...fromLocal];
+}
+
 // src/shared/brand.ts
 var RYUGI_MARK_VIEWBOX = "0 0 512 512";
 var RYUGI_MARK_BODY = '<g transform="translate(82 136.317460) scale(0.613756614)"><g transform="translate(0.000000,390.000000) scale(0.100000,-0.100000)" stroke="none"><path d="M4945 3889 c-339 -44 -682 -239 -905 -517 -139 -172 -232 -355 -365 -717 -136 -368 -285 -735 -360 -890 -219 -449 -524 -768 -849 -887 -121 -44 -215 -60 -356 -60 -162 0 -244 18 -450 97 -291 111 -420 144 -650 166 -257 24 -637 -19 -772 -87 -148 -75 -249 -247 -235 -399 19 -197 186 -344 392 -346 40 -1 127 11 205 27 115 23 160 28 300 28 242 1 372 -29 671 -155 226 -95 467 -149 662 -149 252 0 548 74 789 197 394 201 708 521 988 1008 83 144 271 529 405 830 220 493 300 632 436 759 121 112 226 162 424 201 44 9 108 29 143 45 165 77 274 285 244 467 -31 188 -168 334 -354 378 -70 16 -249 18 -363 4z M765 3139 c-202 -11 -415 -48 -497 -86 -91 -44 -151 -101 -193 -186 -123 -248 31 -525 307 -554 38 -4 99 3 204 23 137 27 167 29 384 29 205 0 249 -3 347 -23 225 -45 387 -106 658 -247 182 -94 308 -144 463 -182 138 -35 350 -39 447 -9 174 53 275 152 305 299 26 130 -40 267 -158 323 -52 25 -72 28 -227 35 -248 11 -328 37 -576 187 -232 140 -384 213 -585 281 -283 95 -541 127 -879 110z M620 2104 c-273 -32 -384 -65 -471 -143 -235 -208 -136 -589 172 -660 68 -16 129 -13 272 14 400 73 702 31 1167 -163 239 -99 350 -125 535 -125 193 0 338 51 448 157 117 113 139 261 56 375 -50 69 -99 85 -294 92 -245 10 -332 35 -563 163 -224 123 -456 211 -693 262 -111 23 -149 26 -359 29 -129 2 -251 1 -270 -1z"/></g></g>';
@@ -52222,7 +52280,7 @@ footer { display: flex; align-items: center; gap: 8px; margin-top: 28px; font-si
   h1 { margin-top: 16px; font-size: 26px; line-height: 1.22; }
 }
 `;
-var item = (lead, title, detail) => `<li>${lead}<div><b>${title}</b><span>${detail}</span></div></li>`;
+var item2 = (lead, title, detail) => `<li>${lead}<div><b>${title}</b><span>${detail}</span></div></li>`;
 var autoPublishCard = (t7, on6, ticket) => `<section class="card auto"><form method="post" action="/api/cloud/callback/auto-publish">
         <input type="hidden" name="ticket" value="${escapeHtml(ticket)}">
         <span class="text"><b>${on6 ? t7("callback.autoPublishOn") : t7("callback.autoPublishOff")}</b><span>${t7("callback.autoPublishDetail")}</span></span>
@@ -52233,13 +52291,13 @@ var signedInBody = (t7, result) => `<p class="pill">${CIRCLE_CHECK}${t7("callbac
       <p class="lead">${t7("callback.lead")}</p>
       ${autoPublishCard(t7, result.autoPublish, result.ticket)}
       <p class="label">${t7("callback.whatNext")}</p>
-      <ul class="card">${item(`<span class="icon">${PANEL}</span>`, t7("callback.fromPage"), t7("callback.fromPageDetail"))}${item(`<span class="icon">${TERMINAL}</span>`, t7("callback.fromAgent"), t7("callback.fromAgentDetail"))}</ul>
+      <ul class="card">${item2(`<span class="icon">${PANEL}</span>`, t7("callback.fromPage"), t7("callback.fromPageDetail"))}${item2(`<span class="icon">${TERMINAL}</span>`, t7("callback.fromAgent"), t7("callback.fromAgentDetail"))}</ul>
       <footer>${CHECK}<span>${t7("callback.closeOk")}</span></footer>`;
 var failedBody = (t7, result) => `<p class="pill">${CIRCLE_ALERT}${t7("callback.notConnected")}</p>
       <h1>${t7("callback.titleFailed")}</h1>
       <p class="lead">${escapeHtml(result.detail)}</p>
       <p class="label">${t7("callback.toTryAgain")}</p>
-      <ol class="card">${item('<span class="step">1</span>', t7("callback.stepBack"), t7("callback.stepBackDetail"))}${item('<span class="step">2</span>', t7("callback.stepSignIn"), t7("callback.stepSignInDetail"))}</ol>
+      <ol class="card">${item2('<span class="step">1</span>', t7("callback.stepBack"), t7("callback.stepBackDetail"))}${item2('<span class="step">2</span>', t7("callback.stepSignIn"), t7("callback.stepSignInDetail"))}</ol>
       <details><summary>${t7("callback.otherReasons")}</summary><ul><li>${t7("callback.reasonUnreachable")}</li><li>${t7("callback.reasonRefused")}</li></ul></details>
       <footer><span>${t7("callback.closeFailed")}</span></footer>`;
 function callbackPage(result, locale = "en") {
@@ -52502,8 +52560,8 @@ function parseScene(text5, file = "scene.excalidraw") {
   const elements = body.elements ?? [];
   if (!Array.isArray(elements)) return { error: `${file}: elements must be an array` };
   for (const [index, element] of elements.entries()) {
-    const item2 = record(element);
-    if (typeof item2.id !== "string" || typeof item2.type !== "string")
+    const item3 = record(element);
+    if (typeof item3.id !== "string" || typeof item3.type !== "string")
       return { error: `${file}: element ${index} needs a string id and type` };
   }
   return {
@@ -53866,17 +53924,17 @@ function escapeXml(text5) {
 function buildAttrs(attrs) {
   return Object.entries(attrs).filter(([, v6]) => v6 !== void 0 && v6 !== "").map(([k4, v6]) => ` ${k4}="${escapeXml(v6)}"`).join("");
 }
-function isCdata(item2) {
-  return typeof item2 === "object" && "cdata" in item2;
+function isCdata(item3) {
+  return typeof item3 === "object" && "cdata" in item3;
 }
-function renderCdata(item2) {
-  return `<![CDATA[${item2.cdata}]]>`;
+function renderCdata(item3) {
+  return `<![CDATA[${item3.cdata}]]>`;
 }
 function renderXml(content, indent = 0, options2 = {}) {
   const lines = [];
-  for (const item2 of content) if (typeof item2 === "string") lines.push(escapeXml(item2));
-  else if (isCdata(item2)) lines.push(renderCdata(item2));
-  else lines.push(renderElement(item2, indent, options2));
+  for (const item3 of content) if (typeof item3 === "string") lines.push(escapeXml(item3));
+  else if (isCdata(item3)) lines.push(renderCdata(item3));
+  else lines.push(renderElement(item3, indent, options2));
   return lines.join("");
 }
 function renderElement(el3, indent, options2) {
@@ -54145,12 +54203,12 @@ function serializeToXml(state2, registry2, options2 = {}) {
     if (!selectedBlockIds?.size) return items;
     const blockId2 = child.$?.blockId;
     if (!blockId2 || !selectedBlockIds.has(blockId2)) return items;
-    return items.map((item2) => {
-      if (typeof item2 === "string" || "cdata" in item2) return item2;
+    return items.map((item3) => {
+      if (typeof item3 === "string" || "cdata" in item3) return item3;
       return {
-        ...item2,
+        ...item3,
         attrs: {
-          ...item2.attrs,
+          ...item3.attrs,
           selected: "true"
         }
       };
@@ -57557,9 +57615,9 @@ function getAtomFeed(feedRoot) {
   const childs = feedRoot.children;
   const feed = {
     type: "atom",
-    items: getElementsByTagName("entry", childs).map((item2) => {
+    items: getElementsByTagName("entry", childs).map((item3) => {
       var _a6;
-      const { children: children2 } = item2;
+      const { children: children2 } = item3;
       const entry = { media: getMediaElements(children2) };
       addConditionally(entry, "id", "id", children2);
       addConditionally(entry, "title", "title", children2);
@@ -57598,8 +57656,8 @@ function getRssFeed(feedRoot) {
   const feed = {
     type: feedRoot.name.substr(0, 3),
     id: "",
-    items: getElementsByTagName("item", feedRoot.children).map((item2) => {
-      const { children: children2 } = item2;
+    items: getElementsByTagName("item", feedRoot.children).map((item3) => {
+      const { children: children2 } = item3;
       const entry = { media: getMediaElements(children2) };
       addConditionally(entry, "id", "guid", children2);
       addConditionally(entry, "title", "title", children2);
@@ -59806,8 +59864,8 @@ function getAtomFeed2(feedRoot) {
   const childs = feedRoot.children;
   const feed = {
     type: "atom",
-    items: getElementsByTagName2("entry", childs).map((item2) => {
-      const { children: children2 } = item2;
+    items: getElementsByTagName2("entry", childs).map((item3) => {
+      const { children: children2 } = item3;
       const entry = { media: getMediaElements2(children2) };
       addConditionally2(entry, "id", "id", children2);
       addConditionally2(entry, "title", "title", children2);
@@ -59845,8 +59903,8 @@ function getRssFeed2(feedRoot) {
   const feed = {
     type: feedRoot.name.substr(0, 3),
     id: "",
-    items: getElementsByTagName2("item", feedRoot.children).map((item2) => {
-      const { children: children2 } = item2;
+    items: getElementsByTagName2("item", feedRoot.children).map((item3) => {
+      const { children: children2 } = item3;
       const entry = { media: getMediaElements2(children2) };
       addConditionally2(entry, "id", "guid", children2);
       addConditionally2(entry, "title", "title", children2);
@@ -61939,9 +61997,9 @@ var NamedNodeMap = class extends Array {
     this.unshift(attr);
   }
   removeNamedItem(name) {
-    const item2 = this.getNamedItem(name);
+    const item3 = this.getNamedItem(name);
     this.ownerElement.removeAttribute(name);
-    this.splice(this.indexOf(item2), 1);
+    this.splice(this.indexOf(item3), 1);
   }
   item(index) {
     return index < this.length ? this[index] : null;
@@ -66485,7 +66543,7 @@ var CALLBACK_TICKET_TTL_MS = 30 * 60 * 1e3;
 var UPLOAD_CONCURRENCY = 6;
 var MAX_JSON_BODY = 4096;
 var CLOUD_ID = /^[\w-]{1,64}$/;
-var ROUTE = /^\/api\/cloud\/(status|login|logout|artifacts|publish|publish-refs|publication|refs|reserve|visibility|auto-publish|sync)(?:\/([^/]+)(?:\/([^/]+))?)?$/;
+var ROUTE = /^\/api\/cloud\/(status|login|logout|artifacts|publish|publish-refs|publish-referrers|publication|refs|reserve|visibility|auto-publish|sync)(?:\/([^/]+)(?:\/([^/]+))?)?$/;
 var SignedOut = class extends Error {
 };
 var CloudRefused = class extends Error {
@@ -66980,40 +67038,120 @@ function createCloudRoutes(options2) {
     },
     statusOf: cascadeStatus
   });
+  const cloudReferrers = async (cloudId) => {
+    try {
+      const res = await cloudFetch("GET", `/api/a/${cloudId}/refs`);
+      if (!res.ok) return null;
+      const body = await res.json();
+      return Array.isArray(body.referrers) ? body.referrers : null;
+    } catch {
+      return null;
+    }
+  };
+  const referrersOf2 = async (ref) => {
+    const local = [];
+    for (const { key: key2, uses } of options2.referrers?.(ref) ?? []) {
+      const status = await cascadeStatus(key2);
+      if (status) local.push({ key: key2, uses, status, cloudId: artifactEntry(key2).cloud?.id ?? null });
+    }
+    const root = artifactEntry(`${ref.type}/${ref.id}`).cloud;
+    const cloud = root?.publishedAt ? await cloudReferrers(root.id) : null;
+    const cloudUnavailable = !!root?.publishedAt && cloud === null;
+    return {
+      referrers: mergeReferrers({ cloud, local }),
+      ...cloudUnavailable ? { cloudUnavailable: true } : {}
+    };
+  };
+  const publishReferrers = async (ref, publishKeys, makePublic) => {
+    const rootKey = `${ref.type}/${ref.id}`;
+    const root = artifactEntry(rootKey);
+    if (!root.cloud?.publishedAt || publishState(root).visibility !== "public")
+      throw new CloudRefused(400, `${rootKey} is not public`);
+    const { referrers } = await referrersOf2(ref);
+    const known = new Map(referrers.map((item3) => [item3.artifact, item3]));
+    for (const key2 of makePublic)
+      if (known.get(key2)?.state !== "private")
+        throw new CloudRefused(400, `${key2} is not a private document that references ${rootKey}`);
+    for (const key2 of publishKeys) {
+      const state2 = known.get(key2)?.state;
+      if (state2 !== "unpublished" && state2 !== "unlinked")
+        throw new CloudRefused(400, `${key2} is not a document ${rootKey} can publish`);
+    }
+    const results = [];
+    for (const key2 of [...makePublic, ...publishKeys]) {
+      const item3 = known.get(key2);
+      const action = makePublic.includes(key2) ? "make-public" : item3.state === "unlinked" ? "update" : "publish";
+      try {
+        if (!artifactKeyOf(key2)) {
+          await expectOk(
+            await cloudFetch("PATCH", `/api/artifacts/${item3.cloudId}`, { visibility: "public" })
+          );
+        } else
+          await serialized(key2, async () => {
+            const target = artifactKeyOf(key2);
+            if (action === "make-public") {
+              await setVisibility(target, "public");
+              if (!item3.needsUpdate) return;
+            }
+            const result = await publish(target, "public");
+            if (result.status !== 200)
+              throw new CloudRefused(
+                409,
+                (result.body.reasons ?? []).join("; ") || "not ready to publish"
+              );
+            updateArtifactConfig(configFile, key2, { autoPublish: null });
+          });
+        results.push({ artifact: key2, action, status: "published" });
+      } catch (err) {
+        if (err instanceof SignedOut) throw err;
+        const httpStatus = err instanceof CloudRefused ? err.status : void 0;
+        results.push({
+          artifact: key2,
+          action,
+          status: httpStatus !== void 0 && httpStatus < 500 ? "failed" : "unknown",
+          error: {
+            error: err.message.replace(/^cloud refused \(\d+\): /, ""),
+            ...httpStatus === void 0 ? {} : { httpStatus }
+          }
+        });
+      }
+    }
+    return { results };
+  };
   const publishRefs = async (ref, refs3, makePublic, requested) => {
     const rootKey = `${ref.type}/${ref.id}`;
     const visibility = requested ?? publishState(artifactEntry(rootKey)).visibility;
     const listed = await cascadeOf(ref, visibility);
     const overrides = Object.fromEntries(
-      listed.map((item2) => [item2.artifact, false])
+      listed.map((item3) => [item3.artifact, false])
     );
     for (const key2 of [...refs3, ...makePublic]) overrides[key2] = true;
     const items = resolveSelection(listed, overrides);
-    const known = new Map(items.map((item2) => [item2.artifact, item2]));
+    const known = new Map(items.map((item3) => [item3.artifact, item3]));
     for (const key2 of [...refs3, ...makePublic]) {
-      const item2 = known.get(key2);
-      if (!item2?.selectable)
+      const item3 = known.get(key2);
+      if (!item3?.selectable)
         throw new CloudRefused(400, `${key2} is not a reference ${rootKey} can publish`);
-      if (makePublic.includes(key2) !== (item2.state === "private"))
+      if (makePublic.includes(key2) !== (item3.state === "private"))
         throw new CloudRefused(
           400,
-          item2.state === "private" ? `${key2} is private: list it in makePublic` : `${key2} is not private: list it in refs`
+          item3.state === "private" ? `${key2} is private: list it in makePublic` : `${key2} is not private: list it in refs`
         );
     }
     const results = [];
     let stopped = false;
-    for (const item2 of items.filter((each) => each.checked)) {
-      const action = item2.state === "private" ? "make-public" : item2.state === "stale" ? "update" : "publish";
+    for (const item3 of items.filter((each) => each.checked)) {
+      const action = item3.state === "private" ? "make-public" : item3.state === "stale" ? "update" : "publish";
       if (stopped) {
-        results.push({ artifact: item2.artifact, action, status: "not_attempted" });
+        results.push({ artifact: item3.artifact, action, status: "not_attempted" });
         continue;
       }
-      const target = artifactKeyOf(item2.artifact);
+      const target = artifactKeyOf(item3.artifact);
       try {
-        await serialized(item2.artifact, async () => {
+        await serialized(item3.artifact, async () => {
           if (action === "make-public") {
             await setVisibility(target, "public");
-            if (!item2.changed) return;
+            if (!item3.changed) return;
           }
           const result = await publish(target, action === "publish" ? visibility : void 0, {
             skipUnchanged: true
@@ -67023,14 +67161,14 @@ function createCloudRoutes(options2) {
               409,
               (result.body.reasons ?? []).join("; ") || "not ready to publish"
             );
-          updateArtifactConfig(configFile, item2.artifact, { autoPublish: null });
+          updateArtifactConfig(configFile, item3.artifact, { autoPublish: null });
         });
-        results.push({ artifact: item2.artifact, action, status: "published" });
+        results.push({ artifact: item3.artifact, action, status: "published" });
       } catch (err) {
         if (err instanceof SignedOut) throw err;
         const httpStatus = err instanceof CloudRefused ? err.status : void 0;
         results.push({
-          artifact: item2.artifact,
+          artifact: item3.artifact,
           action,
           status: httpStatus !== void 0 && httpStatus < 500 ? "failed" : "unknown",
           error: {
@@ -67107,11 +67245,22 @@ function createCloudRoutes(options2) {
       return;
     }
     if (action === "refs" && ref && method === "GET") {
-      const requested = new URL(req.url ?? "/", "http://hub").searchParams.get("visibility");
+      const query2 = new URL(req.url ?? "/", "http://hub").searchParams;
+      const requested = query2.get("visibility");
       if (requested !== null && !isVisibility(requested))
         throw new CloudRefused(400, 'visibility must be "public" or "private"');
       const visibility = requested ?? publishState(artifactEntry(`${ref.type}/${ref.id}`)).visibility;
-      sendJson(res, 200, { visibility, items: await cascadeOf(ref, visibility) });
+      sendJson(res, 200, {
+        visibility,
+        items: await cascadeOf(ref, visibility),
+        ...query2.get("referrers") === "0" ? {} : await referrersOf2(ref)
+      });
+      return;
+    }
+    if (action === "publish-referrers" && ref && method === "POST") {
+      const body = await readJsonBody(req);
+      const list2 = (value) => Array.isArray(value) ? value.filter((each) => typeof each === "string") : [];
+      sendJson(res, 200, await publishReferrers(ref, list2(body?.publish), list2(body?.makePublic)));
       return;
     }
     if (action === "publish-refs" && ref && method === "POST") {
@@ -67261,13 +67410,18 @@ function createCloudRoutes(options2) {
       const ref = artifactKeyOf(key2);
       if (!ref) throw new CloudRefused(404, "artifact not found");
       const shown = visibility ?? publishState(artifactEntry(key2)).visibility;
-      return { visibility: shown, items: await cascadeOf(ref, shown) };
+      return { visibility: shown, items: await cascadeOf(ref, shown), ...await referrersOf2(ref) };
     },
     publishRefsNow(key2, refs3, makePublic, visibility) {
       const ref = artifactKeyOf(key2);
       if (!ref) throw new CloudRefused(404, "artifact not found");
       return publishRefs(ref, refs3, makePublic, visibility);
     },
+    publishReferrersNow(key2, publishKeys, makePublic) {
+      const ref = artifactKeyOf(key2);
+      if (!ref) throw new CloudRefused(404, "artifact not found");
+      return publishReferrers(ref, publishKeys, makePublic);
+    },
     autoPublishEnabled: () => autoPublishState().enabled,
     token: () => readCredentials(credentialsFile2, origin)?.token ?? null,
     async handle(req, res, match) {
@@ -69859,8 +70013,8 @@ function rawValue() {
   );
 }
 // @__NO_SIDE_EFFECTS__
-function arrayValue(item2) {
-  undeclared("arrayValue", item2);
+function arrayValue(item3) {
+  undeclared("arrayValue", item3);
   return makeSchema(
     (value) => {
       if (!Array.isArray(value)) {
@@ -69868,12 +70022,12 @@ function arrayValue(item2) {
       }
       const result = new Array(value.length);
       for (let i7 = 0; i7 < value.length; i7++) {
-        result[i7] = item2(value[i7]);
+        result[i7] = item3(value[i7]);
       }
       return result;
     },
     {
-      item: item2,
+      item: item3,
       kind: "array"
     },
     void 0,
@@ -69889,7 +70043,7 @@ function arrayValue(item2) {
         return false;
       }
       for (let i7 = 0; i7 < a5.length; i7++) {
-        if (!isSchemaEqual(item2, a5[i7], b6[i7])) {
+        if (!isSchemaEqual(item3, a5[i7], b6[i7])) {
           return false;
         }
       }
@@ -69925,10 +70079,10 @@ function arrayValue(item2) {
   );
 }
 // @__NO_SIDE_EFFECTS__
-function arraySetValue(item2) {
-  undeclared("arraySetValue", item2);
+function arraySetValue(item3) {
+  undeclared("arraySetValue", item3);
   {
-    if (!(typeof item2.defaultValue === "string")) {
+    if (!(typeof item3.defaultValue === "string")) {
       formatDevErrorMessage(`arraySetValue: the item schema must produce strings`);
     }
   }
@@ -69936,14 +70090,14 @@ function arraySetValue(item2) {
     if (!Array.isArray(value)) {
       return Object.freeze([]);
     }
-    if (Object.isFrozen(value) && $isCanonicalSet(item2, value)) {
+    if (Object.isFrozen(value) && $isCanonicalSet(item3, value)) {
       return value;
     }
     const members = [];
     for (let i7 = 0; i7 < value.length; i7++) {
       const member = value[i7];
-      if (member !== void 0 && $acceptsValue(item2, member)) {
-        members.push(item2(member));
+      if (member !== void 0 && $acceptsValue(item3, member)) {
+        members.push(item3(member));
       }
     }
     members.sort();
@@ -69955,14 +70109,14 @@ function arraySetValue(item2) {
     }
     return Object.freeze(result);
   }, {
-    item: item2,
+    item: item3,
     kind: "set"
   }, void 0, isArraySetEqual, (value) => Array.isArray(value));
 }
-function $isCanonicalSet(item2, value) {
+function $isCanonicalSet(item3, value) {
   for (let i7 = 0; i7 < value.length; i7++) {
     const member = value[i7];
-    if (typeof member !== "string" || i7 > 0 && !(value[i7 - 1] < member) || !$acceptsValue(item2, member) || item2(member) !== member) {
+    if (typeof member !== "string" || i7 > 0 && !(value[i7 - 1] < member) || !$acceptsValue(item3, member) || item3(member) !== member) {
       return false;
     }
   }
@@ -73175,8 +73329,8 @@ function mergingChildNotInline(klass, children2) {
     if (entry === "inline") {
       continue;
     }
-    const item2 = declaredChildren(entry);
-    const ok = item2 === "inline" || Array.isArray(item2) && item2.includes("inline") && item2.every((e5) => e5 === "inline" || e5 === klass || klass.prototype instanceof e5);
+    const item3 = declaredChildren(entry);
+    const ok = item3 === "inline" || Array.isArray(item3) && item3.includes("inline") && item3.every((e5) => e5 === "inline" || e5 === klass || klass.prototype instanceof e5);
     if (!ok) {
       return entry;
     }
@@ -74244,9 +74398,9 @@ function validateNodeStructure(klass) {
         formatDevErrorMessage(`${name}: mergeAdjacent.by names the derived NodeState ${invalid.entry}`);
       }
     }
-    const item2 = mergingChildNotInline(klass, declared.children);
-    if (!(item2 === null)) {
-      formatDevErrorMessage(`${name}: a merging class that lists child classes must list classes that hold inline content (${item2 === null ? "" : item2.name} does not)`);
+    const item3 = mergingChildNotInline(klass, declared.children);
+    if (!(item3 === null)) {
+      formatDevErrorMessage(`${name}: a merging class that lists child classes must list classes that hold inline content (${item3 === null ? "" : item3.name} does not)`);
     }
   }
   if (declared.inline !== void 0 && declared.declaredBy.inline === klass) {
@@ -105139,8 +105293,8 @@ function registerRovingTabIndex(container, options2 = {}) {
   const selector = options2.itemSelector ?? DEFAULT_ROVING_SELECTOR;
   const getItems = () => Array.from(container.querySelectorAll(selector));
   const applyTabIndex = (items, activeIndex) => {
-    items.forEach((item2, i7) => {
-      item2.tabIndex = i7 === activeIndex ? 0 : -1;
+    items.forEach((item3, i7) => {
+      item3.tabIndex = i7 === activeIndex ? 0 : -1;
     });
   };
   const init = () => {
@@ -105212,8 +105366,8 @@ function registerRovingTabIndex(container, options2 = {}) {
   };
   return mergeRegister2(registerEventListener2(container, "keydown", handler5), () => {
     const items = getItems();
-    items.forEach((item2) => {
-      item2.tabIndex = 0;
+    items.forEach((item3) => {
+      item3.tabIndex = 0;
     });
   });
 }
@@ -105228,8 +105382,8 @@ function registerFocusManager(editor, toolbar, options2 = {}) {
     if (isHTMLElement2(target)) {
       const items = toolbar.querySelectorAll(selector);
       let isRovingItem = false;
-      for (const item2 of items) {
-        if (item2 === target || containsComposed(item2, target)) {
+      for (const item3 of items) {
+        if (item3 === target || containsComposed(item3, target)) {
           isRovingItem = true;
           break;
         }
@@ -126903,8 +127057,8 @@ function $pointsAround(parent, items) {
       if (offset <= first) {
         point2.set(parentKey, offset, "element");
       } else if (offset < first + items.length) {
-        const item2 = items[offset - first - 1];
-        point2.set(item2.getKey(), item2.getChildrenSize(), "element");
+        const item3 = items[offset - first - 1];
+        point2.set(item3.getKey(), item3.getChildrenSize(), "element");
       } else {
         point2.set(parentKey, offset - items.length + 1, "element");
       }
@@ -128114,20 +128268,20 @@ function $buildWordListTree(ctx, items) {
     level: items[0].level,
     list: root
   }];
-  for (const item2 of items) {
-    while (stack2.length > 1 && stack2[stack2.length - 1].level > item2.level) {
+  for (const item3 of items) {
+    while (stack2.length > 1 && stack2[stack2.length - 1].level > item3.level) {
       stack2.pop();
     }
-    if (item2.level > stack2[stack2.length - 1].level) {
-      const sub2 = $createListNode(classifyWordListType(item2.marker));
+    if (item3.level > stack2[stack2.length - 1].level) {
+      const sub2 = $createListNode(classifyWordListType(item3.marker));
       stack2[stack2.length - 1].list.append($createListItemNode().append(sub2));
       stack2.push({
-        level: item2.level,
+        level: item3.level,
         list: sub2
       });
     }
-    stripWordMarker(item2.el);
-    stack2[stack2.length - 1].list.append($createListItemNode().splice(0, 0, ctx.$importChildren(item2.el, {
+    stripWordMarker(item3.el);
+    stack2[stack2.length - 1].list.append($createListItemNode().splice(0, 0, ctx.$importChildren(item3.el, {
       schema: InlineSchema2
     })));
   }
@@ -162479,13 +162633,13 @@ defineFunction({
         }
         data.push(current);
         for (var _i6 = 0; _i6 < data.length; _i6++) {
-          var item2 = data[_i6];
-          var firstEquals = item2.indexOf("=");
+          var item3 = data[_i6];
+          var firstEquals = item3.indexOf("=");
           if (firstEquals < 0) {
-            throw new ParseError("\\htmlData key/value '" + item2 + "' missing equals sign");
+            throw new ParseError("\\htmlData key/value '" + item3 + "' missing equals sign");
           }
-          var key2 = item2.slice(0, firstEquals);
-          var _value = item2.slice(firstEquals + 1);
+          var key2 = item3.slice(0, firstEquals);
+          var _value = item3.slice(firstEquals + 1);
           attributes["data-" + key2.trim()] = _value;
         }
         trustContext = {
@@ -175475,9 +175629,9 @@ LoroDoc.prototype.toJsonWithReplacer = function(replacer) {
   };
   const run3 = (layer2) => {
     if (Array.isArray(layer2)) {
-      return layer2.map((item2, index) => {
-        return m11(index, item2);
-      }).filter((item2) => item2 !== void 0);
+      return layer2.map((item3, index) => {
+        return m11(index, item3);
+      }).filter((item3) => item3 !== void 0);
     }
     const result = {};
     for (const [key2, value] of Object.entries(layer2)) {
@@ -176447,15 +176601,15 @@ __export(LexicalMarkdown_dev_exports, {
 });
 function indexBy(list2, callback) {
   const index = {};
-  for (const item2 of list2) {
-    const key2 = callback(item2);
+  for (const item3 of list2) {
+    const key2 = callback(item3);
     if (!key2) {
       continue;
     }
     if (index[key2]) {
-      index[key2].push(item2);
+      index[key2].push(item3);
     } else {
-      index[key2] = [item2];
+      index[key2] = [item3];
     }
   }
   return index;
@@ -181703,6 +181857,10 @@ async function handleRelay(ctx, key2, body, conn, contentOrigin = "") {
       key2,
       request.visibility === "public" || request.visibility === "private" ? request.visibility : void 0
     );
+  if (request.op === "publish-referrers" && ctx.cloud) {
+    const list2 = (value) => Array.isArray(value) ? value.filter((each) => typeof each === "string") : [];
+    return ctx.cloud.publishReferrersNow(key2, list2(request.publish), list2(request.makePublic));
+  }
   if (request.op === "publish-refs" && ctx.cloud) {
     const list2 = (value) => Array.isArray(value) ? value.filter((each) => typeof each === "string") : [];
     return ctx.cloud.publishRefsNow(
@@ -181818,9 +181976,9 @@ function readChange(value) {
 function readAll(values, read3) {
   const out = [];
   for (const value of values) {
-    const item2 = read3(value);
-    if (!item2) return null;
-    out.push(item2);
+    const item3 = read3(value);
+    if (!item3) return null;
+    out.push(item3);
   }
   return out;
 }
@@ -181832,16 +181990,16 @@ function readSelectionMessage(value) {
     return null;
   if (!list(value.selected, SELECTION_FULL_NODES) || !list(value.tweaks, SELECTION_MAX_NODES) || !list(value.nodes, SELECTION_MAX_NODES))
     return null;
-  const selected = readAll(value.selected, (item2) => {
-    const node = readNode(item2);
-    if (!node || !object(item2) || !text2(item2.text, SELECTION_LIMITS.text) || !text2(item2.html, SELECTION_LIMITS.html) || !list(item2.tweaks, INSPECTOR_PROPERTIES.length))
+  const selected = readAll(value.selected, (item3) => {
+    const node = readNode(item3);
+    if (!node || !object(item3) || !text2(item3.text, SELECTION_LIMITS.text) || !text2(item3.html, SELECTION_LIMITS.html) || !list(item3.tweaks, INSPECTOR_PROPERTIES.length))
       return null;
-    const tweaks2 = readAll(item2.tweaks, readChange);
-    return tweaks2 && { ...node, text: item2.text, html: item2.html, tweaks: tweaks2 };
+    const tweaks2 = readAll(item3.tweaks, readChange);
+    return tweaks2 && { ...node, text: item3.text, html: item3.html, tweaks: tweaks2 };
   });
-  const tweaks = readAll(value.tweaks, (item2) => {
-    const node = readNode(item2);
-    const change = readChange(item2);
+  const tweaks = readAll(value.tweaks, (item3) => {
+    const node = readNode(item3);
+    const change = readChange(item3);
     return node && change && { ...node, ...change };
   });
   const nodes = readAll(value.nodes, readNode);
@@ -181877,17 +182035,17 @@ function readWhiteboardSelectionMessage(value) {
     return null;
   const id3 = value.artifact.slice("whiteboard/".length);
   if (!value.artifact.startsWith("whiteboard/") || !isArtifactId(id3)) return null;
-  const optional3 = (item2, max) => typeof item2 === "string" ? item2.slice(0, max) : null;
+  const optional3 = (item3, max) => typeof item3 === "string" ? item3.slice(0, max) : null;
   const selected = [];
-  for (const item2 of value.selected) {
-    if (!object(item2) || !text2(item2.id, WHITEBOARD_SELECTION_LIMITS.id) || !item2.id || !text2(item2.type, WHITEBOARD_SELECTION_LIMITS.type))
+  for (const item3 of value.selected) {
+    if (!object(item3) || !text2(item3.id, WHITEBOARD_SELECTION_LIMITS.id) || !item3.id || !text2(item3.type, WHITEBOARD_SELECTION_LIMITS.type))
       return null;
     selected.push({
-      id: item2.id,
-      type: item2.type,
-      text: optional3(item2.text, WHITEBOARD_SELECTION_LIMITS.text),
-      frameId: optional3(item2.frameId, WHITEBOARD_SELECTION_LIMITS.id),
-      author: item2.author === "human" || item2.author === "agent" ? item2.author : null
+      id: item3.id,
+      type: item3.type,
+      text: optional3(item3.text, WHITEBOARD_SELECTION_LIMITS.text),
+      frameId: optional3(item3.frameId, WHITEBOARD_SELECTION_LIMITS.id),
+      author: item3.author === "human" || item3.author === "agent" ? item3.author : null
     });
   }
   const page = isPageId(value.page) ? { page: value.page } : {};
@@ -183494,6 +183652,7 @@ function createServerContext(options2) {
     project: import_node_path33.default.basename(import_node_path33.default.resolve(root, "../..")),
     address: (ref) => artifactPath(root, ref.type, ref.id).split("/").pop(),
     references: (ref) => referencesOf(root, `${ref.type}/${ref.id}`),
+    referrers: (ref) => referrersOf(root, `${ref.type}/${ref.id}`),
     port: () => ctx.port,
     inspect,
     onPublication: (key2, publication) => {
@@ -183986,7 +184145,7 @@ function summarize(scene, opts = {}) {
     if (element.type === "text" && element.containerId && typeof element.text === "string")
       labels.set(element.containerId, element.text);
   const frameOf = new Map(live3.map((element) => [element.id, element.frameId ?? null]));
-  const item2 = (element) => ({
+  const item3 = (element) => ({
     id: element.id,
     type: element.type,
     text: labels.get(element.id) ?? (typeof element.text === "string" ? element.text : null),
@@ -184000,9 +184159,9 @@ function summarize(scene, opts = {}) {
   const frames = live3.filter((element) => element.type === "frame" && (!opts.frame || element.id === opts.frame)).map((frame) => ({
     id: frame.id,
     name: typeof frame.name === "string" ? frame.name : frame.id,
-    items: shapes.filter((element) => element.frameId === frame.id).map(item2)
+    items: shapes.filter((element) => element.frameId === frame.id).map(item3)
   }));
-  const loose = opts.frame ? [] : shapes.filter((element) => !element.frameId).map(item2);
+  const loose = opts.frame ? [] : shapes.filter((element) => !element.frameId).map(item3);
   const inFrame = (id3) => id3 !== null && frameOf.get(id3) === opts.frame;
   const arrows = live3.filter((element) => LINE_TYPES3.has(element.type)).map((arrow) => ({
     arrow,
@@ -184021,7 +184180,7 @@ function summarize(scene, opts = {}) {
 }
 var oneLine2 = (text5) => text5.replaceAll(/\s*\n\s*/g, " / ");
 var credit = ({ author, editedBy }) => author ? ` \xB7 ${author}${editedBy ? `, ${editedBy} edited` : ""}` : "";
-var itemLine = (item2) => `  ${item2.id} ${item2.sticky ? "sticky" : item2.type}${item2.text ? ` "${oneLine2(item2.text)}"` : ""}${credit(item2)}`;
+var itemLine = (item3) => `  ${item3.id} ${item3.sticky ? "sticky" : item3.type}${item3.text ? ` "${oneLine2(item3.text)}"` : ""}${credit(item3)}`;
 function formatSummary(summary) {
   const lines = [];
   for (const frame of summary.frames) {
@@ -184480,7 +184639,7 @@ function readSelectedIds(file) {
   try {
     const parsed = JSON.parse(import_node_fs38.default.readFileSync(file, "utf8"));
     return (parsed.selected ?? []).flatMap(
-      (item2) => typeof item2.id === "string" ? [item2.id] : []
+      (item3) => typeof item3.id === "string" ? [item3.id] : []
     );
   } catch {
     return [];
@@ -184529,12 +184688,12 @@ var agentEventRoute = {
 
 // src/server/review-defaults.ts
 function actionable(section, rounds) {
-  if (section === "asks") return (item2) => item2.state === "submitted";
-  if (section === "rounds") return (item2) => item2.state === "open" || item2.state === "submitted";
+  if (section === "asks") return (item3) => item3.state === "submitted";
+  if (section === "rounds") return (item3) => item3.state === "open" || item3.state === "submitted";
   const submitted = new Set(
     rounds.filter((round) => round.state === "submitted").map((round) => round.id)
   );
-  return (item2) => item2.kind === "verify" ? item2.verdict === "reject" : submitted.has(item2.round);
+  return (item3) => item3.kind === "verify" ? item3.verdict === "reject" : submitted.has(item3.round);
 }
 
 // src/server/routes/agent-review.ts
@@ -184667,7 +184826,7 @@ async function serve(req, res, ctx, type, id3, operation) {
     if (body.op === "read" && !input.thread)
       throw new ReviewError("E_ARGUMENT_INVALID", "A thread ID is required.");
     if (body.sections !== void 0) {
-      if (body.op !== "list" || !Array.isArray(body.sections) || !body.sections.every((item2) => typeof item2 === "string"))
+      if (body.op !== "list" || !Array.isArray(body.sections) || !body.sections.every((item3) => typeof item3 === "string"))
         throw new ReviewError(
           "E_ARGUMENT_INVALID",
           "sections requires a list of collection names and op=list."
@@ -184915,9 +185074,9 @@ function documentDrawing(title, payload) {
       });
       y5 += rows.length * 22 + 10;
     } else if (type === "list") {
-      children(block.children).slice(0, 4).forEach((item2, i7) => {
+      children(block.children).slice(0, 4).forEach((item3, i7) => {
         parts.push(text4(104, y5, block.listType === "number" ? `${i7 + 1}.` : "\u2022"));
-        lines(nodeText(item2), 9, 2, 13);
+        lines(nodeText(item3), 9, 2, 13);
       });
       y5 += 8;
     } else if (type === "alert-quote") {