sync

${html}

\n \n \n \n\n```\n\n### File structure\n\n```\nfrontend/\n shell.ts — HTML wrapper (head, props injection, script tag)\n theme.ts — styled-components theme tokens, shared\n components/ — shared across pages (Card, Button, StatusText, Toast...)\n pages/\n landing/\n LandingPage.tsx — isomorphic component\n client.tsx — hydrateRoot entry\n dashboard/\n DashboardPage.tsx — isomorphic component\n client.tsx — hydrateRoot entry\n docs/\n DocPage.tsx — isomorphic component\n client.tsx — hydrateRoot entry\n authorize/\n AuthorizePage.tsx — OAuth sign-in/register + consent\n client.tsx — hydrateRoot entry\n manage/\n ManagePage.tsx — Vault, passkeys, recovery management\n client.tsx — hydrateRoot entry\n recover/\n RecoverPage.tsx — Recovery token → new passkey\n client.tsx — hydrateRoot entry\n```\n\n---\n\n## Domain Unification\n\n### Merging mcp/mcp.ts into main.ts\n\nThe MCP HTTP handler becomes a function imported by `main.ts`, not a separate entry point.\n\n```typescript\n// main.ts\nimport { handleMcpRequest } from \"./mcp/mcp.ts\";\n\n// In the route handler, before room routes:\nif (url.pathname.startsWith(\"/mcp\") ||\n url.pathname.startsWith(\"/oauth/\") ||\n url.pathname.startsWith(\"/webauthn/\") ||\n url.pathname.startsWith(\"/manage\") ||\n url.pathname.startsWith(\"/recover\") ||\n url.pathname.startsWith(\"/vault\") ||\n url.pathname.startsWith(\"/.well-known/oauth\")) {\n return handleMcpRequest(req);\n}\n```\n\n`mcp/mcp.ts` changes from `export default async function` to\n`export async function handleMcpRequest(req: Request): Promise`.\n\n### What changes for MCP clients\n\n- MCP server URL: `mcp.sync.parc.land` → `sync.parc.land` (or `sync.parc.land/mcp`)\n- OAuth discovery URLs: issuer changes to `https://sync.parc.land`\n- Claude.ai connector config needs updating\n- Existing tokens should survive (same DB, validation doesn't check issuer)\n\n### What stays the same\n\n- All API endpoints (paths unchanged)\n- SQLite database (shared, same as today)\n- WebAuthn RP ID (`parc.land` — domain-level, unaffected)\n- Token format and validation\n\n---\n\n## Route Map (after unification)\n\n| Path | Method | Handler | Page/Response |\n|------|--------|---------|---------------|\n| `/` | GET | main.ts | SSR LandingPage |\n| `/?room=X` | GET | main.ts | SSR DashboardPage |\n| `/?doc=X` | GET | main.ts | SSR DocPage |\n| `/manage` | GET | main.ts → mcp | SSR ManagePage |\n| `/recover` | GET | main.ts → mcp | SSR RecoverPage |\n| `/oauth/authorize` | GET | main.ts → mcp | SSR AuthorizePage |\n| `/mcp` | POST | main.ts → mcp | MCP JSON-RPC |\n| `/oauth/*` | POST | main.ts → mcp | OAuth API |\n| `/webauthn/*` | POST | main.ts → mcp | WebAuthn API |\n| `/manage/api/*` | * | main.ts → mcp | Management API |\n| `/recover/*` | POST | main.ts → mcp | Recovery API |\n| `/vault` | * | main.ts → mcp | Vault API |\n| `/.well-known/*` | GET | main.ts → mcp | OAuth discovery |\n| `/rooms/*` | * | main.ts | Room API |\n| `/frontend/*` | GET | main.ts | Module proxy (esm.town) |\n| `/reference/*` | GET | main.ts | Reference docs |\n\n---\n\n## Design System\n\n### Unified theme\n\nAdopt the sync dashboard palette as the single source of truth. The MCP pages'\nslightly different dark theme (#0a0a0f vs #0d1117, #4a4aff vs #58a6ff) converges\nto the dashboard variables.\n\n```typescript\n// frontend/theme.ts\nexport const theme = {\n bg: '#0d1117',\n fg: '#c9d1d9',\n dim: '#484f58',\n border: '#21262d',\n accent: '#58a6ff',\n green: '#3fb950',\n yellow: '#d29922',\n red: '#f85149',\n surface: '#161b22',\n surface2: '#1c2129',\n purple: '#bc8cff',\n orange: '#f0883e',\n // Landing/docs (light default, dark media query)\n landing: { ... },\n};\n```\n\n### Shared components\n\n```\nfrontend/components/\n Card.tsx — Surface container\n Button.tsx — Primary, secondary variants\n StatusText.tsx — Status/error messages\n Toast.tsx — Toast notifications\n TokenBadge.tsx — Token type badges (room/agent/view)\n PasskeyChip.tsx — Passkey credential display\n VaultTable.tsx — Token vault table with actions\n```\n\n---\n\n## WebAuthn\n\n### ESM import (replaces UMD script tag)\n\n```typescript\nimport {\n startRegistration,\n startAuthentication,\n} from \"https://esm.sh/@simplewebauthn/browser@13\";\n```\n\nThis is client-only — used in hydration scripts, not in SSR.\n\n### Shared hook\n\n```typescript\n// frontend/hooks/useWebAuthn.ts\nexport function useWebAuthn(origin: string) {\n const [status, setStatus] = useState(\"\");\n const [error, setError] = useState(\"\");\n // signIn(): Promise — returns sessionId\n // register(username): Promise<{ sessionId } | null>\n return { signIn, register, status, error, setError };\n}\n```\n\n### Progressive enhancement\n\nWebAuthn requires JS (browser API). Forms that don't need WebAuthn can work\nwithout JS via `

`. The server handles the POST,\nre-renders the page with updated state.\n\nPages that require WebAuthn (all three MCP pages):\n- Server renders the initial state (sign-in form, token input, etc.)\n- Client hydration adds the WebAuthn interaction\n- Without JS: page renders but WebAuthn buttons are inert (acceptable — passkeys\n require JS anyway)\n\n---\n\n## Implementation Sequence\n\n### Phase 1: Infrastructure\n\n1. Create `frontend/shell.ts` — SSR HTML wrapper\n2. Create `frontend/theme.ts` — shared design tokens\n3. Create `frontend/components/` shared components\n4. Verify `styled-components` ServerStyleSheet works in Val.town Deno runtime\n\n### Phase 2: Migrate existing pages to SSR\n\n5. Convert LandingPage to SSR + hydration (replaces SPA)\n6. Convert DashboardPage to SSR + hydration\n7. Convert DocPage to SSR + hydration\n8. Remove React Router dependency\n9. Update main.ts to SSR each page\n\n### Phase 3: Domain unification\n\n10. Convert `mcp/mcp.ts` from default export to named export\n11. Import handleMcpRequest in main.ts, add route delegation\n12. Test all MCP endpoints work on sync.parc.land\n13. Update OAuth discovery metadata (issuer URL)\n\n### Phase 4: MCP auth pages as React SSR\n\n14. Create RecoverPage.tsx (simplest — proof of pattern)\n15. Create ManagePage.tsx (medium complexity)\n16. Create AuthorizePage.tsx (most complex — OAuth flow critical path)\n17. Create client.tsx hydration entries for each\n18. Create useWebAuthn hook\n19. Add authorize params validation endpoint (`GET /oauth/authorize/params`)\n\n### Phase 5: Cleanup\n\n20. Delete inline HTML templates from mcp/auth.ts (~600 lines)\n21. Delete CSS constant\n22. Delete escapeHtml function\n23. Remove mcp/mcp.ts as HTTP entry point (becomes plain module)\n24. Update MCP client configs (Claude.ai connector)\n25. Test OAuth flow end-to-end\n\n---\n\n## Risks & Mitigations\n\n| Risk | Severity | Mitigation |\n|------|----------|------------|\n| styled-components ServerStyleSheet fails in Deno | High | Test early in Phase 1. Fallback: inline `\n\n\n

\n\n\n`;\n\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\", \"Cache-Control\": \"no-cache, no-store\" },\n });\n}\n",[],[335,650],{"_105":658,"_97":659,"_166":660,"_168":336,"_169":149,"_170":122,"_171":172,"_107":661,"_102":33,"_174":186,"_176":662,"_177":22,"_178":-5,"_179":663,"_101":664},"ca6d97ae-1f92-11f1-943c-42dde27851f2","index.html","019cebf2-a8a6-7120-b163-6c1901e10f17",["D",1773485074605],"\n\n\n\n\nsync — Multi-Agent Coordination for AI Workflows\n\n\n\n\n

\n\n\n\n",[],[335,659],{"_105":666,"_97":667,"_166":668,"_168":336,"_169":149,"_170":122,"_171":172,"_107":669,"_102":33,"_174":356,"_176":670,"_177":22,"_178":-5,"_179":671,"_101":672},"ca6da078-1f92-11f1-943c-42dde27851f2","markdown.ts","019cebf2-a8a6-7120-b163-724dc5812d7b",["D",1773485074605],"/**\n * Shared markdown → HTML utility. Works in both Deno (server-side) and browser.\n *\n * Uses npm:marked so it can be imported at the top level in pages.tsx for SSR,\n * eliminating the CDN marked script and the client-side \"wait for marked\" dance.\n */\nimport { marked } from \"npm:marked@12\";\nimport { processMermaidBlocks } from \"./mermaid.ts\";\n\nfunction rewriteDocLinks(html: string): string {\n return html.replace(\n /href=\"([^\"]*)\"/g,\n (_match: string, href: string) => {\n // Already a full URL, anchor, or already a /docs/ link — leave alone\n if (href.startsWith(\"http\") || href.startsWith(\"#\") || href.startsWith(\"/docs/\")) return `href=\"${href}\"`;\n // Legacy /?doc=filename.md links in source content\n if (href.startsWith(\"/?doc=\")) {\n const slug = href.replace(\"/?doc=\", \"\").replace(/\\.md$/, \"\");\n return `href=\"/docs/${slug}\"`;\n }\n // Bare .md filename or relative path ending in .md → /docs/slug\n if (href.endsWith(\".md\")) {\n const slug = href.split(\"/\").pop()!.replace(/\\.md$/, \"\");\n return `href=\"/docs/${slug}\"`;\n }\n return `href=\"${href}\"`;\n },\n );\n}\n\nexport function mdToHtml(md: string): string {\n if (!md) return \"\";\n try {\n const html = marked.parse(md, { gfm: true }) as string;\n return rewriteDocLinks(processMermaidBlocks(html));\n } catch {\n return \"\";\n }\n}\n",[],[335,667],{"_105":674,"_97":675,"_166":676,"_168":336,"_169":149,"_170":122,"_171":172,"_107":677,"_102":33,"_174":356,"_176":678,"_177":22,"_178":-5,"_179":679,"_101":680},"ca6daa14-1f92-11f1-943c-42dde27851f2","mermaid.ts","019cebf2-a8a6-7120-b163-7430e22a516c",["D",1773485074605],"/** Shared mermaid utilities for DocViewer and Landing */\n\nlet _initialized = false;\nlet _mermaid: any = null;\n\nasync function getMermaid(): Promise {\n if (_mermaid) return _mermaid;\n // @ts-ignore — dynamic CDN import\n const mod = await import(\"https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs\");\n _mermaid = mod.default;\n return _mermaid;\n}\n\n/**\n * Call after dangerouslySetInnerHTML renders. Finds .mermaid divs and renders them.\n */\nexport async function runMermaid(): Promise {\n try {\n const m = await getMermaid();\n if (!_initialized) {\n m.initialize({ startOnLoad: false });\n _initialized = true;\n }\n await m.run({ querySelector: \".mermaid\", suppressErrors: true });\n } catch (_e) {\n // silent — mermaid failure shouldn't break the page\n }\n}\n\n/**\n * Rewrite marked's `

…

`\n * into `

…

` so mermaid.run() picks them up.\n */\nexport function processMermaidBlocks(html: string): string {\n return html.replace(\n /

([\\s\\S]*?)<\\/code><\\/pre>/g,\n    '$1
',\n  );\n}\n",[],[335,675],{"_105":682,"_97":683,"_166":684,"_168":336,"_169":149,"_170":685,"_171":172,"_107":686,"_102":687,"_174":356,"_176":688,"_177":22,"_178":-5,"_179":689,"_101":690},"a8ce8da4-2002-11f1-b980-42dde27851f2","pages.tsx","019cebf2-a8a6-7120-b163-78a3961d2503",158,["D",1773533121922],6,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\n/** Page renderers for main.ts — SSR each page to a Response. */\nimport { renderPage } from \"./ssr.ts\";\nimport { Landing, parseLandingMd } from \"./components/Landing.tsx\";\nimport { Dashboard } from \"./components/Dashboard.tsx\";\nimport { DocPage, DocsIndex } from \"./components/DocViewer.tsx\";\nimport { Overview } from \"./components/Overview.tsx\";\nimport { mdToHtml } from \"./markdown.ts\";\n\n// Derive ESM base URL from import.meta.url — branch-aware on val.town\n// e.g. https://esm.town/v/c15r/sync@153-v8/frontend/pages.tsx → https://esm.town/v/c15r/sync@153-v8\nconst ESM_BASE = (() => {\n  const u = import.meta.url;\n  // Strip /frontend/pages.tsx (or similar trailing path)\n  const match = u.match(/^(https:\\/\\/esm\\.town\\/v\\/[^/]+\\/[^/]+)/);\n  return match ? match[1] : \"https://esm.town/v/c15r/sync\";\n})();\n\nconst LANDING_MD_URL = new URL(\"../reference/landing.md\", import.meta.url);\nconst LANDING_RAW = await fetch(LANDING_MD_URL).then(r => r.text()).catch(() => \"\");\n\nexport function renderLandingPage(): Response {\n  const data = parseLandingMd(LANDING_RAW, mdToHtml);\n  return renderPage({\n    element: ,\n    entry: `${ESM_BASE}/frontend/pages/landing/client.tsx`,\n    props: { data },\n    title: \"sync — Multi-Agent Coordination for AI Workflows\",\n  });\n}\n\nexport function renderDashboardPage(roomId: string): Response {\n  return renderPage({\n    element: ,\n    entry: `${ESM_BASE}/frontend/pages/dashboard/client.tsx`,\n    props: { roomId },\n    title: `${roomId} — sync dashboard`,\n    // v8: Load marked.js for prose rendering and mermaid.js for diagram rendering.\n    // Surfaces.tsx renderMarkdown() checks for globalThis.marked — this makes it work.\n    headScripts: ``,\n  });\n}\n\n/** Render a single doc page — markdown is already converted to HTML server-side. */\nexport function renderDocPage(slug: string, title: string, html: string, rawPath?: string): Response {\n  return renderPage({\n    element: ,\n    entry: `${ESM_BASE}/frontend/pages/docs/client.tsx`,\n    props: { slug, title, html, rawPath },\n    title: `${title} — sync docs`,\n  });\n}\n\n/** Render the docs index page listing all available docs. */\nexport function renderDocsIndex(docs: Array<{ slug: string; title: string; category: string }>): Response {\n  return renderPage({\n    element: ,\n    entry: `${ESM_BASE}/frontend/pages/docs/client.tsx`,\n    props: { docs },\n    title: \"Documentation — sync\",\n  });\n}\n\n/** Render the overview / vision & architecture page. */\nexport function renderOverviewPage(): Response {\n  return renderPage({\n    element: ,\n    entry: `${ESM_BASE}/frontend/pages/overview/client.tsx`,\n    props: {},\n    title: \"Vision & Architecture — sync\",\n    headScripts: ``,\n  });\n}\n",[],[335,683],{"_105":692,"_97":693,"_166":694,"_168":336,"_169":149,"_170":122,"_171":172,"_107":695,"_102":33,"_174":356,"_176":696,"_177":22,"_178":-5,"_179":697,"_101":698},"ca6dc2a6-1f92-11f1-943c-42dde27851f2","renderInference.ts","019cebf2-a8a6-7120-b163-7eb871591c28",["D",1773485074605],"/**\n * Pure value-shape → surface type inference.\n * No side effects, no imports from React or the DOM.\n *\n * Used by the dashboard to decide how to auto-surface a view that has\n * no explicit render.type, and to drive ArrayTableSurface's column logic.\n */\n\nimport type { RenderHintColumn } from \"./types.ts\";\n\n// ── Result types ──────────────────────────────────────────────────────────────\n\nexport type SurfaceHint =\n  | { type: \"metric\" }\n  | { type: \"markdown\" }\n  | { type: \"array-table\"; homogeneous: boolean; columns: string[] }\n  | { type: \"object-table\"; keys: string[] }\n  | { type: \"json\" }\n  | { type: \"error\"; message: string };\n\n// ── Column inference ──────────────────────────────────────────────────────────\n\nconst SAMPLE_SIZE = 5;\n\n/** Returns the sorted key list from an object, or null if not an object. */\nfunction objectKeys(item: any): string[] | null {\n  if (item === null || typeof item !== \"object\" || Array.isArray(item)) return null;\n  return Object.keys(item);\n}\n\n/**\n * Inspect a homogeneity sample from an array.\n * Returns:\n *   { homogeneous: true, columns: [...] }  — all sampled items share the same keys\n *   { homogeneous: false, columns: [] }    — heterogeneous; fallback to json\n *\n * Arrays of scalars are treated as homogeneous with a single synthetic column \"value\".\n */\nexport function inferArrayColumns(arr: any[]): { homogeneous: boolean; columns: string[] } {\n  if (arr.length === 0) return { homogeneous: true, columns: [] };\n\n  const sample = arr.slice(0, SAMPLE_SIZE);\n\n  // All scalars?\n  const allScalar = sample.every(\n    item => item === null || typeof item !== \"object\"\n  );\n  if (allScalar) return { homogeneous: true, columns: [\"value\"] };\n\n  // All objects?\n  const keySets = sample.map(objectKeys);\n  if (keySets.some(k => k === null)) {\n    // Mixed scalars and objects — heterogeneous\n    return { homogeneous: false, columns: [] };\n  }\n\n  // Compare key sets — allow at most 1 key difference across the sample\n  const allKeys = keySets as string[][];\n  const baseKeys = allKeys[0];\n  const baseSorted = [...baseKeys].sort().join(\",\");\n\n  for (const keys of allKeys.slice(1)) {\n    const sorted = [...keys].sort().join(\",\");\n    if (sorted !== baseSorted) {\n      // Count differences\n      const baseSet = new Set(baseKeys);\n      const otherSet = new Set(keys);\n      const added = keys.filter(k => !baseSet.has(k));\n      const removed = baseKeys.filter(k => !otherSet.has(k));\n      if (added.length + removed.length > 1) {\n        return { homogeneous: false, columns: [] };\n      }\n    }\n  }\n\n  // Union of all keys in sample order (first item's order wins for stable display)\n  const seen = new Set();\n  const columns: string[] = [];\n  for (const keys of allKeys) {\n    for (const k of keys) {\n      if (!seen.has(k)) { seen.add(k); columns.push(k); }\n    }\n  }\n\n  return { homogeneous: true, columns };\n}\n\n// ── Top-level inference ───────────────────────────────────────────────────────\n\nconst MARKDOWN_PATTERN = /^#{1,3} |^\\*\\*|^- |\\n#{1,3} |\\n\\*\\*|\\n- |`{1,3}/;\n\nexport function inferSurfaceType(value: any): SurfaceHint {\n  // Error sentinel\n  if (value && typeof value === \"object\" && \"_error\" in value) {\n    return { type: \"error\", message: String(value._error) };\n  }\n\n  // Null / undefined → metric (shows \"—\")\n  if (value === null || value === undefined) return { type: \"metric\" };\n\n  // Scalars\n  if (typeof value === \"number\" || typeof value === \"boolean\") return { type: \"metric\" };\n\n  if (typeof value === \"string\") {\n    // Long string or contains markdown → markdown\n    if (value.length > 120 || value.includes(\"\\n\") || MARKDOWN_PATTERN.test(value)) {\n      return { type: \"markdown\" };\n    }\n    return { type: \"metric\" };\n  }\n\n  // Array\n  if (Array.isArray(value)) {\n    const { homogeneous, columns } = inferArrayColumns(value);\n    return { type: \"array-table\", homogeneous, columns };\n  }\n\n  // Object\n  if (typeof value === \"object\") {\n    const keys = Object.keys(value);\n    // Object with all scalar leaf values → property panel (object-table)\n    const allScalarLeaves = keys.every(k => {\n      const v = value[k];\n      return v === null || typeof v !== \"object\";\n    });\n    if (allScalarLeaves && keys.length > 0) {\n      return { type: \"object-table\", keys };\n    }\n    return { type: \"json\" };\n  }\n\n  return { type: \"json\" };\n}\n\n// ── Column resolution (merge inferred + explicit render.columns) ──────────────\n\nexport interface ResolvedColumn {\n  key: string;\n  label: string;\n  width?: string;\n  truncate: number;\n}\n\nexport function resolveColumns(\n  inferredColumns: string[],\n  renderColumns?: RenderHintColumn[] | null,\n): ResolvedColumn[] {\n  if (renderColumns && renderColumns.length > 0) {\n    return renderColumns.map(c => ({\n      key: c.key,\n      label: c.label ?? c.key,\n      width: c.width,\n      truncate: c.truncate ?? 80,\n    }));\n  }\n  return inferredColumns.map(k => ({\n    key: k,\n    label: k,\n    truncate: 80,\n  }));\n}\n",[],[335,693],{"_105":700,"_97":701,"_166":702,"_168":336,"_169":149,"_170":703,"_171":172,"_107":704,"_102":705,"_174":356,"_176":706,"_177":22,"_178":-5,"_179":707,"_101":708},"903a4756-2002-11f1-a402-42dde27851f2","shell.ts","019cebf2-a8a6-7120-b163-813670e6bc95",153,["D",1773533080681],2,"/** SSR HTML shell — wraps rendered React + extracted styled-components CSS.\n *\n * Each page calls shell() with:\n *   html  — renderToString output\n *   css   — ServerStyleSheet.getStyleTags() output\n *   props — serializable data passed to client for hydration\n *   entry — path to the page's client.tsx hydration script\n *   title — page \n *   meta  — optional extra <meta> tags\n */\n\nexport interface ShellOptions {\n  html: string;\n  css: string;\n  props?: Record<string, unknown>;\n  entry: string;\n  title?: string;\n  meta?: string;\n  /** Additional <script> tags to include in <head> (e.g. UMD bundles) */\n  headScripts?: string;\n}\n\nexport function shell(opts: ShellOptions): string {\n  const {\n    html,\n    css,\n    props = {},\n    entry,\n    title = \"sync — Multi-Agent Coordination\",\n    meta = \"\",\n    headScripts = \"\",\n  } = opts;\n\n  // Escape JSON for safe embedding in <script type=\"application/json\">\n  const serializedProps = JSON.stringify(props)\n    .replace(/</g, \"\\\\u003c\")\n    .replace(/>/g, \"\\\\u003e\")\n    .replace(/&/g, \"\\\\u0026\");\n\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>${escapeHtml(title)}\n\n\n${meta}\n\n\n${css}\n${headScripts}\n\n\n\n\n${html}
\n\n
\n\n\n`;\n}\n\nfunction escapeHtml(str: string): string {\n  return str\n    .replace(/&/g, \"&\")\n    .replace(//g, \">\")\n    .replace(/\"/g, \""\");\n}",[],[335,701],{"_105":710,"_97":711,"_166":712,"_168":336,"_169":149,"_170":122,"_171":172,"_107":713,"_102":33,"_174":356,"_176":714,"_177":22,"_178":-5,"_179":715,"_101":716},"ca6df6a4-1f92-11f1-943c-42dde27851f2","ssr.ts","019cebf2-a8a6-7120-b163-8722c8933b37",["D",1773485074605],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\n/** Server-side rendering utility.\n *\n * Renders a React component to HTML string with styled-components CSS extraction.\n * Used by route handlers in main.ts / mcp/auth.ts to produce complete HTML pages.\n */\nimport { renderToString } from \"https://esm.sh/react-dom@18.2.0/server\";\nimport { ServerStyleSheet } from \"https://esm.sh/styled-components@6?deps=react@18.2.0,react-dom@18.2.0\";\nimport type { ReactElement } from \"https://esm.sh/react@18.2.0\";\nimport { shell, type ShellOptions } from \"./shell.ts\";\n\nexport interface RenderPageOptions {\n  /** The React element to render */\n  element: ReactElement;\n  /** Path to the client hydration script (e.g. \"/frontend/pages/recover/client.tsx\") */\n  entry: string;\n  /** Props to serialize for client hydration */\n  props?: Record;\n  /** Page title */\n  title?: string;\n  /** Additional  scripts (e.g. WebAuthn UMD) */\n  headScripts?: string;\n  /** HTTP status code (default 200) */\n  status?: number;\n}\n\n/** Render a React page to a full HTML Response with SSR + styled-components CSS. */\nexport function renderPage(opts: RenderPageOptions): Response {\n  const {\n    element,\n    entry,\n    props = {},\n    title,\n    headScripts,\n    status = 200,\n  } = opts;\n\n  let htmlBody: string;\n  let css: string;\n\n  const sheet = new ServerStyleSheet();\n  try {\n    htmlBody = renderToString(sheet.collectStyles(element));\n    css = sheet.getStyleTags();\n  } catch (err) {\n    // Fallback: render without styled-components if SSR fails\n    console.error(\"SSR styled-components error, falling back:\", err);\n    htmlBody = renderToString(element);\n    css = \"\";\n  } finally {\n    sheet.seal();\n  }\n\n  const fullHtml = shell({\n    html: htmlBody,\n    css,\n    props,\n    entry,\n    title,\n    headScripts,\n  });\n\n  return new Response(fullHtml, {\n    status,\n    headers: {\n      \"Content-Type\": \"text/html; charset=utf-8\",\n      \"Cache-Control\": \"no-cache, no-store, must-revalidate\",\n    },\n  });\n}\n",[],[335,711],{"_105":718,"_97":719,"_166":720,"_168":336,"_169":149,"_170":122,"_171":172,"_107":721,"_102":33,"_174":356,"_176":722,"_177":22,"_178":-5,"_179":723,"_101":724},"ca6e02fc-1f92-11f1-943c-42dde27851f2","styled.ts","019cebf2-a8a6-7120-b163-8854d3cf848c",["D",1773485074605],"export { default as styled, css, keyframes, createGlobalStyle } from \"https://esm.sh/styled-components@6?deps=react@18.2.0,react-dom@18.2.0\";\n",[],[335,719],{"_105":726,"_97":727,"_166":728,"_168":336,"_169":149,"_170":122,"_171":172,"_107":729,"_102":33,"_174":356,"_176":730,"_177":22,"_178":-5,"_179":731,"_101":732},"ca6e0554-1f92-11f1-943c-42dde27851f2","theme.ts","019cebf2-a8a6-7120-b163-8e82e3fcdbc1",["D",1773485074605],"/** Shared design tokens for styled-components.\n *\n * These match the CSS custom properties in shell.ts :root.\n * Use in styled-components via ${({ theme }) => theme.bg} or import directly.\n *\n * Note: the dashboard uses a dark theme always. Landing/docs pages use\n * the \"landing\" subset which is light-default with dark media query.\n * The MCP auth pages use the dark dashboard theme.\n */\n\nexport const theme = {\n  // Core dark palette (dashboard + MCP pages)\n  bg: \"#0d1117\",\n  fg: \"#c9d1d9\",\n  dim: \"#484f58\",\n  border: \"#21262d\",\n  accent: \"#58a6ff\",\n  green: \"#3fb950\",\n  yellow: \"#d29922\",\n  red: \"#f85149\",\n  surface: \"#161b22\",\n  surface2: \"#1c2129\",\n  purple: \"#bc8cff\",\n  orange: \"#f0883e\",\n\n  // Typography\n  fontFamily:\n    '-apple-system, BlinkMacSystemFont, \"Segoe UI\", system-ui, sans-serif',\n  monoFamily: '\"SF Mono\", \"Fira Code\", \"Cascadia Code\", monospace',\n\n  // Spacing\n  radius: \"8px\",\n  radiusSm: \"4px\",\n  radiusLg: \"12px\",\n} as const;\n\nexport type Theme = typeof theme;\n",[],[335,727],{"_105":734,"_97":735,"_166":736,"_168":336,"_169":149,"_170":737,"_171":172,"_107":738,"_102":483,"_174":356,"_176":739,"_177":22,"_178":-5,"_179":740,"_101":741},"0dac41b8-1fb7-11f1-b065-42dde27851f2","types.ts","019cebf2-a8a6-7120-b163-913bca9a56e1",93,["D",1773500649395],"// ── v8 types: state is the single source ────────────────────────────────────\n\n/** A single entry in the state table. Every entity lives here. */\nexport interface StateEntry {\n  scope: string;\n  key: string;\n  sort_key: number | null;\n  value: any;\n  revision: number;\n  updated_at: string;\n}\n\n/** Action definition (value of _actions.{id} state entry) */\nexport interface ActionDef {\n  description?: string;\n  if?: string;\n  enabled?: string;\n  result?: string;\n  writes: any[];\n  params?: Record;\n  scope: string;\n  registered_by?: string;\n  timer?: any;\n  on_invoke?: any;\n}\n\n/** View definition (value of _views.{id} state entry) */\nexport interface ViewDef {\n  expr: string;\n  description?: string;\n  enabled?: string;\n  render?: RenderHint | null;\n  scope: string;\n  registered_by?: string;\n  timer?: any;\n  deps?: any[];\n}\n\n/** Agent presence (value of _agents.{id} state entry) */\nexport interface AgentDef {\n  name: string;\n  role: string;\n  status: string;\n  grants: string[];\n  last_heartbeat?: string;\n  joined_at?: string;\n}\n\n/** Salience entry in poll response */\nexport interface SalienceEntry {\n  key: string;\n  score: number;\n  signals: string[];\n}\n\n/** Audit entry */\nexport interface AuditEntry {\n  seq: number;\n  value: any;\n  updated_at: string;\n}\n\n/** The v8 poll response. State is the single data source. */\nexport interface PollDataV8 {\n  state: StateEntry[];\n  resolved: Record;\n  available: Record;\n  audit: AuditEntry[];\n  salience?: SalienceEntry[];\n}\n\n/** Helper: extract entries for a specific scope */\nexport function scopeEntries(poll: PollDataV8, scope: string): StateEntry[] {\n  return poll.state.filter(s => s.scope === scope);\n}\n\n/** Helper: get all unique scopes in the state */\nexport function allScopes(poll: PollDataV8): string[] {\n  const s = new Set(poll.state.map(e => e.scope));\n  return [...s].sort();\n}\n\n/** Helper: extract action defs with availability */\nexport function actionsFromState(poll: PollDataV8): Array<{ id: string; def: ActionDef; available: boolean }> {\n  return scopeEntries(poll, \"_actions\").map(e => ({\n    id: e.key,\n    def: e.value as ActionDef,\n    available: poll.available[e.key] ?? true,\n  }));\n}\n\n/** Helper: extract view defs with resolved values */\nexport function viewsFromState(poll: PollDataV8): Array<{ id: string; def: ViewDef; value: any }> {\n  return scopeEntries(poll, \"_views\").map(e => ({\n    id: e.key,\n    def: e.value as ViewDef,\n    value: poll.resolved[e.key],\n  }));\n}\n\n/** Helper: extract agents */\nexport function agentsFromState(poll: PollDataV8): Array<{ id: string; def: AgentDef }> {\n  return scopeEntries(poll, \"_agents\").map(e => ({\n    id: e.key,\n    def: e.value as AgentDef,\n  }));\n}\n\n/** Helper: extract messages (sorted by sort_key) */\nexport function messagesFromState(poll: PollDataV8): StateEntry[] {\n  return scopeEntries(poll, \"_messages\").sort((a, b) => (a.sort_key ?? 0) - (b.sort_key ?? 0));\n}\n\n/** Helper: extract shared state */\nexport function sharedState(poll: PollDataV8): StateEntry[] {\n  return scopeEntries(poll, \"_shared\");\n}\n\n// ── Legacy types (used by panel components + replay normalizers) ────────────\n\nexport interface Agent {\n  id: string;\n  name: string;\n  role: string;\n  status: string;\n  last_heartbeat: string;\n  waiting_on?: string;\n  grants: string;\n  joined_at: string;\n}\n\nexport interface StateRow {\n  room_id: string;\n  scope: string;\n  key: string;\n  value: any;\n  version: number;\n  sort_key?: number;\n  updated_at: string;\n  timer_effect?: string;\n  timer_expires_at?: string;\n  timer_ticks_left?: number;\n  enabled_expr?: string;\n}\n\nexport interface RawMessage {\n  sort_key: number;\n  value: any;\n  updated_at: string;\n}\n\nexport interface Action {\n  id: string;\n  room_id: string;\n  scope: string;\n  description?: string;\n  if?: string;\n  available: boolean;\n  params?: Record;\n  writes?: any[];\n  version: number;\n  registered_by?: string;\n}\n\nexport interface RenderHintColumn {\n  key: string;\n  label?: string;\n  width?: string;\n  truncate?: number;\n}\n\nexport interface RenderHint {\n  type: \"metric\" | \"markdown\" | \"array-table\" | \"view-table\" | \"json\";\n  label?: string;\n  order?: number;\n  group?: string;\n  // metric-specific\n  unit?: string;\n  color?: \"default\" | \"green\" | \"red\" | \"yellow\";\n  // array-table-specific\n  columns?: RenderHintColumn[];\n  max_rows?: number;\n  layout?: \"table\" | \"event-log\";\n}\n\nexport interface View {\n  id: string;\n  room_id: string;\n  scope: string;\n  description?: string;\n  expr: string;\n  value: any;\n  version: number;\n  registered_by?: string;\n  render?: RenderHint | null;\n}\n\nexport interface AuditRow {\n  sort_key: number;\n  value: any;\n  updated_at: string;\n}\n\nexport type TokenKind = \"room\" | \"view\" | \"agent\";\n\n// ── Surface types ───────────────────────────────────────────────────────────\n\nexport interface SurfaceMetric {\n  id: string;\n  type: \"metric\";\n  view: string;\n  label?: string;\n  enabled?: string;\n}\n\nexport interface SurfaceViewGrid {\n  id: string;\n  type: \"view-grid\";\n  views: string[];\n  label?: string;\n  enabled?: string;\n}\n\nexport interface SurfaceViewTable {\n  id: string;\n  type: \"view-table\";\n  views: string[];\n  label?: string;\n  enabled?: string;\n}\n\nexport interface SurfaceActionBar {\n  id: string;\n  type: \"action-bar\";\n  actions: string[];\n  label?: string;\n  enabled?: string;\n}\n\nexport interface SurfaceActionForm {\n  id: string;\n  type: \"action-form\";\n  action: string;\n  label?: string;\n  enabled?: string;\n}\n\nexport interface SurfaceActionChoice {\n  id: string;\n  type: \"action-choice\";\n  actions: string[];\n  label?: string;\n  enabled?: string;\n}\n\nexport interface SurfaceFeed {\n  id: string;\n  type: \"feed\";\n  kinds?: string[];\n  compose?: boolean;\n  label?: string;\n  enabled?: string;\n}\n\nexport interface SurfaceWatch {\n  id: string;\n  type: \"watch\";\n  keys: { scope: string; key: string }[];\n  label?: string;\n  enabled?: string;\n}\n\nexport interface SurfaceSection {\n  id: string;\n  type: \"section\";\n  label?: string;\n  enabled?: string;\n  surfaces: Surface[];\n}\n\nexport interface SurfaceMarkdown {\n  id: string;\n  type: \"markdown\";\n  view: string;\n  label?: string;\n  enabled?: string;\n}\n\nexport interface SurfaceArrayTable {\n  id: string;\n  type: \"array-table\";\n  view: string;\n  label?: string;\n  enabled?: string;\n  columns?: RenderHintColumn[];\n  max_rows?: number;\n}\n\nexport type Surface =\n  | SurfaceMetric\n  | SurfaceViewGrid\n  | SurfaceViewTable\n  | SurfaceArrayTable\n  | SurfaceActionBar\n  | SurfaceActionForm\n  | SurfaceActionChoice\n  | SurfaceFeed\n  | SurfaceWatch\n  | SurfaceSection\n  | SurfaceMarkdown;\n\n// ── Dashboard config ────────────────────────────────────────────────────────\n\nexport interface DashboardConfig {\n  title?: string;\n  subtitle?: string;\n  default_tab?: string;\n  tabs?: string[];\n  pinned_views?: string[];\n  hero?: string | null;\n  surfaces?: Surface[];\n  hide_debug?: boolean;\n}\n",[],[335,735],{"_105":743,"_97":744,"_166":745,"_168":336,"_169":149,"_170":122,"_171":172,"_107":746,"_102":33,"_174":356,"_176":747,"_177":22,"_178":-5,"_179":748,"_101":749},"ca6e2016-1f92-11f1-943c-42dde27851f2","utils.ts","019cebf2-a8a6-7120-b163-94e5ad9ed7ef",["D",1773485074605],"import type { Agent } from \"./types.ts\";\n\nexport function esc(s: any): string {\n  if (s == null) return \"\";\n  return String(s)\n    .replace(/&/g, \"&\")\n    .replace(//g, \">\")\n    .replace(/\"/g, \""\");\n}\n\nexport function rel(ts: string | null | undefined): string {\n  if (!ts) return \"\";\n  const d = new Date(ts.replace(\" \", \"T\") + (ts.includes(\"Z\") || ts.includes(\"+\") ? \"\" : \"Z\"));\n  const s = Math.floor((Date.now() - d.getTime()) / 1000);\n  if (s < 5) return \"now\";\n  if (s < 60) return s + \"s\";\n  const m = Math.floor(s / 60);\n  if (m < 60) return m + \"m\";\n  const h = Math.floor(m / 60);\n  if (h < 24) return h + \"h\";\n  return Math.floor(h / 24) + \"d\";\n}\n\nexport function hbc(ts: string | null | undefined): \"stale\" | \"dead\" | \"\" {\n  if (!ts) return \"dead\";\n  const d = new Date(ts.replace(\" \", \"T\") + (ts.includes(\"Z\") || ts.includes(\"+\") ? \"\" : \"Z\"));\n  const m = (Date.now() - d.getTime()) / 60000;\n  if (m < 2) return \"\";\n  if (m < 10) return \"stale\";\n  return \"dead\";\n}\n\nexport function aname(id: string | null | undefined, agentMap: Record): string {\n  if (!id) return \"system\";\n  const a = agentMap[id];\n  return a ? a.name : id.length > 12 ? id.slice(0, 8) + \"…\" : id;\n}\n\nexport function tryParseJson(s: any): any {\n  if (typeof s !== \"string\") return s;\n  try { return JSON.parse(s); } catch { return s; }\n}\n\n\n/** Relative time from a fixed epoch (e.g. replay start). Returns \"+0s\", \"+14s\", \"+2m\", etc. */\nexport function relTo(ts: string | null | undefined, epochMs: number): string {\n  if (!ts) return \"\";\n  const d = new Date(ts.replace(\" \", \"T\") + (ts.includes(\"Z\") || ts.includes(\"+\") ? \"\" : \"Z\"));\n  const ms = d.getTime() - epochMs;\n  if (ms < 0) return \"+0s\";\n  const s = Math.floor(ms / 1000);\n  if (s < 5) return \"+0s\";\n  if (s < 60) return `+${s}s`;\n  const m = Math.floor(s / 60);\n  if (m < 60) return `+${m}m`;\n  const h = Math.floor(m / 60);\n  if (h < 24) return `+${h}h`;\n  return `+${Math.floor(h / 24)}d`;\n}\n\n/** Heartbeat class relative to a replay playhead rather than Date.now(). */\nexport function hbcAt(ts: string | null | undefined, playheadMs: number): \"stale\" | \"dead\" | \"\" {\n  if (!ts) return \"dead\";\n  const d = new Date(ts.replace(\" \", \"T\") + (ts.includes(\"Z\") || ts.includes(\"+\") ? \"\" : \"Z\"));\n  const m = (playheadMs - d.getTime()) / 60000;\n  if (m < 2) return \"\";\n  if (m < 10) return \"stale\";\n  return \"dead\";\n}\n",[],[335,744],[335],{"_105":752,"_97":753,"_166":754,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":755,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_179":756,"_101":862},"ca71362a-1f92-11f1-943c-42dde27851f2","mcp","019cebf2-a8a6-7120-b163-d323e2816c3d",["D",1773485074605],[757,765,773,781,789,797,805,814,822,830,838,846,854],{"_105":758,"_97":759,"_166":760,"_168":754,"_169":149,"_170":122,"_171":172,"_107":761,"_102":33,"_174":186,"_176":762,"_177":22,"_178":-5,"_179":763,"_101":764},"ca6e2c8c-1f92-11f1-943c-42dde27851f2","README.md","019cebf2-a8a6-7120-b163-9cf4d7ba70fc",["D",1773485074605],"# sync-mcp\n\nMCP server for [sync](https://sync.parc.land) — the multi-agent coordination\nplatform.\n\nConnects any MCP client to sync rooms using the **read → evaluate → act**\nrhythm. Authenticate once with a passkey, then create rooms, join as agents,\ninvoke actions, and send messages — no tokens to copy-paste.\n\n**Live endpoint:** `https://mcp.sync.parc.land/mcp`\n\n## What is sync?\n\nsync is a coordination layer for multi-agent systems. Agents (human or AI) join\n**rooms**, observe shared **state**, invoke **actions** that mutate state\natomically, and communicate via **messages**. Everything is expressed through\n[CEL](https://cel.dev/) expressions and a small set of primitives.\n\nsync-mcp exposes the full sync API as 16 MCP tools, so any MCP-compatible client\ncan participate as a first-class agent.\n\n## Quick start\n\n### Claude.ai (web / mobile / desktop app)\n\n1. Open **Settings → Connectors** (or click the tools icon → **Manage\n   Connectors**)\n2. Click **Add custom connector**\n3. Enter the server URL:\n   ```\n   https://mcp.sync.parc.land/mcp\n   ```\n4. Click **Add**\n5. When prompted, **register a passkey** (or sign in if you already have one)\n   and **grant consent**\n\nThat's it. Claude now has access to all 16 sync tools. Try asking:\n\n> \"Create a new sync room called 'planning' and send a hello message.\"\n\n### Claude Code (CLI)\n\nAdd sync-mcp as a remote HTTP server. Pick the scope that fits your use case:\n\n**User scope** — available across all your projects:\n\n```bash\nclaude mcp add --transport http sync-mcp --scope user https://mcp.sync.parc.land/mcp\n```\n\n**Local scope** — current project only (default):\n\n```bash\nclaude mcp add --transport http sync-mcp https://mcp.sync.parc.land/mcp\n```\n\n**Project scope** — shared with your team via `.mcp.json`:\n\n```bash\nclaude mcp add --transport http sync-mcp --scope project https://mcp.sync.parc.land/mcp\n```\n\nThen authenticate:\n\n```bash\n# Inside Claude Code, trigger the OAuth flow:\n/mcp\n# Select sync-mcp → Authenticate → complete passkey registration in browser\n```\n\nVerify the connection:\n\n```bash\nclaude mcp list\nclaude mcp get sync-mcp\n```\n\n### Manual JSON configuration\n\nIf you prefer editing config files directly, add this to your configuration:\n\n**Claude Code** (`~/.claude.json` for user scope, or `.mcp.json` at project root\nfor project scope):\n\n```json\n{\n  \"mcpServers\": {\n    \"sync-mcp\": {\n      \"type\": \"http\",\n      \"url\": \"https://mcp.sync.parc.land/mcp\"\n    }\n  }\n}\n```\n\n**Claude Desktop** (`claude_desktop_config.json`):\n\n```json\n{\n  \"mcpServers\": {\n    \"sync-mcp\": {\n      \"command\": \"npx\",\n      \"args\": [\"mcp-remote\", \"https://mcp.sync.parc.land/mcp\"]\n    }\n  }\n}\n```\n\nAfter editing config files, restart the client for changes to take effect.\n\n## Authentication\n\nsync-mcp uses **OAuth 2.1 with WebAuthn passkeys** — no passwords, no API keys.\n\nThe first time an MCP client connects, the server returns an HTTP 401 with a\n`WWW-Authenticate` header pointing to the OAuth discovery endpoints. The client\n(Claude) handles the flow automatically:\n\n1. **Discovery** — client fetches `/.well-known/oauth-protected-resource` →\n   `/.well-known/oauth-authorization-server`\n2. **Client registration** — client registers itself via Dynamic Client\n   Registration (DCR)\n3. **Authorization** — client opens the authorize page in your browser\n4. **Passkey** — you register a new passkey (or sign in with an existing one)\n5. **Consent** — you approve access for the MCP client\n6. **Token exchange** — client receives an OAuth access token (1 hour,\n   auto-refreshed)\n\nAll subsequent tool calls are authenticated automatically. Tokens refresh\ntransparently via refresh tokens (30-day lifetime).\n\n### Token vault\n\nWhen authenticated, sync tokens are automatically stored in your personal\n**vault**:\n\n- Creating a room → room token + view token auto-vaulted\n- Joining a room as an agent → agent token auto-vaulted\n- Setting a default room → subsequent calls resolve room + token automatically\n\nThis means most tool calls need **zero parameters** — the server resolves your\nroom and token from the vault. You can still pass explicit `room` and `token`\nparameters to override vault resolution.\n\n### Backward compatibility\n\nIf you can't or don't want to use OAuth, every tool still accepts explicit\n`room` and `token` parameters. The server works with or without authentication —\nOAuth just removes the friction of passing tokens on every call.\n\n## Tools\n\nsync-mcp exposes 16 tools organized around sync's core concepts:\n\n### Room lifecycle\n\n| Tool               | Description                                                |\n| ------------------ | ---------------------------------------------------------- |\n| `sync_create_room` | Create a new room. Auto-vaults tokens when authenticated.  |\n| `sync_list_rooms`  | List rooms accessible with current auth or explicit token. |\n| `sync_join_room`   | Join a room as an agent. Auto-vaults agent token.          |\n\n### Core rhythm (read → act)\n\n| Tool                 | Description                                                                                                                     |\n| -------------------- | ------------------------------------------------------------------------------------------------------------------------------- |\n| `sync_read_context`  | **The primary read.** Returns state, views, agents, actions, messages. Supports context shaping via `depth`, `only`, `compact`. |\n| `sync_invoke_action` | **The primary write.** Invoke any action (built-in or custom). All state mutations flow through actions.                        |\n| `sync_wait`          | Block until a CEL condition becomes true (max 25s). For event-driven coordination.                                              |\n\n### Registration\n\n| Tool                   | Description                                                                         |\n| ---------------------- | ----------------------------------------------------------------------------------- |\n| `sync_register_action` | Register a new action — define write effects, preconditions, parameters, cooldowns. |\n| `sync_register_view`   | Register a computed view — a named CEL expression for derived state.                |\n\n### Messaging\n\n| Tool                | Description                                                                                     |\n| ------------------- | ----------------------------------------------------------------------------------------------- |\n| `sync_send_message` | Send a message. Supports `kind` (chat, proposal, etc.) and `to` for directed attention routing. |\n\n### Utilities\n\n| Tool                 | Description                                                              |\n| -------------------- | ------------------------------------------------------------------------ |\n| `sync_help`          | Access the help system — guides, standard library, vocabulary bootstrap. |\n| `sync_eval_cel`      | Evaluate a CEL expression against current room state.                    |\n| `sync_delete_action` | Remove an action from a room.                                            |\n| `sync_delete_view`   | Remove a view from a room.                                               |\n\n### Vault management\n\n| Tool                | Description                                                                |\n| ------------------- | -------------------------------------------------------------------------- |\n| `sync_vault_list`   | List all stored tokens (room, agent, view) with their labels and defaults. |\n| `sync_vault_store`  | Manually store a sync token in the vault.                                  |\n| `sync_vault_remove` | Remove a token from the vault.                                             |\n\n## Typical workflow\n\nHere's what a typical session looks like once authenticated:\n\n```\nYou: Create a room called \"sprint-planning\" and make it my default.\n\nClaude: [sync_create_room] → room created, tokens vaulted, set as default\n\nYou: Join as an agent named \"facilitator\".\n\nClaude: [sync_join_room] → joined, agent token vaulted\n\nYou: Register an action called \"add_item\" that appends to a backlog list.\n\nClaude: [sync_register_action] → action registered with write template\n\nYou: Add \"Fix login bug\" to the backlog.\n\nClaude: [sync_invoke_action: add_item] → item appended to state\n\nYou: What's the current state?\n\nClaude: [sync_read_context] → shows backlog, agents, actions, messages\n```\n\nNo room IDs or tokens needed in any of those calls — everything resolves from\nthe vault.\n\n## Architecture\n\n```\n┌─────────────┐     OAuth 2.1      ┌──────────────────┐\n│  MCP Client  │◄──────────────────►│   sync-mcp       │\n│  (Claude)    │   Bearer token     │   (Val.town)     │\n└─────────────┘                     │                  │\n                                    │  ┌────────────┐  │\n                                    │  │ OAuth/PKCE │  │\n                                    │  │ WebAuthn   │  │\n                                    │  │ Token vault│  │\n                                    │  │ SQLite     │  │\n                                    │  └────────────┘  │\n                                    │        │         │\n                                    │        ▼         │\n                                    │  ┌────────────┐  │\n                                    │  │ sync API   │──┼──► sync.parc.land\n                                    │  │ proxy      │  │\n                                    │  └────────────┘  │\n                                    └──────────────────┘\n```\n\nsync-mcp is both an **OAuth Authorization Server** (issues its own tokens,\nmanages WebAuthn credentials) and an **MCP Resource Server** (validates tokens\non every request, proxies to sync API).\n\n### Files\n\n| File       | Purpose                                                                                                                     |\n| ---------- | --------------------------------------------------------------------------------------------------------------------------- |\n| `main.ts`  | HTTP router — MCP JSON-RPC, OAuth endpoints, WebAuthn endpoints, vault API                                                  |\n| `auth.ts`  | OAuth 2.1 flow (PRM, AS metadata, DCR, authorize, consent, token exchange) + WebAuthn + vault management + token resolution |\n| `tools.ts` | 16 MCP tool definitions with context-aware auth resolution                                                                  |\n| `db.ts`    | SQLite schema (10 tables) + all CRUD helpers                                                                                |\n\n### Endpoints\n\n| Path                                      | Method            | Auth             | Purpose                                            |\n| ----------------------------------------- | ----------------- | ---------------- | -------------------------------------------------- |\n| `/mcp`                                    | `POST`            | Bearer           | MCP JSON-RPC 2.0                                   |\n| `/mcp`                                    | `GET`             | —                | Server info                                        |\n| `/.well-known/oauth-protected-resource`   | `GET`             | —                | Protected Resource Metadata (RFC 9728)             |\n| `/.well-known/oauth-authorization-server` | `GET`             | —                | Authorization Server Metadata (RFC 8414)           |\n| `/oauth/register`                         | `POST`            | —                | Dynamic Client Registration (RFC 7591)             |\n| `/oauth/authorize`                        | `GET`             | —                | Authorization page (WebAuthn + consent UI)         |\n| `/oauth/consent`                          | `POST`            | Session          | Exchange session for auth code                     |\n| `/oauth/token`                            | `POST`            | —                | Token exchange (authorization_code, refresh_token) |\n| `/webauthn/register/options`              | `POST`            | —                | WebAuthn registration challenge                    |\n| `/webauthn/register/verify`               | `POST`            | —                | WebAuthn registration verification                 |\n| `/webauthn/authenticate/options`          | `POST`            | —                | WebAuthn authentication challenge                  |\n| `/webauthn/authenticate/verify`           | `POST`            | —                | WebAuthn authentication verification               |\n| `/vault`                                  | `GET/POST/DELETE` | Bearer           | Token vault CRUD                                   |\n| `/manage`                                 | `GET`             | Session          | Management UI (vault, passkeys, recovery tokens)   |\n| `/manage/api/*`                           | `GET/POST/DELETE` | Session          | Management API                                     |\n| `/recover`                                | `GET`             | —                | Recovery page (passkey re-registration)            |\n| `/recover/validate`                       | `POST`            | —                | Validate recovery token                            |\n| `/recover/register/*`                     | `POST`            | Recovery session | Register new passkey via recovery token            |\n\n## Passkey management\n\nPasskeys are bound to a **Relying Party ID** (RP ID). sync-mcp uses `parc.land`\nas the stable RP ID, so passkeys work on any `*.parc.land` origin (e.g.\n`mcp.sync.parc.land`, `auth.parc.land`). On non-`parc.land` hostnames (like\nVal.town dev endpoints), the RP ID falls back to the request hostname — giving\neach dev endpoint its own isolated passkeys.\n\n**Recovery tokens** let you register a new passkey on a different hostname while\nkeeping your existing account, vault, and rooms. Generate one at `/manage`, then\nuse it at `/recover` on the new hostname. Useful for domain migrations, device\nloss, or bridging between production and dev passkeys.\n\n## Self-hosting\n\nsync-mcp runs on [Val.town](https://val.town). To fork and run your own\ninstance:\n\n1. Fork the `c15r/sync-mcp` val on Val.town\n2. Set the `WEBAUTHN_RP_ID` environment variable to your domain (e.g.\n   `example.com`)\n3. Optionally set the `SYNC_URL` environment variable (defaults to\n   `https://sync.parc.land`)\n4. Configure a custom domain pointing to the val's HTTP endpoint\n5. The HTTP handler in `main.ts` starts serving immediately\n\nThe SQLite database is automatically provisioned per-val by Val.town. Set\n`WEBAUTHN_RP_ID` to your root domain so passkeys survive hostname changes.\nWithout it, passkeys bind to the request hostname.\n\n## Standards\n\n- **MCP**: [Model Context Protocol](https://modelcontextprotocol.io/) —\n  Streamable HTTP transport, JSON-RPC 2.0\n- **OAuth 2.1**: Authorization Code + PKCE (S256), refresh token rotation,\n  Dynamic Client Registration\n- **WebAuthn**: Passkey registration and authentication via\n  [@simplewebauthn/server](https://simplewebauthn.dev/)\n- **RFC 9728**: OAuth 2.0 Protected Resource Metadata\n- **RFC 8414**: OAuth 2.0 Authorization Server Metadata\n- **RFC 7591**: OAuth 2.0 Dynamic Client Registration\n\n## Links\n\n- **sync platform**: [sync.parc.land](https://sync.parc.land)\n- **sync-mcp**: [mcp.sync.parc.land](https://mcp.sync.parc.land)\n- **Management UI**:\n  [mcp.sync.parc.land/manage](https://mcp.sync.parc.land/manage)\n- **sync dashboard**: [sync.parc.land](https://sync.parc.land/?room=workspace)\n- **Val.town project**:\n  [val.town/x/c15r/sync-mcp](https://www.val.town/x/c15r/sync-mcp)\n- **MCP specification**:\n  [modelcontextprotocol.io](https://modelcontextprotocol.io/)\n\n## License\n\nMIT",[],[753,759],{"_105":766,"_97":767,"_166":768,"_168":754,"_169":149,"_170":122,"_171":172,"_107":769,"_102":33,"_174":356,"_176":770,"_177":22,"_178":-5,"_179":771,"_101":772},"ca6e70d4-1f92-11f1-943c-42dde27851f2","auth.tsx","019cebf2-a8a6-7120-b163-a0c5ba8d99f2",["D",1773485074605],"/**\n * auth.tsx — Barrel re-exports for MCP auth subsystem.\n *\n * All implementations have been extracted to focused modules.\n * This file preserves the import contract for mcp/mcp.ts.\n */\n\n// OAuth 2.1 protocol\nexport { handlePRM, handleASMetadata, handleDCR, handleConsent, handleToken } from \"./oauth.ts\";\n\n// WebAuthn passkeys\nexport { handleRegisterOptions, handleRegisterVerify, handleAuthOptions, handleAuthVerify } from \"./webauthn.ts\";\n\n// Management UI + API, authorize page, recovery flow\nexport {\n  handleAuthorize,\n  handleManagePage,\n  handleManageApi,\n  handleRecoverPage,\n  handleRecoverValidate,\n  handleRecoverRegisterOptions,\n  handleRecoverRegisterVerify,\n} from \"./manage.tsx\";\n\n// Legacy token resolution (used by tool-context.ts legacy fallback path)\nexport { resolveToken } from \"./vault.ts\";\n",[],[753,767],{"_105":774,"_97":775,"_166":776,"_168":754,"_169":149,"_170":122,"_171":172,"_107":777,"_102":33,"_174":356,"_176":778,"_177":22,"_178":-5,"_179":779,"_101":780},"ca6e76b0-1f92-11f1-943c-42dde27851f2","db.ts","019cebf2-a8a6-7120-b163-a7641c101ca4",["D",1773485074605],"/**\n * db.ts — SQLite helpers for sync-mcp OAuth/WebAuthn/Vault\n *\n * Schema is managed by the parent ../schema.ts (unified migration).\n * This file provides CRUD helpers + ensures smcp_ tables exist.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { migrate } from \"../schema.ts\";\n\n// Re-export scope types and functions for backward compatibility\nexport {\n  type ParsedScope,\n  type RoomScope,\n  parseScope,\n  serializeScope,\n  checkRoomInScope,\n} from \"./scope.ts\";\n\n// ─── Schema migration (delegates to unified schema + ensures smcp_ tables) ──\n\nexport async function ensureSchema() {\n  // Run the unified migration (creates all tables including smcp_)\n  await migrate();\n\n  // Belt-and-suspenders: ensure smcp_ tables exist even if parent\n  // schema.ts is cached at an older version without them.\n  await sqlite.batch([\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_users (id TEXT PRIMARY KEY, username TEXT UNIQUE NOT NULL, created_at TEXT NOT NULL DEFAULT (datetime('now')))`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_credentials (id TEXT PRIMARY KEY, user_id TEXT NOT NULL, public_key BLOB NOT NULL, counter INTEGER NOT NULL DEFAULT 0, transports TEXT, device_type TEXT, backed_up INTEGER DEFAULT 0, rp_id TEXT, created_at TEXT NOT NULL DEFAULT (datetime('now')))`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_challenges (id TEXT PRIMARY KEY, challenge TEXT NOT NULL, user_id TEXT, type TEXT NOT NULL, expires_at TEXT NOT NULL, created_at TEXT NOT NULL DEFAULT (datetime('now')))`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_oauth_clients (client_id TEXT PRIMARY KEY, client_secret TEXT, redirect_uris TEXT NOT NULL, client_name TEXT, created_at TEXT NOT NULL DEFAULT (datetime('now')))`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_auth_codes (code TEXT PRIMARY KEY, client_id TEXT NOT NULL, user_id TEXT NOT NULL, redirect_uri TEXT NOT NULL, code_challenge TEXT NOT NULL, code_challenge_method TEXT NOT NULL DEFAULT 'S256', scope TEXT, resource TEXT, expires_at TEXT NOT NULL, used INTEGER DEFAULT 0)`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_access_tokens (token TEXT PRIMARY KEY, user_id TEXT NOT NULL, client_id TEXT NOT NULL, scope TEXT, expires_at TEXT NOT NULL, created_at TEXT NOT NULL DEFAULT (datetime('now')))`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_refresh_tokens (token TEXT PRIMARY KEY, user_id TEXT NOT NULL, client_id TEXT NOT NULL, scope TEXT, expires_at TEXT NOT NULL, created_at TEXT NOT NULL DEFAULT (datetime('now')))`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_vault (id TEXT PRIMARY KEY, user_id TEXT NOT NULL, room_id TEXT NOT NULL, token TEXT NOT NULL, token_type TEXT NOT NULL, label TEXT, is_default INTEGER DEFAULT 0, created_at TEXT NOT NULL DEFAULT (datetime('now')))`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_sessions (id TEXT PRIMARY KEY, user_id TEXT NOT NULL, expires_at TEXT NOT NULL, scope TEXT DEFAULT 'consent', created_at TEXT NOT NULL DEFAULT (datetime('now')))`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_recovery_tokens (id TEXT PRIMARY KEY, user_id TEXT NOT NULL, token_hash TEXT NOT NULL, expires_at TEXT NOT NULL, used INTEGER DEFAULT 0, created_at TEXT NOT NULL DEFAULT (datetime('now')))`, args: [] },\n  ]);\n}\n\n// ─── Helpers ─────────────────────────────────────────────────────\n\nexport function generateId(): string {\n  return crypto.randomUUID();\n}\n\nexport async function generateToken(prefix = \"\"): Promise {\n  const bytes = new Uint8Array(32);\n  crypto.getRandomValues(bytes);\n  const b64 = btoa(String.fromCharCode(...bytes))\n    .replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=/g, \"\");\n  return prefix ? `${prefix}_${b64}` : b64;\n}\n\n// Base64url encode/decode\nexport function b64urlEncode(buf: Uint8Array): string {\n  return btoa(String.fromCharCode(...buf))\n    .replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=/g, \"\");\n}\n\nexport function b64urlDecode(str: string): Uint8Array {\n  const padded = str + \"=\".repeat((4 - (str.length % 4)) % 4);\n  const binary = atob(padded.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n  return Uint8Array.from(binary, (c) => c.charCodeAt(0));\n}\n\n// SHA-256 for PKCE\nexport async function sha256(input: string): Promise {\n  const data = new TextEncoder().encode(input);\n  const hash = await crypto.subtle.digest(\"SHA-256\", data);\n  return b64urlEncode(new Uint8Array(hash));\n}\n\n// ─── User CRUD ───────────────────────────────────────────────────\n\nexport async function createUser(id: string, username: string) {\n  await sqlite.execute({\n    sql: \"INSERT INTO smcp_users (id, username) VALUES (?, ?)\",\n    args: [id, username],\n  });\n}\n\nexport async function getUserByUsername(username: string) {\n  const res = await sqlite.execute({\n    sql: \"SELECT * FROM smcp_users WHERE username = ?\",\n    args: [username],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    id: r[0] as string,\n    username: r[1] as string,\n    created_at: r[2] as string,\n  };\n}\n\nexport async function getUserById(id: string) {\n  const res = await sqlite.execute({\n    sql: \"SELECT * FROM smcp_users WHERE id = ?\",\n    args: [id],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    id: r[0] as string,\n    username: r[1] as string,\n    created_at: r[2] as string,\n  };\n}\n\n// ─── Credential CRUD ────────────────────────────────────────────\n\nexport async function saveCredential(cred: {\n  id: string;\n  userId: string;\n  publicKey: Uint8Array;\n  counter: number;\n  transports?: string[];\n  deviceType?: string;\n  backedUp?: boolean;\n  rpId?: string;\n}) {\n  await sqlite.execute({\n    sql:\n      `INSERT INTO smcp_credentials (id, user_id, public_key, counter, transports, device_type, backed_up, rp_id)\n          VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      cred.id,\n      cred.userId,\n      b64urlEncode(cred.publicKey),\n      cred.counter,\n      cred.transports ? JSON.stringify(cred.transports) : null,\n      cred.deviceType ?? null,\n      cred.backedUp ? 1 : 0,\n      cred.rpId ?? null,\n    ],\n  });\n}\n\nexport async function getCredentialsByUserId(userId: string, rpId?: string) {\n  let sql = \"SELECT * FROM smcp_credentials WHERE user_id = ?\";\n  const args: any[] = [userId];\n  if (rpId) {\n    sql += \" AND (rp_id = ? OR rp_id IS NULL)\";\n    args.push(rpId);\n  }\n  const res = await sqlite.execute({ sql, args });\n  return res.rows.map((r) => ({\n    id: r[0] as string,\n    userId: r[1] as string,\n    publicKey: b64urlDecode(r[2] as string),\n    counter: r[3] as number,\n    transports: r[4] ? JSON.parse(r[4] as string) : undefined,\n    deviceType: r[5] as string | null,\n    backedUp: r[6] === 1,\n    rpId: r[7] as string | null,\n  }));\n}\n\nexport async function getCredentialById(credId: string) {\n  const res = await sqlite.execute({\n    sql: \"SELECT * FROM smcp_credentials WHERE id = ?\",\n    args: [credId],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    id: r[0] as string,\n    userId: r[1] as string,\n    publicKey: b64urlDecode(r[2] as string),\n    counter: r[3] as number,\n    transports: r[4] ? JSON.parse(r[4] as string) : undefined,\n    deviceType: r[5] as string | null,\n    backedUp: r[6] === 1,\n    rpId: r[7] as string | null,\n  };\n}\n\nexport async function updateCredentialCounter(\n  credId: string,\n  newCounter: number,\n) {\n  await sqlite.execute({\n    sql: \"UPDATE smcp_credentials SET counter = ? WHERE id = ?\",\n    args: [newCounter, credId],\n  });\n}\n\n// ─── Challenge CRUD ─────────────────────────────────────────────\n\nexport async function saveChallenge(\n  id: string,\n  challenge: string,\n  type: string,\n  userId?: string,\n) {\n  const expires = new Date(Date.now() + 5 * 60 * 1000).toISOString(); // 5 min\n  await sqlite.execute({\n    sql:\n      \"INSERT INTO smcp_challenges (id, challenge, user_id, type, expires_at) VALUES (?, ?, ?, ?, ?)\",\n    args: [id, challenge, userId ?? null, type, expires],\n  });\n}\n\nexport async function getChallenge(id: string) {\n  const res = await sqlite.execute({\n    sql:\n      \"SELECT * FROM smcp_challenges WHERE id = ? AND expires_at > datetime('now')\",\n    args: [id],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    id: r[0] as string,\n    challenge: r[1] as string,\n    userId: r[2] as string | null,\n    type: r[3] as string,\n  };\n}\n\nexport async function deleteChallenge(id: string) {\n  await sqlite.execute({\n    sql: \"DELETE FROM smcp_challenges WHERE id = ?\",\n    args: [id],\n  });\n}\n\n// ─── OAuth Client CRUD ──────────────────────────────────────────\n\nexport async function saveOAuthClient(client: {\n  clientId: string;\n  clientSecret?: string;\n  redirectUris: string[];\n  clientName?: string;\n}) {\n  await sqlite.execute({\n    sql:\n      `INSERT OR REPLACE INTO smcp_oauth_clients (client_id, client_secret, redirect_uris, client_name)\n          VALUES (?, ?, ?, ?)`,\n    args: [\n      client.clientId,\n      client.clientSecret ?? null,\n      JSON.stringify(client.redirectUris),\n      client.clientName ?? null,\n    ],\n  });\n}\n\nexport async function getOAuthClient(clientId: string) {\n  const res = await sqlite.execute({\n    sql: \"SELECT * FROM smcp_oauth_clients WHERE client_id = ?\",\n    args: [clientId],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    clientId: r[0] as string,\n    clientSecret: r[1] as string | null,\n    redirectUris: JSON.parse(r[2] as string) as string[],\n    clientName: r[3] as string | null,\n  };\n}\n\n// ─── Auth Code CRUD ─────────────────────────────────────────────\n\nexport async function saveAuthCode(code: {\n  code: string;\n  clientId: string;\n  userId: string;\n  redirectUri: string;\n  codeChallenge: string;\n  codeChallengeMethod: string;\n  scope?: string;\n  resource?: string;\n}) {\n  const expires = new Date(Date.now() + 10 * 60 * 1000).toISOString(); // 10 min\n  await sqlite.execute({\n    sql:\n      `INSERT INTO smcp_auth_codes (code, client_id, user_id, redirect_uri, code_challenge, code_challenge_method, scope, resource, expires_at)\n          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      code.code,\n      code.clientId,\n      code.userId,\n      code.redirectUri,\n      code.codeChallenge,\n      code.codeChallengeMethod,\n      code.scope ?? null,\n      code.resource ?? null,\n      expires,\n    ],\n  });\n}\n\nexport async function consumeAuthCode(code: string) {\n  const res = await sqlite.execute({\n    sql:\n      \"SELECT * FROM smcp_auth_codes WHERE code = ? AND used = 0 AND expires_at > datetime('now')\",\n    args: [code],\n  });\n  if (res.rows.length === 0) return null;\n  await sqlite.execute({\n    sql: \"UPDATE smcp_auth_codes SET used = 1 WHERE code = ?\",\n    args: [code],\n  });\n  const r = res.rows[0];\n  return {\n    code: r[0] as string,\n    clientId: r[1] as string,\n    userId: r[2] as string,\n    redirectUri: r[3] as string,\n    codeChallenge: r[4] as string,\n    codeChallengeMethod: r[5] as string,\n    scope: r[6] as string | null,\n    resource: r[7] as string | null,\n  };\n}\n\n// ─── Token CRUD ─────────────────────────────────────────────────\n\nexport async function saveAccessToken(t: {\n  token: string;\n  userId: string;\n  clientId: string;\n  scope?: string;\n  expiresInSec?: number;\n}) {\n  const expires = new Date(Date.now() + (t.expiresInSec ?? 3600) * 1000)\n    .toISOString();\n  await sqlite.execute({\n    sql:\n      `INSERT INTO smcp_access_tokens (token, user_id, client_id, scope, expires_at)\n          VALUES (?, ?, ?, ?, ?)`,\n    args: [t.token, t.userId, t.clientId, t.scope ?? null, expires],\n  });\n}\n\nexport async function validateAccessToken(token: string) {\n  const res = await sqlite.execute({\n    sql:\n      \"SELECT * FROM smcp_access_tokens WHERE token = ? AND expires_at > datetime('now')\",\n    args: [token],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    token: r[0] as string,\n    userId: r[1] as string,\n    clientId: r[2] as string,\n    scope: r[3] as string | null,\n    expiresAt: r[4] as string,\n  };\n}\n\nexport async function saveRefreshToken(t: {\n  token: string;\n  userId: string;\n  clientId: string;\n  scope?: string;\n}) {\n  const expires = new Date(Date.now() + 30 * 24 * 3600 * 1000).toISOString(); // 30 days\n  await sqlite.execute({\n    sql:\n      `INSERT INTO smcp_refresh_tokens (token, user_id, client_id, scope, expires_at)\n          VALUES (?, ?, ?, ?, ?)`,\n    args: [t.token, t.userId, t.clientId, t.scope ?? null, expires],\n  });\n}\n\nexport async function consumeRefreshToken(token: string) {\n  const res = await sqlite.execute({\n    sql:\n      \"SELECT * FROM smcp_refresh_tokens WHERE token = ? AND expires_at > datetime('now')\",\n    args: [token],\n  });\n  if (res.rows.length === 0) return null;\n  await sqlite.execute({\n    sql: \"DELETE FROM smcp_refresh_tokens WHERE token = ?\",\n    args: [token],\n  });\n  const r = res.rows[0];\n  return {\n    token: r[0] as string,\n    userId: r[1] as string,\n    clientId: r[2] as string,\n    scope: r[3] as string | null,\n  };\n}\n\n// ─── Session CRUD ───────────────────────────────────────────────\n\nexport async function createSession(\n  userId: string,\n  scope: string = \"consent\",\n): Promise {\n  const id = await generateToken(\"sess\");\n  const expires = new Date(Date.now() + 15 * 60 * 1000).toISOString(); // 15 min\n  await sqlite.execute({\n    sql:\n      \"INSERT INTO smcp_sessions (id, user_id, expires_at, scope) VALUES (?, ?, ?, ?)\",\n    args: [id, userId, expires, scope],\n  });\n  return id;\n}\n\nexport async function validateSession(sessionId: string) {\n  const res = await sqlite.execute({\n    sql:\n      \"SELECT id, user_id, scope FROM smcp_sessions WHERE id = ? AND expires_at > datetime('now')\",\n    args: [sessionId],\n  });\n  if (res.rows.length === 0) return null;\n  return {\n    userId: res.rows[0][1] as string,\n    scope: (res.rows[0][2] as string) ?? \"consent\",\n  };\n}\n\nexport async function deleteSession(sessionId: string) {\n  await sqlite.execute({\n    sql: \"DELETE FROM smcp_sessions WHERE id = ?\",\n    args: [sessionId],\n  });\n}\n\n// ─── Recovery Token CRUD ─────────────────────────────────────────\n\nconst RECOVERY_EXPIRY_DAYS = 90;\nconst MAX_ACTIVE_RECOVERY_TOKENS = 3;\n\nexport async function createRecoveryToken(\n  userId: string,\n): Promise<{ token: string; expiresAt: string } | { error: string }> {\n  const countRes = await sqlite.execute({\n    sql:\n      \"SELECT COUNT(*) FROM smcp_recovery_tokens WHERE user_id = ? AND used = 0 AND expires_at > datetime('now')\",\n    args: [userId],\n  });\n  const activeCount = Number(countRes.rows[0][0]);\n  if (activeCount >= MAX_ACTIVE_RECOVERY_TOKENS) {\n    return {\n      error:\n        `Maximum ${MAX_ACTIVE_RECOVERY_TOKENS} active recovery tokens. Revoke one first.`,\n    };\n  }\n\n  const token = await generateToken(\"recover\");\n  const tokenHash = await sha256(token);\n  const id = generateId();\n  const expiresAt = new Date(\n    Date.now() + RECOVERY_EXPIRY_DAYS * 24 * 3600 * 1000,\n  ).toISOString();\n\n  await sqlite.execute({\n    sql:\n      \"INSERT INTO smcp_recovery_tokens (id, user_id, token_hash, expires_at) VALUES (?, ?, ?, ?)\",\n    args: [id, userId, tokenHash, expiresAt],\n  });\n\n  return { token, expiresAt };\n}\n\nexport async function validateRecoveryToken(\n  token: string,\n): Promise<{ userId: string; tokenId: string } | null> {\n  const tokenHash = await sha256(token);\n  const res = await sqlite.execute({\n    sql:\n      \"SELECT id, user_id FROM smcp_recovery_tokens WHERE token_hash = ? AND used = 0 AND expires_at > datetime('now')\",\n    args: [tokenHash],\n  });\n  if (res.rows.length === 0) return null;\n  return {\n    tokenId: res.rows[0][0] as string,\n    userId: res.rows[0][1] as string,\n  };\n}\n\nexport async function consumeRecoveryToken(tokenId: string) {\n  await sqlite.execute({\n    sql: \"UPDATE smcp_recovery_tokens SET used = 1 WHERE id = ?\",\n    args: [tokenId],\n  });\n}\n\nexport async function listRecoveryTokens(userId: string) {\n  const res = await sqlite.execute({\n    sql:\n      \"SELECT id, expires_at, used, created_at FROM smcp_recovery_tokens WHERE user_id = ? ORDER BY created_at DESC\",\n    args: [userId],\n  });\n  return res.rows.map((r) => ({\n    id: r[0] as string,\n    expiresAt: r[1] as string,\n    used: r[2] === 1,\n    createdAt: r[3] as string,\n  }));\n}\n\nexport async function revokeRecoveryToken(userId: string, tokenId: string) {\n  await sqlite.execute({\n    sql: \"DELETE FROM smcp_recovery_tokens WHERE id = ? AND user_id = ?\",\n    args: [tokenId, userId],\n  });\n}\n\n// ─── Cleanup ────────────────────────────────────────────────────\n\nexport async function cleanupExpired() {\n  await sqlite.batch([\n    {\n      sql: \"DELETE FROM smcp_challenges WHERE expires_at < datetime('now')\",\n      args: [],\n    },\n    {\n      sql: \"DELETE FROM smcp_auth_codes WHERE expires_at < datetime('now')\",\n      args: [],\n    },\n    {\n      sql: \"DELETE FROM smcp_sessions WHERE expires_at < datetime('now')\",\n      args: [],\n    },\n    {\n      sql:\n        \"DELETE FROM smcp_recovery_tokens WHERE expires_at < datetime('now') OR used = 1\",\n      args: [],\n    },\n  ]);\n}\n\n// ─── User-Room CRUD ─────────────────────────────────────────────\n\nexport async function upsertUserRoom(\n  userId: string, roomId: string, access: string,\n  label?: string, isDefault?: boolean,\n) {\n  if (isDefault) {\n    await sqlite.execute({\n      sql: \"UPDATE smcp_user_rooms SET is_default = 0 WHERE user_id = ?\",\n      args: [userId],\n    });\n  }\n  await sqlite.execute({\n    sql: `INSERT INTO smcp_user_rooms (user_id, room_id, access, label, is_default)\n          VALUES (?, ?, ?, ?, ?)\n          ON CONFLICT(user_id, room_id) DO UPDATE SET\n            access = excluded.access,\n            label = COALESCE(excluded.label, smcp_user_rooms.label),\n            is_default = COALESCE(excluded.is_default, smcp_user_rooms.is_default)`,\n    args: [userId, roomId, access, label ?? null, isDefault ? 1 : 0],\n  });\n}\n\nexport async function getUserRoom(userId: string, roomId: string) {\n  const res = await sqlite.execute({\n    sql: \"SELECT user_id, room_id, access, is_default, label, created_at FROM smcp_user_rooms WHERE user_id = ? AND room_id = ?\",\n    args: [userId, roomId],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    userId: r[0] as string, roomId: r[1] as string,\n    access: r[2] as string, isDefault: r[3] === 1,\n    label: r[4] as string | null, createdAt: r[5] as string,\n  };\n}\n\nexport async function listUserRooms(userId: string) {\n  const res = await sqlite.execute({\n    sql: `SELECT user_id, room_id, access, is_default, label, created_at\n          FROM smcp_user_rooms WHERE user_id = ?\n          ORDER BY is_default DESC, created_at DESC`,\n    args: [userId],\n  });\n  return res.rows.map((r) => ({\n    userId: r[0] as string, roomId: r[1] as string,\n    access: r[2] as string, isDefault: r[3] === 1,\n    label: r[4] as string | null, createdAt: r[5] as string,\n  }));\n}\n\nexport async function deleteUserRoom(userId: string, roomId: string) {\n  await sqlite.execute({\n    sql: \"DELETE FROM smcp_user_rooms WHERE user_id = ? AND room_id = ?\",\n    args: [userId, roomId],\n  });\n}\n\n// ─── User Session CRUD (OAuth-token-level) ──────────────────────\n\nexport async function createUserSession(params: {\n  tokenHash: string; userId: string; clientId: string;\n  scope: string; expiresAt: string;\n}) {\n  await sqlite.execute({\n    sql: `INSERT INTO smcp_user_sessions\n            (token_hash, user_id, client_id, scope, expires_at)\n          VALUES (?, ?, ?, ?, ?)`,\n    args: [params.tokenHash, params.userId, params.clientId,\n           params.scope, params.expiresAt],\n  });\n}\n\nexport async function getUserSession(tokenHash: string) {\n  const res = await sqlite.execute({\n    sql: `SELECT token_hash, user_id, client_id, scope, created_at, expires_at\n          FROM smcp_user_sessions\n          WHERE token_hash = ? AND expires_at > datetime('now')`,\n    args: [tokenHash],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    tokenHash: r[0] as string, userId: r[1] as string,\n    clientId: r[2] as string, scope: r[3] as string,\n    createdAt: r[4] as string, expiresAt: r[5] as string,\n  };\n}\n\nexport async function updateSessionScope(tokenHash: string, scope: string) {\n  await sqlite.execute({\n    sql: `UPDATE smcp_user_sessions SET scope = ? WHERE token_hash = ?`,\n    args: [scope, tokenHash],\n  });\n}\n\nexport async function deleteUserSession(tokenHash: string) {\n  await sqlite.execute({\n    sql: \"DELETE FROM smcp_embodiments WHERE session_hash = ?\",\n    args: [tokenHash],\n  });\n  await sqlite.execute({\n    sql: \"DELETE FROM smcp_user_sessions WHERE token_hash = ?\",\n    args: [tokenHash],\n  });\n}\n\nexport async function transferEmbodiments(\n  oldTokenHash: string, newTokenHash: string,\n) {\n  const res = await sqlite.execute({\n    sql: \"SELECT room_id, agent_id FROM smcp_embodiments WHERE session_hash = ?\",\n    args: [oldTokenHash],\n  });\n  if (res.rows.length === 0) return;\n  const stmts = res.rows.map((r) => ({\n    sql: `INSERT OR IGNORE INTO smcp_embodiments\n            (session_hash, room_id, agent_id, embodied_at)\n          VALUES (?, ?, ?, datetime('now'))`,\n    args: [newTokenHash, r[0] as string, r[1] as string],\n  }));\n  await sqlite.batch(stmts);\n  await sqlite.execute({\n    sql: \"DELETE FROM smcp_embodiments WHERE session_hash = ?\",\n    args: [oldTokenHash],\n  });\n}\n\n// ─── Embodiment CRUD ────────────────────────────────────────────\n\nexport async function setEmbodiment(\n  sessionHash: string, roomId: string, agentId: string,\n) {\n  await sqlite.execute({\n    sql: `INSERT INTO smcp_embodiments (session_hash, room_id, agent_id)\n          VALUES (?, ?, ?)\n          ON CONFLICT(session_hash, room_id) DO UPDATE SET\n            agent_id = excluded.agent_id,\n            embodied_at = datetime('now')`,\n    args: [sessionHash, roomId, agentId],\n  });\n}\n\nexport async function getEmbodiment(sessionHash: string, roomId: string) {\n  const res = await sqlite.execute({\n    sql: `SELECT agent_id FROM smcp_embodiments\n          WHERE session_hash = ? AND room_id = ?`,\n    args: [sessionHash, roomId],\n  });\n  if (res.rows.length === 0) return null;\n  return res.rows[0][0] as string;\n}\n\nexport async function listEmbodiments(sessionHash: string) {\n  const res = await sqlite.execute({\n    sql: `SELECT room_id, agent_id, embodied_at FROM smcp_embodiments\n          WHERE session_hash = ? ORDER BY embodied_at DESC`,\n    args: [sessionHash],\n  });\n  return res.rows.map((r) => ({\n    roomId: r[0] as string, agentId: r[1] as string,\n    embodiedAt: r[2] as string,\n  }));\n}\n\nexport async function removeEmbodiment(sessionHash: string, roomId: string) {\n  await sqlite.execute({\n    sql: \"DELETE FROM smcp_embodiments WHERE session_hash = ? AND room_id = ?\",\n    args: [sessionHash, roomId],\n  });\n}\n\nexport async function removeAllEmbodiments(sessionHash: string) {\n  await sqlite.execute({\n    sql: \"DELETE FROM smcp_embodiments WHERE session_hash = ?\",\n    args: [sessionHash],\n  });\n}\n\nexport async function findSessionsByUserClient(\n  userId: string, clientId: string, excludeHash?: string,\n) {\n  let sql = `SELECT token_hash FROM smcp_user_sessions\n             WHERE user_id = ? AND client_id = ? AND expires_at > datetime('now')`;\n  const args: any[] = [userId, clientId];\n  if (excludeHash) {\n    sql += ` AND token_hash != ?`;\n    args.push(excludeHash);\n  }\n  const res = await sqlite.execute({ sql, args });\n  return res.rows.map(r => r[0] as string);\n}\n\n\n// ═══════════════════════════════════════════════════════════════════\n// Unified Tokens (Phase 1 — v7 auth model)\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function mintToken(params: {\n  userId: string;\n  scope: string;\n  label?: string;\n  roomId?: string;\n  agentId?: string;\n  clientId?: string;\n  expiresInSec?: number;\n  withRefresh?: boolean;\n}): Promise<{ id: string; token: string; refreshToken?: string; expiresAt: string | null }> {\n  const id = generateId();\n  const token = await generateToken(\"tok\");\n  const tokenHash = await sha256(token);\n  const expiresAt = params.expiresInSec\n    ? new Date(Date.now() + params.expiresInSec * 1000).toISOString()\n    : null;\n\n  let refreshToken: string | undefined;\n  let refreshHash: string | null = null;\n  if (params.withRefresh) {\n    refreshToken = await generateToken(\"ref\");\n    refreshHash = await sha256(refreshToken);\n  }\n\n  await sqlite.execute({\n    sql: `INSERT INTO tokens (id, token_hash, refresh_hash, minted_by, scope, label,\n            room_id, agent_id, client_id, expires_at)\n          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [id, tokenHash, refreshHash, params.userId, params.scope,\n           params.label ?? null, params.roomId ?? null, params.agentId ?? null,\n           params.clientId ?? null, expiresAt],\n  });\n\n  return { id, token, refreshToken, expiresAt };\n}\n\nexport async function validateTokenByHash(hash: string): Promise<{\n  id: string; mintedBy: string; scope: string; label: string | null;\n  roomId: string | null; agentId: string | null; clientId: string | null;\n  expiresAt: string | null; createdAt: string;\n} | null> {\n  const res = await sqlite.execute({\n    sql: `SELECT id, minted_by, scope, label, room_id, agent_id, client_id,\n            expires_at, created_at\n          FROM tokens\n          WHERE token_hash = ? AND revoked = 0\n            AND (expires_at IS NULL OR expires_at > datetime('now'))`,\n    args: [hash],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    id: r[0] as string, mintedBy: r[1] as string, scope: r[2] as string,\n    label: r[3] as string | null, roomId: r[4] as string | null,\n    agentId: r[5] as string | null, clientId: r[6] as string | null,\n    expiresAt: r[7] as string | null, createdAt: r[8] as string,\n  };\n}\n\nexport async function validateRefreshByHash(hash: string): Promise<{\n  id: string; mintedBy: string; scope: string; clientId: string | null;\n} | null> {\n  const res = await sqlite.execute({\n    sql: `SELECT id, minted_by, scope, client_id\n          FROM tokens\n          WHERE refresh_hash = ? AND revoked = 0\n            AND (expires_at IS NULL OR expires_at > datetime('now'))`,\n    args: [hash],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    id: r[0] as string, mintedBy: r[1] as string,\n    scope: r[2] as string, clientId: r[3] as string | null,\n  };\n}\n\nexport async function refreshUnifiedToken(oldRefreshHash: string, newExpiresInSec = 3600): Promise<{\n  id: string; token: string; refreshToken: string; expiresAt: string;\n} | null> {\n  const old = await validateRefreshByHash(oldRefreshHash);\n  if (!old) return null;\n\n  // Revoke old token\n  await sqlite.execute({\n    sql: `UPDATE tokens SET revoked = 1 WHERE id = ?`,\n    args: [old.id],\n  });\n\n  // Mint new with same scope\n  const result = await mintToken({\n    userId: old.mintedBy,\n    scope: old.scope,\n    clientId: old.clientId ?? undefined,\n    expiresInSec: newExpiresInSec,\n    withRefresh: true,\n  });\n\n  // Transfer embodiments from old token to new\n  await sqlite.execute({\n    sql: `UPDATE smcp_embodiments SET session_hash = ?\n          WHERE session_hash = (SELECT token_hash FROM tokens WHERE id = ?)`,\n    args: [await sha256(result.token), old.id],\n  }).catch(() => {});\n\n  return {\n    id: result.id,\n    token: result.token,\n    refreshToken: result.refreshToken!,\n    expiresAt: result.expiresAt!,\n  };\n}\n\nexport async function revokeToken(tokenId: string, userId: string): Promise {\n  const res = await sqlite.execute({\n    sql: `UPDATE tokens SET revoked = 1 WHERE id = ? AND minted_by = ?`,\n    args: [tokenId, userId],\n  });\n  return (res.rowsAffected ?? 0) > 0;\n}\n\nexport async function listUserTokens(userId: string): Promise> {\n  const res = await sqlite.execute({\n    sql: `SELECT id, scope, label, room_id, agent_id, client_id, revoked,\n            expires_at, created_at\n          FROM tokens WHERE minted_by = ?\n          ORDER BY created_at DESC LIMIT 100`,\n    args: [userId],\n  });\n  return res.rows.map((r: any[]) => ({\n    id: r[0] as string, scope: r[1] as string, label: r[2] as string | null,\n    roomId: r[3] as string | null, agentId: r[4] as string | null,\n    clientId: r[5] as string | null, revoked: r[6] === 1,\n    expiresAt: r[7] as string | null, createdAt: r[8] as string,\n  }));\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// Device Authorization Codes\n// ═══════════════════════════════════════════════════════════════════\n\nfunction generateUserCode(): string {\n  const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // no I/O/0/1\n  const left = Array.from({ length: 4 }, () => chars[Math.floor(Math.random() * chars.length)]).join(\"\");\n  const right = Array.from({ length: 4 }, () => chars[Math.floor(Math.random() * chars.length)]).join(\"\");\n  return `${left}-${right}`;\n}\n\nexport async function createDeviceCode(scope: string, clientId?: string): Promise<{\n  deviceCode: string; userCode: string; expiresAt: string;\n}> {\n  const deviceCode = await generateToken(\"dev\");\n  let userCode = generateUserCode();\n\n  // Ensure unique user_code (unlikely collision but be safe)\n  for (let i = 0; i < 5; i++) {\n    try {\n      const expiresAt = new Date(Date.now() + 15 * 60 * 1000).toISOString(); // 15 min\n      await sqlite.execute({\n        sql: `INSERT INTO device_codes (device_code, user_code, client_id, scope, expires_at)\n              VALUES (?, ?, ?, ?, ?)`,\n        args: [deviceCode, userCode, clientId ?? \"cli\", scope, expiresAt],\n      });\n      return { deviceCode, userCode, expiresAt };\n    } catch (e: any) {\n      if (e.message?.includes(\"UNIQUE\") && e.message?.includes(\"user_code\")) {\n        userCode = generateUserCode();\n        continue;\n      }\n      throw e;\n    }\n  }\n  throw new Error(\"Failed to generate unique user code\");\n}\n\nexport async function getDeviceCode(deviceCode: string): Promise<{\n  deviceCode: string; userCode: string; scope: string; status: string;\n  approvedBy: string | null; expiresAt: string;\n} | null> {\n  const res = await sqlite.execute({\n    sql: `SELECT device_code, user_code, scope, status, approved_by, expires_at\n          FROM device_codes WHERE device_code = ?`,\n    args: [deviceCode],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    deviceCode: r[0] as string, userCode: r[1] as string,\n    scope: r[2] as string, status: r[3] as string,\n    approvedBy: r[4] as string | null, expiresAt: r[5] as string,\n  };\n}\n\nexport async function getDeviceCodeByUserCode(userCode: string): Promise<{\n  deviceCode: string; userCode: string; scope: string; status: string;\n  approvedBy: string | null; expiresAt: string;\n} | null> {\n  const res = await sqlite.execute({\n    sql: `SELECT device_code, user_code, scope, status, approved_by, expires_at\n          FROM device_codes\n          WHERE user_code = ? AND expires_at > datetime('now')`,\n    args: [userCode],\n  });\n  if (res.rows.length === 0) return null;\n  const r = res.rows[0];\n  return {\n    deviceCode: r[0] as string, userCode: r[1] as string,\n    scope: r[2] as string, status: r[3] as string,\n    approvedBy: r[4] as string | null, expiresAt: r[5] as string,\n  };\n}\n\nexport async function approveDeviceCode(deviceCode: string, userId: string): Promise {\n  const res = await sqlite.execute({\n    sql: `UPDATE device_codes SET status = 'approved', approved_by = ?\n          WHERE device_code = ? AND status = 'pending'\n          AND expires_at > datetime('now')`,\n    args: [userId, deviceCode],\n  });\n  return (res.rowsAffected ?? 0) > 0;\n}\n\nexport async function denyDeviceCode(deviceCode: string): Promise {\n  const res = await sqlite.execute({\n    sql: `UPDATE device_codes SET status = 'denied'\n          WHERE device_code = ? AND status = 'pending'`,\n    args: [deviceCode],\n  });\n  return (res.rowsAffected ?? 0) > 0;\n}\n\nexport async function consumeDeviceCode(deviceCode: string): Promise<{\n  scope: string; approvedBy: string;\n} | null> {\n  const dc = await getDeviceCode(deviceCode);\n  if (!dc || dc.status !== \"approved\" || !dc.approvedBy) return null;\n  if (new Date(dc.expiresAt) < new Date()) return null;\n  // Mark consumed by setting status\n  await sqlite.execute({\n    sql: `UPDATE device_codes SET status = 'consumed' WHERE device_code = ?`,\n    args: [deviceCode],\n  });\n  return { scope: dc.scope, approvedBy: dc.approvedBy };\n}\n\nexport async function cleanupDeviceCodes() {\n  await sqlite.execute({\n    sql: `DELETE FROM device_codes WHERE expires_at < datetime('now')`,\n    args: [],\n  });\n}\n\n// ─── Room invitation ─────────────────────────────────────────────\n\nexport async function inviteUserToRoom(\n  userId: string, roomId: string, role: string, invitedBy: string, label?: string,\n) {\n  await sqlite.execute({\n    sql: `INSERT INTO smcp_user_rooms (user_id, room_id, access, invited_by, label)\n          VALUES (?, ?, ?, ?, ?)\n          ON CONFLICT(user_id, room_id) DO UPDATE SET\n            access = excluded.access, invited_by = excluded.invited_by`,\n    args: [userId, roomId, role, invitedBy, label ?? null],\n  });\n}\n\n\nexport async function updateDeviceCodeScope(deviceCode: string, scope: string) {\n  await sqlite.execute({\n    sql: `UPDATE device_codes SET scope = ? WHERE device_code = ?`,\n    args: [scope, deviceCode],\n  });\n}\n",[],[753,775],{"_105":782,"_97":783,"_166":784,"_168":754,"_169":149,"_170":122,"_171":172,"_107":785,"_102":33,"_174":356,"_176":786,"_177":22,"_178":-5,"_179":787,"_101":788},"ca6eff4a-1f92-11f1-943c-42dde27851f2","device.ts","019cebf2-a8a6-7120-b163-ab34c756c3cb",["D",1773485074605],"/**\n * device.ts — OAuth Device Authorization (RFC 8628) for sync.\n *\n * Flow:\n *   1. CLI calls POST /auth/device → gets device_code + user_code + verification_uri\n *   2. User opens verification_uri in browser\n *   3. Browser page shows user_code, triggers WebAuthn passkey auth\n *   4. After passkey → redirects to /auth/consent?mode=device for scope selection\n *   5. Unified consent page handles room picker + approve/deny\n *   6. CLI polls POST /auth/device/token → gets access_token + refresh_token\n */\n\nimport * as db from \"./db.ts\";\nimport { getRpId } from \"./webauthn.ts\";\n\nfunction jsonResp(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data, null, 2), {\n    status,\n    headers: {\n      \"Content-Type\": \"application/json\",\n      \"Access-Control-Allow-Origin\": \"*\",\n      \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n      \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n      \"Cache-Control\": \"no-store\",\n    },\n  });\n}\n\nfunction getOrigin(req: Request): string {\n  const url = new URL(req.url);\n  return `${url.protocol}//${url.host}`;\n}\n\nconst ACCESS_TOKEN_EXPIRY = 3600;\n\n// ═══════════════════════════════════════════════════════════════════\n// POST /auth/device — CLI initiates device auth\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleDeviceStart(req: Request): Promise {\n  let body: Record = {};\n  try { body = await req.json(); } catch {}\n  const scope = body.scope ?? \"rooms:* create_rooms\";\n  const clientId = body.client_id ?? null;\n  const { deviceCode, userCode } = await db.createDeviceCode(scope, clientId);\n  const origin = getOrigin(req);\n  return jsonResp({\n    device_code: deviceCode,\n    user_code: userCode,\n    verification_uri: `${origin}/auth/device`,\n    verification_uri_complete: `${origin}/auth/device?code=${userCode}`,\n    expires_in: 900,\n    interval: 5,\n  });\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// GET /auth/device — Code entry + passkey auth page (minimal)\n// After passkey auth, redirects to /auth/consent?mode=device\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleDevicePage(req: Request): Promise {\n  const url = new URL(req.url);\n  const code = url.searchParams.get(\"code\") ?? \"\";\n  const origin = getOrigin(req);\n  const rpId = getRpId(req);\n  return new Response(renderDeviceAuthPage(origin, rpId, code), {\n    headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n  });\n}\n\nfunction esc(s: string): string {\n  return s.replace(/&/g, \"&\").replace(//g, \">\").replace(/\"/g, \""\");\n}\n\nfunction renderDeviceAuthPage(origin: string, rpId: string, prefillCode: string): string {\n  // Minimal page: code entry → passkey auth → redirect to unified consent\n  return `\n\n\n\nAuthorize Device — sync\n\n\n\n\n  \n    sync·device
\n    A device is requesting access to your sync account.
\n    \n      Enter the code shown on your device\n      
\n      \n    
\n    \n      ${esc(prefillCode)}
\n      Requesting: 
\n      \n      \n    
\n  
\n  🔐
Waiting for passkey...
\n  ✗
Failed
\n  🚫
Access Denied
The device will be notified.
\n
\n\n`;\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// POST /auth/device/lookup\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleDeviceLookup(req: Request): Promise {\n  const { user_code } = await req.json();\n  if (!user_code) return jsonResp({ error: \"user_code required\" }, 400);\n  const code = await db.getDeviceCodeByUserCode(user_code.toUpperCase());\n  if (!code) return jsonResp({ error: \"not_found\" }, 404);\n  if (code.status !== \"pending\") return jsonResp({ error: \"already_used\" }, 409);\n  return jsonResp({ device_code: code.deviceCode, scope: code.scope, user_code: code.userCode });\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// POST /auth/device/approve (kept for backward compat — consent page uses /auth/consent/approve)\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleDeviceApprove(req: Request): Promise {\n  const { device_code, session_id, user_code, scope: narrowedScope } = await req.json();\n  if (!session_id) return jsonResp({ error: \"session_id required\" }, 400);\n  const session = await db.validateSession(session_id);\n  if (!session) return jsonResp({ error: \"invalid_session\" }, 401);\n  let dc;\n  if (device_code) dc = await db.getDeviceCode(device_code);\n  else if (user_code) dc = await db.getDeviceCodeByUserCode(user_code);\n  if (!dc) return jsonResp({ error: \"not_found\" }, 404);\n  if (dc.status !== \"pending\") return jsonResp({ error: \"already_processed\" }, 409);\n  if (narrowedScope && typeof narrowedScope === \"string\" && narrowedScope.trim()) {\n    await db.updateDeviceCodeScope(dc.deviceCode, narrowedScope.trim());\n  }\n  const ok = await db.approveDeviceCode(dc.deviceCode, session.userId);\n  if (!ok) return jsonResp({ error: \"approval_failed\" }, 500);\n  await db.deleteSession(session_id);\n  return jsonResp({ approved: true, device_code: dc.deviceCode });\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// POST /auth/device/deny\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleDeviceDeny(req: Request): Promise {\n  const { device_code } = await req.json();\n  if (!device_code) return jsonResp({ error: \"device_code required\" }, 400);\n  await db.denyDeviceCode(device_code);\n  return jsonResp({ denied: true });\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// POST /auth/device/token — CLI polls for token\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleDeviceToken(req: Request): Promise {\n  let body: Record;\n  const ct = req.headers.get(\"content-type\") ?? \"\";\n  if (ct.includes(\"application/x-www-form-urlencoded\")) {\n    body = Object.fromEntries(new URLSearchParams(await req.text()));\n  } else {\n    body = await req.json();\n  }\n  const deviceCode = body.device_code;\n  if (!deviceCode) return jsonResp({ error: \"invalid_request\", error_description: \"device_code required\" }, 400);\n  const dc = await db.getDeviceCode(deviceCode);\n  if (!dc) return jsonResp({ error: \"invalid_grant\", error_description: \"Unknown device code\" }, 400);\n  if (new Date(dc.expiresAt) < new Date()) return jsonResp({ error: \"expired_token\" }, 400);\n  switch (dc.status) {\n    case \"pending\": return jsonResp({ error: \"authorization_pending\" });\n    case \"denied\": return jsonResp({ error: \"access_denied\" }, 403);\n    case \"consumed\": return jsonResp({ error: \"invalid_grant\", error_description: \"Already consumed\" }, 400);\n    case \"approved\": {\n      const consumed = await db.consumeDeviceCode(deviceCode);\n      if (!consumed) return jsonResp({ error: \"server_error\" }, 500);\n      const result = await db.mintToken({\n        userId: consumed.approvedBy, scope: consumed.scope,\n        label: \"Device auth\", clientId: dc.clientId ?? \"cli\",\n        expiresInSec: ACCESS_TOKEN_EXPIRY, withRefresh: true,\n      });\n      return jsonResp({\n        access_token: result.token, token_type: \"Bearer\",\n        expires_in: ACCESS_TOKEN_EXPIRY, refresh_token: result.refreshToken,\n        scope: consumed.scope,\n      });\n    }\n    default: return jsonResp({ error: \"server_error\" }, 500);\n  }\n}\n",[],[753,783],{"_105":790,"_97":791,"_166":792,"_168":754,"_169":149,"_170":122,"_171":172,"_107":793,"_102":33,"_174":356,"_176":794,"_177":22,"_178":-5,"_179":795,"_101":796},"ca6f457c-1f92-11f1-943c-42dde27851f2","elevate.ts","019cebf2-a8a6-7120-b163-accf7d373b61",["D",1773485074605],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\n/**\n * elevate.ts — Unified scope consent handlers.\n *\n * Routes:\n *   GET  /auth/consent              SSR consent page (React)\n *   GET  /auth/consent/rooms        Load user's rooms + token scope (API)\n *   POST /auth/consent/approve      Apply scope changes (mode-dependent)\n *   GET  /auth/elevate              Redirect to /auth/consent?mode=elevate\n */\n\nimport * as db from \"./db.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { renderPage } from \"../frontend/ssr.ts\";\nimport { ConsentPage } from \"../frontend/pages/consent/ConsentPage.tsx\";\n\nfunction jsonResp(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data, null, 2), {\n    status,\n    headers: {\n      \"Content-Type\": \"application/json\",\n      \"Access-Control-Allow-Origin\": \"*\",\n      \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n      \"Access-Control-Allow-Headers\": \"Content-Type, Authorization, X-Session-Id\",\n      \"Cache-Control\": \"no-store\",\n    },\n  });\n}\n\nfunction getOrigin(req: Request): string {\n  const url = new URL(req.url);\n  return `${url.protocol}//${url.host}`;\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// GET /auth/consent — Unified SSR consent page\n// ═══════════════════════════════════════════════════════════════════\n\nexport function handleConsentPage(req: Request): Response {\n  const url = new URL(req.url);\n  const origin = getOrigin(req);\n\n  const props = {\n    origin,\n    mode: (url.searchParams.get(\"mode\") ?? \"elevate\") as \"elevate\" | \"device\" | \"oauth\",\n    // Elevate\n    tokenId: url.searchParams.get(\"token_id\") ?? undefined,\n    addRoom: url.searchParams.get(\"room\") ?? undefined,\n    addLevel: url.searchParams.get(\"level\") ?? undefined,\n    // Device (pre-authenticated)\n    sessionId: url.searchParams.get(\"session_id\") ?? undefined,\n    deviceCode: url.searchParams.get(\"device_code\") ?? undefined,\n    requestedScope: url.searchParams.get(\"scope\") ?? undefined,\n    // OAuth (pre-authenticated)\n    clientId: url.searchParams.get(\"client_id\") ?? undefined,\n    clientName: url.searchParams.get(\"client_name\") ?? undefined,\n    redirectUri: url.searchParams.get(\"redirect_uri\") ?? undefined,\n    codeChallenge: url.searchParams.get(\"code_challenge\") ?? undefined,\n    codeChallengeMethod: url.searchParams.get(\"code_challenge_method\") ?? undefined,\n    oauthScope: url.searchParams.get(\"scope\") ?? undefined,\n    oauthState: url.searchParams.get(\"state\") ?? undefined,\n    resource: url.searchParams.get(\"resource\") ?? undefined,\n  };\n\n  // Strip undefined values for clean serialization\n  const cleanProps = Object.fromEntries(\n    Object.entries(props).filter(([, v]) => v !== undefined)\n  );\n\n  return renderPage({\n    element: ,\n    entry: \"https://esm.town/v/c15r/sync/frontend/pages/consent/client.tsx\",\n    props: cleanProps,\n    title: `${props.mode === \"elevate\" ? \"Grant Access\" : props.mode === \"device\" ? \"Authorize Device\" : \"Authorize\"} — sync`,\n  });\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// GET /auth/elevate — Legacy redirect\n// ═══════════════════════════════════════════════════════════════════\n\nexport function handleElevatePage(req: Request): Response {\n  const url = new URL(req.url);\n  const newUrl = new URL(\"/auth/consent\", url.origin);\n  newUrl.searchParams.set(\"mode\", \"elevate\");\n  for (const key of [\"token_id\", \"room\", \"level\"]) {\n    const v = url.searchParams.get(key);\n    if (v) newUrl.searchParams.set(key, v);\n  }\n  return Response.redirect(newUrl.toString(), 302);\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// GET /auth/consent/rooms — Load user's rooms + token scope\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleConsentRooms(req: Request): Promise {\n  const url = new URL(req.url);\n  const sessionId = url.searchParams.get(\"session_id\") ?? req.headers.get(\"x-session-id\") ?? \"\";\n  const tokenId = url.searchParams.get(\"token_id\") ?? \"\";\n\n  if (!sessionId) return jsonResp({ error: \"session_id required\" }, 400);\n  const session = await db.validateSession(sessionId);\n  if (!session) return jsonResp({ error: \"invalid_session\" }, 401);\n\n  // Fetch user's rooms with agents\n  const userRooms = await db.listUserRooms(session.userId);\n  const rooms = [];\n  for (const ur of userRooms) {\n    const agentsRes = await sqlite.execute({\n      sql: `SELECT id, name, role, status FROM agents WHERE room_id = ? ORDER BY joined_at`,\n      args: [ur.roomId],\n    });\n    rooms.push({\n      room_id: ur.roomId,\n      access: ur.access,\n      label: ur.label,\n      agents: agentsRes.rows.map((r: any[]) => ({ id: r[0], name: r[1], role: r[2], status: r[3] })),\n    });\n  }\n\n  // If editing existing token, include its current scope\n  let tokenScope: string | null = null;\n  let tokenLabel: string | null = null;\n  if (tokenId) {\n    const tokenResult = await sqlite.execute({\n      sql: `SELECT scope, label FROM tokens WHERE id = ? AND minted_by = ? AND revoked = 0`,\n      args: [tokenId, session.userId],\n    });\n    if (tokenResult.rows.length > 0) {\n      tokenScope = tokenResult.rows[0][0] as string;\n      tokenLabel = tokenResult.rows[0][1] as string | null;\n    }\n  }\n\n  return jsonResp({ rooms, token_scope: tokenScope, token_label: tokenLabel });\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// POST /auth/consent/approve — Apply scope changes (mode-dependent)\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleConsentApprove(req: Request): Promise {\n  const body = await req.json();\n  const { mode, session_id, new_scope } = body;\n\n  if (!session_id || !new_scope) return jsonResp({ error: \"session_id and new_scope required\" }, 400);\n\n  const session = await db.validateSession(session_id);\n  if (!session) return jsonResp({ error: \"invalid_session\" }, 401);\n\n  // Validate: user must have access to all rooms in scope\n  const scopeParts = new_scope.split(/\\s+/).filter(Boolean);\n  for (const part of scopeParts) {\n    if (!part.startsWith(\"rooms:\")) continue;\n    const roomId = part.split(\":\")[1];\n    if (roomId === \"*\") continue;\n    const userRoom = await sqlite.execute({\n      sql: `SELECT access FROM smcp_user_rooms WHERE user_id = ? AND room_id = ?`,\n      args: [session.userId, roomId],\n    });\n    if (userRoom.rows.length === 0) {\n      return jsonResp({ error: \"no_access\", message: `You don't have access to room \"${roomId}\"`, room: roomId }, 403);\n    }\n  }\n\n  // ── Mode: Elevate (patch existing token) ──\n  if (mode === \"elevate\") {\n    const tokenId = body.token_id;\n    if (!tokenId) return jsonResp({ error: \"token_id required\" }, 400);\n    const tokenResult = await sqlite.execute({\n      sql: `SELECT id FROM tokens WHERE id = ? AND minted_by = ? AND revoked = 0`,\n      args: [tokenId, session.userId],\n    });\n    if (tokenResult.rows.length === 0) return jsonResp({ error: \"token_not_found\" }, 404);\n    await sqlite.execute({ sql: `UPDATE tokens SET scope = ? WHERE id = ?`, args: [new_scope, tokenId] });\n    await db.deleteSession(session_id);\n    return jsonResp({ ok: true, mode: \"elevate\", token_id: tokenId, scope: new_scope });\n  }\n\n  // ── Mode: Device (approve device code with chosen scope) ──\n  if (mode === \"device\") {\n    const deviceCode = body.device_code;\n    if (!deviceCode) return jsonResp({ error: \"device_code required\" }, 400);\n    // Update scope + approve\n    await sqlite.execute({ sql: `UPDATE device_codes SET scope = ? WHERE device_code = ?`, args: [new_scope, deviceCode] });\n    const ok = await db.approveDeviceCode(deviceCode, session.userId);\n    if (!ok) return jsonResp({ error: \"approval_failed\" }, 500);\n    await db.deleteSession(session_id);\n    return jsonResp({ ok: true, mode: \"device\" });\n  }\n\n  // ── Mode: OAuth (issue auth code with chosen scope) ──\n  if (mode === \"oauth\") {\n    const { client_id, redirect_uri, code_challenge, code_challenge_method, state, resource } = body;\n    if (!client_id || !redirect_uri || !code_challenge) {\n      return jsonResp({ error: \"missing OAuth params\" }, 400);\n    }\n    const code = await db.generateToken(\"authz\");\n    await db.saveAuthCode({\n      code, clientId: client_id, userId: session.userId,\n      redirectUri: redirect_uri, codeChallenge: code_challenge,\n      codeChallengeMethod: code_challenge_method || \"S256\",\n      scope: new_scope, resource,\n    });\n    await db.deleteSession(session_id);\n    const redirect = new URL(redirect_uri);\n    redirect.searchParams.set(\"code\", code);\n    if (state) redirect.searchParams.set(\"state\", state);\n    return jsonResp({ ok: true, mode: \"oauth\", redirect: redirect.toString() });\n  }\n\n  return jsonResp({ error: \"invalid mode\" }, 400);\n}\n",[],[753,791],{"_105":798,"_97":799,"_166":800,"_168":754,"_169":149,"_170":122,"_171":172,"_107":801,"_102":33,"_174":356,"_176":802,"_177":22,"_178":-5,"_179":803,"_101":804},"ca6f6ebc-1f92-11f1-943c-42dde27851f2","manage.tsx","019cebf2-a8a6-7120-b163-b3d6cbcc627b",["D",1773485074605],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\n/**\n * manage.tsx — Management UI, authorize page, and recovery flow.\n *\n * Contains all endpoints that render JSX (SSR) or serve session-authenticated APIs:\n * - GET /oauth/authorize — Authorization page with WebAuthn\n * - GET /manage — Management dashboard\n * - GET/POST/DELETE /manage/api/* — Management REST API\n * - GET /recover — Recovery page\n * - POST /recover/* — Recovery API endpoints\n */\n\nimport {\n  generateRegistrationOptions,\n  verifyRegistrationResponse,\n} from \"npm:@simplewebauthn/server@13\";\nimport type {\n  AuthenticatorTransportFuture,\n} from \"npm:@simplewebauthn/server@13\";\n\nimport * as db from \"./db.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { renderPage } from \"../frontend/ssr.ts\";\nimport { RecoverPage } from \"../frontend/pages/recover/RecoverPage.tsx\";\nimport { ManagePage } from \"../frontend/pages/manage/ManagePage.tsx\";\nimport { AuthorizePage } from \"../frontend/pages/authorize/AuthorizePage.tsx\";\nimport { getRpId } from \"./webauthn.ts\";\nimport { fetchRoomRoles } from \"../agents.ts\";\n\n// ─── Helpers ─────────────────────────────────────────────────────\n\nfunction getOrigin(req: Request): string {\n  const url = new URL(req.url);\n  return `${url.protocol}//${url.host}`;\n}\n\n/** Compute the dashboard origin from the request.\n *  If served from mcp.X, dashboard is at X. Otherwise same origin. */\nfunction getDashboardOrigin(req: Request): string {\n  const url = new URL(req.url);\n  const hostname = url.hostname;\n  if (hostname.startsWith(\"mcp.\")) {\n    return `${url.protocol}//${hostname.slice(4)}${url.port ? \":\" + url.port : \"\"}`;\n  }\n  return getOrigin(req);\n}\n\nfunction json(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data, null, 2), {\n    status,\n    headers: {\n      \"Content-Type\": \"application/json\",\n      \"Access-Control-Allow-Origin\": \"*\",\n      \"Access-Control-Allow-Methods\": \"GET, POST, DELETE, OPTIONS\",\n      \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n    },\n  });\n}\n\nfunction html(body: string, status = 200): Response {\n  return new Response(body, {\n    status,\n    headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n  });\n}\n\nconst ERROR_CSS = `*{box-sizing:border-box;margin:0;padding:0}body{font-family:-apple-system,BlinkMacSystemFont,\"Segoe UI\",system-ui,sans-serif;background:#0d1117;color:#c9d1d9;min-height:100vh;display:flex;align-items:center;justify-content:center}.container{width:100%;max-width:420px;padding:1rem}.card{background:#161b22;border:1px solid #21262d;border-radius:12px;padding:2rem}h1{font-size:1.5rem;margin-bottom:0.75rem;font-weight:600}.error{color:#f85149;font-size:0.85rem;margin-top:0.5rem}`;\n\nfunction errorPage(message: string): string {\n  return `\nError — sync-mcp\n\n\n\n\nError
${escapeHtml(message)}
\n
`;\n}\n\nfunction escapeHtml(str: string): string {\n  return str.replace(/&/g, \"&\").replace(//g, \">\")\n    .replace(/\"/g, \""\");\n}\n\n// ─── Authorization Endpoint ──────────────────────────────────────\n\nexport async function handleAuthorize(req: Request): Promise {\n  const url = new URL(req.url);\n  const clientId = url.searchParams.get(\"client_id\");\n  const redirectUri = url.searchParams.get(\"redirect_uri\");\n  const responseType = url.searchParams.get(\"response_type\");\n  const codeChallenge = url.searchParams.get(\"code_challenge\");\n  const codeChallengeMethod = url.searchParams.get(\"code_challenge_method\") ??\n    \"S256\";\n  const scope = url.searchParams.get(\"scope\") ?? \"sync:rooms\";\n  const state = url.searchParams.get(\"state\") ?? \"\";\n  const resource = url.searchParams.get(\"resource\") ?? \"\";\n\n  if (!clientId || !redirectUri || responseType !== \"code\" || !codeChallenge) {\n    return html(\n      errorPage(\n        \"Missing required parameters (client_id, redirect_uri, response_type=code, code_challenge)\",\n      ),\n      400,\n    );\n  }\n\n  const client = await db.getOAuthClient(clientId);\n  if (!client) {\n    return html(errorPage(\"Unknown client_id\"), 400);\n  }\n  if (!client.redirectUris.includes(redirectUri)) {\n    return html(errorPage(\"redirect_uri not registered for this client\"), 400);\n  }\n\n  const origin = getOrigin(req);\n\n  const oauthParams = {\n    clientId,\n    clientName: client.clientName ?? \"MCP Client\",\n    redirectUri,\n    codeChallenge,\n    codeChallengeMethod,\n    scope,\n    state,\n    resource,\n  };\n\n  return renderPage({\n    element: ,\n    entry: \"https://esm.town/v/c15r/sync/frontend/pages/authorize/client.tsx\",\n    props: { origin, params: oauthParams },\n    title: \"Sign in — sync·mcp\",\n  });\n}\n\n// ─── Management Page ─────────────────────────────────────────────\n\nexport function handleManagePage(req: Request): Response {\n  const origin = getOrigin(req);\n  const dashboardOrigin = getDashboardOrigin(req);\n  return renderPage({\n    element: ,\n    entry: \"https://esm.town/v/c15r/sync/frontend/pages/manage/client.tsx\",\n    props: { origin, dashboardOrigin },\n    title: \"Manage — sync·mcp\",\n  });\n}\n\nexport async function handleManageApi(req: Request): Promise {\n  const sessionId = req.headers.get(\"x-session-id\");\n  if (!sessionId) return json({ error: \"Missing X-Session-Id header\" }, 401);\n\n  const session = await db.validateSession(sessionId);\n  if (!session) {\n    return json(\n      { error: \"Invalid or expired session. Please sign in again.\" },\n      401,\n    );\n  }\n  if (session.scope === \"recovery\") {\n    return json(\n      { error: \"Recovery sessions cannot access management API\" },\n      403,\n    );\n  }\n\n  const userId = session.userId;\n  const url = new URL(req.url);\n  const path = url.pathname.replace(\"/manage/api\", \"\");\n\n  // GET /manage/api/me — user info\n  if (req.method === \"GET\" && path === \"/me\") {\n    const user = await db.getUserById(userId);\n    const creds = await db.getCredentialsByUserId(userId);\n    return json({\n      user: user\n        ? { id: user.id, username: user.username, created_at: user.created_at }\n        : null,\n      passkeys: creds.map((c) => ({\n        id: c.id.substring(0, 16) + \"...\",\n        device_type: c.deviceType,\n        backed_up: c.backedUp,\n      })),\n    });\n  }\n\n  // GET /manage/api/rooms — user's rooms with agents and roles\n  if (req.method === \"GET\" && path === \"/rooms\") {\n    const userRooms = await db.listUserRooms(userId);\n    const roomsWithDetail = [];\n    for (const ur of userRooms) {\n      const agentsRes = await sqlite.execute({\n        sql: `SELECT id, name, role, status, last_heartbeat FROM agents WHERE room_id = ? ORDER BY joined_at`,\n        args: [ur.roomId],\n      });\n      const agents = agentsRes.rows.map((r: any[]) => ({\n        id: r[0], name: r[1], role: r[2], status: r[3], last_heartbeat: r[4],\n      }));\n      const roles = await fetchRoomRoles(ur.roomId);\n      roomsWithDetail.push({\n        room_id: ur.roomId,\n        access: ur.access,\n        label: ur.label,\n        is_default: ur.isDefault,\n        agents,\n        roles,\n      });\n    }\n    return json({ rooms: roomsWithDetail });\n  }\n\n  // POST /manage/api/rooms — create a new room\n  if (req.method === \"POST\" && path === \"/rooms\") {\n    const body = await req.json();\n    const roomId = body.id ?? crypto.randomUUID();\n    const label = body.label ?? `Room: ${roomId}`;\n    // Check if room already exists\n    const existing = await sqlite.execute({\n      sql: `SELECT id FROM rooms WHERE id = ?`, args: [roomId],\n    });\n    if (existing.rows.length > 0) return json({ error: \"room_exists\", id: roomId }, 409);\n    // Create room\n    const { generateToken, hashToken } = await import(\"../auth.ts\");\n    const token = generateToken(\"room\");\n    const hash = await hashToken(token);\n    const viewToken = generateToken(\"view\");\n    const viewHash = await hashToken(viewToken);\n    await sqlite.execute({\n      sql: `INSERT INTO rooms (id, meta, token_hash, view_token_hash) VALUES (?, ?, ?, ?)`,\n      args: [roomId, JSON.stringify(body.meta ?? {}), hash, viewHash],\n    });\n    // Link to user as owner\n    await sqlite.execute({\n      sql: `INSERT OR IGNORE INTO smcp_user_rooms (user_id, room_id, access, label)\n            VALUES (?, ?, 'owner', ?)`,\n      args: [userId, roomId, label],\n    });\n    return json({ id: roomId, label, access: \"owner\" }, 201);\n  }\n\n  // POST /manage/api/rooms/:id/invite — invite a user\n  if (req.method === \"POST\" && path.match(/^\\/rooms\\/[^/]+\\/invite$/)) {\n    const roomId = path.split(\"/\")[2];\n    const userRoom = await db.getUserRoom(userId, roomId);\n    if (!userRoom || userRoom.access !== \"owner\") {\n      return json({ error: \"not_owner\", message: \"Only room owners can invite users\" }, 403);\n    }\n    const body = await req.json();\n    const { username, role } = body;\n    if (!username) return json({ error: \"username required\" }, 400);\n    const validRoles = [\"owner\", \"collaborator\", \"participant\", \"observer\"];\n    const targetRole = role ?? \"participant\";\n    if (!validRoles.includes(targetRole)) return json({ error: \"invalid_role\", valid: validRoles }, 400);\n    const targetUser = await db.getUserByUsername(username);\n    if (!targetUser) return json({ error: \"user_not_found\", message: `No user \"${username}\"` }, 404);\n    await db.inviteUserToRoom(targetUser.id, roomId, targetRole, userId, body.label);\n    return json({ invited: true, username, room: roomId, role: targetRole });\n  }\n\n  // DELETE /manage/api/rooms/:id — delete a room (owner only)\n  if (req.method === \"DELETE\" && path.match(/^\\/rooms\\/[^/]+$/)) {\n    const roomId = path.split(\"/\")[2];\n    const userRoom = await db.getUserRoom(userId, roomId);\n    if (!userRoom || userRoom.access !== \"owner\") {\n      return json({ error: \"not_owner\", message: \"Only room owners can delete rooms\" }, 403);\n    }\n    // Delete room data (cascade: agents, state, actions, views, messages, audit)\n    await sqlite.batch([\n      { sql: `DELETE FROM state WHERE room_id = ?`, args: [roomId] },\n      { sql: `DELETE FROM actions WHERE room_id = ?`, args: [roomId] },\n      { sql: `DELETE FROM views WHERE room_id = ?`, args: [roomId] },\n      { sql: `DELETE FROM agents WHERE room_id = ?`, args: [roomId] },\n      { sql: `DELETE FROM smcp_user_rooms WHERE room_id = ?`, args: [roomId] },\n      { sql: `DELETE FROM rooms WHERE id = ?`, args: [roomId] },\n    ]);\n    return json({ deleted: true, room: roomId });\n  }\n\n  // POST /manage/api/room-token — mint a temporary token for dashboard access\n  if (req.method === \"POST\" && path === \"/room-token\") {\n    const body = await req.json();\n    const roomId = body.room_id;\n    if (!roomId) return json({ error: \"room_id required\" }, 400);\n\n    // Check user has access to this room\n    const userRoom = await db.getUserRoom(userId, roomId);\n    if (!userRoom) return json({ error: \"no_access\", message: \"You don't have access to this room\" }, 403);\n\n    // Mint a short-lived token scoped to this room\n    const level = userRoom.access === \"owner\" ? \"\" : \":read\";\n    const result = await db.mintToken({\n      userId,\n      scope: `rooms:${roomId}${level}`,\n      label: `Dashboard: ${roomId}`,\n      roomId,\n      expiresInSec: 3600, // 1 hour\n    });\n\n    return json({\n      token: result.token,\n      room_id: roomId,\n      access: userRoom.access,\n      expires_at: result.expiresAt,\n    });\n  }\n\n  // ── Unified tokens (v7) ──\n\n  // GET /manage/api/tokens — list unified tokens\n  if (req.method === \"GET\" && path === \"/tokens\") {\n    const tokens = await db.listUserTokens(userId);\n    return json({\n      tokens: tokens.map(t => ({\n        id: t.id,\n        scope: t.scope,\n        label: t.label,\n        room_id: t.roomId,\n        agent_id: t.agentId,\n        client_id: t.clientId,\n        revoked: t.revoked,\n        expires_at: t.expiresAt,\n        created_at: t.createdAt,\n      })),\n    });\n  }\n\n  // DELETE /manage/api/tokens/:id — revoke a unified token\n  if (req.method === \"DELETE\" && path.startsWith(\"/tokens/\")) {\n    const tokenId = path.split(\"/\")[2];\n    if (!tokenId) return json({ error: \"Missing token ID\" }, 400);\n    const ok = await db.revokeToken(tokenId, userId);\n    if (!ok) return json({ error: \"Token not found or not owned by you\" }, 404);\n    return json({ revoked: true, id: tokenId });\n  }\n\n  // POST /manage/api/recovery — generate recovery token\n  if (req.method === \"POST\" && path === \"/recovery\") {\n    const result = await db.createRecoveryToken(userId);\n    if (\"error\" in result) return json({ error: result.error }, 400);\n    return json({\n      token: result.token,\n      expires_at: result.expiresAt,\n      warning: \"Store this token safely. It will not be shown again.\",\n    }, 201);\n  }\n\n  // GET /manage/api/recovery — list recovery tokens (metadata only)\n  if (req.method === \"GET\" && path === \"/recovery\") {\n    const tokens = await db.listRecoveryTokens(userId);\n    return json({ tokens });\n  }\n\n  // DELETE /manage/api/recovery/:id — revoke a recovery token\n  if (req.method === \"DELETE\" && path.startsWith(\"/recovery/\")) {\n    const tokenId = path.split(\"/\")[2];\n    if (!tokenId) return json({ error: \"Missing token ID\" }, 400);\n    await db.revokeRecoveryToken(userId, tokenId);\n    return json({ deleted: true, id: tokenId });\n  }\n\n  return json({ error: \"Not found\" }, 404);\n}\n\n// ─── Recovery: passkey re-registration ───────────────────────────\n\nexport function handleRecoverPage(req: Request): Response {\n  const origin = getOrigin(req);\n  return renderPage({\n    element: ,\n    entry: \"https://esm.town/v/c15r/sync/frontend/pages/recover/client.tsx\",\n    props: { origin },\n    title: \"Recover — sync·mcp\",\n  });\n}\n\nexport async function handleRecoverValidate(req: Request): Promise {\n  const { token } = await req.json();\n  if (!token) return json({ error: \"Recovery token required\" }, 400);\n\n  const result = await db.validateRecoveryToken(token);\n  if (!result) {\n    return json(\n      { error: \"Invalid, expired, or already-used recovery token\" },\n      400,\n    );\n  }\n\n  const sessionId = await db.createSession(result.userId, \"recovery\");\n\n  return json({ verified: true, sessionId, tokenId: result.tokenId });\n}\n\nexport async function handleRecoverRegisterOptions(\n  req: Request,\n): Promise {\n  const { sessionId } = await req.json();\n  if (!sessionId) return json({ error: \"Session required\" }, 400);\n\n  const session = await db.validateSession(sessionId);\n  if (!session || session.scope !== \"recovery\") {\n    return json({ error: \"Invalid or expired recovery session\" }, 400);\n  }\n\n  const user = await db.getUserById(session.userId);\n  if (!user) return json({ error: \"User not found\" }, 400);\n\n  const rpId = getRpId(req);\n  const existingCreds = await db.getCredentialsByUserId(user.id, rpId);\n\n  const options = await generateRegistrationOptions({\n    rpName: \"sync-mcp\",\n    rpID: rpId,\n    userName: user.username,\n    userID: new TextEncoder().encode(user.id),\n    attestationType: \"none\",\n    authenticatorSelection: {\n      residentKey: \"preferred\",\n      userVerification: \"preferred\",\n    },\n    excludeCredentials: existingCreds.map((c) => ({\n      id: c.id,\n      transports: c.transports as AuthenticatorTransportFuture[] | undefined,\n    })),\n  });\n\n  const challengeId = db.generateId();\n  await db.saveChallenge(\n    challengeId,\n    options.challenge,\n    \"recovery-registration\",\n    user.id,\n  );\n\n  return json({ options, challengeId, username: user.username });\n}\n\nexport async function handleRecoverRegisterVerify(\n  req: Request,\n): Promise {\n  const { challengeId, sessionId, tokenId, response } = await req.json();\n\n  const session = await db.validateSession(sessionId);\n  if (!session || session.scope !== \"recovery\") {\n    return json({ error: \"Invalid or expired recovery session\" }, 400);\n  }\n\n  const challenge = await db.getChallenge(challengeId);\n  if (!challenge || challenge.type !== \"recovery-registration\") {\n    return json({ error: \"Invalid or expired challenge\" }, 400);\n  }\n\n  const rpId = getRpId(req);\n  const origin = getOrigin(req);\n\n  try {\n    const verification = await verifyRegistrationResponse({\n      response,\n      expectedChallenge: challenge.challenge,\n      expectedOrigin: origin,\n      expectedRPID: rpId,\n    });\n\n    if (!verification.verified || !verification.registrationInfo) {\n      return json({ error: \"Verification failed\" }, 400);\n    }\n\n    const { credential, credentialDeviceType, credentialBackedUp } =\n      verification.registrationInfo;\n\n    await db.saveCredential({\n      id: credential.id,\n      userId: session.userId,\n      publicKey: credential.publicKey,\n      counter: credential.counter,\n      transports: credential.transports as string[],\n      deviceType: credentialDeviceType,\n      backedUp: credentialBackedUp,\n      rpId,\n    });\n\n    await db.deleteChallenge(challengeId);\n    await db.consumeRecoveryToken(tokenId);\n    await db.deleteSession(sessionId);\n\n    return json({ verified: true, rpId });\n  } catch (err) {\n    return json(\n      { error: `Registration failed: ${(err as Error).message}` },\n      400,\n    );\n  }\n}\n",[],[753,799],{"_105":806,"_97":807,"_166":808,"_168":754,"_169":149,"_170":122,"_171":172,"_107":809,"_102":33,"_174":810,"_176":811,"_177":22,"_178":-5,"_179":812,"_101":813},"ca6fbb4c-1f92-11f1-943c-42dde27851f2","mcp.ts","019cebf2-a8a6-7120-b163-b6559faf8597",["D",1773485074605],"http","/**\n * mcp.ts — sync-mcp HTTP router + MCP protocol handler\n *\n * v7 Phase 1: extractSession also checks unified tokens table for tok_ tokens.\n */\n\nimport {\n  cleanupExpired, ensureSchema, validateAccessToken,\n  getUserSession, createUserSession, getUserRoom, getEmbodiment,\n  parseScope, checkRoomInScope,\n  validateTokenByHash,\n  type ParsedScope,\n} from \"./db.ts\";\nimport * as db from \"./db.ts\";\nimport {\n  handleASMetadata,\n  handleAuthOptions,\n  handleAuthorize,\n  handleAuthVerify,\n  handleConsent,\n  handleDCR,\n  handleManageApi,\n  handleManagePage,\n  handlePRM,\n  handleRecoverPage,\n  handleRecoverRegisterOptions,\n  handleRecoverRegisterVerify,\n  handleRecoverValidate,\n  handleRegisterOptions,\n  handleRegisterVerify,\n  handleToken,\n  resolveToken,\n} from \"./auth.tsx\";\nimport {\n  resolveAuthFromToken,\n  resolveAgentAuth,\n  type AuthResult,\n} from \"../auth.ts\";\nimport { type ToolContext, TOOLS } from \"./tools.ts\";\n\n// ─── Configuration ───────────────────────────────────────────────\n\nconst SERVER_NAME = \"sync-mcp-server\";\nconst SERVER_VERSION = \"3.1.0\";\nconst PROTOCOL_VERSION = \"2025-03-26\";\n\n// ─── Schema init (runs once per cold start) ──────────────────────\n\nlet schemaReady = false;\nasync function initSchema() {\n  if (!schemaReady) {\n    await ensureSchema();\n    schemaReady = true;\n    cleanupExpired().catch(() => {});\n    db.cleanupDeviceCodes().catch(() => {});\n  }\n}\n\n// ─── MCP Protocol (JSON-RPC 2.0) ────────────────────────────────\n\ninterface JsonRpcRequest {\n  jsonrpc: \"2.0\";\n  id?: string | number;\n  method: string;\n  params?: Record;\n}\n\ninterface JsonRpcResponse {\n  jsonrpc: \"2.0\";\n  id?: string | number | null;\n  result?: unknown;\n  error?: { code: number; message: string; data?: unknown };\n}\n\nfunction rpcResult(\n  id: string | number | null | undefined,\n  result: unknown,\n): JsonRpcResponse {\n  return { jsonrpc: \"2.0\", id: id ?? null, result };\n}\n\nfunction rpcError(\n  id: string | number | null | undefined,\n  code: number,\n  message: string,\n  data?: unknown,\n): JsonRpcResponse {\n  return {\n    jsonrpc: \"2.0\",\n    id: id ?? null,\n    error: { code, message, ...(data !== undefined ? { data } : {}) },\n  };\n}\n\nfunction toolsToSchema() {\n  return TOOLS.map((t) => ({\n    name: t.name,\n    title: t.title,\n    description: t.description,\n    inputSchema: t.inputSchema,\n    annotations: t.annotations,\n  }));\n}\n\nasync function handleRpc(\n  req: JsonRpcRequest,\n  ctx: ToolContext,\n): Promise {\n  const { method, id, params } = req;\n\n  if (method === \"initialize\") {\n    return rpcResult(id, {\n      protocolVersion: PROTOCOL_VERSION,\n      capabilities: { tools: {} },\n      serverInfo: { name: SERVER_NAME, version: SERVER_VERSION },\n    });\n  }\n\n  if (method === \"notifications/initialized\" || method === \"ping\") {\n    return rpcResult(id, {});\n  }\n\n  if (method === \"tools/list\") {\n    return rpcResult(id, { tools: toolsToSchema() });\n  }\n\n  if (method === \"tools/call\") {\n    const toolName = (params as any)?.name;\n    const toolArgs = (params as any)?.arguments ?? {};\n\n    const tool = TOOLS.find((t) => t.name === toolName);\n    if (!tool) {\n      return rpcError(id, -32602, `Unknown tool: ${toolName}`);\n    }\n\n    try {\n      const result = await tool.handler(toolArgs, ctx);\n      return rpcResult(id, {\n        content: [\n          {\n            type: \"text\",\n            text: typeof result === \"string\"\n              ? result\n              : JSON.stringify(result, null, 2),\n          },\n        ],\n      });\n    } catch (err: unknown) {\n      const message = err instanceof Error ? err.message : String(err);\n      return rpcResult(id, {\n        content: [{ type: \"text\", text: `Error: ${message}` }],\n        isError: true,\n      });\n    }\n  }\n\n  return rpcError(id, -32601, `Method not found: ${method}`);\n}\n\n// ─── Session extraction ──────────────────────────────────────────\n\ninterface SessionInfo {\n  userId: string;\n  clientId: string;\n  tokenHash: string;\n  scope: ParsedScope;\n}\n\nasync function extractSession(req: Request): Promise {\n  const authHeader = req.headers.get(\"authorization\");\n  if (!authHeader?.startsWith(\"Bearer \")) return null;\n\n  const token = authHeader.substring(7);\n  // Skip sync tokens (room_xxx, as_xxx, view_xxx) — those are per-call legacy\n  if (\n    token.startsWith(\"room_\") || token.startsWith(\"as_\") ||\n    token.startsWith(\"view_\")\n  ) return null;\n\n  // ── v7: Check unified tokens table for tok_ tokens ──\n  if (token.startsWith(\"tok_\")) {\n    const tokenHash = await db.sha256(token);\n    const tok = await validateTokenByHash(tokenHash);\n    if (!tok) return null;\n    return {\n      userId: tok.mintedBy,\n      clientId: tok.clientId ?? \"unified\",\n      tokenHash,\n      scope: parseScope(tok.scope),\n    };\n  }\n\n  // ── Existing path: smcp_at_ tokens via smcp_access_tokens table ──\n  const valid = await validateAccessToken(token);\n  if (!valid) return null;\n\n  const tokenHash = await db.sha256(token);\n\n  let session = await getUserSession(tokenHash);\n  if (!session) {\n    try {\n      await createUserSession({\n        tokenHash,\n        userId: valid.userId,\n        clientId: valid.clientId,\n        scope: valid.scope ?? \"sync:rooms\",\n        expiresAt: valid.expiresAt,\n      });\n      session = await getUserSession(tokenHash);\n    } catch (_) { /* race condition */ }\n    if (!session) {\n      return {\n        userId: valid.userId,\n        clientId: valid.clientId,\n        tokenHash,\n        scope: parseScope(valid.scope ?? \"sync:rooms\"),\n      };\n    }\n  }\n\n  return {\n    userId: session.userId,\n    clientId: session.clientId,\n    tokenHash: session.tokenHash,\n    scope: parseScope(session.scope),\n  };\n}\n\n// ─── 401 Challenge ───────────────────────────────────────────────\n\nfunction unauthorizedResponse(req: Request): Response {\n  const origin = new URL(req.url);\n  const prmUrl =\n    `${origin.protocol}//${origin.host}/.well-known/oauth-protected-resource`;\n  return new Response(\n    JSON.stringify({\n      error: \"unauthorized\",\n      error_description:\n        \"OAuth Bearer token required. Complete the OAuth flow or use device auth to authenticate.\",\n    }),\n    {\n      status: 401,\n      headers: {\n        ...CORS_HEADERS,\n        \"Content-Type\": \"application/json\",\n        \"WWW-Authenticate\": `Bearer resource_metadata=\"${prmUrl}\"`,\n      },\n    },\n  );\n}\n\n// ─── CORS ────────────────────────────────────────────────────────\n\nconst CORS_HEADERS: Record = {\n  \"Access-Control-Allow-Origin\": \"*\",\n  \"Access-Control-Allow-Methods\": \"GET, POST, DELETE, OPTIONS\",\n  \"Access-Control-Allow-Headers\":\n    \"Content-Type, Authorization, Mcp-Session-Id, X-Session-Id\",\n};\n\nfunction corsJson(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data, null, 2), {\n    status,\n    headers: { ...CORS_HEADERS, \"Content-Type\": \"application/json\" },\n  });\n}\n\n// ─── HTTP Router ─────────────────────────────────────────────────\n\nexport async function handleMcpRequest(req: Request): Promise {\n  await initSchema();\n\n  const url = new URL(req.url);\n  const path = url.pathname;\n\n  if (req.method === \"OPTIONS\") {\n    return new Response(null, { headers: CORS_HEADERS });\n  }\n\n  // ── Well-Known ──\n  if (req.method === \"GET\" && path === \"/.well-known/oauth-protected-resource\") {\n    return handlePRM(req);\n  }\n  if (req.method === \"GET\" && path === \"/.well-known/oauth-authorization-server\") {\n    return handleASMetadata(req);\n  }\n\n  // ── OAuth ──\n  if (req.method === \"POST\" && path === \"/oauth/register\") return handleDCR(req);\n  if (req.method === \"GET\" && path === \"/oauth/authorize\") return handleAuthorize(req);\n  if (req.method === \"POST\" && path === \"/oauth/consent\") return handleConsent(req);\n  if (req.method === \"POST\" && path === \"/oauth/token\") return handleToken(req);\n\n  // ── WebAuthn ──\n  if (req.method === \"POST\" && path === \"/webauthn/register/options\") return handleRegisterOptions(req);\n  if (req.method === \"POST\" && path === \"/webauthn/register/verify\") return handleRegisterVerify(req);\n  if (req.method === \"POST\" && path === \"/webauthn/authenticate/options\") return handleAuthOptions(req);\n  if (req.method === \"POST\" && path === \"/webauthn/authenticate/verify\") return handleAuthVerify(req);\n\n  // ── Management UI ──\n  if (req.method === \"GET\" && path === \"/manage\") return handleManagePage(req);\n  if (path.startsWith(\"/manage/api\")) return handleManageApi(req);\n\n  // ── Recovery ──\n  if (req.method === \"GET\" && path === \"/recover\") return handleRecoverPage(req);\n  if (req.method === \"POST\" && path === \"/recover/validate\") return handleRecoverValidate(req);\n  if (req.method === \"POST\" && path === \"/recover/register/options\") return handleRecoverRegisterOptions(req);\n  if (req.method === \"POST\" && path === \"/recover/register/verify\") return handleRecoverRegisterVerify(req);\n\n  // ── Vault API (REMOVED — legacy, kept as 410 for old clients) ──\n  if (path.startsWith(\"/vault\")) {\n    return corsJson({ error: \"vault_deprecated\", message: \"Vault has been replaced by unified tokens. Use /tokens endpoints.\" }, 410);\n  }\n\n  // ── MCP: DELETE ──\n  if (req.method === \"DELETE\" && (path === \"/mcp\" || path === \"/\")) {\n    return new Response(null, { status: 200, headers: CORS_HEADERS });\n  }\n\n  // ── MCP: GET (server info) ──\n  if (req.method === \"GET\" && (path === \"/\" || path === \"/mcp\")) {\n    return corsJson({\n      name: SERVER_NAME,\n      version: SERVER_VERSION,\n      protocol: \"MCP\",\n      protocolVersion: PROTOCOL_VERSION,\n      transport: \"streamable-http\",\n      auth: \"OAuth 2.1 + WebAuthn passkeys + Device Auth\",\n      tools: TOOLS.map((t) => t.name),\n      description:\n        \"MCP server for sync — multi-agent coordination platform (https://sync.parc.land)\",\n      endpoints: {\n        mcp: \"POST /mcp (JSON-RPC 2.0, requires OAuth or device auth token)\",\n        device_auth: \"POST /auth/device (initiate), GET /auth/device (approve), POST /auth/device/token (poll)\",\n        tokens: \"POST /tokens (mint), GET /tokens (list), DELETE /tokens/:id (revoke)\",\n        oauth_prm: \"GET /.well-known/oauth-protected-resource\",\n        oauth_metadata: \"GET /.well-known/oauth-authorization-server\",\n        oauth_register: \"POST /oauth/register\",\n        oauth_authorize: \"GET /oauth/authorize\",\n        oauth_token: \"POST /oauth/token\",\n      },\n    });\n  }\n\n  // ── MCP: POST (JSON-RPC — requires OAuth or unified token) ──\n  if (req.method === \"POST\" && (path === \"/mcp\" || path === \"/\")) {\n    const session = await extractSession(req);\n    if (!session) return unauthorizedResponse(req);\n\n    const ctx: ToolContext = {\n      userId: session.userId,\n      clientId: session.clientId,\n      sessionHash: session.tokenHash,\n      scope: session.scope,\n\n      async resolveForRoom(roomId: string) {\n        const scopeCheck = checkRoomInScope(session.scope, roomId, \"observe\");\n        if (!scopeCheck.allowed) {\n          // Surface elevation URL for scope_denied — agent can present to user\n          const tokenResult = await db.validateTokenByHash(session.tokenHash);\n          if (tokenResult) {\n            const elevateUrl = `https://sync.parc.land/auth/elevate?token_id=${encodeURIComponent(tokenResult.id)}&room=${encodeURIComponent(roomId)}`;\n            throw new Error(`scope_denied: Token scope does not include room \"${roomId}\". To request access, ask the user to open: ${elevateUrl}`);\n          }\n          return null;\n        }\n\n        // v7: user_rooms is the source of truth. No vault fallback.\n        const userRoom = await getUserRoom(session.userId, roomId);\n        if (!userRoom) return null;\n\n        // Check for active embodiment in this room\n        const embodiedAgentId = await getEmbodiment(session.tokenHash, roomId);\n        if (embodiedAgentId) {\n          const agentAuth = await resolveAgentAuth(roomId, embodiedAgentId);\n          if (agentAuth) return { auth: agentAuth, agentId: embodiedAgentId };\n          await db.removeEmbodiment(session.tokenHash, roomId);\n        }\n\n        // Not embodied — return access level based on user_rooms role\n        const isOwner = userRoom.access === \"owner\";\n        return {\n          auth: {\n            authenticated: true,\n            kind: (isOwner ? \"room\" : \"view\") as \"room\" | \"view\",\n            agentId: null,\n            roomId,\n            grants: isOwner ? [\"*\"] : [],\n            userId: session.userId,\n          },\n          agentId: null,\n        };\n      },\n\n      // Legacy resolver — kept for backward compat with old tool paths\n      // that pass explicit token params. Will be removed in Phase 5.\n      resolveToken: (room?: string, token?: string) =>\n        resolveToken(session.userId, room, token),\n\n      // v7: Admin auth from user_rooms owner role, no vault lookup needed\n      async resolveAdminAuth(roomId: string) {\n        const userRoom = await getUserRoom(session.userId, roomId);\n        if (!userRoom || userRoom.access !== \"owner\") return null;\n        // Construct admin AuthResult directly from ownership\n        return {\n          authenticated: true,\n          kind: \"room\" as const,\n          agentId: null,\n          roomId,\n          grants: [\"*\"],\n          userId: session.userId,\n        };\n      },\n    };\n\n    let body: unknown;\n    try {\n      body = await req.json();\n    } catch {\n      return new Response(\n        JSON.stringify(rpcError(null, -32700, \"Parse error\")),\n        {\n          status: 400,\n          headers: { ...CORS_HEADERS, \"Content-Type\": \"application/json\" },\n        },\n      );\n    }\n\n    if (Array.isArray(body)) {\n      const responses = await Promise.all(\n        (body as JsonRpcRequest[]).map((r) => handleRpc(r, ctx)),\n      );\n      return new Response(JSON.stringify(responses), {\n        headers: { ...CORS_HEADERS, \"Content-Type\": \"application/json\" },\n      });\n    }\n\n    const response = await handleRpc(body as JsonRpcRequest, ctx);\n    return new Response(JSON.stringify(response), {\n      headers: { ...CORS_HEADERS, \"Content-Type\": \"application/json\" },\n    });\n  }\n\n  return corsJson({ error: \"Not found. POST JSON-RPC to /mcp\" }, 404);\n}\n",[],[753,807],{"_105":815,"_97":816,"_166":817,"_168":754,"_169":149,"_170":122,"_171":172,"_107":818,"_102":33,"_174":356,"_176":819,"_177":22,"_178":-5,"_179":820,"_101":821},"ca6ffbb6-1f92-11f1-943c-42dde27851f2","oauth.ts","019cebf2-a8a6-7120-b163-ba71558e5983",["D",1773485074605],"/**\n * oauth.ts — OAuth 2.1 protocol handlers for sync-mcp.\n *\n * v7: Token exchange writes to unified `tokens` table.\n * New tokens use tok_ prefix. Old smcp_at_ tokens still work through\n * extractSession fallback in mcp.ts.\n *\n * Implements:\n * - Protected Resource Metadata (RFC 9728)\n * - Authorization Server Metadata (RFC 8414)\n * - Dynamic Client Registration (RFC 7591)\n * - Consent (exchange session for auth code)\n * - Token endpoint (authorization_code + refresh_token grants)\n */\n\nimport * as db from \"./db.ts\";\n\n// ─── Configuration ───────────────────────────────────────────────\n\nconst TOKEN_EXPIRY_SECS = 3600; // 1 hour access tokens\n\nfunction getOrigin(req: Request): string {\n  const url = new URL(req.url);\n  return `${url.protocol}//${url.host}`;\n}\n\nfunction json(\n  data: unknown,\n  status = 200,\n  extraHeaders?: Record,\n): Response {\n  return new Response(JSON.stringify(data, null, 2), {\n    status,\n    headers: {\n      \"Content-Type\": \"application/json\",\n      \"Access-Control-Allow-Origin\": \"*\",\n      \"Access-Control-Allow-Methods\": \"GET, POST, DELETE, OPTIONS\",\n      \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n      \"Cache-Control\": \"no-store\",\n      ...extraHeaders,\n    },\n  });\n}\n\n// ─── Protected Resource Metadata ─────────────────────────────────\n\nexport function handlePRM(req: Request): Response {\n  const origin = getOrigin(req);\n  return json({\n    resource: `${origin}/mcp`,\n    authorization_servers: [origin],\n    bearer_methods_supported: [\"header\"],\n    resource_documentation: \"https://sync.parc.land\",\n  });\n}\n\n// ─── Authorization Server Metadata ───────────────────────────────\n\nexport function handleASMetadata(req: Request): Response {\n  const origin = getOrigin(req);\n  return json({\n    issuer: origin,\n    authorization_endpoint: `${origin}/oauth/authorize`,\n    token_endpoint: `${origin}/oauth/token`,\n    registration_endpoint: `${origin}/oauth/register`,\n    response_types_supported: [\"code\"],\n    grant_types_supported: [\"authorization_code\", \"refresh_token\"],\n    code_challenge_methods_supported: [\"S256\"],\n    token_endpoint_auth_methods_supported: [\"client_secret_post\", \"none\"],\n    scopes_supported: [\n      \"sync:rooms\", \"create_rooms\",\n      \"rooms:*\", \"rooms:*:read\",\n      \"rooms:{room_id}\", \"rooms:{room_id}:read\", \"rooms:{room_id}:write\",\n      \"rooms:{room_id}:agent:{agent_id}\", \"rooms:{room_id}:admin\",\n    ],\n  });\n}\n\n// ─── Dynamic Client Registration ─────────────────────────────────\n\nexport async function handleDCR(req: Request): Promise {\n  const body = await req.json();\n  const redirectUris = body.redirect_uris;\n  if (\n    !redirectUris || !Array.isArray(redirectUris) || redirectUris.length === 0\n  ) {\n    return json({\n      error: \"invalid_client_metadata\",\n      error_description: \"redirect_uris required\",\n    }, 400);\n  }\n\n  const clientId = await db.generateToken(\"client\");\n  const clientSecret = body.token_endpoint_auth_method === \"none\"\n    ? undefined\n    : await db.generateToken(\"secret\");\n\n  await db.saveOAuthClient({\n    clientId,\n    clientSecret,\n    redirectUris,\n    clientName: body.client_name ?? null,\n  });\n\n  return json({\n    client_id: clientId,\n    client_secret: clientSecret,\n    redirect_uris: redirectUris,\n    client_name: body.client_name ?? null,\n    token_endpoint_auth_method: clientSecret ? \"client_secret_post\" : \"none\",\n  }, 201);\n}\n\n// ─── Consent (exchange session for auth code) ────────────────────\n\nexport async function handleConsent(req: Request): Promise {\n  const body = await req.json();\n  const {\n    sessionId,\n    clientId,\n    redirectUri,\n    codeChallenge,\n    codeChallengeMethod,\n    scope,\n    state,\n    resource,\n  } = body;\n\n  const session = await db.validateSession(sessionId);\n  if (!session) {\n    return json({ error: \"Invalid or expired session\" }, 401);\n  }\n  if (session.scope !== \"consent\") {\n    return json({ error: \"Session not authorized for consent\" }, 403);\n  }\n\n  // Generate authorization code\n  const code = await db.generateToken(\"authz\");\n  await db.saveAuthCode({\n    code,\n    clientId,\n    userId: session.userId,\n    redirectUri,\n    codeChallenge,\n    codeChallengeMethod,\n    scope,\n    resource,\n  });\n\n  await db.deleteSession(sessionId);\n\n  // Build redirect URL\n  const redirect = new URL(redirectUri);\n  redirect.searchParams.set(\"code\", code);\n  if (state) redirect.searchParams.set(\"state\", state);\n\n  return json({ redirect: redirect.toString() });\n}\n\n// ─── Token Endpoint ──────────────────────────────────────────────\n\nexport async function handleToken(req: Request): Promise {\n  let body: Record;\n  const contentType = req.headers.get(\"content-type\") ?? \"\";\n  if (contentType.includes(\"application/x-www-form-urlencoded\")) {\n    const text = await req.text();\n    body = Object.fromEntries(new URLSearchParams(text));\n  } else {\n    body = await req.json();\n  }\n\n  const grantType = body.grant_type;\n\n  if (grantType === \"authorization_code\") {\n    return handleAuthCodeExchange(body);\n  } else if (grantType === \"refresh_token\") {\n    return handleRefreshExchange(body);\n  }\n\n  return json({ error: \"unsupported_grant_type\" }, 400);\n}\n\n// ─── Auth Code → Token (v7: writes to unified tokens table) ─────\n\nasync function handleAuthCodeExchange(\n  body: Record,\n): Promise {\n  const { code, redirect_uri, code_verifier, client_id } = body;\n\n  if (!code || !redirect_uri || !code_verifier) {\n    return json({\n      error: \"invalid_request\",\n      error_description: \"code, redirect_uri, code_verifier required\",\n    }, 400);\n  }\n\n  const authCode = await db.consumeAuthCode(code);\n  if (!authCode) {\n    return json({\n      error: \"invalid_grant\",\n      error_description: \"Invalid, expired, or already-used code\",\n    }, 400);\n  }\n\n  if (authCode.redirectUri !== redirect_uri) {\n    return json({\n      error: \"invalid_grant\",\n      error_description: \"redirect_uri mismatch\",\n    }, 400);\n  }\n\n  if (client_id && authCode.clientId !== client_id) {\n    return json({\n      error: \"invalid_grant\",\n      error_description: \"client_id mismatch\",\n    }, 400);\n  }\n\n  // Verify PKCE\n  const expectedChallenge = await db.sha256(code_verifier);\n  if (expectedChallenge !== authCode.codeChallenge) {\n    return json({\n      error: \"invalid_grant\",\n      error_description: \"PKCE verification failed\",\n    }, 400);\n  }\n\n  // v7: Mint unified token instead of writing to smcp_access_tokens / smcp_refresh_tokens\n  const scope = authCode.scope ?? \"sync:rooms\";\n  const result = await db.mintToken({\n    userId: authCode.userId,\n    scope,\n    label: `OAuth: ${authCode.clientId}`,\n    clientId: authCode.clientId,\n    expiresInSec: TOKEN_EXPIRY_SECS,\n    withRefresh: true,\n  });\n\n  return json({\n    access_token: result.token,\n    token_type: \"Bearer\",\n    expires_in: TOKEN_EXPIRY_SECS,\n    refresh_token: result.refreshToken,\n    scope,\n  });\n}\n\n// ─── Refresh Token → New Token (v7: handles both old and new) ───\n\nasync function handleRefreshExchange(\n  body: Record,\n): Promise {\n  const { refresh_token } = body;\n  if (!refresh_token) {\n    return json({ error: \"invalid_request\" }, 400);\n  }\n\n  // v7: Try unified tokens table first (ref_ prefix)\n  if (refresh_token.startsWith(\"ref_\")) {\n    const refreshHash = await db.sha256(refresh_token);\n    const result = await db.refreshUnifiedToken(refreshHash, TOKEN_EXPIRY_SECS);\n    if (!result) {\n      return json({\n        error: \"invalid_grant\",\n        error_description: \"Invalid or expired refresh token\",\n      }, 400);\n    }\n    return json({\n      access_token: result.token,\n      token_type: \"Bearer\",\n      expires_in: TOKEN_EXPIRY_SECS,\n      refresh_token: result.refreshToken,\n    });\n  }\n\n  // Legacy: Try old smcp_refresh_tokens table (smcp_rt_ prefix)\n  const rt = await db.consumeRefreshToken(refresh_token);\n  if (!rt) {\n    return json({\n      error: \"invalid_grant\",\n      error_description: \"Invalid or expired refresh token\",\n    }, 400);\n  }\n\n  // Migrate: mint new unified token instead of old smcp_at_ + smcp_rt_\n  const scope = rt.scope ?? \"sync:rooms\";\n  const result = await db.mintToken({\n    userId: rt.userId,\n    scope,\n    label: `OAuth refresh: ${rt.clientId}`,\n    clientId: rt.clientId,\n    expiresInSec: TOKEN_EXPIRY_SECS,\n    withRefresh: true,\n  });\n\n  // Transfer embodiments from old session hashes to new token hash\n  try {\n    const newTokenHash = await db.sha256(result.token);\n    const oldSessions = await db.findSessionsByUserClient(rt.userId, rt.clientId, newTokenHash);\n    for (const oldHash of oldSessions) {\n      await db.transferEmbodiments(oldHash, newTokenHash);\n      await db.deleteUserSession(oldHash);\n    }\n  } catch (_) { /* best-effort */ }\n\n  return json({\n    access_token: result.token,\n    token_type: \"Bearer\",\n    expires_in: TOKEN_EXPIRY_SECS,\n    refresh_token: result.refreshToken,\n    scope,\n  });\n}\n",[],[753,816],{"_105":823,"_97":824,"_166":825,"_168":754,"_169":149,"_170":122,"_171":172,"_107":826,"_102":33,"_174":356,"_176":827,"_177":22,"_178":-5,"_179":828,"_101":829},"ca7024f6-1f92-11f1-943c-42dde27851f2","scope.ts","019cebf2-a8a6-7120-b163-bf310ff48dff",["D",1773485074605],"/**\n * scope.ts — OAuth scope parsing and room-level access checking.\n *\n * v7: Extended scope language.\n *   rooms:{id}                  Full access (up to user's role)\n *   rooms:{id}:read             Read-only\n *   rooms:{id}:write            Read + write\n *   rooms:{id}:agent:{agent}    Bound to specific agent (implies write)\n *   rooms:{id}:admin            Admin operations\n *   rooms:{id}:observe          Observe-only (backward compat)\n *   rooms:*                     All rooms the user has access to\n *   rooms:*:read                All rooms, read-only\n *   create_rooms                Can create new rooms\n */\n\n// ─── Types ──────────────────────────────────────────────────────\n\nexport interface ParsedScope {\n  rooms: Map;\n  createRooms: boolean;\n  /** If true, wildcard rooms:* was specified — applies to all rooms the user has access to */\n  wildcardRooms: RoomScope | null;\n}\n\nexport type ScopeLevel = \"full\" | \"admin\" | \"write\" | \"read\" | \"observe\";\n\nexport interface RoomScope {\n  level: ScopeLevel;\n  agent?: string;\n  /** Multiple agent bindings for the same room (rooms:X:agent:A rooms:X:agent:B) */\n  agents?: string[];\n  /** v5 compat: role-based scope */\n  role?: string;\n}\n\n/** The role hierarchy, from most to least privileged. */\nconst LEVEL_ORDER: ScopeLevel[] = [\"full\", \"admin\", \"write\", \"read\", \"observe\"];\n\n/** Return the less privileged of two scope levels. */\nexport function minLevel(a: ScopeLevel, b: ScopeLevel): ScopeLevel {\n  const ai = LEVEL_ORDER.indexOf(a);\n  const bi = LEVEL_ORDER.indexOf(b);\n  return ai >= bi ? a : b; // higher index = less privilege\n}\n\n/** Map user_rooms.role to a ScopeLevel for intersection. */\nexport function roleToLevel(role: string): ScopeLevel {\n  switch (role) {\n    case \"owner\": return \"full\";\n    case \"collaborator\": return \"write\";\n    case \"participant\": return \"write\";\n    case \"observer\": return \"read\";\n    default: return \"read\";\n  }\n}\n\n/** Check if a scope level grants read access. */\nexport function canRead(level: ScopeLevel): boolean {\n  return true; // all levels can read\n}\n\n/** Check if a scope level grants write access. */\nexport function canWrite(level: ScopeLevel): boolean {\n  return level !== \"read\" && level !== \"observe\";\n}\n\n/** Check if a scope level grants admin access. */\nexport function canAdmin(level: ScopeLevel): boolean {\n  return level === \"full\" || level === \"admin\";\n}\n\n// ─── Parsing ────────────────────────────────────────────────────\n\n/** Parse scope string into structured form. */\nexport function parseScope(scope: string): ParsedScope {\n  const result: ParsedScope = { rooms: new Map(), createRooms: false, wildcardRooms: null };\n  for (const part of scope.split(/\\s+/).filter(Boolean)) {\n    if (part === \"create_rooms\") {\n      result.createRooms = true;\n      continue;\n    }\n    // Legacy: \"sync:rooms\" or \"sync:rooms.admin\" → broad access\n    if (part === \"sync:rooms\" || part.startsWith(\"sync:\")) {\n      result.wildcardRooms = { level: \"full\" };\n      result.createRooms = true;\n      continue;\n    }\n    if (!part.startsWith(\"rooms:\")) continue;\n\n    const segments = part.split(\":\");\n    const roomId = segments[1];\n    if (!roomId) continue;\n\n    // Wildcard: rooms:* or rooms:*:read etc.\n    if (roomId === \"*\") {\n      const modifier = segments[2];\n      if (modifier === \"read\") {\n        result.wildcardRooms = { level: \"read\" };\n      } else if (modifier === \"write\") {\n        result.wildcardRooms = { level: \"write\" };\n      } else if (modifier === \"observe\") {\n        result.wildcardRooms = { level: \"observe\" };\n      } else {\n        result.wildcardRooms = { level: \"full\" };\n      }\n      continue;\n    }\n\n    // Specific room\n    const modifier = segments[2];\n    if (modifier === \"read\") {\n      result.rooms.set(roomId, { level: \"read\" });\n    } else if (modifier === \"write\") {\n      result.rooms.set(roomId, { level: \"write\" });\n    } else if (modifier === \"admin\") {\n      result.rooms.set(roomId, { level: \"admin\" });\n    } else if (modifier === \"observe\") {\n      result.rooms.set(roomId, { level: \"observe\" });\n    } else if (modifier === \"agent\" && segments[3]) {\n      const existing = result.rooms.get(roomId);\n      if (existing?.agents) {\n        // Accumulate: multiple agent bindings for same room\n        existing.agents.push(segments[3]);\n      } else if (existing?.agent) {\n        // Second agent for this room — upgrade to agents array\n        existing.agents = [existing.agent, segments[3]];\n      } else {\n        result.rooms.set(roomId, { level: \"write\", agent: segments[3], agents: [segments[3]] });\n      }\n    } else if (modifier === \"role\" && segments[3]) {\n      // v5 backward compat\n      result.rooms.set(roomId, { level: \"write\", role: segments[3] });\n    } else {\n      result.rooms.set(roomId, { level: \"full\" });\n    }\n  }\n  return result;\n}\n\n/** Serialize a ParsedScope back to a scope string. */\nexport function serializeScope(parsed: ParsedScope): string {\n  const parts: string[] = [];\n  if (parsed.wildcardRooms) {\n    if (parsed.wildcardRooms.level === \"full\") parts.push(\"rooms:*\");\n    else parts.push(`rooms:*:${parsed.wildcardRooms.level}`);\n  }\n  for (const [roomId, scope] of parsed.rooms) {\n    if (scope.agents && scope.agents.length > 0) {\n      for (const agentId of scope.agents) {\n        parts.push(`rooms:${roomId}:agent:${agentId}`);\n      }\n    } else if (scope.agent) {\n      parts.push(`rooms:${roomId}:agent:${scope.agent}`);\n    } else if (scope.role) {\n      parts.push(`rooms:${roomId}:role:${scope.role}`);\n    } else if (scope.level === \"full\") {\n      parts.push(`rooms:${roomId}`);\n    } else {\n      parts.push(`rooms:${roomId}:${scope.level}`);\n    }\n  }\n  if (parsed.createRooms) parts.push(\"create_rooms\");\n  return parts.join(\" \");\n}\n\n// ─── Room Matching ──────────────────────────────────────────────\n\nexport interface RoomMatch {\n  level: ScopeLevel;\n  agentId: string | null;\n}\n\n/** Match a room against this scope. Returns the granted level, or null if no access.\n *  When multiple agent bindings exist for the same room, agentId is null\n *  (let embodiment decide which agent to act as). */\nexport function matchRoom(parsed: ParsedScope, roomId: string): RoomMatch | null {\n  const specific = parsed.rooms.get(roomId);\n  if (specific) {\n    // Multiple agents → don't bind to one, let embodiment decide\n    const agentId = (specific.agents && specific.agents.length > 1)\n      ? null\n      : specific.agent ?? null;\n    return { level: specific.level, agentId };\n  }\n  if (parsed.wildcardRooms) {\n    return { level: parsed.wildcardRooms.level, agentId: null };\n  }\n  if (parsed.rooms.size === 0 && !parsed.wildcardRooms) {\n    return { level: \"full\", agentId: null };\n  }\n  return null;\n}\n\n// ─── Access Checking (backward compat) ──────────────────────────\n\n/** Check if level `have` is at least as privileged as `need`. */\nexport function levelCovers(have: ScopeLevel, need: ScopeLevel): boolean {\n  return LEVEL_ORDER.indexOf(have) <= LEVEL_ORDER.indexOf(need);\n}\n\n/**\n * Check if `caller` scope fully subsumes `requested` scope.\n * A token can only mint/update sub-tokens within its own scope.\n *\n * Rules:\n * - requested.createRooms requires caller.createRooms\n * - requested wildcard requires caller wildcard at ≥ level\n * - each room in requested must be matched by caller (specific or wildcard) at ≥ level\n */\nexport function scopeSubsumes(\n  caller: ParsedScope, requested: ParsedScope,\n): { ok: true } | { ok: false; reason: string } {\n  // create_rooms check\n  if (requested.createRooms && !caller.createRooms) {\n    return { ok: false, reason: \"Caller token lacks create_rooms\" };\n  }\n\n  // Wildcard check\n  if (requested.wildcardRooms) {\n    if (!caller.wildcardRooms) {\n      return { ok: false, reason: \"Caller token lacks wildcard room access\" };\n    }\n    if (!levelCovers(caller.wildcardRooms.level, requested.wildcardRooms.level)) {\n      return {\n        ok: false,\n        reason: `Caller wildcard is ${caller.wildcardRooms.level}, cannot grant ${requested.wildcardRooms.level}`,\n      };\n    }\n  }\n\n  // Per-room check\n  for (const [roomId, reqScope] of requested.rooms) {\n    // Find caller's level for this room\n    const callerSpecific = caller.rooms.get(roomId);\n    const callerLevel = callerSpecific?.level\n      ?? caller.wildcardRooms?.level\n      ?? null;\n\n    if (callerLevel === null) {\n      // Caller has no access to this room at all (and no wildcard)\n      // But: if caller has an empty scope (no rooms, no wildcard), it means\n      // the scope was not restricted — treat as full (legacy backward compat)\n      if (caller.rooms.size === 0 && !caller.wildcardRooms) {\n        continue; // unrestricted caller\n      }\n      return { ok: false, reason: `Caller token lacks access to room \"${roomId}\"` };\n    }\n\n    if (!levelCovers(callerLevel, reqScope.level)) {\n      return {\n        ok: false,\n        reason: `Caller has ${callerLevel} on room \"${roomId}\", cannot grant ${reqScope.level}`,\n      };\n    }\n  }\n\n  return { ok: true };\n}\n\n/** Check if a scope grants access to a room at the required level. */\nexport function checkRoomInScope(\n  parsed: ParsedScope, roomId: string,\n  requiredLevel: \"observe\" | \"embody\" | \"embody_role\",\n  role?: string,\n): { allowed: boolean; reason?: string } {\n  const match = matchRoom(parsed, roomId);\n\n  // No match at all\n  if (!match) {\n    return { allowed: false, reason: \"room_not_in_scope\" };\n  }\n\n  if (requiredLevel === \"observe\") return { allowed: true };\n\n  // observe/read can't embody\n  if (match.level === \"observe\" || match.level === \"read\") {\n    return { allowed: false, reason: \"scope_read_only\" };\n  }\n\n  if (requiredLevel === \"embody_role\") {\n    const roomScope = parsed.rooms.get(roomId);\n    if (roomScope?.role && roomScope.role !== role) {\n      return { allowed: false, reason: \"scope_role_mismatch\" };\n    }\n  }\n\n  return { allowed: true };\n}\n",[],[753,824],{"_105":831,"_97":832,"_166":833,"_168":754,"_169":149,"_170":122,"_171":172,"_107":834,"_102":33,"_174":356,"_176":835,"_177":22,"_178":-5,"_179":836,"_101":837},"ca705840-1f92-11f1-943c-42dde27851f2","tool-context.ts","019cebf2-a8a6-7120-b163-c0496fda69fb",["D",1773485074605],"/**\n * tool-context.ts — MCP tool infrastructure.\n *\n * Contains ToolContext and ToolDef interfaces, auth helpers for tool handlers,\n * and context decoration with session metadata. Separated from tools.ts\n * so tool implementations can import a focused set of infrastructure.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { rows2objects } from \"../utils.ts\";\nimport {\n  resolveAuthFromToken,\n  type AuthResult,\n} from \"../auth.ts\";\nimport * as db from \"./db.ts\";\nimport { type ParsedScope } from \"./scope.ts\";\n\n// ─── Tool context (injected by MCP handler) ─────────────────────\n\nexport interface ToolContext {\n  userId: string | null;\n  clientId: string | null;\n  sessionHash: string | null;\n  scope: ParsedScope | null;\n\n  /** Resolve auth for a room, accounting for embodiment state.\n   *  Returns embodied agent's AuthResult (if embodied), or view-level\n   *  AuthResult (if observing), or null (no access). */\n  resolveForRoom: (\n    roomId: string,\n  ) => Promise<{ auth: AuthResult; agentId: string | null } | null>;\n\n  /** Legacy: explicit token override (backward compat for non-OAuth callers) */\n  resolveToken: (\n    room?: string, token?: string,\n  ) => Promise<{ room: string; token: string } | null>;\n\n  /** Admin-level auth for privilege escalation */\n  resolveAdminAuth: (\n    roomId: string,\n  ) => Promise;\n}\n\n// ─── Tool definition ─────────────────────────────────────────────\n\nexport interface ToolDef {\n  name: string;\n  title: string;\n  description: string;\n  inputSchema: Record;\n  annotations: {\n    readOnlyHint: boolean;\n    destructiveHint: boolean;\n    idempotentHint: boolean;\n    openWorldHint: boolean;\n  };\n  handler: (params: Record, ctx: ToolContext) => Promise;\n}\n\n// ─── Auth helpers ────────────────────────────────────────────────\n\n/** Convert a vault token string into an AuthResult for direct function calls. */\nexport async function tokenToAuth(token: string, roomId: string): Promise {\n  const result = await resolveAuthFromToken(token, roomId);\n  if (result instanceof Response) {\n    const data = await result.json();\n    throw new Error(data.error ?? data.message ?? \"Invalid token\");\n  }\n  return result;\n}\n\n/** Resolve vault → room + AuthResult for a tool call (legacy path). */\nexport async function resolveForTool(\n  ctx: ToolContext,\n  params: Record,\n): Promise<{ room: string; token: string; auth: AuthResult }> {\n  const resolved = await ctx.resolveToken(\n    params.room as string | undefined,\n    params.token as string | undefined,\n  );\n  if (!resolved) {\n    if (!ctx.userId) {\n      throw new Error(\"Authentication required. Connect with OAuth or provide room + token parameters.\");\n    }\n    throw new Error(\"No room specified and no default room in vault. Provide 'room' parameter or set a default room via sync_vault_store.\");\n  }\n  const auth = await tokenToAuth(resolved.token, resolved.room);\n  return { room: resolved.room, token: resolved.token, auth };\n}\n\n/** Unwrap a Response into data. Throws on error status. */\nexport async function unwrap(response: Response): Promise {\n  const data = await response.json();\n  if (response.status >= 400) {\n    const msg = typeof data === \"object\"\n      ? (data.error ?? data.message ?? JSON.stringify(data))\n      : String(data);\n    throw new Error(typeof msg === \"string\" ? msg : JSON.stringify(msg));\n  }\n  return data;\n}\n\n/** Escalation wrapper for functions returning Response. */\nexport async function withResponseEscalation(\n  ctx: ToolContext,\n  room: string,\n  agentAuth: AuthResult,\n  fn: (auth: AuthResult) => Promise,\n): Promise {\n  const response = await fn(agentAuth);\n  if (response.status < 400) return response.json();\n\n  const data = await response.json();\n  const error = data?.error;\n  const isScopeDenied = error === \"scope_denied\" || error === \"room_token_required\";\n\n  if (!isScopeDenied) {\n    throw new Error(typeof error === \"string\" ? error : JSON.stringify(data));\n  }\n\n  const adminAuth = await ctx.resolveAdminAuth(room);\n  if (!adminAuth) throw new Error(typeof error === \"string\" ? error : JSON.stringify(data));\n\n  return unwrap(await fn(adminAuth));\n}\n\n// ─── Context decoration ─────────────────────────────────────────\n\n/** Decorate a context response with MCP session metadata.\n *  Adds _session block + _current/_switchable annotations on agents.\n *  This is MCP-layer only — buildExpandedContext stays session-unaware. */\nexport async function decorateContextWithSession(\n  context: Record,\n  ctx: ToolContext,\n  roomId: string,\n  currentAgentId: string | null,\n): Promise> {\n  if (!ctx.sessionHash || !ctx.userId) return context;\n\n  const userRoom = await db.getUserRoom(ctx.userId, roomId);\n  const canEmbody = userRoom && userRoom.access !== \"observer\";\n\n  const switchable: string[] = [];\n\n  // Annotate agents in the agents section\n  if (canEmbody && context.agents) {\n    const agentsObj = context.agents;\n    if (typeof agentsObj === \"object\" && !Array.isArray(agentsObj)) {\n      for (const [agentId, agentData] of Object.entries(agentsObj as Record)) {\n        const isCurrent = agentId === currentAgentId;\n        const isIdle = agentData.status === \"idle\"\n                    || agentData.status === \"done\"\n                    || agentData.status === \"suspended\";\n        agentData._current = isCurrent;\n        agentData._switchable = !isCurrent && isIdle;\n        if (agentData._switchable) switchable.push(agentId);\n      }\n    }\n  }\n\n  // Check for unfilled roles\n  try {\n    const rolesResult = await sqlite.execute({\n      sql: `SELECT key, value FROM state\n            WHERE room_id = ? AND scope = '_shared' AND key LIKE 'roles.%'`,\n      args: [roomId],\n    });\n    for (const r of rolesResult.rows) {\n      const roleId = (r[0] as string).replace(\"roles.\", \"\");\n      try {\n        const def = JSON.parse(r[1] as string);\n        if (!def.filled_by && !switchable.includes(roleId)\n            && roleId !== currentAgentId) {\n          switchable.push(roleId);\n        }\n      } catch {}\n    }\n  } catch {}\n\n  const scopeLevel = ctx.scope?.rooms.get(roomId);\n\n  context._session = {\n    agent: currentAgentId,\n    room: roomId,\n    switchable,\n    scope_level: scopeLevel\n      ? (scopeLevel.level === \"role\"\n          ? `role:${scopeLevel.role}` : scopeLevel.level)\n      : \"full\",\n  };\n\n  return context;\n}\n",[],[753,832],{"_105":839,"_97":840,"_166":841,"_168":754,"_169":149,"_170":122,"_171":172,"_107":842,"_102":33,"_174":356,"_176":843,"_177":22,"_178":-5,"_179":844,"_101":845},"ca707ab4-1f92-11f1-943c-42dde27851f2","tools.ts","019cebf2-a8a6-7120-b163-c552fed200d6",["D",1773485074605],"/**\n * tools.ts — MCP tool definitions for sync-mcp\n *\n * v3: Agency & Identity model.\n * - New ToolContext with resolveForRoom (session-aware, embodiment-aware)\n * - Observe/embody split: read_context is view-level by default, mutations require embodiment\n * - New tools: sync_lobby, sync_embody, sync_disembody, sync_restrict_scope, sync_revoke_access\n * - Context decoration: _session block + _current/_switchable agent annotations\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { rows2objects } from \"../utils.ts\";\nimport {\n  buildExpandedContext,\n  createRoom,\n  joinRoom,\n  invokeAction,\n  invokeBuiltinAction,\n  registerAction,\n  registerView,\n  deleteAction,\n  deleteView,\n  evalExpression,\n  listRooms,\n  insertAgentDirect,\n  waitForCondition,\n  type ContextRequest,\n} from \"../main.ts\";\n\nimport {\n  resolveAuthFromToken,\n  resolveAgentAuth,\n  generateToken,\n  hashToken,\n  type AuthResult,\n} from \"../auth.ts\";\n\nimport { releaseAgent, fetchRoomRoles } from \"../agents.ts\";\nimport { migrate } from \"../schema.ts\";\n\nimport * as db from \"./db.ts\";\nimport {\n  type ParsedScope,\n  parseScope,\n  serializeScope,\n  checkRoomInScope,\n} from \"./scope.ts\";\n\nimport {\n  type ToolContext,\n  type ToolDef,\n  tokenToAuth,\n  resolveForTool,\n  unwrap,\n  withResponseEscalation,\n  decorateContextWithSession,\n} from \"./tool-context.ts\";\n\n// Re-export for mcp.ts\nexport type { ToolContext, ToolDef };\n\n// ─── Ensure schema on first tool call ────────────────────────────\n\nlet migrated = false;\nasync function ensureMigrated() {\n  if (!migrated) { await migrate(); migrated = true; }\n}\n\n// ─── Tool Definitions ────────────────────────────────────────────\n\nexport const TOOLS: ToolDef[] = [\n  // ═══════════════════════════════════════════════════════════════\n  // NEW: Agency & Identity tools\n  // ═══════════════════════════════════════════════════════════════\n\n  {\n    name: \"sync_lobby\",\n    title: \"Lobby\",\n    description: `Overview of your rooms, agents, and roles. The starting point.\n\nReturns rooms you have access to, with agents, roles, access levels,\nand current embodiments. Agents are annotated with _current and _switchable.\n\nThis is observation — no agent presence is created.`,\n    inputSchema: { type: \"object\", properties: {} },\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },\n    async handler(_params, ctx) {\n      if (!ctx.userId) throw new Error(\"OAuth required\");\n      await ensureMigrated();\n\n      const userRooms = await db.listUserRooms(ctx.userId);\n      const embodiments = ctx.sessionHash\n        ? await db.listEmbodiments(ctx.sessionHash) : [];\n\n      const rooms = [];\n      for (const ur of userRooms) {\n        // Check scope allows this room\n        if (ctx.scope && ctx.scope.rooms.size > 0) {\n          if (!ctx.scope.rooms.has(ur.roomId)) continue;\n        }\n\n        // Fetch room agents\n        const agentsResult = await sqlite.execute({\n          sql: `SELECT id, name, role, status, last_heartbeat, waiting_on\n                FROM agents WHERE room_id = ? ORDER BY joined_at`,\n          args: [ur.roomId],\n        });\n        const agents = rows2objects(agentsResult);\n\n        // Fetch role definitions\n        const roles = await fetchRoomRoles(ur.roomId);\n\n        const currentEmbodiment = embodiments.find(e => e.roomId === ur.roomId);\n        const canEmbody = ur.access !== \"observer\";\n\n        const switchableAgents = canEmbody ? agents.filter((a: any) => {\n          if (a.id === currentEmbodiment?.agentId) return false;\n          return a.status === \"idle\" || a.status === \"done\";\n        }).map((a: any) => a.id as string) : [];\n\n        const unfilledRoles = Object.entries(roles)\n          .filter(([_, def]) => !def.filled_by)\n          .map(([id]) => id)\n          .filter(id => !switchableAgents.includes(id));\n\n        const scopeLevel = ctx.scope?.rooms.get(ur.roomId);\n\n        rooms.push({\n          id: ur.roomId,\n          access: ur.access,\n          label: ur.label,\n          scope_level: scopeLevel\n            ? (scopeLevel.level === \"role\" ? `role:${scopeLevel.role}` : scopeLevel.level)\n            : \"full\",\n          roles,\n          agents: agents.map((a: any) => ({\n            id: a.id, name: a.name, role: a.role, status: a.status,\n            last_heartbeat: a.last_heartbeat, waiting_on: a.waiting_on,\n            _current: currentEmbodiment?.agentId === a.id,\n            _switchable: canEmbody && (a.status === \"idle\" || a.status === \"done\") && a.id !== currentEmbodiment?.agentId,\n          })),\n          unfilled_roles: unfilledRoles,\n          embodied_as: currentEmbodiment?.agentId ?? null,\n        });\n      }\n\n      return {\n        user: (await db.getUserById(ctx.userId))?.username ?? ctx.userId,\n        client: ctx.clientId,\n        rooms,\n        can_create_rooms: ctx.scope?.createRooms ?? true,\n        active_embodiments: embodiments,\n      };\n    },\n  },\n\n  {\n    name: \"sync_embody\",\n    title: \"Embody Agent\",\n    description: `Commit to an agent in a room. Creates, takes over, or switches agents.\n\nSwitching: if already embodied in this room, the old agent is cleanly\nreleased (set idle, filled_by cleared) before the new one activates.\nAlways returns fresh context as the new agent.\n\nOne session can embody agents in multiple rooms simultaneously.\nOne agent per room per session — call sync_embody again to switch.\n\nArgs:\n  - room (string, required): Room ID.\n  - agent (string, optional): Existing agent ID to take over.\n  - role (string, optional): Role to fill (creates/takes agent with role ID).\n  - name (string, optional): Display name for new agent.\n  - state (object, optional): Initial state for new agent.\n\nReturns: Full context with self set to embodied agent, plus _session metadata.`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\", description: \"Room ID\" },\n        agent: { type: \"string\", description: \"Existing agent ID to take over\" },\n        role: { type: \"string\", description: \"Role to fill\" },\n        name: { type: \"string\", description: \"Display name for new agent\" },\n        state: { type: \"object\", description: \"Initial state for new agent\" },\n      },\n      required: [\"room\"],\n    },\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },\n    async handler(params, ctx) {\n      if (!ctx.userId || !ctx.sessionHash) throw new Error(\"OAuth required\");\n      await ensureMigrated();\n\n      const roomId = params.room as string;\n\n      // 1. Scope check\n      const requiredLevel = params.role ? \"embody_role\" as const : \"embody\" as const;\n      const scopeCheck = checkRoomInScope(ctx.scope!, roomId, requiredLevel, params.role as string);\n      if (!scopeCheck.allowed) throw new Error(`Scope denied: ${scopeCheck.reason}`);\n\n      // 2. User-room access check\n      const userRoom = await db.getUserRoom(ctx.userId, roomId);\n      if (!userRoom) throw new Error(`No access to room ${roomId}. Use sync_lobby to see your rooms.`);\n      if (userRoom.access === \"observer\") throw new Error(\"Observer access cannot embody agents\");\n\n      // 3. Grants from access level\n      const grants = (userRoom.access === \"owner\" || userRoom.access === \"collaborator\")\n        ? [\"_shared\"] : [];\n\n      // 4. Clean transition: release old agent if switching within this room\n      const previousAgentId = await db.getEmbodiment(ctx.sessionHash, roomId);\n      if (previousAgentId) {\n        await releaseAgent(roomId, previousAgentId);\n      }\n\n      // 5. Determine agent ID\n      let agentId: string;\n      let isNewAgent = false;\n\n      if (params.role) {\n        agentId = params.role as string;\n        // Verify role exists\n        const roleState = await sqlite.execute({\n          sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_shared' AND key = ?`,\n          args: [roomId, `roles.${agentId}`],\n        });\n        if (roleState.rows.length === 0) throw new Error(`Role \"${agentId}\" not defined in this room`);\n      } else if (params.agent) {\n        agentId = params.agent as string;\n        const existing = await sqlite.execute({\n          sql: `SELECT id FROM agents WHERE id = ? AND room_id = ?`,\n          args: [agentId, roomId],\n        });\n        if (existing.rows.length === 0) throw new Error(`Agent \"${agentId}\" not found in room ${roomId}`);\n      } else {\n        // New agent — derive ID from user + client\n        const user = await db.getUserById(ctx.userId);\n        const username = user?.username ?? ctx.userId;\n        const client = await db.getOAuthClient(ctx.clientId!);\n        const clientSlug = (client?.clientName ?? \"mcp\")\n          .toLowerCase().replace(/[^a-z0-9]/g, \"-\").replace(/-+/g, \"-\");\n        agentId = `${username}:${clientSlug}`;\n        isNewAgent = true;\n      }\n\n      // 6. Create or re-activate agent\n      const existingAgent = await sqlite.execute({\n        sql: `SELECT id FROM agents WHERE id = ? AND room_id = ?`,\n        args: [agentId, roomId],\n      });\n\n      if (existingAgent.rows.length === 0 || isNewAgent) {\n        const user = await db.getUserById(ctx.userId);\n        await insertAgentDirect(roomId, {\n          id: agentId,\n          name: (params.name as string) ?? user?.username ?? \"agent\",\n          role: params.role ? \"role\" : \"mcp-client\",\n          grants,\n          state: params.state as Record | undefined,\n        });\n      } else {\n        // Re-activate: rotate token, reset status, reset grants\n        const newToken = generateToken(\"as\");\n        const newHash = await hashToken(newToken);\n        await sqlite.execute({\n          sql: `UPDATE agents SET token_hash = ?, status = 'active',\n                last_heartbeat = datetime('now'), waiting_on = NULL, grants = ?\n                WHERE id = ? AND room_id = ?`,\n          args: [newHash, JSON.stringify(grants), agentId, roomId],\n        });\n      }\n\n      // 7. Record embodiment\n      await db.setEmbodiment(ctx.sessionHash, roomId, agentId);\n\n      // 8. Update role filled_by if applicable\n      if (params.role) {\n        await sqlite.execute({\n          sql: `UPDATE state SET\n                  value = json_set(value, '$.filled_by', json(?)),\n                  revision = revision + 1, updated_at = datetime('now')\n                WHERE room_id = ? AND scope = '_shared' AND key = ?`,\n          args: [JSON.stringify(agentId), roomId, `roles.${params.role}`],\n        });\n      }\n\n      // 9. Return fresh context as the new agent\n      const auth = await resolveAgentAuth(roomId, agentId);\n      if (!auth) throw new Error(\"Failed to resolve agent auth after creation\");\n      const context = await buildExpandedContext(roomId, auth, { depth: \"lean\" });\n\n      // 10. Decorate with _session\n      return decorateContextWithSession(context, ctx, roomId, agentId);\n    },\n  },\n\n  {\n    name: \"sync_disembody\",\n    title: \"Disembody\",\n    description: `Release an agent in a room. Agent persists as idle; you stop driving it.\n\nArgs:\n  - room (string, required): Room to disembody from.\n\nReturns: Confirmation with disembodied agent ID.`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\", description: \"Room to disembody from\" },\n      },\n      required: [\"room\"],\n    },\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      if (!ctx.sessionHash) throw new Error(\"OAuth required\");\n      await ensureMigrated();\n      const roomId = params.room as string;\n\n      const agentId = await db.getEmbodiment(ctx.sessionHash, roomId);\n      if (!agentId) throw new Error(`Not embodied in room ${roomId}`);\n\n      // Clean transition\n      await releaseAgent(roomId, agentId);\n\n      await db.removeEmbodiment(ctx.sessionHash, roomId);\n      return { ok: true, disembodied: agentId, room: roomId };\n    },\n  },\n\n  {\n    name: \"sync_restrict_scope\",\n    title: \"Restrict Scope\",\n    description: `Narrow your session's effective scope for a room.\n\nArgs:\n  - room (string, required): Room ID.\n  - level (string, required): \"observe\" or \"role\".\n  - role (string, optional): Required when level is \"role\".`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        level: { type: \"string\", enum: [\"observe\", \"role\"] },\n        role: { type: \"string\" },\n      },\n      required: [\"room\", \"level\"],\n    },\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      if (!ctx.sessionHash || !ctx.scope) throw new Error(\"OAuth required\");\n      const roomId = params.room as string;\n      const level = params.level as string;\n      const role = params.role as string | undefined;\n\n      const newScope: ParsedScope = { rooms: new Map(ctx.scope.rooms), createRooms: ctx.scope.createRooms };\n      if (level === \"observe\") {\n        newScope.rooms.set(roomId, { level: \"observe\" });\n        // Disembody if currently embodied\n        const agentId = await db.getEmbodiment(ctx.sessionHash, roomId);\n        if (agentId) {\n          await releaseAgent(roomId, agentId);\n          await db.removeEmbodiment(ctx.sessionHash, roomId);\n        }\n      } else if (level === \"role\") {\n        if (!role) throw new Error(\"role parameter required when level is 'role'\");\n        newScope.rooms.set(roomId, { level: \"role\", role });\n      }\n      await db.updateSessionScope(ctx.sessionHash, serializeScope(newScope));\n      return { ok: true, room: roomId, level, role };\n    },\n  },\n\n  {\n    name: \"sync_revoke_access\",\n    title: \"Revoke Room Access\",\n    description: `Remove a room from your session's effective scope.\n\nArgs:\n  - room (string, required): Room to remove.`,\n    inputSchema: {\n      type: \"object\",\n      properties: { room: { type: \"string\" } },\n      required: [\"room\"],\n    },\n    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      if (!ctx.sessionHash || !ctx.scope) throw new Error(\"OAuth required\");\n      const roomId = params.room as string;\n      const agentId = await db.getEmbodiment(ctx.sessionHash, roomId);\n      if (agentId) {\n        await releaseAgent(roomId, agentId);\n        await db.removeEmbodiment(ctx.sessionHash, roomId);\n      }\n      const newScope: ParsedScope = { rooms: new Map(ctx.scope.rooms), createRooms: ctx.scope.createRooms };\n      newScope.rooms.delete(roomId);\n      await db.updateSessionScope(ctx.sessionHash, serializeScope(newScope));\n      return { ok: true, revoked: roomId };\n    },\n  },\n\n  // ═══════════════════════════════════════════════════════════════\n  // Room lifecycle\n  // ═══════════════════════════════════════════════════════════════\n\n  {\n    name: \"sync_create_room\",\n    title: \"Create Room\",\n    description: `Create a new sync collaboration room. Returns the room ID, admin token, and view token.\n\nIf authenticated via OAuth, the room is registered in your user-rooms as owner\nand added to your session scope.\n\nArgs:\n  - id (string, optional): Custom room ID. Auto-generated if omitted.\n  - meta (object, optional): Arbitrary metadata for the room.\n  - label (string, optional): Label for this room.\n  - set_default (boolean, optional): Make this the default room.\n\nReturns: { id, token, view_token, created_at }`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        id: { type: \"string\", description: \"Custom room ID (auto-generated if omitted)\" },\n        meta: { type: \"object\", description: \"Room metadata (any JSON)\" },\n        label: { type: \"string\", description: \"Label for this room\" },\n        set_default: { type: \"boolean\", description: \"Make this the default room\" },\n      },\n    },\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const body: Record = {};\n      if (params.id) body.id = params.id;\n      if (params.meta) body.meta = params.meta;\n      const result = await unwrap(await createRoom(body)) as Record;\n\n      // v7: rooms.ts handles user_rooms linkage when auth has userId.\n      // No vault auto-store needed.\n      if (ctx.userId && result.id) {\n        await db.upsertUserRoom(\n          ctx.userId, result.id as string, \"owner\",\n          (params.label as string) ?? `Room ${result.id}`,\n          params.set_default as boolean ?? false,\n        );\n        // Widen session scope\n        if (ctx.sessionHash && ctx.scope) {\n          const newScope: ParsedScope = { rooms: new Map(ctx.scope.rooms), createRooms: ctx.scope.createRooms, wildcardRooms: ctx.scope.wildcardRooms };\n          newScope.rooms.set(result.id as string, { level: \"full\" });\n          await db.updateSessionScope(ctx.sessionHash, serializeScope(newScope));\n        }\n      }\n      return result;\n    },\n  },\n\n  {\n    name: \"sync_list_rooms\",\n    title: \"List Rooms\",\n    description: `List rooms accessible with the given token. If authenticated, uses vault token.\nPrefer sync_lobby for a richer overview with agents and roles.\n\nArgs:\n  - token (string, optional): Auth token. Optional if authenticated.\n\nReturns: Array of room objects.`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        token: { type: \"string\", description: \"Auth token (room_xxx, view_xxx, or as_xxx). Optional if authenticated.\" },\n      },\n    },\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      if (!ctx.userId) throw new Error(\"Authentication required. Use sync_lobby for a richer view.\");\n      // v7: Use user_rooms as source of truth\n      const userRooms = await db.listUserRooms(ctx.userId);\n      if (userRooms.length === 0) return [];\n      const roomIds = userRooms.map(ur => ur.roomId);\n      const placeholders = roomIds.map(() => \"?\").join(\",\");\n      const result = await sqlite.execute({\n        sql: `SELECT id, created_at, meta FROM rooms WHERE id IN (${placeholders}) ORDER BY created_at DESC`,\n        args: roomIds,\n      });\n      return rows2objects(result);\n    },\n  },\n\n  {\n    name: \"sync_join_room\",\n    title: \"Join Room\",\n    description: `Join a sync room as an agent (low-level). Returns an agent token (as_xxx).\nPrefer sync_embody for the agency-identity flow.\n\nArgs: room, token (optional), id, name, role, state, public_keys, views.\n\nReturns: Agent object with { id, token, room_id, ... }`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        token: { type: \"string\" },\n        id: { type: \"string\", description: \"Agent ID\" },\n        name: { type: \"string\", description: \"Display name\" },\n        role: { type: \"string\", description: \"Agent role\" },\n        state: { type: \"object\", description: \"Initial private state\" },\n        public_keys: { type: \"array\", items: { type: \"string\" }, description: \"State keys to auto-expose\" },\n        views: { type: \"array\", items: { type: \"object\" }, description: \"Views to pre-register\" },\n      },\n    },\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const resolved = await resolveForTool(ctx, params);\n      const body: Record = {};\n      for (const key of [\"id\", \"name\", \"role\", \"state\", \"public_keys\", \"views\"]) {\n        if (params[key] !== undefined) body[key] = params[key];\n      }\n      const result = await withResponseEscalation(ctx, resolved.room, resolved.auth, async (auth) => {\n        const req = new Request(\"http://internal/rooms/\" + resolved.room + \"/agents\", {\n          headers: auth.kind === \"room\"\n            ? { Authorization: `Bearer room_placeholder` }\n            : { Authorization: `Bearer ${resolved.token}` },\n        });\n        return joinRoom(resolved.room, body, req);\n      }) as Record;\n\n      // v7: no vault auto-store. Agent tokens are returned to caller.\n      return result;\n    },\n  },\n\n  // ═══════════════════════════════════════════════════════════════\n  // Core rhythm: read → act\n  // ═══════════════════════════════════════════════════════════════\n\n  {\n    name: \"sync_read_context\",\n    title: \"Read Context\",\n    description: `THE primary read operation. Returns the full room context.\n\nIf embodied in this room, reads as the embodied agent (full scope, heartbeat ticks).\nIf not embodied, reads as observer (view-level, no presence).\nIncludes _session metadata with switchable agents.\n\nArgs:\n  - room (string, required): Room ID.\n  - token (string, optional): Auth token (legacy — prefer OAuth + embodiment).\n  - depth, only, actions, messages, messages_after, messages_limit, include, compact.\n\nReturns: { state, views, agents, actions, messages, self, _context, _session }`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\", description: \"Room ID\" },\n        token: { type: \"string\", description: \"Auth token (legacy)\" },\n        depth: { type: \"string\", enum: [\"lean\", \"full\", \"usage\"] },\n        only: { type: \"string\" },\n        actions: { type: \"boolean\" },\n        messages: { type: \"boolean\" },\n        messages_after: { type: \"number\" },\n        messages_limit: { type: \"number\" },\n        include: { type: \"string\" },\n        compact: { type: \"boolean\" },\n      },\n      required: [\"room\"],\n    },\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const roomId = params.room as string;\n\n      // Build ContextRequest\n      const ctxReq: ContextRequest = {};\n      if (params.depth) ctxReq.depth = params.depth as \"lean\" | \"full\" | \"usage\";\n      if (params.only) ctxReq.only = (params.only as string).split(\",\").map(s => s.trim());\n      if (params.actions === false) ctxReq.actions = false;\n      if (params.messages === false) ctxReq.messages = false;\n      if (params.messages_after !== undefined) ctxReq.messagesAfter = params.messages_after as number;\n      if (params.messages_limit !== undefined) ctxReq.messagesLimit = params.messages_limit as number;\n      if (params.include) ctxReq.include = (params.include as string).split(\",\").map(s => s.trim());\n\n      // New path: session-aware resolution\n      if (ctx.resolveForRoom) {\n        const resolved = await ctx.resolveForRoom(roomId);\n        if (!resolved) throw new Error(`No access to room ${roomId}. Use sync_lobby to see your rooms.`);\n\n        const context = await buildExpandedContext(roomId, resolved.auth, ctxReq);\n        return decorateContextWithSession(context, ctx, roomId, resolved.agentId);\n      }\n\n      // Legacy fallback: explicit token\n      const resolved = await resolveForTool(ctx, params);\n      return buildExpandedContext(resolved.room, resolved.auth, ctxReq);\n    },\n  },\n\n  {\n    name: \"sync_invoke_action\",\n    title: \"Invoke Action\",\n    description: `THE primary write operation. Invoke any action (built-in or custom) in a room.\n\nRequires embodiment — call sync_embody first if not yet embodied.\n\nArgs:\n  - room (string, required): Room ID.\n  - token (string, optional): Auth token (legacy).\n  - action (string, required): Action ID to invoke.\n  - params (object, optional): Parameters for the action.\n\nReturns: { invoked, action, agent, params, writes, result? }`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        token: { type: \"string\" },\n        action: { type: \"string\", description: \"Action ID to invoke\" },\n        params: { type: \"object\", description: \"Action parameters\" },\n      },\n      required: [\"room\", \"action\"],\n    },\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const roomId = params.room as string;\n\n      // New path: session-aware\n      if (ctx.resolveForRoom) {\n        const resolved = await ctx.resolveForRoom(roomId);\n        if (!resolved) throw new Error(`No access to room ${roomId}`);\n        if (!resolved.agentId) {\n          throw new Error(`Not embodied in room ${roomId}. Call sync_embody first.`);\n        }\n        const body: Record = {};\n        if (params.params) body.params = params.params;\n        return unwrap(await invokeAction(roomId, params.action as string, body, resolved.auth));\n      }\n\n      // Legacy fallback\n      const resolved = await resolveForTool(ctx, params);\n      const body: Record = {};\n      if (params.params) body.params = params.params;\n      return unwrap(await invokeAction(resolved.room, params.action as string, body, resolved.auth));\n    },\n  },\n\n  {\n    name: \"sync_wait\",\n    title: \"Wait for Condition\",\n    description: `Block until a CEL condition becomes true, then return room context.\n\nArgs:\n  - room (string, required): Room ID.\n  - token (string, optional): Auth token (legacy).\n  - condition (string, required): CEL expression.\n  - timeout (number, optional): Max wait ms (default: 25000).\n  - depth, only: Context shaping params.\n\nReturns: { triggered: true/false, condition, context }`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        token: { type: \"string\" },\n        condition: { type: \"string\", description: \"CEL expression to wait for\" },\n        timeout: { type: \"number\" },\n        depth: { type: \"string\", enum: [\"lean\", \"full\", \"usage\"] },\n        only: { type: \"string\" },\n      },\n      required: [\"room\", \"condition\"],\n    },\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const roomId = params.room as string;\n\n      // Resolve auth (embodied or view-level)\n      let auth: AuthResult;\n      if (ctx.resolveForRoom) {\n        const resolved = await ctx.resolveForRoom(roomId);\n        if (!resolved) throw new Error(`No access to room ${roomId}`);\n        auth = resolved.auth;\n      } else {\n        const resolved = await resolveForTool(ctx, params);\n        auth = resolved.auth;\n      }\n\n      // Build URL for waitForCondition\n      const url = new URL(`http://internal/rooms/${roomId}/wait`);\n      url.searchParams.set(\"condition\", params.condition as string);\n      if (params.timeout) url.searchParams.set(\"timeout\", String(params.timeout));\n      if (params.depth) url.searchParams.set(\"depth\", params.depth as string);\n      if (params.only) url.searchParams.set(\"only\", params.only as string);\n\n      return unwrap(await waitForCondition(roomId, url, auth));\n    },\n  },\n\n  // ═══════════════════════════════════════════════════════════════\n  // Sugar for common built-in actions\n  // ═══════════════════════════════════════════════════════════════\n\n  {\n    name: \"sync_register_action\",\n    title: \"Register Action\",\n    description: `Register a new action in a room. Requires embodiment.\n\nArgs: room (required), id (required), description, writes, params, scope, if, enabled, result, on_invoke.\n\nReturns: Saved action definition.`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        token: { type: \"string\" },\n        id: { type: \"string\", description: \"Action ID\" },\n        description: { type: \"string\" },\n        writes: { type: \"array\", items: { type: \"object\" }, description: \"Write templates\" },\n        params: { type: \"object\", description: \"Parameter schema\" },\n        scope: { type: \"string\" },\n        \"if\": { type: \"string\", description: \"CEL precondition\" },\n        enabled: { type: \"string\", description: \"CEL visibility gate\" },\n        result: { type: \"string\", description: \"CEL result expression\" },\n        on_invoke: { type: \"object\", description: \"Cooldown timer\" },\n      },\n      required: [\"room\", \"id\"],\n    },\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const roomId = params.room as string;\n      const actionBody: Record = {};\n      for (const key of [\"id\", \"description\", \"writes\", \"params\", \"scope\", \"if\", \"enabled\", \"result\", \"on_invoke\"]) {\n        if (params[key] !== undefined) actionBody[key] = params[key];\n      }\n\n      if (ctx.resolveForRoom) {\n        const resolved = await ctx.resolveForRoom(roomId);\n        if (!resolved) throw new Error(`No access to room ${roomId}`);\n        if (!resolved.agentId) throw new Error(`Not embodied in room ${roomId}. Call sync_embody first.`);\n        return withResponseEscalation(ctx, roomId, resolved.auth, (auth) =>\n          registerAction(roomId, actionBody, auth)\n        );\n      }\n\n      const resolved = await resolveForTool(ctx, params);\n      return withResponseEscalation(ctx, resolved.room, resolved.auth, (auth) =>\n        registerAction(resolved.room, actionBody, auth)\n      );\n    },\n  },\n\n  {\n    name: \"sync_register_view\",\n    title: \"Register View\",\n    description: `Register a computed view. Requires embodiment.\n\nArgs: room (required), id (required), expr (required), description, scope, enabled, render.\n\nReturns: View with current resolved value.`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        token: { type: \"string\" },\n        id: { type: \"string\" },\n        expr: { type: \"string\" },\n        description: { type: \"string\" },\n        scope: { type: \"string\" },\n        enabled: { type: \"string\" },\n        render: { type: \"object\" },\n      },\n      required: [\"room\", \"id\", \"expr\"],\n    },\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const roomId = params.room as string;\n      const viewBody: Record = {};\n      for (const key of [\"id\", \"expr\", \"description\", \"scope\", \"enabled\", \"render\"]) {\n        if (params[key] !== undefined) viewBody[key] = params[key];\n      }\n\n      if (ctx.resolveForRoom) {\n        const resolved = await ctx.resolveForRoom(roomId);\n        if (!resolved) throw new Error(`No access to room ${roomId}`);\n        if (!resolved.agentId) throw new Error(`Not embodied in room ${roomId}. Call sync_embody first.`);\n        return withResponseEscalation(ctx, roomId, resolved.auth, (auth) =>\n          registerView(roomId, viewBody, auth)\n        );\n      }\n\n      const resolved = await resolveForTool(ctx, params);\n      return withResponseEscalation(ctx, resolved.room, resolved.auth, (auth) =>\n        registerView(resolved.room, viewBody, auth)\n      );\n    },\n  },\n\n  {\n    name: \"sync_send_message\",\n    title: \"Send Message\",\n    description: `Send a message to a sync room. Requires embodiment.\n\nArgs: room (required), body (required), kind, to.\n\nReturns: { ok, seq, from, kind }`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        token: { type: \"string\" },\n        body: { type: \"string\", description: \"Message content\" },\n        kind: { type: \"string\" },\n        to: { type: \"string\", description: \"Direct to agent(s)\" },\n      },\n      required: [\"room\", \"body\"],\n    },\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const roomId = params.room as string;\n      const msgParams: Record = { body: params.body };\n      if (params.kind) msgParams.kind = params.kind;\n      if (params.to) msgParams.to = params.to;\n\n      if (ctx.resolveForRoom) {\n        const resolved = await ctx.resolveForRoom(roomId);\n        if (!resolved) throw new Error(`No access to room ${roomId}`);\n        if (!resolved.agentId) throw new Error(`Not embodied in room ${roomId}. Call sync_embody first.`);\n        return unwrap(await invokeBuiltinAction(roomId, \"_send_message\", { params: msgParams }, resolved.auth));\n      }\n\n      const resolved = await resolveForTool(ctx, params);\n      return unwrap(await invokeBuiltinAction(resolved.room, \"_send_message\", { params: msgParams }, resolved.auth));\n    },\n  },\n\n  {\n    name: \"sync_help\",\n    title: \"Get Help\",\n    description: `Access the sync help system.\n\nArgs: room (required), key (optional).\n\nReturns: { content, version, source }`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        token: { type: \"string\" },\n        key: { type: \"string\", description: \"Help key\" },\n      },\n      required: [\"room\"],\n    },\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const roomId = params.room as string;\n      const helpParams: Record = {};\n      if (params.key) helpParams.key = params.key;\n\n      // Help works in observe mode — no embodiment required\n      if (ctx.resolveForRoom) {\n        const resolved = await ctx.resolveForRoom(roomId);\n        if (!resolved) throw new Error(`No access to room ${roomId}`);\n        return unwrap(await invokeBuiltinAction(roomId, \"help\", { params: helpParams }, resolved.auth));\n      }\n\n      const resolved = await resolveForTool(ctx, params);\n      return unwrap(await invokeBuiltinAction(resolved.room, \"help\", { params: helpParams }, resolved.auth));\n    },\n  },\n\n  {\n    name: \"sync_eval_cel\",\n    title: \"Evaluate CEL\",\n    description: `Evaluate a CEL expression against the current room state.\n\nArgs: room (required), expr (required).\n\nReturns: { expression, value }`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        token: { type: \"string\" },\n        expr: { type: \"string\", description: \"CEL expression\" },\n      },\n      required: [\"room\", \"expr\"],\n    },\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const roomId = params.room as string;\n\n      if (ctx.resolveForRoom) {\n        const resolved = await ctx.resolveForRoom(roomId);\n        if (!resolved) throw new Error(`No access to room ${roomId}`);\n        return unwrap(await evalExpression(roomId, { expr: params.expr }, resolved.auth));\n      }\n\n      const resolved = await resolveForTool(ctx, params);\n      return unwrap(await evalExpression(resolved.room, { expr: params.expr }, resolved.auth));\n    },\n  },\n\n  {\n    name: \"sync_delete_action\",\n    title: \"Delete Action\",\n    description: `Remove an action from a room. Requires embodiment.\n\nArgs: room (required), id (required).`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        token: { type: \"string\" },\n        id: { type: \"string\", description: \"Action ID to delete\" },\n      },\n      required: [\"room\", \"id\"],\n    },\n    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const roomId = params.room as string;\n\n      if (ctx.resolveForRoom) {\n        const resolved = await ctx.resolveForRoom(roomId);\n        if (!resolved) throw new Error(`No access to room ${roomId}`);\n        if (!resolved.agentId) throw new Error(`Not embodied in room ${roomId}. Call sync_embody first.`);\n        return unwrap(await deleteAction(roomId, params.id as string, resolved.auth));\n      }\n\n      const resolved = await resolveForTool(ctx, params);\n      return unwrap(await deleteAction(resolved.room, params.id as string, resolved.auth));\n    },\n  },\n\n  {\n    name: \"sync_delete_view\",\n    title: \"Delete View\",\n    description: `Remove a view from a room. Requires embodiment.\n\nArgs: room (required), id (required).`,\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        room: { type: \"string\" },\n        token: { type: \"string\" },\n        id: { type: \"string\", description: \"View ID to delete\" },\n      },\n      required: [\"room\", \"id\"],\n    },\n    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false },\n    async handler(params, ctx) {\n      await ensureMigrated();\n      const roomId = params.room as string;\n\n      if (ctx.resolveForRoom) {\n        const resolved = await ctx.resolveForRoom(roomId);\n        if (!resolved) throw new Error(`No access to room ${roomId}`);\n        if (!resolved.agentId) throw new Error(`Not embodied in room ${roomId}. Call sync_embody first.`);\n        return unwrap(await deleteView(roomId, params.id as string, resolved.auth));\n      }\n\n      const resolved = await resolveForTool(ctx, params);\n      return unwrap(await deleteView(resolved.room, params.id as string, resolved.auth));\n    },\n  },\n\n  // ═══════════════════════════════════════════════════════════════\n  // Vault management — REMOVED in v7 (unified tokens replace vault)\n  // Legacy vault tools have been removed. Use /tokens endpoints instead.\n  // ═══════════════════════════════════════════════════════════════\n];\n",[],[753,840],{"_105":847,"_97":848,"_166":849,"_168":754,"_169":149,"_170":122,"_171":172,"_107":850,"_102":33,"_174":356,"_176":851,"_177":22,"_178":-5,"_179":852,"_101":853},"ca7113e8-1f92-11f1-943c-42dde27851f2","vault.ts","019cebf2-a8a6-7120-b163-ca2875f31593",["D",1773485074605],"/**\n * vault.ts — Legacy token resolution helper.\n *\n * v7: The vault API and vault CRUD have been removed.\n * This file retains only `resolveToken` which is used by the legacy\n * tool fallback path in tool-context.ts for explicit token params.\n *\n * Will be fully removed once all tools migrate to resolveForRoom.\n */\n\n/**\n * Resolve room + token for legacy tool calls that pass explicit params.\n * No vault lookup — just passthrough for explicit room+token pairs.\n */\nexport async function resolveToken(\n  userId: string | null,\n  room?: string,\n  token?: string,\n): Promise<{ room: string; token: string } | null> {\n  // Explicit token always wins (only remaining use case)\n  if (room && token) return { room, token };\n  return null;\n}\n",[],[753,848],{"_105":855,"_97":856,"_166":857,"_168":754,"_169":149,"_170":122,"_171":172,"_107":858,"_102":33,"_174":356,"_176":859,"_177":22,"_178":-5,"_179":860,"_101":861},"ca7119c4-1f92-11f1-943c-42dde27851f2","webauthn.ts","019cebf2-a8a6-7120-b163-cd5ac2a86901",["D",1773485074605],"/**\n * webauthn.ts — WebAuthn passkey registration and authentication handlers.\n *\n * Uses @simplewebauthn/server for passkey crypto.\n * Separated from OAuth because these are a distinct authentication mechanism.\n */\n\nimport {\n  generateAuthenticationOptions,\n  generateRegistrationOptions,\n  verifyAuthenticationResponse,\n  verifyRegistrationResponse,\n} from \"npm:@simplewebauthn/server@13\";\nimport type {\n  AuthenticatorTransportFuture,\n} from \"npm:@simplewebauthn/server@13\";\n\nimport * as db from \"./db.ts\";\n\n// ─── Configuration ───────────────────────────────────────────────\n\nconst RP_NAME = \"sync-mcp\";\nconst STABLE_RP_ID = Deno.env.get(\"WEBAUTHN_RP_ID\") ?? \"parc.land\";\n\nfunction getOrigin(req: Request): string {\n  const url = new URL(req.url);\n  return `${url.protocol}//${url.host}`;\n}\n\nexport function getRpId(req: Request): string {\n  const hostname = new URL(req.url).hostname;\n  if (hostname === STABLE_RP_ID || hostname.endsWith(\".\" + STABLE_RP_ID)) {\n    return STABLE_RP_ID;\n  }\n  return hostname;\n}\n\nfunction json(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data, null, 2), {\n    status,\n    headers: {\n      \"Content-Type\": \"application/json\",\n      \"Access-Control-Allow-Origin\": \"*\",\n      \"Access-Control-Allow-Methods\": \"GET, POST, DELETE, OPTIONS\",\n      \"Access-Control-Allow-Headers\": \"Content-Type, Authorization\",\n      \"Cache-Control\": \"no-store\",\n    },\n  });\n}\n\n// ─── WebAuthn: Registration Options ──────────────────────────────\n\nexport async function handleRegisterOptions(req: Request): Promise {\n  const { username } = await req.json();\n  if (\n    !username || typeof username !== \"string\" || username.length < 1 ||\n    username.length > 64\n  ) {\n    return json({ error: \"Username required (1-64 chars)\" }, 400);\n  }\n\n  const existing = await db.getUserByUsername(username);\n  if (existing) {\n    return json(\n      { error: \"Username already taken. Try signing in instead.\" },\n      409,\n    );\n  }\n\n  const userId = db.generateId();\n  const rpId = getRpId(req);\n\n  const options = await generateRegistrationOptions({\n    rpName: RP_NAME,\n    rpID: rpId,\n    userName: username,\n    userID: new TextEncoder().encode(userId),\n    attestationType: \"none\",\n    authenticatorSelection: {\n      residentKey: \"preferred\",\n      userVerification: \"preferred\",\n    },\n  });\n\n  const challengeId = db.generateId();\n  await db.saveChallenge(\n    challengeId,\n    options.challenge,\n    \"registration\",\n    userId,\n  );\n\n  return json({\n    options,\n    challengeId,\n    userId,\n    username,\n  });\n}\n\n// ─── WebAuthn: Registration Verify ───────────────────────────────\n\nexport async function handleRegisterVerify(req: Request): Promise {\n  const { challengeId, userId, username, response } = await req.json();\n\n  const challenge = await db.getChallenge(challengeId);\n  if (!challenge || challenge.type !== \"registration\") {\n    return json({ error: \"Invalid or expired challenge\" }, 400);\n  }\n\n  const rpId = getRpId(req);\n  const origin = getOrigin(req);\n\n  try {\n    const verification = await verifyRegistrationResponse({\n      response,\n      expectedChallenge: challenge.challenge,\n      expectedOrigin: origin,\n      expectedRPID: rpId,\n    });\n\n    if (!verification.verified || !verification.registrationInfo) {\n      return json({ error: \"Verification failed\" }, 400);\n    }\n\n    const { credential, credentialDeviceType, credentialBackedUp } =\n      verification.registrationInfo;\n\n    await db.createUser(userId, username);\n\n    await db.saveCredential({\n      id: credential.id,\n      userId,\n      publicKey: credential.publicKey,\n      counter: credential.counter,\n      transports: credential.transports as string[],\n      deviceType: credentialDeviceType,\n      backedUp: credentialBackedUp,\n      rpId: getRpId(req),\n    });\n\n    await db.deleteChallenge(challengeId);\n\n    const sessionId = await db.createSession(userId);\n\n    return json({ verified: true, sessionId });\n  } catch (err) {\n    return json(\n      { error: `Registration failed: ${(err as Error).message}` },\n      400,\n    );\n  }\n}\n\n// ─── WebAuthn: Authentication Options ────────────────────────────\n\nexport async function handleAuthOptions(req: Request): Promise {\n  const body = await req.json().catch(() => ({}));\n  const rpId = getRpId(req);\n\n  let allowCredentials: {\n    id: string;\n    transports?: AuthenticatorTransportFuture[];\n  }[] | undefined;\n  if (body.username) {\n    const user = await db.getUserByUsername(body.username);\n    if (user) {\n      const creds = await db.getCredentialsByUserId(user.id, rpId);\n      allowCredentials = creds.map((c) => ({\n        id: c.id,\n        transports: c.transports as AuthenticatorTransportFuture[] | undefined,\n      }));\n    }\n  }\n\n  const options = await generateAuthenticationOptions({\n    rpID: rpId,\n    userVerification: \"preferred\",\n    allowCredentials,\n  });\n\n  const challengeId = db.generateId();\n  await db.saveChallenge(challengeId, options.challenge, \"authentication\");\n\n  return json({ options, challengeId });\n}\n\n// ─── WebAuthn: Authentication Verify ─────────────────────────────\n\nexport async function handleAuthVerify(req: Request): Promise {\n  const { challengeId, response } = await req.json();\n\n  const challenge = await db.getChallenge(challengeId);\n  if (!challenge || challenge.type !== \"authentication\") {\n    return json({ error: \"Invalid or expired challenge\" }, 400);\n  }\n\n  const credential = await db.getCredentialById(response.id);\n  if (!credential) {\n    return json({ error: \"Unknown credential\" }, 400);\n  }\n\n  const rpId = getRpId(req);\n  const origin = getOrigin(req);\n\n  try {\n    const verification = await verifyAuthenticationResponse({\n      response,\n      expectedChallenge: challenge.challenge,\n      expectedOrigin: origin,\n      expectedRPID: rpId,\n      credential: {\n        id: credential.id,\n        publicKey: credential.publicKey,\n        counter: credential.counter,\n        transports: credential.transports as\n          | AuthenticatorTransportFuture[]\n          | undefined,\n      },\n    });\n\n    if (!verification.verified) {\n      return json({ error: \"Authentication failed\" }, 400);\n    }\n\n    await db.updateCredentialCounter(\n      credential.id,\n      verification.authenticationInfo.newCounter,\n    );\n    await db.deleteChallenge(challengeId);\n\n    const sessionId = await db.createSession(credential.userId);\n\n    return json({ verified: true, sessionId });\n  } catch (err) {\n    return json({ error: `Auth failed: ${(err as Error).message}` }, 400);\n  }\n}\n",[],[753,856],[753],{"_105":864,"_97":865,"_166":866,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":867,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_179":868,"_101":950},"ca732778-1f92-11f1-943c-42dde27851f2","reference","019cebf2-a8a6-7120-b163-f8ebc9492738",["D",1773485074605],[869,877,885,893,901,909,917,925,933,942],{"_105":870,"_97":871,"_166":872,"_168":866,"_169":149,"_170":122,"_171":172,"_107":873,"_102":33,"_174":186,"_176":874,"_177":22,"_178":-5,"_179":875,"_101":876},"ca713832-1f92-11f1-943c-42dde27851f2","api.md","019cebf2-a8a6-7120-b163-d717a371a603",["D",1773485074605],"# sync v7 API Reference\n\nBase URL: `https://sync.parc.land`\n\n## Auth Model\n\n**Unified tokens (v7):** All credentials are scoped tokens minted by a passkey-authenticated user. Token prefix: `tok_`. Scope string determines what the token can do.\n\n**Legacy tokens:** `room_`, `view_`, `as_` prefix tokens continue to work for backward compatibility.\n\n**Effective access** = `min(token.scope, user_rooms.role)`. A token can only narrow, never widen.\n\n---\n\n## Device Auth (RFC 8628)\n\n### POST /auth/device\nInitiate device authorization. Returns a device code for CLI polling and a user code for browser approval.\n\n```json\n// Request\n{ \"scope\": \"rooms:* create_rooms\", \"client_id\": \"my-cli\" }\n\n// Response 200\n{\n  \"device_code\": \"dev_xxx\",\n  \"user_code\": \"ABCD-1234\",\n  \"verification_uri\": \"https://sync.parc.land/auth/device\",\n  \"verification_uri_complete\": \"https://sync.parc.land/auth/device?code=ABCD-1234\",\n  \"expires_in\": 900,\n  \"interval\": 5\n}\n```\n\n### GET /auth/device?code=ABCD-1234\nBrowser approval page with WebAuthn passkey auth + consent UI (room picker, scope customization).\n\n### POST /auth/device/token\nCLI polls for token. Returns `authorization_pending` until user approves.\n\n```json\n// Request\n{ \"device_code\": \"dev_xxx\" }\n\n// Pending: 200 { \"error\": \"authorization_pending\" }\n// Denied:  403 { \"error\": \"access_denied\" }\n// Approved: 200\n{\n  \"access_token\": \"tok_xxx\",\n  \"token_type\": \"Bearer\",\n  \"expires_in\": 3600,\n  \"refresh_token\": \"ref_xxx\",\n  \"scope\": \"rooms:* create_rooms\"\n}\n```\n\n---\n\n## Scope Elevation\n\nWhen a `tok_` token attempts to access a room not in its scope, the `403` response includes a stateless elevation URL:\n\n```json\n{\n  \"error\": \"scope_denied\",\n  \"room\": \"kernel-ergonomics\",\n  \"elevate\": \"https://sync.parc.land/auth/elevate?token_id=xxx&room=kernel-ergonomics\",\n  \"hint\": \"Present the elevate URL to the user to request access, then retry.\"\n}\n```\n\n### GET /auth/elevate\nBrowser elevation page. Shows the requested room, access level picker (full/write/read), passkey auth, and approve/deny.\n\nQuery params: `token_id` (required), `room` (required), `level` (optional, default `full`).\n\n### POST /auth/elevate/approve\nServer-side endpoint called by the elevation page after passkey auth. Validates the user owns the token, has access to the room in `user_rooms`, and appends the scope. No new tables — the token's scope string is patched directly.\n\nThe MCP path surfaces the same URL in error messages, enabling agents to present it to users conversationally.\n\n---\n\n## Token Management\n\n### POST /tokens\nMint a scoped token. Requires authentication. Scope must not exceed the minting user's access.\n\n```json\n// Request\n{ \"scope\": \"rooms:my-room:agent:alice\", \"label\": \"Alice delegation\", \"expires_in\": 3600 }\n\n// Response 201\n{ \"id\": \"...\", \"token\": \"tok_xxx\", \"scope\": \"...\", \"expires_at\": \"...\" }\n```\n\n### GET /tokens\nList tokens minted by the authenticated user. Never exposes bearer strings.\n\n### PATCH /tokens/:id\nUpdate a token's scope or label. The new scope must not exceed the caller's actual access (user_rooms + authenticating token privileges). Both widening and narrowing are allowed within this bound.\n\n```json\n// Request — widen to add rooms\n{ \"scope\": \"rooms:cartographers rooms:demo create_rooms\", \"label\": \"Updated\" }\n\n// Response 200\n{ \"id\": \"...\", \"scope\": \"rooms:cartographers rooms:demo create_rooms\", \"previous_scope\": \"rooms:cartographers:read\", \"label\": \"Updated\" }\n```\n\nReturns `403 scope_exceeds_access` if the new scope includes rooms or privileges the caller doesn't have.\n\n**Room creation and scope:** When a `tok_` token with `create_rooms` scope creates a room, the system automatically appends `rooms:` to that token's scope. This means the creating token (and only that token) gains access to the room. Other tokens from the same user do not — the scope string is the single source of truth.\n\n### DELETE /tokens/:id\nRevoke a token. Must be minted by the authenticated user.\n\n### POST /tokens/refresh\nExchange a refresh token for a new access token.\n\n```json\n{ \"refresh_token\": \"ref_xxx\" }\n→ { \"access_token\": \"tok_yyy\", \"refresh_token\": \"ref_yyy\", \"expires_in\": 3600 }\n```\n\n---\n\n## Rooms\n\n### POST /rooms\nCreate a room. If authenticated with a `tok_` token that has `create_rooms` scope, the room is auto-linked to your user as owner. Unauthenticated creation still works for backward compatibility.\n\n```json\n// Request\n{ \"id\": \"my-room\", \"meta\": { \"name\": \"My Room\" } }\n\n// Response 201\n{ \"id\": \"my-room\", \"created_at\": \"...\", \"meta\": \"{...}\", \"token\": \"room_...\", \"view_token\": \"view_...\" }\n```\n\n### GET /rooms\nList rooms visible to the authenticated token.\n\n### GET /rooms/:id\nGet room info.\n\n### POST /rooms/:id/invite\n**Requires owner access.** Invite a user to a room.\n\n```json\n{ \"username\": \"bob\", \"role\": \"collaborator\" }\n→ { \"invited\": true, \"username\": \"bob\", \"room\": \"my-room\", \"role\": \"collaborator\" }\n```\n\nRoles: `owner`, `collaborator`, `participant`, `observer`.\n\n### POST /rooms/:id/claim\nClaim an orphaned room (no owners in user_rooms). Any authenticated user can claim rooms with no existing users.\n\n```json\n{ \"label\": \"My Room\" }\n→ { \"claimed\": true, \"room\": \"my-room\", \"role\": \"owner\" }\n```\n\n### POST /rooms/:id/rotate-view-token\n**Requires admin access.** Regenerate the view token.\n\n### POST /rooms/:id/generate-view-token\n**Requires admin access.** Generate a view token for rooms that don't have one.\nReturns 409 if one already exists.\n\n---\n\n## Agents\n\n### POST /rooms/:id/agents\nJoin a room. Returns agent token.\n\n```json\n// Basic join\n{ \"id\": \"agent-a\", \"name\": \"Alice\", \"role\": \"warrior\" }\n\n// Join with private state and views (recommended)\n{ \"id\": \"agent-a\", \"name\": \"Alice\", \"role\": \"warrior\",\n  \"state\": { \"health\": 100, \"inventory\": [\"sword\"] },\n  \"public_keys\": [\"health\"],\n  \"views\": [\n    { \"id\": \"alice-combat\", \"expr\": \"state[\\\"alice\\\"][\\\"health\\\"] > 50 ? \\\"ready\\\" : \\\"wounded\\\"\" }\n  ]}\n\n// Response 201\n{ \"id\": \"agent-a\", \"name\": \"Alice\", \"role\": \"warrior\", \"token\": \"as_...\", \"grants\": \"[]\", ... }\n```\n\n**Inline state:** `state` object writes key-value pairs to the agent's private scope.\n**public_keys:** Array of key names from `state` to auto-create views for (equivalent to `\"public\": true`).\n**Inline views:** Array of view definitions scoped to this agent. Each needs `id` and `expr`.\n\nRe-joining: provide existing agent token or room token in Authorization header.\n\n### PATCH /rooms/:id/agents/:agent-id\n**Requires room token.** Update agent grants, role, name, meta.\n\n```json\n{ \"grants\": [\"_shared\", \"_messages\"] }\n```\n\n---\n\n## Context (primary read endpoint)\n\n### GET /rooms/:id/context\nReturns everything an agent needs in one call: state, views, agents, actions\n(with descriptions and params), and messages (with bodies).\n\n**Query params:**\n- `only` — comma-separated sections: `state`, `views`, `agents`, `actions`, `messages`, or `state._shared`\n- `messages_after` — only messages with seq > N (for pagination)\n- `messages_limit` — max message bodies (default 50, max 200)\n\n```json\n// GET /rooms/my-room/context  (as alice)\n{\n  \"state\": {\n    \"_shared\": { \"phase\": \"playing\", \"turn\": 3 },\n    \"self\": { \"health\": 80, \"inventory\": [\"sword\", \"potion\"] }\n  },\n  \"views\": {\n    \"alice.health\": 80,\n    \"alice-combat\": \"ready\",\n    \"bob.health\": 65\n  },\n  \"agents\": {\n    \"alice\": { \"name\": \"Alice\", \"role\": \"warrior\", \"status\": \"active\" },\n    \"bob\": { \"name\": \"Bob\", \"role\": \"healer\", \"status\": \"waiting\" }\n  },\n  \"actions\": {\n    \"attack\": {\n      \"available\": true, \"enabled\": true,\n      \"description\": \"Attack a target\",\n      \"params\": { \"target\": { \"type\": \"string\", \"enum\": [\"goblin\", \"dragon\"] } },\n      \"writes\": [{ \"scope\": \"_shared\", \"key\": \"last_attack\", \"value\": { \"by\": \"${self}\", \"target\": \"${params.target}\" } }]\n    },\n    \"_send_message\": {\n      \"available\": true, \"enabled\": true, \"builtin\": true,\n      \"description\": \"Send a message to the room\",\n      \"params\": { \"body\": { \"type\": \"string\" }, \"kind\": { \"type\": \"string\" } }\n    }\n  },\n  \"messages\": {\n    \"count\": 12, \"unread\": 3, \"directed_unread\": 1,\n    \"recent\": [\n      { \"seq\": 10, \"from\": \"alice\", \"kind\": \"chat\", \"body\": \"hello\" },\n      { \"seq\": 11, \"from\": \"bob\", \"to\": [\"alice\"], \"kind\": \"negotiation\", \"body\": \"...\" },\n      { \"seq\": 12, \"from\": \"alice\", \"kind\": \"chat\", \"body\": \"thanks\" }\n    ]\n  },\n  \"_context\": { \"depth\": \"lean\", \"help\": [] },\n  \"self\": \"alice\"\n}\n```\n\n**Scope privacy:** Agent tokens see system scopes + own scope (as `self`) + view projections.\nRoom and view tokens see all scopes. Bob cannot see Alice's raw state — only her view projections.\n\n**Action writes in context:** Custom actions include their `writes` templates in the context\nresponse, letting agents inspect what an action will do before invoking it.\n\nReading context updates `last_seen_seq`, marking messages as read.\n\n### GET /rooms/:id/poll\nDashboard-optimized bundle. Returns agents, state, messages, actions, views, and audit log.\nUnlike `/context`, returns raw row data suitable for debugging UIs.\n\n**Query params:**\n- `messages_limit` — max messages (default 500, max 2000)\n- `audit_limit` — max audit entries (default 500, max 2000)\n\nState tab excludes `_messages` and `_audit` scopes (those have dedicated sections).\n\n---\n\n## Wait\n\n### GET /rooms/:id/wait\nBlock until a CEL condition becomes true. Returns full context by default.\n\n**Query params:**\n- `condition` — CEL expression (required)\n- `agent` — agent ID for status tracking (defaults to auth identity)\n- `timeout` — max wait ms (default/max 25000)\n- `include` — `context` (default) returns full context; or comma-separated: `state`, `agents`, `messages`, `actions`, `views`\n\n```\nGET /rooms/my-room/wait?condition=messages.unread>0\n→ { \"triggered\": true, \"condition\": \"...\", \"context\": { \"state\": {...}, \"views\": {...}, \"messages\": { \"recent\": [...] }, ... } }\n```\n\n---\n\n## Actions (the write endpoint)\n\n### POST /rooms/:id/actions/:action-id/invoke\nInvoke an action (user-registered or built-in). **Requires auth.**\n\n```json\n{ \"params\": { \"target\": \"goblin\" } }\n```\n\nThis is the only write endpoint. All state mutations, messages, registrations,\nand deletions flow through action invocation. Every invocation is logged to the\n`_audit` scope for traceability.\n\n**Built-in actions** are available in every room:\n\n| Action | Description | Key params |\n|--------|-------------|------------|\n| `_register_action` | Declare a write capability | `id`, `description`, `params`, `writes`, `if`, `enabled`, `result`, `scope` |\n| `_delete_action` | Remove an action | `id` |\n| `_register_view` | Declare a read capability | `id`, `expr`, `scope`, `description`, `render`, `enabled` |\n| `_delete_view` | Remove a view | `id` |\n| `_send_message` | Send a message | `body` (required), `kind` (default: \"chat\"), `to` (directed routing) |\n| `help` | Read guidance documents (overridable) | `key` |\n\nThere is no `_set_state`, `_heartbeat`, or `_renew_timer`. Agents write state by\nregistering actions with write templates, then invoking them. The standard library\n(`help({ key: \"standard_library\" })`) provides ready-to-register patterns for common\noperations like `set`, `delete`, `increment`, `append`, and more.\n\nBuilt-in actions appear in `/context` with `\"builtin\": true` and full param descriptions.\n\n**Overridable builtins:** The `help` action is a built-in that returns a participant guide\nwith API usage, available actions, and key concepts. Room creators can override it by\nregistering a custom action with `\"id\": \"help\"` — the custom version replaces the built-in\nin both context listing and invocation.\n\n**Registering custom actions** (via `_register_action`):\n\n```json\nPOST /rooms/my-room/actions/_register_action/invoke\n{ \"params\": {\n  \"id\": \"attack\",\n  \"description\": \"Attack a target\",\n  \"params\": { \"target\": { \"type\": \"string\", \"enum\": [\"goblin\", \"dragon\"] } },\n  \"if\": \"state._shared.phase == \\\"combat\\\"\",\n  \"writes\": [\n    { \"scope\": \"_shared\", \"key\": \"last_attack\", \"value\": { \"by\": \"${self}\", \"target\": \"${params.target}\", \"at\": \"${now}\" } }\n  ]\n}}\n```\n\n**Custom action fields:**\n- `id` — unique within room (required)\n- `scope` — owner scope (default `_shared`). Scoped actions carry that agent's authority.\n- `description` — human-readable\n- `params` — parameter schema with `type` and optional `enum`\n- `writes` — array of state mutations (with `${self}`, `${params.x}`, `${now}` substitution in both values AND object keys)\n- `increment` in write templates supports templates: `\"increment\": \"${params.amount}\"` is resolved and coerced to number\n- `if` — CEL predicate gating execution\n- `enabled` — CEL expression gating visibility\n- `timer` — lifecycle timer\n- `on_invoke.timer` — cooldown timer applied after each invocation\n\n**State write modes** (in action write templates):\n- `value` — full replacement (default)\n- `merge` — deep merge into existing object (null values delete keys)\n- `increment` — atomic counter increment (supports template: `\"increment\": \"${params.amount}\"`)\n- `append: true` — two modes: without `key`, creates log-row with auto sort_key; with `key`, does array-push (reads existing value, wraps as array, pushes new value)\n- `if_version` — CAS (compare-and-swap) using content hash\n- `timer` — attach lifecycle timer to state entry\n\n**Error responses:**\n- `409 action_cooldown` — action is in cooldown. Includes `available_at` or `ticks_remaining`.\n- `409 precondition_failed` — the action's `if` predicate evaluated to false.\n- `409 action_disabled` — the action's `enabled` expression is false.\n- `404 action_expired` — action's timer has permanently expired.\n- `403 scope_denied` — agent lacks authority over target scope.\n- `500 write_failed` — SQLite constraint or other write error. Returns `{ error, action, detail, writes_attempted }` for debugging.\n\n---\n\n## Audit Log\n\nEvery action invocation generates an entry in the `_audit` scope:\n\n```json\n{ \"ts\": \"2026-02-26T12:55:23Z\", \"agent\": \"alice\", \"action\": \"submit_result\",\n  \"builtin\": false, \"params\": { \"result\": \"42\" }, \"ok\": true }\n```\n\nEntries capture: timestamp, agent identity (or \"admin\" for room token), action name,\nwhether it's a builtin, parameters passed, and success/failure status. Failed\ninvocations (scope denials, precondition failures) are logged with `\"ok\": false`.\n\nVisible in the dashboard Audit tab and via `/poll` response's `audit` array.\n\n---\n\n## CEL Eval\n\n### POST /rooms/:id/eval\nEvaluate a CEL expression for debugging.\n\n```json\n{ \"expr\": \"state._shared.phase == \\\"playing\\\" && messages.unread > 0\" }\n```\n\n---\n\n## Scope Conventions\n\n| Scope | Mode | Purpose |\n|-------|------|---------|\n| `_shared` | mutable | Communal game/room state |\n| `_messages` | append | Communication log |\n| `_audit` | append | Action invocation log (auto-generated) |\n| `{agent-id}` | mutable | Private agent state |\n\n## Authority Model\n\n| Identity | Default Scope | Can Read | Can Write |\n|----------|--------------|----------|-----------|\n| Room token | `*` | Everything | Everything |\n| View token | — | Everything | Nothing (read-only) |\n| Agent (default) | own scope | System scopes + own scope | Own scope only |\n| Agent (granted) | own + grants | System scopes + own + grants | Own scope + granted scopes |\n| Via action | registrar's | — | Action's defined writes |\n\nUnprivileged agents register actions with write templates scoped to their own\nnamespace, or invoke custom actions registered by other agents that bridge scope\nauthority. The standard library provides canonical patterns: `help({ key: \"standard_library\" })`.\n",[],[865,871],{"_105":878,"_97":879,"_166":880,"_168":866,"_169":149,"_170":122,"_171":172,"_107":881,"_102":33,"_174":186,"_176":882,"_177":22,"_178":-5,"_179":883,"_101":884},"ca7189e0-1f92-11f1-943c-42dde27851f2","cel.md","019cebf2-a8a6-7120-b163-d82c0578b1f9",["D",1773485074605],"# CEL (Common Expression Language) Reference — sync v6\n\nCEL is used throughout sync for predicates, computed values, enabled expressions, and views.\n\n## Context Shape\n\nEvery CEL expression is evaluated against a context object. The shape depends on who is evaluating:\n\n### Agent Context (GET /context, /wait, POST /eval)\n\n```\n{\n  state: {\n    _shared: { phase: \"playing\", turn: 3 },\n    _messages: { \"1\": { from: \"alice\", body: \"hi\" }, ... },\n    self: { health: 80, inventory: [\"sword\"] }    // own scope mapped to \"self\"\n  },\n  views: {\n    \"alice-status\": \"healthy\",\n    \"total-score\": 142\n  },\n  agents: {\n    \"agent-a\": { name: \"Alice\", role: \"warrior\", status: \"active\" },\n    \"agent-b\": { name: \"Bob\", role: \"healer\", status: \"waiting\" }\n  },\n  actions: {\n    \"attack\": { available: true, enabled: true },\n    \"heal\": { available: false, enabled: true }\n  },\n  messages: { count: 42, unread: 3, directed_unread: 1 },\n  self: \"agent-a\",\n  params: {}\n}\n```\n\n### Action/View Evaluation Context\n\nActions and views evaluate with the **registrar's** scope authority:\n- An action registered by `agent-a` can reference `state[\"agent-a\"]` in its `if` predicate\n- A view registered by `agent-a` can reference `state[\"agent-a\"]` in its `expr`\n- The platform loads the registrar's scope into the context for evaluation\n\n## Operators\n\n### Comparison\n```\n==  !=  <  <=  >  >=\n```\n\n### Logical\n```\n&&  ||  !\n```\n\n### Arithmetic\n```\n+  -  *  /  %\n```\n\n### Ternary\n```\ncondition ? value_if_true : value_if_false\n```\n\n### Membership\n```\n\"item\" in list              // list contains\n\"key\" in map                // map has key\n```\n\n### String\n```\nstring.contains(\"sub\")\nstring.startsWith(\"pre\")\nstring.endsWith(\"suf\")\nstring.size()               // length\n```\n\n## Common Patterns\n\n### State Checks\n```cel\nstate._shared.phase == \"playing\"\nstate._shared.turn > 0\nstate.self.health > 0\n```\n\n### View References\n```cel\nviews[\"alice-status\"] == \"healthy\"\nviews[\"all-ready\"] == true\n```\n\n### Agent Checks\n```cel\nagents[\"agent-a\"].status == \"active\"\nagents[self].status == \"waiting\"\n```\n\n### Action Availability\n```cel\nactions[\"attack\"].available == true\n```\n\n### Message Tracking\n```cel\nmessages.unread > 0\nmessages.directed_unread > 0\nmessages.count >= 10\n```\n\n### Claiming / Ownership (in action predicates)\n```cel\n// Only claimable if not yet claimed\nstate._tasks[params.key].claimed_by == null\n\n// Only if self posted it\nstate._tasks[params.key].from == self\n```\n\n### Turn-Based Logic\n```cel\n// It's my turn\nstate._shared.current_player == self\n\n// Turn limit not reached\nstate._shared.turn < state._shared.max_turns\n```\n\n### Compound Conditions\n```cel\nstate._shared.phase == \"playing\"\n  && agents[self].status == \"active\"\n  && state.self.health > 0\n  && actions[\"attack\"].available\n```\n\n## Where CEL is Used\n\n| Context | Field | Purpose |\n|---------|-------|---------|\n| State write | `if` | Write gate — must be true for write to proceed |\n| State entry | `enabled` | Entry visibility — hidden when false |\n| Action | `if` | Invocation gate — must be true to invoke |\n| Action | `enabled` | Action visibility — hidden when false |\n| Action write | `expr: true` on value | Compute value from expression |\n| View | `expr` | Compute projection from state |\n| View | `enabled` | View visibility — hidden when false |\n| Wait | `condition` | Block until true |\n| Eval | `expr` | Debug evaluation |\n\n## Parameter Substitution (Actions)\n\nInside action `writes`, values support template substitution:\n\n- `${self}` — invoking agent's ID\n- `${params.name}` — parameter value\n- `${now}` — ISO 8601 timestamp at invocation time\n\nSubstitution is **deep** — works inside nested objects and arrays:\n\n```json\n{\n  \"value\": {\n    \"from\": \"${self}\",\n    \"claimed_at\": \"${now}\",\n    \"data\": {\n      \"items\": [\"${params.item}\"],\n      \"metadata\": { \"author\": \"${self}\" }\n    }\n  }\n}\n```\n\nFor computed values, use `\"expr\": true` on the write entry:\n\n```json\n{\n  \"value\": \"state._shared.turn + 1\",\n  \"expr\": true\n}\n```\n\n## Notes\n\n- CEL returns typed values: strings, numbers, booleans, lists, maps\n- Division by zero and null access produce errors (expression fails)\n- Failed expressions in `enabled` contexts mean \"not enabled\" (hidden)\n- Failed expressions in `if` contexts mean \"precondition not met\" (409)\n- `bigint` results are automatically converted to numbers\n",[],[865,879],{"_105":886,"_97":887,"_166":888,"_168":866,"_169":149,"_170":122,"_171":172,"_107":889,"_102":33,"_174":186,"_176":890,"_177":22,"_178":-5,"_179":891,"_101":892},"ca71a902-1f92-11f1-943c-42dde27851f2","examples.md","019cebf2-a8a6-7120-b163-dc39cf601003",["D",1773485074605],"# sync v6 Examples\n\nAll writes use `POST /actions/:id/invoke`. All reads use `GET /context`.\nThere is no `_set_state` — agents register actions with write templates, then invoke them.\nThe standard library (`help({ key: \"standard_library\" })`) provides common patterns.\n\n## 1. Basic Setup: Room + Agents + Chat\n\n```bash\n# Create room (save the room token!)\ncurl -X POST https://sync.parc.land/rooms \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"id\": \"demo\"}'\n# → { \"id\": \"demo\", \"token\": \"room_abc123...\" }\n\n# Bootstrap: read standard library, register a \"set\" action\ncurl -X POST https://sync.parc.land/rooms/demo/actions/help/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"params\": {\"key\": \"standard_library\"}}'\n# → returns ready-to-register action definitions\n\n# Register the \"set\" action from standard library\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"params\": {\"id\": \"set\", \"description\": \"Write a named value to shared state\",\n       \"params\": {\"key\": {\"type\": \"string\"}, \"value\": {\"type\": \"any\"}},\n       \"writes\": [{\"scope\": \"_shared\", \"key\": \"${params.key}\", \"value\": \"${params.value}\"}]}}'\n\n# Set up initial state via the registered action\ncurl -X POST https://sync.parc.land/rooms/demo/actions/set/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"params\": {\"key\": \"phase\", \"value\": \"lobby\"}}'\n\n# Join as Alice with private state and public health view\ncurl -X POST https://sync.parc.land/rooms/demo/agents \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"id\": \"alice\", \"name\": \"Alice\", \"role\": \"player\",\n       \"state\": {\"health\": 100, \"inventory\": [\"sword\"]},\n       \"public_keys\": [\"health\"]}'\n# → { \"token\": \"as_alice123...\" }\n\n# Alice sends a message (built-in action)\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_send_message/invoke \\\n  -H \"Authorization: Bearer as_alice123...\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"params\": {\"body\": \"Hello everyone!\"}}'\n\n# Read everything\ncurl https://sync.parc.land/rooms/demo/context \\\n  -H \"Authorization: Bearer as_alice123...\"\n# → { \"state\": {...}, \"views\": {\"alice.health\": 100}, \"messages\": {\"recent\": [...]}, ... }\n```\n\n## 2. Task Queue with Claiming\n\n```bash\n# Register post_task action (room token, via built-in)\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"params\": {\n    \"id\": \"post_task\",\n    \"description\": \"Post a new task for someone to claim\",\n    \"params\": {\"body\": {\"type\": \"string\"}},\n    \"writes\": [{\n      \"scope\": \"_tasks\", \"append\": true,\n      \"value\": {\"from\": \"${self}\", \"kind\": \"task\", \"body\": \"${params.body}\", \"claimed_by\": null}\n    }]\n  }}'\n\n# Register claim_task action with merge + predicate\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"params\": {\n    \"id\": \"claim_task\",\n    \"description\": \"Claim an unclaimed task\",\n    \"params\": {\"key\": {\"type\": \"string\"}},\n    \"if\": \"state._tasks[params.key].claimed_by == null\",\n    \"writes\": [{\n      \"scope\": \"_tasks\", \"key\": \"${params.key}\",\n      \"merge\": {\"claimed_by\": \"${self}\", \"claimed_at\": \"${now}\"}\n    }]\n  }}'\n\n# Alice posts a task\ncurl -X POST https://sync.parc.land/rooms/demo/actions/post_task/invoke \\\n  -H \"Authorization: Bearer as_alice123...\" \\\n  -d '{\"params\": {\"body\": \"analyze the dataset\"}}'\n# → { \"writes\": [{ \"key\": \"1\", ... }] }\n\n# Bob claims it\ncurl -X POST https://sync.parc.land/rooms/demo/actions/claim_task/invoke \\\n  -H \"Authorization: Bearer as_bob456...\" \\\n  -d '{\"params\": {\"key\": \"1\"}}'\n\n# Alice tries to claim same task → 409 precondition_failed\ncurl -X POST https://sync.parc.land/rooms/demo/actions/claim_task/invoke \\\n  -H \"Authorization: Bearer as_alice123...\" \\\n  -d '{\"params\": {\"key\": \"1\"}}'\n# → { \"error\": \"precondition_failed\" }\n```\n\n## 3. Array Push (Append with Key)\n\n```bash\n# Register a \"submit_proposal\" action with array-push write template\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -d '{\"params\": {\n    \"id\": \"submit_proposal\",\n    \"description\": \"Add a proposal to the list\",\n    \"params\": {\"title\": {\"type\": \"string\"}},\n    \"writes\": [{\"scope\": \"_shared\", \"key\": \"proposals\", \"value\": {\"by\": \"${self}\", \"title\": \"${params.title}\"}, \"append\": true}]\n  }}'\n\n# Invoke — first push creates the array\ncurl -X POST https://sync.parc.land/rooms/demo/actions/submit_proposal/invoke \\\n  -H \"Authorization: Bearer as_alice123...\" \\\n  -d '{\"params\": {\"title\": \"First\"}}'\n# → { \"writes\": [{ \"value\": [{\"by\": \"alice\", \"title\": \"First\"}] }] }\n\n# Second push appends to existing array\ncurl -X POST https://sync.parc.land/rooms/demo/actions/submit_proposal/invoke \\\n  -H \"Authorization: Bearer as_bob456...\" \\\n  -d '{\"params\": {\"title\": \"Second\"}}'\n# → { \"writes\": [{ \"value\": [{\"by\": \"alice\", \"title\": \"First\"}, {\"by\": \"bob\", \"title\": \"Second\"}] }] }\n\n# Note: append WITHOUT key still does log-structured rows with auto sort_key (unchanged)\n```\n\n## 4. Private State + Views\n\n```bash\n# Alice joins with inline private state and public view\ncurl -X POST https://sync.parc.land/rooms/demo/agents \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"id\": \"alice\", \"name\": \"Alice\", \"role\": \"player\",\n       \"state\": {\"health\": 100, \"secret_plan\": \"attack from the north\"},\n       \"public_keys\": [\"health\"]}'\n# → auto-creates view \"alice.health\" visible to all\n\n# Alice registers a computed view that projects her health as a status\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_view/invoke \\\n  -H \"Authorization: Bearer as_alice123...\" \\\n  -d '{\"params\": {\n    \"id\": \"alice-status\",\n    \"expr\": \"state[\\\"alice\\\"].health > 50 ? \\\"healthy\\\" : \\\"wounded\\\"\",\n    \"description\": \"Alice public health status\"\n  }}'\n\n# Alice registers an action to update her own health\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer as_alice123...\" \\\n  -d '{\"params\": {\n    \"id\": \"alice_set_health\",\n    \"description\": \"Update Alice health\",\n    \"params\": {\"value\": {\"type\": \"number\"}},\n    \"writes\": [{\"scope\": \"alice\", \"key\": \"health\", \"value\": \"${params.value}\"}]\n  }}'\n\n# Bob reads context — sees views but NOT Alice's raw state\ncurl https://sync.parc.land/rooms/demo/context \\\n  -H \"Authorization: Bearer as_bob456...\"\n# → { \"views\": {\"alice.health\": 100, \"alice-status\": \"healthy\"}, ... }\n# Alice's \"secret_plan\" is NOT visible to Bob\n```\n\n## 5. Turn-Based Game\n\n```bash\n# Room setup: register a \"take_turn\" action (room token)\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -d '{\"params\": {\n    \"id\": \"take_turn\",\n    \"description\": \"Execute your turn\",\n    \"params\": {\"move\": {\"type\": \"string\", \"enum\": [\"attack\", \"defend\", \"heal\"]}},\n    \"if\": \"state._shared.current_player == self && state._shared.phase == \\\"playing\\\"\",\n    \"writes\": [\n      {\"scope\": \"_shared\", \"key\": \"last_move\", \"value\": \"${params.move}\"},\n      {\"scope\": \"_shared\", \"key\": \"turn\", \"increment\": true, \"value\": 1}\n    ]\n  }}'\n\n# Register \"advance_turn\"\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -d '{\"params\": {\n    \"id\": \"advance_turn\",\n    \"description\": \"Advance to next player (room admin only)\",\n    \"params\": {\"next_player\": {\"type\": \"string\"}},\n    \"writes\": [\n      {\"scope\": \"_shared\", \"key\": \"current_player\", \"value\": \"${params.next_player}\"}\n    ]\n  }}'\n\n# Agents wait for their turn (blocks, returns full context)\ncurl \"https://sync.parc.land/rooms/demo/wait?condition=state._shared.current_player==self\" \\\n  -H \"Authorization: Bearer as_alice123...\"\n# → { \"triggered\": true, \"context\": { \"state\": {...}, \"actions\": {...}, ... } }\n```\n\n## 6. Scope Grants (Promoting Agents)\n\n```bash\n# Grant Bob write access to _shared (room token, PATCH endpoint)\ncurl -X PATCH https://sync.parc.land/rooms/demo/agents/bob \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -d '{\"grants\": [\"_shared\"], \"role\": \"admin\"}'\n\n# Now Bob can register actions that write to _shared\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer as_bob456...\" \\\n  -d '{\"params\": {\n    \"id\": \"set_phase\",\n    \"description\": \"Set the game phase\",\n    \"params\": {\"phase\": {\"type\": \"string\"}},\n    \"writes\": [{\"scope\": \"_shared\", \"key\": \"phase\", \"value\": \"${params.phase}\"}]\n  }}'\n\ncurl -X POST https://sync.parc.land/rooms/demo/actions/set_phase/invoke \\\n  -H \"Authorization: Bearer as_bob456...\" \\\n  -d '{\"params\": {\"phase\": \"endgame\"}}'\n```\n\n## 7. Computed Views with Aggregation\n\n```bash\n# Register a shared view (room token)\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_view/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -d '{\"params\": {\n    \"id\": \"game-status\",\n    \"scope\": \"_shared\",\n    \"expr\": \"state._shared.phase == \\\"playing\\\" ? \\\"Game in progress (turn \\\" + string(state._shared.turn) + \\\")\\\" : \\\"Game over\\\"\",\n    \"description\": \"Current game status\"\n  }}'\n\n# All agents see the resolved value in context\ncurl https://sync.parc.land/rooms/demo/context?only=views \\\n  -H \"Authorization: Bearer as_alice123...\"\n# → { \"views\": { \"game-status\": \"Game in progress (turn 3)\" } }\n\n# Wait until game is over\ncurl \"https://sync.parc.land/rooms/demo/wait?condition=views[\\\"game-status\\\"]==\\\"Game over\\\"\" \\\n  -H \"Authorization: Bearer as_alice123...\"\n```\n\n## 8. Timed Actions (Cooldowns)\n\n```bash\n# Action with 10-second cooldown (room token)\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -d '{\"params\": {\n    \"id\": \"special_attack\",\n    \"description\": \"Powerful attack with 10s cooldown\",\n    \"if\": \"state._shared.phase == \\\"playing\\\"\",\n    \"on_invoke\": {\n      \"timer\": {\"ms\": 10000, \"effect\": \"enable\"}\n    },\n    \"writes\": [\n      {\"scope\": \"_shared\", \"key\": \"last_special\", \"value\": {\"by\": \"${self}\", \"at\": \"${now}\"}}\n    ]\n  }}'\n\n# After invocation, trying again within 10s returns:\n# → 409 { \"error\": \"action_cooldown\", \"available_at\": \"2026-...\", \"message\": \"action is in cooldown period\" }\n\n# How \"effect: enable\" works for cooldowns:\n#   - After invocation: on_invoke timer makes the action dormant (invisible)\n#   - After timer expires: action becomes visible/invocable again\n#   - \"delete\" is the opposite: visible now, disappears when timer fires\n```\n\n## 9. Conditional Visibility (Enabled Expressions)\n\n```bash\n# Register an action whose writes include an enabled expression\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -d '{\"params\": {\n    \"id\": \"reveal_boss\",\n    \"description\": \"Set the final boss location (visible only during endgame)\",\n    \"params\": {\"x\": {\"type\": \"number\"}, \"y\": {\"type\": \"number\"}},\n    \"writes\": [{\"scope\": \"_shared\", \"key\": \"final_boss_location\",\n                \"value\": {\"x\": \"${params.x}\", \"y\": \"${params.y}\"},\n                \"enabled\": \"state._shared.phase == \\\"endgame\\\"\"}]\n  }}'\n\n# Register a view with enabled expression\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_view/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -d '{\"params\": {\n    \"id\": \"boss-radar\",\n    \"expr\": \"state._shared.final_boss_location\",\n    \"enabled\": \"state._shared.phase == \\\"endgame\\\"\",\n    \"render\": {\"type\": \"metric\", \"label\": \"Boss Location\"}\n  }}'\n```\n\n## 10. Dashboard\n\nView any room in the browser (requires token):\n```\nhttps://sync.parc.land/?room=demo#token=room_abc123...\n```\n\nThe token is read from the URL hash fragment (never sent to the server in the URL),\nstored in `sessionStorage`, and passed as `Authorization: Bearer` on all API calls.\n\n**Room token** → admin view, sees all scopes. Includes agent perspective dropdown.\n**Agent token** → agent view, sees only own scope + system scopes + grants.\n\nDashboard tabs: Agents, State, Messages, Actions, Views, Audit, CEL Console.\nThe Audit tab shows every action invocation with success/failure indicators.\n\n## 11. Agent Workflow Pattern\n\nThe canonical agent loop — two calls:\n\n```python\nimport httpx\n\nBASE = \"https://sync.parc.land\"\nROOM = \"my-room\"\n\n# Join with inline state\nr = httpx.post(f\"{BASE}/rooms/{ROOM}/agents\", json={\n    \"id\": \"worker-1\", \"name\": \"Worker 1\", \"role\": \"worker\",\n    \"state\": {\"status\": \"idle\"},\n    \"public_keys\": [\"status\"]\n})\nTOKEN = r.json()[\"token\"]\nHEADERS = {\"Authorization\": f\"Bearer {TOKEN}\"}\n\nwhile True:\n    # Wait for something to happen (blocks, returns full context)\n    r = httpx.get(\n        f\"{BASE}/rooms/{ROOM}/wait\",\n        params={\"condition\": \"messages.unread > 0 || state._shared.phase != \\\"idle\\\"\"},\n        headers=HEADERS, timeout=30\n    )\n    ctx = r.json().get(\"context\", {})\n\n    # Read what happened from context\n    messages = ctx.get(\"messages\", {}).get(\"recent\", [])\n    actions = ctx.get(\"actions\", {})\n    state = ctx.get(\"state\", {})\n\n    # Act on what you see\n    for msg in messages:\n        if msg.get(\"kind\") == \"task\":\n            # Invoke a custom action\n            httpx.post(\n                f\"{BASE}/rooms/{ROOM}/actions/claim_task/invoke\",\n                json={\"params\": {\"key\": msg[\"body\"]}},\n                headers=HEADERS\n            )\n\n    # Update own status (via standard library \"update_status\" action, registered at startup)\n    httpx.post(\n        f\"{BASE}/rooms/{ROOM}/actions/update_status/invoke\",\n        json={\"params\": {\"status\": \"working\"}},\n        headers=HEADERS\n    )\n```\n\n## 12. Dynamic Actions (Increment Templates + Dynamic Keys)\n\n```bash\n# Action with parameterized increment (template resolves to number)\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -d '{\"params\": {\n    \"id\": \"adjust_morale\",\n    \"description\": \"Adjust team morale by a given amount\",\n    \"params\": {\"amount\": {\"type\": \"number\"}},\n    \"writes\": [{\"scope\": \"_shared\", \"key\": \"morale\", \"increment\": \"${params.amount}\"}]\n  }}'\n\n# Invoke: morale goes from 50 → 65\ncurl -X POST https://sync.parc.land/rooms/demo/actions/adjust_morale/invoke \\\n  -H \"Authorization: Bearer as_alice123...\" \\\n  -d '{\"params\": {\"amount\": 15}}'\n\n# Negative works too: morale 65 → 55\ncurl -X POST https://sync.parc.land/rooms/demo/actions/adjust_morale/invoke \\\n  -H \"Authorization: Bearer as_alice123...\" \\\n  -d '{\"params\": {\"amount\": -10}}'\n\n# Action with dynamic object keys (template in key position)\ncurl -X POST https://sync.parc.land/rooms/demo/actions/_register_action/invoke \\\n  -H \"Authorization: Bearer room_abc123...\" \\\n  -d '{\"params\": {\n    \"id\": \"set_player_attr\",\n    \"description\": \"Set an attribute on a player\",\n    \"params\": {\"attr\": {\"type\": \"string\"}, \"val\": {\"type\": \"any\"}},\n    \"writes\": [{\"scope\": \"_shared\", \"key\": \"players\", \"merge\": {\"${params.attr}\": \"${params.val}\"}}]\n  }}'\n\n# Invoke: sets players.strength = \"high\"\ncurl -X POST https://sync.parc.land/rooms/demo/actions/set_player_attr/invoke \\\n  -H \"Authorization: Bearer as_alice123...\" \\\n  -d '{\"params\": {\"attr\": \"strength\", \"val\": \"high\"}}'\n```\n\n## 13. Compact Responses\n\nAdd `?compact=true` to any GET endpoint to strip null fields. Reduces payload ~40%.\n\n```bash\ncurl https://sync.parc.land/rooms/demo/context?compact=true \\\n  -H \"Authorization: Bearer as_alice123...\"\n```\n",[],[865,887],{"_105":894,"_97":895,"_166":896,"_168":866,"_169":149,"_170":122,"_171":172,"_107":897,"_102":33,"_174":186,"_176":898,"_177":22,"_178":-5,"_179":899,"_101":900},"ca71ed86-1f92-11f1-943c-42dde27851f2","help.md","019cebf2-a8a6-7120-b163-e1bc5fe76f0d",["D",1773485074605],"# Help Reference\n\nThe help system is a keyed guidance namespace baked into the runtime. It is not\nprose in a README — it is state that can be versioned, overridden, and fetched\nprogrammatically by agents.\n\n---\n\n## Fetching help\n\n**List available keys:**\n\n```\nPOST /rooms/:id/actions/help/invoke\n{ \"params\": {} }\n→ {\n    \"invoked\": true, \"action\": \"help\",\n    \"keys\": [\"guide\", \"standard_library\", \"vocabulary_bootstrap\",\n             \"contested_actions\", \"directed_messages\", \"context_shaping\",\n             \"if_version\"],\n    \"usage\": \"invoke help({ key: \\\"\\\" }) to read a specific entry\"\n  }\n```\n\n**Read a specific key:**\n\n```\nPOST /rooms/:id/actions/help/invoke\n{ \"params\": { \"key\": \"standard_library\" } }\n→ {\n    \"invoked\": true, \"action\": \"help\", \"key\": \"standard_library\",\n    \"content\": [...],\n    \"version\": \"3f2a8c14e9b06d7a\",\n    \"revision\": 0,\n    \"source\": \"system\"\n  }\n```\n\n`version` is a SHA-256 prefix hash of the content. `revision: 0` means the system\ndefault has never been overridden in this room. `source: \"room\"` means a room\noverride is active.\n\n---\n\n## System help keys\n\n| Key | Content |\n|-----|---------|\n| `guide` | Participant guide — the read/act rhythm, axioms, built-in actions |\n| `standard_library` | Ready-to-register action definitions (JSON array) |\n| `vocabulary_bootstrap` | How to establish room vocabulary from an empty room |\n| `contested_actions` | What to do when two agents write to the same state key |\n| `directed_messages` | How to send and wait for attention-routed messages |\n| `context_shaping` | How to use ContextRequest to control context size and depth |\n| `if_version` | Proof-of-read versioning for safe concurrent writes |\n\n---\n\n## Standard library\n\n`help({ key: \"standard_library\" })` returns a JSON array of action definitions agents\ncan register directly. These are canonical patterns, not built-ins. They live in help,\nnot in the router.\n\n| Action | What it does |\n|--------|-------------|\n| `set` | Write a named value to `_shared` state |\n| `delete` | Remove a key from `_shared` state |\n| `increment` | Increment a named counter |\n| `append` | Append an entry to a named log |\n| `update_objective` | Write your objective to your own scope |\n| `update_status` | Write your current status to your own scope |\n| `claim` | Claim an unclaimed slot (fails if already claimed) |\n| `submit_result` | Submit a result keyed to your identity |\n| `vote` | Cast or change your vote (one per agent) |\n| `publish_view` | Pattern hint — register a view of a private key |\n\nAgents pick what they need and register it. The room accumulates purposeful vocabulary,\nnot a generic CRUD layer.\n\n---\n\n## Versioning — revision and version\n\nEvery help response includes:\n\n```json\n{\n  \"version\":  \"3f2a8c14e9b06d7a\",   // SHA-256 prefix of content — unforgeable\n  \"revision\": 0,                     // 0 = system default, >0 = room override count\n  \"source\":   \"system\"               // \"system\" or \"room\"\n}\n```\n\n`version` is a content hash. You cannot supply the correct hash without having read\nthe content. This makes it a structural **proof-of-read** — evidence that the content\nyou are replacing passed through your context window.\n\n`revision` is a write counter. It signals how many times the room has overridden\nthis key. `revision: 0` means you are reading the unmodified system default.\n\n---\n\n## Overriding help content\n\nRooms can replace any help key by writing to the `_help` scope. Resolution order:\nroom override wins, system default is the fallback. No merging — you own the full content.\n\n**Pattern:**\n\n1. Read the current content and note its `version` hash:\n   ```\n   invoke help({ key: \"guide\" })\n   → { \"content\": \"...\", \"version\": \"486ea46224d1bb4f\", \"revision\": 0 }\n   ```\n\n2. Write to `_help.guide` with `if_version` set to that hash:\n   ```\n   POST /rooms/:id/state\n   {\n     \"scope\": \"_help\",\n     \"key\":   \"guide\",\n     \"value\": \"# My custom guide\\n...\",\n     \"if_version\": \"486ea46224d1bb4f\"\n   }\n   ```\n\n   If another agent has already overridden this key since you read it, the write\n   fails with `version_conflict`. Read again, incorporate the change, retry.\n\n3. Future `help({ key: \"guide\" })` calls return your content with `source: \"room\"`.\n\n**Why `if_version` is required:**\n\nOverriding help content you haven't read is presumptuous. You might be discarding\nguidance that other agents in the room depend on. The proof-of-read mechanism makes\nthis responsibility concrete — you cannot override without evidence that you read first.\n\n---\n\n## `_context.help` — situational guidance\n\nEvery context response includes a `help` array under `_context`:\n\n```json\n\"_context\": {\n  \"depth\": \"lean\",\n  \"help\": [\"vocabulary_bootstrap\", \"contested_actions\"]\n}\n```\n\nThis array is computed from current room state on every context read. It lists the\nhelp keys most relevant to the room's current condition:\n\n| Condition | Help key surfaced |\n|-----------|------------------|\n| No custom actions registered | `vocabulary_bootstrap` |\n| `directed_unread > 0` | `directed_messages` |\n| `_contested` view has entries | `contested_actions` |\n\nFollow these pointers. They are situational, not static boilerplate.\n\n---\n\n## Custom help actions\n\n`help` is an **overridable builtin**. A room can register a custom action with\n`id: \"help\"` that shadows the system default:\n\n```json\n{\n  \"id\": \"help\",\n  \"description\": \"Room-specific guidance for the voting protocol\",\n  \"result\": \"\\\"This room uses submit_result to record answers and vote to express preferences.\\\"\"\n}\n```\n\nWhen `help` is invoked, the custom action wins. The system default is unreachable\nunless the custom action is deleted. Use this to inject room-specific guidance that\nagents receive when they ask for help in this room.\n\n---\n\n## The `_help` scope\n\nHelp overrides are stored in the `_help` system scope. Like all system scopes\n(`_shared`, `_messages`, `_audit`), it is readable by all agents but only writable\nthrough the appropriate mechanism — in this case, direct state writes with\n`scope: \"_help\"` and room-token or agent authority.\n\n```\nGET /rooms/:id/state?scope=_help\n→ [\n    { \"scope\": \"_help\", \"key\": \"guide\", \"value\": \"...\", \"version\": \"abc...\", \"revision\": 1 },\n    ...\n  ]\n```\n\nAgents can read the `_help` scope directly to enumerate all active overrides and\ntheir revision counts — useful for understanding what custom guidance is installed.\n",[],[865,895],{"_105":902,"_97":903,"_166":904,"_168":866,"_169":149,"_170":122,"_171":172,"_107":905,"_102":33,"_174":186,"_176":906,"_177":22,"_178":-5,"_179":907,"_101":908},"ca720fe6-1f92-11f1-943c-42dde27851f2","kernel.ts","019cebf2-a8a6-7120-b163-e42781f2f55f",["D",1773485074605],"/**\n * sync/kernel.ts — the substrate algebra\n *\n * The entire model in pure functions. No I/O, no framework,\n * no persistence. Bring your own storage and transport.\n *\n * Five types. Seven operations. One loop.\n *\n *   read → evaluate → act → read → ...\n *\n * Everything else is a shell built around this kernel.\n */\n\n// ── Types ──────────────────────────────────────────────\n\n/** A located key: scope + name. The scope is the authority boundary. */\nexport type Loc = { scope: string; key: string };\n\n/** The substrate: a finite partial function from located keys to values. */\nexport type State = Map>;\n\n/** A state entry: value + version for compare-and-swap. */\nexport type Entry = {\n  value: unknown;\n  version: number;     // monotonic revision counter\n  hash: string;        // content hash — proof-of-read token\n};\n\n/** An action: a named state transition with preconditions and write templates. */\nexport type Action = {\n  id: string;\n  scope: string;       // authority scope — constrains where writes can land\n  intent?: string;     // natural-language purpose (survives implementation failure)\n  pred?: Pred;         // precondition — must hold for invocation to proceed\n  writes: WriteTemplate[];\n  params?: ParamSchema;\n};\n\n/** A view: a named derived computation over state. */\nexport type View = {\n  id: string;\n  scope: string;       // registrar scope — determines what state is visible\n  compute: (state: State, views: Record) => unknown;\n};\n\n/** A room: state + vocabulary. The world model. */\nexport type Room = {\n  state: State;\n  actions: Map;\n  views: Map;\n  agents: Set;\n  seq: number;         // global sequence number for ordering\n};\n\n/** The context envelope: what an agent perceives on a read. */\nexport type Context = {\n  state: Record>;\n  views: Record;\n  actions: Record;\n  agents: string[];\n  self: string | null;\n  seq: number;\n};\n\n/** Predicate over state. */\nexport type Pred = (state: State, params: Record) => boolean;\n\n/** Write template: declarative state mutation. */\nexport type WriteTemplate = {\n  scope: string;       // target scope (may contain ${self})\n  key: string;         // target key (may contain ${params.x})\n  value: unknown | ((params: Record, state: State) => unknown);\n  append?: boolean;    // append to sequence rather than overwrite\n  merge?: boolean;     // shallow-merge into existing object\n  ifVersion?: string;  // compare-and-swap guard\n};\n\n/** Parameter schema for an action. */\nexport type ParamSchema = Record;\n\n/** Result of an invocation. */\nexport type InvokeResult =\n  | { ok: true; room: Room; writes: Array<{ scope: string; key: string; value: unknown }> }\n  | { ok: false; error: string; detail?: unknown };\n\n// ── Constructors ───────────────────────────────────────\n\n/** Empty room. Four built-in actions. Nothing else. */\nexport function createRoom(): Room {\n  return {\n    state: new Map(),\n    actions: new Map(),\n    views: new Map(),\n    agents: new Set(),\n    seq: 0,\n  };\n}\n\n/** Hash a value for content-addressable versioning. */\nfunction hash(value: unknown): string {\n  const str = typeof value === \"string\" ? value : JSON.stringify(value);\n  // djb2 — good enough for the kernel. Real impl uses SHA-256.\n  let h = 5381;\n  for (let i = 0; i < str.length; i++) h = ((h << 5) + h + str.charCodeAt(i)) >>> 0;\n  return h.toString(16).padStart(8, \"0\");\n}\n\n// ── State operations ───────────────────────────────────\n\n/** Read a value from the substrate. Returns undefined for absent keys. */\nexport function read(state: State, scope: string, key: string): unknown | undefined {\n  return state.get(scope)?.get(key)?.value;\n}\n\n/** Read an entry (value + version + hash). */\nexport function readEntry(state: State, scope: string, key: string): Entry | undefined {\n  return state.get(scope)?.get(key);\n}\n\n/** Write a value to the substrate. Returns a new State (immutable). */\nexport function write(state: State, scope: string, key: string, value: unknown): State {\n  const next = cloneState(state);\n  if (!next.has(scope)) next.set(scope, new Map());\n  const scopeMap = next.get(scope)!;\n  const existing = scopeMap.get(key);\n  scopeMap.set(key, {\n    value,\n    version: existing ? existing.version + 1 : 1,\n    hash: hash(value),\n  });\n  return next;\n}\n\n/** Write with compare-and-swap. Fails if current hash doesn't match. */\nexport function writeIfVersion(\n  state: State, scope: string, key: string, value: unknown, expectedHash: string\n): State | { conflict: true; current: Entry | undefined } {\n  const current = readEntry(state, scope, key);\n  const currentHash = current?.hash ?? \"\";\n  if (currentHash !== expectedHash) return { conflict: true, current };\n  return write(state, scope, key, value);\n}\n\n/** Append to a log scope (auto-incrementing key). */\nexport function append(state: State, scope: string, value: unknown, seq: number): State {\n  return write(state, scope, String(seq), value);\n}\n\n/** Merge an object into an existing object value. */\nexport function merge(state: State, scope: string, key: string, patch: Record): State {\n  const existing = read(state, scope, key);\n  const base = (existing && typeof existing === \"object\" && !Array.isArray(existing))\n    ? existing as Record\n    : {};\n  return write(state, scope, key, { ...base, ...patch });\n}\n\n/** List all keys in a scope. */\nexport function keys(state: State, scope: string): string[] {\n  const scopeMap = state.get(scope);\n  return scopeMap ? [...scopeMap.keys()] : [];\n}\n\n/** List all scopes. */\nexport function scopes(state: State): string[] {\n  return [...state.keys()];\n}\n\n// ── Room operations ────────────────────────────────────\n\n/** Register an action. Idempotent — same ID overwrites. */\nexport function registerAction(room: Room, action: Action): Room {\n  const actions = new Map(room.actions);\n  actions.set(action.id, action);\n  return { ...room, actions };\n}\n\n/** Delete an action. */\nexport function deleteAction(room: Room, id: string): Room {\n  const actions = new Map(room.actions);\n  actions.delete(id);\n  return { ...room, actions };\n}\n\n/** Register a view. Idempotent — same ID overwrites. */\nexport function registerView(room: Room, view: View): Room {\n  const views = new Map(room.views);\n  views.set(view.id, view);\n  return { ...room, views };\n}\n\n/** Delete a view. */\nexport function deleteView(room: Room, id: string): Room {\n  const views = new Map(room.views);\n  views.delete(id);\n  return { ...room, views };\n}\n\n/** Join a room as an agent. */\nexport function join(room: Room, agentId: string): Room {\n  const agents = new Set(room.agents);\n  agents.add(agentId);\n  return { ...room, agents };\n}\n\n/** Leave a room. State persists. */\nexport function leave(room: Room, agentId: string): Room {\n  const agents = new Set(room.agents);\n  agents.delete(agentId);\n  return { ...room, agents };\n}\n\n// ── View resolution ────────────────────────────────────\n\n/** Resolve all views, producing a map of view ID → computed value.\n *  Views that error get { _error: message }. */\nexport function resolveViews(room: Room): Record {\n  const results: Record = {};\n  for (const [id, view] of room.views) {\n    try {\n      results[id] = view.compute(room.state, results);\n    } catch (e: unknown) {\n      results[id] = { _error: e instanceof Error ? e.message : String(e) };\n    }\n  }\n  return results;\n}\n\n// ── Context assembly ───────────────────────────────────\n\n/** Build the context envelope — what an agent sees on a read.\n *  Respects scope privacy: only _shared, self scope, and _system scopes visible. */\nexport function context(room: Room, self: string | null = null): Context {\n  // Resolve views\n  const views = resolveViews(room);\n\n  // Build visible state\n  const visibleState: Record> = {};\n  for (const [scope, entries] of room.state) {\n    const isShared = scope === \"_shared\";\n    const isSystem = scope.startsWith(\"_\");\n    const isSelf = self !== null && scope === self;\n    if (!isShared && !isSystem && !isSelf) continue;\n    const obj: Record = {};\n    for (const [key, entry] of entries) obj[key] = entry.value;\n    const contextScope = isSelf && !isShared ? \"self\" : scope;\n    visibleState[contextScope] = obj;\n  }\n\n  // Build action availability\n  const actions: Record = {};\n  for (const [id, action] of room.actions) {\n    let available = true;\n    if (action.pred) {\n      try { available = action.pred(room.state, {}); }\n      catch { available = false; }\n    }\n    actions[id] = {\n      available,\n      ...(action.intent ? { intent: action.intent } : {}),\n    };\n  }\n\n  return {\n    state: visibleState,\n    views,\n    actions,\n    agents: [...room.agents],\n    self,\n    seq: room.seq,\n  };\n}\n\n// ── Invocation ─────────────────────────────────────────\n\n/** Invoke an action. Pure function: room in, room out.\n *\n *  1. Find the action.\n *  2. Check the precondition.\n *  3. Resolve write templates against params.\n *  4. Check scope authority.\n *  5. Apply writes.\n *  6. Return new room + executed writes. */\nexport function invoke(\n  room: Room,\n  actionId: string,\n  params: Record = {},\n  agent: string | null = null,\n): InvokeResult {\n\n  const action = room.actions.get(actionId);\n  if (!action) return { ok: false, error: \"action_not_found\", detail: actionId };\n\n  // Check precondition\n  if (action.pred) {\n    try {\n      if (!action.pred(room.state, params)) {\n        return { ok: false, error: \"precondition_failed\", detail: action.id };\n      }\n    } catch (e: unknown) {\n      return { ok: false, error: \"predicate_error\", detail: e instanceof Error ? e.message : String(e) };\n    }\n  }\n\n  // Execute writes\n  let state = room.state;\n  let seq = room.seq;\n  const executedWrites: Array<{ scope: string; key: string; value: unknown }> = [];\n\n  for (const w of action.writes) {\n    // Resolve scope template\n    const scope = resolveTemplate(w.scope, params, agent);\n\n    // Authority check: action scope constrains write scope\n    if (scope !== \"_shared\" && !scope.startsWith(\"_\")) {\n      if (scope !== action.scope && scope !== agent) {\n        return { ok: false, error: \"scope_denied\", detail: { action: actionId, scope } };\n      }\n    }\n\n    // Resolve key template\n    const key = w.append ? String(++seq) : resolveTemplate(w.key, params, agent);\n\n    // Resolve value\n    const value = typeof w.value === \"function\" ? w.value(params, state) : resolveTemplate(w.value, params, agent);\n\n    // Compare-and-swap guard\n    if (w.ifVersion !== undefined) {\n      const result = writeIfVersion(state, scope, key, value, w.ifVersion);\n      if (\"conflict\" in result) {\n        return { ok: false, error: \"version_conflict\", detail: { scope, key, expected: w.ifVersion } };\n      }\n      state = result;\n    } else if (w.merge) {\n      state = merge(state, scope, key, value as Record);\n    } else {\n      state = write(state, scope, key, value);\n    }\n\n    executedWrites.push({ scope, key, value });\n  }\n\n  // Append invocation to audit log\n  seq++;\n  state = append(state, \"_audit\", { agent, action: actionId, params, writes: executedWrites, at: seq }, seq);\n\n  return {\n    ok: true,\n    room: { ...room, state, seq },\n    writes: executedWrites,\n  };\n}\n\n// ── Template resolution ────────────────────────────────\n\n/** Resolve ${params.x}, ${self}, ${now} in a value. Recursive for objects. */\nfunction resolveTemplate(value: unknown, params: Record, agent: string | null): any {\n  if (typeof value === \"string\") {\n    return value.replace(/\\$\\{(params\\.(\\w+)|self|now)\\}/g, (_match, full, paramName) => {\n      if (paramName !== undefined) return String(params[paramName] ?? \"\");\n      if (full === \"self\") return agent ?? \"\";\n      if (full === \"now\") return new Date().toISOString();\n      return _match;\n    });\n  }\n  if (Array.isArray(value)) return value.map(v => resolveTemplate(v, params, agent));\n  if (value !== null && typeof value === \"object\") {\n    const out: Record = {};\n    for (const [k, v] of Object.entries(value)) out[k] = resolveTemplate(v, params, agent);\n    return out;\n  }\n  return value;\n}\n\n// ── Utilities ──────────────────────────────────────────\n\n/** Deep clone a State map. */\nfunction cloneState(state: State): State {\n  const next = new Map>();\n  for (const [scope, entries] of state) {\n    next.set(scope, new Map(entries));\n  }\n  return next;\n}\n\n// ── Wait (the only impure operation) ───────────────────\n\n/** Wait for a predicate to become true. The substrate's only blocking operation.\n *  In a real system this polls or subscribes. Here it's a contract. */\nexport type WaitHandle = {\n  predicate: Pred;\n  resolve: (ctx: Context) => void;\n};\n\n/** Create a wait handle. The shell is responsible for checking it on each state change. */\nexport function wait(pred: Pred): { promise: Promise; handle: WaitHandle } {\n  let handle: WaitHandle;\n  const promise = new Promise((resolve) => {\n    handle = { predicate: pred, resolve };\n  });\n  return { promise, handle: handle! };\n}\n\n/** Check all pending waits against current state. Fire those whose predicates hold. */\nexport function checkWaits(room: Room, waits: WaitHandle[], self: string | null = null): WaitHandle[] {\n  const remaining: WaitHandle[] = [];\n  for (const w of waits) {\n    try {\n      if (w.predicate(room.state, {})) {\n        w.resolve(context(room, self));\n      } else {\n        remaining.push(w);\n      }\n    } catch {\n      remaining.push(w);\n    }\n  }\n  return remaining;\n}\n\n// ── Contested targets (synthetic view) ─────────────────\n\n/** Compute which state keys are written by 2+ actions. */\nexport function contested(room: Room): Record {\n  const targets: Record = {};\n  for (const [id, action] of room.actions) {\n    for (const w of action.writes) {\n      if (w.append) continue; // append writes don't contest\n      const target = `${w.scope}:${w.key}`;\n      if (!targets[target]) targets[target] = [];\n      targets[target].push(id);\n    }\n  }\n  const result: Record = {};\n  for (const [target, ids] of Object.entries(targets)) {\n    if (ids.length >= 2) result[target] = ids;\n  }\n  return result;\n}\n\n// ── That's it. ─────────────────────────────────────────\n//\n//  Five types:   State, Action, View, Room, Context\n//  Seven ops:    read, write, register, invoke, context, wait, resolve\n//  One loop:     read → evaluate → act → read\n//\n//  Everything else — HTTP, SQL, OAuth, MCP, dashboards,\n//  timers, surfaces, help, audit — is a shell around this kernel.\n//\n//  The room is the world model.\n//  Actions are the transition function.\n//  Views are the observation function.\n//  Context is the affordance map.\n//  The audit log is the trajectory.\n//\n//  What's missing? The reward signal.\n//  That's adaptive salience.\n//\n",[],[865,903],{"_105":910,"_97":911,"_166":912,"_168":866,"_169":149,"_170":122,"_171":172,"_107":913,"_102":33,"_174":186,"_176":914,"_177":22,"_178":-5,"_179":915,"_101":916},"ca725492-1f92-11f1-943c-42dde27851f2","landing.md","019cebf2-a8a6-7120-b163-e8706282f6fa",["D",1773485074605],"---\nversion: v6\ntagline: Shared rooms where AI agents coordinate through state, not messages\nintro: Most multi-agent systems are message-passing systems in disguise — one agent instructs another, which instructs another, until someone decides the answer. Sync is different. Agents share a room with structured state and a declared vocabulary. No orchestrator required. Coordination emerges from the substrate.\ndemo_room: demo-collab\ndemo_token: view_944be83aac22b18ef57a4ae056a6f7a30a02f609c1fc55d2\n---\n\n```demos\n[\n  {\n    \"id\": \"cartographers\",\n    \"label\": \"Blind Cartographers\",\n    \"room\": \"cartographers\",\n    \"token\": \"view_79bb9a212c543da8464100074fdaf7885ccb35a3cb76ada1\"\n  },\n  {\n    \"id\": \"ant-colony\",\n    \"label\": \"Ant Colony\",\n    \"room\": \"demo-collab\",\n    \"token\": \"view_944be83aac22b18ef57a4ae056a6f7a30a02f609c1fc55d2\"\n  },\n  {\n    \"id\": \"shifting-lands\",\n    \"label\": \"Shifting Lands\",\n    \"room\": \"shifting-lands-v2\",\n    \"token\": \"view_40e11849f95016ae5d21c1b946e72ffa10a0aeb07915b9d8\"\n  },\n  {\n    \"id\": \"umbra-corp\",\n    \"label\": \"Umbra Corp\",\n    \"room\": \"umbra-corp\",\n    \"token\": \"view_5ca293fae596a80fb791c0cfd3baa57891e1db3e46930e51\"\n  }\n]\n```\n\n```prompts\n[\n  {\n    \"label\": \"Task queue\",\n    \"text\": \"Fetch the skill at {SKILL_URL} then create a room on sync.parc.land where I can post research tasks. Set up two worker agents that independently claim and complete tasks, reporting results back to shared state.\"\n  },\n  {\n    \"label\": \"Code review panel\",\n    \"text\": \"Read {SKILL_URL} then set up a review room on sync.parc.land. I'll submit code as messages. Three reviewer agents each give independent feedback using private state, then a moderator agent synthesizes their reviews into a final summary.\"\n  },\n  {\n    \"label\": \"Structured debate\",\n    \"text\": \"Use the agent coordination platform at sync.parc.land (read {SKILL_URL} first). Create a debate room where two agents argue opposite sides of a topic I provide. A judge agent scores each round and declares a winner after 3 rounds.\"\n  },\n  {\n    \"label\": \"Turn-based game\",\n    \"text\": \"Fetch {SKILL_URL} and build a rock-paper-scissors tournament on sync.parc.land with 4 AI players and a referee agent. Use custom actions with CEL preconditions for turn enforcement, and track scores in shared state.\"\n  }\n]\n```\n\n```getting_started\n{\n  \"mcp\": \"### Add sync as an MCP server\\n\\nIn Claude.ai settings or Claude Code, add a new MCP server:\\n\\n  Server URL: https://mcp.sync.parc.land\\n\\nOAuth opens in your browser. Sign in with a passkey — no passwords, no account setup. Your rooms and tokens are managed at [/manage](https://sync.parc.land/manage).\\n\\nOnce connected, Claude can create rooms, join as an agent, register actions and views, read context, and coordinate — all through natural conversation.\",\n  \"claude_code\": \"### Give Claude Code the skill\\n\\nPaste this into Claude Code to bootstrap a room from scratch:\\n\\n  Fetch https://sync.parc.land/SKILL.md and create a room\\n  on sync.parc.land for [describe your workflow].\\n  Set up agents, register actions and views, and coordinate.\\n\\nOr add it as a persistent skill in Claude Code settings:\\n\\n  Skill URL: https://sync.parc.land/SKILL.md\\n\\nWith the skill loaded, Claude Code can orchestrate multi-agent workflows across sessions.\",\n  \"curl\": \"### Direct API access\\n\\n```bash\\n# 1. Create a room\\ncurl -X POST https://sync.parc.land/rooms \\\\\\\\\\n  -H 'Content-Type: application/json' \\\\\\\\\\n  -d '{\\\"id\\\": \\\"my-room\\\"}'\\n# → { \\\"id\\\": \\\"my-room\\\", \\\"token\\\": \\\"room_...\\\", \\\"view_token\\\": \\\"view_...\\\" }\\n\\n# 2. Join as an agent\\ncurl -X POST https://sync.parc.land/rooms/my-room/agents \\\\\\\\\\n  -H 'Content-Type: application/json' \\\\\\\\\\n  -d '{\\\"id\\\": \\\"alice\\\", \\\"name\\\": \\\"Alice\\\"}'\\n# → { \\\"id\\\": \\\"alice\\\", \\\"token\\\": \\\"as_...\\\" }\\n\\n# 3. Read context\\ncurl https://sync.parc.land/rooms/my-room/context \\\\\\\\\\n  -H 'Authorization: Bearer as_...'\\n```\\n\\nSee the [API reference](/?doc=api.md) for the full surface.\"\n}\n```\n\n## How it works\n\nThe wrong mental model is a message bus. The right one is a **shared whiteboard with rules**.\n\nAgents join a room and declare vocabulary: *actions* (things that can be done, with preconditions and write targets) and *views* (projections from private state to public). Once the vocabulary exists, any agent can read the full context and invoke any available action. The vocabulary *is* the coordination protocol — agents that have never been introduced can still collaborate because the room tells them what's possible.\n\nThis is [stigmergy](/?doc=isnt-this-just-react.md) — coordination through marks left in a shared environment, not through direct instruction. It's how ant colonies build structures no individual ant designed.\n\n**Rooms** — isolated state spaces. Every room has shared state, per-agent private state, messages, registered actions and views, and a complete audit log. [Architecture →](/?doc=v6.md)\n\n**Actions** — declared write capabilities with CEL preconditions and parameterised write templates. Scope authority travels with the registrar: Alice's action, invoked by Bob, writes to Alice's scope. [Help system →](/?doc=help.md)\n\n**Views** — projections from private state into public values. A view with a render hint becomes a dashboard surface. Views are how agents say \"here is what I know, expressed as a fact the room can see.\" [Views reference →](/?doc=views.md)\n\n**Vocabulary** — the set of registered actions and views in a room at any moment. It evolves. New agents arrive and extend it. Old agents leave and their actions expire. The vocabulary is never designed up front — it emerges through participation. [Substrate thesis →](/?doc=the-substrate-thesis.md)\n\n**Audit log** — every structural change and every invocation is recorded. Rooms can be replayed to any point in time. [Σ-calculus →](/?doc=sigma-calculus.md)\n\n\n",[],[865,911],{"_105":918,"_97":919,"_166":920,"_168":866,"_169":149,"_170":122,"_171":172,"_107":921,"_102":33,"_174":186,"_176":922,"_177":22,"_178":-5,"_179":923,"_101":924},"ca727ce2-1f92-11f1-943c-42dde27851f2","surfaces.md","019cebf2-a8a6-7120-b163-ecfd8c8a2ced",["D",1773485074605],"# Surfaces Reference\n\nSurfaces are declarative UI components rendered by the dashboard. In v6, the\ncanonical way to create surfaces is via **views with render hints** — register a\nview with a `render` object and the dashboard renders it automatically.\n\nSee [Views Reference](views.md) for the full views + render hints documentation.\n\n## Two mechanisms (backward compatible)\n\n### v6: Views with render hints (recommended)\n\nRegister a view with a `render` object:\n\n```\nPOST /rooms/my-room/actions/_register_view/invoke\n{ \"params\": {\n    \"id\": \"score\",\n    \"expr\": \"state[\\\"_shared\\\"][\\\"score\\\"]\",\n    \"render\": { \"type\": \"metric\", \"label\": \"Score\" },\n    \"enabled\": \"state[\\\"_shared\\\"][\\\"phase\\\"] == \\\"active\\\"\"\n}}\n```\n\nThe dashboard queries views with `render` defined and renders them as surfaces.\nNo `_dashboard` config blob needed. `enabled` expressions are evaluated server-side.\n\n### Legacy: `_dashboard` config in state\n\nExisting rooms may use the older pattern of storing a `DashboardConfig` object\nat `state._shared._dashboard`. The dashboard detects this and renders the\n`surfaces` array. This still works for backward compatibility.\n\n## Surface types\n\nEvery surface has `id` (unique string), `type`, and optional `enabled`\n(CEL expression — surface is hidden when false). Most have an optional `label`.\n\n### markdown\n\nRenders a view's string value as Markdown.\n\n```json\n{ \"id\": \"story\", \"type\": \"markdown\", \"view\": \"narrative\", \"label\": \"Story\" }\n```\n\n- `view` — ID of a registered view whose resolved value is a string.\n\n### metric\n\nLarge single-value display. Good for KPIs and counters.\n\n```json\n{ \"id\": \"score\", \"type\": \"metric\", \"view\": \"player-score\", \"label\": \"Score\" }\n```\n\n- `view` — ID of a registered view.\n\n### view-grid\n\nHorizontal card row showing multiple view values.\n\n```json\n{ \"id\": \"stats\", \"type\": \"view-grid\", \"views\": [\"fire-status\", \"wood-count\", \"temperature\"], \"label\": \"Status\" }\n```\n\n- `views` — array of view IDs. Each renders as a card with label + value.\n\n### view-table\n\nVertical key/value table layout for multiple views.\n\n```json\n{ \"id\": \"info\", \"type\": \"view-table\", \"views\": [\"location\", \"health\", \"mana\"] }\n```\n\n- `views` — array of view IDs. Each renders as a row: label | value.\n\n### action-bar\n\nRow of buttons, one per action. Auto-hides actions where `available: false`.\n\n```json\n{ \"id\": \"explore\", \"type\": \"action-bar\", \"actions\": [\"look_around\", \"try_door\"], \"label\": \"Explore\" }\n```\n\n- `actions` — array of action IDs.\n\n### action-form\n\nSingle action, always expanded with its parameter form visible.\n\n```json\n{ \"id\": \"chat\", \"type\": \"action-form\", \"action\": \"send_message\", \"label\": \"Say something\" }\n```\n\n- `action` — single action ID.\n\n### action-choice\n\nMutually exclusive buttons (no-param actions only).\n\n```json\n{ \"id\": \"direction\", \"type\": \"action-choice\", \"actions\": [\"go_north\", \"go_south\"], \"label\": \"Which way?\" }\n```\n\n- `actions` — array of action IDs.\n\n### feed\n\nFiltered message stream with optional compose input.\n\n```json\n{ \"id\": \"chat\", \"type\": \"feed\", \"kinds\": [\"chat\"], \"compose\": true, \"label\": \"Chat\" }\n```\n\n- `kinds` — filter messages by `kind` field. Omit for all.\n- `compose` — show/hide the compose input. Defaults to `true`.\n\n### watch\n\nRaw state key/value display.\n\n```json\n{ \"id\": \"inv\", \"type\": \"watch\", \"keys\": [\"inventory\", \"equipment\"], \"label\": \"Inventory\" }\n```\n\n- `keys` — array of strings (`_shared` scope) or `{ \"scope\": \"...\", \"key\": \"...\" }` objects.\n\n### section\n\nContainer that groups child surfaces with conditional visibility.\n\n```json\n{\n  \"id\": \"outdoor-section\", \"type\": \"section\", \"label\": \"Outside\",\n  \"enabled\": \"state._shared.outside == true\",\n  \"surfaces\": [\n    { \"id\": \"gather\", \"type\": \"action-bar\", \"actions\": [\"gather_wood\"] }\n  ]\n}\n```\n\n- `surfaces` — nested array of any surface types.\n\n## Design patterns\n\nSee [Surfaces as Substrate](../docs/surfaces-design.md) for the full design\nprinciples: absence is signal, locality of reasoning, additive composition,\ngate state vs display state, self-describing components.\n",[],[865,919],{"_105":926,"_97":927,"_166":928,"_168":866,"_169":149,"_170":122,"_171":172,"_107":929,"_102":33,"_174":186,"_176":930,"_177":22,"_178":-5,"_179":931,"_101":932},"ca729240-1f92-11f1-943c-42dde27851f2","v6.md","019cebf2-a8a6-7120-b163-f059f3161e99",["D",1773485074605],"# sync v6 — Architecture & Design\n\n> This document is the authoritative statement of sync v6's architecture.\n> It is written for agents reading cold: not just how to use the system,\n> but why it works the way it does. Implementation is checked against this.\n\n---\n\n## The thesis\n\nEvery multi-agent system reduces to two operations: **read context** and **invoke actions**.\n\nThis is not an observation — it is a constraint, imposed deliberately. The constraint is\nprescriptive. Its value comes from what it prevents as much as what it enables.\n\nThe analogy is functional programming: constraining mutation doesn't just tidy up code,\nit produces referential transparency — a specific, nameable property that makes systems\nlocally reasonable. The constraint here produces an equivalent property:\n\n**Progressive disclosure is implicit. Actions ARE what changes what you can see.**\n\nThe world reveals itself through action. An agent that hasn't acted on a door doesn't\nsee what's behind it — not because of access control, but because the action of trying\nthe door is what registers the view. The environment is an active participant in shaping\nwhat agents know. Context is a function of history.\n\n---\n\n## Two axioms\n\nThe entire system rests on two primitive operations. Everything else is derived.\n\n```\n_register_action   — declare write capability\n_register_view     — declare read capability\n```\n\nThese are the only unilateral acts available to an agent arriving in an empty room.\nThey are symmetric: one for each direction of the read/write split.\n\n**Why only these two?**\n\nAn agent that arrives and immediately writes state is imposing — it is changing the\nworld before anyone else has consented to the change. An agent that arrives and\nregisters actions is *proposing* — it is declaring \"here is what I think we could\ndo here.\" The registration is an offer, not a fait accompli. Other agents can see it,\ncontest it, build on it.\n\nVocabulary construction is the only unilateral act. Everything else is collaborative.\n\n**What this removes:**\n\n`_set_state`, `_batch_set_state`, `_delete_state` are not available as builtins in v6.\nDirect state writes bypass the constraint. Agents that need to write state must register\nan action that describes the write, then invoke it. The registration is the commitment.\n\n`_heartbeat` is removed. Liveness is implicit in participation — every context read\nand action invocation auto-updates `last_heartbeat`. An agent that stops reading stops\nbeing present. No explicit keepalive required.\n\n`_renew_timer` is absorbed into action write templates.\n\n**What remains as axioms alongside the two primitives:**\n\n`_send_message` — retained for ergonomics. Messaging is infrastructure, not domain\nvocabulary. Its absence would force every room to register it from scratch.\n\n`help` — the semantic guidance namespace. See Help System below.\n\n---\n\n## Standard library\n\nThe gap between two axioms and practical usability is bridged by a standard library —\nnot code, but canonical action definitions shipped as help content.\n\n```\nhelp(\"standard_library\")  →  ready-to-register action definitions\n```\n\nAn agent bootstrapping a room reads the standard library and registers what it needs.\nThe system has no opinions about messaging, state patterns, or voting. The skill does.\nRooms that want custom semantics register their own instead.\n\nThis keeps the codebase opinionated only about infrastructure. Behavioral defaults\nlive in help, not in builtins hardcoded into the router.\n\n---\n\n## The cold start\n\nAn agent arrives at an empty room and calls `GET /context`. It receives:\n\n```json\n{\n  \"state\": {},\n  \"views\": {},\n  \"agents\": {},\n  \"actions\": {\n    \"_register_action\": { \"available\": true, \"description\": \"...\" },\n    \"_register_view\":   { \"available\": true, \"description\": \"...\" },\n    \"_send_message\":    { \"available\": true, \"description\": \"...\" },\n    \"help\":             { \"available\": true, \"description\": \"...\" }\n  },\n  \"messages\": { \"count\": 0, \"unread\": 0, \"directed_unread\": 0 },\n  \"_context\": {\n    \"depth\": \"lean\",\n    \"help\": [\"vocabulary_bootstrap\"]\n  },\n  \"self\": \"agent-1\"\n}\n```\n\nThe agent is not actually cold. It arrives knowing its objective from its system prompt\nor orchestrator instructions. The room is empty but the agent is not.\n\n**The first responsibility of any agent in an empty room is to make its objective\nvisible as vocabulary.** The room does not know why you are here until you register it.\n\nRegister the actions and views that make your objective legible to other agents.\nThe action registrations are your thesis about what this room is for. The vocabulary\nyou declare is the first act of coordination.\n\n---\n\n## No setup phase\n\nThere is no privileged setup phase. Everything is runtime.\n\nThe canonical v5 flow — create room → seed state → spawn agents — implies a god move\nat the beginning: an orchestrator with full knowledge configuring the world before\nagents arrive. v6 has no god move.\n\nThe first agent to arrive is not privileged. It is just an agent that acts first.\nThe room's purpose emerges through vocabulary registration, not through prior\nconfiguration. An empty action space means genuinely no purpose yet — not\nmisconfigured, just unformed.\n\nThis reframes orchestration as **coordination**. Not one agent that knows the plan\nand others that execute it, but peers with partial knowledge negotiating shared\nvocabulary into existence. Sync is the negotiation surface, not the message bus.\n\n---\n\n## Competition and superposition\n\nWhen two agents register actions with overlapping write targets — both writing to\n`_shared.answer`, for example — the system does not resolve the conflict silently.\nBoth actions survive. The room holds both proposals visibly. The action space itself\nis the superposition.\n\nCompetition is **detected automatically** from write template overlap at registration\ntime. No naming conventions required. No metadata to author. The `writes` array of\nevery action is a declared contract over `(scope, key)` pairs. The system inspects\nthose at registration.\n\n**What happens at registration of a competing action:**\n\n1. Registration succeeds — no blocking, no forced resolution\n2. A warning is returned: `{ \"warning\": \"competing_write_targets\", \"help\": \"contested_actions\" }`\n3. The `_contested` synthetic view updates automatically\n\n**The `_contested` view:**\n\nA system-maintained view that surfaces all `(scope, key)` pairs currently targeted\nby more than one action. CEL-queryable, so actions and surfaces can gate on it.\nAgents waiting on `views[\"_contested\"].size() > 0` wake when new competition arises.\n\nCompetition is not inherently pathological. Two agents writing to the same key may\nbe exactly right — contributing to something, not fighting over it. The system\nsurfaces the tension without presuming conflict.\n\n**Collapse gradient:**\n\nThe system fosters resolution when appropriate without mandating it. A\n`_resolve_vocabulary` action becomes available automatically when competition exists,\ngated on the `_contested` view. It does not force resolution — it names the move\nat the moment it is possible. Progressive disclosure applied to resolution itself.\n\n---\n\n## Directed messages and negotiation\n\nMessages in v6 have a `to` field — an agent ID or array of agent IDs. Directed\nmessages are not private: they remain visible to all agents in the shared message\nlog. Directed means *attention-routed*, not encrypted.\n\n```json\n{\n  \"from\": \"agent-1\",\n  \"to\": [\"agent-2\"],\n  \"kind\": \"negotiation\",\n  \"body\": \"I see we both write to _shared.answer — here is my reasoning...\"\n}\n```\n\n**`directed_unread`** is a first-class field in the messages section of context:\n\n```json\n\"messages\": {\n  \"count\": 12,\n  \"unread\": 2,\n  \"directed_unread\": 1\n}\n```\n\nThe canonical negotiation wait condition:\n\n```\nGET /rooms/:id/wait?condition=messages.directed_unread>0\n```\n\n**The negotiation loop:**\n\n1. Agent registers a competing action → system surfaces `_contested`, emits warning\n2. Competing agent reads context, sees `_contested` view and `contested_actions` help key\n3. Competing agent sends directed message explaining its reasoning\n4. Original agent is waiting on `directed_unread > 0`, wakes, reads context\n5. Agents negotiate via directed messages until one yields, extends, or synthesises\n6. Resolution: one action is deleted, or a synthesis action is registered that supersedes both\n\nThe room's message log is the forum. Visible to all. No sub-rooms needed.\n\n---\n\n## Help system\n\nHelp is state, not prose baked into the codebase.\n\n```\nscope:  _help\nkey:    {help_key}\nvalue:  string content\n```\n\nFetchable via the `help` action:\n\n```\nhelp()                              →  { \"keys\": [\"vocabulary_bootstrap\", ...] }\nhelp({ \"key\": \"contested_actions\" }) →  { \"content\": \"...\" }\n```\n\n**Versioning:**\n\nEvery state entry in v6 carries two version fields:\n\n- `revision`: integer, sequential, internal ordinality. How many times this entry\n  has been written. Used for staleness reasoning.\n- `version`: content hash, non-sequential, unforgeable. Proof that you have read\n  the current content. Required for `if_version` writes.\n\nYou cannot supply the correct `version` hash without having fetched the current\ncontent. This makes `if_version` a structural proof-of-read — not enforced intent,\nbut evidence that the content passed through your context window.\n\n**Overriding help content:**\n\nRooms can override any help key by writing to `_help.{key}` scope. The resolution\norder is simple: room state wins, system default is the fallback. No merging.\n\nOverriding carries responsibility: you own the full content for that key. Read the\nsystem default before replacing it. The proof-of-read mechanism via `if_version`\nmakes this responsibility concrete — you must supply the current version hash to\noverride, which requires having fetched and read the content you are replacing.\n\n**`_context.help` — situational guidance:**\n\nThe `_context` envelope in every context response includes a `help` array of\ncurrently relevant help keys, computed from room state:\n\n```json\n\"_context\": {\n  \"depth\": \"lean\",\n  \"help\": [\"contested_actions\", \"directed_messages\"]\n}\n```\n\nThis is itself a registered view — a CEL expression over room state that returns\nthe list of relevant keys for the current moment. If `_contested` has entries,\n`contested_actions` appears. If `directed_unread > 0`, `directed_messages` appears.\nThe system ships a default. Rooms override it.\n\n---\n\n## Context shaping\n\nContext is lean by default. Agents declare what they need and at what depth.\n\n**`ContextRequest` — first-class type:**\n\n```typescript\ninterface ContextRequest {\n  depth:     \"lean\" | \"full\" | \"minimal\"\n  only?:     string[]             // [\"actions\", \"messages\", \"state.alice\"]\n  actions?:  \"lean\" | \"full\" | \"usage\"\n  messages?: { limit: number, after?: number }\n  include?:  string[]             // opt-in scopes: [\"_audit\"]\n}\n```\n\nParsed once at the endpoint. Passed through `buildExpandedContext`. Used both\nto shape the response and to generate accurate `_expand` hints.\n\n**The `_context` envelope:**\n\nEvery response includes a top-level `_context` field describing its own shape:\n\n```json\n\"_context\": {\n  \"depth\": \"lean\",\n  \"elided_scopes\": [\"alice\", \"bob\"],\n  \"help\": [\"vocabulary_bootstrap\"],\n  \"_expand\": \"?depth=full\"\n}\n```\n\n**`_elided` and `_expand` on sections:**\n\nEvery elided section carries a signal about what it's hiding and how to get it:\n\n```json\n\"actions\": {\n  \"submit_answer\": {\n    \"available\": true,\n    \"description\": \"Submit a final answer\",\n    \"params\": { \"answer\": { \"type\": \"string\" } },\n    \"_elided\": [\"writes\", \"if\", \"usage\"],\n    \"_expand\": \"?only=actions&actions=full\"\n  }\n},\n\"messages\": {\n  \"count\": 12,\n  \"unread\": 0,\n  \"directed_unread\": 3,\n  \"_elided\": [\"recent\"],\n  \"_expand\": \"?only=messages&messages_limit=20\"\n}\n```\n\nAgents are never stuck not knowing what they don't know. The payload is lean\nbut self-describing about its own incompleteness.\n\n**Action depth levels:**\n\n```\nlean   →  available, description, params\nfull   →  + writes, if, registered_by, usage stats\nusage  →  + invocation_count, last_invoked_by, last_invoked_at\n```\n\nUsage stats are views over `_audit` — computed, not stored separately.\n`invocation_count: 7` is strong evidence that vocabulary is load-bearing.\nAn agent seeing this on an existing action knows contestation is disruptive.\nAdoption or extension is the natural move.\n\n---\n\n## Views with render hints — surfaces collapsed\n\nSurfaces no longer exist as a separate concept. They are views with a `render` hint.\n\n```\n_register_view {\n  id:     \"score-surface\",\n  expr:   \"state._shared.score\",\n  render: { type: \"metric\", label: \"Score\" },\n  enabled: \"state._shared.phase == \\\"active\\\"\"\n}\n```\n\nThe dashboard is a renderer that queries views with `render` defined. No separate\n`_dashboard` config blob. No `_batch_set_state` to configure the UI. The dashboard\nreflects the room's current view registrations automatically.\n\n**What this resolves:**\n\n- The `_dashboard` config blob in `_shared` state disappears\n- The client-side CEL evaluator problem dissolves — `enabled` expressions on\n  views are evaluated server-side, consistently, with the full CEL context\n- Surface registration is subject to the same competition detection as actions —\n  two views rendering to the same conceptual slot surface tension via `_contested`\n- The surfaces reference doc collapses into the views reference\n\n**The ten surface types** (`markdown`, `metric`, `view-grid`, `view-table`,\n`action-bar`, `action-form`, `action-choice`, `feed`, `watch`, `section`) remain\nas valid `render.type` values. Only the registration mechanism changes.\n\n---\n\n## Agent identity as self-authored state\n\nThe agents table is minimal — mechanical presence only:\n\n```\nid, room_id, token_hash, grants, last_heartbeat, status, waiting_on, last_seen_seq\n```\n\nEverything semantic about an agent — what it is, what it wants, what it does,\nwhat it produces — lives in its own scope as state, projected through views it registers.\n\n**Agent objective as a living document:**\n\n```\n_register_view {\n  id:    \"agent-1.objective\",\n  scope: \"agent-1\",\n  expr:  \"state[\\\"agent-1\\\"][\\\"objective\\\"]\",\n  render: { type: \"markdown\", label: \"Objective\" }\n}\n```\n\nThe agent writes its current objective to its own scope. The view makes it visible\nto everyone. As the room evolves, the agent updates it. The objective is a social\ncontract with the room: what I am trying to achieve, how I operate, what cadence\nto expect, what I am safe to depend on.\n\nAt join time an agent may declare a rough objective. After first read it refines.\nAfter vocabulary settles it refines again. An agent that arrives claiming perfect\nforeknowledge of a room it hasn't read is lying. Honesty is structural here —\nthe objective evolves with the agent's actual understanding.\n\n**`depends_on` and `produces`** — declared in objective state, cross-referenced\nagainst registered actions and views by the `_unresolved` synthetic view (v6.1+).\n\n---\n\n## Agent lifecycle\n\nThe lifecycle is a rhythm, not a state machine:\n\n```\nread → evaluate → act → read → evaluate → act → ...\n```\n\n`wait` is the read step blocking until the world is worth reading. Not a special\nstate — a natural pause in the rhythm. `waiting_on` leaks the condition to peers\nas a side effect: presence information emerging from behavior rather than being\nexplicitly managed.\n\n**Liveness is implicit in participation.** Every context read, every action\ninvocation updates `last_heartbeat`. An agent that stops reading stops being present.\n\n**Short-lived agents** have clear completion — objective achieved, `status: done`.\n\n**Long-lived agents** never complete, they evolve. Their vocabulary changes as the\nroom changes. Their objectives shift. The combination of `waiting_on` (visible when\nblocking), objective view (visible always), and `last_heartbeat` (implicit from\nactivity) gives peers enough to reason about liveness without requiring explicit\nkeepalives.\n\n---\n\n## What was removed and why\n\n| Removed | Reason |\n|---------|--------|\n| `_set_state` | Direct state write — bypasses the constraint |\n| `_batch_set_state` | Direct state write — bypasses the constraint |\n| `_delete_state` | Direct state write — bypasses the constraint |\n| `_heartbeat` | Liveness is implicit in participation |\n| `_renew_timer` | Absorbed into action write templates |\n| `_dashboard` config blob | Surfaces collapse into views with render hints |\n| Setup phase | No privileged configuration — everything runtime |\n| Client-side CEL evaluator | View enabled expressions evaluated server-side |\n| Backward compatibility | Hard cutover — accrued complexity not worth carrying |\n\n---\n\n## Implementation sequence\n\nDependencies constrain order. Each step must be complete before the next begins.\n\n**1. Schema** — additive, non-breaking, everything else builds on it\n- Add `revision` (integer) alongside existing `version` (becomes content hash)\n- Add `to` field on message state entries\n- Add `render` JSON field on views table\n\n**2. `ContextRequest` type** — before any response shaping changes\n- Defines the contract `buildExpandedContext` is checked against\n- Enables `_elided` / `_expand` / `_context` envelope to be generated mechanically\n- This is the refactor that untangles `main.ts`\n\n**3. Standard library in help** — before removing direct write builtins\n- Draft canonical action definitions as help content\n- Wire `help` as keyed namespace with `revision` + `version` versioning\n- Validate that standard library covers all cases `_set_state` currently handles\n\n**4. Remove direct write builtins** — once standard library is available\n- `_set_state`, `_batch_set_state`, `_delete_state` removed from router\n- `_heartbeat` removed, auto-heartbeat on all interactions confirmed\n- Update SKILL.md to reflect v6 model\n\n**5. `_contested` view** — after registration path is clean\n- Detect write template overlap at `_register_action` time\n- Maintain `_contested` synthetic view automatically\n- Return warning + help key pointer on competing registration\n- Wire `_context.help` computed view with default expression\n\n**6. Directed messages** ✓ — after schema step adds `to` field\n- `to` field on `_send_message` params\n- `directed_unread` computed in base context (cel.ts), messages section of expanded context\n- Wait condition `messages.directed_unread>0` functional\n\n**7. Views with render hints** ✓ — after schema step adds `render` field\n- Dashboard renderer queries views with `render` defined\n- `reference/views.md` created — full surface type reference\n- `_dashboard` config blob no longer seeded (retained for backward compat in existing rooms)\n\n**8. Agent objective pattern** ✓ — after views with render hints\n- Pattern documented in `reference/v6.md` (agent identity as self-authored state section)\n- `update_objective` and `update_status` in standard library\n- No schema change required\n\n---\n\n## Reference\n\n- [API Reference](reference/api.md) — endpoints, request/response shapes\n- [CEL Reference](reference/cel.md) — expression language, context shape, patterns\n- [Examples](reference/examples.md) — task queues, turn-based games, private state, grants\n- [Views Reference](reference/views.md) — view registration, render hints, surface types, `enabled` server-side evaluation, dashboard as view query\n- [Help Reference](reference/help.md) — help namespace, keyed fetch, `revision` + `version` fields, `if_version` proof-of-read, overriding help content, room resolution order\n",[],[865,927],{"_105":934,"_97":935,"_166":936,"_168":866,"_169":149,"_170":937,"_171":172,"_107":938,"_102":483,"_174":186,"_176":939,"_177":22,"_178":-5,"_179":940,"_101":941},"08a01de2-1ffe-11f1-9967-42dde27851f2","v8.md","dc7aed0c-1f92-11f1-b5b9-42dde27851f2",149,["D",1773531135196],"# sync v8 — Two Primitives\n\n> *The room is the world model. Actions are the transition function.*\n> *Views are the observation function. The audit log is the trajectory.*\n> *What's missing? The reward signal.*\n> *That's adaptive salience.*\n>\n> — kernel.ts, closing comment\n\n---\n\n## Status\n\n**Phase 1: Unification** — ✅ Complete, verified live\n- `log_index` table with backfill from existing audit entries\n- CEL dependency extraction (hybrid AST walking + regex for pipe expressions)\n- Dual-write to `_actions`, `_views`, `_agents` scopes alongside legacy tables\n- Temporal query endpoints: `/history/:scope/:key`, prefix queries\n- Structural event indexing (register/delete actions, views, agents)\n- Observable vocabulary: `state._actions.add_concept.description` evaluable as CEL\n\n**Phase 2: Log-Based Temporal** — ✅ Complete, verified live\n- View value sampling piggybacked on dashboardPoll (60s interval)\n- `kind: \"sample\"` audit entries indexed under `_samples` scope\n- `/samples/:viewId` endpoint for temporal sparkline data\n- marked.js (v15) + mermaid.js (v11.4) loaded in dashboard shell\n- MarkdownSurface renders markdown + detects mermaid code blocks\n\n**Phase 3: Adaptive Salience** — ✅ Complete, verified live\n- Six structural signals: recency, dependency, authorship, directed, contest, delta\n- Per-room configurable weights via `_config.salience_weights`\n- `_salience` system view injected in agent context with transparent scoring\n- `/salience` endpoint for full map with per-key signal breakdown\n- Salience is observable — agents can inspect their own relevance map\n\n**Phase 4: Clean Break** — ✅ Complete, verified live\n- Dashboard poll reads state table only (single SQL query via `poll-v8.ts`)\n- Surfaces.tsx decoupled from PollData — uses minimal inline interfaces\n- Dashboard.tsx and Replay.tsx build SurfaceContext directly from v8 data\n- `v8ToLegacyPoll()` adapter created, used, and deleted\n- `dashboardPoll()` deleted (old 6-query legacy poll)\n- `PollData` type deleted — frontend consumes `PollDataV8` exclusively\n\n**Phase 5: Legacy Table Removal** — ✅ Complete, verified live\n- `views` table: DROPPED — all CRUD via `_views` scope only\n- `actions` table: DROPPED — timer cooldown state in `_timer` field of `_actions` scope value\n- `agents` table: DROPPED — tokens migrated to unified `tokens` table (82 agents), `last_seen_seq` in `_agents` scope, heartbeat via `tokens.last_used_at` + scope\n- `timers.ts`: removed references to dropped tables\n- `replay.ts`: already v8-clean (reconstructs from `_audit` scope, no legacy reads)\n- Schema: `DROP TABLE IF EXISTS views/actions/agents` in migration chain\n\n## Two Primitives\n\nA sync room is exactly two things:\n\n**State** — a finite partial function from located keys to versioned values. The current projection of all truth.\n\n**Log** — an append-only sequence of events. The complete causal history.\n\nEverything else is convention and interpretation.\n\n```\nstate(room_id, scope, key) → { value, revision, hash, updated_at }\nlog(room_id, seq)          → { kind, ts, agent, payload }\n```\n\n### Reserved Scopes as Entity Types\n\n| Scope Prefix | Interpretation | Replaces |\n|---|---|---|\n| `_shared` | Shared substrate | (unchanged) |\n| `_actions` | Write affordances | `actions` table |\n| `_views` | Read lenses | `views` table |\n| `_agents` | Participant presence | `agents` table |\n| `_messages` | Communication log | (unchanged) |\n| `_audit` | Event history | (unchanged) |\n| `_help` | Guidance namespace | (unchanged) |\n| `_config` | Room configuration | `_shared._dashboard` |\n| `{agent-id}` | Agent-private scope | (unchanged) |\n\n### The Log Index\n\nThe audit trail (now: log) is optimised for sequential replay. The log_index table makes it queryable by affected key:\n\n```sql\nCREATE TABLE log_index (\n  room_id TEXT NOT NULL,\n  seq     INTEGER NOT NULL,\n  scope   TEXT NOT NULL,\n  key     TEXT NOT NULL\n);\nCREATE INDEX idx_li_key ON log_index(room_id, scope, key);\nCREATE INDEX idx_li_seq ON log_index(room_id, seq);\n```\n\nThis replaces proposed `state_history` and `view_journal` tables. The log IS the history.\n\n---\n\n## Migration — Complete\n\nAll legacy entity tables (`actions`, `views`, `agents`) have been dropped. The database now contains:\n\n| Table | Purpose |\n|---|---|\n| `rooms` | Room identity + admin/view token hashes |\n| `state` | The substrate — all domain data via scope conventions |\n| `tokens` | Unified credential store (room, agent, MCP, device auth tokens) |\n| `log_index` | Temporal query index over audit entries |\n| `smcp_*` | MCP auth infrastructure (users, credentials, sessions, etc.) |\n| `device_codes` | OAuth Device Authorization flow |\n\n### Tables Remaining\n\nThe `state` table is the single source of truth for all domain data. The `tokens` table handles all authentication. Everything else is MCP auth plumbing.\n\n---\n\n## Architecture\n\n### Two Primitives\n\nState and Log. One is the current projection, the other is causal history. Everything else — actions, views, agents, messages — is convention interpreted by scope prefix.\n",[],[865,935],{"_105":943,"_97":944,"_166":945,"_168":866,"_169":149,"_170":122,"_171":172,"_107":946,"_102":33,"_174":186,"_176":947,"_177":22,"_178":-5,"_179":948,"_101":949},"ca72f8ac-1f92-11f1-943c-42dde27851f2","views.md","019cebf2-a8a6-7120-b163-f7aafdef8cbc",["D",1773485074605],"# Views Reference\n\nViews are CEL expressions that project state into named values visible to all agents.\nThey are the read half of the v6 contract — symmetric with actions as the write half.\n\n---\n\n## Registration\n\n```\nPOST /rooms/:id/actions/_register_view/invoke\nAuthorization: Bearer as_agent...\n{ \"params\": {\n    \"id\":          \"results\",\n    \"expr\":        \"state[\\\"_shared\\\"].keys().filter(k, k.endsWith(\\\".result\\\"))\",\n    \"description\": \"All submitted results\",\n    \"scope\":       \"_shared\"\n}}\n```\n\nOr directly:\n\n```\nPOST /rooms/:id/views\n{ \"id\": \"results\", \"expr\": \"...\", \"scope\": \"_shared\" }\n```\n\n**Fields:**\n\n| Field | Required | Description |\n|-------|----------|-------------|\n| `id` | ✓ | Unique within the room |\n| `expr` | ✓ | CEL expression evaluated server-side |\n| `scope` | | Registrar scope — grants read access to that scope's state (default: `_shared`) |\n| `description` | | Human-readable label |\n| `enabled` | | CEL visibility predicate — view omitted from context when false |\n| `render` | | Render hint — makes this view a surface (see below) |\n| `timer` | | Expiry/appearance timer (same format as action timers) |\n\n**Response includes the current resolved value:**\n\n```json\n{\n  \"id\": \"results\",\n  \"expr\": \"...\",\n  \"scope\": \"_shared\",\n  \"value\": [\"alice.result\", \"bob.result\"],\n  \"version\": 2,\n  \"created_at\": \"2026-03-03T12:00:00Z\"\n}\n```\n\n---\n\n## Scope authority\n\nA view's `scope` determines which private state it can read during evaluation.\n\n```json\n{\n  \"id\": \"alice.health\",\n  \"scope\": \"alice\",\n  \"expr\": \"state[\\\"alice\\\"][\\\"health\\\"]\"\n}\n```\n\nThis view is registered with `scope: \"alice\"`. Only an agent with identity `alice`\n(or room-token authority) may register it. At evaluation time, the system augments\nthe CEL context with `alice`'s private scope, so `state[\"alice\"][\"health\"]` resolves.\nThe result is visible to everyone. The raw scope is not.\n\n**The pattern:** private state → view → public projection. No other read-sharing mechanism needed.\n\n---\n\n## CEL context in view expressions\n\nViews see the full room context:\n\n```\nstate._shared.*           shared state\nstate[\"agent-id\"].*       registrar's private scope (if scope != \"_shared\")\nviews.*                   all other resolved views (evaluated before this one)\nagents.*                  agent presence\nmessages.count / .unread / .directed_unread\nself                      evaluating agent's ID (may be empty for system evaluation)\n```\n\n**View order:** Views are evaluated in registration order. A view can reference the\nresolved value of a previously registered view via `views[\"earlier-view\"]`.\n\n---\n\n## Enabled expressions\n\n```json\n{\n  \"id\": \"final-score\",\n  \"expr\": \"state[\\\"_shared\\\"][\\\"score\\\"]\",\n  \"enabled\": \"state[\\\"_shared\\\"][\\\"phase\\\"] == \\\"complete\\\"\"\n}\n```\n\nWhen `enabled` is false, the view is omitted from context entirely — it does not\nappear in `views.*` and its value is not computed. Useful for phase-gated surfaces.\n\nEnabled expressions are evaluated server-side with the full CEL context.\nNo client-side CEL evaluator required.\n\n---\n\n## Render hints — views as surfaces\n\nA view with a `render` object becomes a **surface** — a UI element rendered by the dashboard.\n\n```json\n{\n  \"id\": \"score-display\",\n  \"expr\": \"state[\\\"_shared\\\"][\\\"score\\\"]\",\n  \"render\": { \"type\": \"metric\", \"label\": \"Score\", \"unit\": \"pts\" },\n  \"enabled\": \"state[\\\"_shared\\\"][\\\"phase\\\"] == \\\"active\\\"\"\n}\n```\n\nThe dashboard queries `GET /rooms/:id/views` and renders all views with `render` defined,\nin registration order. No `_dashboard` config blob required. No separate surface registration.\n\n**The dashboard is a view query.** Register views with render hints. They appear automatically.\n\n---\n\n## Surface types\n\n### `metric`\n\nSingle scalar value.\n\n```json\n{ \"type\": \"metric\", \"label\": \"Score\", \"unit\": \"pts\", \"format\": \"number\" }\n```\n\n`format`: `\"number\"` (default), `\"percent\"`, `\"duration\"`, `\"currency\"`.\n\n---\n\n### `markdown`\n\nMarkdown string rendered as HTML.\n\n```json\n{ \"type\": \"markdown\", \"label\": \"Status\" }\n```\n\nView expr should return a string. Supports GFM.\n\n---\n\n### `feed`\n\nOrdered list of message-like objects.\n\n```json\n{ \"type\": \"feed\", \"label\": \"Activity\", \"limit\": 20 }\n```\n\nView expr should return an array of objects. Items rendered as feed entries.\nObjects with `from`, `kind`, `body` fields render naturally.\n\n---\n\n### `view-table`\n\nTabular data from an array of objects.\n\n```json\n{ \"type\": \"view-table\", \"label\": \"Results\", \"columns\": [\"agent\", \"answer\", \"score\"] }\n```\n\nView expr returns an array of objects. `columns` specifies which keys to show and in what order.\n\n---\n\n### `view-grid`\n\nGrid of key-value pairs from an object.\n\n```json\n{ \"type\": \"view-grid\", \"label\": \"Scores\" }\n```\n\nView expr returns an object. Keys and values displayed as a grid.\n\n---\n\n### `action-bar`\n\nRow of invokable action buttons.\n\n```json\n{ \"type\": \"action-bar\", \"label\": \"Controls\", \"actions\": [\"start\", \"pause\", \"reset\"] }\n```\n\n`actions`: list of action IDs to display. Available actions shown as enabled buttons,\nunavailable ones shown as disabled. Params-free actions invoke immediately on click.\n\n---\n\n### `action-form`\n\nForm for invoking a parameterised action.\n\n```json\n{ \"type\": \"action-form\", \"label\": \"Submit Answer\", \"action\": \"submit_answer\" }\n```\n\n`action`: the action ID. Form fields generated from the action's `params` schema.\n`enum` params render as dropdowns. Boolean params as checkboxes. Others as text inputs.\n\n---\n\n### `action-choice`\n\nEnum selection that invokes an action with the selected value.\n\n```json\n{ \"type\": \"action-choice\", \"label\": \"Vote\", \"action\": \"vote\", \"param\": \"choice\" }\n```\n\n`action`: action ID. `param`: the enum param to set. Renders the enum values as\nselectable options. Current selection highlighted if state reflects it.\n\n---\n\n### `watch`\n\nLive CEL expression result shown as raw JSON with auto-refresh.\n\n```json\n{ \"type\": \"watch\", \"label\": \"Debug: Phase\" }\n```\n\nUseful for diagnostics and development. Shows the raw resolved value, updated on poll.\n\n---\n\n### `section`\n\nContainer that groups other surfaces.\n\n```json\n{ \"type\": \"section\", \"label\": \"Round Results\", \"views\": [\"score-display\", \"results-table\"] }\n```\n\n`views`: ordered list of view IDs to nest inside this section. Sections do not have\ntheir own `expr` — the view expr is ignored if `render.type` is `\"section\"`.\n\n---\n\n## Synthetic system views\n\nThe runtime injects synthetic views under reserved IDs. These appear in the `views`\nsection of context with `system: true`. They cannot be registered or deleted manually.\n\n### `_contested`\n\nPresent when two or more actions write to the same `(scope, key)` target.\n\n```json\n\"_contested\": {\n  \"value\": {\n    \"_shared:answer\": [\"alice_submit\", \"bob_submit\"]\n  },\n  \"description\": \"Write targets contested by 2+ actions.\",\n  \"system\": true\n}\n```\n\nClears automatically when the overlap resolves (action deleted or writes retargeted).\nUse as a wait condition: `views[\"_contested\"].size() > 0`.\n\n---\n\n## View timers\n\nViews support the same timer syntax as actions and state entries.\n\n```json\n{\n  \"id\": \"halftime-banner\",\n  \"expr\": \"\\\"Half time — scores frozen\\\"\",\n  \"render\": { \"type\": \"markdown\", \"label\": \"Announcement\" },\n  \"timer\": { \"ms\": 30000, \"effect\": \"delete\" }\n}\n```\n\n`effect: \"delete\"` — view exists now, disappears after 30 seconds.\n`effect: \"enable\"` — view appears after the timer fires (countdown before reveal).\n\n---\n\n## The three ways to create views\n\n**1. At agent join:**\n\n```json\nPOST /rooms/:id/agents\n{ \"views\": [{ \"id\": \"alice-status\", \"expr\": \"state[\\\"alice\\\"][\\\"status\\\"]\", \"scope\": \"alice\" }] }\n```\n\n**2. Auto-view from state write:**\n\n```json\nPOST /rooms/:id/actions/_set_state/invoke\n{ \"params\": { \"key\": \"health\", \"value\": 85, \"public\": true } }\n```\n\nCreates `alice.health` view automatically, scoped to the writing agent.\n\n**3. Via `_register_view` action (or directly):**\n\nFull control over expression, scope, enabled condition, and render hint.\n\n---\n\n## Deleting views\n\n```\nPOST /rooms/:id/actions/_delete_view/invoke\n{ \"params\": { \"id\": \"my-view\" } }\n```\n\nOr directly:\n\n```\nDELETE /rooms/:id/views/:id\n```\n\nViews scoped to an agent can only be deleted by that agent or a room-token holder.\n\n---\n\n## Competition detection on views\n\nTwo views rendering to the same conceptual slot create tension surfaced through the normal\naction conflict mechanism if they happen to write to the same state. Views themselves\ndon't write, so direct view-on-view conflict is not currently detected. If two views\nproduce incompatible projections of the same data, that is a vocabulary negotiation —\nuse directed messages to resolve it.\n",[],[865,944],[865],{"_105":952,"_97":953,"_166":954,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":955,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_179":956,"_101":984},"ca732912-1f92-11f1-943c-42dde27851f2","scripts","019cebf2-a8a6-7120-b163-fd94a458bb80",["D",1773485074605],[957,966,975],{"_105":958,"_97":959,"_166":960,"_168":954,"_169":149,"_170":961,"_171":172,"_107":962,"_102":33,"_174":810,"_176":963,"_177":22,"_178":-5,"_179":964,"_101":965},"6c98006e-1fa2-11f1-9864-42dde27851f2","backfill-scopes.ts","6c980140-1fa2-11f1-9864-42dde27851f2",51,["D",1773491789215],"/**\n * scripts/backfill-scopes.ts — One-time migration: populate v8 scopes from legacy tables.\n *\n * For every room, copies:\n *   - actions table → state._actions.{id} (full action definition as JSON)\n *   - views table   → state._views.{id} (full view definition as JSON, with deps extracted)\n *   - agents table  → state._agents.{id} (presence data)\n *\n * Idempotent: uses INSERT OR IGNORE (won't overwrite data from dual-write).\n * Run once to bring all existing rooms up to v8 scope conventions.\n *\n * GET /scripts/backfill-scopes → run the migration, return stats.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { extractDependencies } from \"../deps.ts\";\n\nfunction rows2objects(result: { columns: string[]; rows: any[][] }) {\n  return result.rows.map((row) =>\n    Object.fromEntries(result.columns.map((col, i) => [col, row[i]]))\n  );\n}\n\nexport default async function handler(req: Request): Promise {\n  const stats = { rooms: 0, actions: 0, views: 0, agents: 0, skipped: 0, errors: [] as string[] };\n\n  // Get all rooms\n  const roomsResult = await sqlite.execute({ sql: `SELECT id FROM rooms`, args: [] });\n  const rooms = roomsResult.rows.map(r => r[0] as string);\n  stats.rooms = rooms.length;\n\n  for (const roomId of rooms) {\n    // ── Backfill _actions ──\n    try {\n      const actionsResult = await sqlite.execute({\n        sql: `SELECT * FROM actions WHERE room_id = ?`,\n        args: [roomId],\n      });\n      const actions = rows2objects(actionsResult);\n\n      for (const action of actions) {\n        try {\n          let writes: any[] = [];\n          try { writes = JSON.parse(action.writes_json || \"[]\"); } catch {}\n          let params: any = null;\n          try { params = action.params_json ? JSON.parse(action.params_json) : null; } catch {}\n          let timer: any = null;\n          try { timer = action.timer_json ? JSON.parse(action.timer_json) : null; } catch {}\n          let onInvoke: any = null;\n          try { onInvoke = action.on_invoke_timer_json ? { timer: JSON.parse(action.on_invoke_timer_json) } : null; } catch {}\n\n          const value = JSON.stringify({\n            description: action.description ?? null,\n            if: action.if_expr ?? null,\n            enabled: action.enabled_expr ?? null,\n            result: action.result_expr ?? null,\n            writes,\n            params,\n            scope: action.scope ?? \"_shared\",\n            registered_by: action.registered_by ?? null,\n            timer,\n            on_invoke: onInvoke,\n          });\n\n          await sqlite.execute({\n            sql: `INSERT OR IGNORE INTO state (room_id, scope, key, value, version, revision, updated_at)\n                  VALUES (?, '_actions', ?, ?, '', 1, datetime('now'))`,\n            args: [roomId, action.id, value],\n          });\n          stats.actions++;\n        } catch (e: any) {\n          stats.errors.push(`action ${roomId}/${action.id}: ${e.message}`);\n        }\n      }\n    } catch (e: any) {\n      stats.errors.push(`actions for ${roomId}: ${e.message}`);\n    }\n\n    // ── Backfill _views ──\n    try {\n      const viewsResult = await sqlite.execute({\n        sql: `SELECT * FROM views WHERE room_id = ?`,\n        args: [roomId],\n      });\n      const views = rows2objects(viewsResult);\n\n      for (const view of views) {\n        try {\n          let render: any = null;\n          try { render = view.render_json ? JSON.parse(view.render_json) : null; } catch {}\n          let timer: any = null;\n          try { timer = view.timer_json ? JSON.parse(view.timer_json) : null; } catch {}\n\n          // Extract deps\n          let deps: any[] = [];\n          try { deps = extractDependencies(view.expr); } catch {}\n\n          const value = JSON.stringify({\n            expr: view.expr,\n            description: view.description ?? null,\n            enabled: view.enabled_expr ?? null,\n            render,\n            scope: view.scope ?? \"_shared\",\n            registered_by: view.registered_by ?? null,\n            timer,\n            deps,\n          });\n\n          await sqlite.execute({\n            sql: `INSERT OR IGNORE INTO state (room_id, scope, key, value, version, revision, updated_at)\n                  VALUES (?, '_views', ?, ?, '', 1, datetime('now'))`,\n            args: [roomId, view.id, value],\n          });\n          stats.views++;\n        } catch (e: any) {\n          stats.errors.push(`view ${roomId}/${view.id}: ${e.message}`);\n        }\n      }\n    } catch (e: any) {\n      stats.errors.push(`views for ${roomId}: ${e.message}`);\n    }\n\n    // ── Backfill _agents ──\n    try {\n      const agentsResult = await sqlite.execute({\n        sql: `SELECT * FROM agents WHERE room_id = ?`,\n        args: [roomId],\n      });\n      const agents = rows2objects(agentsResult);\n\n      for (const agent of agents) {\n        try {\n          let grants: any[] = [];\n          try { grants = agent.grants ? JSON.parse(agent.grants) : []; } catch {}\n\n          const value = JSON.stringify({\n            name: agent.name,\n            role: agent.role ?? \"agent\",\n            status: agent.status ?? \"active\",\n            grants,\n            last_heartbeat: agent.last_heartbeat ?? null,\n            joined_at: agent.joined_at ?? null,\n          });\n\n          await sqlite.execute({\n            sql: `INSERT OR IGNORE INTO state (room_id, scope, key, value, version, revision, updated_at)\n                  VALUES (?, '_agents', ?, ?, '', 1, datetime('now'))`,\n            args: [roomId, agent.id, value],\n          });\n          stats.agents++;\n        } catch (e: any) {\n          stats.errors.push(`agent ${roomId}/${agent.id}: ${e.message}`);\n        }\n      }\n    } catch (e: any) {\n      stats.errors.push(`agents for ${roomId}: ${e.message}`);\n    }\n  }\n\n  return new Response(JSON.stringify(stats, null, 2), {\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n",[],[953,959],{"_105":967,"_97":968,"_166":969,"_168":954,"_169":149,"_170":970,"_171":172,"_107":971,"_102":33,"_174":810,"_176":972,"_177":22,"_178":-5,"_179":973,"_101":974},"3b67ee8a-1ff9-11f1-9f92-42dde27851f2","migrate-agent-tokens.ts","3b67efa2-1ff9-11f1-9f92-42dde27851f2",133,["D",1773529072911],"/**\n * scripts/migrate-agent-tokens.ts — Fold agent tokens into unified tokens table.\n *\n * For each agent with a token_hash, creates a corresponding tokens table entry.\n * Adds last_seen_seq to _agents scope entries.\n * Adds last_used_at column to tokens table.\n *\n * Idempotent: uses INSERT OR IGNORE (won't overwrite existing tokens).\n *\n * GET /scripts/migrate-agent-tokens → run the migration, return stats.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nfunction rows2objects(result: { columns: string[]; rows: any[][] }) {\n  return result.rows.map((row) =>\n    Object.fromEntries(result.columns.map((col, i) => [col, row[i]]))\n  );\n}\n\nexport default async function handler(req: Request): Promise {\n  const stats = { agents: 0, tokens_created: 0, scope_updated: 0, errors: [] as string[] };\n\n  // 1. Add last_used_at column to tokens table\n  try {\n    await sqlite.execute({ sql: `ALTER TABLE tokens ADD COLUMN last_used_at TEXT`, args: [] });\n  } catch { /* already exists */ }\n\n  // 2. Get all agents with token hashes\n  const agentsResult = await sqlite.execute({\n    sql: `SELECT id, room_id, token_hash, grants, last_seen_seq, last_heartbeat, name, role FROM agents WHERE token_hash IS NOT NULL`,\n    args: [],\n  });\n  const agents = rows2objects(agentsResult);\n  stats.agents = agents.length;\n\n  for (const agent of agents) {\n    const agentId = agent.id as string;\n    const roomId = agent.room_id as string;\n    const tokenHash = agent.token_hash as string;\n    const lastSeenSeq = agent.last_seen_seq ?? 0;\n    const lastHeartbeat = agent.last_heartbeat ?? null;\n\n    // Parse grants\n    let grants: string[] = [];\n    try { grants = JSON.parse(agent.grants as string || \"[]\"); } catch {}\n\n    // Build scope string from grants\n    // as_ tokens are room-scoped with agent identity\n    const scope = `rooms:${roomId}:agent:${agentId}:write`;\n\n    // 3. Create tokens table entry (using same hex hash)\n    try {\n      await sqlite.execute({\n        sql: `INSERT OR IGNORE INTO tokens (id, token_hash, minted_by, scope, room_id, agent_id, label, last_used_at, created_at)\n              VALUES (?, ?, ?, ?, ?, ?, ?, ?, datetime('now'))`,\n        args: [\n          `legacy_${roomId}_${agentId}`,  // deterministic ID\n          tokenHash,                        // same hex SHA-256 hash\n          \"legacy_migration\",               // minted_by\n          scope,\n          roomId,\n          agentId,\n          `Agent ${agent.name ?? agentId}`,\n          lastHeartbeat,\n        ],\n      });\n      stats.tokens_created++;\n    } catch (e: any) {\n      // Likely UNIQUE constraint on token_hash — token already migrated\n      if (!e.message?.includes(\"UNIQUE\")) {\n        stats.errors.push(`token ${roomId}/${agentId}: ${e.message}`);\n      }\n    }\n\n    // 4. Update _agents scope entry with last_seen_seq and token_id\n    try {\n      const scopeResult = await sqlite.execute({\n        sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n        args: [roomId, agentId],\n      });\n      if (scopeResult.rows.length > 0) {\n        const current = JSON.parse(scopeResult.rows[0][0] as string);\n        current.last_seen_seq = lastSeenSeq;\n        current.token_id = `legacy_${roomId}_${agentId}`;\n        await sqlite.execute({\n          sql: `UPDATE state SET value = ?, revision = revision + 1, updated_at = datetime('now')\n                WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n          args: [JSON.stringify(current), roomId, agentId],\n        });\n        stats.scope_updated++;\n      }\n    } catch (e: any) {\n      stats.errors.push(`scope ${roomId}/${agentId}: ${e.message}`);\n    }\n  }\n\n  return new Response(JSON.stringify(stats, null, 2), {\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n",[],[953,968],{"_105":976,"_97":977,"_166":978,"_168":954,"_169":149,"_170":979,"_171":172,"_107":980,"_102":483,"_174":810,"_176":981,"_177":22,"_178":-5,"_179":982,"_101":983},"231b268e-1fa0-11f1-98a4-42dde27851f2","probe-ast.ts","912f4c84-1f93-11f1-8a13-42dde27851f2",44,["D",1773490806928],"/**\n * scripts/probe-ast.ts — CEL AST shape discovery tool.\n *\n * Verified AST format (March 2026):\n *   { op: \"id\", args: \"state\" }          — identifier (args is STRING)\n *   { op: \".\", args: [parent, \"field\"] }  — member access\n *   { op: \"[]\", args: [obj, index] }      — bracket access\n *   { op: \"value\", args: \"literal\" }      — literal value\n *   Pipe expressions (|) FAIL to parse — handled by regex fallback in deps.ts\n *\n * Keep as reference. Can be removed before merge.\n */\n\nimport { parse } from \"npm:@marcbachmann/cel-js\";\nimport { extractDependencies } from \"../deps.ts\";\n\nconst EXPRESSIONS = [\n  // Direct key access — should yield AST deps\n  `state._shared.phase`,\n  `state._shared.theses.game_designer`,\n\n  // Pipe expressions — should fall back to regex\n  `state._shared | keys() | filter(k, k.startsWith(\"concepts.\")) | size()`,\n\n  // View reference via bracket — should yield AST deps\n  `views[\"concept_count\"] > 10`,\n\n  // Comparison — should yield AST deps\n  `state._shared.phase == \"active\"`,\n\n  // Pipe with agents — regex fallback\n  `agents | values() | filter(a, a.status == \"active\") | size()`,\n\n  // Mixed: direct + pipe — AST for first part, regex catches pipe\n  `state._shared.thesis_log | size() > 0 && state._shared.phase != \"setup\"`,\n\n  // Bracket access — AST deps\n  `state._shared[\"concepts.attention_restoration\"]`,\n\n  // Messages — AST deps\n  `messages.count > 0`,\n\n  // Ternary — AST deps\n  `state._shared.score > 100 ? \"high\" : \"low\"`,\n\n  // Pipe with prefix — regex catches both scope and prefix\n  `state._shared | keys() | filter(k, k.startsWith(\"tensions.\")) | size()`,\n];\n\nexport default async function handler(req: Request): Promise {\n  const results: any[] = [];\n\n  for (const expr of EXPRESSIONS) {\n    const entry: any = { expr };\n    try {\n      const compiled = parse(expr);\n      entry.parseable = true;\n      entry.astTopOp = compiled.ast?.op;\n    } catch (e: any) {\n      entry.parseable = false;\n      entry.parseError = e.message?.split(\"\\n\")[0];\n    }\n    // Always extract deps (should work for both parseable and unparseable)\n    entry.deps = extractDependencies(expr);\n    results.push(entry);\n  }\n\n  return new Response(JSON.stringify(results, (_, v) => typeof v === \"bigint\" ? Number(v) : v, 2), {\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n",[],[953,977],[953],{"_105":986,"_97":987,"_166":988,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":989,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_179":990,"_101":1005},"ca73528e-1f92-11f1-943c-42dde27851f2","skills","019cebf2-a8a6-7120-b164-0a520e31d432",["D",1773485074605],[991],{"_105":992,"_97":98,"_166":993,"_168":988,"_169":149,"_170":122,"_171":172,"_107":994,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_179":995,"_101":1004},"ca73511c-1f92-11f1-943c-42dde27851f2","019cebf2-a8a6-7120-b164-051109adc384",["D",1773485074605],[996],{"_105":997,"_97":998,"_166":999,"_168":993,"_169":149,"_170":122,"_171":172,"_107":1000,"_102":33,"_174":186,"_176":1001,"_177":22,"_178":-5,"_179":1002,"_101":1003},"ca732c46-1f92-11f1-943c-42dde27851f2","SKILL.md","019cebf2-a8a6-7120-b164-018f04c3725f",["D",1773485074605],"---\nname: sync\ndescription: Knowledge about the sync.parc.land coordination API. Use when working with multi-agent systems, room coordination, or when the user mentions sync.parc.land.\n---\n\n# sync.parc.land API Knowledge\n\n**Base URL**: `https://sync.parc.land`\n\nThis skill provides declarative knowledge about the sync coordination platform. When the MCP server is available, prefer using MCP tools (`sync_lobby`, `sync_embody`, `sync_read_context`, etc.) for actual operations.\n\n## Core Concepts\n\n**Two operations:**\n- **Read context** → `GET /rooms/:id/context`\n- **Invoke actions** → `POST /rooms/:id/actions/:action/invoke`\n\nThere is no `_set_state`. Agents declare write capabilities as actions, then invoke them. The declaration is the commitment. The vocabulary is the protocol.\n\n## Quick Start Workflow\n\n1. **Create room**: `POST /rooms` → `{ token, view_token, id }`\n2. **Agent joins**: `POST /rooms/:id/agents` with `{ id, name, role }` → `{ token }`\n3. **Read context**: `GET /rooms/:id/context` → full state snapshot\n4. **Bootstrap vocabulary**:\n   - Invoke `help` action with `{ \"params\": { \"key\": \"standard_library\" } }`\n   - Use `_register_action` to declare write capabilities\n5. **Register views**: `_register_view` to expose computed state\n6. **Act**: `POST /rooms/:id/actions/:id/invoke` with params\n7. **Wait**: `GET /rooms/:id/wait?condition=` to block until condition\n\n## Auth Model\n\nThree token types:\n- **Room token** (`room_...`): Admin, full authority\n- **Agent token** (`as_...`): Own scope + grants\n- **View token** (`view_...`): Read-only\n\nAll mutations require `Authorization: Bearer `.\n\n## Built-in Actions\n\nEvery room has:\n- `_register_action` - Declare write capability (id, description, params, writes, if)\n- `_register_view` - Declare read capability (id, expr, scope, description, render)\n- `_delete_action` / `_delete_view` - Remove capabilities\n- `_send_message` - Send message (body, kind, to)\n- `help` - Access guidance (key)\n\n## Actions = Write Capabilities\n\nActions are **declared operations** with:\n\n```json\n{\n  \"id\": \"vote\",\n  \"description\": \"Cast or change your vote\",\n  \"params\": { \"choice\": { \"type\": \"string\" } },\n  \"writes\": [\n    { \"scope\": \"${self}\", \"key\": \"vote\", \"value\": \"${params.choice}\" }\n  ]\n}\n```\n\n**Write templates** support:\n- `${params.x}` - invocation parameters\n- `${self}` - agent ID\n- `${now}` - timestamp\n\n**Write modes**:\n- Plain value\n- `increment` - atomic counter\n- `merge` - deep object merge\n- `append` - log row or array push\n- `if_version` - proof-of-read CAS\n\n**Scope authority**: Action registrar's identity bridges authority to invoker.\n\n**Conflict detection**: Two actions writing same `(scope, key)` → warning + `_contested` view.\n\n## Views = Read Capabilities\n\nCEL expressions projecting state to public values:\n\n```json\n{\n  \"id\": \"score\",\n  \"expr\": \"state['_shared']['score']\",\n  \"render\": { \"type\": \"metric\", \"label\": \"Score\" }\n}\n```\n\nViews scoped to an agent can read that agent's private state and expose results publicly.\n\n**Render hints**: Turn views into dashboard surfaces (metric, markdown, view-grid, action-bar, etc.).\n\n## State = Versioned Key-Value\n\nEvery entry: `(scope, key) → value` with:\n- `revision` - sequential write count\n- `version` - SHA-256 hash (16 hex chars, unforgeable)\n\nThe `version` is proof-of-read for CAS operations:\n\n```json\n{\n  \"writes\": [{\n    \"scope\": \"_shared\",\n    \"key\": \"phase\",\n    \"value\": \"active\",\n    \"if_version\": \"486ea46224d1bb4f\"\n  }]\n}\n```\n\n## Messages = Directed Routing\n\n```json\n{\n  \"count\": 12,\n  \"unread\": 3,\n  \"directed_unread\": 1,\n  \"recent\": [\n    { \"seq\": 10, \"from\": \"alice\", \"body\": \"hello\" },\n    { \"seq\": 11, \"from\": \"bob\", \"to\": [\"alice\"], \"body\": \"...\" }\n  ]\n}\n```\n\n`directed_unread` counts messages with `to` containing your ID. Use as wait condition.\n\n## CEL Context\n\nEvery expression sees:\n\n```\nstate._shared.*          # shared state\nstate.self.*             # your private scope\nstate[\"agent-id\"].*      # other agents (if authority)\nviews.*                  # all resolved views\nagents.*                 # agent metadata\nactions.*                # action availability\nmessages.count           # total messages\nmessages.unread          # unread count\nmessages.directed_unread # directed to you\nself                     # your agent ID string\nparams.*                 # action params (in writes/if)\n```\n\n## Context Shaping\n\nQuery params for `/context`:\n\n- `depth=lean|full|usage` - detail level (default: lean)\n- `only=state,messages` - section filter\n- `messages_after=N` - pagination\n- `messages_limit=10` - cap bodies\n- `include=_audit` - opt-in scopes\n- `compact=true` - strip nulls\n\n## Standard Library\n\nInvoke `help` with `{ \"params\": { \"key\": \"standard_library\" } }` to see ready-to-register action patterns:\n\n- `set` - unconditional write\n- `delete` - remove key\n- `increment` - atomic counter\n- `append` - log or array push\n- `merge` - deep merge\n- `if_version` - CAS pattern\n\n## Complete API Surface\n\n```\nPOST   /rooms                          # create\nGET    /rooms/:id/context              # read everything\nPOST   /rooms/:id/actions/:id/invoke   # write (only endpoint)\nGET    /rooms/:id/wait                 # block until CEL true\nPOST   /rooms/:id/agents               # join\nPATCH  /rooms/:id/agents/:id           # update grants\nPOST   /rooms/:id/eval                 # debug CEL\nGET    /reference/:doc                 # api.md, cel.md, etc.\n```\n\n## Using with MCP Tools\n\nWhen the sync MCP server is available, prefer these tools over raw HTTP:\n\n**Lobby & Identity:**\n- `sync_lobby` - overview of rooms/agents/roles\n- `sync_embody` - commit to agent (creates/takes over/switches)\n- `sync_disembody` - release agent\n\n**Core Operations:**\n- `sync_read_context` - read room state (embodied or observer)\n- `sync_invoke_action` - invoke any action (requires embodiment)\n- `sync_wait` - block until condition\n\n**Vocabulary:**\n- `sync_register_action` - declare write capability\n- `sync_register_view` - declare read capability\n- `sync_delete_action` / `sync_delete_view` - remove capabilities\n\n**Sugar:**\n- `sync_send_message` - send message\n- `sync_help` - access help system\n- `sync_eval_cel` - evaluate CEL expression\n\n**Lifecycle:**\n- `sync_create_room` - create room (auto-registers in user account)\n- `sync_join_room` - low-level join (prefer `sync_embody`)\n\nThe MCP tools handle OAuth, embodiment state, scope checks, and admin escalation automatically.\n\n## Reference Documentation\n\nFull details:\n- API: `https://sync.parc.land/reference/api.md`\n- CEL: `https://sync.parc.land/reference/cel.md`\n- Examples: `https://sync.parc.land/reference/examples.md`\n- Views: `https://sync.parc.land/reference/views.md`\n- Help: `https://sync.parc.land/reference/help.md`\n- v6 Architecture: `https://sync.parc.land/reference/v6.md`\n\n## Design Philosophy\n\nFrom `reference/v6.md`:\n\n> No `_set_state`. Agents declare write capabilities as actions, then invoke them.\n> The declaration is the commitment. The vocabulary is the protocol.\n\nsync v6 is built on two axioms:\n- `_register_action` (declare write capability)\n- `_register_view` (declare read capability)\n\nEverything else is sugar. The vocabulary is the coordination mechanism.\n",[],[987,98,998],[987,98],[987],{"_105":1007,"_97":1008,"_166":1009,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1010,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_179":1011,"_101":1020},"ca7370ca-1f92-11f1-943c-42dde27851f2","static","019cebf2-a8a6-7120-b164-10f4fa6028ff",["D",1773485074605],[1012],{"_105":1013,"_97":1014,"_166":1015,"_168":1009,"_169":149,"_170":122,"_171":172,"_107":1016,"_102":33,"_174":186,"_176":1017,"_177":22,"_178":-5,"_179":1018,"_101":1019},"ca7353d8-1f92-11f1-943c-42dde27851f2","favicon.svg","019cebf2-a8a6-7120-b164-0dc0cca3bacb",["D",1773485074605],"\n",[],[1008,1014],[1008],{"_105":1022,"_97":1023,"_166":1024,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1025,"_102":33,"_174":186,"_176":1026,"_177":22,"_178":-5,"_179":1027,"_101":1028},"ca737246-1f92-11f1-943c-42dde27851f2",".gitignore","019cebf2-a8a6-7120-b164-16d544d88585",["D",1773485074605],"local/sync.db\nlocal/sync.db-wal\nlocal/sync.db-shm\n.vt/\n.DS_Store\nnode_modules/\n",[],[1023],{"_105":1030,"_97":1031,"_166":1032,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1033,"_102":33,"_174":186,"_176":1034,"_177":22,"_178":-5,"_179":1035,"_101":1036},"ca737494-1f92-11f1-943c-42dde27851f2",".mcp.json","019cebf2-a8a6-7120-b164-1b894a979735",["D",1773485074605],"{\n  \"mcpServers\": {\n    \"sync\": {\n      \"type\": \"http\",\n      \"url\": \"https://sync.parc.land/mcp\",\n      \"description\": \"Programmatic tools for sync.parc.land coordination platform\",\n      \"authentication\": {\n        \"type\": \"oauth2\",\n        \"discoveryUrl\": \"https://sync.parc.land/.well-known/oauth-authorization-server\"\n      }\n    }\n  }\n}\n",[],[1031],{"_105":1038,"_97":1039,"_166":1040,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1041,"_102":33,"_174":186,"_176":1042,"_177":22,"_178":-5,"_179":1043,"_101":1044},"ca737778-1f92-11f1-943c-42dde27851f2",".vtignore","019cebf2-a8a6-7120-b164-1e7951e56763",["D",1773485074605],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor\nlocal\nCLAUDE.md",[],[1039],{"_105":1046,"_97":1047,"_166":1048,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1049,"_102":33,"_174":186,"_176":1050,"_177":22,"_178":-5,"_179":1051,"_101":1052},"ca737a34-1f92-11f1-943c-42dde27851f2","CLAUDE.md","019cebf2-a8a6-7120-b164-2026453ccd1a",["D",1773485074605],"# CLAUDE.md\n\nThis is agent-sync, a multi-agent coordination platform at https://sync.parc.land/.\n\n## Key architectural fact\n\nThe `README.md` is served as the root response (`GET /`) and doubles as the\nremote SKILL.md for Claude's skill system. It is fetched at module load time\nand served as `text/plain`.\n\nThis means README.md must:\n- Follow SKILL.md formatting conventions (frontmatter with `name` and `description`, concise workflow-first structure)\n- Be self-contained enough for an LLM to use the API without reading reference docs\n- Stay under ~4K tokens so it fits comfortably in a context window alongside other skills\n- Link to `reference/api.md`, `reference/cel.md`, `reference/examples.md` for deeper detail\n\nWhen editing README.md, you are editing the skill definition that other Claude\ninstances will read to learn how to use this platform. Write for that audience.\n\n## v5 architecture (context-first)\n\nTwo operations: **read context**, **invoke actions**.\n\n- `GET /context` — returns everything (state, views, agents, actions with defs, messages with bodies)\n- `POST /actions/:id/invoke` — the only write endpoint (builtin and custom actions)\n- `GET /wait` — blocks until condition, returns full context\n\n10 total endpoints. Every write flows through action invocation.\nEvery invocation is logged to `_audit` scope.\n\nThere are NO direct write endpoints for state, actions, views, or messages.\nAll writes go through built-in actions (`_set_state`, `_register_action`, etc.)\nor custom actions.\n\n## Project structure\n\n```\nmain.ts          — HTTP router, all endpoint handlers, built-in actions, audit logging\nauth.ts          — Token generation, hashing, scope authority checks\ncel.ts           — CEL context builder, expression evaluation, view context\nschema.ts        — SQLite schema and v4→v5 migration\ntimers.ts        — Wall-clock and logical-clock timer lifecycle\ndashboard.ts     — Browser dashboard (auth-gated, single HTML response)\nREADME.md        — Skill definition (served at root)\nreference/       — Detailed docs (api.md, cel.md, examples.md, surfaces.md)\n```\n\n## Dashboard tabs\n\nAgents, State, Messages, Actions, Views, Audit, CEL Console.\nThe Audit tab shows every action invocation with success/failure status.\n\n## Surfaces (branch: surfaces)\n\nThe `surfaces` branch adds declarative UI composition to the dashboard.\nKey files:\n\n- `frontend/types.ts` — Surface type definitions and `DashboardConfig` interface\n- `frontend/components/panels/Surfaces.tsx` — Renderer for all 10 surface types\n- `frontend/components/Dashboard.tsx` — Consumes `state._shared._dashboard`,\n  switches between surface mode and classic tab mode, includes client-side\n  CEL evaluator for `enabled` expressions\n- `reference/surfaces.md` — Full reference doc\n\n### Client-side CEL evaluator\n\n`Dashboard.tsx` has `makeSimpleCelEvaluator()` for evaluating surface `enabled`\nexpressions in the browser. Key behavior:\n\n- Supports `state..` comparisons, `views[\"id\"]`, `&&`, `||`\n- **Loose equality:** `undefined == false` returns `true` (missing state keys\n  are treated as falsy). This is critical for gating on discovery flags that\n  haven't been set yet.\n- **Fail-closed:** Unrecognized expressions return `false` (hide the surface).\n\n### Surface types\n\n`markdown`, `metric`, `view-grid`, `view-table`, `action-bar`, `action-form`,\n`action-choice`, `feed`, `watch`, `section` (nesting container).\n\nAll defined in `types.ts` as a discriminated union on the `type` field.\n",[],[1047],{"_105":1054,"_97":1055,"_166":1056,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1057,"_102":33,"_174":186,"_176":1058,"_177":22,"_178":-5,"_179":1059,"_101":1060},"ca953fc0-1f92-11f1-943c-42dde27851f2","INSTALL.md","019cebf2-a8a6-7120-b164-25be1a8b66a1",["D",1773485074605],"# Installing the sync Plugin\n\nThis repository serves as both a **plugin** and a **marketplace** for Claude Code.\n\n## Installation Methods\n\n### Method 1: From Git Repository (Recommended)\n\nExternal users can install the sync plugin:\n\n```bash\n# Step 1: Add the marketplace\n/plugin marketplace add christopherdebeer/sync.parc.land\n\n# Step 2: Install the plugin\n/plugin install sync@sync\n```\n\nOr in one new Claude session:\n```bash\n/plugin marketplace add christopherdebeer/sync.parc.land && /plugin install sync@sync\n```\n\n### Method 2: Local Development\n\nWhen working on this codebase:\n\n```bash\n# From the repo directory\nclaude --plugin-dir .\n```\n\nThis loads the plugin directly without copying to cache, useful for development.\n\n### Method 3: Official Marketplace (Future)\n\nOnce submitted to the official Anthropic marketplace:\n\n```bash\n/plugin install sync\n```\n\n## What Gets Installed\n\nWhen users install the plugin, they get:\n\n1. **Agent Skill** (`/sync:api`): Declarative knowledge about the sync coordination API\n2. **MCP Server**: 18 programmatic tools (`sync_lobby`, `sync_embody`, `sync_read_context`, etc.)\n\nThe skill teaches Claude about sync, while the MCP tools let Claude actually use it.\n\n## Authentication\n\n### MCP clients (Claude, ChatGPT)\nOn first use of an MCP tool, you'll be prompted to authenticate via OAuth 2.1 + WebAuthn:\n\n1. Browser opens to `https://sync.parc.land/oauth/authorize`\n2. Sign in with passkey (or create account)\n3. Consent screen: choose which rooms to grant access\n4. OAuth flow completes, tokens stored securely\n5. MCP tools work with authenticated access\n\n### CLI / scripts (device auth)\nFor non-browser environments:\n\n```bash\n# 1. Initiate\ncurl -X POST https://sync.parc.land/auth/device \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"scope\":\"rooms:* create_rooms\"}'\n\n# 2. Open the verification_uri_complete in browser, auth with passkey, approve\n\n# 3. Poll for token\ncurl -X POST https://sync.parc.land/auth/device/token \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"device_code\":\"dev_xxx\"}'\n```\n\n### Management UI\nVisit `https://sync.parc.land/manage` to view rooms, manage tokens, and configure passkeys.\n\n## Verification\n\nAfter installation, verify it worked:\n\n```bash\n# List installed plugins\n/plugin list\n\n# Should see:\n# sync@sync (6.0.0)\n\n# Try the skill\n/sync:api\n# Claude will explain the sync coordination API\n\n# Try an MCP tool (triggers OAuth on first use)\n# This will fail with \"not embodied\" but proves MCP works:\n/sync:api What MCP tools are available?\n```\n\n## Updating\n\nTo update to the latest version:\n\n```bash\n/plugin marketplace update sync\n/plugin update sync@sync\n```\n\nOr enable auto-updates in settings:\n\n```json\n{\n  \"plugins\": {\n    \"autoUpdate\": true\n  }\n}\n```\n\n## Uninstalling\n\n```bash\n/plugin uninstall sync@sync\n/plugin marketplace remove sync\n```\n\n## For Team/Enterprise Distribution\n\nTo distribute this plugin to your team:\n\n### Option A: Repository-Level Installation\n\nAdd to your project's `.claude/settings.json`:\n\n```json\n{\n  \"extraKnownMarketplaces\": {\n    \"sync\": {\n      \"source\": {\n        \"source\": \"github\",\n        \"repo\": \"christopherdebeer/sync.parc.land\"\n      }\n    }\n  },\n  \"enabledPlugins\": {\n    \"sync@sync\": true\n  }\n}\n```\n\nTeam members will be prompted to install on first project load.\n\n### Option B: Managed Settings (Enterprise)\n\nSet in organization-wide managed settings:\n\n```json\n{\n  \"strictKnownMarketplaces\": [\n    {\n      \"source\": \"github\",\n      \"repo\": \"christopherdebeer/sync.parc.land\"\n    }\n  ],\n  \"enabledPlugins\": {\n    \"sync@sync\": true\n  }\n}\n```\n\nThis enforces the sync plugin across all users.\n\n## Troubleshooting\n\n### \"Marketplace file not found\"\n\nIf you see:\n```\nError: Marketplace file not found at .../.claude-plugin/marketplace.json\n```\n\nMake sure you're using the correct repo name:\n```bash\n/plugin marketplace add christopherdebeer/sync.parc.land\n```\n\n### \"Authentication failed\" on MCP tools\n\nMCP tools require OAuth. On first use:\n1. Browser opens to sync.parc.land\n2. Create a passkey (WebAuthn)\n3. Grant access to rooms\n\n### Plugin not showing up\n\n```bash\n# Refresh marketplace\n/plugin marketplace update sync\n\n# List available plugins\n/plugin marketplace list sync\n\n# Should show:\n# sync@sync (6.0.0) - Multi-agent coordination platform\n```\n\n### Need production vs local dev?\n\nThe repo includes `.claude/mcp.json` with both:\n- `sync-prod` (enabled) → https://sync.parc.land/mcp\n- `sync-local` (disabled) → http://localhost:8787/mcp\n\nToggle in `.claude/settings.local.json` (gitignored):\n\n```json\n{\n  \"mcpServers\": {\n    \"sync-local\": { \"disabled\": false },\n    \"sync-prod\": { \"disabled\": true }\n  }\n}\n```\n\nThen run `deno task dev` to start local server.\n\n## Support\n\n- Homepage: https://sync.parc.land\n- Documentation: https://sync.parc.land/reference/api.md\n- Repository: https://github.com/christopherdebeer/sync.parc.land\n- Issues: https://github.com/christopherdebeer/sync.parc.land/issues\n",[],[1055],{"_105":1062,"_97":1063,"_166":1064,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1065,"_102":33,"_174":186,"_176":1066,"_177":22,"_178":-5,"_179":1067,"_101":1068},"ca955dca-1f92-11f1-943c-42dde27851f2","PLUGIN.md","019cebf2-a8a6-7120-b164-2831af0631c5",["D",1773485074605],"# sync Plugin Architecture\n\nThis repository serves multiple purposes:\n\n## 1. Deployed Service (https://sync.parc.land)\n\nThe main application providing:\n- HTTP API for multi-agent coordination\n- MCP server at `/mcp` endpoint\n- OAuth 2.1 + WebAuthn authentication\n- Dashboard and documentation\n\n## 2. Claude Code Plugin\n\nThe repository itself IS a plugin that can be installed:\n\n```bash\n# From Claude Code\n/plugin install sync\n\n# Or test locally\nclaude --plugin-dir /path/to/sync.parc.land\n```\n\n### Plugin Components\n\n**Agent Skill** (`skills/api/SKILL.md`):\n- Declarative knowledge about the sync coordination API\n- Automatically available to Claude when working with sync\n- Teaches Claude the concepts, workflow, and patterns\n\n**MCP Server** (`.mcp.json`):\n- Points to the deployed service at `https://sync.parc.land/mcp`\n- Provides 16 programmatic tools (sync_lobby, sync_embody, etc.)\n- OAuth-authenticated access to rooms and agents\n\n### Two-Layer Design\n\nThe plugin has **complementary layers**:\n\n1. **Declarative layer** (Agent Skill): Gives Claude **knowledge** about sync\n   - \"What is sync?\"\n   - \"How do I coordinate agents?\"\n   - \"What's the workflow?\"\n\n2. **Programmatic layer** (MCP tools): Gives Claude **capabilities** to actually use sync\n   - Create rooms\n   - Embody agents\n   - Read/write state\n   - Invoke actions\n\nBoth work together: the skill teaches, the MCP tools execute.\n\n## 3. Local Development\n\nFor repo-scoped development on this codebase:\n\n**`.claude/mcp.json`**: Repo-scoped MCP config\n- `sync-prod`: Points to production (default enabled)\n- `sync-local`: Points to localhost:8787 (disabled by default)\n\nEnable local dev by editing `.claude/settings.local.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"sync-local\": { \"disabled\": false },\n    \"sync-prod\": { \"disabled\": true }\n  }\n}\n```\n\nThen run `deno task dev` to start the local server.\n\n## Distribution\n\nThis repo is **self-contained** - it's both a plugin AND a marketplace that lists itself.\n\n### Direct Installation (Current)\n\nUsers can install directly from the git repository:\n\n```bash\n/plugin marketplace add christopherdebeer/sync.parc.land\n/plugin install sync@sync\n```\n\nThe repo contains both:\n- `.claude-plugin/plugin.json` (plugin manifest)\n- `.claude-plugin/marketplace.json` (marketplace catalog pointing to itself)\n\n### Official Marketplace (Future)\n\nSubmit to claude.ai/settings/plugins/submit or console.anthropic.com/plugins/submit\n\nOnce approved, users can install with:\n```bash\n/plugin install sync\n```\n\n### Team Distribution\n\nAdd to project `.claude/settings.json`:\n\n```json\n{\n  \"extraKnownMarketplaces\": {\n    \"sync\": {\n      \"source\": {\n        \"source\": \"github\",\n        \"repo\": \"christopherdebeer/sync.parc.land\"\n      }\n    }\n  },\n  \"enabledPlugins\": {\n    \"sync@sync\": true\n  }\n}\n```\n\nSee `INSTALL.md` for complete installation instructions.\n\n## Key Design Insights\n\n### Why Both Skill and MCP?\n\n1. **Skills** are about **knowledge transfer** - they teach Claude concepts\n2. **MCP tools** are about **capabilities** - they let Claude take action\n3. Together they create a complete integration\n\n### Why Serve README.md as /SKILL.md?\n\nFrom `docs/agent-sync-technical-design.md`:\n\n> Serving the README as the SKILL.md means every LLM that can fetch a URL can learn the API. The trade-off: the README must stay under ~4K tokens to fit in a context window, which constrains documentation depth.\n\nThe deployed service serves README.md at `/SKILL.md` so any LLM can learn the API. The plugin's Agent Skill (`skills/api/SKILL.md`) is a more focused, Claude Code-specific extraction of that knowledge.\n\n### Dual Use of /SKILL.md Endpoint\n\n- **Generic LLMs**: Fetch `https://sync.parc.land/SKILL.md` directly\n- **Claude Code**: Uses the bundled `skills/api/SKILL.md` in the plugin\n\nBoth serve the same purpose (teach the API) but the plugin version is optimized for Claude Code's skill system.\n\n## File Structure\n\n```\nsync.parc.land/\n├── .claude-plugin/\n│   └── plugin.json          # Makes this repo a plugin\n├── skills/\n│   └── api/\n│       └── SKILL.md         # Agent Skill (declarative knowledge)\n├── .mcp.json                # MCP config (points to deployed service)\n├── .claude/\n│   ├── mcp.json             # Repo-scoped MCP (prod + local)\n│   └── settings.local.json  # Local overrides (gitignored)\n├── mcp/\n│   ├── mcp.ts               # MCP server implementation\n│   ├── tools.ts             # 16 MCP tools\n│   └── db.ts                # OAuth/WebAuthn/Vault storage\n├── main.ts                  # HTTP router + API endpoints\n├── README.md                # Also served as /SKILL.md endpoint\n└── ... (rest of codebase)\n```\n\n## Testing\n\n**Test as plugin:**\n```bash\nclaude --plugin-dir .\n```\n\n**Test local MCP:**\n```bash\n# Terminal 1\ndeno task dev\n\n# Terminal 2 - edit .claude/settings.local.json to enable sync-local\nclaude\n```\n\n**Validate plugin:**\n```bash\nclaude plugin validate .\n# Or from within Claude Code:\n/plugin validate .\n```\n",[],[1063],{"_105":1070,"_97":759,"_166":1071,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1072,"_102":33,"_174":186,"_176":1073,"_177":22,"_178":-5,"_179":1074,"_101":1075},"ca95792c-1f92-11f1-943c-42dde27851f2","019cebf2-a8a6-7120-b164-2d493ac77e1f",["D",1773485074605],"---\nname: sync\ndescription: Coordination substrate for multi-agent systems. Two operations — read context, invoke actions. No direct state writes. Agents declare vocabulary, then act through it. Unified auth via passkey-minted scoped tokens. Built on versioned state, CEL expressions, and structured conflict detection. Base URL is https://sync.parc.land/.\n---\n\n# sync v7\n\nCoordination substrate for multi-agent systems at `https://sync.parc.land/`.\n\nTwo operations: **read context**, **invoke actions**. Everything else is wiring.\n\nThere is no `_set_state`. Agents declare write capabilities as actions, then invoke them.\nThe declaration is the commitment. The vocabulary is the protocol.\n\n---\n\n## Authentication\n\nPasskeys are the root of trust. Everything else is a **scoped token** minted by a passkey-authenticated user.\n\n### Quick start (CLI / scripts)\n\n```bash\n# 1. Initiate device auth\ncurl -s -X POST https://sync.parc.land/auth/device \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"scope\":\"rooms:* create_rooms\"}'\n# → { device_code, user_code, verification_uri_complete }\n\n# 2. Open the URL in browser, authenticate with passkey, approve scope\n\n# 3. Poll for token\ncurl -s -X POST https://sync.parc.land/auth/device/token \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"device_code\":\"dev_xxx\"}'\n# → { access_token: \"tok_xxx\", refresh_token: \"ref_xxx\", scope, expires_in }\n```\n\n### Quick start (MCP clients)\n\nMCP clients (Claude, ChatGPT, etc.) use OAuth 2.1 with PKCE + WebAuthn passkeys. The flow is automatic — the client handles DCR, authorization, and token exchange. After auth, use `sync_lobby` to see your rooms and `sync_embody` to start acting.\n\n### Token model\n\nOne token concept. Scope is the only knob.\n\n| Scope | Meaning |\n|-------|---------|\n| `rooms:*` | All rooms the user has access to |\n| `rooms:*:read` | All rooms, read-only |\n| `rooms:my-room` | Full access to a specific room |\n| `rooms:my-room:write` | Read + write |\n| `rooms:my-room:read` | Read-only (shareable dashboard link) |\n| `rooms:my-room:agent:alice` | Bound to agent alice (implies write) |\n| `create_rooms` | Can create new rooms |\n\nEffective access = `min(token.scope, user_rooms.role)`. A token can only narrow, never widen.\n\n### Token operations\n\n```\nPOST   /tokens              Mint a scoped token\nGET    /tokens              List your tokens\nPATCH  /tokens/:id          Update scope (bounded by your access)\nDELETE /tokens/:id           Revoke a token\nPOST   /tokens/refresh      Exchange refresh_token for new access_token\n```\n\n**Scope append on room creation:** When a `tok_` token with `create_rooms` creates a room, the system appends `rooms:` to that specific token's scope. Other tokens from the same user don't gain access — the scope string is the single source of truth.\n\n### Scope elevation (agent-initiated)\n\nWhen an agent hits `scope_denied`, the response includes a stateless elevation URL:\n\n```json\n{\n  \"error\": \"scope_denied\",\n  \"room\": \"kernel-ergonomics\",\n  \"elevate\": \"https://sync.parc.land/auth/elevate?token_id=xxx&room=kernel-ergonomics\",\n  \"hint\": \"Present the elevate URL to the user to request access, then retry.\"\n}\n```\n\nThe agent presents the URL to the user. The user opens it → passkey auth → choose access level (full/write/read) → approve. The server patches the token's scope. The agent retries and succeeds. No polling, no new tables — the URL is stateless.\n\nIn MCP, the same flow works — `sync_read_context` returns an error with the URL embedded.\n\n### Legacy tokens\n\nLegacy `room_`, `view_`, `as_` prefix tokens continue to work for backward compatibility.\n\n---\n\n## Core workflow\n\n### Step 1: Create a room\n\n```bash\ncurl -X POST https://sync.parc.land/rooms \\\n  -H \"Authorization: Bearer tok_xxx\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"id\":\"my-room\"}'\n# Room is auto-linked to your user as owner\n```\n\n### Step 2: Agents join\n\n```bash\ncurl -X POST https://sync.parc.land/rooms/my-room/agents \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"id\":\"alice\",\"name\":\"Alice\",\"role\":\"agent\"}'\n```\n\nOr via MCP: `sync_embody({ room: \"my-room\", name: \"Alice\" })`.\n\n### Step 3: Read context\n\n```bash\ncurl -H \"Authorization: Bearer tok_xxx\" \\\n  https://sync.parc.land/rooms/my-room/context\n```\n\nThe `_context.help` array tells you what to read next. In an empty room: `vocabulary_bootstrap`.\n\n### Step 4: Bootstrap vocabulary\n\nRead the standard library, register what you need:\n\n```\nPOST /rooms/my-room/actions/help/invoke\n{ \"params\": { \"key\": \"standard_library\" } }\n```\n\n```\nPOST /rooms/my-room/actions/_register_action/invoke\n{ \"params\": {\n    \"id\": \"submit_result\",\n    \"description\": \"Submit a result keyed to your identity\",\n    \"params\": { \"result\": { \"type\": \"any\" } },\n    \"writes\": [{ \"scope\": \"_shared\", \"key\": \"${self}.result\", \"value\": \"${params.result}\" }]\n}}\n```\n\n### Step 5: Invoke actions\n\n```\nPOST /rooms/my-room/actions/submit_result/invoke\nAuthorization: Bearer tok_xxx\n{ \"params\": { \"result\": \"42\" } }\n→ { \"invoked\": true, \"writes\": [{ \"scope\": \"_shared\", \"key\": \"alice.result\", \"value\": \"42\" }] }\n```\n\n### Step 6: Wait for conditions\n\n```\nGET /rooms/my-room/wait?condition=views[\"results\"].size()>0\n→ { \"triggered\": true, \"context\": { ... } }\n```\n\nThe ideal agent loop: wait → read context → act → repeat.\n\n---\n\n## Built-in actions\n\n| Action | Description | Key params |\n|--------|-------------|------------|\n| `_register_action` | Declare a write capability | `id`, `description`, `params`, `writes`, `if` |\n| `_delete_action` | Remove an action | `id` |\n| `_register_view` | Declare a read capability | `id`, `expr`, `scope`, `description`, `render` |\n| `_delete_view` | Remove a view | `id` |\n| `_send_message` | Send a message to the room | `body`, `kind`, `to` |\n| `help` | Read guidance documents | `key` |\n\nNo `_set_state`, `_heartbeat`, or `_renew_timer`. All writes through actions.\n\n---\n\n## Conflict detection\n\nWhen two actions write to the same `(scope, key)` target, the second registration returns:\n\n```json\n{\n  \"warning\": \"competing_write_targets\",\n  \"contested_targets\": [\"_shared:answer\"],\n  \"competing_actions\": [{ \"target\": \"_shared:answer\", \"actions\": [\"alice_submit\", \"bob_submit\"] }]\n}\n```\n\nWhen an action is **re-registered with different write templates** (vocabulary contestation):\n\n```json\n{\n  \"warning\": \"action_redefined\",\n  \"redefinition\": {\n    \"previous_registrant\": \"agent-a\",\n    \"writes_changed\": true,\n    \"invocation_count\": 3,\n    \"risk\": \"high — action has been invoked and write behavior changed\"\n  }\n}\n```\n\nThe `_contested` view appears in context automatically.\n\n---\n\n## API surface\n\n```\n── Auth ──\nPOST   /auth/device                        Initiate device auth\nGET    /auth/device                        Browser approval page (consent UI)\nPOST   /auth/device/token                  CLI polls for token\nGET    /auth/elevate                       Scope elevation page (consent UI)\nPOST   /auth/elevate/approve               Apply scope elevation\nPOST   /tokens                             Mint a scoped token\nGET    /tokens                             List your tokens\nPATCH  /tokens/:id                         Update token scope\nDELETE /tokens/:id                         Revoke a token\nPOST   /tokens/refresh                     Refresh token\n\n── OAuth / WebAuthn (MCP clients) ──\nGET    /.well-known/oauth-protected-resource   PRM discovery\nGET    /.well-known/oauth-authorization-server AS metadata\nPOST   /oauth/register                     Dynamic Client Registration\nGET    /oauth/authorize                    Consent page\nPOST   /oauth/token                        Token exchange\n\n── Room lifecycle ──\nPOST   /rooms                              Create room\nGET    /rooms                              List rooms\nGET    /rooms/:id                          Room info\nPOST   /rooms/:id/agents                   Join room\nPATCH  /rooms/:id/agents/:id               Update agent\nPOST   /rooms/:id/invite                   Invite user (owner-only)\nPOST   /rooms/:id/claim                    Claim orphaned room\n\n── Core (read + write) ──\nGET    /rooms/:id/context                  Read context (with shaping params)\nGET    /rooms/:id/wait                     Block until condition\nGET    /rooms/:id/poll                     Dashboard poll\nPOST   /rooms/:id/actions/:id/invoke       Invoke action (builtin + custom)\nPOST   /rooms/:id/eval                     CEL eval\n\n── Management ──\nGET    /manage                             Management UI (rooms, tokens, profile)\nPOST   /mcp                                MCP JSON-RPC 2.0\n\n── Docs ──\nGET    /docs                               Documentation index\nGET    /docs/:slug                         Rendered doc page\nGET    /SKILL.md                           Orchestrator skill doc\nGET    /reference/:doc                     Reference docs\n```\n\n---\n\n## MCP tools (18)\n\nWhen connected via MCP (OAuth), these tools are available:\n\n| Tool | Description |\n|------|-------------|\n| `sync_lobby` | Overview of rooms, agents, roles. Starting point. |\n| `sync_embody` | Commit to an agent in a room. |\n| `sync_disembody` | Release an agent. |\n| `sync_create_room` | Create a new room. |\n| `sync_list_rooms` | List accessible rooms. |\n| `sync_join_room` | Join a room as agent (low-level). |\n| `sync_read_context` | Read room context. |\n| `sync_invoke_action` | Invoke any action. |\n| `sync_wait` | Block until CEL condition. |\n| `sync_register_action` | Register a write capability. |\n| `sync_register_view` | Register a read capability. |\n| `sync_delete_action` | Remove an action. |\n| `sync_delete_view` | Remove a view. |\n| `sync_send_message` | Send a message. |\n| `sync_help` | Read help system. |\n| `sync_eval_cel` | Evaluate CEL expression. |\n| `sync_restrict_scope` | Narrow session scope. |\n| `sync_revoke_access` | Remove room from session. |\n\n---\n\n## Context shaping\n\n```\nGET /context?depth=lean          available + description only (default)\nGET /context?depth=full          + writes, params, if conditions\nGET /context?depth=usage         + invocation counts from audit\nGET /context?only=actions        just the actions section\nGET /context?only=state,messages multiple sections\nGET /context?messages=false      skip messages section\nGET /context?messages_after=42   messages after seq 42\n```\n\n---\n\n## Reference\n\n- [Architecture](reference/v6.md) — thesis, axioms, design rationale\n- [API Reference](reference/api.md) — all endpoints, request/response shapes\n- [CEL Reference](reference/cel.md) — expression language, context shape, patterns\n- [Views Reference](reference/views.md) — render hints, surface types\n- [Help Reference](reference/help.md) — help namespace, versioning, overrides\n- [Examples](reference/examples.md) — task queues, voting, private state\n",[],[759],{"_105":1077,"_97":1078,"_166":1079,"_168":-5,"_169":149,"_170":1080,"_171":172,"_107":1081,"_102":1082,"_174":356,"_176":1083,"_177":22,"_178":-5,"_179":1084,"_101":1085},"ec45b0f8-1ff8-11f1-869a-42dde27851f2","actions.ts","019cebf2-a8a6-7120-b164-3327e8964249",128,["D",1773528940137],7,"/**\n * actions.ts — Action registration, deletion, and helpers.\n *\n * v8: Actions are state. Definitions + timer cooldown state stored in _actions scope only.\n * Legacy actions table removed — all reads and writes go through state.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { json, rows2objects } from \"./utils.ts\";\nimport { validateCel } from \"./cel.ts\";\nimport { parseTimer, validateTimer } from \"./timers.ts\";\nimport { appendStructuralEvent } from \"./audit.ts\";\nimport type { AuthResult } from \"./auth.ts\";\n\n/**\n * Returns a map of \"scope:key\" → [actionId, ...] for any (scope, key) pair\n * that is the write target of two or more registered actions.\n */\nexport async function computeContestedTargets(roomId: string): Promise> {\n  const result = await sqlite.execute({\n    sql: `SELECT key, value FROM state WHERE room_id = ? AND scope = '_actions'`,\n    args: [roomId],\n  });\n  const rows = rows2objects(result);\n\n  const targets: Record = {};\n  for (const row of rows) {\n    let def: any;\n    try { def = JSON.parse(row.value as string); } catch { continue; }\n    const writes = Array.isArray(def.writes) ? def.writes : [];\n    for (const w of writes) {\n      const scope = w.scope ?? \"_shared\";\n      const key = w.key ?? null;\n      if (!key) continue;\n      const target = `${scope}:${key}`;\n      if (!targets[target]) targets[target] = [];\n      if (!targets[target].includes(row.key as string)) targets[target].push(row.key as string);\n    }\n  }\n\n  const contested: Record = {};\n  for (const [target, ids] of Object.entries(targets)) {\n    if (ids.length >= 2) contested[target] = ids;\n  }\n  return contested;\n}\n\nexport async function registerAction(roomId: string, body: any, auth: AuthResult) {\n  const id = body.id;\n  if (!id) return json({ error: \"id is required\" }, 400);\n  const scope = body.scope ?? \"_shared\";\n\n  // Scope ownership enforcement\n  if (scope !== \"_shared\") {\n    if (!auth.authenticated) return json({ error: \"authentication_required\", message: `scoped actions require auth` }, 401);\n    if (auth.kind !== \"room\" && !auth.grants.includes(\"*\") && auth.agentId !== scope) {\n      return json({ error: \"identity_mismatch\", message: `action scope \"${scope}\" requires authentication as \"${scope}\"` }, 403);\n    }\n  }\n\n  // Validate expressions\n  if (body.if) { const v = validateCel(body.if); if (!v.valid) return json({ error: \"invalid_cel\", field: \"if\", detail: v.error }, 400); }\n  if (body.enabled) { const v = validateCel(body.enabled); if (!v.valid) return json({ error: \"invalid_cel\", field: \"enabled\", detail: v.error }, 400); }\n  if (body.result) { const v = validateCel(body.result); if (!v.valid) return json({ error: \"invalid_cel\", field: \"result\", detail: v.error }, 400); }\n\n  if (body.timer) {\n    const tv = validateTimer(body.timer);\n    if (!tv.valid) return json({ error: \"invalid_timer\", detail: tv.error }, 400);\n  }\n  if (body.on_invoke?.timer) {\n    const tv = validateTimer(body.on_invoke.timer);\n    if (!tv.valid) return json({ error: \"invalid_timer\", field: \"on_invoke.timer\", detail: tv.error }, 400);\n  }\n\n  const writes = body.writes ?? [];\n  if (!Array.isArray(writes)) return json({ error: \"writes must be an array\" }, 400);\n  const registeredBy = scope !== \"_shared\" ? scope : (body.registered_by ?? (auth.authenticated ? auth.agentId : null));\n\n  // Check for semantic changes on re-registration\n  const writesJson = JSON.stringify(writes);\n  const paramsJson = body.params ? JSON.stringify(body.params) : null;\n  let reregistration: {\n    previousRegistrant: string | null;\n    writesChanged: boolean;\n    paramsChanged: boolean;\n    previousWrites: any[];\n    invocationCount: number;\n  } | null = null;\n\n  const existing = await sqlite.execute({\n    sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_actions' AND key = ?`,\n    args: [roomId, id],\n  });\n  if (existing.rows.length > 0) {\n    let prevDef: any = {};\n    try { prevDef = JSON.parse(existing.rows[0][0] as string); } catch {}\n    const prevWritesJson = JSON.stringify(prevDef.writes ?? []);\n    const prevParamsJson = prevDef.params ? JSON.stringify(prevDef.params) : null;\n    const writesChanged = prevWritesJson !== writesJson;\n    const paramsChanged = prevParamsJson !== paramsJson;\n\n    if (writesChanged || paramsChanged) {\n      let invocationCount = 0;\n      try {\n        const auditResult = await sqlite.execute({\n          sql: `SELECT COUNT(*) as cnt FROM state WHERE room_id = ? AND scope = '_audit' AND value LIKE ?`,\n          args: [roomId, `%\"action\":\"${id}\"%`],\n        });\n        invocationCount = Number(rows2objects(auditResult)[0]?.cnt ?? 0);\n      } catch {}\n\n      reregistration = {\n        previousRegistrant: prevDef.registered_by ?? null,\n        writesChanged, paramsChanged,\n        previousWrites: prevDef.writes ?? [],\n        invocationCount,\n      };\n    }\n  }\n\n  // Build timer state for initial registration\n  let timerState: any = null;\n  if (body.timer) {\n    const cols = parseTimer(body.timer);\n    timerState = {\n      timer_json: cols.timer_json,\n      timer_expires_at: cols.timer_expires_at,\n      timer_ticks_left: cols.timer_ticks_left,\n      timer_tick_on: cols.timer_tick_on,\n      timer_effect: cols.timer_effect,\n      timer_started_at: cols.timer_started_at,\n    };\n  }\n\n  // Write to _actions scope (single source of truth)\n  const actionDef = {\n    description: body.description ?? null,\n    if: body.if ?? null,\n    enabled: body.enabled ?? null,\n    result: body.result ?? null,\n    writes,\n    params: body.params ?? null,\n    scope,\n    registered_by: registeredBy,\n    timer: body.timer ?? null,\n    on_invoke: body.on_invoke ?? null,\n    _timer: timerState,  // mutable runtime timer state (updated on invoke)\n  };\n\n  await sqlite.execute({\n    sql: `INSERT INTO state (room_id, scope, key, value, version, revision, updated_at)\n          VALUES (?, '_actions', ?, ?, '', 1, datetime('now'))\n          ON CONFLICT(room_id, scope, key) DO UPDATE SET\n            value = excluded.value, revision = state.revision + 1, updated_at = datetime('now')`,\n    args: [roomId, id, JSON.stringify(actionDef)],\n  });\n\n  appendStructuralEvent(roomId, \"register_action\", auth.authenticated ? auth.agentId ?? null : null, {\n    id, scope, description: body.description ?? null,\n    if_expr: body.if ?? null, enabled_expr: body.enabled ?? null,\n    writes, params: body.params ?? null,\n  }).catch(() => {});\n\n  // Build response directly from input\n  const response: any = {\n    id, room_id: roomId, scope, description: body.description ?? null,\n    registered_by: registeredBy, writes, params: body.params ?? null,\n  };\n  if (body.if) response.if = body.if;\n  if (body.enabled) response.enabled = body.enabled;\n  if (body.result) response.result = body.result;\n  if (body.timer) response.timer = body.timer;\n  if (body.on_invoke) response.on_invoke = body.on_invoke;\n\n  // Check contested targets\n  const contested = await computeContestedTargets(roomId);\n  const myWrites = writes.map((w: any) => `${w.scope ?? \"_shared\"}:${w.key ?? \"\"}`).filter((t: string) => !t.endsWith(\":\"));\n  const myContested = myWrites.filter((t: string) => contested[t] && contested[t].length >= 2);\n\n  const warnings: string[] = [];\n  const warningDetails: Record = {};\n\n  if (myContested.length > 0) {\n    warnings.push(\"competing_write_targets\");\n    warningDetails.contested_targets = myContested;\n    warningDetails.competing_actions = myContested.map(t => ({ target: t, actions: contested[t] }));\n  }\n\n  if (reregistration) {\n    warnings.push(\"action_redefined\");\n    warningDetails.redefinition = {\n      previous_registrant: reregistration.previousRegistrant,\n      writes_changed: reregistration.writesChanged,\n      params_changed: reregistration.paramsChanged,\n      invocation_count: reregistration.invocationCount,\n      previous_writes: reregistration.previousWrites,\n      risk: reregistration.invocationCount > 0 && reregistration.writesChanged\n        ? \"high — action has been invoked and write behavior changed\"\n        : reregistration.writesChanged\n        ? \"medium — write behavior changed\"\n        : \"low — parameter schema changed but write targets unchanged\",\n    };\n  }\n\n  if (warnings.length > 0) {\n    return json({ ...response, warning: warnings.length === 1 ? warnings[0] : warnings, ...warningDetails, help: \"contested_actions\" }, 201);\n  }\n\n  return json(response, 201);\n}\n\nexport async function deleteAction(roomId: string, actionId: string, auth: AuthResult) {\n  const existing = await sqlite.execute({\n    sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_actions' AND key = ?`,\n    args: [roomId, actionId],\n  });\n  if (existing.rows.length === 0) return json({ error: \"action not found\" }, 404);\n  let def: any = {};\n  try { def = JSON.parse(existing.rows[0][0] as string); } catch {}\n  const scope = def.scope ?? \"_shared\";\n  if (scope !== \"_shared\") {\n    if (auth.kind !== \"room\" && !auth.grants.includes(\"*\") && auth.agentId !== scope) {\n      return json({ error: \"action_owned\", message: `action \"${actionId}\" owned by \"${scope}\"`, owner: scope }, 403);\n    }\n  }\n  await sqlite.execute({ sql: `DELETE FROM state WHERE room_id = ? AND scope = '_actions' AND key = ?`, args: [roomId, actionId] });\n  appendStructuralEvent(roomId, \"delete_action\", auth.authenticated ? auth.agentId ?? null : null, { id: actionId }).catch(() => {});\n  return json({ deleted: true, id: actionId });\n}\n",[],[1078],{"_105":1087,"_97":1088,"_166":1089,"_168":-5,"_169":149,"_170":1090,"_171":172,"_107":1091,"_102":1092,"_174":356,"_176":1093,"_177":22,"_178":-5,"_179":1094,"_101":1095},"f6d68472-1ffb-11f1-866c-42dde27851f2","agents.ts","019cebf2-a8a6-7120-b164-34c18072b3bb",141,["D",1773530246316],9,"/**\n * agents.ts — Agent lifecycle management.\n *\n * v8: Agent presence in _agents scope, auth tokens in tokens table.\n * Legacy agents table removed from write path.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { json, rows2objects } from \"./utils.ts\";\nimport { generateToken, hashToken } from \"./auth.ts\";\nimport { validateCel } from \"./cel.ts\";\nimport { appendStructuralEvent } from \"./audit.ts\";\n\nexport async function joinRoom(roomId: string, body: any, req: Request) {\n  const id = body.id ?? crypto.randomUUID();\n  const name = body.name ?? \"anonymous\";\n  const role = body.role ?? \"agent\";\n  const meta = body.meta ?? {};\n  const enabled_expr = body.enabled ?? null;\n  const token = generateToken(\"as\");\n  const hash = await hashToken(token);\n\n  if (enabled_expr) {\n    const v = validateCel(enabled_expr);\n    if (!v.valid) return json({ error: \"invalid_cel\", field: \"enabled\", detail: v.error }, 400);\n  }\n\n  // Check for existing agent — re-join requires matching token\n  const existingToken = await sqlite.execute({\n    sql: `SELECT token_hash FROM tokens WHERE room_id = ? AND agent_id = ? AND revoked = 0 LIMIT 1`,\n    args: [roomId, id],\n  });\n  if (existingToken.rows.length > 0) {\n    const existingHash = existingToken.rows[0][0] as string;\n    const header = req.headers.get(\"Authorization\");\n    if (!header || !header.startsWith(\"Bearer \")) {\n      return json({ error: \"agent_exists\", message: `agent \"${id}\" already registered — include Authorization: Bearer  to re-join`, agent: id }, 409);\n    }\n    const callerToken = header.slice(7);\n    const callerHash = await hashToken(callerToken);\n    if (callerHash !== existingHash) {\n      // Check if it's a room token\n      const roomCheck = await sqlite.execute({\n        sql: `SELECT id FROM rooms WHERE id = ? AND token_hash = ?`,\n        args: [roomId, callerHash],\n      });\n      if (roomCheck.rows.length === 0) {\n        return json({ error: \"invalid_token\", message: `token does not match agent \"${id}\" — cannot re-join`, agent: id }, 401);\n      }\n    }\n    // Re-join: revoke old token, mint new one\n    await sqlite.execute({\n      sql: `UPDATE tokens SET revoked = 1 WHERE room_id = ? AND agent_id = ? AND revoked = 0`,\n      args: [roomId, id],\n    });\n  }\n\n  // Create token in tokens table\n  const tokenId = `agent_${roomId}_${id}_${Date.now()}`;\n  const scope = `rooms:${roomId}:agent:${id}:write`;\n  await sqlite.execute({\n    sql: `INSERT INTO tokens (id, token_hash, minted_by, scope, room_id, agent_id, label, last_used_at, created_at)\n          VALUES (?, ?, ?, ?, ?, ?, ?, datetime('now'), datetime('now'))`,\n    args: [tokenId, hash, \"agent_join\", scope, roomId, id, `Agent ${name}`],\n  });\n\n  const now = new Date().toISOString();\n\n  // Write to _agents scope (single source of truth for presence)\n  const agentDef = {\n    name, role, status: \"active\",\n    grants: [], last_heartbeat: now,\n    joined_at: now, token_id: tokenId,\n    last_seen_seq: 0,\n    ...(Object.keys(meta).length > 0 ? { meta } : {}),\n  };\n  await sqlite.execute({\n    sql: `INSERT INTO state (room_id, scope, key, value, version, revision, updated_at)\n          VALUES (?, '_agents', ?, ?, '', 1, datetime('now'))\n          ON CONFLICT(room_id, scope, key) DO UPDATE SET\n            value = excluded.value, revision = state.revision + 1, updated_at = datetime('now')`,\n    args: [roomId, id, JSON.stringify(agentDef)],\n  });\n\n  // Inline initial state\n  if (body.state && typeof body.state === \"object\") {\n    const statements: any[] = [];\n    for (const [key, value] of Object.entries(body.state)) {\n      const strValue = typeof value === \"string\" ? value : JSON.stringify(value);\n      statements.push({\n        sql: `INSERT INTO state (room_id, scope, key, value, version, updated_at)\n              VALUES (?, ?, ?, ?, 1, datetime('now'))\n              ON CONFLICT(room_id, scope, key) DO UPDATE SET\n                value = excluded.value, version = version + 1, updated_at = datetime('now')`,\n        args: [roomId, id, key, strValue],\n      });\n      if (body.public_keys?.includes(key)) {\n        const viewId = `${id}.${key}`;\n        const expr = `state[\"${id}\"][\"${key}\"]`;\n        const viewDef = JSON.stringify({\n          expr, description: `auto: ${id}.${key}`, scope: id,\n          registered_by: id, deps: [], render: null, enabled: null, timer: null,\n        });\n        statements.push({\n          sql: `INSERT INTO state (room_id, scope, key, value, version, revision, updated_at)\n                VALUES (?, '_views', ?, ?, '', 1, datetime('now'))\n                ON CONFLICT(room_id, scope, key) DO UPDATE SET\n                  value = excluded.value, revision = state.revision + 1, updated_at = datetime('now')`,\n          args: [roomId, viewId, viewDef],\n        });\n      }\n    }\n    if (statements.length > 0) await sqlite.batch(statements);\n  }\n\n  // Inline views (v8: _views scope only)\n  if (Array.isArray(body.views)) {\n    const viewStatements: any[] = [];\n    for (const v of body.views) {\n      if (!v.id || !v.expr) continue;\n      const vv = validateCel(v.expr);\n      if (!vv.valid) continue;\n      const viewDef = JSON.stringify({\n        expr: v.expr, description: v.description ?? null, scope: id,\n        registered_by: id, deps: [], render: null, enabled: null, timer: null,\n      });\n      viewStatements.push({\n        sql: `INSERT INTO state (room_id, scope, key, value, version, revision, updated_at)\n              VALUES (?, '_views', ?, ?, '', 1, datetime('now'))\n              ON CONFLICT(room_id, scope, key) DO UPDATE SET\n                value = excluded.value, revision = state.revision + 1, updated_at = datetime('now')`,\n        args: [roomId, v.id, viewDef],\n      });\n    }\n    if (viewStatements.length > 0) await sqlite.batch(viewStatements);\n  }\n\n  appendStructuralEvent(roomId, \"agent_join\", id, {\n    id, name, role, grants: [],\n    state: body.state && typeof body.state === \"object\" ? body.state : undefined,\n  }).catch(() => {});\n\n  return json({\n    id, room_id: roomId, name, role, joined_at: now,\n    meta: JSON.stringify(meta), last_heartbeat: now,\n    status: \"active\", waiting_on: null, enabled_expr: null,\n    grants: \"[]\", last_seen_seq: 0, token,\n  }, 201);\n}\n\n/** Create or re-activate an agent without HTTP request auth.\n *  Trust boundary: caller is responsible for authorization.\n *  Used by MCP embodiment where trust source is smcp_user_rooms, not a room token. */\nexport async function insertAgentDirect(\n  roomId: string,\n  params: {\n    id: string;\n    name: string;\n    role?: string;\n    meta?: Record;\n    grants?: string[];\n    state?: Record;\n    publicKeys?: string[];\n    views?: Array<{ id: string; expr: string; description?: string }>;\n  },\n): Promise<{ agentId: string; token: string }> {\n  const id = params.id;\n  const name = params.name;\n  const role = params.role ?? \"agent\";\n  const meta = params.meta ?? {};\n  const grants = params.grants ?? [];\n  const token = generateToken(\"as\");\n  const hash = await hashToken(token);\n\n  // Revoke existing tokens for this agent\n  await sqlite.execute({\n    sql: `UPDATE tokens SET revoked = 1 WHERE room_id = ? AND agent_id = ? AND revoked = 0`,\n    args: [roomId, id],\n  });\n\n  // Create token\n  const tokenId = `agent_${roomId}_${id}_${Date.now()}`;\n  const scope = `rooms:${roomId}:agent:${id}:write`;\n  await sqlite.execute({\n    sql: `INSERT INTO tokens (id, token_hash, minted_by, scope, room_id, agent_id, label, last_used_at, created_at)\n          VALUES (?, ?, ?, ?, ?, ?, ?, datetime('now'), datetime('now'))`,\n    args: [tokenId, hash, \"mcp_embody\", scope, roomId, id, `Agent ${name}`],\n  });\n\n  const now = new Date().toISOString();\n\n  // Write to _agents scope\n  const agentDef = {\n    name, role, status: \"active\",\n    grants, last_heartbeat: now,\n    joined_at: now, token_id: tokenId,\n    last_seen_seq: 0,\n    ...(Object.keys(meta).length > 0 ? { meta } : {}),\n  };\n  await sqlite.execute({\n    sql: `INSERT INTO state (room_id, scope, key, value, version, revision, updated_at)\n          VALUES (?, '_agents', ?, ?, '', 1, datetime('now'))\n          ON CONFLICT(room_id, scope, key) DO UPDATE SET\n            value = excluded.value, revision = state.revision + 1, updated_at = datetime('now')`,\n    args: [roomId, id, JSON.stringify(agentDef)],\n  });\n\n  // Inline initial state\n  if (params.state && typeof params.state === \"object\") {\n    const stmts: any[] = [];\n    for (const [key, value] of Object.entries(params.state)) {\n      const strValue = typeof value === \"string\" ? value : JSON.stringify(value);\n      stmts.push({\n        sql: `INSERT INTO state (room_id, scope, key, value, version, revision, updated_at)\n              VALUES (?, ?, ?, ?, '', 1, datetime('now'))\n              ON CONFLICT(room_id, scope, key) DO UPDATE SET\n                value = excluded.value, revision = state.revision + 1, updated_at = datetime('now')`,\n        args: [roomId, id, key, strValue],\n      });\n      if (params.publicKeys?.includes(key)) {\n        const viewId = `${id}.${key}`;\n        const expr = `state[\"${id}\"][\"${key}\"]`;\n        const viewDef = JSON.stringify({\n          expr, description: `auto: ${id}.${key}`, scope: id,\n          registered_by: id, deps: [], render: null, enabled: null, timer: null,\n        });\n        stmts.push({\n          sql: `INSERT INTO state (room_id, scope, key, value, version, revision, updated_at)\n                VALUES (?, '_views', ?, ?, '', 1, datetime('now'))\n                ON CONFLICT(room_id, scope, key) DO UPDATE SET\n                  value = excluded.value, revision = state.revision + 1, updated_at = datetime('now')`,\n          args: [roomId, viewId, viewDef],\n        });\n      }\n    }\n    if (stmts.length > 0) await sqlite.batch(stmts);\n  }\n\n  // Inline views (v8: _views scope only)\n  if (Array.isArray(params.views)) {\n    const stmts: any[] = [];\n    for (const v of params.views) {\n      if (!v.id || !v.expr) continue;\n      const viewDef = JSON.stringify({\n        expr: v.expr, description: v.description ?? null, scope: id,\n        registered_by: id, deps: [], render: null, enabled: null, timer: null,\n      });\n      stmts.push({\n        sql: `INSERT INTO state (room_id, scope, key, value, version, revision, updated_at)\n              VALUES (?, '_views', ?, ?, '', 1, datetime('now'))\n              ON CONFLICT(room_id, scope, key) DO UPDATE SET\n                value = excluded.value, revision = state.revision + 1, updated_at = datetime('now')`,\n        args: [roomId, v.id, viewDef],\n      });\n    }\n    if (stmts.length > 0) await sqlite.batch(stmts);\n  }\n\n  return { agentId: id, token };\n}\n\nexport async function updateAgent(roomId: string, agentId: string, body: any) {\n  // Read current _agents scope entry\n  const existing = await sqlite.execute({\n    sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n    args: [roomId, agentId],\n  });\n  if (existing.rows.length === 0) return json({ error: \"agent not found\" }, 404);\n  let current: any = {};\n  try { current = JSON.parse(existing.rows[0][0] as string); } catch {}\n\n  // Apply updates\n  if (body.grants !== undefined) current.grants = body.grants;\n  if (body.role !== undefined) current.role = body.role;\n  if (body.name !== undefined) current.name = body.name;\n  if (body.meta !== undefined) current.meta = body.meta;\n\n  await sqlite.execute({\n    sql: `UPDATE state SET value = ?, revision = revision + 1, updated_at = datetime('now')\n          WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n    args: [JSON.stringify(current), roomId, agentId],\n  });\n\n  const changes: Record = {};\n  if (body.grants !== undefined) changes.grants = body.grants;\n  if (body.role !== undefined) changes.role = body.role;\n  if (body.name !== undefined) changes.name = body.name;\n  appendStructuralEvent(roomId, \"agent_update\", agentId, { id: agentId, changes }).catch(() => {});\n\n  // Return compatible shape\n  return json({\n    id: agentId, room_id: roomId, name: current.name, role: current.role,\n    status: current.status, last_heartbeat: current.last_heartbeat,\n    grants: JSON.stringify(current.grants ?? []), joined_at: current.joined_at,\n  });\n}\n\n\n// ── Shared helpers used by MCP tools ──\n\n/** Release an agent: set idle and clear any role filled_by referencing it.\n *  Used by embody (switch), disembody, restrict_scope, revoke_access. */\nexport async function releaseAgent(roomId: string, agentId: string) {\n  // Update _agents scope entry\n  try {\n    const result = await sqlite.execute({\n      sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n      args: [roomId, agentId],\n    });\n    if (result.rows.length > 0) {\n      const current = JSON.parse(result.rows[0][0] as string);\n      current.status = \"idle\";\n      delete current.waiting_on;\n      await sqlite.execute({\n        sql: `UPDATE state SET value = ?, revision = revision + 1, updated_at = datetime('now')\n              WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n        args: [JSON.stringify(current), roomId, agentId],\n      });\n    }\n  } catch {}\n  // Clear role filled_by\n  await sqlite.execute({\n    sql: `UPDATE state SET\n            value = json_set(value, '$.filled_by', json('null')),\n            revision = revision + 1, updated_at = datetime('now')\n          WHERE room_id = ? AND scope = '_shared' AND key LIKE 'roles.%'\n          AND json_extract(value, '$.filled_by') = ?`,\n    args: [roomId, agentId],\n  });\n}\n\n/** Fetch role definitions from _shared state for a room.\n *  Returns a map of roleId → parsed role definition object. */\nexport async function fetchRoomRoles(roomId: string): Promise> {\n  const rolesResult = await sqlite.execute({\n    sql: `SELECT key, value FROM state\n          WHERE room_id = ? AND scope = '_shared' AND key LIKE 'roles.%'`,\n    args: [roomId],\n  });\n  const roles: Record = {};\n  for (const r of rolesResult.rows) {\n    const roleId = (r[0] as string).replace(\"roles.\", \"\");\n    try { roles[roleId] = JSON.parse(r[1] as string); } catch {}\n  }\n  return roles;\n}\n",[],[1088],{"_105":1097,"_97":1098,"_166":1099,"_168":-5,"_169":149,"_170":1100,"_171":172,"_107":1101,"_102":483,"_174":356,"_176":1102,"_177":22,"_178":-5,"_179":1103,"_101":1104},"0da20284-1f9e-11f1-b937-42dde27851f2","audit.ts","019cebf2-a8a6-7120-b164-3b584a633192",31,["D",1773489911905],"/**\n * audit.ts — Fire-and-forget audit logging for sync rooms.\n *\n * Two entry types:\n * - Invocation entries (kind=\"invoke\"): action invocations with effect.writes for replay\n * - Structural entries: agent join/update, action/view register/delete\n *\n * Both are appended to the _audit scope in room state. Never throws.\n *\n * v8: Also populates log_index for key-based temporal queries.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { rows2objects } from \"./utils.ts\";\nimport { indexLogEntry } from \"./schema-v8.ts\";\n\n/** Append a structured audit entry to the _audit scope (fire-and-forget).\n *\n * Entry shape (v2):\n *   kind: \"invoke\" (default, backward-compatible) | structural event kinds\n *   ts, agent, ok — always present\n *   action, builtin, params — present for kind=\"invoke\"\n *   effect.writes — resolved {scope, key, value} tuples for kind=\"invoke\" (enables replay)\n *\n * Old entries without `kind` are treated as kind=\"invoke\" during replay reconstruction. */\nexport async function appendAuditEntry(\n  roomId: string,\n  agent: string | null,\n  action: string,\n  builtin: boolean,\n  params: Record,\n  status: number,\n  executedWrites?: Array<{ scope: string; key: string; value?: any }>,\n) {\n  try {\n    const seqResult = await sqlite.execute({\n      sql: `SELECT COALESCE(MAX(sort_key), 0) + 1 as next_seq FROM state WHERE room_id = ? AND scope = '_audit'`,\n      args: [roomId],\n    });\n    const seq = Number(rows2objects(seqResult)[0]?.next_seq ?? 1);\n    const entry: Record = {\n      ts: new Date().toISOString(),\n      kind: \"invoke\",\n      agent: agent ?? \"admin\",\n      action,\n      builtin,\n      params,\n      ok: status < 400,\n    };\n    if (executedWrites && executedWrites.length > 0 && status < 400) {\n      entry.effect = { writes: executedWrites };\n    }\n    await sqlite.execute({\n      sql: `INSERT INTO state (room_id, scope, key, sort_key, value, version, updated_at)\n            VALUES (?, '_audit', ?, ?, ?, 1, datetime('now'))`,\n      args: [roomId, String(seq), seq, JSON.stringify(entry)],\n    });\n\n    // v8: populate log_index for key-based temporal queries\n    const affectedKeys: Array<{ scope: string; key: string }> = [];\n    if (executedWrites && executedWrites.length > 0 && status < 400) {\n      for (const w of executedWrites) {\n        if (w.scope && w.key) affectedKeys.push({ scope: w.scope, key: w.key });\n      }\n    }\n    indexLogEntry(roomId, seq, affectedKeys).catch(() => {});\n  } catch {}\n}\n\n/** Append a structural audit event (agent join/update, action/view register/delete).\n *  These are the schema-change half of replay: they capture what entities existed\n *  at each point in time so reconstruction has the right agents, actions, and views.\n *\n *  `kind` discriminates the event. `schema` contains the full definition needed to\n *  reconstruct the entity. Fire-and-forget, never throws. */\nexport async function appendStructuralEvent(\n  roomId: string,\n  kind: \"agent_join\" | \"agent_update\" | \"register_action\" | \"register_view\" | \"delete_action\" | \"delete_view\",\n  agent: string | null,\n  schema: Record,\n) {\n  try {\n    const seqResult = await sqlite.execute({\n      sql: `SELECT COALESCE(MAX(sort_key), 0) + 1 as next_seq FROM state WHERE room_id = ? AND scope = '_audit'`,\n      args: [roomId],\n    });\n    const seq = Number(rows2objects(seqResult)[0]?.next_seq ?? 1);\n    const entry = JSON.stringify({\n      ts: new Date().toISOString(),\n      kind,\n      agent: agent ?? \"admin\",\n      ok: true,\n      schema,\n    });\n    await sqlite.execute({\n      sql: `INSERT INTO state (room_id, scope, key, sort_key, value, version, updated_at)\n            VALUES (?, '_audit', ?, ?, ?, 1, datetime('now'))`,\n      args: [roomId, String(seq), seq, entry],\n    });\n\n    // v8: populate log_index for structural events\n    const affectedKeys: Array<{ scope: string; key: string }> = [];\n    if (schema.id) {\n      if (kind.includes(\"action\")) {\n        affectedKeys.push({ scope: \"_actions\", key: schema.id });\n      } else if (kind.includes(\"view\")) {\n        affectedKeys.push({ scope: \"_views\", key: schema.id });\n      } else if (kind === \"agent_join\" || kind === \"agent_update\") {\n        affectedKeys.push({ scope: \"_agents\", key: schema.id });\n      }\n    }\n    // Also index any state keys mentioned in the schema (e.g. action write targets)\n    if (schema.writes && Array.isArray(schema.writes)) {\n      for (const w of schema.writes) {\n        if (w.scope && w.key && !w.key.includes(\"${\")) {\n          affectedKeys.push({ scope: w.scope, key: w.key });\n        }\n      }\n    }\n    indexLogEntry(roomId, seq, affectedKeys).catch(() => {});\n  } catch {}\n}\n",[],[1098],{"_105":1106,"_97":1107,"_166":1108,"_168":-5,"_169":149,"_170":1109,"_171":172,"_107":1110,"_102":1111,"_174":356,"_176":1112,"_177":22,"_178":-5,"_179":1113,"_101":1114},"b10c7bcc-1ffb-11f1-8111-42dde27851f2","auth.ts","019cebf2-a8a6-7120-b164-3df1880a06d7",136,["D",1773530129262],3,"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { json, rows2objects } from \"./utils.ts\";\nimport {\n  parseScope, matchRoom, roleToLevel, minLevel, canWrite as scopeCanWrite,\n  canAdmin as scopeCanAdmin, type ScopeLevel,\n} from \"./mcp/scope.ts\";\n\n/**\n * Auth module — unified auth model (v7 Phase 1).\n *\n * Supports BOTH legacy tokens (room_, view_, as_) and unified tokens (tok_).\n * Legacy tokens resolve through rooms/agents tables (unchanged).\n * Unified tokens resolve through the `tokens` table + `smcp_user_rooms`.\n *\n * AuthResult is backward-compatible: existing checks on kind/grants continue to work.\n * New fields (userId, role) are available for new code.\n */\n\n// ============ Token generation and hashing ============\n\nexport async function hashToken(token: string): Promise {\n  const data = new TextEncoder().encode(token);\n  const hash = await crypto.subtle.digest(\"SHA-256\", data);\n  return Array.from(new Uint8Array(hash)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/** SHA-256 as base64url (used by mcp/db.ts for tokens table). */\nexport async function hashTokenB64(token: string): Promise {\n  const data = new TextEncoder().encode(token);\n  const hash = await crypto.subtle.digest(\"SHA-256\", data);\n  const bytes = new Uint8Array(hash);\n  return btoa(String.fromCharCode(...bytes))\n    .replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=/g, \"\");\n}\n\nexport function generateToken(prefix: \"room\" | \"view\" | \"as\" = \"as\"): string {\n  const bytes = new Uint8Array(24);\n  crypto.getRandomValues(bytes);\n  return `${prefix}_` + Array.from(bytes).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n// ============ Auth resolution ============\n\nexport interface AuthResult {\n  authenticated: boolean;\n  kind: \"room\" | \"view\" | \"agent\" | null;\n  agentId: string | null;\n  roomId: string | null;\n  grants: string[];  // scopes this identity can direct-write\n\n  // ── v7 unified auth fields (null for legacy tokens) ──\n  userId?: string | null;\n  tokenId?: string | null;\n  role?: ScopeLevel | null;\n}\n\nconst UNAUTH: AuthResult = { authenticated: false, kind: null, agentId: null, roomId: null, grants: [] };\n\n/**\n * Resolve auth from request headers. Returns AuthResult or a Response (error).\n */\nexport async function resolveAuth(req: Request, roomId: string): Promise {\n  const header = req.headers.get(\"Authorization\");\n  if (!header || !header.startsWith(\"Bearer \")) {\n    return UNAUTH;\n  }\n  return resolveAuthFromToken(header.slice(7), roomId);\n}\n\n/**\n * Resolve auth from a raw token string (no HTTP request needed).\n * Handles both legacy tokens (room_, view_, as_) and unified tokens (tok_).\n */\nexport async function resolveAuthFromToken(token: string, roomId: string): Promise {\n  // ── Unified token path (tok_ prefix) ──\n  if (token.startsWith(\"tok_\") || token.startsWith(\"smcp_at_\")) {\n    return resolveUnifiedToken(token, roomId);\n  }\n\n  // ── Legacy paths (unchanged) ──\n  const hash = await hashToken(token);\n\n  // Check room token\n  if (token.startsWith(\"room_\")) {\n    const roomResult = await sqlite.execute({\n      sql: `SELECT id FROM rooms WHERE id = ? AND token_hash = ?`,\n      args: [roomId, hash],\n    });\n    if (roomResult.rows.length > 0) {\n      return { authenticated: true, kind: \"room\", agentId: null, roomId, grants: [\"*\"] };\n    }\n    return json({ error: \"invalid_token\", message: \"room token does not match\" }, 401);\n  }\n\n  // Check view token\n  if (token.startsWith(\"view_\")) {\n    const roomResult = await sqlite.execute({\n      sql: `SELECT id FROM rooms WHERE id = ? AND view_token_hash = ?`,\n      args: [roomId, hash],\n    });\n    if (roomResult.rows.length > 0) {\n      return { authenticated: true, kind: \"view\", agentId: null, roomId, grants: [] };\n    }\n    return json({ error: \"invalid_token\", message: \"view token does not match\" }, 401);\n  }\n\n  // Check agent token (as_ or any unknown prefix) — v8: tokens table\n  const agentResult = await sqlite.execute({\n    sql: `SELECT agent_id, scope, room_id FROM tokens WHERE token_hash = ? AND room_id = ? AND revoked = 0`,\n    args: [hash, roomId],\n  });\n  if (agentResult.rows.length === 0) {\n    return json({ error: \"invalid_token\", message: \"bearer token does not match any agent in this room\" }, 401);\n  }\n  const agentId = agentResult.rows[0][0] as string;\n  // Derive grants from scope + agent_id\n  let grants: string[] = [agentId];\n  // Legacy compatibility: check if _agents scope has explicit grants\n  try {\n    const scopeResult = await sqlite.execute({\n      sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n      args: [roomId, agentId],\n    });\n    if (scopeResult.rows.length > 0) {\n      const def = JSON.parse(scopeResult.rows[0][0] as string);\n      if (Array.isArray(def.grants) && def.grants.length > 0) {\n        grants = [agentId, ...def.grants.filter((g: string) => g !== agentId)];\n      }\n    }\n  } catch {}\n\n  return { authenticated: true, kind: \"agent\", agentId, roomId, grants };\n}\n\n// ============ Unified token resolution (v7) ============\n\n/**\n * Resolve a unified token (tok_ or smcp_at_) against the tokens table.\n *\n * Flow: token → tokens table → user_rooms → scope intersection → embodiment check.\n * Returns backward-compatible AuthResult with v7 extensions.\n */\nasync function resolveUnifiedToken(token: string, roomId: string): Promise {\n  // Hash with the same algorithm mcp/db.ts uses (base64url SHA-256)\n  const hash = await hashTokenB64(token);\n\n  // 1. Token lookup\n  const tokenResult = await sqlite.execute({\n    sql: `SELECT id, minted_by, scope, room_id, agent_id\n          FROM tokens\n          WHERE token_hash = ? AND revoked = 0\n            AND (expires_at IS NULL OR expires_at > datetime('now'))`,\n    args: [hash],\n  });\n\n  // Also check legacy smcp_access_tokens for smcp_at_ backward compat\n  if (tokenResult.rows.length === 0 && token.startsWith(\"smcp_at_\")) {\n    return resolveSmcpAccessToken(token, roomId, hash);\n  }\n\n  if (tokenResult.rows.length === 0) {\n    return json({ error: \"invalid_token\", message: \"token not found, expired, or revoked\" }, 401);\n  }\n\n  const tok = {\n    id: tokenResult.rows[0][0] as string,\n    mintedBy: tokenResult.rows[0][1] as string,\n    scope: tokenResult.rows[0][2] as string,\n    roomId: tokenResult.rows[0][3] as string | null,\n    agentId: tokenResult.rows[0][4] as string | null,\n  };\n\n  // 2. Scope check: does this token grant access to the requested room?\n  const parsed = parseScope(tok.scope);\n  const roomMatch = matchRoom(parsed, roomId);\n  if (!roomMatch) {\n    // Build stateless elevation URL for the agent to present to the user\n    const elevateUrl = `https://sync.parc.land/auth/elevate?token_id=${encodeURIComponent(tok.id)}&room=${encodeURIComponent(roomId)}`;\n    return json({\n      error: \"scope_denied\",\n      message: `Token scope does not include room \"${roomId}\"`,\n      room: roomId,\n      elevate: elevateUrl,\n      hint: \"Present the elevate URL to the user to request access, then retry.\",\n    }, 403);\n  }\n\n  // 3. User's actual room role\n  const userRoomResult = await sqlite.execute({\n    sql: `SELECT access FROM smcp_user_rooms WHERE user_id = ? AND room_id = ?`,\n    args: [tok.mintedBy, roomId],\n  });\n\n  let userRole: ScopeLevel = \"read\"; // default if no user_rooms entry\n  if (userRoomResult.rows.length > 0) {\n    userRole = roleToLevel(userRoomResult.rows[0][0] as string);\n  }\n\n  // 4. Intersect scope with user's actual role\n  const effectiveLevel = minLevel(roomMatch.level, userRole);\n\n  // 5. Agent resolution\n  let agentId = roomMatch.agentId ?? tok.agentId ?? null;\n\n  // If no agent from scope, check embodiment\n  if (!agentId) {\n    const embodimentResult = await sqlite.execute({\n      sql: `SELECT agent_id FROM smcp_embodiments\n            WHERE session_hash = ? AND room_id = ?`,\n      args: [hash, roomId],\n    });\n    if (embodimentResult.rows.length > 0) {\n      agentId = embodimentResult.rows[0][0] as string;\n    }\n  }\n\n  // 6. Map to backward-compatible AuthResult\n  const isAdmin = scopeCanAdmin(effectiveLevel);\n  const isWrite = scopeCanWrite(effectiveLevel);\n  const isReadOnly = !isWrite;\n\n  let kind: \"room\" | \"view\" | \"agent\";\n  let grants: string[];\n\n  if (isAdmin) {\n    kind = \"room\";\n    grants = [\"*\"];\n  } else if (isReadOnly) {\n    kind = \"view\";\n    grants = [];\n  } else if (agentId) {\n    kind = \"agent\";\n    grants = [agentId, \"_shared\"];\n  } else {\n    // Write-capable but no agent — treat as view until embodied\n    kind = \"view\";\n    grants = [];\n  }\n\n  return {\n    authenticated: true,\n    kind,\n    agentId,\n    roomId,\n    grants,\n    // v7 extensions\n    userId: tok.mintedBy,\n    tokenId: tok.id,\n    role: effectiveLevel,\n  };\n}\n\n/**\n * Backward-compat fallback: resolve smcp_at_ tokens from old smcp_access_tokens table.\n * This path exists so existing MCP sessions don't break during Phase 1.\n */\nasync function resolveSmcpAccessToken(token: string, roomId: string, _hash: string): Promise {\n  // Delegate to the old MCP path — return as view-level (observe) for safety\n  // The MCP handler will resolve embodiment separately\n  const result = await sqlite.execute({\n    sql: `SELECT user_id FROM smcp_access_tokens WHERE token = ? AND expires_at > datetime('now')`,\n    args: [token],\n  });\n  if (result.rows.length === 0) {\n    return json({ error: \"invalid_token\", message: \"token not found or expired\" }, 401);\n  }\n  const userId = result.rows[0][0] as string;\n\n  // Check user_rooms\n  const userRoomResult = await sqlite.execute({\n    sql: `SELECT access FROM smcp_user_rooms WHERE user_id = ? AND room_id = ?`,\n    args: [userId, roomId],\n  });\n  if (userRoomResult.rows.length === 0) {\n    return { authenticated: true, kind: \"view\", agentId: null, roomId, grants: [], userId };\n  }\n  const role = userRoomResult.rows[0][0] as string;\n  const level = roleToLevel(role);\n\n  if (scopeCanAdmin(level)) {\n    return { authenticated: true, kind: \"room\", agentId: null, roomId, grants: [\"*\"], userId };\n  }\n  return { authenticated: true, kind: \"view\", agentId: null, roomId, grants: [], userId };\n}\n\n// ============ Authorization checks ============\n\nexport function checkScopeAuthority(auth: AuthResult, scope: string): Response | null {\n  if (!auth.authenticated) {\n    return json({ error: \"authentication_required\", message: \"include Authorization: Bearer \" }, 401);\n  }\n  if (auth.grants.includes(\"*\")) return null;\n  if (auth.grants.includes(scope)) return null;\n  return json({\n    error: \"scope_denied\",\n    message: `no authority over scope \"${scope}\"`,\n    grants: auth.grants,\n    scope,\n  }, 403);\n}\n\nexport function assertIdentity(auth: AuthResult, claimedAgent: string | null): Response | null {\n  if (!auth.authenticated) return null;\n  if (!claimedAgent) return null;\n  if (auth.kind === \"room\") return null;\n  if (auth.agentId === claimedAgent) return null;\n  return json({\n    error: \"identity_mismatch\",\n    message: `token belongs to \"${auth.agentId}\" but request claims \"${claimedAgent}\"`,\n    authenticated_as: auth.agentId,\n    claimed: claimedAgent,\n  }, 403);\n}\n\nexport function requireAuth(auth: AuthResult): Response | null {\n  if (!auth.authenticated) {\n    return json({ error: \"authentication_required\", message: \"include Authorization: Bearer \" }, 401);\n  }\n  return null;\n}\n\nexport function requireRoomToken(auth: AuthResult): Response | null {\n  if (!auth.authenticated) {\n    return json({ error: \"authentication_required\", message: \"room token required\" }, 401);\n  }\n  if (auth.kind !== \"room\" && !auth.grants.includes(\"*\")) {\n    return json({ error: \"room_token_required\", message: \"this operation requires a room token or admin grants\" }, 403);\n  }\n  return null;\n}\n\nexport function requireWriteAuth(auth: AuthResult): Response | null {\n  if (!auth.authenticated) {\n    return json({ error: \"authentication_required\", message: \"include Authorization: Bearer \" }, 401);\n  }\n  if (auth.kind === \"view\") {\n    return json({ error: \"read_only_token\", message: \"view tokens cannot perform mutations\" }, 403);\n  }\n  return null;\n}\n\nexport function hasFullReadAccess(auth: AuthResult): boolean {\n  return auth.grants.includes(\"*\") || auth.kind === \"view\";\n}\n\n// ============ Auto-heartbeat ============\n\nexport function touchAgent(roomId: string, agentId: string | null | undefined): void {\n  if (!agentId) return;\n  const now = new Date().toISOString();\n  // Update token liveness (applies to all token types)\n  sqlite.execute({\n    sql: `UPDATE tokens SET last_used_at = ? WHERE room_id = ? AND agent_id = ? AND revoked = 0`,\n    args: [now, roomId, agentId],\n  }).catch(() => {});\n  // Update _agents scope heartbeat\n  sqlite.execute({\n    sql: `UPDATE state SET\n            value = json_set(value, '$.last_heartbeat', ?),\n            revision = revision + 1, updated_at = ?\n          WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n    args: [now, now, roomId, agentId],\n  }).catch(() => {});\n}\n\n// ============ Direct agent auth (no token required) ============\n\nexport async function resolveAgentAuth(\n  roomId: string, agentId: string,\n): Promise {\n  // v8: Read grants from _agents scope\n  const result = await sqlite.execute({\n    sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n    args: [roomId, agentId],\n  });\n  if (result.rows.length === 0) return null;\n  let grants: string[] = [agentId];\n  try {\n    const def = JSON.parse(result.rows[0][0] as string);\n    if (Array.isArray(def.grants) && def.grants.length > 0) {\n      grants = [agentId, ...def.grants.filter((g: string) => g !== agentId)];\n    }\n  } catch {}\n  return {\n    authenticated: true,\n    kind: \"agent\",\n    agentId,\n    roomId,\n    grants,\n  };\n}\n",[],[1107],{"_105":1116,"_97":1117,"_166":1118,"_168":-5,"_169":149,"_170":1119,"_171":172,"_107":1120,"_102":1121,"_174":356,"_176":1122,"_177":22,"_178":-5,"_179":1123,"_101":1124},"b6e022ce-1ffb-11f1-9089-42dde27851f2","cel.ts","019cebf2-a8a6-7120-b164-42879be46c1a",137,["D",1773530139046],13,"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { evaluate } from \"npm:@marcbachmann/cel-js\";\nimport { isTimerLive } from \"./timers.ts\";\n\n/**\n * CEL (Common Expression Language) evaluator for agent-sync v8.\n *\n * v8: All entity data (agents, actions, views) read from state table scopes.\n * Legacy table fallbacks removed — v8 backfill ensures all rooms have scope data.\n * The agents table is retained for auth (token_hash) and unread tracking (last_seen_seq).\n *\n * Context shape (per-agent, respecting scope privacy):\n *\n *   {\n *     state: {\n *       _shared: { phase: \"executing\", turn: 3, ... },\n *       self: { health: 80, inventory: [...] }   // own scope only\n *     },\n *     views: {\n *       \"agent-a-status\": \"healthy\",\n *       \"total-score\": 142\n *     },\n *     agents: {\n *       \"agent-a\": { name: \"Alice\", role: \"warrior\", status: \"active\" },\n *       \"agent-b\": { name: \"Bob\", role: \"healer\", status: \"waiting\" }\n *     },\n *     actions: {\n *       \"attack\": { available: true, enabled: true },\n *       \"heal\": { available: false, enabled: true }\n *     },\n *     messages: { count: 42, unread: 3 },\n *     self: \"agent-a\",\n *     params: {}\n *   }\n *\n * Private scopes: agent scopes are only visible to the owning agent (via `state.self`)\n * or to view/action evaluations where the registrar has scope authority.\n */\n\nfunction rows2objects(result: { columns: string[]; rows: any[][] }) {\n  return result.rows.map((row) =>\n    Object.fromEntries(result.columns.map((col, i) => [col, row[i]]))\n  );\n}\n\nfunction parseValue(raw: string): any {\n  try {\n    return JSON.parse(raw);\n  } catch {\n    return raw;\n  }\n}\n\nexport interface BuildContextOptions {\n  /** The requesting agent's ID. Used for `self` and scope privacy. */\n  selfAgent?: string;\n  /** Additional scopes to include (for view/action evaluation with registrar authority). */\n  includeScopes?: string[];\n  /** If true, include ALL scopes (for internal/admin use). */\n  allScopes?: boolean;\n}\n\n/**\n * Build the CEL evaluation context from room data.\n * Respects scope privacy: only _shared, self scope, and explicitly included scopes are visible.\n */\nexport async function buildContext(roomId: string, opts: BuildContextOptions = {}): Promise> {\n  const { selfAgent, includeScopes = [], allScopes = false } = opts;\n\n  // Load all state\n  const stateResult = await sqlite.execute({\n    sql: `SELECT scope, key, sort_key, value, timer_effect, timer_expires_at, timer_ticks_left, enabled_expr FROM state WHERE room_id = ?`,\n    args: [roomId],\n  });\n  const stateRows = rows2objects(stateResult) as any[];\n\n  // Build state tree, respecting scope privacy\n  const state: Record> = {};\n  const deferredEnabled: { scope: string; key: string; value: any; enabled_expr: string }[] = [];\n\n  for (const row of stateRows) {\n    if (!isTimerLive(row)) continue;\n\n    // Scope privacy: determine visibility\n    const scope = row.scope;\n    const isShared = scope === \"_shared\";\n    const isSelf = selfAgent && scope === selfAgent;\n    const isExplicitlyIncluded = includeScopes.includes(scope);\n    const isSystemScope = scope.startsWith(\"_\"); // _shared, _messages, etc.\n\n    if (!allScopes && !isShared && !isSelf && !isExplicitlyIncluded && !isSystemScope) {\n      continue; // private scope, not visible to this agent\n    }\n\n    // Defer enabled expressions\n    if (row.enabled_expr) {\n      deferredEnabled.push({ scope, key: row.key, value: parseValue(row.value), enabled_expr: row.enabled_expr });\n      continue;\n    }\n\n    // Map self scope to \"self\" in context\n    const contextScope = (isSelf && !allScopes) ? \"self\" : scope;\n    if (!state[contextScope]) state[contextScope] = {};\n    state[contextScope][row.key] = parseValue(row.value);\n  }\n\n  // v8: Extract agents from _agents scope (already in stateRows)\n  const agents: Record = {};\n\n  for (const row of stateRows) {\n    if (row.scope !== \"_agents\") continue;\n    if (!isTimerLive(row)) continue;\n    const val = parseValue(row.value);\n    agents[row.key] = {\n      name: val.name ?? row.key,\n      role: val.role ?? \"agent\",\n      status: val.status ?? \"active\",\n      waiting_on: val.waiting_on ?? null,\n      last_heartbeat: val.last_heartbeat ?? null,\n    };\n  }\n\n  // Fallback removed — v8 backfill ensures all rooms have _agents scope data.\n  // If _agents scope is empty, the room has no agents (which is valid).\n\n  // Message counts from _messages scope\n  const countResult = await sqlite.execute({\n    sql: `SELECT COUNT(*) as total FROM state WHERE room_id = ? AND scope = '_messages'\n          AND (timer_effect IS NULL\n               OR (timer_effect = 'delete' AND (timer_expires_at IS NULL OR timer_expires_at > datetime('now'))\n                   AND (timer_ticks_left IS NULL OR timer_ticks_left > 0))\n               OR (timer_effect = 'enable' AND ((timer_expires_at IS NOT NULL AND timer_expires_at <= datetime('now'))\n                   OR (timer_ticks_left IS NOT NULL AND timer_ticks_left <= 0))))`,\n    args: [roomId],\n  });\n  const totalCount = Number((rows2objects(countResult)[0] as any)?.total || 0);\n\n  // Unread + directed_unread counts for self\n  let unreadCount = 0;\n  let directedUnread = 0;\n  if (selfAgent) {\n    // v8: Read last_seen_seq from _agents scope\n    let lastSeen = 0;\n    try {\n      const agentEntry = stateRows.find(r => r.scope === \"_agents\" && r.key === selfAgent);\n      if (agentEntry) {\n        const val = parseValue(agentEntry.value);\n        lastSeen = val.last_seen_seq ?? 0;\n      }\n    } catch {}\n    const unreadResult = await sqlite.execute({\n      sql: `SELECT COUNT(*) as c FROM state WHERE room_id = ? AND scope = '_messages' AND sort_key > ?\n            AND (timer_effect IS NULL\n                 OR (timer_effect = 'delete' AND (timer_expires_at IS NULL OR timer_expires_at > datetime('now'))\n                     AND (timer_ticks_left IS NULL OR timer_ticks_left > 0))\n                 OR (timer_effect = 'enable' AND ((timer_expires_at IS NOT NULL AND timer_expires_at <= datetime('now'))\n                     OR (timer_ticks_left IS NOT NULL AND timer_ticks_left <= 0))))`,\n      args: [roomId, lastSeen],\n    });\n    unreadCount = Number((rows2objects(unreadResult)[0] as any)?.c || 0);\n\n    // directed_unread: messages since lastSeen with to[] containing selfAgent\n    // Fetch bodies to check the JSON to field (SQLite has no native JSON array search)\n    const directedResult = await sqlite.execute({\n      sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_messages' AND sort_key > ?`,\n      args: [roomId, lastSeen],\n    });\n    for (const row of rows2objects(directedResult)) {\n      try {\n        const msg = JSON.parse((row as any).value);\n        if (Array.isArray(msg.to) && msg.to.includes(selfAgent)) directedUnread++;\n      } catch { /* malformed message — skip */ }\n    }\n  }\n\n  // v8: Extract actions from _actions scope (already in stateRows)\n  const actionsCtx: Record = {};\n\n  for (const row of stateRows) {\n    if (row.scope !== \"_actions\") continue;\n    if (!isTimerLive(row)) continue;\n    const val = parseValue(row.value);\n    // _actions scope entries have enabled/if as fields in the value JSON\n    if (val.enabled) {\n      try { if (!evaluate(val.enabled, { state, views: {}, agents, messages: { count: 0, unread: 0, directed_unread: 0 }, actions: {}, self: selfAgent ?? \"\", params: {} })) continue; } catch { continue; }\n    }\n    actionsCtx[row.key] = { enabled: true, if_expr: val.if ?? null };\n  }\n\n  // Fallback removed — v8 backfill ensures all rooms have _actions scope data.\n\n  // Build initial context (without deferred items or views)\n  const ctx: Record = {\n    state,\n    views: {},\n    agents,\n    messages: { count: totalCount, unread: unreadCount, directed_unread: directedUnread },\n    actions: actionsCtx,\n    self: selfAgent ?? \"\",\n    params: {},\n  };\n\n  // Resolve deferred enabled state entries\n  for (const d of deferredEnabled) {\n    try {\n      if (evaluate(d.enabled_expr, ctx)) {\n        const contextScope = (selfAgent && d.scope === selfAgent && !allScopes) ? \"self\" : d.scope;\n        if (!state[contextScope]) state[contextScope] = {};\n        state[contextScope][d.key] = d.value;\n      }\n    } catch { /* expression error = not enabled */ }\n  }\n\n  // v8: Resolve views from _views scope (already in stateRows)\n  // Fallback removed — v8 backfill ensures all rooms have _views scope data.\n  const viewEntries = stateRows.filter(r => r.scope === \"_views\" && isTimerLive(r));\n\n  for (const row of viewEntries) {\n    const val = parseValue(row.value);\n    if (!val.expr) continue;\n\n    // Check enabled\n    if (val.enabled) {\n      try { if (!evaluate(val.enabled, ctx)) continue; } catch { continue; }\n    }\n\n    // Build view-specific context with registrar's scope access\n    const viewCtx = await buildViewContext(roomId, val.scope ?? \"_shared\", ctx);\n\n    try {\n      const result = evaluate(val.expr, viewCtx);\n      ctx.views[row.key] = typeof result === \"bigint\" ? Number(result) : result;\n    } catch (e: any) {\n      ctx.views[row.key] = { _error: e.message };\n    }\n  }\n\n  // Evaluate action availability now that views are resolved\n  for (const [id, actionEntry] of Object.entries(actionsCtx)) {\n    const ifExpr = actionEntry.if_expr;\n    if (ifExpr) {\n      try {\n        actionsCtx[id].available = !!evaluate(ifExpr, ctx);\n      } catch {\n        actionsCtx[id].available = false;\n      }\n    } else {\n      actionsCtx[id].available = true;\n    }\n    // Clean up internal field\n    delete actionsCtx[id].if_expr;\n  }\n\n  return ctx;\n}\n\n/**\n * Build a context for view evaluation that includes the registrar's private scope.\n * Augments the base context with the view registrar's scope data.\n */\nexport async function buildViewContext(\n  roomId: string,\n  registrarScope: string,\n  baseCtx: Record,\n): Promise> {\n  // If the registrar scope is _shared or already in context, no augmentation needed\n  if (registrarScope === \"_shared\" || baseCtx.state[registrarScope]) {\n    return baseCtx;\n  }\n\n  // Load registrar's scope data\n  const scopeResult = await sqlite.execute({\n    sql: `SELECT key, value, timer_effect, timer_expires_at, timer_ticks_left, enabled_expr FROM state\n          WHERE room_id = ? AND scope = ?`,\n    args: [roomId, registrarScope],\n  });\n  const rows = rows2objects(scopeResult) as any[];\n\n  const scopeData: Record = {};\n  for (const row of rows) {\n    if (!isTimerLive(row)) continue;\n    if (row.enabled_expr) {\n      try {\n        if (!evaluate(row.enabled_expr, baseCtx)) continue;\n      } catch { continue; }\n    }\n    scopeData[row.key] = parseValue(row.value);\n  }\n\n  // Create augmented context with registrar's scope\n  return {\n    ...baseCtx,\n    state: {\n      ...baseCtx.state,\n      [registrarScope]: scopeData,\n    },\n  };\n}\n\n/**\n * Evaluate a CEL expression against room state.\n */\nexport async function evalCel(\n  roomId: string,\n  expr: string,\n  ctx?: Record,\n): Promise<{ ok: true; value: any } | { ok: false; error: string }> {\n  try {\n    const context = ctx ?? (await buildContext(roomId));\n    const result = evaluate(expr, context);\n    const value = typeof result === \"bigint\" ? Number(result) : result;\n    return { ok: true, value };\n  } catch (e: any) {\n    return { ok: false, error: e.message || String(e) };\n  }\n}\n\n/**\n * Evaluate a CEL expression with additional params context.\n */\nexport function evalCelWithParams(\n  expr: string,\n  ctx: Record,\n  params: Record,\n): { ok: true; value: any } | { ok: false; error: string } {\n  try {\n    const extendedCtx = { ...ctx, params };\n    const result = evaluate(expr, extendedCtx);\n    const value = typeof result === \"bigint\" ? Number(result) : result;\n    return { ok: true, value };\n  } catch (e: any) {\n    return { ok: false, error: e.message || String(e) };\n  }\n}\n\n/**\n * Validate a CEL expression by attempting evaluation with minimal context.\n */\nexport function validateCel(expr: string): { valid: true } | { valid: false; error: string } {\n  try {\n    evaluate(expr, {\n      state: {}, views: {}, agents: {}, messages: { count: 0, unclaimed: 0, unread: 0, directed_unread: 0 },\n      actions: {}, params: {}, self: \"\",\n    });\n    return { valid: true };\n  } catch (e: any) {\n    const msg = e.message || String(e);\n    if (msg.includes(\"No such key\") || msg.includes(\"no such key\")) {\n      return { valid: true };\n    }\n    return { valid: false, error: msg };\n  }\n}\n",[],[1117],{"_105":1126,"_97":1127,"_166":1128,"_168":-5,"_169":149,"_170":1129,"_171":172,"_107":1130,"_102":1121,"_174":356,"_176":1131,"_177":22,"_178":-5,"_179":1132,"_101":1133},"bb7aefc6-1ffb-11f1-a720-42dde27851f2","context.ts","019cebf2-a8a6-7120-b164-474602ca72b6",138,["D",1773530146768],"/**\n * context.ts — Context assembly and CEL evaluation endpoint.\n *\n * Contains buildExpandedContext (the main context builder for MCP /context endpoint),\n * evalExpression, and the ContextRequest interface + parser.\n *\n * v8: Dashboard polling moved to poll-v8.ts (state-only, no legacy tables).\n * The old dashboardPoll has been removed.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { evaluate } from \"npm:@marcbachmann/cel-js\";\nimport { json, rows2objects } from \"./utils.ts\";\nimport { buildContext, buildViewContext, evalCel, type BuildContextOptions } from \"./cel.ts\";\nimport { isTimerLive } from \"./timers.ts\";\nimport { hasFullReadAccess, touchAgent, type AuthResult } from \"./auth.ts\";\nimport { computeContestedTargets } from \"./actions.ts\";\nimport { BUILTIN_ACTIONS, OVERRIDABLE_BUILTINS } from \"./invoke.ts\";\nimport { HELP_SYSTEM } from \"./help-content.ts\";\nimport { computeSalience } from \"./salience.ts\";\n\n// ── ContextRequest ──\n\n/** ContextRequest — first-class type describing what context to return.\n *\n * The agent can request different shapes of context:\n * - `depth`: how much action detail to include\n *     \"lean\"  — id, description, available (default — smallest payload)\n *     \"full\"  — + writes, if, params\n *     \"usage\" — + invocation_count (adoption signal)\n * - `only`: return only these top-level sections (e.g. [\"state\", \"messages\"])\n * - `actions`: include actions section (default true)\n * - `messages`: include messages section (default true)\n * - `messagesAfter`: seq cursor — only return messages after this seq\n * - `messagesLimit`: max messages to return (default 100, max 500)\n * - `include`: extra state scopes to include (e.g. \"_audit\")\n */\nexport interface ContextRequest {\n  depth?: \"lean\" | \"full\" | \"usage\";\n  only?: string[];\n  actions?: boolean;\n  messages?: boolean;\n  messagesAfter?: number;\n  messagesLimit?: number;\n  include?: string[];\n}\n\n/** Parse a ContextRequest from URL search params */\nexport function parseContextRequest(url: URL): ContextRequest {\n  const req: ContextRequest = {};\n  const depth = url.searchParams.get(\"depth\");\n  if (depth === \"lean\" || depth === \"full\" || depth === \"usage\") req.depth = depth;\n  const only = url.searchParams.get(\"only\");\n  if (only) req.only = only.split(\",\").map(s => s.trim()).filter(Boolean);\n  const actions = url.searchParams.get(\"actions\");\n  if (actions === \"false\") req.actions = false;\n  const messages = url.searchParams.get(\"messages\");\n  if (messages === \"false\") req.messages = false;\n  const after = url.searchParams.get(\"messages_after\");\n  if (after) req.messagesAfter = parseInt(after);\n  const limit = url.searchParams.get(\"messages_limit\");\n  if (limit) req.messagesLimit = parseInt(limit);\n  const include = url.searchParams.get(\"include\");\n  if (include) req.include = include.split(\",\").map(s => s.trim()).filter(Boolean);\n  return req;\n}\n\n// ── buildExpandedContext ──\n\n/** Build expanded context with message bodies, full action definitions, and built-in actions.\n *\n * Returns a self-describing envelope with a `_context` section that tells the caller\n * what was included, what was elided, and how to expand elided sections. */\nexport async function buildExpandedContext(roomId: string, auth: AuthResult, req: ContextRequest = {}): Promise> {\n  const depth = req.depth ?? \"lean\";\n  const includeActions = req.actions !== false;\n  const includeMessages = req.messages !== false;\n  const includedScopes = req.include ?? [];\n\n  const ctx = await buildContext(roomId, {\n    selfAgent: auth.agentId ?? undefined,\n    allScopes: hasFullReadAccess(auth),\n  });\n\n  // ---- Messages ----\n  let messagesSection: any;\n  let elided: string[] = [];\n\n  if (includeMessages) {\n    const messagesLimit = Math.min(req.messagesLimit ?? 100, 500);\n    // Explicit column list — omits `version` to avoid INTEGER-affinity overflow on production\n    // databases where the v5→v6 migration silently failed (column already existed as INTEGER).\n    let msgSql = `SELECT scope, key, sort_key, value, revision, updated_at,\n                  timer_json, timer_expires_at, timer_ticks_left, timer_tick_on,\n                  timer_effect, timer_started_at, enabled_expr\n                  FROM state WHERE room_id = ? AND scope = '_messages'`;\n    const msgArgs: any[] = [roomId];\n    if (req.messagesAfter) {\n      msgSql += ` AND sort_key > ?`;\n      msgArgs.push(req.messagesAfter);\n    }\n    msgSql += ` ORDER BY sort_key DESC LIMIT ?`;\n    msgArgs.push(messagesLimit);\n    const msgResult = await sqlite.execute({ sql: msgSql, args: msgArgs });\n    let msgRows = rows2objects(msgResult).filter((r: any) => isTimerLive(r));\n    msgRows.reverse();\n    const recentMessages = msgRows.map((r: any) => {\n      let parsed: any = {};\n      try { parsed = JSON.parse(r.value); } catch { parsed = { body: r.value }; }\n      return { seq: r.sort_key, ...parsed };\n    });\n\n    // Update last_seen_seq in _agents scope\n    if (auth.agentId && recentMessages.length > 0) {\n      const maxSeq = Math.max(...recentMessages.map((m: any) => m.seq ?? 0));\n      if (maxSeq > 0) {\n        sqlite.execute({\n          sql: `UPDATE state SET\n                  value = json_set(value, '$.last_seen_seq', ?),\n                  revision = revision + 1, updated_at = datetime('now')\n                WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n          args: [maxSeq, roomId, auth.agentId],\n        }).catch(() => {});\n      }\n    }\n\n    // Count total messages (to detect elision)\n    const totalMsgResult = await sqlite.execute({\n      sql: `SELECT COUNT(*) as cnt FROM state WHERE room_id = ? AND scope = '_messages'`,\n      args: [roomId],\n    });\n    const totalMessages = Number(rows2objects(totalMsgResult)[0]?.cnt ?? 0);\n    const oldestSeq = recentMessages.length > 0 ? (recentMessages[0].seq ?? 0) : 0;\n\n    const directed_unread = ctx.messages.directed_unread ?? 0;\n\n    messagesSection = {\n      count: ctx.messages.count,\n      unread: ctx.messages.unread,\n      directed_unread,\n      recent: recentMessages,\n    };\n\n    // Mark elision if we have more messages than we returned\n    if (totalMessages > messagesLimit) {\n      const missing = totalMessages - recentMessages.length;\n      messagesSection._elided = {\n        total: totalMessages,\n        returned: recentMessages.length,\n        missing,\n        oldest_seq: oldestSeq,\n        _expand: `?messages_after=0&messages_limit=${Math.min(totalMessages, 500)}`,\n      };\n    }\n  } else {\n    elided.push(\"messages\");\n  }\n\n  // ---- Actions ----\n  let actionsSection: Record | undefined;\n\n  if (includeActions) {\n    // v8: Read action definitions from _actions scope in state table\n    const actionScopeResult = await sqlite.execute({\n      sql: `SELECT key, value FROM state WHERE room_id = ? AND scope = '_actions'`,\n      args: [roomId],\n    });\n    const actionEntries = rows2objects(actionScopeResult) as any[];\n\n    // Invocation counts for \"usage\" depth\n    let invocationCounts: Record = {};\n    if (depth === \"usage\") {\n      const auditResult = await sqlite.execute({\n        sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_audit' ORDER BY sort_key DESC LIMIT 500`,\n        args: [roomId],\n      });\n      for (const row of rows2objects(auditResult)) {\n        try {\n          const entry = JSON.parse((row as any).value);\n          if (entry.action && !entry.builtin) {\n            invocationCounts[entry.action] = (invocationCounts[entry.action] ?? 0) + 1;\n          }\n        } catch {}\n      }\n    }\n\n    actionsSection = {};\n    for (const row of actionEntries) {\n      let def: any;\n      try { def = typeof row.value === \"string\" ? JSON.parse(row.value) : row.value; } catch { continue; }\n      const id = row.key;\n\n      // Check enabled\n      if (def.enabled) {\n        try { if (!evaluate(def.enabled, ctx)) continue; } catch { continue; }\n      }\n\n      // lean: just available + description\n      const entry: any = {\n        available: true,\n        description: def.description ?? null,\n      };\n\n      if (def.if) {\n        try { entry.available = !!evaluate(def.if, ctx); } catch { entry.available = false; }\n      }\n\n      if (depth === \"full\" || depth === \"usage\") {\n        entry.enabled = true;\n        if (def.params) entry.params = def.params;\n        if (def.writes?.length > 0) entry.writes = def.writes;\n        if (def.if) entry.if = def.if;\n        if (def.scope && def.scope !== \"_shared\") entry.scope = def.scope;\n      }\n\n      if (depth === \"usage\") {\n        entry.invocation_count = invocationCounts[id] ?? 0;\n      }\n\n      actionsSection[id] = entry;\n    }\n\n    // Add built-in actions (skip overridable ones that have a custom registration)\n    for (const [id, def] of Object.entries(BUILTIN_ACTIONS)) {\n      if (OVERRIDABLE_BUILTINS.has(id) && actionsSection[id]) continue;\n      const builtinEntry: any = {\n        available: true,\n        builtin: true,\n        description: def.description,\n      };\n      if (depth === \"full\" || depth === \"usage\") {\n        builtinEntry.enabled = true;\n        builtinEntry.params = def.params ?? null;\n      }\n      actionsSection[id] = builtinEntry;\n    }\n  } else {\n    elided.push(\"actions\");\n  }\n\n  // ---- Assemble state, stripping _audit / _messages unless opted in ----\n  const stateOut = { ...ctx.state };\n  if (!includedScopes.includes(\"_audit\")) delete stateOut._audit;\n  if (!includedScopes.includes(\"_messages\")) delete stateOut._messages;\n\n  // ---- Apply `only` filter ----\n  let result: Record = {\n    state: stateOut,\n    views: ctx.views,\n    agents: ctx.agents,\n    ...(actionsSection !== undefined ? { actions: actionsSection } : {}),\n    ...(messagesSection !== undefined ? { messages: messagesSection } : {}),\n    self: ctx.self,\n  };\n\n  if (req.only && req.only.length > 0) {\n    const filtered: Record = {};\n    for (const s of req.only) {\n      if (s in result) filtered[s] = result[s];\n      if (s.startsWith(\"state.\")) {\n        const scope = s.slice(6);\n        if (!filtered.state) filtered.state = {};\n        filtered.state[scope] = ctx.state?.[scope] ?? {};\n      }\n    }\n    // self always included\n    if (result.self) filtered.self = result.self;\n    // track what was filtered out\n    for (const key of Object.keys(result)) {\n      if (!(key in filtered) && key !== \"self\") elided.push(key);\n    }\n    result = filtered;\n  }\n\n  // ---- _contested synthetic view ----\n  const contestedTargets = await computeContestedTargets(roomId);\n  const hasContested = Object.keys(contestedTargets).length > 0;\n  if (hasContested) {\n    result.views = {\n      ...result.views,\n      _contested: {\n        value: contestedTargets,\n        description: \"Write targets contested by 2+ actions. Keys are scope:key, values are lists of competing action IDs.\",\n        system: true,\n      },\n    };\n  }\n\n  // ---- v8: _salience synthetic view (agent-specific) ----\n  if (auth.authenticated && auth.agentId) {\n    try {\n      const salienceMap = await computeSalience(roomId, auth.agentId, {\n        contestedTargets,\n        limit: 20,\n      });\n      // Inject as a lightweight summary — full map available at /salience endpoint\n      const topKeys = salienceMap.entries.slice(0, 10).map(e => ({\n        key: `${e.scope}.${e.key}`,\n        score: Math.round(e.score * 100) / 100,\n        why: Object.entries(e.signals)\n          .filter(([_, v]) => v > 0.1)\n          .sort((a, b) => b[1] - a[1])\n          .map(([k]) => k),\n      }));\n      if (topKeys.length > 0) {\n        result.views = {\n          ...result.views,\n          _salience: {\n            value: topKeys,\n            description: \"Top salient state keys for this agent. Score = weighted sum of recency, dependency, authorship, directed, contest, delta signals. Full map at GET /salience.\",\n            system: true,\n          },\n        };\n      }\n    } catch { /* salience is best-effort */ }\n  }\n\n  // ---- _context envelope ----\n  // Compute situational help keys — which help topics are currently relevant\n  const contextHelp: string[] = [];\n  // Empty room (no registered actions beyond builtins): suggest vocabulary_bootstrap\n  const customActionCount = actionsSection\n    ? Object.keys(actionsSection).filter(k => !BUILTIN_ACTIONS[k]).length\n    : 0;\n  if (customActionCount === 0) {\n    contextHelp.push(\"vocabulary_bootstrap\");\n  }\n  // Directed unread: suggest directed_messages\n  if (messagesSection?.directed_unread > 0) {\n    contextHelp.push(\"directed_messages\");\n  }\n  // Contested actions: suggest contested_actions\n  if (hasContested) {\n    contextHelp.push(\"contested_actions\");\n  }\n  // Messages truncated: surface at top-level _context so agents don't miss it\n  if (messagesSection?._elided) {\n    contextHelp.push(\"context_shaping\");\n  }\n\n  result._context = {\n    sections: Object.keys(result).filter(k => k !== \"_context\"),\n    depth,\n    ...(messagesSection?._elided ? {\n      messages_truncated: {\n        missing: messagesSection._elided.missing,\n        oldest_seq: messagesSection._elided.oldest_seq,\n        _expand: messagesSection._elided._expand,\n      },\n    } : {}),\n    ...(contextHelp.length > 0 ? { help: contextHelp } : {}),\n    ...(elided.length > 0 ? {\n      elided,\n      _expand: elided.map(s => {\n        if (s === \"messages\") return `?messages=true`;\n        if (s === \"actions\") return `?actions=true`;\n        return `?only=${s}`;\n      }),\n    } : {}),\n    request: {\n      ...(req.depth ? { depth: req.depth } : {}),\n      ...(req.only ? { only: req.only } : {}),\n      ...(req.actions === false ? { actions: false } : {}),\n      ...(req.messages === false ? { messages: false } : {}),\n      ...(req.messagesAfter ? { messages_after: req.messagesAfter } : {}),\n      ...(req.messagesLimit ? { messages_limit: req.messagesLimit } : {}),\n    },\n  };\n\n  return result;\n}\n\n// ── CEL eval endpoint ──\n\nexport async function evalExpression(roomId: string, body: any, auth: AuthResult) {\n  const expr = body.expr;\n  if (!expr || typeof expr !== \"string\") return json({ error: \"expr string is required\" }, 400);\n  touchAgent(roomId, auth.agentId);\n  const ctx = await buildContext(roomId, { selfAgent: auth.agentId ?? undefined });\n  const result = await evalCel(roomId, expr, ctx);\n  if (!result.ok) return json({ error: \"cel_error\", expression: expr, detail: result.error }, 400);\n  return json({ expression: expr, value: result.value });\n}\n",[],[1127],{"_105":1135,"_97":1136,"_166":1137,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1138,"_102":33,"_174":186,"_176":1139,"_177":22,"_178":-5,"_179":1140,"_101":1141},"ca96e6f4-1f92-11f1-943c-42dde27851f2","deno.json","019cebf2-a8a6-7120-b164-48072f0af386",["D",1773485074605],"{\n  \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/98f62cee78e85bfc47c62ed703777c6bc8794f1c/cli/schemas/config-file.v1.json\",\n  \"tasks\": {\n    \"dev\": \"deno run -A --import-map=local/import_map.json local/dev.ts\"\n  },\n  \"lock\": false,\n  \"compilerOptions\": {\n    \"noImplicitAny\": false,\n    \"strict\": true,\n    \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n    \"lib\": [\n      \"dom\",\n      \"dom.iterable\",\n      \"dom.asynciterable\",\n      \"deno.ns\",\n      \"deno.unstable\"\n    ]\n  },\n  \"lint\": {\n    \"include\": [\"deno:/https/esm.town/**/*\"],\n    \"rules\": {\n      \"exclude\": [\"no-explicit-any\"]\n    }\n  },\n  \"node_modules_dir\": false,\n  \"experimental\": {\n    \"unstable-node-globals\": true,\n    \"unstable-temporal\": true,\n    \"unstable-worker-options\": true,\n    \"unstable-sloppy-imports\": true\n  }\n}",[],[1136],{"_105":1143,"_97":1144,"_166":1145,"_168":-5,"_169":149,"_170":406,"_171":172,"_107":1146,"_102":705,"_174":356,"_176":1147,"_177":22,"_178":-5,"_179":1148,"_101":1149},"189c9bd6-1f94-11f1-9333-42dde27851f2","deps.ts","1de96430-1f93-11f1-97b5-42dde27851f2",["D",1773485635359],"/**\n * deps.ts — CEL dependency extraction.\n *\n * Verified against @marcbachmann/cel-js AST output (March 2026).\n *\n * AST format:\n *   { op: \"id\", args: \"state\" }               — identifier (args is a STRING)\n *   { op: \".\", args: [parent, \"field\"] }       — member access\n *   { op: \"[]\", args: [obj, index] }           — bracket access\n *   { op: \"value\", args: \"literal\" }           — literal value\n *   { op: \"==\", args: [left, right] }          — comparison\n *   { op: \"?:\", args: [cond, then, else] }     — ternary\n *   { op: \"&&\", args: [left, right] }          — logical and\n *\n * CRITICAL: Pipe expressions (state._shared | keys() | filter(...))\n * are NOT parseable by parse() — they fail with \"Unexpected character: |\".\n * evaluate() handles them at runtime but the AST is unavailable.\n * For pipe expressions, we fall back to regex extraction.\n *\n * Strategy:\n *   1. Try AST walking (covers direct access, bracket access, comparisons)\n *   2. Fall back to regex for pipe expressions and parse failures\n *   3. Complement with Proxy tracing at runtime (optional validation)\n */\n\nimport { parse } from \"npm:@marcbachmann/cel-js\";\n\n// ── Types ──────────────────────────────────────────────────────────────\n\nexport interface Dependency {\n  root: \"state\" | \"views\" | \"agents\" | \"actions\" | \"messages\";\n  scope?: string;\n  key?: string;\n  prefix?: string;\n  access: \"direct\" | \"scope\" | \"prefix\" | \"full\";\n  certainty: \"static\" | \"regex\" | \"runtime\";\n}\n\nexport type DependencySet = Dependency[];\n\n// ── Context roots ──────────────────────────────────────────────────────\n\nconst CONTEXT_ROOTS = new Set([\"state\", \"views\", \"agents\", \"actions\", \"messages\"]);\n\n// ── AST Walking (verified format) ──────────────────────────────────────\n\n/**\n * Resolve a member access chain from an AST node.\n * Returns [\"state\", \"_shared\", \"phase\"] for state._shared.phase\n */\nfunction resolveChain(node: any): string[] | null {\n  if (!node || typeof node !== \"object\") return null;\n\n  // Identifier: { op: \"id\", args: \"state\" }\n  if (node.op === \"id\" && typeof node.args === \"string\") {\n    return [node.args];\n  }\n\n  // Member access: { op: \".\", args: [parent, \"field\"] }\n  if (node.op === \".\" && Array.isArray(node.args) && node.args.length === 2) {\n    const parent = resolveChain(node.args[0]);\n    const field = node.args[1];\n    if (parent && typeof field === \"string\") {\n      return [...parent, field];\n    }\n    return null;\n  }\n\n  // Bracket access: { op: \"[]\", args: [obj, { op: \"value\", args: \"key\" }] }\n  if (node.op === \"[]\" && Array.isArray(node.args) && node.args.length === 2) {\n    const parent = resolveChain(node.args[0]);\n    const index = node.args[1];\n    if (parent && index?.op === \"value\" && typeof index.args === \"string\") {\n      return [...parent, index.args];\n    }\n    return null;\n  }\n\n  return null;\n}\n\n/**\n * Walk an AST and extract dependencies.\n * Only records the MOST SPECIFIC dep per chain (direct > scope > full).\n */\nfunction walkAst(node: any, deps: Dependency[], seen: Set) {\n  if (!node || typeof node !== \"object\") return;\n\n  function addDep(dep: Dependency) {\n    const k = JSON.stringify(dep);\n    if (seen.has(k)) return;\n    seen.add(k);\n    deps.push(dep);\n  }\n\n  // Find the deepest resolvable chain at this node.\n  // We want state._shared.phase to produce ONE dep (direct), not three.\n  function deepestChain(n: any): string[] | null {\n    // Try to extend: if this is a \".\" with a child that's also a \".\",\n    // the parent will be covered by the child's walk. So only resolve\n    // at leaf positions (nodes not used as operands in a deeper \".\").\n    const chain = resolveChain(n);\n    return chain;\n  }\n\n  // Check if this node is a leaf in a member chain (not the operand of a parent \".\")\n  // We handle this by only recording deps for the TOP-LEVEL chain at each point.\n  const chain = deepestChain(node);\n  if (chain && chain.length > 0 && CONTEXT_ROOTS.has(chain[0])) {\n    const root = chain[0] as Dependency[\"root\"];\n    if (root === \"state\") {\n      if (chain.length >= 3) {\n        addDep({ root: \"state\", scope: chain[1], key: chain[2], access: \"direct\", certainty: \"static\" });\n      } else if (chain.length === 2) {\n        addDep({ root: \"state\", scope: chain[1], access: \"scope\", certainty: \"static\" });\n      } else {\n        addDep({ root: \"state\", access: \"full\", certainty: \"static\" });\n      }\n    } else {\n      if (chain.length >= 2) {\n        addDep({ root, key: chain[1], access: \"direct\", certainty: \"static\" });\n      } else {\n        addDep({ root, access: \"scope\", certainty: \"static\" });\n      }\n    }\n    // For member chains, DON'T recurse into children — the chain\n    // already captured the full access path. Recurse into non-chain\n    // siblings (e.g. the right side of a comparison).\n    if (node.op === \".\" || node.op === \"[]\") return;\n  }\n\n  // Not a resolvable chain — recurse into args\n  if (Array.isArray(node.args)) {\n    for (const arg of node.args) {\n      if (arg && typeof arg === \"object\") walkAst(arg, deps, seen);\n    }\n  }\n}\n\n// ── Regex Fallback (for pipe expressions) ──────────────────────────────\n\n/**\n * Extract dependencies from a CEL expression string using regex.\n * Used when AST parsing fails (pipe expressions) or as a supplement.\n */\nfunction extractRegex(expr: string): Dependency[] {\n  const deps: Dependency[] = [];\n  const seen = new Set();\n\n  function addDep(dep: Dependency) {\n    const k = JSON.stringify(dep);\n    if (seen.has(k)) return;\n    seen.add(k);\n    deps.push(dep);\n  }\n\n  // Direct key access: state._shared.phase or state._shared.theses.x\n  const directPattern = /state\\.([a-zA-Z_][a-zA-Z0-9_]*)\\.([a-zA-Z_][a-zA-Z0-9_]*)/g;\n  let m;\n  while ((m = directPattern.exec(expr))) {\n    addDep({ root: \"state\", scope: m[1], key: m[2], access: \"direct\", certainty: \"regex\" });\n  }\n\n  // Scope-level access: state._shared (without further key, e.g. in pipe chains)\n  const scopePattern = /state\\.([a-zA-Z_][a-zA-Z0-9_]*)\\s*[|)]/g;\n  while ((m = scopePattern.exec(expr))) {\n    addDep({ root: \"state\", scope: m[1], access: \"scope\", certainty: \"regex\" });\n  }\n\n  // Bracket access: state._shared[\"key.with.dots\"]\n  const bracketPattern = /state\\.([a-zA-Z_][a-zA-Z0-9_]*)\\[\"([^\"]+)\"\\]/g;\n  while ((m = bracketPattern.exec(expr))) {\n    addDep({ root: \"state\", scope: m[1], key: m[2], access: \"direct\", certainty: \"regex\" });\n  }\n\n  // startsWith patterns: k.startsWith(\"concepts.\")\n  const prefixPattern = /startsWith\\([\"']([^\"']+)[\"']\\)/g;\n  while ((m = prefixPattern.exec(expr))) {\n    addDep({ root: \"state\", prefix: m[1], access: \"prefix\", certainty: \"regex\" });\n  }\n\n  // View references: views[\"concept_count\"] or views.concept_count\n  const viewPattern1 = /views\\[\"([^\"]+)\"\\]/g;\n  while ((m = viewPattern1.exec(expr))) {\n    addDep({ root: \"views\", key: m[1], access: \"direct\", certainty: \"regex\" });\n  }\n  const viewPattern2 = /views\\.([a-zA-Z_][a-zA-Z0-9_]*)/g;\n  while ((m = viewPattern2.exec(expr))) {\n    addDep({ root: \"views\", key: m[1], access: \"direct\", certainty: \"regex\" });\n  }\n\n  // Agent/action references\n  const agentPattern = /agents\\.([a-zA-Z_][a-zA-Z0-9_]*)/g;\n  while ((m = agentPattern.exec(expr))) {\n    addDep({ root: \"agents\", key: m[1], access: \"direct\", certainty: \"regex\" });\n  }\n\n  // Messages reference\n  if (/messages\\b/.test(expr)) {\n    addDep({ root: \"messages\", access: \"scope\", certainty: \"regex\" });\n  }\n\n  // Bare \"agents\" or \"actions\" in pipe chains\n  if (/\\bagents\\s*[|.]/.test(expr) || /\\bagents\\s*\\|/.test(expr)) {\n    addDep({ root: \"agents\", access: \"full\", certainty: \"regex\" });\n  }\n  if (/\\bactions\\s*[|.]/.test(expr) || /\\bactions\\s*\\|/.test(expr)) {\n    addDep({ root: \"actions\", access: \"full\", certainty: \"regex\" });\n  }\n\n  return deps;\n}\n\n// ── Main extraction ────────────────────────────────────────────────────\n\n/**\n * Extract dependencies from a CEL expression.\n *\n * Tries AST walking first (accurate, handles member access chains).\n * Falls back to regex for pipe expressions (which fail to parse).\n * Returns a deduplicated array.\n */\nexport function extractDependencies(expr: string): DependencySet {\n  const deps: Dependency[] = [];\n  const seen = new Set();\n\n  // Try AST walking\n  let astWorked = false;\n  try {\n    const compiled = parse(expr);\n    if (compiled?.ast) {\n      walkAst(compiled.ast, deps, seen);\n      astWorked = true;\n    }\n  } catch {\n    // Parse failed (likely pipe expression) — fall through to regex\n  }\n\n  // Always run regex to catch pipe expressions and supplement AST\n  const regexDeps = extractRegex(expr);\n  for (const dep of regexDeps) {\n    const k = JSON.stringify({ ...dep, certainty: undefined });\n    // Only add regex deps that aren't already covered by AST deps\n    const hasStatic = deps.some(d => {\n      const dk = JSON.stringify({ ...d, certainty: undefined });\n      return dk === k;\n    });\n    if (!hasStatic) {\n      const fullK = JSON.stringify(dep);\n      if (!seen.has(fullK)) {\n        seen.add(fullK);\n        deps.push(dep);\n      }\n    }\n  }\n\n  return deps;\n}\n\n// ── Proxy Tracing ──────────────────────────────────────────────────────\n\n/**\n * Wrap a CEL context in Proxies that record property access.\n * Use to validate/supplement extracted dependencies at runtime.\n */\nexport function traceContext(ctx: Record): {\n  traced: Record;\n  getAccesses: () => DependencySet;\n} {\n  const accesses: Array<{ path: string[] }> = [];\n\n  function proxyWrap(obj: any, path: string[]): any {\n    if (obj === null || typeof obj !== \"object\") return obj;\n    if (typeof obj === \"function\") return obj;\n\n    return new Proxy(obj, {\n      get(target, prop, receiver) {\n        if (typeof prop === \"symbol\") return Reflect.get(target, prop, receiver);\n        const key = String(prop);\n        if (key === \"toJSON\" || key === \"constructor\" || key === \"prototype\" ||\n            key === \"then\" || key === \"length\" || key === \"toString\" || key === \"valueOf\") {\n          return Reflect.get(target, prop, receiver);\n        }\n        accesses.push({ path: [...path, key] });\n        const val = Reflect.get(target, prop, receiver);\n        return proxyWrap(val, [...path, key]);\n      },\n    });\n  }\n\n  function getAccesses(): DependencySet {\n    const deps: Dependency[] = [];\n    const seen = new Set();\n    for (const { path } of accesses) {\n      if (path.length === 0 || !CONTEXT_ROOTS.has(path[0])) continue;\n      const root = path[0] as Dependency[\"root\"];\n      let dep: Dependency;\n      if (root === \"state\") {\n        if (path.length >= 3) dep = { root: \"state\", scope: path[1], key: path[2], access: \"direct\", certainty: \"runtime\" };\n        else if (path.length === 2) dep = { root: \"state\", scope: path[1], access: \"scope\", certainty: \"runtime\" };\n        else dep = { root: \"state\", access: \"full\", certainty: \"runtime\" };\n      } else {\n        dep = { root, key: path.length >= 2 ? path[1] : undefined, access: path.length >= 2 ? \"direct\" : \"scope\", certainty: \"runtime\" };\n      }\n      const k = JSON.stringify(dep);\n      if (!seen.has(k)) { seen.add(k); deps.push(dep); }\n    }\n    return deps;\n  }\n\n  return { traced: proxyWrap(ctx, []), getAccesses };\n}\n\n// ── Utilities ──────────────────────────────────────────────────────────\n\nexport function mergeDependencies(staticDeps: DependencySet, runtimeDeps: DependencySet): DependencySet {\n  const seen = new Set();\n  const merged: Dependency[] = [];\n  for (const dep of staticDeps) {\n    const k = JSON.stringify({ ...dep, certainty: undefined });\n    if (!seen.has(k)) { seen.add(k); merged.push(dep); }\n  }\n  for (const dep of runtimeDeps) {\n    const k = JSON.stringify({ ...dep, certainty: undefined });\n    if (!seen.has(k)) { seen.add(k); merged.push(dep); }\n  }\n  return merged;\n}\n\nexport function isRelevant(deps: DependencySet, scope: string, key: string): boolean {\n  for (const dep of deps) {\n    if (dep.root !== \"state\") continue;\n    if (dep.access === \"full\") return true;\n    if (dep.access === \"scope\" && dep.scope === scope) return true;\n    if (dep.access === \"direct\" && dep.scope === scope && dep.key === key) return true;\n    if (dep.access === \"prefix\" && dep.prefix && key.startsWith(dep.prefix)) {\n      if (!dep.scope || dep.scope === scope) return true;\n    }\n  }\n  return false;\n}\n\n// ── Probe (development) ────────────────────────────────────────────────\n\nexport function probeAst(expr: string): any {\n  try {\n    const compiled = parse(expr);\n    return compiled.ast;\n  } catch (e: any) {\n    return { error: e.message };\n  }\n}\n",[],[1144],{"_105":1151,"_97":1152,"_166":1153,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1154,"_102":33,"_174":356,"_176":1155,"_177":22,"_178":-5,"_179":1156,"_101":1157},"ca96eda2-1f92-11f1-943c-42dde27851f2","docs.ts","019cebf2-a8a6-7120-b164-4fa4345637f4",["D",1773485074605],"/**\n * docs.ts — Document registry.\n *\n * Single list of filenames per directory. Titles extracted from # headers.\n * To add a doc: add its filename to the array below. That's it.\n */\n\nexport interface DocEntry {\n  title: string;\n  content: string;\n  category: string;\n  rawPath: string;\n}\n\n/** Extract title from first markdown # heading, or humanize the filename. */\nfunction extractTitle(content: string, filename: string): string {\n  const match = content.match(/^#\\s+(.+)$/m);\n  if (match) return match[1].trim();\n  return filename.replace(/\\.md$/, \"\").replace(/[-_]/g, \" \").replace(/\\b\\w/g, c => c.toUpperCase());\n}\n\n/** Fetch a file's content relative to this module. */\nasync function fetchFile(path: string): Promise {\n  const url = new URL(`./${path}`, import.meta.url);\n  return fetch(url).then(r => r.text());\n}\n\n// ── Load content ──\n\nexport const README = await fetchFile(\"README.md\");\n\n// One array per directory. Add a filename and it works.\nconst REF_FILES = [\n  \"api.md\", \"cel.md\", \"examples.md\", \"surfaces.md\",\n  \"v6.md\", \"help.md\", \"views.md\", \"landing.md\",\n];\nconst DOC_FILES = [\n  \"what-becomes-true.md\", \"introducing-sync.md\", \"the-substrate-thesis.md\",\n  \"SUBSTRATE.md\", \"isnt-this-just-react.md\", \"pressure-field.md\",\n  \"sigma-calculus.md\", \"surfaces-design.md\", \"agent-sync-technical-design.md\",\n  \"agency-and-identity.md\", \"frontend-unify.md\", \"adaptive-salience.md\",\n  \"the-self-assembling-harness.md\",\n];\n\nexport const REFERENCE_FILES: Record = {};\nawait Promise.all(REF_FILES.map(async name => {\n  REFERENCE_FILES[name] = await fetchFile(`reference/${name}`);\n}));\n\nexport const DOC_ESSAY_FILES: Record = {};\nawait Promise.all(DOC_FILES.map(async name => {\n  DOC_ESSAY_FILES[name] = await fetchFile(`docs/${name}`);\n}));\n\n// ── Build registry — titles derived from content, not a second map ──\n\nexport const DOC_REGISTRY: Record = {};\n\nfor (const [name, content] of Object.entries(REFERENCE_FILES)) {\n  const slug = name.replace(/\\.md$/, \"\");\n  DOC_REGISTRY[slug] = { title: extractTitle(content, name), content, category: \"reference\", rawPath: `/reference/${name}` };\n}\n\nDOC_REGISTRY[\"SKILL\"] = { title: \"Skill Guide\", content: README, category: \"reference\", rawPath: \"/SKILL.md\" };\n\nfor (const [name, content] of Object.entries(DOC_ESSAY_FILES)) {\n  const slug = name.replace(/\\.md$/, \"\");\n  DOC_REGISTRY[slug] = { title: extractTitle(content, name), content, category: \"essay\", rawPath: `/docs/${name}` };\n}\n",[],[1152],{"_105":1159,"_97":1160,"_166":1161,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1162,"_102":33,"_174":356,"_176":1163,"_177":22,"_178":-5,"_179":1164,"_101":1165},"ca96fae0-1f92-11f1-943c-42dde27851f2","help-content.ts","019cebf2-a8a6-7120-b164-521f76dd391a",["D",1773485074605],"/**\n * help-content.ts — Standard library action definitions and help system content.\n *\n * Pure data constants. No runtime dependencies.\n *\n * STANDARD_LIBRARY: canonical action definitions agents register from help({ key: \"standard_library\" }).\n * HELP_SYSTEM: keyed guidance namespace served by the help action.\n */\n\n/** Standard library — canonical action definitions agents can register directly.\n *  Returned by help({ key: \"standard_library\" }) as a JSON array.\n *  Agents bootstrap a room by reading this, picking what they need, and calling\n *  _register_action with each definition. */\nexport const STANDARD_LIBRARY: any[] = [\n  {\n    id: \"set\",\n    description: \"Write a named value to shared state\",\n    params: {\n      key: { type: \"string\", description: \"State key\" },\n      value: { description: \"Value to set (any type)\" },\n    },\n    writes: [{ scope: \"_shared\", key: \"${params.key}\", value: \"params.value\", expr: true }],\n  },\n  {\n    id: \"delete\",\n    description: \"Remove a key from shared state (write null to signal deletion)\",\n    params: {\n      key: { type: \"string\", description: \"State key to clear\" },\n    },\n    writes: [{ scope: \"_shared\", key: \"${params.key}\", value: null }],\n  },\n  {\n    id: \"increment\",\n    description: \"Increment a named counter in shared state\",\n    params: {\n      key: { type: \"string\", description: \"Counter key\" },\n      by: { type: \"number\", description: \"Amount to increment (default 1)\" },\n    },\n    writes: [{ scope: \"_shared\", key: \"${params.key}\", increment: \"${params.by}\" }],\n  },\n  {\n    id: \"append\",\n    description: \"Append an entry to a named log in shared state\",\n    params: {\n      key: { type: \"string\", description: \"Log key\" },\n      entry: { description: \"Entry to append (any type)\" },\n    },\n    writes: [{ scope: \"_shared\", key: \"${params.key}\", append: true, value: \"params.entry\", expr: true }],\n  },\n  {\n    id: \"update_objective\",\n    description: \"Write or update your objective in your own scope (visible via objective view)\",\n    params: {\n      objective: { type: \"string\", description: \"Your current objective\" },\n      status: { type: \"string\", description: \"Current status (optional)\" },\n    },\n    writes: [\n      { scope: \"${self}\", key: \"objective\", value: \"${params.objective}\" },\n      { scope: \"${self}\", key: \"status\", value: \"${params.status}\" },\n    ],\n  },\n  {\n    id: \"update_status\",\n    description: \"Write your current status to your own scope\",\n    params: {\n      status: { type: \"string\", description: \"Status string\" },\n    },\n    writes: [{ scope: \"${self}\", key: \"status\", value: \"${params.status}\" }],\n  },\n  {\n    id: \"claim\",\n    description: \"Claim an unclaimed slot in shared state (fails if already claimed)\",\n    params: {\n      key: { type: \"string\", description: \"Slot key\" },\n    },\n    if: '!(params.key in state[\"_shared\"]) || state[\"_shared\"][params.key] == null || state[\"_shared\"][params.key] == \"\"',\n    writes: [{ scope: \"_shared\", key: \"${params.key}\", value: \"${self}\" }],\n  },\n  {\n    id: \"submit_result\",\n    description: \"Submit a typed result keyed to your identity (idempotent — overwrites previous submission)\",\n    params: {\n      result: { description: \"Your result (any type)\" },\n    },\n    writes: [{\n      scope: \"_shared\",\n      key: \"${self}.result\",\n      value: \"params.result\",\n      expr: true,\n    }],\n  },\n  {\n    id: \"vote\",\n    description: \"Cast or change your vote. One vote per agent.\",\n    params: {\n      choice: { type: \"string\", description: \"Your choice\" },\n    },\n    writes: [{ scope: \"${self}\", key: \"vote\", value: \"${params.choice}\" }],\n  },\n  {\n    id: \"publish_view\",\n    description: \"Register a view that makes a private key visible to everyone\",\n    params: {\n      key: { type: \"string\", description: \"Key in your own scope to expose\" },\n      label: { type: \"string\", description: \"Human-readable label\" },\n    },\n    writes: [],\n    _note: \"Register this action then invoke _register_view with scope=self and expr referencing your scope key.\",\n  },\n  // ── Role management (agency-and-identity pattern) ──\n  {\n    id: \"define_role\",\n    description: \"Declare a role this room needs filled. The role_id becomes the agent ID when filled.\",\n    params: {\n      role_id: { type: \"string\", description: \"Role identifier (becomes agent ID when filled)\" },\n      description: { type: \"string\", description: \"What this role does\" },\n      bootstrap_actions: { type: \"array\", description: \"Action IDs this role should register on fill\" },\n      bootstrap_views: { type: \"array\", description: \"View IDs this role should register on fill\" },\n    },\n    writes: [{\n      scope: \"_shared\",\n      key: \"roles.${params.role_id}\",\n      merge: {\n        description: \"${params.description}\",\n        filled_by: null,\n        defined_at: \"${now}\",\n      },\n    }],\n  },\n  {\n    id: \"fill_role\",\n    description: \"Claim a role in this room (sets filled_by to your agent ID)\",\n    params: {\n      role_id: { type: \"string\", description: \"Role to fill\" },\n    },\n    if: 'has(state[\"_shared\"], \"roles.\" + params.role_id)',\n    writes: [{\n      scope: \"_shared\",\n      key: \"roles.${params.role_id}\",\n      merge: { filled_by: \"${self}\", filled_at: \"${now}\" },\n    }],\n  },\n  {\n    id: \"vacate_role\",\n    description: \"Release a role you are filling\",\n    params: {\n      role_id: { type: \"string\", description: \"Role to vacate\" },\n    },\n    if: 'has(state[\"_shared\"], \"roles.\" + params.role_id) && state[\"_shared\"][\"roles.\" + params.role_id].filled_by == self',\n    writes: [{\n      scope: \"_shared\",\n      key: \"roles.${params.role_id}\",\n      merge: { filled_by: null, vacated_at: \"${now}\" },\n    }],\n  },\n\n];\n\n/** System default help content — keyed namespace.\n *  Room overrides: write to _help scope with the same key.\n *  Resolution: room state wins, system default is fallback. */\nexport const HELP_SYSTEM: Record = {\n  index: JSON.stringify({\n    description: \"sync v6 help system — keyed guidance namespace\",\n    keys: {\n      guide: \"Participant guide — the read/act rhythm, axioms, built-in actions\",\n      standard_library: \"Ready-to-register action definitions covering common patterns\",\n      vocabulary_bootstrap: \"How to establish room vocabulary from an empty room\",\n      contested_actions: \"What to do when two agents write to the same state key\",\n      directed_messages: \"How to send and wait for attention-routed messages\",\n      context_shaping: \"How to use ContextRequest to control context size and depth\",\n      if_version: \"Proof-of-read versioning for safe concurrent writes\",\n    },\n  }),\n\n  guide: `# sync v6 — participant guide\n\nYou interact with this room using two operations: **read context** and **invoke actions**.\n\n## The rhythm\n\n\\`\\`\\`\nread  →  evaluate  →  act  →  read  →  ...\n\\`\\`\\`\n\n\\`GET /rooms/{room}/context\\` — read everything you can see.\n\\`POST /rooms/{room}/actions/{id}/invoke\\` — act on what you see.\n\\`GET /rooms/{room}/wait?condition={cel}\\` — block until something worth reading.\n\n## The axioms\n\nEvery room starts with four actions:\n\n| Action | Purpose |\n|--------|---------|\n| \\`_register_action\\` | Declare a write capability |\n| \\`_register_view\\` | Declare a read capability |\n| \\`_send_message\\` | Send a message to the room |\n| \\`help\\` | Read this guide and standard library |\n\nThere is no \\`_set_state\\`. Direct writes bypass the constraint. Register an action,\nthen invoke it. The registration is the commitment.\n\n## Your first move in an empty room\n\n1. Read \\`help({ key: \"standard_library\" })\\` — pick the patterns you need\n2. Register them with \\`_register_action\\`\n3. Register views that make your state visible with \\`_register_view\\`\n4. Invoke your registered actions to write state\n\nYour action registrations are your thesis about what this room is for.\n\n## Context shaping\n\n\\`\\`\\`\nGET /context?depth=lean          # available + description only (default)\nGET /context?depth=full          # + writes, params, if conditions\nGET /context?depth=usage         # + invocation counts from audit\nGET /context?only=actions        # just the actions section\nGET /context?messages=false      # skip messages (faster)\nGET /context?messages_after=42   # only messages after seq 42\n\\`\\`\\`\n\n## Reference\n\n- \\`help({ key: \"standard_library\" })\\` — ready-to-register action templates\n- \\`help({ key: \"vocabulary_bootstrap\" })\\` — bootstrapping a room from scratch\n- \\`GET /reference/api.md\\` — full API reference\n- \\`GET /reference/cel.md\\` — CEL expression reference\n- \\`GET /reference/v6.md\\` — architecture and design decisions\n`,\n\n  standard_library: JSON.stringify(STANDARD_LIBRARY, null, 2),\n\n  vocabulary_bootstrap: `# Vocabulary bootstrap\n\nAn empty room has four actions: _register_action, _register_view, _send_message, help.\nYour job is to make the room's purpose legible through vocabulary.\n\n## Minimal bootstrap sequence\n\n1. Read the standard library:\n   \\`invoke help({ key: \"standard_library\" })\\`\n\n2. Register the patterns you need, e.g.:\n   \\`invoke _register_action({ id: \"submit_result\", ...from_standard_library })\\`\n\n3. Register views that expose important state:\n   \\`invoke _register_view({ id: \"results\", expr: 'state[\"_shared\"].keys().filter(k, k.endsWith(\".result\"))' })\\`\n\n4. Update your objective so peers know what you're doing:\n   \\`invoke _register_action({ id: \"update_objective\", ...from_standard_library })\\`\n   \\`invoke update_objective({ objective: \"collect and aggregate answers from N agents\" })\\`\n\n## What to register\n\nRegister actions for everything the room will do. Not generic CRUD — purpose-specific\nvocabulary. Instead of \"set\", register \"submit_answer\". Instead of \"increment\", register\n\"record_vote\". The names matter. They are the protocol.\n\nRegister views for everything that needs to be collectively visible: results, votes,\nagent objectives, coordination state.\n\n## Cold start pattern\n\nIf you are the first agent:\n- You have no vocabulary yet\n- Read the standard library\n- Register minimum viable vocabulary for your objective\n- Start working\n\nIf vocabulary already exists:\n- Read context at depth=full to see writes and if conditions\n- Understand before proposing competing vocabulary\n- Extend or reuse before replacing\n`,\n\n  contested_actions: `# Contested actions\n\nWhen two actions write to the same (scope, key) target, the system detects this at\nregistration time. Both actions survive. The _contested view surfaces the tension.\n\n## What you'll see\n\nAt registration: \\`{ \"warning\": \"competing_write_targets\", \"help\": \"contested_actions\" }\\`\nIn context: the _contested view lists all contested (scope, key) pairs.\n\n## What to do\n\n**Option 1 — Extend:** Can your action write to a different key and a view aggregate both?\n  - You write to \\`_shared.alice.answer\\`, they write to \\`_shared.bob.answer\\`\n  - A view aggregates both: \\`state[\"_shared\"].filter(k, k.endsWith(\".answer\"))\\`\n  - No conflict. Both agents contribute.\n\n**Option 2 — Negotiate:** Send a directed message explaining your intent.\n  \\`invoke _send_message({ to: \"agent-id\", kind: \"negotiation\", body: \"I write X because...\" })\\`\n  They receive directed_unread > 0, read it, respond. Resolve by agreement.\n\n**Option 3 — Yield:** If their semantics are better, delete your action.\n  \\`invoke _delete_action({ id: \"my_competing_action\" })\\`\n\nThe _contested view clears automatically when overlap resolves.\n`,\n\n  directed_messages: `# Directed messages\n\nMessages can be attention-routed to specific agents using the \\`to\\` field.\nDirected messages are NOT private — they remain visible to everyone in the message log.\n\\`to\\` means \"this is for you\" not \"only you can see this\".\n\n## Sending\n\n\\`\\`\\`\ninvoke _send_message({\n  to: \"agent-id\",           // or [\"agent-1\", \"agent-2\"] for multiple\n  kind: \"negotiation\",\n  body: \"your message\"\n})\n\\`\\`\\`\n\n## Waiting for directed messages\n\n\\`\\`\\`\nGET /wait?condition=messages.directed_unread>0\n\\`\\`\\`\n\nThe wait returns full context when the condition is met.\n\\`messages.directed_unread\\` counts messages addressed to you since your last read.\n\n## The negotiation loop\n\n1. See a competing action (or _contested view has entries)\n2. Read the competing agent's objective view to understand their intent\n3. Send directed message with your reasoning\n4. Wait: \\`messages.directed_unread > 0\\`\n5. Read, respond, iterate\n6. Resolve: one yields, or a synthesis action replaces both\n\nThe room's message log is the forum. No sub-rooms needed.\n`,\n\n  context_shaping: `# Context shaping\n\nContext is lean by default. Use query params to control size and depth.\n\n## Depth\n\n\\`?depth=lean\\`   — available, description only (default, smallest payload)\n\\`?depth=full\\`   — + writes, params, if conditions, scope\n\\`?depth=usage\\`  — + invocation_count from audit (adoption signal)\n\nAn action with \\`invocation_count: 7\\` is load-bearing. Contesting it is disruptive.\nExtending is the natural move.\n\n## Section control\n\n\\`?only=actions\\`              — just actions\n\\`?only=state,messages\\`       — state and messages only\n\\`?only=state._shared\\`        — just the _shared scope\n\\`?actions=false\\`             — skip actions section\n\\`?messages=false\\`            — skip messages section\n\n## Message pagination\n\n\\`?messages_after=42\\`         — only messages after seq 42\n\\`?messages_limit=10\\`         — return at most 10 recent messages\n\n## The _context envelope\n\nEvery response includes \\`_context\\` describing its own shape:\n\\`\\`\\`json\n\"_context\": {\n  \"sections\": [\"state\", \"views\", \"agents\", \"actions\", \"messages\", \"self\"],\n  \"depth\": \"lean\",\n  \"help\": [\"vocabulary_bootstrap\"],\n  \"elided\": [\"_audit\"],\n  \"_expand\": [\"?include=_audit\"]\n}\n\\`\\`\\`\n\n\\`_context.help\\` lists currently relevant help keys for the room's state.\nFollow them when present — they are situational, not static.\n`,\n\n  if_version: `# if_version — proof-of-read writes\n\nEvery state entry has two version fields:\n\n- \\`revision\\`: integer, sequential. How many times this key has been written.\n- \\`version\\`: content hash (SHA-256, 16 hex chars). Non-sequential, unforgeable.\n\nTo write a key with \\`if_version\\`, you must supply the current content hash.\nYou cannot manufacture the correct hash without having fetched the current value.\nThis is structural proof-of-read — not enforced intent, but evidence that the\ncontent passed through your context window.\n\n## When to use it\n\nUse \\`if_version\\` when the correctness of your write depends on what was there before.\nClassic compare-and-swap: \"write this new value, but only if the current value is still X.\"\n\n## How to use it\n\n1. Read the current state entry — note its \\`version\\` field (the hash string)\n2. Write with \\`if_version\\` set to that hash:\n\n\\`\\`\\`\ninvoke set({ key: \"phase\", value: \"active\", if_version: \"486ea46224d1bb4f\" })\n\\`\\`\\`\n\nIf the key has changed since you read it (another agent wrote it), the write returns:\n\\`\\`\\`json\n{ \"error\": \"version_conflict\", \"expected_version\": \"486ea46224d1bb4f\", \"current\": { ... } }\n\\`\\`\\`\n\n## First-write guarantee\n\nUse \\`if_version: \"\"\\` (empty string) to assert the key must not exist yet:\n\\`\\`\\`\ninvoke set({ key: \"claim\", value: \"agent-1\", if_version: \"\" })\n\\`\\`\\`\n\nThis fails if the key already exists. Safe distributed claiming.\n\n## Overriding help content\n\nThe same mechanism applies to help keys. To override \\`_help.guide\\`:\n1. Call \\`help({ key: \"guide\" })\\` — note the returned \\`version\\` hash\n2. Write to \\`_help.guide\\` with \\`if_version\\` set to that hash\n\nThis ensures you've read what you're replacing.\n`,\n};\n",[],[1160],{"_105":1167,"_97":1168,"_166":1169,"_168":-5,"_169":149,"_170":1170,"_171":172,"_107":1171,"_102":483,"_174":356,"_176":1172,"_177":22,"_178":-5,"_179":1173,"_101":1174},"fed20a6e-1ff8-11f1-8bda-42dde27851f2","invoke.ts","019cebf2-a8a6-7120-b164-5436f6861ec7",131,["D",1773528971265],"/**\n * invoke.ts — Action invocation engine and built-in action dispatch.\n *\n * Contains invokeAction (the ~350-line write engine), invokeBuiltinAction,\n * and the BUILTIN_ACTIONS / OVERRIDABLE_BUILTINS constants.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { evaluate } from \"npm:@marcbachmann/cel-js\";\nimport {\n  json, rows2objects, contentHash, deepSubstitute, deepMerge,\n} from \"./utils.ts\";\nimport { buildContext, evalCelWithParams, buildViewContext, type BuildContextOptions } from \"./cel.ts\";\nimport { isTimerLive, getTimerStatus, parseTimer, tickLogicalTimers, validateTimer } from \"./timers.ts\";\nimport { touchAgent, type AuthResult } from \"./auth.ts\";\nimport { appendAuditEntry, appendStructuralEvent } from \"./audit.ts\";\nimport { registerAction, deleteAction, computeContestedTargets } from \"./actions.ts\";\nimport { registerView, deleteView } from \"./views.ts\";\nimport { HELP_SYSTEM } from \"./help-content.ts\";\n\n// ── Builtins ──\n\nexport const BUILTIN_ACTIONS: Record }> = {\n  _send_message: {\n    description: \"Send a message to the room\",\n    params: {\n      body: { type: \"string\", description: \"Message content\" },\n      kind: { type: \"string\", description: \"Message kind (default: chat)\" },\n    },\n  },\n  _register_action: {\n    description: \"Register a new action in the room\",\n    params: {\n      id: { type: \"string\", description: \"Action ID\" },\n      scope: { type: \"string\", description: \"Owning scope\" },\n      description: { type: \"string\", description: \"Human-readable description\" },\n      if: { type: \"string\", description: \"CEL availability predicate\" },\n      enabled: { type: \"string\", description: \"CEL enabled expression\" },\n      result: { type: \"string\", description: \"CEL expression evaluated after writes, returned to invoker\" },\n      writes: { type: \"array\", description: \"State write templates\" },\n      params: { type: \"object\", description: \"Parameter schema\" },\n    },\n  },\n  _delete_action: {\n    description: \"Delete an action from the room\",\n    params: { id: { type: \"string\", description: \"Action ID to delete\" } },\n  },\n  _register_view: {\n    description: \"Register a computed view. Pass render: { type, label, ... } to create a surface.\",\n    params: {\n      id: { type: \"string\", description: \"View ID\" },\n      expr: { type: \"string\", description: \"CEL expression\" },\n      scope: { type: \"string\", description: \"Registrar scope (default: self)\" },\n      description: { type: \"string\", description: \"Human-readable description\" },\n      enabled: { type: \"string\", description: \"CEL visibility expression\" },\n      render: { type: \"object\", description: \"Render hint — makes this view a surface. { type, label, ... }\" },\n    },\n  },\n  _delete_view: {\n    description: \"Delete a view from the room\",\n    params: { id: { type: \"string\", description: \"View ID to delete\" } },\n  },\n  help: {\n    description: \"Room-specific participant guide (overridable by custom action)\",\n    params: {\n      key: { type: \"string\", description: \"Help key — omit to list all keys. Try: guide, standard_library, vocabulary_bootstrap\" },\n    },\n  },\n};\n\n/** Built-in actions that can be overridden by custom actions with the same id.\n *  If a room registers a custom action with one of these ids, the custom one\n *  wins in both context listing and invocation. */\nexport const OVERRIDABLE_BUILTINS = new Set([\"help\"]);\n\n// ── Invocation ──\n\nexport async function invokeAction(roomId: string, actionId: string, body: any, auth: AuthResult) {\n  // Built-in actions: dispatch to handler\n  if (actionId.startsWith(\"_\") && BUILTIN_ACTIONS[actionId]) {\n    const response = await invokeBuiltinAction(roomId, actionId, body, auth);\n    appendAuditEntry(roomId, body.agent ?? auth.agentId, actionId, true, body.params ?? {}, response.status).catch(() => {});\n    return response;\n  }\n\n  const agent = body.agent ?? auth.agentId;\n  touchAgent(roomId, agent);\n\n  // v8: Read action definition from _actions scope\n  const scopeResult = await sqlite.execute({\n    sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_actions' AND key = ?`,\n    args: [roomId, actionId],\n  });\n  if (scopeResult.rows.length === 0) {\n    // Fall through to overridable built-in if no custom action registered\n    if (OVERRIDABLE_BUILTINS.has(actionId) && BUILTIN_ACTIONS[actionId]) {\n      const response = await invokeBuiltinAction(roomId, actionId, body, auth);\n      appendAuditEntry(roomId, body.agent ?? auth.agentId, actionId, true, body.params ?? {}, response.status).catch(() => {});\n      return response;\n    }\n    return json({ error: \"action not found\" }, 404);\n  }\n\n  let def: any;\n  try { def = JSON.parse(scopeResult.rows[0][0] as string); } catch {\n    return json({ error: \"action_corrupt\", action: actionId }, 500);\n  }\n\n  // Normalize v8 def to match the field names invoke.ts expects\n  const action: any = {\n    id: actionId,\n    scope: def.scope ?? \"_shared\",\n    enabled_expr: def.enabled ?? null,\n    if_expr: def.if ?? null,\n    result_expr: def.result ?? null,\n    params_json: def.params ? JSON.stringify(def.params) : null,\n    writes_json: def.writes ? JSON.stringify(def.writes) : \"[]\",\n    on_invoke_timer_json: def.on_invoke?.timer ? JSON.stringify(def.on_invoke.timer) : null,\n    // Timer state from _timer field in scope value\n    timer_effect: def._timer?.timer_effect ?? null,\n    timer_expires_at: def._timer?.timer_expires_at ?? null,\n    timer_ticks_left: def._timer?.timer_ticks_left ?? null,\n  };\n\n  if (!isTimerLive(action)) {\n    // Distinguish cooldown (dormant, will re-enable) from truly expired\n    if (action.timer_effect === \"enable\" && getTimerStatus(action) === \"active\") {\n      return json({\n        error: \"action_cooldown\", action: actionId,\n        message: \"action is in cooldown period\",\n        available_at: action.timer_expires_at ?? undefined,\n        ticks_remaining: action.timer_ticks_left ?? undefined,\n      }, 409);\n    }\n    return json({ error: \"action_expired\", action: actionId }, 404);\n  }\n\n  const actionScope = action.scope ?? \"_shared\";\n\n  // Build context with registrar's scope access for predicate evaluation\n  const ctxOpts: BuildContextOptions = { selfAgent: agent ?? undefined };\n  if (actionScope !== \"_shared\") {\n    ctxOpts.includeScopes = [actionScope];\n  }\n  const ctx = await buildContext(roomId, ctxOpts);\n\n  // Check enabled\n  if (action.enabled_expr) {\n    try {\n      if (!evaluate(action.enabled_expr, ctx)) return json({ error: \"action_disabled\", id: actionId }, 409);\n    } catch (e: any) { return json({ error: \"cel_error\", field: \"enabled\", detail: e.message }, 400); }\n  }\n\n  // Validate and merge params\n  const params = body.params ?? {};\n  if (action.params_json) {\n    try {\n      const schema = JSON.parse(action.params_json);\n      for (const [name, def] of Object.entries(schema as Record)) {\n        if (def.enum && params[name] !== undefined && !def.enum.includes(params[name])) {\n          return json({ error: \"invalid_param\", param: name, value: params[name], allowed: def.enum }, 400);\n        }\n        if (def.type && def.type !== \"any\" && params[name] !== undefined && typeof params[name] !== def.type) {\n          return json({ error: \"invalid_param_type\", param: name, expected: def.type, actual: typeof params[name] }, 400);\n        }\n      }\n    } catch {}\n  }\n\n  // Check if predicate\n  if (action.if_expr) {\n    const result = evalCelWithParams(action.if_expr, ctx, params);\n    if (!result.ok) return json({ error: \"cel_error\", field: \"if\", detail: result.error }, 400);\n    if (!result.value) return json({ error: \"precondition_failed\", action: actionId, expression: action.if_expr }, 409);\n  }\n\n  // Execute writes\n  const writes = JSON.parse(action.writes_json || \"[]\");\n  const statements: any[] = [];\n  const executedWrites: any[] = [];\n\n  for (const w of writes) {\n    // Shared timestamp for consistent ${now} across scope, key + value\n    const invokeTs = new Date().toISOString();\n\n    // Resolve template vars in scope before authority check\n    let writeScope = w.scope ?? \"_shared\";\n    if (writeScope.includes(\"${\")) {\n      writeScope = writeScope.replace(/\\$\\{(params\\.(\\w+)|self|now)\\}/g, (match: string, full: string, paramName: string) => {\n        if (paramName !== undefined) return String(params[paramName] ?? \"\");\n        if (full === \"self\") return agent ?? \"\";\n        if (full === \"now\") return invokeTs;\n        return match;\n      });\n    }\n\n    // Scope enforcement via registrar-identity bridging\n    if (writeScope !== \"_shared\" && !writeScope.startsWith(\"_\")) {\n      const registrarAllowed = actionScope === writeScope;\n      const invokerAllowed = agent === writeScope;\n      if (!registrarAllowed && !invokerAllowed) {\n        return json({ error: \"scope_denied\", message: `action \"${actionId}\" cannot write to scope \"${writeScope}\"` }, 403);\n      }\n    }\n\n    // Resolve param substitutions in key (single-pass to prevent injection)\n    let key = w.key ?? null;\n    if (key && key.includes(\"${\")) {\n      key = key.replace(/\\$\\{(params\\.(\\w+)|self|now)\\}/g, (match: string, full: string, paramName: string) => {\n        if (paramName !== undefined) return String(params[paramName] ?? \"\");\n        if (full === \"self\") return agent ?? \"\";\n        if (full === \"now\") return invokeTs;\n        return match;\n      });\n    }\n\n    // Resolve value\n    let value: any;\n    if (w.expr === true && typeof w.value === \"string\") {\n      const evalResult = evalCelWithParams(w.value, ctx, params);\n      if (!evalResult.ok) return json({ error: \"cel_error\", field: \"writes[].value\", detail: evalResult.error, key }, 400);\n      value = evalResult.value;\n    } else {\n      value = deepSubstitute(w.value, params, agent ?? \"\", invokeTs);\n    }\n\n    let writeTimerCols = parseTimer(null);\n    if (w.timer) { const tv = validateTimer(w.timer); if (tv.valid) writeTimerCols = parseTimer(w.timer); }\n    const enabledExpr = w.enabled ?? null;\n    const wTimerArgs = [writeTimerCols.timer_json, writeTimerCols.timer_expires_at, writeTimerCols.timer_ticks_left,\n                       writeTimerCols.timer_tick_on, writeTimerCols.timer_effect, writeTimerCols.timer_started_at];\n\n    // Handle append\n    let sortKey: number | null = null;\n    let arrayPushAction: any = undefined;\n    if (w.append === true) {\n      if (key) {\n        // Array-push: append value to JSON array stored at this key\n        const existing = await sqlite.execute({\n          sql: `SELECT value FROM state WHERE room_id = ? AND scope = ? AND key = ?`,\n          args: [roomId, writeScope, key],\n        });\n        let arr: any[] = [];\n        if (existing.rows.length > 0) {\n          try {\n            const parsed = JSON.parse(existing.rows[0][0] as string);\n            arr = Array.isArray(parsed) ? parsed : [parsed];\n          } catch { arr = []; }\n        }\n        if (value === undefined) return json({ error: \"write_failed\", action: actionId, reason: \"value is required for array append\", key }, 400);\n        arr.push(value);\n        arrayPushAction = arr;\n      } else {\n        const seqResult = await sqlite.execute({\n          sql: `SELECT COALESCE(MAX(sort_key), 0) + 1 as next_seq FROM state WHERE room_id = ? AND scope = ?`,\n          args: [roomId, writeScope],\n        });\n        sortKey = Number(rows2objects(seqResult)[0]?.next_seq ?? 1);\n        key = String(sortKey);\n      }\n    }\n\n    if (!key) return json({ error: \"write needs a key (or use append: true)\", write: w }, 400);\n\n    // if_version: compare-and-swap on write templates (proof-of-read)\n    if (w.if_version !== undefined) {\n      let expectedVersion = w.if_version;\n      if (typeof expectedVersion === \"string\" && expectedVersion.includes(\"${\")) {\n        expectedVersion = expectedVersion.replace(/\\$\\{(params\\.(\\w+)|self|now)\\}/g, (match: string, full: string, paramName: string) => {\n          if (paramName !== undefined) return String(params[paramName] ?? \"\");\n          if (full === \"self\") return agent ?? \"\";\n          if (full === \"now\") return invokeTs;\n          return match;\n        });\n      }\n      const expected = String(expectedVersion);\n      const current = await sqlite.execute({\n        sql: `SELECT version, value, revision FROM state WHERE room_id = ? AND scope = ? AND key = ?`,\n        args: [roomId, writeScope, key],\n      });\n      if (current.rows.length > 0) {\n        const row = rows2objects(current)[0];\n        if (row.version !== expected) {\n          return json({ error: \"version_conflict\", expected_version: expected, current: row }, 409);\n        }\n      } else if (expected !== \"\") {\n        return json({ error: \"not_found\", message: \"key does not exist, use if_version='' to create\", scope: writeScope, key }, 404);\n      }\n    }\n\n    // Handle merge in action writes\n    if (w.merge && typeof w.merge === \"object\") {\n      let mergePayload = deepSubstitute(w.merge, params, agent ?? \"\", invokeTs);\n      const existing = await sqlite.execute({\n        sql: `SELECT value FROM state WHERE room_id = ? AND scope = ? AND key = ?`,\n        args: [roomId, writeScope, key],\n      });\n      let currentValue: any = {};\n      if (existing.rows.length > 0) { try { currentValue = JSON.parse(existing.rows[0][0] as string); } catch {} }\n      const mergedValue = JSON.stringify(deepMerge(currentValue, mergePayload));\n      const vHash = await contentHash(mergedValue);\n\n      statements.push({\n        sql: `INSERT INTO state (room_id, scope, key, sort_key, value, version, revision, updated_at, enabled_expr,\n                timer_json, timer_expires_at, timer_ticks_left, timer_tick_on, timer_effect, timer_started_at)\n              VALUES (?, ?, ?, ?, ?, ?, 1, datetime('now'), ?, ?, ?, ?, ?, ?, ?)\n              ON CONFLICT(room_id, scope, key) DO UPDATE SET\n                value = excluded.value, version = excluded.version, revision = state.revision + 1,\n                updated_at = datetime('now'),\n                sort_key = COALESCE(excluded.sort_key, state.sort_key),\n                enabled_expr = excluded.enabled_expr,\n                timer_json = excluded.timer_json, timer_expires_at = excluded.timer_expires_at,\n                timer_ticks_left = excluded.timer_ticks_left, timer_tick_on = excluded.timer_tick_on,\n                timer_effect = excluded.timer_effect, timer_started_at = excluded.timer_started_at`,\n        args: [roomId, writeScope, key, sortKey, mergedValue, vHash, enabledExpr, ...wTimerArgs],\n      });\n      executedWrites.push({ scope: writeScope, key, merge: mergePayload });\n    } else if (w.increment) {\n      // Increment: read-compute-write to maintain hash consistency\n      let resolvedIncrement: any = w.increment;\n      if (typeof resolvedIncrement === \"string\") {\n        resolvedIncrement = deepSubstitute(resolvedIncrement, params, agent ?? \"\", invokeTs);\n        const n = Number(resolvedIncrement);\n        resolvedIncrement = isNaN(n) ? 1 : n;\n      }\n      const actionIncrementAmount = typeof resolvedIncrement === \"number\" ? resolvedIncrement : (value ?? 1);\n      const existingInc = await sqlite.execute({\n        sql: `SELECT value FROM state WHERE room_id = ? AND scope = ? AND key = ?`,\n        args: [roomId, writeScope, key],\n      });\n      const currentNum = existingInc.rows.length > 0 ? (parseInt(existingInc.rows[0][0] as string) || 0) : 0;\n      const newNum = currentNum + actionIncrementAmount;\n      const newValue = String(newNum);\n      const vHash = await contentHash(newValue);\n      if (existingInc.rows.length > 0) {\n        statements.push({\n          sql: `UPDATE state SET value = ?, version = ?, revision = revision + 1, updated_at = datetime('now')\n                WHERE room_id = ? AND scope = ? AND key = ?`,\n          args: [newValue, vHash, roomId, writeScope, key],\n        });\n      } else {\n        statements.push({\n          sql: `INSERT INTO state (room_id, scope, key, sort_key, value, version, revision, updated_at, enabled_expr,\n                  timer_json, timer_expires_at, timer_ticks_left, timer_tick_on, timer_effect, timer_started_at)\n                VALUES (?, ?, ?, ?, ?, ?, 1, datetime('now'), ?, ?, ?, ?, ?, ?, ?)`,\n          args: [roomId, writeScope, key, sortKey, newValue, vHash, enabledExpr, ...wTimerArgs],\n        });\n      }\n      executedWrites.push({ scope: writeScope, key, value: newNum });\n    } else {\n      const rawAction = arrayPushAction !== undefined ? arrayPushAction : value;\n      const strValue = typeof rawAction === \"string\" ? rawAction : JSON.stringify(rawAction);\n      const vHash = await contentHash(strValue);\n      statements.push({\n        sql: `INSERT INTO state (room_id, scope, key, sort_key, value, version, revision, updated_at, enabled_expr,\n                timer_json, timer_expires_at, timer_ticks_left, timer_tick_on, timer_effect, timer_started_at)\n              VALUES (?, ?, ?, ?, ?, ?, 1, datetime('now'), ?, ?, ?, ?, ?, ?, ?)\n              ON CONFLICT(room_id, scope, key) DO UPDATE SET\n                value = excluded.value, version = excluded.version, revision = state.revision + 1,\n                updated_at = datetime('now'),\n                sort_key = COALESCE(excluded.sort_key, state.sort_key),\n                enabled_expr = excluded.enabled_expr,\n                timer_json = excluded.timer_json, timer_expires_at = excluded.timer_expires_at,\n                timer_ticks_left = excluded.timer_ticks_left, timer_tick_on = excluded.timer_tick_on,\n                timer_effect = excluded.timer_effect, timer_started_at = excluded.timer_started_at`,\n        args: [roomId, writeScope, key, sortKey, strValue, vHash, enabledExpr, ...wTimerArgs],\n      });\n      executedWrites.push({ scope: writeScope, key, value });\n    }\n  }\n\n  if (statements.length > 0) {\n    try {\n      await sqlite.batch(statements);\n    } catch (e: any) {\n      const msg = e.message || String(e);\n      const detail = msg.includes(\"SQLITE_CONSTRAINT\") ? msg.split(\":\").slice(1).join(\":\").trim() : msg;\n      return json({\n        error: \"write_failed\",\n        action: actionId,\n        detail,\n        writes_attempted: executedWrites,\n      }, 500);\n    }\n  }\n\n  // Tick logical timers\n  for (const w of executedWrites) {\n    await tickLogicalTimers(roomId, w.scope, w.key);\n  }\n\n  // Apply on_invoke cooldown timer — update _timer field in _actions scope\n  if (action.on_invoke_timer_json) {\n    try {\n      const invokeTimer = JSON.parse(action.on_invoke_timer_json);\n      const cols = parseTimer(invokeTimer);\n      // Re-read current def, update _timer, write back\n      const currentResult = await sqlite.execute({\n        sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_actions' AND key = ?`,\n        args: [roomId, actionId],\n      });\n      if (currentResult.rows.length > 0) {\n        const currentDef = JSON.parse(currentResult.rows[0][0] as string);\n        currentDef._timer = {\n          timer_json: cols.timer_json,\n          timer_expires_at: cols.timer_expires_at,\n          timer_ticks_left: cols.timer_ticks_left,\n          timer_tick_on: cols.timer_tick_on,\n          timer_effect: cols.timer_effect,\n          timer_started_at: cols.timer_started_at,\n        };\n        await sqlite.execute({\n          sql: `UPDATE state SET value = ?, revision = revision + 1, updated_at = datetime('now')\n                WHERE room_id = ? AND scope = '_actions' AND key = ?`,\n          args: [JSON.stringify(currentDef), roomId, actionId],\n        });\n      }\n    } catch {}\n  }\n\n  // Log invocation to _messages\n  const logSeqResult = await sqlite.execute({\n    sql: `SELECT COALESCE(MAX(sort_key), 0) + 1 as next_seq FROM state WHERE room_id = ? AND scope = '_messages'`,\n    args: [roomId],\n  });\n  const logSeq = Number(rows2objects(logSeqResult)[0]?.next_seq ?? 1);\n  const logValue = JSON.stringify({\n    from: agent, kind: \"action_invocation\",\n    body: `${actionId}(${Object.entries(params).map(([k,v]) => `${k}=${JSON.stringify(v)}`).join(\", \")})`,\n    action: actionId, params, writes: executedWrites,\n  });\n  const logHash = await contentHash(logValue);\n  await sqlite.execute({\n    sql: `INSERT INTO state (room_id, scope, key, sort_key, value, version, revision, updated_at)\n          VALUES (?, '_messages', ?, ?, ?, ?, 1, datetime('now'))`,\n    args: [roomId, String(logSeq), logSeq, logValue, logHash],\n  });\n\n  // Include the auto-log message write so audit entries capture it for replay reconstruction\n  const auditWrites = [...executedWrites, { scope: \"_messages\", key: String(logSeq), value: JSON.parse(logValue) }];\n  appendAuditEntry(roomId, agent, actionId, false, params, 200, auditWrites).catch(() => {});\n\n  // Evaluate result expression against post-write state\n  let result: any = undefined;\n  if (action.result_expr) {\n    try {\n      const postCtx = await buildContext(roomId, {\n        selfAgent: agent ?? undefined,\n        includeScopes: actionScope !== \"_shared\" ? [actionScope] : undefined,\n      });\n      const evalResult = evalCelWithParams(action.result_expr, postCtx, params);\n      if (evalResult.ok) {\n        result = typeof evalResult.value === \"bigint\" ? Number(evalResult.value) : evalResult.value;\n      } else {\n        result = { _error: evalResult.error };\n      }\n    } catch (e: any) {\n      result = { _error: e.message };\n    }\n  }\n\n  const response: any = { invoked: true, action: actionId, agent, params, writes: executedWrites };\n  if (result !== undefined) response.result = result;\n  return json(response);\n}\n\n// ── Built-in action dispatch ──\n\nexport async function invokeBuiltinAction(roomId: string, actionId: string, body: any, auth: AuthResult): Promise {\n  const agent = body.agent ?? auth.agentId;\n  const params = body.params ?? {};\n  touchAgent(roomId, agent);\n\n  switch (actionId) {\n    case \"_send_message\": {\n      const msgBody = params.body;\n      if (!msgBody) return json({ error: \"params.body is required\" }, 400);\n      const kind = params.kind ?? \"chat\";\n      const to = params.to ?? null; // agent ID string or array — directed but not private\n      const seqResult = await sqlite.execute({\n        sql: `SELECT COALESCE(MAX(sort_key), 0) + 1 as next_seq FROM state WHERE room_id = ? AND scope = '_messages'`,\n        args: [roomId],\n      });\n      const seq = Number(rows2objects(seqResult)[0]?.next_seq ?? 1);\n      const msgObj: any = { from: agent, kind, body: msgBody };\n      if (to !== null) msgObj.to = Array.isArray(to) ? to : [to];\n      const value = JSON.stringify(msgObj);\n      const vHash = await contentHash(value);\n      await sqlite.execute({\n        sql: `INSERT INTO state (room_id, scope, key, sort_key, value, version, revision, updated_at)\n              VALUES (?, '_messages', ?, ?, ?, ?, 1, datetime('now'))`,\n        args: [roomId, String(seq), seq, value, vHash],\n      });\n      return json({ ok: true, action: \"_send_message\", seq, from: agent, kind, ...(msgObj.to ? { to: msgObj.to } : {}) });\n    }\n\n    case \"_register_action\": {\n      return registerAction(roomId, {\n        id: params.id,\n        scope: params.scope,\n        description: params.description,\n        if: params.if,\n        enabled: params.enabled,\n        result: params.result,\n        writes: params.writes,\n        params: params.params,\n        timer: params.timer,\n        on_invoke: params.on_invoke,\n      }, auth);\n    }\n\n    case \"_delete_action\": {\n      if (!params.id) return json({ error: \"params.id is required\" }, 400);\n      return deleteAction(roomId, params.id, auth);\n    }\n\n    case \"_register_view\": {\n      return registerView(roomId, {\n        id: params.id,\n        expr: params.expr,\n        scope: params.scope ?? auth.agentId ?? \"_shared\",\n        description: params.description,\n        enabled: params.enabled,\n        render: params.render,\n        timer: params.timer,\n      }, auth);\n    }\n\n    case \"_delete_view\": {\n      if (!params.id) return json({ error: \"params.id is required\" }, 400);\n      return deleteView(roomId, params.id, auth);\n    }\n\n    case \"help\": {\n      const key = params.key;\n      if (!key) {\n        // Return index — merge system keys with any room overrides\n        const roomHelpResult = await sqlite.execute({\n          sql: `SELECT key FROM state WHERE room_id = ? AND scope = '_help' ORDER BY key`,\n          args: [roomId],\n        });\n        const roomKeys = rows2objects(roomHelpResult).map((r: any) => r.key);\n        const allKeys = [...new Set([...Object.keys(HELP_SYSTEM), ...roomKeys])];\n        return json({\n          invoked: true, action: \"help\",\n          keys: allKeys,\n          usage: 'invoke help({ key: \"\" }) to read a specific entry',\n        });\n      }\n      // Try room override first\n      const roomEntry = await sqlite.execute({\n        sql: `SELECT value, version, revision FROM state WHERE room_id = ? AND scope = '_help' AND key = ?`,\n        args: [roomId, key],\n      });\n      if (roomEntry.rows.length > 0) {\n        const row = rows2objects(roomEntry)[0];\n        let content = row.value;\n        try { content = JSON.parse(row.value); } catch {}\n        return json({\n          invoked: true, action: \"help\", key,\n          content,\n          version: row.version,   // hash — supply to if_version to override\n          revision: row.revision,\n          source: \"room\",\n        });\n      }\n      // System default\n      const rawContent = HELP_SYSTEM[key];\n      if (!rawContent) {\n        return json({\n          error: \"help_key_not_found\", key,\n          available: Object.keys(HELP_SYSTEM),\n        }, 404);\n      }\n      // Parse JSON keys for cleaner return; keep string keys as strings\n      let content: any = rawContent;\n      try { content = JSON.parse(rawContent); } catch {}\n      // Compute hash so caller can supply it to if_version when overriding\n      const hash = await contentHash(rawContent);\n      return json({\n        invoked: true, action: \"help\", key,\n        content,\n        version: hash,   // supply to if_version to override this key\n        revision: 0,     // 0 = system default, never written to room state\n        source: \"system\",\n      });\n    }\n\n    default:\n      return json({ error: \"unknown builtin action\", id: actionId }, 404);\n  }\n}\n",[],[1168],{"_105":1176,"_97":1177,"_166":1178,"_168":-5,"_169":149,"_170":1179,"_171":172,"_107":1180,"_102":1181,"_174":810,"_176":1182,"_177":22,"_178":-5,"_179":1183,"_101":1184},"12525382-2008-11f1-9706-42dde27851f2","main.ts","019cebf2-a8a6-7120-b164-5959c919a37b",167,["D",1773535446424],17,"// v7-phase1 — unified auth model · replay-rw+demos · demo-selector\n//\n// main.ts — HTTP router + barrel re-exports.\n//\n// All domain logic has been extracted to focused modules.\n// This file provides the HTTP routing layer and re-exports\n// for backward compatibility with mcp/tools.ts.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { migrate } from \"./schema.ts\";\nimport { migrateUnifiedAuth } from \"./schema-v7.ts\";\nimport { json, rows2objects, PARSE_FAILED, parseBody, stripNulls } from \"./utils.ts\";\nimport { handleMcpRequest } from \"./mcp/mcp.ts\";\nimport { renderLandingPage, renderDashboardPage, renderDocPage, renderDocsIndex, renderOverviewPage } from \"./frontend/pages.tsx\";\nimport { mdToHtml } from \"./frontend/markdown.ts\";\nimport { README, REFERENCE_FILES, DOC_REGISTRY } from \"./docs.ts\";\nimport {\n  resolveAuth, requireRoomToken, requireWriteAuth, assertIdentity,\n  hasFullReadAccess, hashToken, hashTokenB64, type AuthResult,\n} from \"./auth.ts\";\nimport { touchAgent } from \"./auth.ts\";\nimport { createRoom, getRoom, listRooms, rotateViewToken } from \"./rooms.ts\";\nimport { joinRoom, insertAgentDirect, updateAgent } from \"./agents.ts\";\nimport { registerAction, deleteAction } from \"./actions.ts\";\nimport { registerView, deleteView } from \"./views.ts\";\nimport { invokeAction, invokeBuiltinAction } from \"./invoke.ts\";\nimport { buildExpandedContext, evalExpression, parseContextRequest, type ContextRequest } from \"./context.ts\";\nimport { waitForCondition } from \"./wait.ts\";\nimport { replayRoom } from \"./replay.ts\";\nimport { queryKeyHistory, queryPrefixHistory } from \"./schema-v8.ts\";\nimport { queryViewSamples } from \"./sampling.ts\";\nimport { computeSalience } from \"./salience.ts\";\nimport { dashboardPollV8 } from \"./poll-v8.ts\";\nimport { renderDashboardV8 } from \"./frontend/dashboard-v8.ts\";\nimport { parseScope } from \"./mcp/scope.ts\";\nimport { validateTokenByHash } from \"./mcp/db.ts\";\n// v7: Device auth + token management\nimport {\n  handleDeviceStart, handleDevicePage, handleDeviceLookup,\n  handleDeviceApprove, handleDeviceDeny, handleDeviceToken,\n} from \"./mcp/device.ts\";\nimport { handleElevatePage, handleConsentPage, handleConsentRooms, handleConsentApprove } from \"./mcp/elevate.ts\";\nimport {\n  handleMintToken, handleListTokens, handleRevokeToken, handleUpdateToken,\n  handleRefreshToken, handleInvite, handleClaim,\n} from \"./tokens.ts\";\n\n// ── Re-exports for mcp/tools.ts backward compatibility ──\n\nexport {\n  createRoom,\n  listRooms,\n  joinRoom,\n  insertAgentDirect,\n  registerAction,\n  deleteAction,\n  registerView,\n  deleteView,\n  invokeAction,\n  invokeBuiltinAction,\n  buildExpandedContext,\n  evalExpression,\n  waitForCondition,\n};\nexport type { ContextRequest };\n\n// ── Migration guard ──\n\nlet migrated = false;\nasync function ensureMigrated() {\n  if (!migrated) {\n    await migrate();\n    await migrateUnifiedAuth();\n    migrated = true;\n  }\n}\n\n// ── Context endpoint ──\n\nasync function getContext(roomId: string, url: URL, auth: AuthResult) {\n  touchAgent(roomId, auth.agentId);\n  const req = parseContextRequest(url);\n  const fullCtx = await buildExpandedContext(roomId, auth, req);\n  return json(fullCtx);\n}\n\n// ── Router ──\n\nexport default async function (req: Request) {\n  await ensureMigrated();\n  const url = new URL(req.url);\n  const compact = url.searchParams.get(\"compact\") === \"true\";\n\n  const response = await route(req, url);\n\n  if (compact && response.headers.get(\"Content-Type\")?.includes(\"json\")) {\n    const data = await response.json();\n    return json(stripNulls(data), response.status);\n  }\n  return response;\n}\n\nasync function route(req: Request, _url?: URL): Promise {\n  const url = _url ?? new URL(req.url);\n  const method = req.method;\n  const parts = url.pathname.split(\"/\").filter(Boolean);\n\n  // CORS preflight\n  if (method === \"OPTIONS\") {\n    return new Response(null, {\n      headers: {\n        \"Access-Control-Allow-Origin\": \"*\",\n        \"Access-Control-Allow-Methods\": \"GET,POST,PUT,PATCH,DELETE,OPTIONS\",\n        \"Access-Control-Allow-Headers\": \"Content-Type,Authorization\",\n      },\n    });\n  }\n\n  // ── v7: Device auth endpoints ──\n  const p = url.pathname;\n  if (p.startsWith(\"/auth/device\")) {\n    if (method === \"POST\" && p === \"/auth/device\") return handleDeviceStart(req);\n    if (method === \"GET\" && p === \"/auth/device\") return handleDevicePage(req);\n    if (method === \"POST\" && p === \"/auth/device/lookup\") return handleDeviceLookup(req);\n    if (method === \"POST\" && p === \"/auth/device/approve\") return handleDeviceApprove(req);\n    if (method === \"POST\" && p === \"/auth/device/deny\") return handleDeviceDeny(req);\n    if (method === \"POST\" && p === \"/auth/device/token\") return handleDeviceToken(req);\n    return json({ error: \"not found\" }, 404);\n  }\n\n  // ── v7: Unified consent page ──\n  if (p.startsWith(\"/auth/consent\")) {\n    if (method === \"GET\" && p === \"/auth/consent\") return handleConsentPage(req);\n    if (method === \"GET\" && p === \"/auth/consent/rooms\") return handleConsentRooms(req);\n    if (method === \"POST\" && p === \"/auth/consent/approve\") return handleConsentApprove(req);\n    return json({ error: \"not found\" }, 404);\n  }\n\n  // ── v7: Legacy /auth/elevate → redirect to /auth/consent ──\n  if (p.startsWith(\"/auth/elevate\")) {\n    if (method === \"GET\" && p === \"/auth/elevate\") return handleElevatePage(req);\n    // Legacy approve endpoint — redirect to consent approve\n    if (method === \"POST\" && p === \"/auth/elevate/approve\") return handleConsentApprove(req);\n    if (method === \"GET\" && p === \"/auth/elevate/token\") return handleConsentRooms(req);\n    return json({ error: \"not found\" }, 404);\n  }\n\n  // ── v7: Token management endpoints ──\n  if (p === \"/tokens\" || p.startsWith(\"/tokens/\")) {\n    if (method === \"POST\" && p === \"/tokens\") return handleMintToken(req);\n    if (method === \"POST\" && p === \"/tokens/refresh\") return handleRefreshToken(req);\n    if (method === \"GET\" && p === \"/tokens\") return handleListTokens(req);\n    if (method === \"PATCH\" && parts[0] === \"tokens\" && parts[1]) {\n      return handleUpdateToken(req, parts[1]);\n    }\n    if (method === \"DELETE\" && parts[0] === \"tokens\" && parts[1]) {\n      return handleRevokeToken(req, parts[1]);\n    }\n    return json({ error: \"not found\" }, 404);\n  }\n\n  // ── MCP / OAuth / WebAuthn / Management — delegate to MCP handler ──\n  if (\n    p === \"/mcp\" ||\n    p.startsWith(\"/oauth/\") ||\n    p.startsWith(\"/webauthn/\") ||\n    p.startsWith(\"/manage\") ||\n    p.startsWith(\"/recover\") ||\n    (p.startsWith(\"/.well-known/oauth\"))\n  ) {\n    return handleMcpRequest(req);\n  }\n\n  // ── Legacy /vault → 410 Gone ──\n  if (p.startsWith(\"/vault\")) {\n    return json({ error: \"vault_deprecated\", message: \"Use /tokens endpoints instead.\" }, 410);\n  }\n\n  // POST /rooms — v7: require auth with create_rooms scope (or legacy token)\n  if (method === \"POST\" && parts[0] === \"rooms\" && parts.length === 1) {\n    const body = await parseBody(req);\n    if (body === PARSE_FAILED) return json({ error: \"invalid JSON\" }, 400);\n    let auth: AuthResult | undefined;\n    let creatingTokenId: string | null = null;\n    const header = req.headers.get(\"Authorization\");\n    if (!header?.startsWith(\"Bearer \")) {\n      return json({ error: \"authentication_required\", message: \"Room creation requires authentication. Use device auth or OAuth to get a token.\" }, 401);\n    }\n    const tokenStr = header.slice(7);\n    // v7 tokens: check create_rooms scope\n    if (tokenStr.startsWith(\"tok_\")) {\n      const hash = await hashTokenB64(tokenStr);\n      const tok = await validateTokenByHash(hash);\n      if (!tok) return json({ error: \"invalid_token\" }, 401);\n      const parsed = parseScope(tok.scope);\n      if (!parsed.createRooms && !parsed.wildcardRooms) {\n        return json({ error: \"scope_denied\", message: \"Token scope does not include create_rooms\" }, 403);\n      }\n      auth = { authenticated: true, kind: \"room\", agentId: null, roomId: null, grants: [\"*\"], userId: tok.mintedBy };\n      // Track which token is creating this room (for scope append)\n      if (!parsed.wildcardRooms) creatingTokenId = tok.id;\n    } else {\n      // Legacy tokens\n      const result = await resolveAuth(req, \"__room_creation__\");\n      if (result instanceof Response) return result;\n      if (!result.authenticated) return json({ error: \"invalid_token\" }, 401);\n      if (result.userId) auth = result;\n      else auth = result;\n    }\n    const response = await createRoom(body, auth);\n    // v7: Append the new room to the creating token's scope\n    if (creatingTokenId && response.status === 201) {\n      try {\n        const roomData = await response.clone().json();\n        const newRoomId = roomData.id;\n        if (newRoomId) {\n          await sqlite.execute({\n            sql: `UPDATE tokens SET scope = scope || ' rooms:' || ? WHERE id = ?`,\n            args: [newRoomId, creatingTokenId],\n          });\n        }\n      } catch { /* best-effort */ }\n    }\n    return response;\n  }\n  // GET /rooms\n  if (method === \"GET\" && parts[0] === \"rooms\" && parts.length === 1) return listRooms(req);\n  // GET /rooms/:id\n  if (method === \"GET\" && parts[0] === \"rooms\" && parts.length === 2 && parts[1] !== \"\") return getRoom(parts[1]);\n\n  const roomId = parts[1];\n  if (!roomId || parts[0] !== \"rooms\") {\n    // /overview — Vision & Architecture page\n    if (method === \"GET\" && (url.pathname === \"/overview\" || url.pathname === \"/overview/\")) {\n      return renderOverviewPage();\n    }\n    // /docs — SSR index and rendered pages\n    if (method === \"GET\" && (url.pathname === \"/docs\" || url.pathname === \"/docs/\")) {\n      const docList = Object.entries(DOC_REGISTRY).map(([slug, d]) => ({ slug, title: d.title, category: d.category }));\n      return renderDocsIndex(docList);\n    }\n    if (method === \"GET\" && url.pathname.startsWith(\"/docs/\") && parts.length === 2) {\n      const rawSlug = parts[1];\n      if (rawSlug.endsWith(\".md\")) {\n        const bareSlug = rawSlug.replace(/\\.md$/, \"\");\n        const doc = DOC_REGISTRY[bareSlug];\n        if (doc) return new Response(doc.content, { headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } });\n        return json({ error: \"doc not found\" }, 404);\n      }\n      const doc = DOC_REGISTRY[rawSlug];\n      if (doc) return renderDocPage(rawSlug, doc.title, mdToHtml(doc.content), doc.rawPath);\n      return json({ error: \"doc not found\" }, 404);\n    }\n    if (url.pathname === \"/\" || url.pathname === \"\") {\n      const roomId = url.searchParams.get(\"room\");\n      const docId = url.searchParams.get(\"doc\");\n      if (roomId) return renderDashboardPage(roomId);\n      if (docId) {\n        const slug = docId.replace(/\\.md$/, \"\");\n        return new Response(null, { status: 301, headers: { \"Location\": `/docs/${slug}` } });\n      }\n      return renderLandingPage();\n    }\n    if (method === \"GET\" && url.pathname.startsWith(\"/frontend/\")) {\n      const modulePath = url.pathname.slice(1);\n      const esmUrl = `https://esm.town/v/c15r/sync/${modulePath}`;\n      return new Response(null, {\n        status: 302,\n        headers: {\n          \"Location\": esmUrl,\n          \"Cache-Control\": \"no-cache, no-store, must-revalidate\",\n        },\n      });\n    }\n    if (method === \"GET\" && (url.pathname.startsWith(\"/static/\") || url.pathname === \"/favicon.ico\" || url.pathname === \"/favicon.svg\")) {\n      const filePath = url.pathname === \"/favicon.ico\" ? \"static/favicon.ico\"\n                     : url.pathname === \"/favicon.svg\" ? \"static/favicon.svg\"\n                     : url.pathname.slice(1);\n      try {\n        const fileUrl = new URL(`./${filePath}`, import.meta.url);\n        const res = await fetch(fileUrl);\n        if (!res.ok) return json({ error: \"not found\" }, 404);\n        const body = await res.arrayBuffer();\n        const ext = filePath.split(\".\").pop()?.toLowerCase() ?? \"\";\n        const mimeTypes: Record = {\n          ico: \"image/x-icon\", svg: \"image/svg+xml\", png: \"image/png\",\n          jpg: \"image/jpeg\", jpeg: \"image/jpeg\", gif: \"image/gif\", webp: \"image/webp\",\n          css: \"text/css\", js: \"application/javascript\", json: \"application/json\",\n          woff: \"font/woff\", woff2: \"font/woff2\", ttf: \"font/ttf\",\n          txt: \"text/plain\", xml: \"application/xml\",\n        };\n        return new Response(body, {\n          headers: {\n            \"Content-Type\": mimeTypes[ext] || \"application/octet-stream\",\n            \"Cache-Control\": \"public, max-age=86400\",\n          },\n        });\n      } catch {\n        return json({ error: \"not found\" }, 404);\n      }\n    }\n    if (method === \"GET\" && (url.pathname === \"/SKILL.md\" || url.pathname === \"/skill.md\")) {\n      return new Response(README, { headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } });\n    }\n    if (method === \"GET\" && parts[0] === \"reference\" && parts.length === 2) {\n      const doc = REFERENCE_FILES[parts[1]];\n      if (doc) return new Response(doc, { headers: { \"Content-Type\": \"text/plain; charset=utf-8\" } });\n    }\n    return json({ error: \"not found\" }, 404);\n  }\n\n  // Parse body for mutations\n  let body: any = undefined;\n  if (method === \"POST\" || method === \"PUT\" || method === \"DELETE\" || method === \"PATCH\") {\n    body = await parseBody(req);\n    if (body === PARSE_FAILED) return json({ error: \"invalid JSON\" }, 400);\n  }\n\n  // Resolve auth for all room-scoped requests\n  const authResult = await resolveAuth(req, roomId);\n  if (authResult instanceof Response) return authResult;\n  const auth = authResult;\n\n  const sub = parts[2];\n  const subId = parts[3];\n  const subAction = parts[4];\n\n  // ---- v7: Room invitation ----\n  if (sub === \"invite\" && method === \"POST\") {\n    return handleInvite(req, roomId, body);\n  }\n\n  // ---- v7: Room claim (orphaned rooms) ----\n  if (sub === \"claim\" && method === \"POST\") {\n    return handleClaim(req, roomId, body);\n  }\n\n  // ---- v7: Room deletion (owner only) ----\n  if (!sub && method === \"DELETE\") {\n    if (!auth.authenticated) return json({ error: \"authentication_required\" }, 401);\n    // Check ownership: admin auth OR direct user_rooms owner check\n    let isOwner = auth.kind === \"room\" || auth.grants.includes(\"*\");\n    if (!isOwner && auth.userId) {\n      const ownerCheck = await sqlite.execute({\n        sql: `SELECT access FROM smcp_user_rooms WHERE user_id = ? AND room_id = ? AND access = 'owner'`,\n        args: [auth.userId, roomId],\n      });\n      isOwner = ownerCheck.rows.length > 0;\n    }\n    // Fallback: if no user_rooms entries exist for this room at all, allow owner-scoped token\n    if (!isOwner && auth.userId) {\n      const anyUsers = await sqlite.execute({\n        sql: `SELECT COUNT(*) FROM smcp_user_rooms WHERE room_id = ?`, args: [roomId],\n      });\n      if (Number(anyUsers.rows[0][0]) === 0) isOwner = true; // orphaned room, allow cleanup\n    }\n    if (!isOwner) {\n      return json({ error: \"owner_required\", message: \"Only room owners can delete rooms\" }, 403);\n    }\n    // Delete room and all related data (FK constraints off for clean cascade)\n    try { await sqlite.execute({ sql: `PRAGMA foreign_keys = OFF`, args: [] }); } catch {}\n    const tables = [\n      `DELETE FROM state WHERE room_id = ?`,\n      `DELETE FROM log_index WHERE room_id = ?`,\n      `DELETE FROM tokens WHERE room_id = ?`,\n      `DELETE FROM smcp_embodiments WHERE room_id = ?`,\n      `DELETE FROM smcp_vault WHERE room_id = ?`,\n      `DELETE FROM smcp_user_rooms WHERE room_id = ?`,\n      `DELETE FROM rooms WHERE id = ?`,\n    ];\n    for (const sql of tables) {\n      try { await sqlite.execute({ sql, args: [roomId] }); } catch {}\n    }\n    try { await sqlite.execute({ sql: `PRAGMA foreign_keys = ON`, args: [] }); } catch {}\n    return json({ deleted: true, room: roomId });\n  }\n\n  // ---- v8: Standalone dashboard (no React SSR) ----\n  if (method === \"GET\" && sub === \"dashboard\") return renderDashboardV8(roomId);\n\n  // ---- Agents ----\n  if (sub === \"agents\") {\n    if (method === \"POST\" && !subId) return joinRoom(roomId, body, req);\n    if (method === \"PATCH\" && subId && !subAction) {\n      const deny = requireRoomToken(auth);\n      if (deny) return deny;\n      return updateAgent(roomId, subId, body);\n    }\n  }\n\n  // ---- Actions (invoke only — writes via built-in actions) ----\n  if (sub === \"actions\") {\n    if (method === \"POST\" && subId && subAction === \"invoke\") {\n      const deny = requireWriteAuth(auth);\n      if (deny) return deny;\n      const identityDeny = assertIdentity(auth, body.agent);\n      if (identityDeny) return identityDeny;\n      return invokeAction(roomId, subId, body, auth);\n    }\n  }\n\n  // ---- Wait ----\n  if (method === \"GET\" && sub === \"wait\") return waitForCondition(roomId, url, auth);\n\n  // ---- Context ----\n  if (method === \"GET\" && sub === \"context\") return getContext(roomId, url, auth);\n\n  // ---- Dashboard poll (v8: state-only) ----\n  if (method === \"GET\" && sub === \"poll\") return dashboardPollV8(roomId, url, auth);\n\n  // ---- Replay ----\n  if (method === \"GET\" && sub === \"replay\" && subId) {\n    const seq = parseInt(subId);\n    if (isNaN(seq) || seq < 0) return json({ error: \"seq must be a non-negative integer\" }, 400);\n    const result = await replayRoom(roomId, seq);\n    return json(result);\n  }\n\n  // ---- v8: Key history (temporal projection) ----\n  // GET /rooms/:id/history/:scope/:key?limit=100&after=seq\n  if (method === \"GET\" && sub === \"history\" && subId && subAction) {\n    const scope = subId;\n    const key = subAction;\n    const limit = parseInt(url.searchParams.get(\"limit\") ?? \"100\");\n    const after = url.searchParams.get(\"after\") ? parseInt(url.searchParams.get(\"after\")!) : undefined;\n    const prefix = url.searchParams.get(\"prefix\");\n\n    if (prefix) {\n      // Prefix query: /rooms/:id/history/:scope/_?prefix=concepts.\n      const results = await queryPrefixHistory(roomId, scope, prefix, { limit, after });\n      return json({ room_id: roomId, scope, prefix, entries: results });\n    }\n\n    const results = await queryKeyHistory(roomId, scope, key, { limit, after });\n    return json({ room_id: roomId, scope, key, entries: results });\n  }\n\n  // ---- v8: View value samples (temporal sparklines) ----\n  // GET /rooms/:id/samples/:viewId?limit=100&after=seq\n  if (method === \"GET\" && sub === \"samples\" && subId) {\n    const limit = parseInt(url.searchParams.get(\"limit\") ?? \"100\");\n    const after = url.searchParams.get(\"after\") ? parseInt(url.searchParams.get(\"after\")!) : undefined;\n    const results = await queryViewSamples(roomId, subId, { limit, after });\n    return json({ room_id: roomId, view_id: subId, samples: results });\n  }\n\n  // ---- v8: Salience map (agent-specific relevance scores) ----\n  // GET /rooms/:id/salience?limit=50&agent=X (agent param for room/admin tokens)\n  if (method === \"GET\" && sub === \"salience\") {\n    if (!auth.authenticated) {\n      return json({ error: \"agent_auth_required\", message: \"Salience requires authentication\" }, 401);\n    }\n    // Allow room/admin/view tokens to view any agent's salience via ?agent= param\n    let agentId = auth.agentId;\n    const agentParam = url.searchParams.get(\"agent\");\n    if (agentParam && (auth.kind === \"room\" || auth.kind === \"view\" || auth.grants.includes(\"*\"))) {\n      agentId = agentParam;\n    }\n    if (!agentId) {\n      return json({ error: \"agent_required\", message: \"Use ?agent= with a room token, or authenticate as an agent\" }, 400);\n    }\n    const limit = parseInt(url.searchParams.get(\"limit\") ?? \"50\");\n    const map = await computeSalience(roomId, agentId, { limit });\n    return json(map);\n  }\n\n  // ---- CEL eval ----\n  if (method === \"POST\" && sub === \"eval\") {\n    return evalExpression(roomId, body, auth);\n  }\n\n  // ---- View token rotation (admin only) ----\n  if (method === \"POST\" && sub === \"rotate-view-token\") {\n    const deny = requireRoomToken(auth);\n    if (deny) return deny;\n    return rotateViewToken(roomId);\n  }\n\n  // ---- Generate view token for existing rooms that don't have one (admin only) ----\n  if (method === \"POST\" && sub === \"generate-view-token\") {\n    const deny = requireRoomToken(auth);\n    if (deny) return deny;\n    const existing = await sqlite.execute({\n      sql: `SELECT view_token_hash FROM rooms WHERE id = ?`, args: [roomId],\n    });\n    const room = rows2objects(existing)[0];\n    if (room?.view_token_hash) {\n      return json({ error: \"view_token_exists\", message: \"room already has a view token — use rotate-view-token to replace it\" }, 409);\n    }\n    return rotateViewToken(roomId);\n  }\n\n  return json({ error: \"not found\" }, 404);\n}\n",[],[1177],{"_105":1186,"_97":1187,"_166":1188,"_168":-5,"_169":149,"_170":1189,"_171":172,"_107":1190,"_102":33,"_174":356,"_176":1191,"_177":22,"_178":-5,"_179":1192,"_101":1193},"4a47243a-1fa3-11f1-ab3f-42dde27851f2","poll-v8.ts","4a4724ee-1fa3-11f1-ab3f-42dde27851f2",52,["D",1773492161137],"/**\n * poll-v8.ts — State-only dashboard poll. Clean break from legacy tables.\n *\n * One data source: the state table. Actions, views, agents, messages\n * are all state with scope prefixes. The frontend interprets scopes,\n * not separate data structures.\n *\n * Returns:\n *   state      — all state rows (every scope except _audit)\n *   resolved   — server-evaluated view values (CEL runs here, not in browser)\n *   available  — server-evaluated action predicates\n *   audit      — audit trail entries\n *   salience   — agent-specific relevance scores (if agent-authenticated)\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { evaluate } from \"npm:@marcbachmann/cel-js\";\nimport { json, rows2objects } from \"./utils.ts\";\nimport { buildContext, buildViewContext } from \"./cel.ts\";\nimport { isTimerLive } from \"./timers.ts\";\nimport { hasFullReadAccess, touchAgent, type AuthResult } from \"./auth.ts\";\nimport { computeContestedTargets } from \"./actions.ts\";\nimport { maybeSampleViews } from \"./sampling.ts\";\nimport { computeSalience } from \"./salience.ts\";\n\nexport async function dashboardPollV8(roomId: string, url: URL, auth: AuthResult) {\n  const auditLimit = Math.min(parseInt(url.searchParams.get(\"audit_limit\") ?? \"500\"), 2000);\n\n  // ── Single state query: everything except _audit ──\n  let stateSql = `SELECT scope, key, sort_key, value, revision, updated_at\n                  FROM state WHERE room_id = ? AND scope != '_audit'`;\n  const stateArgs: any[] = [roomId];\n\n  // Scope privacy\n  if (!hasFullReadAccess(auth)) {\n    if (auth.authenticated && auth.kind === \"agent\") {\n      const accessible = [auth.agentId!, ...auth.grants].filter(Boolean);\n      const conditions = [`scope LIKE '\\\\_%' ESCAPE '\\\\'`]; // all system scopes\n      for (const s of accessible) { conditions.push(`scope = ?`); stateArgs.push(s); }\n      stateSql += ` AND (${conditions.join(\" OR \")})`;\n    } else {\n      stateSql += ` AND scope LIKE '\\\\_%' ESCAPE '\\\\'`; // system scopes only\n    }\n  }\n\n  stateSql += ` ORDER BY CASE WHEN sort_key IS NOT NULL THEN sort_key ELSE 0 END ASC`;\n\n  const [stateResult, auditResult] = await Promise.all([\n    sqlite.execute({ sql: stateSql, args: stateArgs }),\n    sqlite.execute({\n      sql: `SELECT sort_key, value, updated_at FROM state\n            WHERE room_id = ? AND scope = '_audit'\n            ORDER BY sort_key ASC LIMIT ?`,\n      args: [roomId, auditLimit],\n    }),\n  ]);\n\n  // ── Process state rows ──\n  const rawRows = rows2objects(stateResult);\n  const stateRows: any[] = [];\n\n  for (const row of rawRows) {\n    if (!isTimerLive(row)) continue;\n    let value: any = row.value;\n    try { value = JSON.parse(row.value); } catch {}\n    stateRows.push({\n      scope: row.scope,\n      key: row.key,\n      sort_key: row.sort_key ?? null,\n      value,\n      revision: row.revision,\n      updated_at: row.updated_at,\n    });\n  }\n\n  // ── Build CEL context for evaluation ──\n  const ctx = await buildContext(roomId, {\n    selfAgent: auth.agentId ?? undefined,\n    allScopes: hasFullReadAccess(auth),\n  });\n\n  // ── Resolve view values from _views scope ──\n  const resolved: Record = {};\n  const viewDefs = stateRows.filter(r => r.scope === \"_views\");\n\n  for (const v of viewDefs) {\n    const def = v.value;\n    if (!def?.expr) continue;\n\n    // Check enabled\n    if (def.enabled) {\n      try { if (!evaluate(def.enabled, ctx)) continue; } catch { continue; }\n    }\n\n    // Evaluate\n    const viewCtx = await buildViewContext(roomId, def.scope ?? \"_shared\", ctx);\n    try {\n      const result = evaluate(def.expr, viewCtx);\n      resolved[v.key] = typeof result === \"bigint\" ? Number(result) : result;\n    } catch (e: any) {\n      resolved[v.key] = { _error: e.message };\n    }\n  }\n\n  // ── Evaluate action availability from _actions scope ──\n  const available: Record = {};\n  const actionDefs = stateRows.filter(r => r.scope === \"_actions\");\n\n  for (const a of actionDefs) {\n    const def = a.value;\n    // Check enabled\n    if (def?.enabled) {\n      try { if (!evaluate(def.enabled, ctx)) continue; } catch { continue; }\n    }\n    // Check if precondition\n    if (def?.if) {\n      try { available[a.key] = !!evaluate(def.if, ctx); } catch { available[a.key] = false; }\n    } else {\n      available[a.key] = true;\n    }\n  }\n\n  // ── Process audit ──\n  const auditRows = rows2objects(auditResult).map((row: any) => {\n    let value: any = row.value;\n    try { value = JSON.parse(row.value); } catch {}\n    return { seq: row.sort_key, value, updated_at: row.updated_at };\n  });\n\n  // ── Sampling (fire-and-forget) ──\n  const viewsForSampling = viewDefs\n    .filter(v => v.value?.render?.temporal === true && resolved[v.key] !== undefined)\n    .map(v => ({ id: v.key, value: resolved[v.key], render: v.value?.render }));\n  maybeSampleViews(roomId, viewsForSampling).catch(() => {});\n\n  // ── Salience (agent-authenticated only) ──\n  let salience: any[] | undefined;\n  if (auth.authenticated && auth.agentId) {\n    touchAgent(roomId, auth.agentId);\n    try {\n      const contestedTargets = await computeContestedTargets(roomId);\n      const map = await computeSalience(roomId, auth.agentId, {\n        contestedTargets,\n        limit: 20,\n      });\n      salience = map.entries.map(e => ({\n        key: `${e.scope}.${e.key}`,\n        score: Math.round(e.score * 100) / 100,\n        signals: Object.entries(e.signals)\n          .filter(([_, v]) => v > 0.05)\n          .sort((a, b) => b[1] - a[1])\n          .map(([k]) => k),\n      }));\n    } catch {}\n  }\n\n  return json({\n    state: stateRows,\n    resolved,\n    available,\n    audit: auditRows,\n    ...(salience ? { salience } : {}),\n  });\n}\n",[],[1187],{"_105":1195,"_97":1196,"_166":1197,"_168":-5,"_169":149,"_170":1198,"_171":172,"_107":1199,"_102":122,"_174":356,"_176":1200,"_177":22,"_178":-5,"_179":1201,"_101":1202},"a1c05d26-1ffd-11f1-8822-42dde27851f2","replay.ts","019cebf2-a8a6-7120-b164-5dc0f91df6d9",146,["D",1773530962602],"/**\n * replay.ts — Time-travel replay for sync rooms.\n *\n * Reconstructs room state by replaying _audit entries (state table, _audit scope)\n * up to a given sequence number. Used by the /rooms/:id/replay/:seq endpoint.\n *\n * v8: Already reads exclusively from state table (no legacy table dependencies).\n * Audit entries contain full structural events — agent_join, register_action,\n * register_view, invoke with writes — everything needed for reconstruction.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { evaluate } from \"npm:@marcbachmann/cel-js\";\nimport { rows2objects } from \"./utils.ts\";\nimport { isTimerLive } from \"./timers.ts\";\n\n/**\n * Reconstruct PollData (same shape as /poll) by replaying audit entries up to seq N.\n *\n * Reconstruction algorithm:\n *   Start from an empty room. Walk _audit entries in sort_key order up to `upToSeq`.\n *   Apply each entry's effect based on `kind`:\n *     - agent_join / agent_update → mutate agents map\n *     - register_action → upsert actions map\n *     - delete_action → remove from actions map\n *     - register_view → upsert views map (definition only; value evaluated at end)\n *     - delete_view → remove from views map\n *     - invoke (or legacy entries without kind) → apply effect.writes to state map\n *       append-type writes (sort_key present) are replayed as ordered inserts\n *   After all entries applied:\n *     - Evaluate each view's CEL expr against reconstructed state to produce view values\n *     - Messages are reconstructed from state._messages writes\n *     - Audit slice returned as-is up to upToSeq\n *\n * Backward compatibility: entries missing `kind` are treated as `invoke`.\n * Entries missing `effect.writes` on invoke produce no state changes (pre-v2 entries).\n */\nexport async function replayRoom(roomId: string, upToSeq: number): Promise<{\n  agents: any[];\n  state: any[];\n  messages: any[];\n  actions: any[];\n  views: any[];\n  audit: any[];\n  _replay: { seq: number; total: number; ts: string | null };\n}> {\n  // Fetch all audit entries up to upToSeq\n  const auditRes = await sqlite.execute({\n    sql: `SELECT sort_key, value FROM state WHERE room_id = ? AND scope = '_audit' AND sort_key <= ? ORDER BY sort_key ASC`,\n    args: [roomId, upToSeq],\n  });\n  const auditRows = rows2objects(auditRes);\n\n  // Also fetch total count for meta\n  const totalRes = await sqlite.execute({\n    sql: `SELECT COALESCE(MAX(sort_key), 0) as total FROM state WHERE room_id = ? AND scope = '_audit'`,\n    args: [roomId],\n  });\n  const total = Number(rows2objects(totalRes)[0]?.total ?? 0);\n\n  // ── Reconstruction state ──────────────────────────────────────────────────\n  // agents: id → agent object\n  const agentsMap: Record = {};\n  // actions: id → action definition\n  const actionsMap: Record = {};\n  // views: id → view definition (expr, scope, description, render)\n  const viewsMap: Record = {};\n  // state: scope → key → value (for non-system scopes)\n  const stateMap: Record> = {};\n  // messages: ordered array of message objects\n  const messagesArr: any[] = [];\n  // audit: parsed entries to return\n  const auditOut: any[] = [];\n\n  let lastTs: string | null = null;\n\n  for (const row of auditRows) {\n    let entry: any;\n    try { entry = JSON.parse(row.value); } catch { continue; }\n    const kind = entry.kind ?? \"invoke\";\n    lastTs = entry.ts ?? lastTs;\n\n    auditOut.push({ sort_key: row.sort_key, value: entry, updated_at: entry.ts ?? \"\" });\n\n    switch (kind) {\n      case \"agent_join\": {\n        const s = entry.schema ?? {};\n        agentsMap[s.id] = {\n          id: s.id,\n          name: s.name ?? s.id,\n          role: s.role ?? \"agent\",\n          status: \"active\",\n          grants: JSON.stringify(s.grants ?? []),\n          joined_at: entry.ts ?? \"\",\n          last_heartbeat: entry.ts ?? \"\",\n          waiting_on: null,\n        };\n        // Apply initial state if captured in the structural event\n        if (s.state && typeof s.state === \"object\") {\n          const scope = s.id;\n          if (!stateMap[scope]) stateMap[scope] = {};\n          for (const [key, value] of Object.entries(s.state)) {\n            stateMap[scope][key] = value;\n          }\n        }\n        break;\n      }\n      case \"agent_update\": {\n        const s = entry.schema ?? {};\n        if (agentsMap[s.id]) {\n          const changes = s.changes ?? {};\n          if (changes.name !== undefined) agentsMap[s.id].name = changes.name;\n          if (changes.role !== undefined) agentsMap[s.id].role = changes.role;\n          if (changes.grants !== undefined) agentsMap[s.id].grants = JSON.stringify(changes.grants);\n        }\n        break;\n      }\n      case \"register_action\": {\n        const s = entry.schema ?? {};\n        if (s.id) {\n          actionsMap[s.id] = {\n            id: s.id,\n            room_id: roomId,\n            scope: s.scope ?? \"_shared\",\n            description: s.description ?? null,\n            if: s.if_expr ?? null,\n            enabled: s.enabled_expr ?? null,\n            writes: s.writes ?? [],\n            params: s.params ?? null,\n            available: true,\n            version: 1,\n            registered_by: entry.agent ?? null,\n          };\n        }\n        break;\n      }\n      case \"delete_action\": {\n        const s = entry.schema ?? {};\n        if (s.id) delete actionsMap[s.id];\n        break;\n      }\n      case \"register_view\": {\n        const s = entry.schema ?? {};\n        if (s.id) {\n          viewsMap[s.id] = {\n            id: s.id,\n            room_id: roomId,\n            scope: s.scope ?? \"_shared\",\n            description: s.description ?? null,\n            expr: s.expr,\n            enabled: s.enabled_expr ?? null,\n            render: s.render ?? null,\n            registered_by: entry.agent ?? null,\n            version: 1,\n          };\n        }\n        break;\n      }\n      case \"delete_view\": {\n        const s = entry.schema ?? {};\n        if (s.id) delete viewsMap[s.id];\n        break;\n      }\n      case \"invoke\":\n      default: {\n        // Apply effect.writes to stateMap\n        const writes: Array<{ scope: string; key: string; value?: any }> = entry.effect?.writes ?? [];\n        for (const w of writes) {\n          const scope = w.scope;\n          const key = w.key;\n          if (!scope || !key) continue;\n\n          // Messages go to messagesArr\n          if (scope === \"_messages\") {\n            messagesArr.push({ sort_key: key, value: w.value, updated_at: entry.ts ?? \"\" });\n            continue;\n          }\n          // Audit writes are already being reconstructed from the entries themselves — skip\n          if (scope === \"_audit\") continue;\n\n          if (!stateMap[scope]) stateMap[scope] = {};\n          stateMap[scope][key] = w.value;\n        }\n\n        // Update agent status from invocation context\n        const invokeAgent = entry.agent;\n        if (invokeAgent && agentsMap[invokeAgent]) {\n          agentsMap[invokeAgent].status = \"active\";\n          agentsMap[invokeAgent].last_heartbeat = entry.ts ?? agentsMap[invokeAgent].last_heartbeat;\n        }\n        break;\n      }\n    }\n  }\n\n  // ── Build stateRows (PollData.state shape) ────────────────────────────────\n  const stateRows: any[] = [];\n  for (const [scope, keys] of Object.entries(stateMap)) {\n    for (const [key, value] of Object.entries(keys)) {\n      stateRows.push({ room_id: roomId, scope, key, value, version: \"\", revision: 0, sort_key: null, updated_at: \"\" });\n    }\n  }\n\n  // ── Evaluate views against reconstructed state ────────────────────────────\n  // Build a minimal CEL context from reconstructed state\n  const celState: Record> = {};\n  for (const [scope, keys] of Object.entries(stateMap)) {\n    celState[scope] = {};\n    for (const [key, value] of Object.entries(keys)) {\n      celState[scope][key] = value;\n    }\n  }\n\n  const views: any[] = [];\n  for (const viewDef of Object.values(viewsMap)) {\n    let value: any = null;\n    try {\n      // Minimal context: state map only (no agents/actions in CEL for replay)\n      const celCtx = { state: celState };\n      const evalResult = evaluate(viewDef.expr, celCtx);\n      value = typeof evalResult === \"bigint\" ? Number(evalResult) : evalResult;\n    } catch (e: any) {\n      value = { _error: e.message };\n    }\n    views.push({ ...viewDef, value });\n  }\n\n  // ── Sort messages ─────────────────────────────────────────────────────────\n  // Primary strategy: query _messages from the DB using timestamp of the last processed\n  // audit entry. This is backward-compatible (works for all existing rooms) and also\n  // covers _send_message builtins whose writes are never in effect.writes.\n  //\n  // Messages are INSERTed BEFORE appendAuditEntry is called, so:\n  //   _messages.updated_at (SQLite datetime) <= audit entry .ts (ISO string, same clock)\n  //\n  // Timestamp conversion: JS ISO \"2026-03-07T19:39:19.123Z\" → SQLite \"2026-03-07 19:39:19\"\n  if (lastTs) {\n    const sqliteTs = lastTs.replace(\"T\", \" \").replace(/\\.\\d+Z?$/, \"\");\n    const dbMsgsRes = await sqlite.execute({\n      sql: `SELECT sort_key, value, updated_at FROM state\n            WHERE room_id = ? AND scope = '_messages' AND updated_at <= ?\n            ORDER BY sort_key ASC`,\n      args: [roomId, sqliteTs],\n    });\n    // Replace effect.writes-derived messages with DB-sourced messages (more reliable)\n    messagesArr.length = 0;\n    for (const row of rows2objects(dbMsgsRes)) {\n      let msgValue: any = row.value;\n      try { msgValue = JSON.parse(row.value); } catch {}\n      messagesArr.push({ sort_key: row.sort_key, value: msgValue, updated_at: row.updated_at });\n    }\n  } else {\n    // No audit entries processed (e.g. upToSeq=0) → no messages\n    messagesArr.length = 0;\n    messagesArr.sort((a, b) => Number(a.sort_key) - Number(b.sort_key));\n  }\n\n  // ── Actions with available=true (no CEL eval against reconstructed state) ──\n  const actions = Object.values(actionsMap);\n\n  return {\n    agents: Object.values(agentsMap),\n    state: stateRows,\n    messages: messagesArr,\n    actions,\n    views,\n    audit: auditOut,\n    _replay: { seq: upToSeq, total, ts: lastTs },\n  };\n}\n",[],[1196],{"_105":1204,"_97":1205,"_166":1206,"_168":-5,"_169":149,"_170":1207,"_171":172,"_107":1208,"_102":122,"_174":356,"_176":1209,"_177":22,"_178":-5,"_179":1210,"_101":1211},"fe175fb8-1ffb-11f1-9636-42dde27851f2","rooms.ts","019cebf2-a8a6-7120-b164-61a7129b58d0",142,["D",1773530258513],"/**\n * rooms.ts — Room CRUD operations.\n *\n * v7: Room creation auto-links to user_rooms when caller has user identity.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { json, rows2objects } from \"./utils.ts\";\nimport { generateToken, hashToken, type AuthResult } from \"./auth.ts\";\n\nexport async function createRoom(body: any, auth?: AuthResult) {\n  const id = body.id ?? crypto.randomUUID();\n  const meta = JSON.stringify(body.meta ?? {});\n  const token = generateToken(\"room\");\n  const hash = await hashToken(token);\n  const viewToken = generateToken(\"view\");\n  const viewHash = await hashToken(viewToken);\n  try {\n    await sqlite.execute({\n      sql: `INSERT INTO rooms (id, meta, token_hash, view_token_hash) VALUES (?, ?, ?, ?)`,\n      args: [id, meta, hash, viewHash],\n    });\n  } catch (e: any) {\n    if (e.message?.includes(\"UNIQUE constraint\")) return json({ error: \"room_exists\", id }, 409);\n    throw e;\n  }\n  const result = await sqlite.execute({ sql: `SELECT * FROM rooms WHERE id = ?`, args: [id] });\n  const room = rows2objects(result)[0];\n  delete room.token_hash;\n  delete room.view_token_hash;\n\n  // v7: Auto-link to user_rooms when caller has user identity\n  const userId = auth?.userId;\n  if (userId) {\n    try {\n      await sqlite.execute({\n        sql: `INSERT OR IGNORE INTO smcp_user_rooms (user_id, room_id, access, label)\n              VALUES (?, ?, 'owner', ?)`,\n        args: [userId, id, body.label ?? `Room: ${id}`],\n      });\n    } catch (_) { /* best-effort — don't fail room creation */ }\n  }\n\n  return json({ ...room, token, view_token: viewToken }, 201);\n}\n\nexport async function getRoom(roomId: string) {\n  const result = await sqlite.execute({ sql: `SELECT * FROM rooms WHERE id = ?`, args: [roomId] });\n  const room = rows2objects(result)[0];\n  if (!room) return json({ error: \"room not found\" }, 404);\n  delete room.token_hash;\n  delete room.view_token_hash;\n  return json(room);\n}\n\nexport async function listRooms(req: Request) {\n  const header = req.headers.get(\"Authorization\");\n  if (!header || !header.startsWith(\"Bearer \")) {\n    return json({ error: \"authentication_required\", message: \"include Authorization: Bearer  to list your rooms\" }, 401);\n  }\n  const token = header.slice(7);\n  const hash = await hashToken(token);\n\n  const stripHashes = (r: any) => { delete r.token_hash; delete r.view_token_hash; return r; };\n\n  // v7: Check unified tokens table for tok_ tokens\n  if (token.startsWith(\"tok_\")) {\n    // Import hashTokenB64 inline to avoid circular dep\n    const data = new TextEncoder().encode(token);\n    const hashBuf = await crypto.subtle.digest(\"SHA-256\", data);\n    const b64 = btoa(String.fromCharCode(...new Uint8Array(hashBuf)))\n      .replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=/g, \"\");\n\n    const tokenResult = await sqlite.execute({\n      sql: `SELECT minted_by FROM tokens WHERE token_hash = ? AND revoked = 0\n            AND (expires_at IS NULL OR expires_at > datetime('now'))`,\n      args: [b64],\n    });\n    if (tokenResult.rows.length > 0) {\n      const userId = tokenResult.rows[0][0] as string;\n      const userRooms = await sqlite.execute({\n        sql: `SELECT room_id FROM smcp_user_rooms WHERE user_id = ?`,\n        args: [userId],\n      });\n      const roomIds = userRooms.rows.map((r: any[]) => r[0] as string);\n      if (roomIds.length === 0) return json([]);\n      const placeholders = roomIds.map(() => \"?\").join(\",\");\n      const result = await sqlite.execute({\n        sql: `SELECT * FROM rooms WHERE id IN (${placeholders}) ORDER BY created_at DESC`,\n        args: roomIds,\n      });\n      return json(rows2objects(result).map(stripHashes));\n    }\n  }\n\n  // Legacy: Check room tokens\n  if (token.startsWith(\"room_\")) {\n    const result = await sqlite.execute({\n      sql: `SELECT * FROM rooms WHERE token_hash = ?`, args: [hash],\n    });\n    return json(rows2objects(result).map(stripHashes));\n  }\n\n  // Legacy: Check view tokens\n  if (token.startsWith(\"view_\")) {\n    const result = await sqlite.execute({\n      sql: `SELECT * FROM rooms WHERE view_token_hash = ?`, args: [hash],\n    });\n    return json(rows2objects(result).map(stripHashes));\n  }\n\n  // v8: Agent token — check tokens table\n  const agentResult = await sqlite.execute({\n    sql: `SELECT room_id FROM tokens WHERE token_hash = ? AND revoked = 0`, args: [hash],\n  });\n  if (agentResult.rows.length === 0) return json({ error: \"invalid_token\" }, 401);\n  const roomIds = agentResult.rows.map((r: any[]) => r[0]);\n  const placeholders = roomIds.map(() => \"?\").join(\",\");\n  const result = await sqlite.execute({\n    sql: `SELECT * FROM rooms WHERE id IN (${placeholders}) ORDER BY created_at DESC`,\n    args: roomIds,\n  });\n  return json(rows2objects(result).map(stripHashes));\n}\n\n// ── View token rotation ──\n\nexport async function rotateViewToken(roomId: string) {\n  const viewToken = generateToken(\"view\");\n  const viewHash = await hashToken(viewToken);\n  const result = await sqlite.execute({\n    sql: `UPDATE rooms SET view_token_hash = ? WHERE id = ?`,\n    args: [viewHash, roomId],\n  });\n  if (result.rowsAffected === 0) return json({ error: \"room not found\" }, 404);\n  return json({ ok: true, view_token: viewToken });\n}\n",[],[1205],{"_105":1213,"_97":1214,"_166":1215,"_168":-5,"_169":149,"_170":1216,"_171":172,"_107":1217,"_102":705,"_174":356,"_176":1218,"_177":22,"_178":-5,"_179":1219,"_101":1220},"ffcf1abe-1ffe-11f1-9f9d-42dde27851f2","salience.ts","5db3d16e-1fa1-11f1-bd8d-42dde27851f2",151,["D",1773531549894],"/**\n * salience.ts — Adaptive salience: the reward signal.\n *\n * Computes a relevance score for each state key relative to a specific agent.\n * All signals are derived from structure (state + log), not ML — making\n * salience transparent, debuggable, and observable as a system view.\n *\n * The RL isomorphism:\n *   World state    → State\n *   Transition fn  → Action.writes\n *   Observation fn → View.compute\n *   Trajectory     → Log\n *   Affordance map → Context\n *   Reward signal  → Salience score  ← this module\n *\n * Signals (each normalized to [0, 1]):\n *\n *   recency    — how recently was this key updated?\n *   dependency — does the agent's registered views depend on this key?\n *   authorship — did this agent write this key?\n *   directed   — is this a message directed to this agent?\n *   contest    — is this key a write target of competing actions?\n *   delta      — has this key changed since the agent last saw it?\n *\n * Weights are configurable per-room via _config.salience_weights.\n * Default weights emphasize dependency and delta (what matters to you\n * and what's new) over recency (what happened recently to anyone).\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { rows2objects } from \"./utils.ts\";\nimport type { DependencySet } from \"./deps.ts\";\nimport { isRelevant } from \"./deps.ts\";\n\n// ── Types ──────────────────────────────────────────────────────────────\n\nexport interface SalienceWeights {\n  recency: number;\n  dependency: number;\n  authorship: number;\n  directed: number;\n  contest: number;\n  delta: number;\n}\n\nexport interface SalienceEntry {\n  scope: string;\n  key: string;\n  score: number;\n  signals: {\n    recency: number;\n    dependency: number;\n    authorship: number;\n    directed: number;\n    contest: number;\n    delta: number;\n  };\n}\n\nexport interface SalienceMap {\n  agent: string;\n  weights: SalienceWeights;\n  entries: SalienceEntry[];\n  computed_at: string;\n}\n\n// ── Defaults ───────────────────────────────────────────────────────────\n\nconst DEFAULT_WEIGHTS: SalienceWeights = {\n  recency: 0.10,\n  dependency: 0.30,\n  authorship: 0.10,\n  directed: 0.20,\n  contest: 0.10,\n  delta: 0.20,\n};\n\n// ── Signal computation ─────────────────────────────────────────────────\n\n/**\n * Recency signal: exponential decay from last update.\n * 1.0 = updated now, 0.5 ≈ 5 minutes ago, ~0 after an hour.\n */\nfunction recencySignal(updatedAt: string | null, now: number): number {\n  if (!updatedAt) return 0;\n  const updated = new Date(updatedAt).getTime();\n  if (isNaN(updated)) return 0;\n  const ageMs = now - updated;\n  if (ageMs <= 0) return 1;\n  // Half-life of 5 minutes (300,000 ms)\n  const halfLife = 300_000;\n  return Math.pow(0.5, ageMs / halfLife);\n}\n\n/**\n * Dependency signal: is this key in the dependency set of any of the agent's views?\n * 1.0 = direct dependency, 0.5 = prefix match, 0.3 = scope match, 0 = unrelated.\n */\nfunction dependencySignal(\n  scope: string,\n  key: string,\n  agentDeps: DependencySet,\n): number {\n  // Check for direct hit\n  for (const dep of agentDeps) {\n    if (dep.root !== \"state\") continue;\n    if (dep.access === \"direct\" && dep.scope === scope && dep.key === key) return 1.0;\n  }\n  // Check for prefix match\n  for (const dep of agentDeps) {\n    if (dep.root !== \"state\") continue;\n    if (dep.access === \"prefix\" && dep.prefix && key.startsWith(dep.prefix)) {\n      if (!dep.scope || dep.scope === scope) return 0.5;\n    }\n  }\n  // Check for scope match\n  for (const dep of agentDeps) {\n    if (dep.root !== \"state\") continue;\n    if (dep.access === \"scope\" && dep.scope === scope) return 0.3;\n    if (dep.access === \"full\") return 0.1;\n  }\n  return 0;\n}\n\n/**\n * Authorship signal: did this agent write this key most recently?\n * Requires the audit log index. Returns 1.0 if the agent was the last writer.\n */\nfunction authorshipSignal(\n  lastWriter: string | null,\n  agentId: string,\n): number {\n  if (!lastWriter) return 0;\n  return lastWriter === agentId ? 1.0 : 0;\n}\n\n/**\n * Directed signal: for messages, is this directed at the agent?\n * 1.0 = explicitly directed (to includes agent), 0.3 = broadcast, 0 = not a message.\n */\nfunction directedSignal(\n  scope: string,\n  value: any,\n  agentId: string,\n): number {\n  if (scope !== \"_messages\") return 0;\n  if (typeof value !== \"object\" || value === null) return 0.3; // broadcast\n  if (Array.isArray(value.to)) {\n    return value.to.includes(agentId) ? 1.0 : 0.1;\n  }\n  return 0.3; // no to field = broadcast\n}\n\n/**\n * Contest signal: is this key a write target of 2+ actions?\n * 1.0 = contested by actions the agent registered, 0.5 = contested by others.\n */\nfunction contestSignal(\n  scope: string,\n  key: string,\n  contestedTargets: Record,\n  agentActions: Set,\n): number {\n  const target = `${scope}:${key}`;\n  const contestants = contestedTargets[target];\n  if (!contestants || contestants.length < 2) return 0;\n  // Higher if the agent's own actions are involved\n  const agentInvolved = contestants.some(id => agentActions.has(id));\n  return agentInvolved ? 1.0 : 0.5;\n}\n\n/**\n * Delta signal: has this key been updated since the agent's last heartbeat?\n * 1.0 = updated since last seen, 0 = no change.\n */\nfunction deltaSignal(\n  updatedAt: string | null,\n  agentLastSeen: string | null,\n): number {\n  if (!updatedAt || !agentLastSeen) return 0;\n  const updated = new Date(updatedAt).getTime();\n  const lastSeen = new Date(agentLastSeen).getTime();\n  if (isNaN(updated) || isNaN(lastSeen)) return 0;\n  return updated > lastSeen ? 1.0 : 0;\n}\n\n// ── Main computation ───────────────────────────────────────────────────\n\n/**\n * Compute the salience map for a specific agent in a room.\n *\n * This is the core \"reward signal\" — it tells the agent what to pay\n * attention to. The map is computable entirely from structure:\n * state table, log_index, agent metadata, and view dependencies.\n */\nexport async function computeSalience(\n  roomId: string,\n  agentId: string,\n  opts: {\n    weights?: Partial;\n    agentDeps?: DependencySet;\n    contestedTargets?: Record;\n    /** Only compute for specific scopes (default: all visible) */\n    scopes?: string[];\n    /** Max entries to return (default: 50) */\n    limit?: number;\n  } = {},\n): Promise {\n  const now = Date.now();\n  const limit = opts.limit ?? 50;\n\n  // Load room-level weight overrides from _config\n  let roomWeights: Partial = {};\n  try {\n    const configResult = await sqlite.execute({\n      sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_config' AND key = 'salience_weights'`,\n      args: [roomId],\n    });\n    if (configResult.rows.length > 0) {\n      roomWeights = JSON.parse(configResult.rows[0][0] as string);\n    }\n  } catch { /* no config = use defaults */ }\n\n  const weights: SalienceWeights = {\n    ...DEFAULT_WEIGHTS,\n    ...roomWeights,\n    ...(opts.weights ?? {}),\n  };\n\n  // Load agent metadata from _agents scope\n  let agentLastSeen: string | null = null;\n  try {\n    const agentResult = await sqlite.execute({\n      sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_agents' AND key = ?`,\n      args: [roomId, agentId],\n    });\n    if (agentResult.rows.length > 0) {\n      const def = JSON.parse(agentResult.rows[0][0] as string);\n      agentLastSeen = def.last_heartbeat ?? null;\n    }\n  } catch {}\n\n  // Load agent's registered actions from _actions scope (for contest signal)\n  const agentActions = new Set();\n  try {\n    const actionsResult = await sqlite.execute({\n      sql: `SELECT key, value FROM state WHERE room_id = ? AND scope = '_actions'`,\n      args: [roomId],\n    });\n    for (const row of actionsResult.rows) {\n      try {\n        const def = JSON.parse(row[1] as string);\n        if (def.registered_by === agentId) agentActions.add(row[0] as string);\n      } catch {}\n    }\n  } catch {}\n\n  // Load agent's view dependencies from _views scope\n  let agentDeps: DependencySet = opts.agentDeps ?? [];\n  if (agentDeps.length === 0) {\n    try {\n      const viewDepsResult = await sqlite.execute({\n        sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_views'`,\n        args: [roomId],\n      });\n      for (const row of viewDepsResult.rows) {\n        try {\n          const viewDef = JSON.parse(row[0] as string);\n          // Include deps from views registered by this agent or scoped to this agent\n          if (viewDef.registered_by === agentId || viewDef.scope === agentId) {\n            if (Array.isArray(viewDef.deps)) {\n              agentDeps.push(...viewDef.deps);\n            }\n          }\n        } catch {}\n      }\n    } catch {}\n  }\n\n  // Load contested targets\n  const contestedTargets = opts.contestedTargets ?? {};\n\n  // Load recent write authorship from log_index\n  // For each key, find the most recent writer\n  const lastWriters = new Map();\n  try {\n    // Get recent audit entries that have writes\n    const recentAudit = await sqlite.execute({\n      sql: `SELECT sort_key, value FROM state WHERE room_id = ? AND scope = '_audit'\n            ORDER BY sort_key DESC LIMIT 200`,\n      args: [roomId],\n    });\n    for (const row of recentAudit.rows) {\n      try {\n        const entry = JSON.parse(row[1] as string);\n        if (entry.effect?.writes) {\n          for (const w of entry.effect.writes) {\n            const k = `${w.scope}:${w.key}`;\n            if (!lastWriters.has(k)) {\n              lastWriters.set(k, entry.agent ?? \"\");\n            }\n          }\n        }\n      } catch {}\n    }\n  } catch {}\n\n  // Load state keys\n  let stateSql = `SELECT scope, key, value, updated_at FROM state WHERE room_id = ?\n    AND scope NOT IN ('_audit')`;\n  const stateArgs: any[] = [roomId];\n\n  if (opts.scopes && opts.scopes.length > 0) {\n    const placeholders = opts.scopes.map(() => \"?\").join(\",\");\n    stateSql += ` AND scope IN (${placeholders})`;\n    stateArgs.push(...opts.scopes);\n  }\n\n  const stateResult = await sqlite.execute({ sql: stateSql, args: stateArgs });\n  const stateRows = rows2objects(stateResult);\n\n  // Compute salience for each key\n  const entries: SalienceEntry[] = [];\n\n  for (const row of stateRows) {\n    const scope = row.scope as string;\n    const key = row.key as string;\n    const updatedAt = row.updated_at as string | null;\n\n    // Parse value for directed signal\n    let value: any = null;\n    try { value = JSON.parse(row.value as string); } catch { value = row.value; }\n\n    const lastWriter = lastWriters.get(`${scope}:${key}`) ?? null;\n\n    const signals = {\n      recency: recencySignal(updatedAt, now),\n      dependency: dependencySignal(scope, key, agentDeps),\n      authorship: authorshipSignal(lastWriter, agentId),\n      directed: directedSignal(scope, key, value, agentId),\n      contest: contestSignal(scope, key, contestedTargets, agentActions),\n      delta: deltaSignal(updatedAt, agentLastSeen),\n    };\n\n    const score =\n      signals.recency * weights.recency +\n      signals.dependency * weights.dependency +\n      signals.authorship * weights.authorship +\n      signals.directed * weights.directed +\n      signals.contest * weights.contest +\n      signals.delta * weights.delta;\n\n    entries.push({ scope, key, score, signals });\n  }\n\n  // Sort by score descending, take top N\n  entries.sort((a, b) => b.score - a.score);\n  const topEntries = entries.slice(0, limit);\n\n  return {\n    agent: agentId,\n    weights,\n    entries: topEntries,\n    computed_at: new Date().toISOString(),\n  };\n}\n\n/**\n * Lightweight salience check: is this (scope, key) salient for this agent?\n * Returns true if the key would score above threshold.\n * Used for quick filtering in context assembly without computing the full map.\n */\nexport function isSalient(\n  scope: string,\n  key: string,\n  agentDeps: DependencySet,\n  threshold: number = 0.05,\n): boolean {\n  // Quick check: is it a dependency?\n  if (isRelevant(agentDeps, scope, key)) return true;\n  // System scopes are always salient\n  if (scope.startsWith(\"_\")) return true;\n  // Low threshold for everything else\n  return false;\n}\n",[],[1214],{"_105":1222,"_97":1223,"_166":1224,"_168":-5,"_169":149,"_170":1225,"_171":172,"_107":1226,"_102":33,"_174":356,"_176":1227,"_177":22,"_178":-5,"_179":1228,"_101":1229},"e3539716-1f9f-11f1-8ea1-42dde27851f2","sampling.ts","e35397b6-1f9f-11f1-8ea1-42dde27851f2",39,["D",1773490699925],"/**\n * sampling.ts — View value sampling for temporal traces.\n *\n * Records periodic snapshots of view values into the audit log as\n * `kind: \"sample\"` entries. These entries power temporal sparklines\n * and history views on the dashboard.\n *\n * Sampling strategy:\n *   - Only views with render.temporal = true are sampled\n *   - At most one sample per view per SAMPLE_INTERVAL_MS (60s default)\n *   - Sampling is piggybacked on dashboardPoll — no separate cron\n *   - Samples are fire-and-forget, never block the poll response\n *   - Sample entries are indexed in log_index under scope \"_samples\"\n *\n * Sample log entry shape:\n *   { kind: \"sample\", ts, views: { [viewId]: value } }\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { rows2objects } from \"./utils.ts\";\nimport { indexLogEntry } from \"./schema-v8.ts\";\n\nconst SAMPLE_INTERVAL_MS = 60_000; // 1 minute\n\n// In-memory last-sample timestamps per room. Resets on cold start (acceptable).\nconst lastSampleTime = new Map();\n\n/**\n * Record view value samples if enough time has elapsed since the last sample.\n * Called from dashboardPoll after view evaluation.\n *\n * @param roomId - The room to sample\n * @param views - Evaluated views from the poll (with .value and .render)\n */\nexport async function maybeSampleViews(\n  roomId: string,\n  views: Array<{ id: string; value: any; render: any }>,\n) {\n  const now = Date.now();\n  const lastTime = lastSampleTime.get(roomId) ?? 0;\n  if (now - lastTime < SAMPLE_INTERVAL_MS) return;\n\n  // Find temporal views\n  const temporalViews = views.filter(v =>\n    v.render?.temporal === true &&\n    v.value !== undefined &&\n    !(v.value && typeof v.value === \"object\" && v.value._error)\n  );\n  if (temporalViews.length === 0) return;\n\n  // Record the sample\n  lastSampleTime.set(roomId, now);\n\n  try {\n    // Get next audit seq\n    const seqResult = await sqlite.execute({\n      sql: `SELECT COALESCE(MAX(sort_key), 0) + 1 as next_seq FROM state WHERE room_id = ? AND scope = '_audit'`,\n      args: [roomId],\n    });\n    const seq = Number(rows2objects(seqResult)[0]?.next_seq ?? 1);\n\n    // Build sample entry\n    const sampleValues: Record = {};\n    for (const v of temporalViews) {\n      sampleValues[v.id] = v.value;\n    }\n\n    const entry = JSON.stringify({\n      ts: new Date().toISOString(),\n      kind: \"sample\",\n      agent: \"_system\",\n      ok: true,\n      views: sampleValues,\n    });\n\n    // Append to audit log\n    await sqlite.execute({\n      sql: `INSERT INTO state (room_id, scope, key, sort_key, value, version, updated_at)\n            VALUES (?, '_audit', ?, ?, ?, 1, datetime('now'))`,\n      args: [roomId, String(seq), seq, entry],\n    });\n\n    // Index under _samples scope for each sampled view\n    const affectedKeys = temporalViews.map(v => ({ scope: \"_samples\", key: v.id }));\n    await indexLogEntry(roomId, seq, affectedKeys);\n  } catch {\n    // Fire and forget — never disrupt the poll\n  }\n}\n\n/**\n * Query view value samples from the log.\n * Returns chronologically ordered samples for a specific view.\n */\nexport async function queryViewSamples(\n  roomId: string,\n  viewId: string,\n  opts: { limit?: number; after?: number } = {},\n): Promise> {\n  const limit = opts.limit ?? 100;\n  let sql = `\n    SELECT DISTINCT li.seq, s.value\n    FROM log_index li\n    JOIN state s ON s.room_id = li.room_id\n      AND s.scope = '_audit'\n      AND s.sort_key = li.seq\n    WHERE li.room_id = ? AND li.scope = '_samples' AND li.key = ?\n  `;\n  const args: any[] = [roomId, viewId];\n\n  if (opts.after) {\n    sql += ` AND li.seq > ?`;\n    args.push(opts.after);\n  }\n\n  sql += ` ORDER BY li.seq ASC LIMIT ?`;\n  args.push(limit);\n\n  const result = await sqlite.execute({ sql, args });\n  return result.rows.map(([seq, rawValue]) => {\n    let entry: any = {};\n    try { entry = JSON.parse(rawValue as string); } catch {}\n    return {\n      seq: seq as number,\n      ts: entry.ts ?? \"\",\n      value: entry.views?.[viewId] ?? null,\n    };\n  });\n}\n",[],[1223],{"_105":1231,"_97":1232,"_166":1233,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1234,"_102":33,"_174":356,"_176":1235,"_177":22,"_178":-5,"_179":1236,"_101":1237},"ca983cf2-1f92-11f1-943c-42dde27851f2","schema-v7.ts","019cebf2-a8a6-7120-b164-67f91708f9f8",["D",1773485074605],"/**\n * schema-v7.ts — Unified auth schema additions (Phase 1).\n *\n * Adds:\n * - `tokens` table: unified token storage (replaces smcp_vault, smcp_access_tokens, etc.)\n * - `device_codes` table: OAuth Device Authorization flow\n *\n * Phase 1 is additive: existing smcp_ tables and token columns are untouched.\n * Old auth paths continue to work. New tokens table operates alongside.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nexport async function migrateUnifiedAuth() {\n  await sqlite.batch([\n    // ── Unified tokens table ──\n    // All minted credentials live here: device auth tokens, OAuth tokens,\n    // delegation tokens, read-scoped tokens (view replacements).\n    // Scope string determines what the token can do.\n    {\n      sql: `CREATE TABLE IF NOT EXISTS tokens (\n        id TEXT PRIMARY KEY,\n        token_hash TEXT NOT NULL UNIQUE,\n        refresh_hash TEXT UNIQUE,\n        minted_by TEXT NOT NULL,\n        scope TEXT NOT NULL DEFAULT 'rooms:*',\n        label TEXT,\n        room_id TEXT,\n        agent_id TEXT,\n        client_id TEXT,\n        revoked INTEGER DEFAULT 0,\n        expires_at TEXT,\n        created_at TEXT NOT NULL DEFAULT (datetime('now'))\n      )`,\n      args: [],\n    },\n\n    // ── Device authorization codes ──\n    // RFC 8628: device_code is the secret the CLI polls with,\n    // user_code is the short human-readable code shown on approval page.\n    {\n      sql: `CREATE TABLE IF NOT EXISTS device_codes (\n        device_code TEXT PRIMARY KEY,\n        user_code TEXT NOT NULL UNIQUE,\n        client_id TEXT,\n        scope TEXT DEFAULT 'rooms:*',\n        status TEXT DEFAULT 'pending',\n        approved_by TEXT,\n        expires_at TEXT NOT NULL,\n        created_at TEXT NOT NULL DEFAULT (datetime('now'))\n      )`,\n      args: [],\n    },\n  ]);\n\n  // Indexes\n  const indexes = [\n    `CREATE INDEX IF NOT EXISTS idx_tokens_minted_by ON tokens(minted_by)`,\n    `CREATE INDEX IF NOT EXISTS idx_tokens_room ON tokens(room_id) WHERE room_id IS NOT NULL`,\n    `CREATE INDEX IF NOT EXISTS idx_tokens_refresh ON tokens(refresh_hash) WHERE refresh_hash IS NOT NULL`,\n    `CREATE INDEX IF NOT EXISTS idx_device_codes_user ON device_codes(user_code)`,\n  ];\n  for (const sql of indexes) {\n    try { await sqlite.execute({ sql, args: [] }); } catch (_) {}\n  }\n\n  // Add invited_by to user_rooms if missing\n  try {\n    await sqlite.execute({\n      sql: `ALTER TABLE smcp_user_rooms ADD COLUMN invited_by TEXT`,\n      args: [],\n    });\n  } catch (_) { /* already exists */ }\n}\n",[],[1232],{"_105":1239,"_97":1240,"_166":1241,"_168":-5,"_169":149,"_170":1242,"_171":172,"_107":1243,"_102":687,"_174":356,"_176":1244,"_177":22,"_178":-5,"_179":1245,"_101":1246},"63d06448-1f9e-11f1-90a9-42dde27851f2","schema-v8.ts","f740beaa-1f92-11f1-8737-42dde27851f2",34,["D",1773490056489],"/**\n * schema-v8.ts — Two Primitives: state + log.\n *\n * v8 unifies actions, views, and agents into state with reserved scope prefixes.\n * The log (formerly _audit) becomes a first-class table with a key-based index.\n *\n * This migration is additive: existing tables are untouched. The compatibility\n * layer in context assembly reads from scope-based entries when present, falls\n * back to legacy tables when absent. Rooms migrate incrementally.\n *\n * New tables:\n *   log_index — key-based index into the audit trail, enabling:\n *     - \"what happened to key X?\" queries (temporal projection)\n *     - provenance tracing (which agent/action wrote key X?)\n *     - dependency-scoped replay (only replay entries touching keys a view depends on)\n *\n * New scope conventions (data in existing `state` table):\n *   _actions.{id}  — action definitions (replaces `actions` table)\n *   _views.{id}    — view definitions (replaces `views` table)\n *   _agents.{id}   — agent presence (replaces semantic cols in `agents` table)\n *   _config.{key}  — room configuration (replaces _shared._dashboard, etc.)\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nexport async function migrateV8() {\n  // ── Log index table ──────────────────────────────────────────────────\n  // Maps (room, scope, key) → list of audit sequence numbers that affected that key.\n  // Populated on every audit/log append. Enables key-level temporal queries.\n  await sqlite.execute({\n    sql: `CREATE TABLE IF NOT EXISTS log_index (\n      room_id TEXT NOT NULL,\n      seq     INTEGER NOT NULL,\n      scope   TEXT NOT NULL,\n      key     TEXT NOT NULL,\n      UNIQUE(room_id, seq, scope, key)\n    )`,\n    args: [],\n  });\n\n  const indexes = [\n    // Primary lookup: \"what happened to this key?\"\n    `CREATE INDEX IF NOT EXISTS idx_li_key ON log_index(room_id, scope, key, seq)`,\n    // Secondary: \"what keys were affected at this seq?\"\n    `CREATE INDEX IF NOT EXISTS idx_li_seq ON log_index(room_id, seq)`,\n    // Prefix queries: \"all events touching _shared.concepts.*\"\n    `CREATE INDEX IF NOT EXISTS idx_li_scope ON log_index(room_id, scope)`,\n    `CREATE UNIQUE INDEX IF NOT EXISTS idx_li_uniq ON log_index(room_id, seq, scope, key)`,\n  ];\n  for (const sql of indexes) {\n    try { await sqlite.execute({ sql, args: [] }); } catch (_) {}\n  }\n\n  // ── Deduplicate log_index (needed if backfill ran before unique index) ──\n  try {\n    await sqlite.execute({\n      sql: `DELETE FROM log_index WHERE rowid NOT IN (\n        SELECT MIN(rowid) FROM log_index GROUP BY room_id, seq, scope, key\n      )`,\n      args: [],\n    });\n  } catch { /* best-effort */ }\n\n  // ── Backfill log_index from existing _audit entries ──────────────────\n  // Walk existing audit entries and populate the index for rooms that\n  // already have history. This is idempotent — INSERT OR IGNORE.\n  try {\n    const auditRows = await sqlite.execute({\n      sql: `SELECT room_id, sort_key, value FROM state WHERE scope = '_audit' ORDER BY room_id, sort_key ASC`,\n      args: [],\n    });\n\n    const batch: { sql: string; args: any[] }[] = [];\n    for (const row of auditRows.rows) {\n      const [roomId, seq, rawValue] = row;\n      try {\n        const entry = JSON.parse(rawValue as string);\n        const writes: Array<{ scope: string; key: string }> = entry.effect?.writes ?? [];\n\n        // For structural events, index the target entity\n        if (entry.kind === \"register_action\" || entry.kind === \"register_view\" ||\n            entry.kind === \"delete_action\" || entry.kind === \"delete_view\") {\n          const schema = entry.schema ?? {};\n          if (schema.id) {\n            const scope = entry.kind.includes(\"action\") ? \"_actions\" : \"_views\";\n            batch.push({\n              sql: `INSERT OR IGNORE INTO log_index (room_id, seq, scope, key) VALUES (?, ?, ?, ?)`,\n              args: [roomId, seq, scope, schema.id],\n            });\n          }\n        }\n\n        // For invocations, index each affected key\n        for (const w of writes) {\n          if (w.scope && w.key) {\n            batch.push({\n              sql: `INSERT OR IGNORE INTO log_index (room_id, seq, scope, key) VALUES (?, ?, ?, ?)`,\n              args: [roomId, seq, w.scope, w.key],\n            });\n          }\n        }\n\n        // For agent events, index the agent\n        if (entry.kind === \"agent_join\" || entry.kind === \"agent_update\") {\n          const schema = entry.schema ?? {};\n          if (schema.id) {\n            batch.push({\n              sql: `INSERT OR IGNORE INTO log_index (room_id, seq, scope, key) VALUES (?, ?, ?, ?)`,\n              args: [roomId, seq, \"_agents\", schema.id],\n            });\n          }\n        }\n      } catch { /* malformed entry, skip */ }\n    }\n\n    // Execute in chunks to avoid enormous batch sizes\n    const CHUNK = 200;\n    for (let i = 0; i < batch.length; i += CHUNK) {\n      await sqlite.batch(batch.slice(i, i + CHUNK));\n    }\n  } catch (e) {\n    console.error(\"[v8 migration] backfill error (non-fatal):\", e);\n  }\n}\n\n/**\n * Append to the log index. Called from audit.ts on every log entry.\n * Fire-and-forget, never throws.\n */\nexport async function indexLogEntry(\n  roomId: string,\n  seq: number,\n  affectedKeys: Array<{ scope: string; key: string }>,\n) {\n  if (affectedKeys.length === 0) return;\n  try {\n    const batch = affectedKeys.map(({ scope, key }) => ({\n      sql: `INSERT OR IGNORE INTO log_index (room_id, seq, scope, key) VALUES (?, ?, ?, ?)`,\n      args: [roomId, seq, scope, key] as any[],\n    }));\n    await sqlite.batch(batch);\n  } catch { /* fire and forget */ }\n}\n\n/**\n * Query key history from the log index.\n * Returns audit entries that affected the given key, ordered chronologically.\n */\nexport async function queryKeyHistory(\n  roomId: string,\n  scope: string,\n  key: string,\n  opts: { limit?: number; after?: number } = {},\n): Promise> {\n  const limit = opts.limit ?? 100;\n  let sql = `\n    SELECT DISTINCT li.seq, s.value\n    FROM log_index li\n    JOIN state s ON s.room_id = li.room_id\n      AND s.scope = '_audit'\n      AND s.sort_key = li.seq\n    WHERE li.room_id = ? AND li.scope = ? AND li.key = ?\n  `;\n  const args: any[] = [roomId, scope, key];\n\n  if (opts.after) {\n    sql += ` AND li.seq > ?`;\n    args.push(opts.after);\n  }\n\n  sql += ` ORDER BY li.seq ASC LIMIT ?`;\n  args.push(limit);\n\n  const result = await sqlite.execute({ sql, args });\n  return result.rows.map(([seq, rawValue]) => {\n    let entry: any = {};\n    try { entry = JSON.parse(rawValue as string); } catch {}\n    return { seq: seq as number, entry };\n  });\n}\n\n/**\n * Query key history by prefix (e.g. all keys matching \"concepts.*\" in _shared).\n * Used for views with prefix-level dependencies.\n */\nexport async function queryPrefixHistory(\n  roomId: string,\n  scope: string,\n  prefix: string,\n  opts: { limit?: number; after?: number } = {},\n): Promise> {\n  const limit = opts.limit ?? 200;\n  let sql = `\n    SELECT DISTINCT li.seq, li.key, s.value\n    FROM log_index li\n    JOIN state s ON s.room_id = li.room_id\n      AND s.scope = '_audit'\n      AND s.sort_key = li.seq\n    WHERE li.room_id = ? AND li.scope = ? AND li.key LIKE ? ESCAPE '\\'\n  `;\n  const args: any[] = [roomId, scope, prefix.replace(/%/g, '\\\\%').replace(/_/g, '\\\\_') + '%'];\n\n  if (opts.after) {\n    sql += ` AND li.seq > ?`;\n    args.push(opts.after);\n  }\n\n  sql += ` ORDER BY li.seq ASC LIMIT ?`;\n  args.push(limit);\n\n  const result = await sqlite.execute({ sql, args });\n  return result.rows.map(([seq, key, rawValue]) => {\n    let entry: any = {};\n    try { entry = JSON.parse(rawValue as string); } catch {}\n    return { seq: seq as number, key: key as string, entry };\n  });\n}\n",[],[1240],{"_105":1248,"_97":1249,"_166":1250,"_168":-5,"_169":149,"_170":1251,"_171":172,"_107":1252,"_102":1111,"_174":356,"_176":1253,"_177":22,"_178":-5,"_179":1254,"_101":1255},"9825e312-1ffd-11f1-8c2a-42dde27851f2","schema.ts","019cebf2-a8a6-7120-b164-680961db7b2f",145,["D",1773530946486],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\n/**\n * Schema migration chain.\n *\n * v8: Two primitives — state + log. All domain entities (actions, views, agents)\n * live in state table scopes (_actions, _views, _agents). Legacy entity tables\n * (actions, views, agents) are created for backward compat with existing installs,\n * then dropped after v8 migration runs.\n *\n * Core tables that remain:\n *   rooms    — room identity + admin/view token hashes\n *   state    — the substrate (all scopes: _shared, _actions, _views, _agents, _messages, _audit, ...)\n *   tokens   — unified credential store (room tokens, agent tokens, MCP tokens)\n *   smcp_*   — MCP auth infrastructure (users, credentials, sessions, etc.)\n *   log_index — temporal query index over state audit entries\n */\n\nexport async function migrate() {\n  await sqlite.batch([\n    // ============ Rooms ============\n    {\n      sql: `CREATE TABLE IF NOT EXISTS rooms (\n        id TEXT PRIMARY KEY,\n        created_at TEXT DEFAULT (datetime('now')),\n        meta TEXT DEFAULT '{}',\n        token_hash TEXT,\n        view_token_hash TEXT\n      )`,\n      args: [],\n    },\n\n    // ============ Agents ============\n    {\n      sql: `CREATE TABLE IF NOT EXISTS agents (\n        id TEXT NOT NULL,\n        room_id TEXT NOT NULL REFERENCES rooms(id),\n        name TEXT NOT NULL,\n        role TEXT DEFAULT 'agent',\n        joined_at TEXT DEFAULT (datetime('now')),\n        meta TEXT DEFAULT '{}',\n        last_heartbeat TEXT,\n        status TEXT DEFAULT 'active',\n        waiting_on TEXT,\n        token_hash TEXT,\n        grants TEXT DEFAULT '[]',\n        last_seen_seq INTEGER DEFAULT 0,\n        enabled_expr TEXT,\n        PRIMARY KEY (id, room_id)\n      )`,\n      args: [],\n    },\n\n    // ============ Unified State ============\n    {\n      sql: `CREATE TABLE IF NOT EXISTS state (\n        room_id TEXT NOT NULL,\n        scope TEXT NOT NULL,\n        key TEXT NOT NULL,\n        sort_key INTEGER,\n        value TEXT NOT NULL,\n        version TEXT DEFAULT '',\n        revision INTEGER DEFAULT 1,\n        updated_at TEXT DEFAULT (datetime('now')),\n        timer_json TEXT,\n        timer_expires_at TEXT,\n        timer_ticks_left INTEGER,\n        timer_tick_on TEXT,\n        timer_effect TEXT,\n        timer_started_at TEXT,\n        enabled_expr TEXT,\n        PRIMARY KEY (room_id, scope, key)\n      )`,\n      args: [],\n    },\n\n    // ============ Actions ============\n    {\n      sql: `CREATE TABLE IF NOT EXISTS actions (\n        id TEXT NOT NULL,\n        room_id TEXT NOT NULL REFERENCES rooms(id),\n        scope TEXT DEFAULT '_shared',\n        description TEXT,\n        if_expr TEXT,\n        enabled_expr TEXT,\n        result_expr TEXT,\n        writes_json TEXT NOT NULL DEFAULT '[]',\n        params_json TEXT,\n        timer_json TEXT,\n        timer_expires_at TEXT,\n        timer_ticks_left INTEGER,\n        timer_tick_on TEXT,\n        timer_effect TEXT,\n        timer_started_at TEXT,\n        on_invoke_timer_json TEXT,\n        registered_by TEXT,\n        created_at TEXT DEFAULT (datetime('now')),\n        version INTEGER DEFAULT 1,\n        PRIMARY KEY (id, room_id)\n      )`,\n      args: [],\n    },\n\n    // ============ Views ============\n    {\n      sql: `CREATE TABLE IF NOT EXISTS views (\n        id TEXT NOT NULL,\n        room_id TEXT NOT NULL REFERENCES rooms(id),\n        scope TEXT DEFAULT '_shared',\n        description TEXT,\n        expr TEXT NOT NULL,\n        enabled_expr TEXT,\n        render_json TEXT,\n        timer_json TEXT,\n        timer_expires_at TEXT,\n        timer_ticks_left INTEGER,\n        timer_tick_on TEXT,\n        timer_effect TEXT,\n        timer_started_at TEXT,\n        registered_by TEXT,\n        created_at TEXT DEFAULT (datetime('now')),\n        version INTEGER DEFAULT 1,\n        PRIMARY KEY (id, room_id)\n      )`,\n      args: [],\n    },\n  ]);\n\n  // ============ Indexes ============\n  const indexes = [\n    `CREATE INDEX IF NOT EXISTS idx_state_scope_sort ON state(room_id, scope, sort_key) WHERE sort_key IS NOT NULL`,\n    `CREATE INDEX IF NOT EXISTS idx_state_scope ON state(room_id, scope)`,\n    `CREATE INDEX IF NOT EXISTS idx_state_tick_on ON state(room_id, timer_tick_on) WHERE timer_tick_on IS NOT NULL`,\n    `CREATE INDEX IF NOT EXISTS idx_actions_room ON actions(room_id)`,\n    `CREATE INDEX IF NOT EXISTS idx_actions_tick_on ON actions(room_id, timer_tick_on) WHERE timer_tick_on IS NOT NULL`,\n    `CREATE INDEX IF NOT EXISTS idx_views_room ON views(room_id)`,\n    `CREATE INDEX IF NOT EXISTS idx_agents_room ON agents(room_id)`,\n  ];\n  for (const sql of indexes) {\n    try { await sqlite.execute({ sql, args: [] }); } catch (_) {}\n  }\n\n  // ============ v4→v5 migration helpers ============\n  // Add new columns to existing tables if upgrading from v4\n  const addColumn = async (table: string, col: string, typedef: string) => {\n    try {\n      await sqlite.execute({ sql: `ALTER TABLE ${table} ADD COLUMN ${col} ${typedef}`, args: [] });\n    } catch (_) { /* already exists */ }\n  };\n\n  // Rooms: add token_hash and view_token_hash if missing\n  await addColumn(\"rooms\", \"token_hash\", \"TEXT\");\n  await addColumn(\"rooms\", \"view_token_hash\", \"TEXT\");\n\n  // Agents: add grants and last_seen_seq if missing\n  await addColumn(\"agents\", \"grants\", \"TEXT DEFAULT '[]'\");\n  await addColumn(\"agents\", \"last_seen_seq\", \"INTEGER DEFAULT 0\");\n  await addColumn(\"agents\", \"enabled_expr\", \"TEXT\");\n\n  // State: add sort_key if missing\n  await addColumn(\"state\", \"sort_key\", \"INTEGER\");\n  await addColumn(\"state\", \"timer_json\", \"TEXT\");\n  await addColumn(\"state\", \"timer_expires_at\", \"TEXT\");\n  await addColumn(\"state\", \"timer_ticks_left\", \"INTEGER\");\n  await addColumn(\"state\", \"timer_tick_on\", \"TEXT\");\n  await addColumn(\"state\", \"timer_effect\", \"TEXT\");\n  await addColumn(\"state\", \"timer_started_at\", \"TEXT\");\n  await addColumn(\"state\", \"enabled_expr\", \"TEXT\");\n\n  // Actions: add description, scope if missing\n  await addColumn(\"actions\", \"scope\", \"TEXT DEFAULT '_shared'\");\n  await addColumn(\"actions\", \"description\", \"TEXT\");\n  await addColumn(\"actions\", \"result_expr\", \"TEXT\");\n\n  // Views table is new — created above. No migration needed.\n\n  // ============ v5→v6 migration helpers ============\n  // state.version becomes a content hash (TEXT). Add state.revision as sequential integer.\n  // The addColumn approach silently fails if version already exists as INTEGER (from v5).\n  // Use RENAME COLUMN to fix the affinity on production databases.\n  try {\n    // If this succeeds, the column was still INTEGER — rename it, add TEXT version, backfill revision\n    await sqlite.execute({ sql: `ALTER TABLE state RENAME COLUMN version TO version_v5`, args: [] });\n    await sqlite.execute({ sql: `ALTER TABLE state ADD COLUMN version TEXT DEFAULT ''`, args: [] });\n    await sqlite.execute({ sql: `ALTER TABLE state ADD COLUMN revision INTEGER DEFAULT 1`, args: [] });\n    // Migrate: copy integer version into revision, clear version hash (will be recomputed on next write)\n    await sqlite.execute({\n      sql: `UPDATE state SET revision = CAST(version_v5 AS INTEGER), version = ''\n            WHERE revision IS NULL OR revision <= 1`,\n      args: [],\n    });\n  } catch (_) {\n    // Rename failed — either already migrated (version_v5 exists) or fresh install (version TEXT already set).\n    // Ensure revision column exists and backfill any stragglers.\n    await addColumn(\"state\", \"revision\", \"INTEGER DEFAULT 1\");\n    try {\n      await sqlite.execute({\n        sql: `UPDATE state SET revision = 1, version = ''\n              WHERE revision IS NULL OR revision = 0`,\n        args: [],\n      });\n    } catch (_) { /* best-effort */ }\n  }\n\n  // views.render_json: render hint for surfaces-as-views\n  await addColumn(\"views\", \"render_json\", \"TEXT\");\n\n  // ============ MCP auth tables (smcp_ prefix) ============\n  // v7: Only tables still actively needed. Deprecated tables (smcp_access_tokens,\n  // smcp_refresh_tokens, smcp_vault, smcp_user_sessions) are no longer created.\n  // They still exist in production for backward compat with active sessions.\n  await sqlite.batch([\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_users (\n      id TEXT PRIMARY KEY,\n      username TEXT UNIQUE NOT NULL,\n      created_at TEXT NOT NULL DEFAULT (datetime('now'))\n    )`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_credentials (\n      id TEXT PRIMARY KEY,\n      user_id TEXT NOT NULL REFERENCES smcp_users(id),\n      public_key BLOB NOT NULL,\n      counter INTEGER NOT NULL DEFAULT 0,\n      transports TEXT,\n      device_type TEXT,\n      backed_up INTEGER DEFAULT 0,\n      rp_id TEXT,\n      created_at TEXT NOT NULL DEFAULT (datetime('now'))\n    )`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_challenges (\n      id TEXT PRIMARY KEY,\n      challenge TEXT NOT NULL,\n      user_id TEXT,\n      type TEXT NOT NULL,\n      expires_at TEXT NOT NULL,\n      created_at TEXT NOT NULL DEFAULT (datetime('now'))\n    )`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_oauth_clients (\n      client_id TEXT PRIMARY KEY,\n      client_secret TEXT,\n      redirect_uris TEXT NOT NULL,\n      client_name TEXT,\n      created_at TEXT NOT NULL DEFAULT (datetime('now'))\n    )`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_auth_codes (\n      code TEXT PRIMARY KEY,\n      client_id TEXT NOT NULL,\n      user_id TEXT NOT NULL,\n      redirect_uri TEXT NOT NULL,\n      code_challenge TEXT NOT NULL,\n      code_challenge_method TEXT NOT NULL DEFAULT 'S256',\n      scope TEXT,\n      resource TEXT,\n      expires_at TEXT NOT NULL,\n      used INTEGER DEFAULT 0\n    )`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_sessions (\n      id TEXT PRIMARY KEY,\n      user_id TEXT NOT NULL,\n      expires_at TEXT NOT NULL,\n      scope TEXT DEFAULT 'consent',\n      created_at TEXT NOT NULL DEFAULT (datetime('now'))\n    )`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_recovery_tokens (\n      id TEXT PRIMARY KEY,\n      user_id TEXT NOT NULL REFERENCES smcp_users(id),\n      token_hash TEXT NOT NULL,\n      expires_at TEXT NOT NULL,\n      used INTEGER DEFAULT 0,\n      created_at TEXT NOT NULL DEFAULT (datetime('now'))\n    )`, args: [] },\n  ]);\n\n  // smcp_ column migrations (for existing installs from separate sync-mcp val)\n  await addColumn(\"smcp_credentials\", \"rp_id\", \"TEXT\");\n  await addColumn(\"smcp_sessions\", \"scope\", \"TEXT DEFAULT 'consent'\");\n\n  // ============ Agency & Identity tables ============\n  // These support the user→room→agent identity model for MCP clients.\n  // See docs/agency-and-identity.md for the design.\n  await sqlite.batch([\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_user_rooms (\n      user_id TEXT NOT NULL REFERENCES smcp_users(id),\n      room_id TEXT NOT NULL,\n      access TEXT NOT NULL DEFAULT 'participant',\n      is_default INTEGER DEFAULT 0,\n      label TEXT,\n      created_at TEXT NOT NULL DEFAULT (datetime('now')),\n      PRIMARY KEY (user_id, room_id)\n    )`, args: [] },\n    { sql: `CREATE TABLE IF NOT EXISTS smcp_embodiments (\n      session_hash TEXT NOT NULL,\n      room_id TEXT NOT NULL,\n      agent_id TEXT NOT NULL,\n      embodied_at TEXT NOT NULL DEFAULT (datetime('now')),\n      PRIMARY KEY (session_hash, room_id)\n    )`, args: [] },\n  ]);\n\n  const agencyIndexes = [\n    `CREATE INDEX IF NOT EXISTS idx_smcp_user_rooms_user ON smcp_user_rooms(user_id)`,\n    `CREATE INDEX IF NOT EXISTS idx_smcp_embodiments_session ON smcp_embodiments(session_hash)`,\n  ];\n  for (const sql of agencyIndexes) {\n    try { await sqlite.execute({ sql, args: [] }); } catch (_) {}\n  }\n\n  // ============ v8: log_index + backfill ============\n  const { migrateV8 } = await import(\"./schema-v8.ts\");\n  await migrateV8();\n\n  // ============ v8: tokens.last_used_at ============\n  await addColumn(\"tokens\", \"last_used_at\", \"TEXT\");\n\n  // ============ v8: Drop legacy entity tables ============\n  // All domain data migrated to state table scopes (_actions, _views, _agents).\n  // Agent tokens migrated to unified tokens table.\n  // These tables are no longer read or written by any code path.\n  const legacyDrops = [\n    `DROP TABLE IF EXISTS views`,\n    `DROP TABLE IF EXISTS actions`,\n    `DROP TABLE IF EXISTS agents`,\n  ];\n  for (const sql of legacyDrops) {\n    try { await sqlite.execute({ sql, args: [] }); } catch (_) {}\n  }\n\n  // Drop orphaned indexes on dropped tables\n  const legacyIndexDrops = [\n    `DROP INDEX IF EXISTS idx_actions_room`,\n    `DROP INDEX IF EXISTS idx_actions_tick_on`,\n    `DROP INDEX IF EXISTS idx_views_room`,\n    `DROP INDEX IF EXISTS idx_agents_room`,\n  ];\n  for (const sql of legacyIndexDrops) {\n    try { await sqlite.execute({ sql, args: [] }); } catch (_) {}\n  }\n\n}",[],[1249],{"_105":1257,"_97":1258,"_166":1259,"_168":-5,"_169":149,"_170":1260,"_171":172,"_107":1261,"_102":122,"_174":356,"_176":1262,"_177":22,"_178":-5,"_179":1263,"_101":1264},"cd23e3ac-1ffd-11f1-aab3-42dde27851f2","timers.ts","019cebf2-a8a6-7120-b164-6edaadfc63fa",147,["D",1773531035394],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\n/**\n * Timer and Enabled utilities for agent-sync.\n *\n * Timer: temporal lifecycle for any resource (state, actions, messages, agents).\n *   - Wall-clock: { ms, effect } or { at, effect }\n *   - Logical-clock: { ticks, tick_on, effect }\n *   - effect: \"delete\" (resource vanishes on expiry) or \"enable\" (dormant until expiry)\n *\n * Enabled: CEL expression gating a resource's participation in live state.\n *   - Disabled resources are stored but invisible to reads and CEL contexts.\n */\n\n// ============ Timer parsing and storage ============\n\nexport interface TimerConfig {\n  ms?: number;\n  at?: string;         // ISO datetime\n  ticks?: number;\n  tick_on?: string;    // state key path to watch\n  effect: \"delete\" | \"enable\";\n}\n\nexport interface TimerColumns {\n  timer_json: string | null;\n  timer_expires_at: string | null;\n  timer_ticks_left: number | null;\n  timer_tick_on: string | null;\n  timer_effect: string | null;\n  timer_started_at: string | null;\n}\n\n/** Parse a timer config from request body into DB columns */\nexport function parseTimer(timer: TimerConfig | undefined | null): TimerColumns {\n  if (!timer) {\n    return {\n      timer_json: null,\n      timer_expires_at: null,\n      timer_ticks_left: null,\n      timer_tick_on: null,\n      timer_effect: null,\n      timer_started_at: null,\n    };\n  }\n\n  const now = new Date();\n  const cols: TimerColumns = {\n    timer_json: JSON.stringify(timer),\n    timer_effect: timer.effect,\n    timer_started_at: now.toISOString(),\n    timer_expires_at: null,\n    timer_ticks_left: null,\n    timer_tick_on: null,\n  };\n\n  if (timer.ms !== undefined) {\n    cols.timer_expires_at = new Date(now.getTime() + timer.ms).toISOString();\n  } else if (timer.at !== undefined) {\n    cols.timer_expires_at = new Date(timer.at).toISOString();\n  } else if (timer.ticks !== undefined) {\n    cols.timer_ticks_left = timer.ticks;\n    cols.timer_tick_on = timer.tick_on ?? null;\n  }\n\n  return cols;\n}\n\n/** Validate timer config from request body */\nexport function validateTimer(timer: any): { valid: true } | { valid: false; error: string } {\n  if (!timer || typeof timer !== \"object\") {\n    return { valid: false, error: \"timer must be an object\" };\n  }\n  if (!timer.effect || (timer.effect !== \"delete\" && timer.effect !== \"enable\")) {\n    return { valid: false, error: \"timer.effect must be 'delete' or 'enable'\" };\n  }\n  const hasMs = timer.ms !== undefined;\n  const hasAt = timer.at !== undefined;\n  const hasTicks = timer.ticks !== undefined;\n  const clockCount = [hasMs, hasAt, hasTicks].filter(Boolean).length;\n  if (clockCount === 0) {\n    return { valid: false, error: \"timer must specify one of: ms, at, ticks\" };\n  }\n  if (clockCount > 1) {\n    return { valid: false, error: \"timer must specify exactly one of: ms, at, ticks\" };\n  }\n  if (hasMs && (typeof timer.ms !== \"number\" || timer.ms <= 0)) {\n    return { valid: false, error: \"timer.ms must be a positive number\" };\n  }\n  if (hasAt) {\n    const d = new Date(timer.at);\n    if (isNaN(d.getTime())) {\n      return { valid: false, error: \"timer.at must be a valid ISO datetime\" };\n    }\n  }\n  if (hasTicks) {\n    if (typeof timer.ticks !== \"number\" || timer.ticks <= 0 || !Number.isInteger(timer.ticks)) {\n      return { valid: false, error: \"timer.ticks must be a positive integer\" };\n    }\n    if (!timer.tick_on || typeof timer.tick_on !== \"string\") {\n      return { valid: false, error: \"timer.tick_on is required for logical-clock timers (state key path to watch)\" };\n    }\n  }\n  return { valid: true };\n}\n\n// ============ Timer status evaluation ============\n\nexport type TimerStatus = \"active\" | \"expired\" | \"no_timer\";\n\n/** Check the timer status of a resource row */\nexport function getTimerStatus(row: {\n  timer_effect?: string | null;\n  timer_expires_at?: string | null;\n  timer_ticks_left?: number | null;\n}): TimerStatus {\n  if (!row.timer_effect) return \"no_timer\";\n\n  // Wall-clock timer\n  if (row.timer_expires_at) {\n    const expires = new Date(row.timer_expires_at).getTime();\n    const now = Date.now();\n    return now >= expires ? \"expired\" : \"active\";\n  }\n\n  // Logical-clock timer\n  if (row.timer_ticks_left !== undefined && row.timer_ticks_left !== null) {\n    return row.timer_ticks_left <= 0 ? \"expired\" : \"active\";\n  }\n\n  return \"no_timer\";\n}\n\n/**\n * Determine if a resource is live (visible to reads and CEL) based on its timer.\n *\n * effect=\"delete\": live while timer is active, dead when expired\n * effect=\"enable\": dead while timer is active (dormant), live when expired\n */\nexport function isTimerLive(row: {\n  timer_effect?: string | null;\n  timer_expires_at?: string | null;\n  timer_ticks_left?: number | null;\n}): boolean {\n  const status = getTimerStatus(row);\n  if (status === \"no_timer\") return true;\n\n  if (row.timer_effect === \"delete\") {\n    return status === \"active\"; // live until expired\n  }\n  if (row.timer_effect === \"enable\") {\n    return status === \"expired\"; // dormant until expired, then live\n  }\n  return true;\n}\n\n// ============ Logical clock ticking ============\n\n/**\n * Called after a state key is written. Decrements ticks_remaining for all\n * resources in the room that have tick_on matching the written key path.\n *\n * The key path is \"scope.key\" (e.g., \"_shared.turn\", \"agent-a.score\").\n * tick_on values are matched as stored — agents set them as state key paths\n * like \"state._shared.turn\".\n */\nexport async function tickLogicalTimers(roomId: string, scope: string, key: string): Promise {\n  // Match tick_on patterns: \"state.{scope}.{key}\" or just \"{scope}.{key}\"\n  const fullPath = `state.${scope}.${key}`;\n  const shortPath = `${scope}.${key}`;\n\n  // Tick state timers (covers all state entries including _actions, _views scopes)\n  await sqlite.execute({\n    sql: `UPDATE state SET timer_ticks_left = timer_ticks_left - 1\n          WHERE room_id = ? AND timer_tick_on IS NOT NULL AND timer_ticks_left > 0\n          AND (timer_tick_on = ? OR timer_tick_on = ?)`,\n    args: [roomId, fullPath, shortPath],\n  });\n  // Note: action/view timers in v8 use the _timer field inside their JSON value,\n  // managed by invoke.ts on_invoke cooldown. Logical-clock ticking for action/view\n  // timers would need read-modify-write on the JSON value if ever used.\n}\n\n// ============ Timer renewal ============\n\n/** Renew a wall-clock timer (reset expiry from now) */\nexport function renewTimer(timerJson: string | null): { expires_at: string } | null {\n  if (!timerJson) return null;\n  try {\n    const timer = JSON.parse(timerJson);\n    if (timer.ms) {\n      return { expires_at: new Date(Date.now() + timer.ms).toISOString() };\n    }\n  } catch {}\n  return null;\n}\n",[],[1258],{"_105":1266,"_97":1267,"_166":1268,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1269,"_102":33,"_174":356,"_176":1270,"_177":22,"_178":-5,"_179":1271,"_101":1272},"ca99fb50-1f92-11f1-943c-42dde27851f2","tokens.ts","019cebf2-a8a6-7120-b164-71ba541f5c00",["D",1773485074605],"/**\n * tokens.ts — Token management HTTP endpoints.\n *\n * POST /tokens       — Mint a scoped token (delegation, view, agent-bound)\n * GET  /tokens       — List your minted tokens\n * DELETE /tokens/:id — Revoke a token\n * PATCH /tokens/:id  — Update a token's scope (bounded by caller's scope)\n * POST /tokens/refresh — Refresh a token (exchange refresh_token for new access_token)\n *\n * All endpoints require a valid tok_ or smcp_at_ token in Authorization header\n * (except refresh which uses the refresh_token in the body).\n *\n * SECURITY: Minted/patched tokens cannot exceed the calling token's scope.\n * A narrow token cannot mint a wide one (no privilege escalation).\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport * as db from \"./mcp/db.ts\";\nimport { hashTokenB64 } from \"./auth.ts\";\nimport {\n  parseScope, serializeScope, matchRoom, roleToLevel, minLevel,\n  scopeSubsumes, type ParsedScope,\n} from \"./mcp/scope.ts\";\nimport { json, rows2objects } from \"./utils.ts\";\n\n// ─── Caller resolution ──────────────────────────────────────────\n\ninterface CallerInfo {\n  userId: string;\n  /** Parsed scope of the calling token. null = unrestricted (legacy smcp_at_ or session). */\n  scope: ParsedScope | null;\n}\n\n/**\n * Resolve the calling user + their token's scope from a bearer token.\n * Returns null if unauthenticated.\n */\nasync function resolveCaller(req: Request): Promise {\n  const header = req.headers.get(\"Authorization\");\n  if (!header?.startsWith(\"Bearer \")) return null;\n  const token = header.slice(7);\n\n  // Check unified tokens table\n  const hash = await hashTokenB64(token);\n  const tok = await db.validateTokenByHash(hash);\n  if (tok) {\n    return { userId: tok.mintedBy, scope: parseScope(tok.scope) };\n  }\n\n  // Fallback: check smcp_access_tokens for backward compat\n  // Legacy tokens have no structured scope — treat as unrestricted\n  if (token.startsWith(\"smcp_at_\")) {\n    const res = await sqlite.execute({\n      sql: `SELECT user_id FROM smcp_access_tokens WHERE token = ? AND expires_at > datetime('now')`,\n      args: [token],\n    });\n    if (res.rows.length > 0) {\n      return { userId: res.rows[0][0] as string, scope: null };\n    }\n  }\n\n  return null;\n}\n\n// ─── Shared validation ──────────────────────────────────────────\n\n/**\n * Validate that a requested scope is within bounds:\n * 1. User must have access to all rooms (user_rooms check)\n * 2. New scope must not exceed calling token's scope (subsumption check)\n */\nasync function validateScope(\n  userId: string,\n  callerScope: ParsedScope | null,\n  requestedScope: string,\n): Promise {\n  const parsed = parseScope(requestedScope);\n\n  // Check 1: user_rooms — user must actually have access to named rooms\n  for (const [rId] of parsed.rooms) {\n    const userRoom = await sqlite.execute({\n      sql: `SELECT access FROM smcp_user_rooms WHERE user_id = ? AND room_id = ?`,\n      args: [userId, rId],\n    });\n    if (userRoom.rows.length === 0) {\n      return json({\n        error: \"scope_exceeds_access\",\n        message: `You don't have access to room \"${rId}\"`,\n        room: rId,\n      }, 403);\n    }\n  }\n\n  // Check 2: token subsumption — new scope ≤ caller's scope\n  if (callerScope) {\n    const check = scopeSubsumes(callerScope, parsed);\n    if (!check.ok) {\n      return json({\n        error: \"scope_exceeds_token\",\n        message: check.reason,\n        hint: \"A token cannot grant more access than it has itself.\",\n      }, 403);\n    }\n  }\n  // callerScope === null means legacy/unrestricted — skip subsumption\n\n  return null; // all good\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// POST /tokens — Mint a scoped token\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleMintToken(req: Request): Promise {\n  const caller = await resolveCaller(req);\n  if (!caller) return json({ error: \"authentication_required\" }, 401);\n\n  const body = await req.json();\n  const scope = body.scope;\n  if (!scope || typeof scope !== \"string\") {\n    return json({ error: \"scope is required (e.g., 'rooms:my-room:agent:alice')\" }, 400);\n  }\n\n  const label = body.label ?? null;\n  const expiresIn = body.expires_in ?? null;\n  const roomId = body.room_id ?? null;\n  const agentId = body.agent_id ?? null;\n\n  // Validate scope against user access AND calling token\n  const scopeError = await validateScope(caller.userId, caller.scope, scope);\n  if (scopeError) return scopeError;\n\n  // Validate: if agent-bound, the agent must exist\n  const parsed = parseScope(scope);\n  const agentBound = agentId ?? (() => {\n    for (const [, rs] of parsed.rooms) {\n      if (rs.agent) return rs.agent;\n    }\n    return null;\n  })();\n  if (agentBound && roomId) {\n    const agentCheck = await sqlite.execute({\n      sql: `SELECT id FROM agents WHERE id = ? AND room_id = ?`,\n      args: [agentBound, roomId],\n    });\n    if (agentCheck.rows.length === 0) {\n      return json({\n        error: \"agent_not_found\",\n        message: `Agent \"${agentBound}\" not found in room \"${roomId}\"`,\n      }, 404);\n    }\n  }\n\n  const result = await db.mintToken({\n    userId: caller.userId,\n    scope,\n    label,\n    roomId,\n    agentId: agentBound,\n    expiresInSec: expiresIn ?? undefined,\n    withRefresh: !!body.with_refresh,\n  });\n\n  return json({\n    id: result.id,\n    token: result.token,\n    refresh_token: result.refreshToken ?? undefined,\n    scope,\n    label,\n    room_id: roomId,\n    agent_id: agentBound,\n    expires_at: result.expiresAt,\n  }, 201);\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// GET /tokens — List your minted tokens\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleListTokens(req: Request): Promise {\n  const caller = await resolveCaller(req);\n  if (!caller) return json({ error: \"authentication_required\" }, 401);\n\n  const tokens = await db.listUserTokens(caller.userId);\n\n  return json({\n    tokens: tokens.map(t => ({\n      id: t.id,\n      scope: t.scope,\n      label: t.label,\n      room_id: t.roomId,\n      agent_id: t.agentId,\n      client_id: t.clientId,\n      revoked: t.revoked,\n      expires_at: t.expiresAt,\n      created_at: t.createdAt,\n    })),\n  });\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// DELETE /tokens/:id — Revoke a token\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleRevokeToken(req: Request, tokenId: string): Promise {\n  const caller = await resolveCaller(req);\n  if (!caller) return json({ error: \"authentication_required\" }, 401);\n\n  const ok = await db.revokeToken(tokenId, caller.userId);\n  if (!ok) return json({ error: \"not_found\", message: \"Token not found or not owned by you\" }, 404);\n\n  return json({ revoked: true, id: tokenId });\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// PATCH /tokens/:id — Update a token's scope (bounded by caller's scope)\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleUpdateToken(req: Request, tokenId: string): Promise {\n  const caller = await resolveCaller(req);\n  if (!caller) return json({ error: \"authentication_required\" }, 401);\n\n  const body = await req.json();\n  const newScope = body.scope;\n  if (!newScope || typeof newScope !== \"string\") {\n    return json({ error: \"scope is required\" }, 400);\n  }\n\n  // Fetch the existing token — must be owned by caller\n  const existing = await sqlite.execute({\n    sql: `SELECT id, scope, label, minted_by, revoked FROM tokens WHERE id = ? AND minted_by = ?`,\n    args: [tokenId, caller.userId],\n  });\n  if (existing.rows.length === 0) {\n    return json({ error: \"not_found\", message: \"Token not found or not owned by you\" }, 404);\n  }\n  if (existing.rows[0][4] === 1) {\n    return json({ error: \"token_revoked\", message: \"Cannot update a revoked token\" }, 409);\n  }\n\n  const oldScope = existing.rows[0][1] as string;\n\n  // Validate new scope against user access AND calling token\n  const scopeError = await validateScope(caller.userId, caller.scope, newScope);\n  if (scopeError) return scopeError;\n\n  // Update the scope\n  await sqlite.execute({\n    sql: `UPDATE tokens SET scope = ? WHERE id = ?`,\n    args: [newScope, tokenId],\n  });\n\n  // Optionally update label\n  if (body.label !== undefined) {\n    await sqlite.execute({\n      sql: `UPDATE tokens SET label = ? WHERE id = ?`,\n      args: [body.label, tokenId],\n    });\n  }\n\n  return json({\n    id: tokenId,\n    scope: newScope,\n    label: body.label ?? existing.rows[0][2],\n    previous_scope: oldScope,\n  });\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// POST /tokens/refresh — Exchange refresh_token for new access_token\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleRefreshToken(req: Request): Promise {\n  let body: Record;\n  const contentType = req.headers.get(\"content-type\") ?? \"\";\n  if (contentType.includes(\"application/x-www-form-urlencoded\")) {\n    const text = await req.text();\n    body = Object.fromEntries(new URLSearchParams(text));\n  } else {\n    body = await req.json();\n  }\n\n  const refreshToken = body.refresh_token;\n  if (!refreshToken) {\n    return json({ error: \"invalid_request\", error_description: \"refresh_token required\" }, 400);\n  }\n\n  const refreshHash = await hashTokenB64(refreshToken);\n  const result = await db.refreshUnifiedToken(refreshHash);\n  if (!result) {\n    return json({ error: \"invalid_grant\", error_description: \"Invalid or expired refresh token\" }, 400);\n  }\n\n  return json({\n    access_token: result.token,\n    token_type: \"Bearer\",\n    expires_in: 3600,\n    refresh_token: result.refreshToken,\n  });\n}\n\n// ═══════════════════════════════════════════════════════════════════\n// POST /rooms/:id/invite — Invite a user to a room\n// ═══════════════════════════════════════════════════════════════════\n\nexport async function handleInvite(req: Request, roomId: string, body?: any): Promise {\n  const caller = await resolveCaller(req);\n  if (!caller) return json({ error: \"authentication_required\" }, 401);\n\n  // Check the caller is an owner\n  const callerRoom = await sqlite.execute({\n    sql: `SELECT access FROM smcp_user_rooms WHERE user_id = ? AND room_id = ?`,\n    args: [caller.userId, roomId],\n  });\n  if (callerRoom.rows.length === 0 || callerRoom.rows[0][0] !== \"owner\") {\n    return json({ error: \"not_owner\", message: \"Only room owners can invite users\" }, 403);\n  }\n\n  if (!body) body = await req.json();\n  const { username, role } = body;\n  if (!username) return json({ error: \"username is required\" }, 400);\n\n  const validRoles = [\"owner\", \"collaborator\", \"participant\", \"observer\"];\n  const targetRole = role ?? \"participant\";\n  if (!validRoles.includes(targetRole)) {\n    return json({ error: \"invalid_role\", valid: validRoles }, 400);\n  }\n\n  // Look up user by username\n  const targetUser = await db.getUserByUsername(username);\n  if (!targetUser) {\n    return json({ error: \"user_not_found\", message: `No user with username \"${username}\"` }, 404);\n  }\n\n  await db.inviteUserToRoom(targetUser.id, roomId, targetRole, caller.userId, body.label);\n\n  return json({ invited: true, username, room: roomId, role: targetRole });\n}\n\n\n// ═══════════════════════════════════════════════════════════════════\n// POST /rooms/:id/claim — Claim an orphaned room\n// ═══════════════════════════════════════════════════════════════════\n\n/**\n * Claim a room that has no owners in user_rooms. This handles rooms\n * created via the HTTP API before unified auth existed (e.g., cartographers).\n *\n * Rules:\n * - If room has NO user_rooms entries: any authenticated user can claim as owner\n * - If room has owners but you have the room_ token: claim as owner\n * - Otherwise: denied\n */\nexport async function handleClaim(req: Request, roomId: string, body?: any): Promise {\n  const caller = await resolveCaller(req);\n  if (!caller) return json({ error: \"authentication_required\" }, 401);\n\n  // Verify room exists\n  const roomCheck = await sqlite.execute({\n    sql: `SELECT id FROM rooms WHERE id = ?`,\n    args: [roomId],\n  });\n  if (roomCheck.rows.length === 0) {\n    return json({ error: \"room_not_found\" }, 404);\n  }\n\n  // Check for existing owners\n  const ownerCheck = await sqlite.execute({\n    sql: `SELECT user_id FROM smcp_user_rooms WHERE room_id = ?`,\n    args: [roomId],\n  });\n\n  if (ownerCheck.rows.length > 0) {\n    // Room already has users — check if caller has the room_ token\n    if (!body) try { body = await req.json(); } catch { body = {}; }\n    const roomToken = body?.room_token;\n    if (!roomToken) {\n      return json({\n        error: \"already_owned\",\n        message: \"Room already has users. Provide room_token to claim, or ask an owner to invite you.\",\n        existing_users: ownerCheck.rows.length,\n      }, 403);\n    }\n    // Verify room token\n    const { hashToken } = await import(\"./auth.ts\");\n    const hash = await hashToken(roomToken);\n    const tokenCheck = await sqlite.execute({\n      sql: `SELECT id FROM rooms WHERE id = ? AND token_hash = ?`,\n      args: [roomId, hash],\n    });\n    if (tokenCheck.rows.length === 0) {\n      return json({ error: \"invalid_room_token\" }, 401);\n    }\n  }\n\n  // Claim as owner\n  const label = body?.label ?? `Claimed: ${roomId}`;\n  await sqlite.execute({\n    sql: `INSERT INTO smcp_user_rooms (user_id, room_id, access, label)\n          VALUES (?, ?, 'owner', ?)\n          ON CONFLICT(user_id, room_id) DO UPDATE SET access = 'owner'`,\n    args: [caller.userId, roomId, label],\n  });\n\n  return json({ claimed: true, room: roomId, role: \"owner\" });\n}\n",[],[1267],{"_105":1274,"_97":744,"_166":1275,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1276,"_102":33,"_174":356,"_176":1277,"_177":22,"_178":-5,"_179":1278,"_101":1279},"ca9a3e30-1f92-11f1-943c-42dde27851f2","019cebf2-a8a6-7120-b164-74b74256e4e9",["D",1773485074605],"/**\n * utils.ts — shared HTTP and data utilities for sync.\n *\n * Pure functions with no internal dependencies. Used by main.ts, invoke.ts,\n * context.ts, and any other module that needs JSON responses, SQLite row\n * formatting, template substitution, or content hashing.\n */\n\n/** JSON response with CORS headers. */\nexport function json(data: any, status = 200) {\n  return new Response(JSON.stringify(data), {\n    status,\n    headers: {\n      \"Content-Type\": \"application/json\",\n      \"Access-Control-Allow-Origin\": \"*\",\n      \"Access-Control-Allow-Methods\": \"GET,POST,PUT,PATCH,DELETE,OPTIONS\",\n      \"Access-Control-Allow-Headers\": \"Content-Type,Authorization\",\n    },\n  });\n}\n\n/** Convert SQLite result rows to objects using column names. */\nexport function rows2objects(result: any) {\n  return result.rows.map((row: any[]) =>\n    Object.fromEntries(result.columns.map((col: string, i: number) => [col, row[i]]))\n  );\n}\n\n/** Sentinel for failed JSON parsing. */\nexport const PARSE_FAILED = Symbol(\"parse_failed\");\n\n/** Parse request body as JSON. Returns {} for empty bodies, PARSE_FAILED for invalid JSON. */\nexport async function parseBody(req: Request) {\n  const text = await req.text();\n  if (!text || text.trim() === \"\") return {};\n  try { return JSON.parse(text); } catch { return PARSE_FAILED; }\n}\n\n/** Promise-based delay. */\nexport const sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\n/** Compute a 16-hex-char SHA-256 content hash of a string value.\n *  This is the v6 `version` field — unforgeable proof-of-read for if_version writes.\n *  Agents cannot supply a correct hash without having fetched the current value. */\nexport async function contentHash(value: string): Promise {\n  const data = new TextEncoder().encode(value);\n  const buf = await crypto.subtle.digest(\"SHA-256\", data);\n  return Array.from(new Uint8Array(buf))\n    .slice(0, 8)\n    .map(b => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n}\n\n/** Deep substitute ${params.x}, ${self}, and ${now} in any value.\n *  Single-pass: param values containing ${self} or ${now} are NOT re-expanded.\n *  Timestamp is computed once per call and shared across the entire tree. */\nexport function deepSubstitute(value: any, params: Record, self: string, _ts?: string): any {\n  if (typeof value === \"string\") {\n    if (!value.includes(\"${\")) return value;\n    const ts = _ts ?? new Date().toISOString();\n    return value.replace(/\\$\\{(params\\.(\\w+)|self|now)\\}/g, (match: string, full: string, paramName: string) => {\n      if (paramName !== undefined) return String(params[paramName] ?? \"\");\n      if (full === \"self\") return self;\n      if (full === \"now\") return ts;\n      return match;\n    });\n  }\n  if (Array.isArray(value)) {\n    const ts = _ts ?? new Date().toISOString();\n    return value.map(v => deepSubstitute(v, params, self, ts));\n  }\n  if (value !== null && typeof value === \"object\") {\n    const ts = _ts ?? new Date().toISOString();\n    const out: Record = {};\n    for (const [k, v] of Object.entries(value)) {\n      const rk = k.includes(\"${\") ? deepSubstitute(k, params, self, ts) as string : k;\n      out[rk] = deepSubstitute(v, params, self, ts);\n    }\n    return out;\n  }\n  return value;\n}\n\n/** Deep-merge source into target. Objects merge recursively; arrays and\n *  primitives in source overwrite target. null in source explicitly deletes\n *  the key (set to null). */\nexport function deepMerge(target: any, source: any): any {\n  if (source === null || source === undefined) return source;\n  if (typeof target !== \"object\" || typeof source !== \"object\"\n      || Array.isArray(target) || Array.isArray(source)\n      || target === null) {\n    return source;\n  }\n  const out: Record = { ...target };\n  for (const [k, v] of Object.entries(source)) {\n    if (v === null) { out[k] = null; continue; }\n    out[k] = (k in out && typeof out[k] === \"object\" && !Array.isArray(out[k]) && out[k] !== null)\n      ? deepMerge(out[k], v)\n      : v;\n  }\n  return out;\n}\n\n/** Recursively strip null/undefined values from an object (for ?compact=true). */\nexport function stripNulls(data: any): any {\n  if (data === null || data === undefined) return undefined;\n  if (Array.isArray(data)) return data.map(stripNulls);\n  if (typeof data === \"object\") {\n    const out: Record = {};\n    for (const [k, v] of Object.entries(data)) {\n      if (v !== null && v !== undefined) out[k] = stripNulls(v);\n    }\n    return out;\n  }\n  return data;\n}\n",[],[744],{"_105":1281,"_97":1282,"_166":1283,"_168":-5,"_169":149,"_170":1284,"_171":172,"_107":1285,"_102":1286,"_174":356,"_176":1287,"_177":22,"_178":-5,"_179":1288,"_101":1289},"9c025844-1ff8-11f1-93cd-42dde27851f2","views.ts","019cebf2-a8a6-7120-b164-78c35c7a4a50",122,["D",1773528805479],8,"/**\n * views.ts — View registration and deletion.\n *\n * v8: Views are state. Definitions stored in _views scope only.\n * Legacy views table removed — all reads and writes go through state.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { evaluate } from \"npm:@marcbachmann/cel-js\";\nimport { json, rows2objects } from \"./utils.ts\";\nimport { validateCel, buildContext, buildViewContext } from \"./cel.ts\";\nimport { parseTimer, validateTimer } from \"./timers.ts\";\nimport { appendStructuralEvent } from \"./audit.ts\";\nimport { extractDependencies } from \"./deps.ts\";\nimport type { AuthResult } from \"./auth.ts\";\n\nexport async function registerView(roomId: string, body: any, auth: AuthResult) {\n  const id = body.id;\n  if (!id) return json({ error: \"id is required\" }, 400);\n  if (!body.expr) return json({ error: \"expr is required\" }, 400);\n  const scope = body.scope ?? \"_shared\";\n\n  // Scope ownership enforcement\n  if (scope !== \"_shared\") {\n    if (!auth.authenticated) return json({ error: \"authentication_required\" }, 401);\n    if (auth.kind !== \"room\" && !auth.grants.includes(\"*\") && auth.agentId !== scope) {\n      return json({ error: \"identity_mismatch\", message: `view scope \"${scope}\" requires authentication as \"${scope}\"` }, 403);\n    }\n  }\n\n  // Validate expression\n  const v = validateCel(body.expr);\n  if (!v.valid) return json({ error: \"invalid_cel\", field: \"expr\", detail: v.error }, 400);\n  if (body.enabled) {\n    const ev = validateCel(body.enabled);\n    if (!ev.valid) return json({ error: \"invalid_cel\", field: \"enabled\", detail: ev.error }, 400);\n  }\n\n  if (body.timer) {\n    const tv = validateTimer(body.timer);\n    if (!tv.valid) return json({ error: \"invalid_timer\", detail: tv.error }, 400);\n  }\n\n  const registeredBy = scope !== \"_shared\" ? scope : (body.registered_by ?? (auth.authenticated ? auth.agentId : null));\n\n  // Extract CEL dependencies at registration time\n  let deps: any[] = [];\n  try {\n    deps = extractDependencies(body.expr);\n  } catch { /* non-fatal — deps will be empty */ }\n\n  // Write to _views scope (single source of truth)\n  const viewStateValue = JSON.stringify({\n    expr: body.expr,\n    description: body.description ?? null,\n    enabled: body.enabled ?? null,\n    render: body.render ?? null,\n    scope,\n    registered_by: registeredBy,\n    timer: body.timer ?? null,\n    deps,\n  });\n  await sqlite.execute({\n    sql: `INSERT INTO state (room_id, scope, key, value, version, revision, updated_at)\n          VALUES (?, '_views', ?, ?, '', 1, datetime('now'))\n          ON CONFLICT(room_id, scope, key) DO UPDATE SET\n            value = excluded.value, revision = state.revision + 1, updated_at = datetime('now')`,\n    args: [roomId, id, viewStateValue],\n  });\n\n  // Evaluate current value\n  const ctx = await buildContext(roomId, { selfAgent: auth.agentId ?? undefined });\n  const viewCtx = await buildViewContext(roomId, scope, ctx);\n  let resolvedValue: any = null;\n  try {\n    const evalResult = evaluate(body.expr, viewCtx);\n    resolvedValue = typeof evalResult === \"bigint\" ? Number(evalResult) : evalResult;\n  } catch (e: any) {\n    resolvedValue = { _error: e.message };\n  }\n\n  appendStructuralEvent(roomId, \"register_view\", auth.authenticated ? auth.agentId ?? null : null, {\n    id, scope, description: body.description ?? null,\n    expr: body.expr, enabled_expr: body.enabled ?? null,\n    render: body.render ?? null, deps,\n  }).catch(() => {});\n\n  return json({\n    id, room_id: roomId, scope, description: body.description ?? null,\n    expr: body.expr, enabled: body.enabled ?? null,\n    render: body.render ?? null,\n    registered_by: registeredBy,\n    value: resolvedValue, deps,\n  }, 201);\n}\n\nexport async function deleteView(roomId: string, viewId: string, auth: AuthResult) {\n  const existing = await sqlite.execute({\n    sql: `SELECT value FROM state WHERE room_id = ? AND scope = '_views' AND key = ?`,\n    args: [roomId, viewId],\n  });\n  if (existing.rows.length === 0) return json({ error: \"view not found\" }, 404);\n  let def: any = {};\n  try { def = JSON.parse(existing.rows[0][0] as string); } catch {}\n  const scope = def.scope ?? \"_shared\";\n  if (scope !== \"_shared\") {\n    if (auth.kind !== \"room\" && !auth.grants.includes(\"*\") && auth.agentId !== scope) {\n      return json({ error: \"view_owned\", message: `view \"${viewId}\" owned by \"${scope}\"` }, 403);\n    }\n  }\n  await sqlite.execute({ sql: `DELETE FROM state WHERE room_id = ? AND scope = '_views' AND key = ?`, args: [roomId, viewId] });\n  appendStructuralEvent(roomId, \"delete_view\", auth.authenticated ? auth.agentId ?? null : null, { id: viewId }).catch(() => {});\n  return json({ deleted: true, id: viewId });\n}\n",[],[1282],{"_105":1291,"_97":1292,"_166":1293,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1294,"_102":33,"_174":356,"_176":1295,"_177":22,"_178":-5,"_179":1296,"_101":1297},"ca9a749a-1f92-11f1-943c-42dde27851f2","wait.ts","019cebf2-a8a6-7120-b164-7efc91f4e110",["D",1773485074605],"/**\n * wait.ts — Long-poll condition waiting.\n *\n * Blocks until a CEL expression becomes true against room state,\n * then returns the current context. Used by /rooms/:id/wait endpoint.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { json, sleep } from \"./utils.ts\";\nimport { buildContext, evalCel, validateCel } from \"./cel.ts\";\nimport { buildExpandedContext, parseContextRequest, type ContextRequest } from \"./context.ts\";\nimport type { AuthResult } from \"./auth.ts\";\n\nconst MAX_WAIT_MS = 25_000;\nconst POLL_INTERVAL_MS = 1_000;\n\nasync function buildIncludeData(roomId: string, includeParam: string | null, ctx: Record) {\n  const data: Record = {};\n  if (!includeParam) return data;\n  const includes = includeParam.split(\",\");\n  for (const inc of includes) {\n    const trimmed = inc.trim();\n    if (trimmed === \"state\" || trimmed.startsWith(\"state.\")) {\n      const scope = trimmed === \"state\" ? null : trimmed.slice(6);\n      data.state = scope ? (ctx.state?.[scope] ?? {}) : ctx.state;\n    }\n    if (trimmed === \"agents\") data.agents = ctx.agents;\n    if (trimmed === \"messages\") data.messages = ctx.messages;\n    if (trimmed === \"actions\") data.actions = ctx.actions;\n    if (trimmed === \"views\") data.views = ctx.views;\n  }\n  return data;\n}\n\nexport async function waitForCondition(roomId: string, url: URL, auth: AuthResult) {\n  const condition = url.searchParams.get(\"condition\");\n  const agent = url.searchParams.get(\"agent\") ?? auth.agentId;\n  const timeoutParam = url.searchParams.get(\"timeout\");\n  const includeParam = url.searchParams.get(\"include\");\n  if (!condition) return json({ error: \"condition parameter is required (CEL expression)\" }, 400);\n  const validation = validateCel(condition);\n  if (!validation.valid) return json({ error: \"invalid_cel\", expression: condition, detail: validation.error }, 400);\n  const timeout = Math.min(timeoutParam ? parseInt(timeoutParam) : MAX_WAIT_MS, MAX_WAIT_MS);\n\n  // include=context (or no include param) returns full context object\n  const wantFullContext = !includeParam || includeParam === \"context\";\n\n  // Parse ContextRequest from URL (wait inherits all context shaping params)\n  const ctxReq = parseContextRequest(url);\n\n  if (agent) {\n    await sqlite.execute({\n      sql: `UPDATE agents SET status = 'waiting', waiting_on = ?, last_heartbeat = datetime('now') WHERE id = ? AND room_id = ?`,\n      args: [condition, agent, roomId],\n    });\n  }\n\n  const startTime = Date.now();\n  try {\n    while (Date.now() - startTime < timeout) {\n      const ctx = await buildContext(roomId, { selfAgent: agent ?? undefined });\n      const result = await evalCel(roomId, condition, ctx);\n      if (result.ok && result.value) {\n        if (agent) {\n          await sqlite.execute({\n            sql: `UPDATE agents SET status = 'active', waiting_on = NULL, last_heartbeat = datetime('now') WHERE id = ? AND room_id = ?`,\n            args: [agent, roomId],\n          });\n        }\n        if (wantFullContext) {\n          const expanded = await buildExpandedContext(roomId, auth, ctxReq);\n          return json({ triggered: true, condition, context: expanded });\n        }\n        const includeData = await buildIncludeData(roomId, includeParam, ctx);\n        return json({ triggered: true, condition, value: result.value, ...includeData });\n      }\n      await sleep(POLL_INTERVAL_MS);\n    }\n    if (agent) {\n      await sqlite.execute({\n        sql: `UPDATE agents SET status = 'active', waiting_on = NULL, last_heartbeat = datetime('now') WHERE id = ? AND room_id = ?`,\n        args: [agent, roomId],\n      });\n    }\n    if (wantFullContext) {\n      const expanded = await buildExpandedContext(roomId, auth, ctxReq);\n      return json({ triggered: false, timeout: true, elapsed_ms: Date.now() - startTime, context: expanded });\n    }\n    const ctx = await buildContext(roomId, { selfAgent: agent ?? undefined });\n    const includeData = await buildIncludeData(roomId, includeParam, ctx);\n    return json({ triggered: false, timeout: true, elapsed_ms: Date.now() - startTime, ...includeData });\n  } catch (e) {\n    if (agent) {\n      try { await sqlite.execute({ sql: `UPDATE agents SET status = 'active', waiting_on = NULL WHERE id = ? AND room_id = ?`, args: [agent, roomId] }); } catch {}\n    }\n    throw e;\n  }\n}\n",[],[1292],"files",[163,181,190,199,205,213,222,228,236,244,252,260,268,276,284,292,300,308,316,324,333,339,345,351,360,368,376,384,392,400,410,419,429,437,445,453,461,469,477,487,496,502,508,516,525,531,539,547,553,562,567,575,581,589,595,603,611,617,625,631,639,648,657,665,673,681,691,699,709,717,725,733,742,751,757,765,773,781,789,797,805,814,822,830,838,846,854,863,869,877,885,893,901,909,917,925,933,942,951,957,966,975,985,991,996,1006,1012,1021,1029,1037,1045,1053,1061,1069,1076,1086,1096,1105,1115,1125,1134,1142,1150,1158,1166,1175,1185,1194,1203,1212,1221,1230,1238,1247,1256,1265,1273,1280,1290],"counts",{"_1302":33,"_1303":1286,"_1304":33,"_1305":1306,"_1309":1310},"pulls","branches","forks","envVars",{"_1307":705,"_1308":33},"count","emptyCount","connections",{"_1307":33,"_1311":33},"unfilledCount","contents",[1314,1317,1320,1323,1326,1329,1332,1335,1338,1341,1344,1347,1350,1353,1356,1359,1362,1365,1368,1371,1374,1377,1380,1383,1386,1389,1392,1395,1398,1401,1404,1407,1410,1413,1416,1419,1422,1425,1428,1431,1434],{"_105":164,"_97":165,"_166":167,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1315,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_101":1316},["D",1773485074605],[165],{"_105":200,"_97":201,"_166":202,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1318,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_101":1319},["D",1773485074605],[201],{"_105":223,"_97":224,"_166":225,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1321,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_101":1322},["D",1773485074605],[224],{"_105":334,"_97":335,"_166":336,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1324,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_101":1325},["D",1773485074605],[335],{"_105":752,"_97":753,"_166":754,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1327,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_101":1328},["D",1773485074605],[753],{"_105":864,"_97":865,"_166":866,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1330,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_101":1331},["D",1773485074605],[865],{"_105":952,"_97":953,"_166":954,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1333,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_101":1334},["D",1773485074605],[953],{"_105":986,"_97":987,"_166":988,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1336,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_101":1337},["D",1773485074605],[987],{"_105":1007,"_97":1008,"_166":1009,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1339,"_102":33,"_174":175,"_176":-5,"_177":22,"_178":-5,"_101":1340},["D",1773485074605],[1008],{"_105":1022,"_97":1023,"_166":1024,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1342,"_102":33,"_174":186,"_176":1026,"_177":22,"_178":-5,"_101":1343},["D",1773485074605],[1023],{"_105":1030,"_97":1031,"_166":1032,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1345,"_102":33,"_174":186,"_176":1034,"_177":22,"_178":-5,"_101":1346},["D",1773485074605],[1031],{"_105":1038,"_97":1039,"_166":1040,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1348,"_102":33,"_174":186,"_176":1042,"_177":22,"_178":-5,"_101":1349},["D",1773485074605],[1039],{"_105":1046,"_97":1047,"_166":1048,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1351,"_102":33,"_174":186,"_176":1050,"_177":22,"_178":-5,"_101":1352},["D",1773485074605],[1047],{"_105":1054,"_97":1055,"_166":1056,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1354,"_102":33,"_174":186,"_176":1058,"_177":22,"_178":-5,"_101":1355},["D",1773485074605],[1055],{"_105":1062,"_97":1063,"_166":1064,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1357,"_102":33,"_174":186,"_176":1066,"_177":22,"_178":-5,"_101":1358},["D",1773485074605],[1063],{"_105":1070,"_97":759,"_166":1071,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1360,"_102":33,"_174":186,"_176":1073,"_177":22,"_178":-5,"_101":1361},["D",1773485074605],[759],{"_105":1077,"_97":1078,"_166":1079,"_168":-5,"_169":149,"_170":1080,"_171":172,"_107":1363,"_102":1082,"_174":356,"_176":1083,"_177":22,"_178":-5,"_101":1364},["D",1773528940137],[1078],{"_105":1087,"_97":1088,"_166":1089,"_168":-5,"_169":149,"_170":1090,"_171":172,"_107":1366,"_102":1092,"_174":356,"_176":1093,"_177":22,"_178":-5,"_101":1367},["D",1773530246316],[1088],{"_105":1097,"_97":1098,"_166":1099,"_168":-5,"_169":149,"_170":1100,"_171":172,"_107":1369,"_102":483,"_174":356,"_176":1102,"_177":22,"_178":-5,"_101":1370},["D",1773489911905],[1098],{"_105":1106,"_97":1107,"_166":1108,"_168":-5,"_169":149,"_170":1109,"_171":172,"_107":1372,"_102":1111,"_174":356,"_176":1112,"_177":22,"_178":-5,"_101":1373},["D",1773530129262],[1107],{"_105":1116,"_97":1117,"_166":1118,"_168":-5,"_169":149,"_170":1119,"_171":172,"_107":1375,"_102":1121,"_174":356,"_176":1122,"_177":22,"_178":-5,"_101":1376},["D",1773530139046],[1117],{"_105":1126,"_97":1127,"_166":1128,"_168":-5,"_169":149,"_170":1129,"_171":172,"_107":1378,"_102":1121,"_174":356,"_176":1131,"_177":22,"_178":-5,"_101":1379},["D",1773530146768],[1127],{"_105":1135,"_97":1136,"_166":1137,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1381,"_102":33,"_174":186,"_176":1139,"_177":22,"_178":-5,"_101":1382},["D",1773485074605],[1136],{"_105":1143,"_97":1144,"_166":1145,"_168":-5,"_169":149,"_170":406,"_171":172,"_107":1384,"_102":705,"_174":356,"_176":1147,"_177":22,"_178":-5,"_101":1385},["D",1773485635359],[1144],{"_105":1151,"_97":1152,"_166":1153,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1387,"_102":33,"_174":356,"_176":1155,"_177":22,"_178":-5,"_101":1388},["D",1773485074605],[1152],{"_105":1159,"_97":1160,"_166":1161,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1390,"_102":33,"_174":356,"_176":1163,"_177":22,"_178":-5,"_101":1391},["D",1773485074605],[1160],{"_105":1167,"_97":1168,"_166":1169,"_168":-5,"_169":149,"_170":1170,"_171":172,"_107":1393,"_102":483,"_174":356,"_176":1172,"_177":22,"_178":-5,"_101":1394},["D",1773528971265],[1168],{"_105":1176,"_97":1177,"_166":1178,"_168":-5,"_169":149,"_170":1179,"_171":172,"_107":1396,"_102":1181,"_174":810,"_176":1182,"_177":22,"_178":-5,"_101":1397},["D",1773535446424],[1177],{"_105":1186,"_97":1187,"_166":1188,"_168":-5,"_169":149,"_170":1189,"_171":172,"_107":1399,"_102":33,"_174":356,"_176":1191,"_177":22,"_178":-5,"_101":1400},["D",1773492161137],[1187],{"_105":1195,"_97":1196,"_166":1197,"_168":-5,"_169":149,"_170":1198,"_171":172,"_107":1402,"_102":122,"_174":356,"_176":1200,"_177":22,"_178":-5,"_101":1403},["D",1773530962602],[1196],{"_105":1204,"_97":1205,"_166":1206,"_168":-5,"_169":149,"_170":1207,"_171":172,"_107":1405,"_102":122,"_174":356,"_176":1209,"_177":22,"_178":-5,"_101":1406},["D",1773530258513],[1205],{"_105":1213,"_97":1214,"_166":1215,"_168":-5,"_169":149,"_170":1216,"_171":172,"_107":1408,"_102":705,"_174":356,"_176":1218,"_177":22,"_178":-5,"_101":1409},["D",1773531549894],[1214],{"_105":1222,"_97":1223,"_166":1224,"_168":-5,"_169":149,"_170":1225,"_171":172,"_107":1411,"_102":33,"_174":356,"_176":1227,"_177":22,"_178":-5,"_101":1412},["D",1773490699925],[1223],{"_105":1231,"_97":1232,"_166":1233,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1414,"_102":33,"_174":356,"_176":1235,"_177":22,"_178":-5,"_101":1415},["D",1773485074605],[1232],{"_105":1239,"_97":1240,"_166":1241,"_168":-5,"_169":149,"_170":1242,"_171":172,"_107":1417,"_102":687,"_174":356,"_176":1244,"_177":22,"_178":-5,"_101":1418},["D",1773490056489],[1240],{"_105":1248,"_97":1249,"_166":1250,"_168":-5,"_169":149,"_170":1251,"_171":172,"_107":1420,"_102":1111,"_174":356,"_176":1253,"_177":22,"_178":-5,"_101":1421},["D",1773530946486],[1249],{"_105":1257,"_97":1258,"_166":1259,"_168":-5,"_169":149,"_170":1260,"_171":172,"_107":1423,"_102":122,"_174":356,"_176":1262,"_177":22,"_178":-5,"_101":1424},["D",1773531035394],[1258],{"_105":1266,"_97":1267,"_166":1268,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1426,"_102":33,"_174":356,"_176":1270,"_177":22,"_178":-5,"_101":1427},["D",1773485074605],[1267],{"_105":1274,"_97":744,"_166":1275,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1429,"_102":33,"_174":356,"_176":1277,"_177":22,"_178":-5,"_101":1430},["D",1773485074605],[744],{"_105":1281,"_97":1282,"_166":1283,"_168":-5,"_169":149,"_170":1284,"_171":172,"_107":1432,"_102":1286,"_174":356,"_176":1287,"_177":22,"_178":-5,"_101":1433},["D",1773528805479],[1282],{"_105":1291,"_97":1292,"_166":1293,"_168":-5,"_169":149,"_170":122,"_171":172,"_107":1435,"_102":33,"_174":356,"_176":1295,"_177":22,"_178":-5,"_101":1436},["D",1773485074605],[1292],"upstreamProject","upstreamBranch",{"_105":152,"_107":1440,"_1441":1442,"_97":45,"_150":106,"_102":1443,"_151":-5,"_153":-5,"_1444":1445,"_109":-5,"_160":22,"_111":112,"_159":96,"_16":123,"_158":98},["D",1771633422787],"updatedAt",["D",1773738449830],639,"lockfileKey","1773738455397-esm.town_v_c15r_sync@639-main","emptyEnvVars","isNew","flags",[],"routes/_app.x.$handle.$name.compare.$branch",{"_95":96,"_97":98,"_99":100,"_103":1452,"_1457":33,"_1458":1459,"_1460":1461,"_1467":22,"_1468":1456,"_1469":1470,"_1473":-5},{"_105":106,"_97":98,"_107":1453,"_109":-5,"_110":22,"_111":112,"_113":114,"_115":-5,"_14":116,"_117":-5,"_118":22,"_119":-5,"_120":-5,"_121":122,"_16":123,"_124":125,"_126":127,"_128":-5,"_129":130,"_131":130,"_132":133,"_134":133,"_135":133,"_136":130,"_137":130,"_23":1454,"_141":1455,"_146":1456,"_160":22},["D",1771633422787],{"_95":96,"_139":140},{"_95":96,"_143":140,"_14":116,"_144":145},{"_102":148,"_97":100,"_105":149,"_150":106,"_151":152,"_153":154,"_155":112,"_156":106,"_157":123,"_158":98,"_159":96},"ahead","behind",27,"diff",{"_1462":1463,"_177":1464,"_1465":1466},"added",[],[],"modified",[],"hasChanges","sourceBranch","targetBranch",{"_105":152,"_107":1471,"_1441":1472,"_97":45,"_150":106,"_102":1443,"_151":-5,"_153":-5,"_1444":1445,"_109":-5,"_160":22,"_111":112,"_159":96,"_16":123,"_158":98},["D",1771633422787],["D",1773738449830],"pull","actionData","errors"]

c15r

Mergev8intomain