@derive-to/artifacts 0.0.0-stage → 0.6.1

package/dist/server/sandbox/server.js

@@ -0,0 +1,63 @@
+import { Hono } from "hono";
+import { cspDomainInput, cspSchema } from "../../protocol/index.js";
+import { ASSET_TYPES } from "../core/assets.js";
+import { buildCsp } from "./csp.js";
+const IMMUTABLE = "public, max-age=31536000, immutable";
+const HASH = /^[0-9a-f]{64}$/;
+const escapeAttribute = (value) => value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;");
+const page = (options) => [
+    '<!doctype html><html><head><meta charset="utf-8">',
+    '<meta name="color-scheme" content="light dark">',
+    `<meta name="open-artifact-hosts" content="${escapeAttribute(options.hostOrigins.join(" "))}">`,
+    "<title>Artifact sandbox</title>",
+    "<style>html,body{margin:0;height:100%;background:transparent}iframe{border:0;width:100%;height:100%;display:block}</style>",
+    `</head><body><script>${options.relayScript.replace(/<\/(script)/gi, "<\\/$1")}</script></body></html>`,
+].join("");
+const parseCsp = (raw) => {
+    if (!raw)
+        return {};
+    try {
+        const parsed = cspSchema.safeParse(JSON.parse(raw));
+        return parsed.success ? parsed.data : {};
+    }
+    catch {
+        return {};
+    }
+};
+/** The MCP Apps sandbox proxy page, plus the artifact assets it serves. Run it on its own
+ *  origin (a different registrable domain in production): artifact code runs there, never on
+ *  your app's origin. */
+export const createSandboxServer = (options) => {
+    // The host origins become frame-ancestors; one that is not a plain origin would be dropped
+    // from the CSP and leave the relay unframeable, so refuse it when the server starts.
+    const bad = options.hostOrigins.filter((origin) => !cspDomainInput.safeParse(origin).success);
+    if (bad.length > 0)
+        throw new Error(`hostOrigins must be origins like https://app.example.com (no path or trailing slash): ${bad.join(", ")}`);
+    const html = page(options);
+    const app = new Hono();
+    // Deliberately public: the page holds no data; the CSP comes from the query.
+    app.get("/sandbox.html", (c) => {
+        c.header("Content-Security-Policy", buildCsp(parseCsp(c.req.query("csp")), options.hostOrigins));
+        c.header("Cache-Control", "no-store");
+        c.header("X-Content-Type-Options", "nosniff");
+        c.header("Referrer-Policy", "strict-origin");
+        return c.html(html);
+    });
+    // Explicitly public only. Private hosts embed assets in authorized content instead.
+    // Only images and fonts, never documents; SVG opened directly cannot run script.
+    app.get("/blobs/:hash", async (c) => {
+        const hash = c.req.param("hash");
+        const blob = options.publicAssets === true && HASH.test(hash) && options.blobs
+            ? await options.blobs.get(hash)
+            : null;
+        if (!blob || !ASSET_TYPES.has(blob.type))
+            return c.body(null, 404);
+        c.header("Content-Type", blob.type);
+        c.header("Cache-Control", IMMUTABLE);
+        c.header("X-Content-Type-Options", "nosniff");
+        c.header("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox");
+        return c.body(blob.bytes);
+    });
+    return app;
+};
+//# sourceMappingURL=server.js.map

package/dist/server/sandbox/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/server/sandbox/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAanC,MAAM,SAAS,GAAG,qCAAqC,CAAA;AACvD,MAAM,IAAI,GAAG,gBAAgB,CAAA;AAE7B,MAAM,eAAe,GAAG,CAAC,KAAa,EAAU,EAAE,CAChD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AAE5E,MAAM,IAAI,GAAG,CAAC,OAAuB,EAAU,EAAE,CAC/C;IACE,mDAAmD;IACnD,iDAAiD;IACjD,6CAA6C,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI;IAC/F,iCAAiC;IACjC,4HAA4H;IAC5H,wBAAwB,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,yBAAyB;CACxG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAEZ,MAAM,QAAQ,GAAG,CAAC,GAAuB,EAAE,EAAE;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QACnD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AAED;;yBAEyB;AACzB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAuB,EAAE,EAAE;IAC7D,2FAA2F;IAC3F,qFAAqF;IACrF,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAA;IAC7F,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,yFAAyF,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1G,CAAA;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,6EAA6E;IAC7E,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7B,CAAC,CAAC,MAAM,CAAC,yBAAyB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAA;QAChG,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;QACrC,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;QAC7C,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAA;QAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IACF,oFAAoF;IACpF,iFAAiF;IACjF,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,IAAI,GACR,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK;YAC/D,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAC/B,CAAC,CAAC,IAAI,CAAA;QACV,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAClE,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QACnC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;QACpC,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;QAC7C,CAAC,CAAC,MAAM,CAAC,yBAAyB,EAAE,wDAAwD,CAAC,CAAA;QAC7F,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IACF,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/dist/server/sharing/index.d.ts

@@ -0,0 +1,41 @@
+import { type Actor, type Principal, type Role, type Sharing } from "../../protocol/index.js";
+import type { ArtifactRow } from "../ports.js";
+import type { SharingStore } from "./store.js";
+export { postgresSharing } from "./postgres.js";
+export { memorySharing, type SharingStore } from "./store.js";
+export interface SharingOptions {
+    store: SharingStore;
+    /** The actor's seat role in a space (an org or workspace), or null when they are not a
+     *  member. Members open an artifact at their seat when its space access is `member`. */
+    seat?(actorId: string, space: string): Role | null | Promise<Role | null>;
+    /** For an agent: the person it acts for, and the most it may ever hold. Null for a
+     *  person. An agent's role is its person's, lowered to the cap. */
+    agent?(actor: Actor): {
+        for: Actor;
+        cap: Role;
+    } | null;
+    /** Let editors change sharing, as in Google Docs. By default only owners do. */
+    editorsShare?: boolean;
+    /** The seat role that may create artifacts in a space. Default: editor. */
+    createRole?: Role;
+}
+/**
+ * Grants, space access and a share link per artifact, as one optional piece: it answers the
+ * host's `can` and `permissions`, cleans up on delete, and adds the routes a sharing dialog
+ * needs. Spread `host` into your `ArtifactHost` and install `plugin`.
+ */
+export declare const sharing: (options: SharingOptions) => {
+    host: {
+        permissions: (who: Principal, artifacts: readonly ArtifactRow[]) => Promise<Map<string, ("comment" | "edit" | "interact" | "manage" | "view")[]>>;
+        can: (who: Principal, verb: "comment" | "edit" | "interact" | "manage" | "view", artifact: ArtifactRow) => Promise<boolean>;
+        onDelete: (artifact: ArtifactRow) => Promise<void>;
+        canCreate: (actor: {
+            id: string;
+            name: string;
+            avatarUrl?: string | undefined;
+        }, space: string) => Promise<boolean>;
+    };
+    plugin: import("../kit/plugin.js").ArtifactPlugin;
+    read: (artifactId: string) => Promise<Sharing>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/server/sharing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/sharing/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,KAAK,EAMV,KAAK,SAAS,EAEd,KAAK,IAAI,EAKT,KAAK,OAAO,EAGb,MAAM,yBAAyB,CAAA;AAOhC,OAAO,KAAK,EAAgB,WAAW,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAA;AAE7D,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,YAAY,CAAA;IACnB;4FACwF;IACxF,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IACzE;uEACmE;IACnE,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,GAAG;QAAE,GAAG,EAAE,KAAK,CAAC;QAAC,GAAG,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAA;IACtD,gFAAgF;IAChF,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,IAAI,CAAA;CAClB;AAeD;;;;GAIG;AACH,eAAO,MAAM,OAAO,YAAa,cAAc;;;;;;;;;;;;uBA8Db,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;CAgG1D,CAAA"}

package/dist/server/sharing/index.js

@@ -0,0 +1,150 @@
+import { Hono } from "hono";
+import * as z from "zod/mini";
+import { actorSchema, DEFAULT_SHARE_SETTINGS, effectiveRole, linkRoleSchema, minRole, ROLES, roleReaches, roleSchema, roleVerbs, spaceAccessSchema, } from "../../protocol/index.js";
+import { toBase64 } from "../core/base64.js";
+import { fail, notFound } from "../core/errors.js";
+import { readJson } from "../http/body.js";
+import { definePlugin } from "../kit/plugin.js";
+export { postgresSharing } from "./postgres.js";
+export { memorySharing } from "./store.js";
+/** A share link token: 160 random bits, base64url (RFC 4648 section 5). */
+const newLinkToken = () => toBase64(crypto.getRandomValues(new Uint8Array(20)))
+    .replaceAll("+", "-")
+    .replaceAll("/", "_")
+    .replaceAll("=", "");
+const settingsPatch = z.object({
+    spaceAccess: z.optional(spaceAccessSchema),
+    linkRole: z.optional(linkRoleSchema),
+});
+const grantBody = z.object({ actor: actorSchema, role: roleSchema });
+/**
+ * Grants, space access and a share link per artifact, as one optional piece: it answers the
+ * host's `can` and `permissions`, cleans up on delete, and adds the routes a sharing dialog
+ * needs. Spread `host` into your `ArtifactHost` and install `plugin`.
+ */
+export const sharing = (options) => {
+    const { store } = options;
+    const shareVerb = options.editorsShare ? "edit" : "manage";
+    /** Each artifact's role for this principal, read in one batch per store call. */
+    const roles = async (who, artifacts) => {
+        const agent = who.actor ? (options.agent?.(who.actor) ?? null) : null;
+        const person = agent ? agent.for : who.actor;
+        const ids = artifacts.map((artifact) => artifact.id);
+        const [settings, grants] = await Promise.all([
+            store.settings(ids),
+            person ? store.grantsFor(person.id, ids) : new Map(),
+        ]);
+        const spaces = [...new Set(artifacts.map((artifact) => artifact.space))];
+        const seats = new Map(await Promise.all(spaces.map(async (space) => [space, person ? ((await options.seat?.(person.id, space)) ?? null) : null])));
+        return new Map(artifacts.map((artifact) => {
+            const s = settings.get(artifact.id) ?? DEFAULT_SHARE_SETTINGS;
+            const role = effectiveRole({
+                signedIn: person !== null,
+                viaLink: who.link !== null && s.linkToken === who.link,
+                creator: person !== null && artifact.createdBy.id === person.id,
+                grant: grants.get(artifact.id) ?? null,
+                seat: seats.get(artifact.space) ?? null,
+                spaceAccess: s.spaceAccess,
+                linkRole: s.linkRole,
+                cap: agent?.cap ?? null,
+            });
+            return [artifact.id, role];
+        }));
+    };
+    const host = {
+        permissions: async (who, artifacts) => {
+            const found = await roles(who, artifacts);
+            return new Map(artifacts.map((artifact) => [artifact.id, roleVerbs(found.get(artifact.id) ?? null)]));
+        },
+        can: async (who, verb, artifact) => roleVerbs((await roles(who, [artifact])).get(artifact.id) ?? null).includes(verb),
+        onDelete: (artifact) => store.forget(artifact.id),
+        canCreate: async (actor, space) => {
+            const agent = options.agent?.(actor) ?? null;
+            const seat = (await options.seat?.((agent?.for ?? actor).id, space)) ?? null;
+            // An agent creates with its person's seat, lowered to its cap, as it does everything.
+            const held = seat !== null && agent ? minRole(seat, agent.cap) : seat;
+            return held !== null && roleReaches(held, options.createRole ?? "editor");
+        },
+    };
+    const read = async (artifactId) => {
+        const [settings, grants] = await Promise.all([
+            store.settings([artifactId]),
+            store.grants(artifactId),
+        ]);
+        return { settings: settings.get(artifactId) ?? DEFAULT_SHARE_SETTINGS, grants };
+    };
+    /** A sharer gives at most the role they hold, and only an owner gives or takes owner. */
+    const mayGive = async (who, artifact, role) => {
+        const held = (await roles(who, [artifact])).get(artifact.id) ?? null;
+        if (held === null || !roleReaches(held, role))
+            throw fail("ROLE_TOO_HIGH", `You can share at most the role you hold${held ? ` (${held})` : ""}.`);
+    };
+    /** Whether this reader may change sharing, and which roles they may give: the rule the
+     *  routes below enforce, said once so no client re-derives it. */
+    const accessOf = async (who, artifact, core) => {
+        const mayShare = who.actor !== null && (await core.access.can(who, shareVerb, artifact));
+        const held = mayShare ? ((await roles(who, [artifact])).get(artifact.id) ?? null) : null;
+        return { mayShare, givable: held ? ROLES.filter((role) => roleReaches(held, role)) : [] };
+    };
+    const routes = (core) => {
+        const { guard } = core.gates;
+        const app = new Hono();
+        app.get("/artifacts/:id/sharing/access", guard("view"), async (c) => c.json(await accessOf(c.get("principal"), c.get("artifact"), core)));
+        app.get("/artifacts/:id/sharing", guard(shareVerb), async (c) => c.json({ sharing: await read(c.get("artifact").id) }));
+        app.patch("/artifacts/:id/sharing", guard(shareVerb), async (c) => {
+            const artifact = c.get("artifact");
+            const patch = await readJson(c, settingsPatch);
+            const current = (await read(artifact.id)).settings;
+            const linkRole = patch.linkRole ?? current.linkRole;
+            if (linkRole !== "none")
+                await mayGive(c.get("principal"), artifact, linkRole);
+            const next = {
+                spaceAccess: patch.spaceAccess ?? current.spaceAccess,
+                linkRole,
+                linkToken: linkRole === "none" ? null : (current.linkToken ?? newLinkToken()),
+            };
+            await store.putSettings(artifact.id, next);
+            return c.json({ sharing: await read(artifact.id) });
+        });
+        /** A new token for the share link: everyone holding the old one loses it. */
+        app.post("/artifacts/:id/sharing/link", guard(shareVerb), async (c) => {
+            const artifact = c.get("artifact");
+            const current = (await read(artifact.id)).settings;
+            if (current.linkRole === "none")
+                throw notFound("This artifact has no share link.");
+            await store.putSettings(artifact.id, { ...current, linkToken: newLinkToken() });
+            return c.json({ sharing: await read(artifact.id) });
+        });
+        app.put("/artifacts/:id/sharing/grants/:actorId", guard(shareVerb), async (c) => {
+            const artifact = c.get("artifact");
+            const body = await readJson(c, grantBody);
+            if (body.actor.id !== c.req.param("actorId"))
+                throw fail("INVALID_INPUT", "The actor in the body must match the one in the path.");
+            await mayGive(c.get("principal"), artifact, body.role);
+            const previous = (await store.grantsFor(body.actor.id, [artifact.id])).get(artifact.id);
+            if (previous)
+                await mayGive(c.get("principal"), artifact, previous);
+            await store.putGrant(artifact.id, body.actor, body.role);
+            return c.json({ sharing: await read(artifact.id) });
+        });
+        app.delete("/artifacts/:id/sharing/grants/:actorId", guard(shareVerb), async (c) => {
+            const artifact = c.get("artifact");
+            const actorId = c.req.param("actorId");
+            const previous = (await store.grantsFor(actorId, [artifact.id])).get(artifact.id);
+            if (!previous)
+                throw notFound("That person has no grant here.");
+            await mayGive(c.get("principal"), artifact, previous);
+            await store.deleteGrant(artifact.id, actorId);
+            return c.json({ sharing: await read(artifact.id) });
+        });
+        return app;
+    };
+    const plugin = definePlugin({
+        id: "sharing",
+        features: ["sharing"],
+        instructions: "Sharing is changed by people in the sharing dialog, not by agents. Never ask for or repeat a share link token.",
+        setup: (kit) => ({ routes: routes(kit) }),
+    });
+    return { host, plugin, read };
+};
+//# sourceMappingURL=index.js.map

package/dist/server/sharing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/sharing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAC7B,OAAO,EAEL,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,cAAc,EACd,OAAO,EAEP,KAAK,EAEL,WAAW,EACX,UAAU,EACV,SAAS,EAGT,iBAAiB,GAElB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAI/C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAqB,MAAM,YAAY,CAAA;AAgB7D,2EAA2E;AAC3E,MAAM,YAAY,GAAG,GAAW,EAAE,CAChC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;KACjD,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;KACpB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;KACpB,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AAExB,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;CACrC,CAAC,CAAA;AACF,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;AAEpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAuB,EAAE,EAAE;IACjD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IACzB,MAAM,SAAS,GAAS,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA;IAEhE,iFAAiF;IACjF,MAAM,KAAK,GAAG,KAAK,EACjB,GAAc,EACd,SAAiC,EACE,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACrE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAA;QAC5C,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QACpD,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YACnB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAgB;SACnE,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACxE,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,GAAG,CACR,KAAK,EAAE,KAAK,EAAE,EAAE,CACd,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAU,CACvF,CACF,CACF,CAAA;QACD,OAAO,IAAI,GAAG,CACZ,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;YACzB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,sBAAsB,CAAA;YAC7D,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,QAAQ,EAAE,MAAM,KAAK,IAAI;gBACzB,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,IAAI;gBACtD,OAAO,EAAE,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE;gBAC/D,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI;gBACtC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI;gBACvC,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI;aACxB,CAAC,CAAA;YACF,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAU,CAAA;QACrC,CAAC,CAAC,CACH,CAAA;IACH,CAAC,CAAA;IAED,MAAM,IAAI,GAAG;QACX,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;YACpC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;YACzC,OAAO,IAAI,GAAG,CACZ,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CACtF,CAAA;QACH,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CACjC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnF,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAA;YAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAA;YAC5E,sFAAsF;YACtF,MAAM,IAAI,GAAG,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACrE,OAAO,IAAI,KAAK,IAAI,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,CAAA;QAC3E,CAAC;KAC6E,CAAA;IAEhF,MAAM,IAAI,GAAG,KAAK,EAAE,UAAkB,EAAoB,EAAE;QAC1D,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,KAAK,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,CAAC;YAC5B,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;SACzB,CAAC,CAAA;QACF,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,sBAAsB,EAAE,MAAM,EAAE,CAAA;IACjF,CAAC,CAAA;IAED,yFAAyF;IACzF,MAAM,OAAO,GAAG,KAAK,EAAE,GAAc,EAAE,QAAqB,EAAE,IAAU,EAAE,EAAE;QAC1E,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAA;QACpE,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;YAC3C,MAAM,IAAI,CACR,eAAe,EACf,0CAA0C,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CACtE,CAAA;IACL,CAAC,CAAA;IAED;sEACkE;IAClE,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAc,EAAE,QAAqB,EAAE,IAAU,EAAE,EAAE;QAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;QACxF,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACxF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC3F,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,CAAC,IAAU,EAAE,EAAE;QAC5B,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAA;QAC5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO,CAAA;QAE3B,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAClE,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,CACpE,CAAA;QAED,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAC9D,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CACtD,CAAA;QAED,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAChE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAClC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;YAC9C,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;YAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAA;YACnD,IAAI,QAAQ,KAAK,MAAM;gBAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;YAC9E,MAAM,IAAI,GAAkB;gBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW;gBACrD,QAAQ;gBACR,SAAS,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,YAAY,EAAE,CAAC;aAC9E,CAAA;YACD,MAAM,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,6EAA6E;QAC7E,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACpE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAClC,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;YAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;gBAAE,MAAM,QAAQ,CAAC,kCAAkC,CAAC,CAAA;YACnF,MAAM,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC,CAAA;YAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,GAAG,CAAC,GAAG,CAAC,wCAAwC,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC9E,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAClC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;YACzC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,MAAM,IAAI,CAAC,eAAe,EAAE,uDAAuD,CAAC,CAAA;YACtF,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YACtD,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACvF,IAAI,QAAQ;gBAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;YACnE,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YACxD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,GAAG,CAAC,MAAM,CAAC,wCAAwC,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACjF,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAClC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;YACtC,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACjF,IAAI,CAAC,QAAQ;gBAAE,MAAM,QAAQ,CAAC,gCAAgC,CAAC,CAAA;YAC/D,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;YACrD,MAAM,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;YAC7C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,CAAC,SAAS,CAAC;QACrB,YAAY,EACV,gHAAgH;QAClH,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAA;IAEF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AAC/B,CAAC,CAAA"}

package/dist/server/sharing/postgres.d.ts

@@ -0,0 +1,13 @@
+import type { SqlClient } from "../adapters/postgres/client.js";
+import type { SharingStore } from "./store.js";
+/** The two sharing tables beside the kit's own, with the same schema and prefix. Each
+ *  references the artifacts table, so deleting an artifact deletes its sharing. */
+export declare const postgresSharing: (options: {
+    sql: SqlClient;
+    schema?: string;
+    prefix?: string;
+}) => SharingStore & {
+    migrate(): Promise<void>;
+    schemaSql(): string;
+};
+//# sourceMappingURL=postgres.d.ts.map

package/dist/server/sharing/postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../../src/server/sharing/postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAA;AAE/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAI9C;mFACmF;AACnF,eAAO,MAAM,eAAe,YAAa;IACvC,GAAG,EAAE,SAAS,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,KAAG,YAAY,GAAG;IAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,SAAS,IAAI,MAAM,CAAA;CAqGjE,CAAA"}

package/dist/server/sharing/postgres.js

@@ -0,0 +1,87 @@
+import { toShareGrant, toShareSettings } from "../adapters/sql-rows.js";
+const IDENTIFIER = /^[a-z_][a-z0-9_]{0,40}$/;
+/** The two sharing tables beside the kit's own, with the same schema and prefix. Each
+ *  references the artifacts table, so deleting an artifact deletes its sharing. */
+export const postgresSharing = (options) => {
+    const schema = options.schema ?? "public";
+    const prefix = options.prefix ?? "oa_";
+    if (!IDENTIFIER.test(schema) || !(prefix === "" || IDENTIFIER.test(prefix)))
+        throw new Error("schema and prefix must be lowercase SQL identifiers");
+    const t = (name) => `"${schema}"."${prefix}${name}"`;
+    const settings = t("share_settings");
+    const grants = t("share_grants");
+    const statements = [
+        `CREATE TABLE IF NOT EXISTS ${settings} (
+       artifact_id text PRIMARY KEY REFERENCES ${t("artifacts")}(id) ON DELETE CASCADE,
+       space_access text NOT NULL,
+       link_role text NOT NULL,
+       link_token text UNIQUE
+     )`,
+        `CREATE TABLE IF NOT EXISTS ${grants} (
+       artifact_id text NOT NULL REFERENCES ${t("artifacts")}(id) ON DELETE CASCADE,
+       actor_id text NOT NULL,
+       actor jsonb NOT NULL,
+       role text NOT NULL,
+       PRIMARY KEY (artifact_id, actor_id)
+     )`,
+        `CREATE INDEX IF NOT EXISTS "${prefix}share_grants_by_actor" ON ${grants} (actor_id)`,
+    ];
+    const { sql } = options;
+    return {
+        migrate: async () => {
+            // oxlint-disable-next-line no-await-in-loop -- each statement depends on the one before
+            for (const statement of statements)
+                await sql.query(statement);
+        },
+        schemaSql: () => `${statements.join(";\n\n")};\n`,
+        settings: async (ids) => {
+            if (ids.length === 0)
+                return new Map();
+            const { rows } = await sql.query(`SELECT artifact_id, space_access, link_role, link_token FROM ${settings} WHERE artifact_id = ANY($1)`, [ids]);
+            return new Map(rows.map(toShareSettings));
+        },
+        putSettings: async (artifactId, next) => {
+            await sql.query(`INSERT INTO ${settings} (artifact_id, space_access, link_role, link_token)
+         VALUES ($1, $2, $3, $4)
+         ON CONFLICT (artifact_id) DO UPDATE SET
+           space_access = EXCLUDED.space_access,
+           link_role = EXCLUDED.link_role,
+           link_token = EXCLUDED.link_token`, [artifactId, next.spaceAccess, next.linkRole, next.linkToken]);
+        },
+        artifactForLink: async (token) => {
+            const none = "none";
+            const { rows } = await sql.query(`SELECT artifact_id FROM ${settings} WHERE link_token = $1 AND link_role <> $2`, [token, none]);
+            const id = rows[0]?.["artifact_id"];
+            return typeof id === "string" ? id : null;
+        },
+        grants: async (artifactId) => {
+            const { rows } = await sql.query(`SELECT artifact_id, actor, role FROM ${grants} WHERE artifact_id = $1 ORDER BY actor_id`, [artifactId]);
+            return rows.map((raw) => {
+                const { actor, role } = toShareGrant(raw);
+                return { actor, role };
+            });
+        },
+        grantsFor: async (actorId, ids) => {
+            if (ids.length === 0)
+                return new Map();
+            const { rows } = await sql.query(`SELECT artifact_id, actor, role FROM ${grants} WHERE actor_id = $1 AND artifact_id = ANY($2)`, [actorId, ids]);
+            return new Map(rows.map((raw) => {
+                const { artifactId, role } = toShareGrant(raw);
+                return [artifactId, role];
+            }));
+        },
+        putGrant: async (artifactId, actor, role) => {
+            await sql.query(`INSERT INTO ${grants} (artifact_id, actor_id, actor, role) VALUES ($1, $2, $3, $4)
+         ON CONFLICT (artifact_id, actor_id) DO UPDATE SET actor = EXCLUDED.actor, role = EXCLUDED.role`, [artifactId, actor.id, JSON.stringify(actor), role]);
+        },
+        deleteGrant: async (artifactId, actorId) => {
+            const { rows } = await sql.query(`DELETE FROM ${grants} WHERE artifact_id = $1 AND actor_id = $2 RETURNING actor_id`, [artifactId, actorId]);
+            return rows.length > 0;
+        },
+        forget: async (artifactId) => {
+            await sql.query(`DELETE FROM ${grants} WHERE artifact_id = $1`, [artifactId]);
+            await sql.query(`DELETE FROM ${settings} WHERE artifact_id = $1`, [artifactId]);
+        },
+    };
+};
+//# sourceMappingURL=postgres.js.map

package/dist/server/sharing/postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.js","sourceRoot":"","sources":["../../../src/server/sharing/postgres.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAGvE,MAAM,UAAU,GAAG,yBAAyB,CAAA;AAE5C;mFACmF;AACnF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAI/B,EAAoE,EAAE;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAA;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAA;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,MAAM,MAAM,MAAM,GAAG,IAAI,GAAG,CAAA;IAC5D,MAAM,QAAQ,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,CAAC,CAAA;IAChC,MAAM,UAAU,GAAG;QACjB,8BAA8B,QAAQ;iDACO,CAAC,CAAC,WAAW,CAAC;;;;OAIxD;QACH,8BAA8B,MAAM;8CACM,CAAC,CAAC,WAAW,CAAC;;;;;OAKrD;QACH,+BAA+B,MAAM,6BAA6B,MAAM,aAAa;KACtF,CAAA;IACD,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAA;IACvB,OAAO;QACL,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,wFAAwF;YACxF,KAAK,MAAM,SAAS,IAAI,UAAU;gBAAE,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAChE,CAAC;QACD,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;QACjD,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACtB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,GAAG,EAAE,CAAA;YACtC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAC9B,gEAAgE,QAAQ,8BAA8B,EACtG,CAAC,GAAG,CAAC,CACN,CAAA;YACD,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAA;QAC3C,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;YACtC,MAAM,GAAG,CAAC,KAAK,CACb,eAAe,QAAQ;;;;;4CAKa,EACpC,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAC9D,CAAA;QACH,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC/B,MAAM,IAAI,GAAa,MAAM,CAAA;YAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAC9B,2BAA2B,QAAQ,4CAA4C,EAC/E,CAAC,KAAK,EAAE,IAAI,CAAC,CACd,CAAA;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAA;YACnC,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAC3C,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAC9B,wCAAwC,MAAM,2CAA2C,EACzF,CAAC,UAAU,CAAC,CACb,CAAA;YACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACtB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;gBACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;YACxB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAChC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,GAAG,EAAE,CAAA;YACtC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAC9B,wCAAwC,MAAM,gDAAgD,EAC9F,CAAC,OAAO,EAAE,GAAG,CAAC,CACf,CAAA;YACD,OAAO,IAAI,GAAG,CACZ,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAkB,EAAE;gBAC/B,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;gBAC9C,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YAC3B,CAAC,CAAC,CACH,CAAA;QACH,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC1C,MAAM,GAAG,CAAC,KAAK,CACb,eAAe,MAAM;wGAC2E,EAChG,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CACpD,CAAA;QACH,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;YACzC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAC9B,eAAe,MAAM,8DAA8D,EACnF,CAAC,UAAU,EAAE,OAAO,CAAC,CACtB,CAAA;YACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QACxB,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,MAAM,GAAG,CAAC,KAAK,CAAC,eAAe,MAAM,yBAAyB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;YAC7E,MAAM,GAAG,CAAC,KAAK,CAAC,eAAe,QAAQ,yBAAyB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;QACjF,CAAC;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/server/sharing/store.d.ts

@@ -0,0 +1,23 @@
+import type { Actor, Role, ShareGrant, ShareSettings } from "../../protocol/index.js";
+/** Where sharing lives. Implement it over your own database, or use `memorySharing()` or
+ *  `postgresSharing()`, or the `sharing` a `kysely()` or `sqlite()` backend returns; prove it
+ *  with `sharingStoreContract` from `@derive-to/artifacts/server/testing`. */
+export interface SharingStore {
+    /** Settings per artifact; an artifact with none stored is absent from the map. */
+    settings(artifactIds: readonly string[]): Promise<ReadonlyMap<string, ShareSettings>>;
+    putSettings(artifactId: string, settings: ShareSettings): Promise<void>;
+    /** The artifact whose live share link has this token, if any. */
+    artifactForLink(token: string): Promise<string | null>;
+    /** Every grant on this artifact, ordered by actor id. */
+    grants(artifactId: string): Promise<ShareGrant[]>;
+    /** One actor's grant on each of these artifacts; an artifact with none is absent. */
+    grantsFor(actorId: string, artifactIds: readonly string[]): Promise<ReadonlyMap<string, Role>>;
+    putGrant(artifactId: string, actor: Actor, role: Role): Promise<void>;
+    /** False when there was no such grant. */
+    deleteGrant(artifactId: string, actorId: string): Promise<boolean>;
+    /** Drop everything kept for a deleted artifact. */
+    forget(artifactId: string): Promise<void>;
+}
+/** Sharing in memory: for tests, demos and single-process hosts. */
+export declare const memorySharing: () => SharingStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/server/sharing/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/server/sharing/store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAErF;;8EAE8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAA;IACrF,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,iEAAiE;IACjE,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACtD,yDAAyD;IACzD,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACjD,qFAAqF;IACrF,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;IAC9F,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrE,0CAA0C;IAC1C,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAClE,mDAAmD;IACnD,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1C;AAED,oEAAoE;AACpE,eAAO,MAAM,aAAa,QAAO,YA0ChC,CAAA"}

package/dist/server/sharing/store.js

@@ -0,0 +1,38 @@
+/** Sharing in memory: for tests, demos and single-process hosts. */
+export const memorySharing = () => {
+    const settings = new Map();
+    const grants = new Map();
+    const grantsOf = (artifactId) => {
+        const existing = grants.get(artifactId);
+        if (existing)
+            return existing;
+        const created = new Map();
+        grants.set(artifactId, created);
+        return created;
+    };
+    return {
+        settings: async (ids) => new Map(ids.flatMap((id) => {
+            const found = settings.get(id);
+            return found ? [[id, found]] : [];
+        })),
+        putSettings: async (artifactId, next) => {
+            settings.set(artifactId, { ...next });
+        },
+        artifactForLink: async (token) => [...settings].find(([, s]) => s.linkRole !== "none" && s.linkToken === token)?.[0] ?? null,
+        // Ordered by actor id, as the SQL stores order them.
+        grants: async (artifactId) => [...grantsOf(artifactId).values()].toSorted((a, b) => (a.actor.id < b.actor.id ? -1 : 1)),
+        grantsFor: async (actorId, ids) => new Map(ids.flatMap((id) => {
+            const grant = grants.get(id)?.get(actorId);
+            return grant ? [[id, grant.role]] : [];
+        })),
+        putGrant: async (artifactId, actor, role) => {
+            grantsOf(artifactId).set(actor.id, { actor, role });
+        },
+        deleteGrant: async (artifactId, actorId) => grants.get(artifactId)?.delete(actorId) ?? false,
+        forget: async (artifactId) => {
+            settings.delete(artifactId);
+            grants.delete(artifactId);
+        },
+    };
+};
+//# sourceMappingURL=store.js.map

package/dist/server/sharing/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/server/sharing/store.ts"],"names":[],"mappings":"AAsBA,oEAAoE;AACpE,MAAM,CAAC,MAAM,aAAa,GAAG,GAAiB,EAAE;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAA;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAA;IACzD,MAAM,QAAQ,GAAG,CAAC,UAAkB,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACvC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAA;QAC7C,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QAC/B,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IACD,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CACtB,IAAI,GAAG,CACL,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC9B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5C,CAAC,CAAC,CACH;QACH,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;YACtC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;QACvC,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAC/B,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI;QAC5F,qDAAqD;QACrD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAC3B,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAChC,IAAI,GAAG,CACL,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACjB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;YAC1C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACjD,CAAC,CAAC,CACH;QACH,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC1C,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACrD,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK;QAC5F,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;YAC3B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC3B,CAAC;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/server/source.d.ts

@@ -0,0 +1,8 @@
+export { type AssetPolicy, DEFAULT_ASSET_POLICY, SOURCE_ASSET_POLICY } from "./core/assets.js";
+export { ArtifactError, fail } from "./core/errors.js";
+export type { SourceContent, SourceRenderer } from "./core/source.js";
+export { createSourcePublication, type PublicationStore, type SourceCreate, type SourcePublication, type SourcePublish, } from "./core/source-publication.js";
+export { createEvents, type Events } from "./kit/events.js";
+export { type ThreadIdentity, type ThreadService, threadService as createThreadService, } from "./plugins/comments/service.js";
+export type { ArtifactRow, BlobStore, ContentFacts, VersionRow } from "./ports.js";
+//# sourceMappingURL=source.d.ts.map

package/dist/server/source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../src/server/source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,WAAW,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC9F,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACtD,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,EACL,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC3D,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,aAAa,IAAI,mBAAmB,GACrC,MAAM,+BAA+B,CAAA;AACtC,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA"}

package/dist/server/source.js

@@ -0,0 +1,6 @@
+export { DEFAULT_ASSET_POLICY, SOURCE_ASSET_POLICY } from "./core/assets.js";
+export { ArtifactError, fail } from "./core/errors.js";
+export { createSourcePublication, } from "./core/source-publication.js";
+export { createEvents } from "./kit/events.js";
+export { threadService as createThreadService, } from "./plugins/comments/service.js";
+//# sourceMappingURL=source.js.map

package/dist/server/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../src/server/source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC9F,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAEtD,OAAO,EACL,uBAAuB,GAKxB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,YAAY,EAAe,MAAM,iBAAiB,CAAA;AAC3D,OAAO,EAGL,aAAa,IAAI,mBAAmB,GACrC,MAAM,+BAA+B,CAAA"}

package/dist/server/testing.d.ts

@@ -0,0 +1,17 @@
+import type { ArtifactStore, BlobStore, Bus } from "./ports.js";
+import type { SharingStore } from "./sharing/store.js";
+/** The conformance suite for an `ArtifactStore`. Run it against your implementation:
+ *  `storeContract("postgres", () => pgStore(pool))`. */
+export declare const storeContract: (name: string, make: () => ArtifactStore | Promise<ArtifactStore>) => void;
+/** The conformance suite for a `BlobStore`. */
+export declare const blobContract: (name: string, make: () => BlobStore | Promise<BlobStore>) => void;
+/** The conformance suite for a `Bus`: delivery to subscribers of the same artifact only. */
+export declare const busContract: (name: string, make: () => Bus | Promise<Bus>) => void;
+/** The conformance suite for a `SharingStore`. `make` returns the store and the artifact store
+ *  it sits beside (sharing rows reference artifacts in SQL stores):
+ *  `sharingStoreContract("postgres", async () => ({ sharing, artifacts }))`. */
+export declare const sharingStoreContract: (name: string, make: () => Promise<{
+    sharing: SharingStore;
+    artifacts: ArtifactStore;
+}>) => void;
+//# sourceMappingURL=testing.d.ts.map

package/dist/server/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../src/server/testing.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAe,aAAa,EAAE,SAAS,EAAE,GAAG,EAAwB,MAAM,YAAY,CAAA;AAClG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAoJtD;wDACwD;AACxD,eAAO,MAAM,aAAa,SAAU,MAAM,QAAQ,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,SA0E7F,CAAA;AAED,+CAA+C;AAC/C,eAAO,MAAM,YAAY,SAAU,MAAM,QAAQ,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,SAiBpF,CAAA;AAED,4FAA4F;AAC5F,eAAO,MAAM,WAAW,SAAU,MAAM,QAAQ,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAkBvE,CAAA;AAED;;gFAEgF;AAChF,eAAO,MAAM,oBAAoB,SACzB,MAAM,QACN,MAAM,OAAO,CAAC;IAAE,OAAO,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,CAAC,SA8DzE,CAAA"}