@vibes.diy/api-svc 14.1.13 → 14.1.15

package/public/asset-original.js

@@ -0,0 +1,140 @@
+import { Result, Option, EventoResult, URI, exception2Result, } from "@adviser/cement";
+import { ASSET_EXTENSION_MIME, isFetchErrResult, isFetchNotFoundResult, isFetchOkResult, } from "@vibes.diy/api-types";
+import { ensureLogger } from "@vibes.diy/identity";
+import { and, eq } from "drizzle-orm";
+import { requireKyc } from "../intern/kyc.js";
+import { extractAssetSessionCookie } from "./asset-session.js";
+import { resolveDeveloperAccess } from "./developer-grants.js";
+const ORIGINAL_PATH_RE = /^\/assets\/original\/([^/?]+)\/?$/;
+function downloadBasename(cid, mimeType) {
+    if (mimeType === null)
+        return cid;
+    const mime = mimeType.split(";")[0].trim().toLowerCase();
+    for (const [ext, m] of ASSET_EXTENSION_MIME) {
+        if (m === mime)
+            return `${cid}${ext}`;
+    }
+    return cid;
+}
+function logAssetOriginal(vctx, args) {
+    ensureLogger(vctx.sthis, "assetOriginal")
+        .Info()
+        .Str("op", "asset-original")
+        .Str("cid", args.cid)
+        .Str("actingUserId", args.actingUserId)
+        .Str("ownerHandle", args.ownerHandle)
+        .Str("appSlug", args.appSlug)
+        .Msg("original asset download");
+}
+export const assetOriginal = {
+    hash: "asset-original",
+    validate: (ctx) => {
+        const { request: req } = ctx;
+        if (!req)
+            return Promise.resolve(Result.Ok(Option.None()));
+        if (req.method !== "GET" && req.method !== "HEAD") {
+            return Promise.resolve(Result.Ok(Option.None()));
+        }
+        const match = ORIGINAL_PATH_RE.exec(URI.from(req.url).pathname);
+        if (match === null)
+            return Promise.resolve(Result.Ok(Option.None()));
+        return Promise.resolve(Result.Ok(Option.Some({
+            cid: decodeURIComponent(match[1]),
+            cookie: extractAssetSessionCookie(req),
+        })));
+    },
+    handle: async (ctx) => {
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const { cid, cookie } = ctx.validated;
+        if (cookie === undefined) {
+            return sendErr(ctx, 401, "Authentication required");
+        }
+        const rVerified = await vctx.assetSessionSigner.verify(cookie);
+        if (rVerified.isErr()) {
+            return sendErr(ctx, 401, "Authentication required");
+        }
+        const userId = rVerified.Ok().userId;
+        const t = vctx.sql.tables.assetUploads;
+        const rRows = await exception2Result(() => vctx.sql.db
+            .select({ cid: t.cid, assetURI: t.assetURI, ownerHandle: t.ownerHandle, appSlug: t.appSlug, mimeType: t.mimeType })
+            .from(t)
+            .where(eq(t.cid, cid)));
+        if (rRows.isErr()) {
+            return sendErr(ctx, 500, `asset lookup failed: ${rRows.Err().message}`);
+        }
+        const rows = rRows.Ok();
+        if (rows.length === 0) {
+            return sendErr(ctx, 404, "Not found");
+        }
+        let row;
+        const seen = new Set();
+        for (const candidate of rows) {
+            const key = `${candidate.ownerHandle}/${candidate.appSlug}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            const rAuthority = await exception2Result(() => hasWriteAuthority(vctx, userId, candidate.ownerHandle, candidate.appSlug));
+            if (rAuthority.isErr()) {
+                return sendErr(ctx, 500, `authority lookup failed: ${rAuthority.Err().message}`);
+            }
+            if (rAuthority.Ok() === true) {
+                row = candidate;
+                break;
+            }
+        }
+        if (row === undefined) {
+            return sendErr(ctx, 404, "Not found");
+        }
+        const rKyc = await requireKyc(vctx, userId, "card");
+        if (rKyc.isErr()) {
+            if (rKyc.Err().message.startsWith("kyc-required")) {
+                return sendErr(ctx, 403, "Add a card to download original files.", "kyc-required");
+            }
+            return sendErr(ctx, 500, `kyc check failed: ${rKyc.Err().message}`);
+        }
+        const rAsset = await vctx.storage.fetch(row.assetURI);
+        if (isFetchNotFoundResult(rAsset)) {
+            return sendErr(ctx, 404, "Not found");
+        }
+        if (isFetchErrResult(rAsset)) {
+            return sendErr(ctx, 500, rAsset.error.message);
+        }
+        if (!isFetchOkResult(rAsset)) {
+            return sendErr(ctx, 500, `Unexpected fetch result for ${row.assetURI}`);
+        }
+        logAssetOriginal(vctx, { cid: row.cid, actingUserId: userId, ownerHandle: row.ownerHandle, appSlug: row.appSlug });
+        ctx.send.send(ctx, {
+            type: "http.Response.Body",
+            status: 200,
+            headers: {
+                "Content-Type": row.mimeType ?? "application/octet-stream",
+                "Content-Disposition": `attachment; filename="${downloadBasename(row.cid, row.mimeType ?? null)}"`,
+                "Cache-Control": "private, no-store",
+            },
+            body: rAsset.data,
+        });
+        return Result.Ok(EventoResult.Stop);
+    },
+};
+async function hasWriteAuthority(vctx, userId, ownerHandle, appSlug) {
+    const hb = vctx.sql.tables.handleBinding;
+    const ownerRow = await vctx.sql.db
+        .select({ userId: hb.userId })
+        .from(hb)
+        .where(and(eq(hb.handle, ownerHandle), eq(hb.userId, userId)))
+        .limit(1)
+        .then((r) => r[0]);
+    if (ownerRow !== undefined)
+        return true;
+    const dev = await resolveDeveloperAccess(vctx, { ownerHandle, appSlug, callerUserId: userId });
+    return dev !== null;
+}
+function sendErr(ctx, status, message, code) {
+    ctx.send.send(ctx, {
+        type: "http.Response.JSON",
+        status,
+        json: { type: "error", message, ...(code === undefined ? {} : { code }) },
+    });
+    return Result.Ok(EventoResult.Stop);
+}
+//# sourceMappingURL=asset-original.js.map

package/public/asset-original.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-original.js","sourceRoot":"","sources":["../../jsr/public/asset-original.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,MAAM,EAGN,MAAM,EACN,YAAY,EACZ,GAAG,EACH,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,oBAAoB,EAGpB,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAuB/D,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;AAS7D,SAAS,gBAAgB,CAAC,GAAW,EAAE,QAAuB;IAC5D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzD,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,oBAAoB,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAKD,SAAS,gBAAgB,CACvB,IAAoB,EACpB,IAAiF;IAEjF,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC;SACtC,IAAI,EAAE;SACN,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC;SAC3B,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;SACpB,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC;SACtC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC;SACpC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC;SAC5B,GAAG,CAAC,yBAAyB,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAA4D;IACpF,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,CAAC,GAAiE,EAAE,EAAE;QAC9E,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3D,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,OAAO,OAAO,CAAC,OAAO,CACpB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,EAAE,yBAAyB,CAAC,GAAG,CAAC;SACvC,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAA+D,EAAqC,EAAE;QACnH,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;QAGtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;QAQrC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACxC,IAAI,CAAC,GAAG,CAAC,EAAE;aACR,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;aAClH,IAAI,CAAC,CAAC,CAAC;aACP,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CACzB,CAAC;QAGF,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,wBAAwB,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;QAOD,IAAI,GAAsC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;YAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3H,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;gBACvB,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,4BAA4B,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,UAAU,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC7B,GAAG,GAAG,SAAS,CAAC;gBAChB,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;QAKD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClD,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,wCAAwC,EAAE,cAAc,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,qBAAqB,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QAGD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,+BAA+B,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAEnH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACjB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,GAAG,CAAC,QAAQ,IAAI,0BAA0B;gBAC1D,qBAAqB,EAAE,yBAAyB,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG;gBAGlG,eAAe,EAAE,mBAAmB;aACrC;YACD,IAAI,EAAE,MAAM,CAAC,IAAI;SACa,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC;AAEF,KAAK,UAAU,iBAAiB,CAAC,IAAoB,EAAE,MAAc,EAAE,WAAmB,EAAE,OAAe;IACzG,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;SAC7B,IAAI,CAAC,EAAE,CAAC;SACR,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAC7D,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/F,OAAO,GAAG,KAAK,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,OAAO,CACd,GAA+D,EAC/D,MAAc,EACd,OAAe,EACf,IAAa;IAEb,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;QACjB,IAAI,EAAE,oBAAoB;QAC1B,MAAM;QACN,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;KAC3C,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}

package/public/asset-safety-status.d.ts

@@ -0,0 +1,3 @@
+import { EventoHandler } from "@adviser/cement";
+import { MsgBase, ReqAssetSafetyStatus, ResAssetSafetyStatus, VibesDiyError, W3CWebSocketEvent } from "@vibes.diy/api-types";
+export declare const assetSafetyStatusEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqAssetSafetyStatus>, ResAssetSafetyStatus | VibesDiyError>;

package/public/asset-safety-status.js

@@ -0,0 +1,107 @@
+import { EventoResult, Option, Result, exception2Result } from "@adviser/cement";
+import { reqAssetSafetyStatus, fileSystemItem, parseArray, } from "@vibes.diy/api-types";
+import { type } from "arktype";
+import { and, eq, inArray } from "drizzle-orm";
+import { unwrapMsgBase } from "../unwrap-msg-base.js";
+import { checkAuth } from "../check-auth.js";
+import { resolveDeveloperAccess } from "./developer-grants.js";
+import { isAssetItem } from "../intern/version-timeline.js";
+const MAX_CIDS = 200;
+const VERDICTS = ["pending", "low", "high", "error"];
+export const assetSafetyStatusEvento = {
+    hash: "asset-safety-status",
+    validate: unwrapMsgBase(async (msg) => {
+        const ret = reqAssetSafetyStatus(msg.payload);
+        if (ret instanceof type.errors) {
+            return Result.Ok(Option.None());
+        }
+        return Result.Ok(Option.Some({ ...msg, payload: ret }));
+    }),
+    handle: checkAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const callerUserId = req._auth.verifiedAuth.claims.userId;
+        const empty = async () => {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-asset-safety-status",
+                ownerHandle: req.ownerHandle,
+                appSlug: req.appSlug,
+                verdicts: {},
+            });
+            return Result.Ok(EventoResult.Continue);
+        };
+        const cids = Array.from(new Set(req.cids.filter((c) => c.length > 0))).slice(0, MAX_CIDS);
+        if (cids.length === 0)
+            return empty();
+        const rOwner = await exception2Result(() => vctx.sql.db
+            .select({ userId: vctx.sql.tables.handleBinding.userId })
+            .from(vctx.sql.tables.handleBinding)
+            .where(eq(vctx.sql.tables.handleBinding.handle, req.ownerHandle))
+            .limit(1)
+            .then((rows) => rows[0]));
+        if (rOwner.isErr()) {
+            return sendError(ctx, rOwner.Err().message);
+        }
+        const isOwner = rOwner.Ok()?.userId === callerUserId;
+        if (!isOwner) {
+            const dev = await exception2Result(() => resolveDeveloperAccess(vctx, { ownerHandle: req.ownerHandle, appSlug: req.appSlug, callerUserId }));
+            if (dev.isErr()) {
+                return sendError(ctx, dev.Err().message);
+            }
+            if (dev.Ok() === null)
+                return empty();
+        }
+        const a = vctx.sql.tables.apps;
+        const rRelease = await exception2Result(() => vctx.sql.db
+            .select({ fileSystem: a.fileSystem, mode: a.mode, created: a.created, releaseSeq: a.releaseSeq })
+            .from(a)
+            .where(and(eq(a.ownerHandle, req.ownerHandle), eq(a.appSlug, req.appSlug))));
+        if (rRelease.isErr()) {
+            return sendError(ctx, rRelease.Err().message);
+        }
+        const releaseRows = rRelease.Ok();
+        const latestByMode = new Map();
+        for (const row of releaseRows) {
+            const cur = latestByMode.get(row.mode);
+            const newer = cur === undefined || row.created > cur.created || (row.created === cur.created && row.releaseSeq > cur.releaseSeq);
+            if (newer)
+                latestByMode.set(row.mode, row);
+        }
+        const carried = new Set();
+        for (const row of latestByMode.values()) {
+            for (const item of parseArray(row.fileSystem, fileSystemItem)) {
+                if (isAssetItem(item))
+                    carried.add(item.assetId);
+            }
+        }
+        const owned = cids.filter((c) => carried.has(c));
+        if (owned.length === 0)
+            return empty();
+        const s = vctx.sql.tables.assetSafety;
+        const rRows = await exception2Result(() => vctx.sql.db.select({ cid: s.cid, verdict: s.verdict }).from(s).where(inArray(s.cid, owned)));
+        if (rRows.isErr()) {
+            return sendError(ctx, rRows.Err().message);
+        }
+        const verdicts = {};
+        for (const row of rRows.Ok()) {
+            const verdict = VERDICTS.find((v) => v === row.verdict);
+            if (verdict !== undefined)
+                verdicts[row.cid] = verdict;
+        }
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-asset-safety-status",
+            ownerHandle: req.ownerHandle,
+            appSlug: req.appSlug,
+            verdicts,
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+async function sendError(ctx, message) {
+    await ctx.send.send(ctx, {
+        type: "vibes.diy.res-error",
+        error: { message: `asset-safety read failed: ${message}`, code: "asset-safety-status-unavailable" },
+    });
+    return Result.Ok(EventoResult.Stop);
+}
+//# sourceMappingURL=asset-safety-status.js.map

package/public/asset-safety-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-safety-status.js","sourceRoot":"","sources":["../../jsr/public/asset-safety-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,YAAY,EAAsC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACpI,OAAO,EAQL,oBAAoB,EACpB,cAAc,EACd,UAAU,GAEX,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAG5D,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,MAAM,QAAQ,GAAkC,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAiBpF,MAAM,CAAC,MAAM,uBAAuB,GAIhC;IACF,IAAI,EAAE,qBAAqB;IAC3B,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAIC,EACkC,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAE1D,MAAM,KAAK,GAAG,KAAK,IAAuC,EAAE;YAC1D,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,mCAAmC;gBACzC,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,EAAE;aACkB,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC1F,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,EAAE,CAAC;QAMtC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACzC,IAAI,CAAC,GAAG,CAAC,EAAE;aACR,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;aACxD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;aACnC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;aAChE,KAAK,CAAC,CAAC,CAAC;aACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAC3B,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,KAAK,YAAY,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACtC,sBAAsB,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CACnG,CAAC;YACF,IAAI,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;gBAChB,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,GAAG,CAAC,EAAE,EAAE,KAAK,IAAI;gBAAE,OAAO,KAAK,EAAE,CAAC;QACxC,CAAC;QAYD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAC3C,IAAI,CAAC,GAAG,CAAC,EAAE;aACR,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;aAChG,IAAI,CAAC,CAAC,CAAC;aACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAC9E,CAAC;QACF,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAwC,CAAC;QACrE,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,KAAK,GACT,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;YACrH,IAAI,KAAK;gBAAE,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC9D,IAAI,WAAW,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAGD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,EAAE,CAAC;QAEvC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACxC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAC5F,CAAC;QACF,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,QAAQ,GAAuC,EAAE,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YAI7B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,OAAO,KAAK,SAAS;gBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;QACzD,CAAC;QAED,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,mCAAmC;YACzC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,QAAQ;SACsB,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC;AAEF,KAAK,UAAU,SAAS,CACtB,GAIC,EACD,OAAe;IAEf,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;QACvB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,6BAA6B,OAAO,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;KACjF,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}

package/public/asset-session.d.ts

@@ -13,4 +13,5 @@ export declare const authBridgePreflight: EventoHandler<Request, {
 }, unknown>;
 export declare const authLogout: EventoHandler<Request, AuthLogoutValidated, unknown>;
 export declare const ASSET_SESSION_COOKIE_NAME = "vibes-asset-session";
+export declare function extractAssetSessionCookie(req: Request): string | undefined;
 export {};

package/public/asset-session.js

@@ -130,4 +130,19 @@ function sendErr(ctx, status, message, origin) {
     return Result.Ok(EventoResult.Stop);
 }
 export const ASSET_SESSION_COOKIE_NAME = COOKIE_NAME;
+export function extractAssetSessionCookie(req) {
+    const header = req.headers.get("Cookie") ?? req.headers.get("cookie");
+    if (!header)
+        return undefined;
+    for (const pair of header.split(";")) {
+        const trimmed = pair.trim();
+        const eq = trimmed.indexOf("=");
+        if (eq <= 0)
+            continue;
+        if (trimmed.slice(0, eq) === COOKIE_NAME) {
+            return trimmed.slice(eq + 1);
+        }
+    }
+    return undefined;
+}
 //# sourceMappingURL=asset-session.js.map

package/public/asset-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"asset-session.js","sourceRoot":"","sources":["../../jsr/public/asset-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,MAAM,EAGN,MAAM,EACN,YAAY,EACZ,GAAG,GACJ,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAqBlE,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAC1C,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,YAAY,GAAG,sDAAsD,CAAC;AAc5E,MAAM,CAAC,MAAM,WAAW,GAA0D;IAChF,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,CAAC,GAA+D,EAAE,EAAE;QAC5E,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAI5E,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC;QACpD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAuBD,MAAM,EAAE,KAAK,EAAE,GAA6D,EAAqC,EAAE;QACjH,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,oCAAoC,EAAE,MAAM,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,GAAG,GAAG,WAAW,CAAC,GAAG,GAAG,GAAG,iBAAiB,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QACnG,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpB,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,KAAK,KAAK,YAAY,aAAa,MAAM,EAAE,CAAC;QAChF,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC5E,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,SAAS;gBACvB,GAAG,uBAAuB,CAAC,MAAM,CAAC;aACnC;SAC6B,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC;AAQF,MAAM,CAAC,MAAM,mBAAmB,GAAwD;IACtF,IAAI,EAAE,uBAAuB;IAC7B,QAAQ,EAAE,CAAC,GAA6D,EAAE,EAAE;QAC1E,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;YAC1E,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5E,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAA2D,EAAqC,EAAE;QAC/G,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;QACjC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE;YACR,OAAO,EAAE;gBACP,cAAc,EAAE,YAAY;gBAC5B,6BAA6B,EAAE,MAAM,IAAI,GAAG;gBAC5C,kCAAkC,EAAE,MAAM;gBAC1C,8BAA8B,EAAE,cAAc;gBAC9C,8BAA8B,EAAE,6CAA6C;gBAC7E,wBAAwB,EAAE,OAAO;gBACjC,IAAI,EAAE,QAAQ;aACf;SAC6B,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC;AAEF,SAAS,uBAAuB,CAAC,MAAc;IAC7C,OAAO;QACL,6BAA6B,EAAE,MAAM,IAAI,GAAG;QAC5C,kCAAkC,EAAE,MAAM;QAC1C,IAAI,EAAE,QAAQ;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAyD;IAC9E,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,CAAC,GAA8D,EAAE,EAAE;QAC3E,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5E,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAA4D,EAAqC,EAAE;QAChH,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;QACjC,MAAM,SAAS,GAAG,GAAG,WAAW,MAAM,YAAY,aAAa,CAAC;QAChE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;YAC3D,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,SAAS;gBACvB,GAAG,uBAAuB,CAAC,MAAM,CAAC;aACnC;SAC6B,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC;AAEF,SAAS,OAAO,CACd,GAAgD,EAChD,MAAc,EACd,OAAe,EACf,MAAc;IAEd,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;QACjB,IAAI,EAAE,oBAAoB;QAC1B,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAChD,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,GAAG,uBAAuB,CAAC,MAAM,CAAC;SACnC;KAC6B,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAC"}
+{"version":3,"file":"asset-session.js","sourceRoot":"","sources":["../../jsr/public/asset-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,MAAM,EAGN,MAAM,EACN,YAAY,EACZ,GAAG,GACJ,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAqBlE,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAC1C,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,YAAY,GAAG,sDAAsD,CAAC;AAc5E,MAAM,CAAC,MAAM,WAAW,GAA0D;IAChF,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,CAAC,GAA+D,EAAE,EAAE;QAC5E,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAI5E,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC;QACpD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAuBD,MAAM,EAAE,KAAK,EAAE,GAA6D,EAAqC,EAAE;QACjH,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,oCAAoC,EAAE,MAAM,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,GAAG,GAAG,WAAW,CAAC,GAAG,GAAG,GAAG,iBAAiB,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QACnG,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpB,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,KAAK,KAAK,YAAY,aAAa,MAAM,EAAE,CAAC;QAChF,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC5E,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,SAAS;gBACvB,GAAG,uBAAuB,CAAC,MAAM,CAAC;aACnC;SAC6B,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC;AAQF,MAAM,CAAC,MAAM,mBAAmB,GAAwD;IACtF,IAAI,EAAE,uBAAuB;IAC7B,QAAQ,EAAE,CAAC,GAA6D,EAAE,EAAE;QAC1E,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;YAC1E,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5E,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAA2D,EAAqC,EAAE;QAC/G,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;QACjC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE;YACR,OAAO,EAAE;gBACP,cAAc,EAAE,YAAY;gBAC5B,6BAA6B,EAAE,MAAM,IAAI,GAAG;gBAC5C,kCAAkC,EAAE,MAAM;gBAC1C,8BAA8B,EAAE,cAAc;gBAC9C,8BAA8B,EAAE,6CAA6C;gBAC7E,wBAAwB,EAAE,OAAO;gBACjC,IAAI,EAAE,QAAQ;aACf;SAC6B,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC;AAEF,SAAS,uBAAuB,CAAC,MAAc;IAC7C,OAAO;QACL,6BAA6B,EAAE,MAAM,IAAI,GAAG;QAC5C,kCAAkC,EAAE,MAAM;QAC1C,IAAI,EAAE,QAAQ;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAyD;IAC9E,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,CAAC,GAA8D,EAAE,EAAE;QAC3E,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5E,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAA4D,EAAqC,EAAE;QAChH,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;QACjC,MAAM,SAAS,GAAG,GAAG,WAAW,MAAM,YAAY,aAAa,CAAC;QAChE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;YAC3D,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,SAAS;gBACvB,GAAG,uBAAuB,CAAC,MAAM,CAAC;aACnC;SAC6B,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC;AAEF,SAAS,OAAO,CACd,GAAgD,EAChD,MAAc,EACd,OAAe,EACf,MAAc;IAEd,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;QACjB,IAAI,EAAE,oBAAoB;QAC1B,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAChD,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,GAAG,uBAAuB,CAAC,MAAM,CAAC;SACnC;KAC6B,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAUrD,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,WAAW,EAAE,CAAC;YACzC,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/public/asset-upload-grant.js

@@ -3,6 +3,8 @@ import { isReqAssetUploadGrant, } from "@vibes.diy/api-types";
 import { checkAuth } from "../check-auth.js";
 import { unwrapMsgBase } from "../unwrap-msg-base.js";
 import { appAdmitsSignedInWrites, canWrite, checkDocAccess } from "./access-helpers.js";
+import { isGatedMime } from "../intern/asset-sniff.js";
+import { requireKyc } from "../intern/kyc.js";
 const GRANT_TTL_SEC = 60;
 function buildUploadUrl(vctx) {
     const base = vctx.params.vibes.env.VIBES_DIY_PUBLIC_BASE_URL;
@@ -31,6 +33,16 @@ export const assetUploadGrantEvento = {
             });
             return Result.Ok(EventoResult.Continue);
         }
+        if ((req.purpose === "files" || req.purpose === "bundle") && req.mimeType !== undefined && isGatedMime(req.mimeType)) {
+            const rKyc = await requireKyc(vctx, userId, "card");
+            if (rKyc.isErr()) {
+                await ctx.send.send(ctx, {
+                    type: "vibes.diy.res-error",
+                    error: { code: "kyc-required", message: "Add a card to upload files that aren't images." },
+                });
+                return Result.Ok(EventoResult.Continue);
+            }
+        }
         const jti = vctx.sthis.timeOrderedNextId().str;
         const rSigned = await vctx.assetGrantSigner.sign({
             jti,
@@ -38,6 +50,7 @@ export const assetUploadGrantEvento = {
             ownerHandle: req.ownerHandle,
             appSlug: req.appSlug,
             ...(req.mimeType !== undefined ? { mimeType: req.mimeType } : {}),
+            ...(req.purpose !== undefined ? { purpose: req.purpose } : {}),
         }, GRANT_TTL_SEC);
         if (rSigned.isErr()) {
             await ctx.send.send(ctx, {

package/public/asset-upload-grant.js.map

@@ -1 +1 @@
-{"version":3,"file":"asset-upload-grant.js","sourceRoot":"","sources":["../../jsr/public/asset-upload-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,MAAM,EAAsC,MAAM,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAClH,OAAO,EAOL,qBAAqB,GAEtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAExF,MAAM,aAAa,GAAG,EAAE,CAAC;AAQzB,SAAS,cAAc,CAAC,IAAoB;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAI/B;IACF,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAIC,EACkC,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAYpD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAI7F,MAAM,aAAa,GAAG,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9G,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE;aACjB,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9C;YACE,GAAG;YACH,MAAM;YACN,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,EACD,aAAa,CACd,CAAC;QACF,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpB,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,yBAAyB,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;aAClD,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,CAAC;QAE1C,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,kCAAkC;YACxC,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC;YAC/B,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,QAAQ,EAAE,GAAG;SACgB,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC"}
+{"version":3,"file":"asset-upload-grant.js","sourceRoot":"","sources":["../../jsr/public/asset-upload-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,MAAM,EAAsC,MAAM,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAClH,OAAO,EAOL,qBAAqB,GAEtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,aAAa,GAAG,EAAE,CAAC;AAQzB,SAAS,cAAc,CAAC,IAAoB;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAI/B;IACF,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAIC,EACkC,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAYpD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAI7F,MAAM,aAAa,GAAG,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9G,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE;aACjB,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QASD,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;gBACjB,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACvB,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,gDAAgD,EAAE;iBACxE,CAAC,CAAC;gBACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9C;YACE,GAAG;YACH,MAAM;YACN,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,EACD,aAAa,CACd,CAAC;QACF,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpB,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,yBAAyB,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;aAClD,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,CAAC;QAE1C,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,kCAAkC;YACxC,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC;YAC/B,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,QAAQ,EAAE,GAAG;SACgB,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC"}

package/public/cid-asset.js

@@ -1,5 +1,12 @@
 import { Result, Option, EventoResult, URI, } from "@adviser/cement";
 import { isFetchErrResult, isFetchNotFoundResult, isFetchOkResult, } from "@vibes.diy/api-types";
+import { dataUriBody, isInlineServable, resolveServableAsset } from "../intern/resolve-servable-asset.js";
+function cidOf(url) {
+    if (!url.includes("://"))
+        return url;
+    const last = url.slice(url.lastIndexOf("/") + 1);
+    return last === "" ? url : last;
+}
 export const cidAsset = {
     hash: "cid-asset",
     validate: (ctx) => {
@@ -17,7 +24,27 @@ export const cidAsset = {
     },
     handle: async (ctx) => {
         const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
-        const rAsset = await vctx.storage.fetch(ctx.validated.url);
+        const servable = await resolveServableAsset(vctx, {
+            cid: cidOf(ctx.validated.url),
+            assetURI: ctx.validated.url,
+            mime: ctx.validated.mime,
+            mimeSource: "caller",
+        });
+        const gateHeaders = {
+            "Content-Type": servable.mime,
+            "Cache-Control": servable.cacheControl,
+            ...(servable.state === "disabled" ? {} : { ETag: servable.etag }),
+        };
+        if (isInlineServable(servable)) {
+            ctx.send.send(ctx, {
+                type: "http.Response.Body",
+                status: 200,
+                headers: gateHeaders,
+                body: dataUriBody(servable.uri),
+            });
+            return Result.Ok(EventoResult.Stop);
+        }
+        const rAsset = await vctx.storage.fetch(servable.uri);
         switch (true) {
             case isFetchErrResult(rAsset):
                 ctx.send.send(ctx, {
@@ -43,10 +70,7 @@ export const cidAsset = {
                 ctx.send.send(ctx, {
                     type: "http.Response.Body",
                     status: 200,
-                    headers: {
-                        "Content-Type": ctx.validated.mime,
-                        "Cache-Control": "public, max-age=31536000, immutable",
-                    },
+                    headers: gateHeaders,
                     body: rAsset.data,
                 });
                 break;

package/public/cid-asset.js.map

@@ -1 +1 @@
-{"version":3,"file":"cid-asset.js","sourceRoot":"","sources":["../../jsr/public/cid-asset.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,MAAM,EAGN,MAAM,EACN,YAAY,EACZ,GAAG,GACJ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAG9B,MAAM,CAAC,MAAM,QAAQ,GAAmE;IACtF,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,CAAC,GAAwE,EAAE,EAAE;QACrF,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrH,OAAO,OAAO,CAAC,OAAO,CACpB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,IAAI,CAAC;oBAEV,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAE;oBACzB,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,0BAA0B;iBACzD,CAAC,CACH,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAsE,EAAqC,EAAE;QAC1H,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3D,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,gBAAgB,CAAC,MAAM,CAAC;gBAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;qBAC9B;iBAC6B,CAAC,CAAC;gBAClC,MAAM;YACR,KAAK,qBAAqB,CAAC,MAAM,CAAC;gBAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,2BAA2B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;qBACxD;iBAC6B,CAAC,CAAC;gBAClC,MAAM;YACR,KAAK,eAAe,CAAC,MAAM,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI;wBAClC,eAAe,EAAE,qCAAqC;qBACvD;oBACD,IAAI,EAAE,MAAM,CAAC,IAAI;iBACa,CAAC,CAAC;gBAClC,MAAM;YACR;gBACE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,wCAAwC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;qBACrE;iBAC6B,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC"}
+{"version":3,"file":"cid-asset.js","sourceRoot":"","sources":["../../jsr/public/cid-asset.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,MAAM,EAGN,MAAM,EACN,YAAY,EACZ,GAAG,GACJ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAO1G,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAmE;IACtF,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,CAAC,GAAwE,EAAE,EAAE;QACrF,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrH,OAAO,OAAO,CAAC,OAAO,CACpB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,IAAI,CAAC;oBAEV,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAE;oBACzB,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,0BAA0B;iBACzD,CAAC,CACH,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAsE,EAAqC,EAAE;QAC1H,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAM/D,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE;YAChD,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;YAC7B,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG;YAC3B,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI;YAIxB,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG;YAClB,cAAc,EAAE,QAAQ,CAAC,IAAI;YAC7B,eAAe,EAAE,QAAQ,CAAC,YAAY;YACtC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;SAClE,CAAC;QACF,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAG/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjB,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;aACD,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,gBAAgB,CAAC,MAAM,CAAC;gBAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;qBAC9B;iBAC6B,CAAC,CAAC;gBAClC,MAAM;YACR,KAAK,qBAAqB,CAAC,MAAM,CAAC;gBAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,2BAA2B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;qBACxD;iBAC6B,CAAC,CAAC;gBAClC,MAAM;YACR,KAAK,eAAe,CAAC,MAAM,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,WAAW;oBACpB,IAAI,EAAE,MAAM,CAAC,IAAI;iBACa,CAAC,CAAC;gBAClC,MAAM;YACR;gBACE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,wCAAwC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;qBACrE;iBAC6B,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC"}

package/public/ensure-app-slug-item.d.ts

@@ -1,5 +1,5 @@
 import { EventoHandler, Result } from "@adviser/cement";
-import { MsgBase, ReqEnsureAppSlug, ReqWithVerifiedAuth, ResEnsureAppSlug, StorageProgressInfo, VibesDiyError, W3CWebSocketEvent } from "@vibes.diy/api-types";
+import { MsgBase, ReqEnsureAppSlug, ReqWithVerifiedAuth, ResEnsureAppSlug, StorageProgressInfo, type FileSystemItem, VibesDiyError, W3CWebSocketEvent } from "@vibes.diy/api-types";
 import { VibesApiSQLCtx } from "../types.js";
 export declare function clearVersionLockOnExplicitRelease(vctx: VibesApiSQLCtx, req: {
     readonly ownerHandle: string;
@@ -8,6 +8,7 @@ export declare function clearVersionLockOnExplicitRelease(vctx: VibesApiSQLCtx,
 export interface EnsureAppSlugItemOptions {
     readonly onProgress?: (info: StorageProgressInfo) => void;
     readonly advanceSeededChat?: boolean;
+    readonly carried?: readonly FileSystemItem[];
 }
 export declare function ensureAppSlugItem(vctx: VibesApiSQLCtx, req: ReqWithVerifiedAuth<ReqEnsureAppSlug>, opts?: EnsureAppSlugItemOptions): Promise<Result<ResEnsureAppSlug>>;
 export declare const ensureAppSlugItemEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqEnsureAppSlug>, ResEnsureAppSlug | VibesDiyError>;

package/public/ensure-app-slug-item.js

@@ -18,6 +18,10 @@ import { processAccessBindings } from "../intern/process-access-bindings.js";
 import { stampReleaseChips } from "./chip-stamp.js";
 import { selectReleaseByFsId } from "./select-app.js";
 import { processBackendBindings } from "../intern/process-backend-bindings.js";
+import { resolveOwnedAssetRef } from "../intern/resolve-owned-asset-ref.js";
+import { DERIVED_PREFIX } from "../intern/version-timeline.js";
+import { isGatedMime } from "../intern/asset-sniff.js";
+import { requireKyc } from "../intern/kyc.js";
 import { parseBackendConfig } from "@vibes.diy/vibe-runtime/parse-backend-config.js";
 function derivePromptFromFileSystem(fileSystem) {
     const codeBlock = fileSystem.find(isVibeCodeBlock);
@@ -116,19 +120,42 @@ export async function ensureAppSlugItem(vctx, req, opts) {
             }
         }
     }
-    const writeAppSlugsOp = [];
-    for (const fsItem of req.fileSystem) {
+    const slots = new Array(req.fileSystem.length);
+    const toStore = [];
+    for (const [idx, fsItem] of req.fileSystem.entries()) {
         switch (fsItem.type) {
             case "code-block":
             case "str-asset-block":
             case "uint8-asset-block":
-                {
-                    writeAppSlugsOp.push({
-                        fsItem,
-                        assetOp: { data: fsItem.content },
-                    });
+                toStore.push({ idx, fsItem, data: fsItem.content });
+                break;
+            case "cid-ref": {
+                if (fsItem.filename.startsWith(DERIVED_PREFIX)) {
+                    return Result.Err(new Error(`reserved-prefix: ${fsItem.filename}`));
                 }
+                const rRef = await resolveOwnedAssetRef(vctx, {
+                    cid: fsItem.cid,
+                    userId: callerUserId,
+                    ownerHandle: appHandleBinding.ownerHandle.ownerHandle,
+                    appSlug: appHandleBinding.appSlug.appSlug,
+                });
+                if (rRef.isErr())
+                    return Result.Err(rRef.Err());
+                const ref = rRef.Ok();
+                const servedMime = ref.mimeType ?? fsItem.mimetype;
+                if (servedMime === undefined ||
+                    isGatedMime(servedMime) ||
+                    (fsItem.mimetype !== undefined && isGatedMime(fsItem.mimetype))) {
+                    const rKyc = await requireKyc(vctx, callerUserId, "card");
+                    if (rKyc.isErr())
+                        return Result.Err(rKyc.Err());
+                }
+                slots[idx] = {
+                    vibeFileItem: { ...fsItem, mimetype: servedMime, kind: "asset" },
+                    storage: { cid: ref.cid, getURL: ref.assetURI, size: ref.size },
+                };
                 break;
+            }
             case "uint8-asset-ref":
             case "code-ref":
             case "str-asset-ref":
@@ -136,14 +163,35 @@ export async function ensureAppSlugItem(vctx, req, opts) {
                 return Result.Err(`unsupported file system item type: ${fsItem.type}`);
         }
     }
-    const rStorageResults = await vctx.storage.ensure({ onProgress: opts?.onProgress }, ...writeAppSlugsOp.map((op) => uint8array2stream(to_uint8(op.assetOp.data))));
+    const rStorageResults = await vctx.storage.ensure({ onProgress: opts?.onProgress }, ...toStore.map((op) => uint8array2stream(to_uint8(op.data))));
     if (rStorageResults.some((r) => r.isErr())) {
         return Result.Err(`failed to store one or more assets: ${rStorageResults.map((r) => (r.isErr() ? r.Err().message : "ok")).join(", ")}`);
     }
-    const fullFileSystem = rStorageResults.map((op, idx) => ({
-        vibeFileItem: writeAppSlugsOp[idx].fsItem,
-        storage: op.Ok(),
+    rStorageResults.forEach((op, i) => {
+        slots[toStore[i].idx] = { vibeFileItem: toStore[i].fsItem, storage: op.Ok() };
+    });
+    const fromWire = [];
+    for (const slot of slots) {
+        if (slot === undefined) {
+            return Result.Err("manifest slot left empty");
+        }
+        fromWire.push(slot);
+    }
+    const wireNames = new Set(fromWire.map((s) => s.vibeFileItem.filename));
+    const carried = (opts?.carried ?? [])
+        .filter((c) => !wireNames.has(c.fileName))
+        .map((c) => ({
+        vibeFileItem: {
+            type: "cid-ref",
+            filename: c.fileName,
+            mimetype: c.mimeType,
+            cid: c.assetId,
+            size: c.size,
+            kind: "asset",
+        },
+        storage: { cid: c.assetId, getURL: c.assetURI, size: c.size },
     }));
+    const fullFileSystem = [...fromWire, ...carried];
     const seedPosture = req.seedPosture !== undefined && appHandleBinding.appSlug.justCreated === true && req.mode === "production"
         ? req.seedPosture
         : undefined;