@vibes.diy/api-svc 14.1.21 → 14.1.22

package/public/app-documents-read-eventos.js

@@ -14,6 +14,7 @@ import { filterDocsByChannel } from "./channel-read-filter.js";
 import { mintFilesUrls } from "./files-url-mint.js";
 import { applyQueryFilter } from "./app-documents-query-filter.js";
 import { readAllowed, clientWsSend, connectionAdminMode } from "./app-documents-shared.js";
+import { addressesDirectChannel } from "./dm-lane.js";
 import { resolveActingHandle, resolveActiveHandle } from "./resolve-active-handle.js";
 import { audienceChannelsOf, audienceChannelsForReader, collectAudienceSubjects, inheritChannelOf, INHERIT_CAPABILITY_CHANNEL, RESERVED_CHANNEL_PREFIX, } from "./audience-channels.js";
 import { resolveInheritReadChannels } from "./inherit-read-resolver.js";
@@ -64,6 +65,128 @@ async function validateReadActingPin(vctx, userId, pin) {
         return { ok: false };
     return { ok: true, actingHandle: pin };
 }
+export async function getDocForCaller(vctx, args) {
+    if (addressesDirectChannel(args.ownerHandle))
+        return { kind: "denied", message: "Access denied" };
+    const authenticated = args.userId !== null;
+    const getPin = await validateReadActingPin(vctx, args.userId, args.actingHandle);
+    if (!getPin.ok)
+        return { kind: "denied", message: "Acting handle not bound" };
+    const { access, blocked } = args.userId !== null
+        ? await checkDocAccess(vctx, args.userId, args.appSlug, args.ownerHandle, args.adminMode, "get-doc")
+        : { access: "none", blocked: false };
+    const rEnv = await resolveDbAccess({
+        vctx,
+        ownerHandle: args.ownerHandle,
+        appSlug: args.appSlug,
+        dbName: args.dbName,
+    });
+    if (rEnv.isErr() ||
+        !(await readAllowed({
+            vctx,
+            env: rEnv.Ok(),
+            caller: { access, authenticated, blocked },
+            appSlug: args.appSlug,
+            ownerHandle: args.ownerHandle,
+        }))) {
+        return { kind: "denied", message: "Access denied" };
+    }
+    const t = vctx.sql.tables.appDocuments;
+    const row = await vctx.sql.db
+        .select()
+        .from(t)
+        .where(and(eq(t.ownerHandle, args.ownerHandle), eq(t.appSlug, args.appSlug), eq(t.dbName, args.dbName), eq(t.docId, args.docId)))
+        .orderBy(sql `${t.seq} desc`)
+        .limit(1)
+        .then((r) => r[0]);
+    if (!row || row.deleted === 1)
+        return { kind: "not-found", docId: args.docId };
+    const afbRowG = await resolveAccessBinding(vctx, args.ownerHandle, args.appSlug, args.dbName);
+    if (afbRowG?.accessFnCid && access !== "override") {
+        const tOutputsG = vctx.sql.tables.accessFnOutputs;
+        const docOutput = await vctx.sql.db
+            .select({ docId: tOutputsG.docId, output: tOutputsG.output })
+            .from(tOutputsG)
+            .where(and(eq(tOutputsG.ownerHandle, args.ownerHandle), eq(tOutputsG.appSlug, args.appSlug), eq(tOutputsG.dbName, args.dbName), eq(tOutputsG.docId, args.docId)))
+            .limit(1)
+            .then((r) => r[0]);
+        const decodedDocOutput = docOutput === undefined ? undefined : decodeAccessOutputRow(docOutput);
+        const parsed = decodedDocOutput?.descriptor;
+        const docChannels = parsed?.channels;
+        const docAudienceChannels = parsed === undefined ? [] : audienceChannelsOf(parsed);
+        const docInheritChannels = parsed === undefined ? [] : inheritChannelOf(parsed);
+        if ((docChannels === undefined || docChannels.length === 0) &&
+            docAudienceChannels.length === 0 &&
+            docInheritChannels.length === 0) {
+            return { kind: "not-found", docId: args.docId };
+        }
+        const grantOutputs = await vctx.sql.db
+            .select({ docId: tOutputsG.docId, output: tOutputsG.output })
+            .from(tOutputsG)
+            .where(and(eq(tOutputsG.ownerHandle, args.ownerHandle), eq(tOutputsG.appSlug, args.appSlug), eq(tOutputsG.dbName, args.dbName), eq(tOutputsG.hasGrants, 1)));
+        const grantRowsExcludingDoc = docOutput === undefined ? grantOutputs : grantOutputs.filter((r) => r.docId !== docOutput.docId);
+        const decodedGrantOutputs = decodeAccessOutputRows(grantRowsExcludingDoc);
+        const devHandles = authenticated
+            ? await resolveDeveloperHandles(vctx, { ownerHandle: args.ownerHandle, appSlug: args.appSlug })
+            : [];
+        const reduce = newSeededReduce(args.ownerHandle, devHandles);
+        if (decodedDocOutput !== undefined && grantOutputs.some((grantOutput) => grantOutput.docId === args.docId)) {
+            reduce.addDoc(args.docId, extractContribution(decodedDocOutput.descriptor));
+        }
+        for (const { row: grantRow, descriptor } of decodedGrantOutputs) {
+            reduce.addDoc(grantRow.docId, extractContribution(descriptor));
+        }
+        const userHandle = args.userId !== null ? (getPin.actingHandle ?? (await resolveActiveHandle(vctx, args.userId)) ?? null) : null;
+        const effectiveChannels = userHandle !== null ? reduce.resolveEffectiveChannels(userHandle) : new Set();
+        if (parsed !== undefined && docAudienceChannels.length > 0) {
+            const subjects = collectAudienceSubjects([parsed]);
+            if (userHandle !== null) {
+                const membership = await resolveAudienceMembershipFailClosed(vctx, {
+                    handle: userHandle,
+                    subjects,
+                    ownerHandle: args.ownerHandle,
+                    appSlug: args.appSlug,
+                });
+                for (const ch of audienceChannelsForReader(membership))
+                    effectiveChannels.add(ch);
+            }
+            const publicChannels = await resolvePublicAudienceChannelsFailClosed(vctx, {
+                handle: userHandle,
+                subjects,
+                ownerHandle: args.ownerHandle,
+                appSlug: args.appSlug,
+            });
+            for (const ch of publicChannels)
+                effectiveChannels.add(ch);
+        }
+        if (docInheritChannels.length > 0 && decodedDocOutput !== undefined) {
+            const inheritCh = await resolveInheritReadChannels(vctx, {
+                ownerHandle: args.ownerHandle,
+                appSlug: args.appSlug,
+                outputs: [decodedDocOutput],
+                userHandle,
+                authenticated,
+                blocked,
+                access,
+                devHandles,
+            });
+            for (const ch of inheritCh)
+                effectiveChannels.add(ch);
+        }
+        const docChannelsWithAudience = [...(docChannels ?? []), ...docAudienceChannels, ...docInheritChannels];
+        const hasAccess = docChannelsWithAudience.some((ch) => effectiveChannels.has(ch) || reduce.publicChannels.has(ch));
+        if (!hasAccess)
+            return { kind: "not-found", docId: args.docId };
+    }
+    const doc = mintFilesUrls(row.data, {
+        ownerHandle: args.ownerHandle,
+        appSlug: args.appSlug,
+        dbName: args.dbName,
+        docId: row.docId,
+        svc: vctx.params.vibes.svc,
+    });
+    return { kind: "ok", docId: row.docId, doc };
+}
 export const getDocEvento = {
     hash: "get-doc",
     validate: unwrapMsgBase(async (msg) => {
@@ -76,160 +199,122 @@ export const getDocEvento = {
     handle: optAuth(async (ctx) => {
         const req = ctx.validated.payload;
         const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
-        const getPin = await validateReadActingPin(vctx, req._auth?.verifiedAuth.claims.userId ?? null, req.actingHandle);
-        if (!getPin.ok) {
-            await ctx.send.send(ctx, {
-                type: "vibes.diy.res-error",
-                error: { message: "Acting handle not bound" },
-            });
-            return Result.Ok(EventoResult.Continue);
-        }
-        const reqAdmin = req.adminMode === true;
-        const { access, blocked } = req._auth
-            ? await checkDocAccess(vctx, req._auth.verifiedAuth.claims.userId, req.appSlug, req.ownerHandle, connectionAdminMode(ctx) || reqAdmin, "get-doc")
-            : { access: "none", blocked: false };
-        const rEnv = await resolveDbAccess({
-            vctx,
+        const answer = await getDocForCaller(vctx, {
+            userId: req._auth?.verifiedAuth.claims.userId ?? null,
             ownerHandle: req.ownerHandle,
             appSlug: req.appSlug,
             dbName: req.dbName,
+            docId: req.docId,
+            adminMode: connectionAdminMode(ctx) || req.adminMode === true,
+            ...(req.actingHandle === undefined ? {} : { actingHandle: req.actingHandle }),
         });
-        if (rEnv.isErr() ||
-            !(await readAllowed({
-                vctx,
-                env: rEnv.Ok(),
-                caller: { access, authenticated: req._auth !== undefined, blocked },
-                appSlug: req.appSlug,
-                ownerHandle: req.ownerHandle,
-            }))) {
+        if (answer.kind === "denied") {
             await ctx.send.send(ctx, {
                 type: "vibes.diy.res-error",
-                error: { message: "Access denied" },
+                error: { message: answer.message },
             });
             return Result.Ok(EventoResult.Continue);
         }
-        const t = vctx.sql.tables.appDocuments;
-        const row = await vctx.sql.db
-            .select()
-            .from(t)
-            .where(and(eq(t.ownerHandle, req.ownerHandle), eq(t.appSlug, req.appSlug), eq(t.dbName, req.dbName), eq(t.docId, req.docId)))
-            .orderBy(sql `${t.seq} desc`)
-            .limit(1)
-            .then((r) => r[0]);
-        if (!row || row.deleted === 1) {
+        if (answer.kind === "not-found") {
             await ctx.send.send(ctx, {
                 type: "vibes.diy.res-get-doc",
                 status: "not-found",
-                id: req.docId,
+                id: answer.docId,
             });
             return Result.Ok(EventoResult.Continue);
         }
-        const afbRowG = await resolveAccessBinding(vctx, req.ownerHandle, req.appSlug, req.dbName);
-        if (afbRowG?.accessFnCid && access !== "override") {
-            const tOutputsG = vctx.sql.tables.accessFnOutputs;
-            const docOutput = await vctx.sql.db
-                .select({ docId: tOutputsG.docId, output: tOutputsG.output })
-                .from(tOutputsG)
-                .where(and(eq(tOutputsG.ownerHandle, req.ownerHandle), eq(tOutputsG.appSlug, req.appSlug), eq(tOutputsG.dbName, req.dbName), eq(tOutputsG.docId, req.docId)))
-                .limit(1)
-                .then((r) => r[0]);
-            const decodedDocOutput = docOutput === undefined ? undefined : decodeAccessOutputRow(docOutput);
-            const parsed = decodedDocOutput?.descriptor;
-            const docChannels = parsed?.channels;
-            const docAudienceChannels = parsed === undefined ? [] : audienceChannelsOf(parsed);
-            const docInheritChannels = parsed === undefined ? [] : inheritChannelOf(parsed);
-            if ((docChannels === undefined || docChannels.length === 0) &&
-                docAudienceChannels.length === 0 &&
-                docInheritChannels.length === 0) {
-                await ctx.send.send(ctx, {
-                    type: "vibes.diy.res-get-doc",
-                    status: "not-found",
-                    id: req.docId,
-                });
-                return Result.Ok(EventoResult.Continue);
-            }
-            const grantOutputs = await vctx.sql.db
-                .select({ docId: tOutputsG.docId, output: tOutputsG.output })
-                .from(tOutputsG)
-                .where(and(eq(tOutputsG.ownerHandle, req.ownerHandle), eq(tOutputsG.appSlug, req.appSlug), eq(tOutputsG.dbName, req.dbName), eq(tOutputsG.hasGrants, 1)));
-            const grantRowsExcludingDoc = docOutput === undefined ? grantOutputs : grantOutputs.filter((r) => r.docId !== docOutput.docId);
-            const decodedGrantOutputs = decodeAccessOutputRows(grantRowsExcludingDoc);
-            const devHandles = req._auth !== undefined
-                ? await resolveDeveloperHandles(vctx, { ownerHandle: req.ownerHandle, appSlug: req.appSlug })
-                : [];
-            const reduce = newSeededReduce(req.ownerHandle, devHandles);
-            if (decodedDocOutput !== undefined && grantOutputs.some((grantOutput) => grantOutput.docId === req.docId)) {
-                reduce.addDoc(req.docId, extractContribution(decodedDocOutput.descriptor));
-            }
-            for (const { row, descriptor } of decodedGrantOutputs) {
-                reduce.addDoc(row.docId, extractContribution(descriptor));
-            }
-            const userHandle = req._auth
-                ? (getPin.actingHandle ?? (await resolveActiveHandle(vctx, req._auth.verifiedAuth.claims.userId)) ?? null)
-                : null;
-            const effectiveChannels = userHandle !== null ? reduce.resolveEffectiveChannels(userHandle) : new Set();
-            if (parsed !== undefined && docAudienceChannels.length > 0) {
-                const subjects = collectAudienceSubjects([parsed]);
-                if (userHandle !== null) {
-                    const membership = await resolveAudienceMembershipFailClosed(vctx, {
-                        handle: userHandle,
-                        subjects,
-                        ownerHandle: req.ownerHandle,
-                        appSlug: req.appSlug,
-                    });
-                    for (const ch of audienceChannelsForReader(membership))
-                        effectiveChannels.add(ch);
-                }
-                const publicChannels = await resolvePublicAudienceChannelsFailClosed(vctx, {
-                    handle: userHandle,
-                    subjects,
-                    ownerHandle: req.ownerHandle,
-                    appSlug: req.appSlug,
-                });
-                for (const ch of publicChannels)
-                    effectiveChannels.add(ch);
-            }
-            if (docInheritChannels.length > 0 && decodedDocOutput !== undefined) {
-                const inheritCh = await resolveInheritReadChannels(vctx, {
-                    ownerHandle: req.ownerHandle,
-                    appSlug: req.appSlug,
-                    outputs: [decodedDocOutput],
-                    userHandle,
-                    authenticated: req._auth !== undefined,
-                    blocked,
-                    access,
-                    devHandles,
-                });
-                for (const ch of inheritCh)
-                    effectiveChannels.add(ch);
-            }
-            const docChannelsWithAudience = [...(docChannels ?? []), ...docAudienceChannels, ...docInheritChannels];
-            const hasAccess = docChannelsWithAudience.some((ch) => effectiveChannels.has(ch) || reduce.publicChannels.has(ch));
-            if (!hasAccess) {
-                await ctx.send.send(ctx, {
-                    type: "vibes.diy.res-get-doc",
-                    status: "not-found",
-                    id: req.docId,
-                });
-                return Result.Ok(EventoResult.Continue);
-            }
-        }
-        const doc = mintFilesUrls(row.data, {
-            ownerHandle: req.ownerHandle,
-            appSlug: req.appSlug,
-            dbName: req.dbName,
-            docId: row.docId,
-            svc: vctx.params.vibes.svc,
-        });
         await ctx.send.send(ctx, {
             type: "vibes.diy.res-get-doc",
             status: "ok",
-            id: row.docId,
-            doc,
+            id: answer.docId,
+            doc: answer.doc,
         });
         return Result.Ok(EventoResult.Continue);
     }),
 };
+export async function queryDocsForCaller(vctx, args) {
+    if (addressesDirectChannel(args.ownerHandle))
+        return { kind: "denied", message: "Access denied" };
+    const authenticated = args.userId !== null;
+    const queryPin = await validateReadActingPin(vctx, args.userId, args.actingHandle);
+    if (!queryPin.ok)
+        return { kind: "denied", message: "Acting handle not bound" };
+    const afbRowQ = await resolveAccessBinding(vctx, args.ownerHandle, args.appSlug, args.dbName);
+    const { access, blocked = false } = args.userId !== null
+        ? await checkDocAccess(vctx, args.userId, args.appSlug, args.ownerHandle, args.adminMode, "query-docs")
+        : { access: "none", blocked: false };
+    const rEnv = await resolveDbAccess({
+        vctx,
+        ownerHandle: args.ownerHandle,
+        appSlug: args.appSlug,
+        dbName: args.dbName,
+    });
+    if (rEnv.isErr() ||
+        !(await readAllowed({
+            vctx,
+            env: rEnv.Ok(),
+            caller: { access, authenticated, blocked },
+            appSlug: args.appSlug,
+            ownerHandle: args.ownerHandle,
+        }))) {
+        return { kind: "denied", message: "Access denied" };
+    }
+    const pageReq = resolveQueryPage(args);
+    const rows = pageReq.paged
+        ? await loadHeadDocsPage(vctx, { ownerHandle: args.ownerHandle, appSlug: args.appSlug, dbName: args.dbName }, { limit: pageReq.limit, ...(pageReq.after !== undefined ? { after: pageReq.after } : {}) })
+        : await loadHeadDocs(vctx, { ownerHandle: args.ownerHandle, appSlug: args.appSlug, dbName: args.dbName });
+    const next = pageReq.paged && rows.length === pageReq.limit ? rows[rows.length - 1].docId : undefined;
+    const docs = [];
+    for (const row of rows) {
+        const doc = mintFilesUrls(row.data, {
+            ownerHandle: args.ownerHandle,
+            appSlug: args.appSlug,
+            dbName: args.dbName,
+            docId: row.docId,
+            svc: vctx.params.vibes.svc,
+        });
+        docs.push({
+            _id: row.docId,
+            ...doc,
+        });
+    }
+    let channelFilteredDocs = docs;
+    if (afbRowQ?.accessFnCid) {
+        const paged = pageReq.paged
+            ? await readPagedOutputInputs(vctx, { ownerHandle: args.ownerHandle, appSlug: args.appSlug, dbName: args.dbName }, { pageDocIds: rows.map((r) => r.docId), wantDigest: access !== "override" })
+            : undefined;
+        const tOutputsQ = vctx.sql.tables.accessFnOutputs;
+        const decodedOutputs = paged?.decodedOutputs ??
+            decodeAccessOutputRows(await vctx.sql.db
+                .select({ docId: tOutputsQ.docId, output: tOutputsQ.output })
+                .from(tOutputsQ)
+                .where(and(eq(tOutputsQ.ownerHandle, args.ownerHandle), eq(tOutputsQ.appSlug, args.appSlug), eq(tOutputsQ.dbName, args.dbName))));
+        if (paged === undefined)
+            await runQueryReadInterleaveHookForTests();
+        const { userHandle, effectiveChannels, publicChannels } = await resolveViewerChannels(vctx, {
+            ownerHandle: args.ownerHandle,
+            appSlug: args.appSlug,
+            dbName: args.dbName,
+            userId: args.userId,
+            blocked,
+            access,
+            decodedOutputs,
+            derivation: "readable",
+            ...(queryPin.actingHandle !== undefined ? { actingHandle: queryPin.actingHandle } : {}),
+            ...(paged !== undefined ? { boundedInputs: paged.boundedInputs } : {}),
+        });
+        channelFilteredDocs = filterDocsByChannel({
+            docs,
+            outputRows: decodedOutputs,
+            userHandle,
+            effectiveChannels,
+            publicChannels,
+            adminOverride: access === "override",
+        });
+    }
+    const filteredDocs = applyQueryFilter(channelFilteredDocs, args.filter);
+    return { kind: "ok", docs: filteredDocs, ...(next !== undefined ? { next } : {}) };
+}
 export const queryDocsEvento = {
     hash: "query-docs",
     validate: unwrapMsgBase(async (msg) => {
@@ -242,98 +327,29 @@ export const queryDocsEvento = {
     handle: optAuth(async (ctx) => {
         const req = ctx.validated.payload;
         const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
-        const queryPin = await validateReadActingPin(vctx, req._auth?.verifiedAuth.claims.userId ?? null, req.actingHandle);
-        if (!queryPin.ok) {
-            await ctx.send.send(ctx, {
-                type: "vibes.diy.res-error",
-                error: { message: "Acting handle not bound" },
-            });
-            return Result.Ok(EventoResult.Continue);
-        }
-        const afbRowQ = await resolveAccessBinding(vctx, req.ownerHandle, req.appSlug, req.dbName);
-        const reqAdmin = req.adminMode === true;
-        const { access, blocked = false } = req._auth
-            ? await checkDocAccess(vctx, req._auth.verifiedAuth.claims.userId, req.appSlug, req.ownerHandle, connectionAdminMode(ctx) || reqAdmin, "query-docs")
-            : { access: "none", blocked: false };
-        const rEnv = await resolveDbAccess({
-            vctx,
+        const answer = await queryDocsForCaller(vctx, {
+            userId: req._auth?.verifiedAuth.claims.userId ?? null,
             ownerHandle: req.ownerHandle,
             appSlug: req.appSlug,
             dbName: req.dbName,
+            adminMode: connectionAdminMode(ctx) || req.adminMode === true,
+            ...(req.actingHandle === undefined ? {} : { actingHandle: req.actingHandle }),
+            ...(req.filter === undefined ? {} : { filter: req.filter }),
+            ...(req.limit === undefined ? {} : { limit: req.limit }),
+            ...(req.after === undefined ? {} : { after: req.after }),
         });
-        if (rEnv.isErr() ||
-            !(await readAllowed({
-                vctx,
-                env: rEnv.Ok(),
-                caller: { access, authenticated: req._auth !== undefined, blocked },
-                appSlug: req.appSlug,
-                ownerHandle: req.ownerHandle,
-            }))) {
+        if (answer.kind === "denied") {
             await ctx.send.send(ctx, {
                 type: "vibes.diy.res-error",
-                error: { message: "Access denied" },
+                error: { message: answer.message },
             });
             return Result.Ok(EventoResult.Continue);
         }
-        const pageReq = resolveQueryPage(req);
-        const rows = pageReq.paged
-            ? await loadHeadDocsPage(vctx, { ownerHandle: req.ownerHandle, appSlug: req.appSlug, dbName: req.dbName }, { limit: pageReq.limit, ...(pageReq.after !== undefined ? { after: pageReq.after } : {}) })
-            : await loadHeadDocs(vctx, { ownerHandle: req.ownerHandle, appSlug: req.appSlug, dbName: req.dbName });
-        const next = pageReq.paged && rows.length === pageReq.limit ? rows[rows.length - 1].docId : undefined;
-        const docs = [];
-        for (const row of rows) {
-            const doc = mintFilesUrls(row.data, {
-                ownerHandle: req.ownerHandle,
-                appSlug: req.appSlug,
-                dbName: req.dbName,
-                docId: row.docId,
-                svc: vctx.params.vibes.svc,
-            });
-            docs.push({
-                _id: row.docId,
-                ...doc,
-            });
-        }
-        let channelFilteredDocs = docs;
-        if (afbRowQ?.accessFnCid) {
-            const paged = pageReq.paged
-                ? await readPagedOutputInputs(vctx, { ownerHandle: req.ownerHandle, appSlug: req.appSlug, dbName: req.dbName }, { pageDocIds: rows.map((r) => r.docId), wantDigest: access !== "override" })
-                : undefined;
-            const tOutputsQ = vctx.sql.tables.accessFnOutputs;
-            const decodedOutputs = paged?.decodedOutputs ??
-                decodeAccessOutputRows(await vctx.sql.db
-                    .select({ docId: tOutputsQ.docId, output: tOutputsQ.output })
-                    .from(tOutputsQ)
-                    .where(and(eq(tOutputsQ.ownerHandle, req.ownerHandle), eq(tOutputsQ.appSlug, req.appSlug), eq(tOutputsQ.dbName, req.dbName))));
-            if (paged === undefined)
-                await runQueryReadInterleaveHookForTests();
-            const { userHandle, effectiveChannels, publicChannels } = await resolveViewerChannels(vctx, {
-                ownerHandle: req.ownerHandle,
-                appSlug: req.appSlug,
-                dbName: req.dbName,
-                userId: req._auth?.verifiedAuth.claims.userId ?? null,
-                blocked,
-                access,
-                decodedOutputs,
-                derivation: "readable",
-                ...(queryPin.actingHandle !== undefined ? { actingHandle: queryPin.actingHandle } : {}),
-                ...(paged !== undefined ? { boundedInputs: paged.boundedInputs } : {}),
-            });
-            channelFilteredDocs = filterDocsByChannel({
-                docs,
-                outputRows: decodedOutputs,
-                userHandle,
-                effectiveChannels,
-                publicChannels,
-                adminOverride: access === "override",
-            });
-        }
-        const filteredDocs = applyQueryFilter(channelFilteredDocs, req.filter);
         await ctx.send.send(ctx, {
             type: "vibes.diy.res-query-docs",
             status: "ok",
-            docs: filteredDocs,
-            ...(next !== undefined ? { next } : {}),
+            docs: [...answer.docs],
+            ...(answer.next !== undefined ? { next: answer.next } : {}),
         });
         return Result.Ok(EventoResult.Continue);
     }),
@@ -568,6 +584,19 @@ export const subscribeViewerGrantsEvento = {
         return Result.Ok(EventoResult.Continue);
     }),
 };
+export async function listDbNamesForCaller(vctx, args) {
+    if (addressesDirectChannel(args.ownerHandle))
+        return { kind: "denied", message: "Access denied" };
+    const { access, isOwner } = await checkDocAccess(vctx, args.userId, args.appSlug, args.ownerHandle, args.adminMode, "list-db-names");
+    if (isOwner === false && access !== "override")
+        return { kind: "denied", message: "Access denied" };
+    const t = vctx.sql.tables.appDocuments;
+    const rows = await vctx.sql.db
+        .selectDistinct({ dbName: t.dbName })
+        .from(t)
+        .where(and(eq(t.ownerHandle, args.ownerHandle), eq(t.appSlug, args.appSlug)));
+    return { kind: "ok", dbNames: rows.map((r) => r.dbName) };
+}
 export const listDbNamesEvento = {
     hash: "list-db-names",
     validate: unwrapMsgBase(async (msg) => {
@@ -580,21 +609,20 @@ export const listDbNamesEvento = {
     handle: checkAuth(async (ctx) => {
         const req = ctx.validated.payload;
         const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
-        const userId = req._auth.verifiedAuth.claims.userId;
-        const { access, isOwner } = await checkDocAccess(vctx, userId, req.appSlug, req.ownerHandle, connectionAdminMode(ctx) || req.adminMode === true, "list-db-names");
-        if (isOwner === false && access !== "override") {
-            await ctx.send.send(ctx, { type: "vibes.diy.res-error", error: { message: "Access denied" } });
+        const answer = await listDbNamesForCaller(vctx, {
+            userId: req._auth.verifiedAuth.claims.userId,
+            ownerHandle: req.ownerHandle,
+            appSlug: req.appSlug,
+            adminMode: connectionAdminMode(ctx) || req.adminMode === true,
+        });
+        if (answer.kind === "denied") {
+            await ctx.send.send(ctx, { type: "vibes.diy.res-error", error: { message: answer.message } });
             return Result.Ok(EventoResult.Continue);
         }
-        const t = vctx.sql.tables.appDocuments;
-        const rows = await vctx.sql.db
-            .selectDistinct({ dbName: t.dbName })
-            .from(t)
-            .where(and(eq(t.ownerHandle, req.ownerHandle), eq(t.appSlug, req.appSlug)));
         await ctx.send.send(ctx, {
             type: "vibes.diy.res-list-db-names",
             status: "ok",
-            dbNames: rows.map((r) => r.dbName),
+            dbNames: [...answer.dbNames],
         });
         return Result.Ok(EventoResult.Continue);
     }),