@vibes.diy/api-svc 14.1.21 → 14.1.23

package/public/app-documents-write-eventos.js

@@ -10,6 +10,7 @@ import { resolveAccessBinding, resolveAccessFnSource } from "./access-binding-re
 import { extractContribution, newSeededReduce } from "./grant-reduce.js";
 import { resolveDeveloperHandles } from "./developer-grants.js";
 import { clientWsSend, connectionAdminMode } from "./app-documents-shared.js";
+import { addressesDirectChannel } from "./dm-lane.js";
 import { normalizeChannels } from "./normalize-channels.js";
 import { audienceChannelsOf, hasInheritChannel, inheritChannelOf, INHERIT_CAPABILITY_CHANNEL, isReservedChannelId, stripForeignAudience, } from "./audience-channels.js";
 import { emitBackendOnChange } from "../intern/emit-backend-onchange.js";
@@ -21,7 +22,7 @@ import { orThrow, syncChannelIndex } from "./access-fn-channel-index.js";
 import { resolveWriteAclVerdict, resolveWriterContext } from "./write-front-door.js";
 import { resolveActingHandle } from "./resolve-active-handle.js";
 import { purgeRootHtmlCacheSameColo } from "../intern/swr-purge.js";
-import { notifyDocChangedFanOut, notifyViewerGrantsChangedFanOut, emitCommentPostedEvent } from "./app-documents-broadcast.js";
+import { notifyDocChangedFanOut, notifyViewerGrantsChangedFanOut, emitCommentPostedEvent, } from "./app-documents-broadcast.js";
 import { notifyViewerGrantDeltaIfChanged } from "./app-documents-grant-delta.js";
 import { persistPutRevision } from "./app-documents-put-persist.js";
 import { validateFilesUploads } from "./validate-files-uploads.js";
@@ -78,6 +79,193 @@ export async function deriveAccessChannels(vctx, p, afbRow) {
     const sanitized = stripForeignAudience(invokeResult, p.userContext?.userHandle ?? null);
     return [...realChannels, ...audienceChannelsOf(sanitized), ...inheritChannelOf(sanitized)];
 }
+export async function putDocForCaller(vctx, args) {
+    if (addressesDirectChannel(args.ownerHandle))
+        return { kind: "denied", message: "Access denied" };
+    const userId = args.userId;
+    const adminRequested = args.adminMode;
+    if (args.actingHandle !== undefined && userId !== null) {
+        const acting = await resolveActingHandle(vctx, userId, args.actingHandle);
+        if (!acting.ok)
+            return { kind: "denied", message: "Acting handle not bound" };
+    }
+    const aclVerdict = await resolveWriteAclVerdict(vctx, {
+        ownerHandle: args.ownerHandle,
+        appSlug: args.appSlug,
+        dbName: args.dbName,
+        userId,
+        adminRequested,
+    });
+    if (!aclVerdict.aclWriteAllowed)
+        return { kind: "denied", message: "Access denied" };
+    const docAccessOverride = aclVerdict.adminActive;
+    const filesCheck = await validateFilesUploads(vctx, args.doc, args.ownerHandle, args.appSlug);
+    if (!filesCheck.ok)
+        return { kind: "denied", message: `Invalid file reference: ${filesCheck.reason}` };
+    let accessResult;
+    let grantsReduceBefore;
+    const afbRow = await resolveAccessBinding(vctx, args.ownerHandle, args.appSlug, args.dbName);
+    if (!userId && !afbRow?.accessFnCid)
+        return { kind: "denied", message: "Access denied" };
+    const docId = args.docId ?? vctx.sthis.timeOrderedNextId().str;
+    let headRow;
+    if (args.docId) {
+        const tDocs = vctx.sql.tables.appDocuments;
+        headRow = await vctx.sql.db
+            .select({ data: tDocs.data, deleted: tDocs.deleted })
+            .from(tDocs)
+            .where(and(eq(tDocs.ownerHandle, args.ownerHandle), eq(tDocs.appSlug, args.appSlug), eq(tDocs.dbName, args.dbName), eq(tDocs.docId, args.docId)))
+            .orderBy(desc(tDocs.seq))
+            .limit(1)
+            .then((r) => r[0]);
+    }
+    if (afbRow?.accessFnCid && !vctx.invokeAccessFn)
+        return { kind: "denied", message: "Access function unavailable" };
+    if (afbRow?.accessFnCid && vctx.invokeAccessFn) {
+        const { userContext, unboundActingHandle } = await resolveWriterContext(vctx, {
+            userId,
+            ownerHandle: args.ownerHandle,
+            ...(args.actingHandle !== undefined ? { actingHandle: args.actingHandle } : {}),
+        });
+        if (unboundActingHandle)
+            return { kind: "denied", message: "Acting handle not bound" };
+        const oldDoc = headRow?.data ?? null;
+        const adminActive = docAccessOverride;
+        const gate = await runPutAccessGate(vctx, {
+            ownerHandle: args.ownerHandle,
+            appSlug: args.appSlug,
+            dbName: args.dbName,
+            fnCid: afbRow.accessFnCid,
+            accessFnAssetUri: afbRow.accessFnAssetUri,
+            accessFnDbName: afbRow.dbName,
+            docId,
+            doc: args.doc,
+            oldDoc,
+            oldDocDeleted: headRow?.deleted === 1,
+            userContext,
+            adminMode: adminActive,
+        });
+        if (gate.kind === "deny") {
+            return { kind: "denied", message: gate.message, ...(gate.code === undefined ? {} : { code: gate.code }) };
+        }
+        accessResult = gate.descriptor;
+        grantsReduceBefore = gate.grantsReduceBefore;
+    }
+    const now = new Date().toISOString();
+    const dbName = args.dbName;
+    const oldFeedChannels = afbRow?.accessFnCid
+        ? await loadDocChannels(vctx, { ownerHandle: args.ownerHandle, appSlug: args.appSlug, dbName, docId })
+        : [];
+    let persisted;
+    try {
+        persisted = await persistPutRevision(vctx, {
+            ownerHandle: args.ownerHandle,
+            appSlug: args.appSlug,
+            dbName,
+            docId,
+            doc: args.doc,
+            userId,
+            now,
+            accessResult,
+            accessFnCid: afbRow?.accessFnCid,
+        });
+    }
+    catch (err) {
+        if (err instanceof SeqConflictError) {
+            return {
+                kind: "denied",
+                code: "conflict",
+                message: `write conflict: head is at seq ${err.currentHeadSeq}, retry the write`,
+            };
+        }
+        throw err;
+    }
+    const { alloc, storeAccessOutput, grantUpsertErr, noopRefreshedStaleOutput } = persisted;
+    const notifyGrantDeltaIfChanged = () => {
+        if (!storeAccessOutput || !grantsReduceBefore)
+            return;
+        notifyViewerGrantDeltaIfChanged(vctx, {
+            ownerHandle: args.ownerHandle,
+            appSlug: args.appSlug,
+            docId,
+            descriptor: storeAccessOutput.descriptor,
+            outputHasGrants: storeAccessOutput.outputHasGrants,
+            grantsReduceBefore,
+            senderConnId: args.senderConnId ?? "",
+        });
+    };
+    if (!alloc.inserted) {
+        if (grantUpsertErr) {
+            console.warn("AccessFnOutputs stale-row refresh on no-op failed:", grantUpsertErr);
+        }
+        else if (noopRefreshedStaleOutput) {
+            notifyGrantDeltaIfChanged();
+        }
+        return { kind: "ok", docId };
+    }
+    const nextSeq = alloc.seq;
+    await bestEffortChannelChange({
+        db: vctx.sql.db,
+        flavour: vctx.sql.flavour,
+        ownerHandle: args.ownerHandle,
+        appSlug: args.appSlug,
+        dbName,
+        docId,
+        seq: nextSeq,
+        oldChannels: oldFeedChannels,
+        newChannels: channelSetOfDescriptor(accessResult),
+        alwaysPut: true,
+        created: now,
+    });
+    await emitBackendOnChange(vctx, {
+        ownerHandle: args.ownerHandle,
+        appSlug: args.appSlug,
+        dbName,
+        docId,
+        seq: nextSeq,
+        deleted: false,
+        doc: args.doc,
+        originDepth: 0,
+        writerUserId: userId,
+    });
+    await emitCommentPostedEvent(vctx, {
+        ownerHandle: args.ownerHandle,
+        appSlug: args.appSlug,
+        dbName,
+        docId,
+        userId,
+        email: args.email,
+        nextSeq,
+        now,
+    });
+    const putFanoutChannels = [
+        ...normalizeChannels(accessResult?.channels ?? []),
+        ...(accessResult === undefined ? [] : audienceChannelsOf(accessResult)),
+        ...(accessResult === undefined ? [] : inheritChannelOf(accessResult)),
+    ];
+    if (hasInheritChannel(putFanoutChannels))
+        putFanoutChannels.push(INHERIT_CAPABILITY_CHANNEL);
+    await (args.fanOutDocChanged ?? notifyDocChangedFanOut)(vctx, {
+        ownerHandle: args.ownerHandle,
+        appSlug: args.appSlug,
+        dbName,
+        docId,
+        channels: putFanoutChannels,
+        senderConnId: args.senderConnId ?? "",
+    });
+    if (storeAccessOutput) {
+        if (grantUpsertErr) {
+            console.error("AccessFnOutputs upsert failed:", grantUpsertErr);
+            if (storeAccessOutput.outputHasGrants === 1) {
+                return { kind: "denied", message: "grant storage failed — retry the write" };
+            }
+        }
+        else {
+            notifyGrantDeltaIfChanged();
+        }
+    }
+    return { kind: "ok", docId };
+}
 export const putDocEvento = {
     hash: "put-doc",
     validate: unwrapMsgBase(async (msg) => {
@@ -90,236 +278,167 @@ export const putDocEvento = {
     handle: optAuth(async (ctx) => {
         const req = ctx.validated.payload;
         const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
-        const userId = req._auth?.verifiedAuth.claims.userId ?? null;
-        const adminRequested = connectionAdminMode(ctx) || req.adminMode === true;
-        if (req.actingHandle !== undefined && userId !== null) {
-            const acting = await resolveActingHandle(vctx, userId, req.actingHandle);
-            if (!acting.ok) {
-                await ctx.send.send(ctx, {
-                    type: "vibes.diy.res-error",
-                    error: { message: "Acting handle not bound" },
-                });
-                return Result.Ok(EventoResult.Continue);
-            }
-        }
-        const aclVerdict = await resolveWriteAclVerdict(vctx, {
+        const answer = await putDocForCaller(vctx, {
+            userId: req._auth?.verifiedAuth.claims.userId ?? null,
             ownerHandle: req.ownerHandle,
             appSlug: req.appSlug,
             dbName: req.dbName,
-            userId,
-            adminRequested,
+            ...(req.docId === undefined ? {} : { docId: req.docId }),
+            doc: req.doc,
+            adminMode: connectionAdminMode(ctx) || req.adminMode === true,
+            ...(req.actingHandle === undefined ? {} : { actingHandle: req.actingHandle }),
+            ...(req._auth?.verifiedAuth.claims.params.email === undefined ? {} : { email: req._auth.verifiedAuth.claims.params.email }),
+            senderConnId: clientWsSend(ctx).connId,
         });
-        if (!aclVerdict.aclWriteAllowed) {
-            await ctx.send.send(ctx, { type: "vibes.diy.res-error", error: { message: "Access denied" } });
-            return Result.Ok(EventoResult.Continue);
-        }
-        const docAccessOverride = aclVerdict.adminActive;
-        const filesCheck = await validateFilesUploads(vctx, req.doc, req.ownerHandle, req.appSlug);
-        if (!filesCheck.ok) {
-            await ctx.send.send(ctx, {
-                type: "vibes.diy.res-error",
-                error: { message: `Invalid file reference: ${filesCheck.reason}` },
-            });
-            return Result.Ok(EventoResult.Continue);
-        }
-        let accessResult;
-        let grantsReduceBefore;
-        const afbRow = await resolveAccessBinding(vctx, req.ownerHandle, req.appSlug, req.dbName);
-        if (!userId && !afbRow?.accessFnCid) {
+        if (answer.kind === "denied") {
             await ctx.send.send(ctx, {
                 type: "vibes.diy.res-error",
-                error: { message: "Access denied" },
+                error: { message: answer.message, ...(answer.code === undefined ? {} : { code: answer.code }) },
             });
             return Result.Ok(EventoResult.Continue);
         }
-        const docId = req.docId ?? vctx.sthis.timeOrderedNextId().str;
-        let headRow;
-        if (req.docId) {
-            const tDocs = vctx.sql.tables.appDocuments;
-            headRow = await vctx.sql.db
-                .select({ data: tDocs.data, deleted: tDocs.deleted })
-                .from(tDocs)
-                .where(and(eq(tDocs.ownerHandle, req.ownerHandle), eq(tDocs.appSlug, req.appSlug), eq(tDocs.dbName, req.dbName), eq(tDocs.docId, req.docId)))
-                .orderBy(desc(tDocs.seq))
-                .limit(1)
-                .then((r) => r[0]);
-        }
-        if (afbRow?.accessFnCid && !vctx.invokeAccessFn) {
-            await ctx.send.send(ctx, {
-                type: "vibes.diy.res-error",
-                error: { message: "Access function unavailable" },
-            });
-            return Result.Ok(EventoResult.Continue);
-        }
-        if (afbRow?.accessFnCid && vctx.invokeAccessFn) {
-            const { userContext, unboundActingHandle } = await resolveWriterContext(vctx, {
-                userId,
-                ownerHandle: req.ownerHandle,
-                ...(req.actingHandle !== undefined ? { actingHandle: req.actingHandle } : {}),
-            });
-            if (unboundActingHandle) {
-                await ctx.send.send(ctx, {
-                    type: "vibes.diy.res-error",
-                    error: { message: "Acting handle not bound" },
-                });
-                return Result.Ok(EventoResult.Continue);
-            }
-            const oldDoc = headRow?.data ?? null;
-            const adminActive = docAccessOverride;
-            const gate = await runPutAccessGate(vctx, {
-                ownerHandle: req.ownerHandle,
-                appSlug: req.appSlug,
-                dbName: req.dbName,
-                fnCid: afbRow.accessFnCid,
-                accessFnAssetUri: afbRow.accessFnAssetUri,
-                accessFnDbName: afbRow.dbName,
-                docId,
-                doc: req.doc,
-                oldDoc,
-                oldDocDeleted: headRow?.deleted === 1,
-                userContext,
-                adminMode: adminActive,
-            });
-            if (gate.kind === "deny") {
-                await ctx.send.send(ctx, {
-                    type: "vibes.diy.res-error",
-                    error: { message: gate.message, code: gate.code },
-                });
-                return Result.Ok(EventoResult.Continue);
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-put-doc",
+            status: "ok",
+            id: answer.docId,
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+export async function deleteDocForCaller(vctx, args) {
+    if (addressesDirectChannel(args.ownerHandle))
+        return { kind: "denied", message: "Access denied" };
+    const userId = args.userId;
+    let pinnedWriter;
+    if (args.actingHandle !== undefined) {
+        const writer = await resolveWriterContext(vctx, {
+            userId,
+            ownerHandle: args.ownerHandle,
+            actingHandle: args.actingHandle,
+        });
+        if (writer.unboundActingHandle)
+            return { kind: "denied", message: "Acting handle not bound" };
+        pinnedWriter = writer.userContext;
+    }
+    const now = new Date().toISOString();
+    const t = vctx.sql.tables.appDocuments;
+    const dbName = args.dbName;
+    const afbRow = await resolveAccessBinding(vctx, args.ownerHandle, args.appSlug, dbName);
+    const effectiveFnCid = afbRow?.accessFnCid;
+    const delGate = await runDeleteAccessGate(vctx, {
+        ownerHandle: args.ownerHandle,
+        appSlug: args.appSlug,
+        dbName: args.dbName,
+        docId: args.docId,
+        userId,
+        adminMode: args.adminMode,
+        ...(pinnedWriter !== undefined ? { userContext: pinnedWriter } : {}),
+        lane: "interactive",
+    });
+    if (delGate.kind === "deny")
+        return { kind: "denied", message: delGate.message };
+    const tOutputs = vctx.sql.tables.accessFnOutputs;
+    let deletedDocHadGrants = false;
+    let channels = [];
+    const deleteOutputSidecar = async (_seq, exec) => {
+        const outRow = await exec
+            .select({ output: tOutputs.output, hasGrants: tOutputs.hasGrants, fnCid: tOutputs.fnCid })
+            .from(tOutputs)
+            .where(and(eq(tOutputs.ownerHandle, args.ownerHandle), eq(tOutputs.appSlug, args.appSlug), eq(tOutputs.dbName, dbName), eq(tOutputs.docId, args.docId)))
+            .limit(1)
+            .then((r) => r[0]);
+        const outputIsLive = effectiveFnCid !== undefined && outRow !== undefined;
+        if (outputIsLive) {
+            deletedDocHadGrants = outRow.hasGrants === 1;
+            if (outRow.output) {
+                try {
+                    const parsed = JSON.parse(outRow.output);
+                    channels = [...normalizeChannels(parsed.channels ?? []), ...audienceChannelsOf(parsed), ...inheritChannelOf(parsed)];
+                    if (hasInheritChannel(channels))
+                        channels.push(INHERIT_CAPABILITY_CHANNEL);
+                }
+                catch (e) {
+                    console.error("deleteDoc stored-channels parse error:", e);
+                }
             }
-            accessResult = gate.descriptor;
-            grantsReduceBefore = gate.grantsReduceBefore;
         }
-        const now = new Date().toISOString();
-        const dbName = req.dbName;
-        const oldFeedChannels = afbRow?.accessFnCid
-            ? await loadDocChannels(vctx, { ownerHandle: req.ownerHandle, appSlug: req.appSlug, dbName, docId })
-            : [];
-        let persisted;
-        try {
-            persisted = await persistPutRevision(vctx, {
-                ownerHandle: req.ownerHandle,
-                appSlug: req.appSlug,
+        await exec
+            .delete(tOutputs)
+            .where(and(eq(tOutputs.ownerHandle, args.ownerHandle), eq(tOutputs.appSlug, args.appSlug), eq(tOutputs.dbName, dbName), eq(tOutputs.docId, args.docId)));
+        orThrow(await syncChannelIndex(exec, vctx.sql.tables, { ownerHandle: args.ownerHandle, appSlug: args.appSlug, dbName, docId: args.docId }, null), "frontend delete");
+    };
+    let delAlloc;
+    try {
+        delAlloc = await allocateAndInsertRevision({
+            db: vctx.sql.db,
+            flavour: vctx.sql.flavour,
+            table: t,
+            row: {
+                ownerHandle: args.ownerHandle,
+                appSlug: args.appSlug,
                 dbName,
-                docId,
-                doc: req.doc,
+                docId: args.docId,
                 userId,
-                now,
-                accessResult,
-                accessFnCid: afbRow?.accessFnCid,
-            });
-        }
-        catch (err) {
-            if (err instanceof SeqConflictError) {
-                await ctx.send.send(ctx, {
-                    type: "vibes.diy.res-error",
-                    error: { code: "conflict", message: `write conflict: head is at seq ${err.currentHeadSeq}, retry the write` },
-                });
-                return Result.Ok(EventoResult.Continue);
-            }
-            throw err;
-        }
-        const { alloc, storeAccessOutput, grantUpsertErr, noopRefreshedStaleOutput } = persisted;
-        const notifyGrantDeltaIfChanged = () => {
-            if (!storeAccessOutput || !grantsReduceBefore)
-                return;
-            notifyViewerGrantDeltaIfChanged(vctx, {
-                ownerHandle: req.ownerHandle,
-                appSlug: req.appSlug,
-                docId,
-                descriptor: storeAccessOutput.descriptor,
-                outputHasGrants: storeAccessOutput.outputHasGrants,
-                grantsReduceBefore,
-                senderConnId: clientWsSend(ctx).connId,
-            });
-        };
-        if (!alloc.inserted) {
-            if (grantUpsertErr) {
-                console.warn("AccessFnOutputs stale-row refresh on no-op failed:", grantUpsertErr);
-            }
-            else if (noopRefreshedStaleOutput) {
-                notifyGrantDeltaIfChanged();
-            }
-            await ctx.send.send(ctx, {
-                type: "vibes.diy.res-put-doc",
-                status: "ok",
-                id: docId,
-            });
-            return Result.Ok(EventoResult.Continue);
+                data: {},
+                deleted: 1,
+                created: now,
+            },
+            sidecar: deleteOutputSidecar,
+        });
+    }
+    catch (err) {
+        if (err instanceof SeqConflictError) {
+            return {
+                kind: "denied",
+                code: "conflict",
+                message: `write conflict: head is at seq ${err.currentHeadSeq}, retry the delete`,
+            };
         }
-        const nextSeq = alloc.seq;
-        await bestEffortChannelChange({
+        throw err;
+    }
+    if (delAlloc.inserted) {
+        await bestEffortAppendDelete({
             db: vctx.sql.db,
             flavour: vctx.sql.flavour,
-            ownerHandle: req.ownerHandle,
-            appSlug: req.appSlug,
+            ownerHandle: args.ownerHandle,
+            appSlug: args.appSlug,
             dbName,
-            docId,
-            seq: nextSeq,
-            oldChannels: oldFeedChannels,
-            newChannels: channelSetOfDescriptor(accessResult),
-            alwaysPut: true,
+            docId: args.docId,
+            seq: delAlloc.seq,
             created: now,
         });
+    }
+    if (delAlloc.inserted) {
         await emitBackendOnChange(vctx, {
-            ownerHandle: req.ownerHandle,
-            appSlug: req.appSlug,
+            ownerHandle: args.ownerHandle,
+            appSlug: args.appSlug,
             dbName,
-            docId,
-            seq: nextSeq,
-            deleted: false,
-            doc: req.doc,
+            docId: args.docId,
+            seq: delAlloc.seq,
+            deleted: true,
+            doc: {},
             originDepth: 0,
             writerUserId: userId,
         });
-        await emitCommentPostedEvent(vctx, {
-            ownerHandle: req.ownerHandle,
-            appSlug: req.appSlug,
-            dbName,
-            docId,
-            userId,
-            email: req._auth?.verifiedAuth.claims.params.email,
-            nextSeq,
-            now,
-        });
-        const putFanoutChannels = [
-            ...normalizeChannels(accessResult?.channels ?? []),
-            ...(accessResult === undefined ? [] : audienceChannelsOf(accessResult)),
-            ...(accessResult === undefined ? [] : inheritChannelOf(accessResult)),
-        ];
-        if (hasInheritChannel(putFanoutChannels))
-            putFanoutChannels.push(INHERIT_CAPABILITY_CHANNEL);
-        notifyDocChangedFanOut(vctx, {
-            ownerHandle: req.ownerHandle,
-            appSlug: req.appSlug,
-            dbName,
-            docId,
-            channels: putFanoutChannels,
-            senderConnId: clientWsSend(ctx).connId,
-        });
-        if (storeAccessOutput) {
-            if (grantUpsertErr) {
-                console.error("AccessFnOutputs upsert failed:", grantUpsertErr);
-                if (storeAccessOutput.outputHasGrants === 1) {
-                    await ctx.send.send(ctx, {
-                        type: "vibes.diy.res-error",
-                        error: { message: "grant storage failed — retry the write" },
-                    });
-                    return Result.Ok(EventoResult.Continue);
-                }
-            }
-            else {
-                notifyGrantDeltaIfChanged();
-            }
-        }
-        await ctx.send.send(ctx, {
-            type: "vibes.diy.res-put-doc",
-            status: "ok",
-            id: docId,
+    }
+    await (args.fanOutDocChanged ?? notifyDocChangedFanOut)(vctx, {
+        ownerHandle: args.ownerHandle,
+        appSlug: args.appSlug,
+        dbName,
+        docId: args.docId,
+        channels,
+        senderConnId: args.senderConnId ?? "",
+    });
+    if (deletedDocHadGrants) {
+        notifyViewerGrantsChangedFanOut(vctx, {
+            ownerHandle: args.ownerHandle,
+            appSlug: args.appSlug,
+            senderConnId: args.senderConnId ?? "",
         });
-        return Result.Ok(EventoResult.Continue);
-    }),
-};
+    }
+    purgeRootHtmlCacheSameColo(vctx, args.ownerHandle, args.appSlug);
+    return { kind: "ok", docId: args.docId };
+}
 export const deleteDocEvento = {
     hash: "delete-doc",
     validate: unwrapMsgBase(async (msg) => {
@@ -332,146 +451,27 @@ export const deleteDocEvento = {
     handle: checkAuth(async (ctx) => {
         const req = ctx.validated.payload;
         const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
-        const userId = req._auth.verifiedAuth.claims.userId;
-        let pinnedWriter;
-        if (req.actingHandle !== undefined) {
-            const writer = await resolveWriterContext(vctx, {
-                userId,
-                ownerHandle: req.ownerHandle,
-                actingHandle: req.actingHandle,
-            });
-            if (writer.unboundActingHandle) {
-                await ctx.send.send(ctx, {
-                    type: "vibes.diy.res-error",
-                    error: { message: "Acting handle not bound" },
-                });
-                return Result.Ok(EventoResult.Continue);
-            }
-            pinnedWriter = writer.userContext;
-        }
-        const now = new Date().toISOString();
-        const t = vctx.sql.tables.appDocuments;
-        const dbName = req.dbName;
-        const afbRow = await resolveAccessBinding(vctx, req.ownerHandle, req.appSlug, dbName);
-        const effectiveFnCid = afbRow?.accessFnCid;
-        const delGate = await runDeleteAccessGate(vctx, {
+        const answer = await deleteDocForCaller(vctx, {
+            userId: req._auth.verifiedAuth.claims.userId,
             ownerHandle: req.ownerHandle,
             appSlug: req.appSlug,
             dbName: req.dbName,
             docId: req.docId,
-            userId,
             adminMode: connectionAdminMode(ctx) || req.adminMode === true,
-            ...(pinnedWriter !== undefined ? { userContext: pinnedWriter } : {}),
-            lane: "interactive",
-        });
-        if (delGate.kind === "deny") {
-            await ctx.send.send(ctx, { type: "vibes.diy.res-error", error: { message: delGate.message } });
-            return Result.Ok(EventoResult.Continue);
-        }
-        const tOutputs = vctx.sql.tables.accessFnOutputs;
-        let deletedDocHadGrants = false;
-        let channels = [];
-        const deleteOutputSidecar = async (_seq, exec) => {
-            const outRow = await exec
-                .select({ output: tOutputs.output, hasGrants: tOutputs.hasGrants, fnCid: tOutputs.fnCid })
-                .from(tOutputs)
-                .where(and(eq(tOutputs.ownerHandle, req.ownerHandle), eq(tOutputs.appSlug, req.appSlug), eq(tOutputs.dbName, dbName), eq(tOutputs.docId, req.docId)))
-                .limit(1)
-                .then((r) => r[0]);
-            const outputIsLive = effectiveFnCid !== undefined && outRow !== undefined;
-            if (outputIsLive) {
-                deletedDocHadGrants = outRow.hasGrants === 1;
-                if (outRow.output) {
-                    try {
-                        const parsed = JSON.parse(outRow.output);
-                        channels = [...normalizeChannels(parsed.channels ?? []), ...audienceChannelsOf(parsed), ...inheritChannelOf(parsed)];
-                        if (hasInheritChannel(channels))
-                            channels.push(INHERIT_CAPABILITY_CHANNEL);
-                    }
-                    catch (e) {
-                        console.error("deleteDoc stored-channels parse error:", e);
-                    }
-                }
-            }
-            await exec
-                .delete(tOutputs)
-                .where(and(eq(tOutputs.ownerHandle, req.ownerHandle), eq(tOutputs.appSlug, req.appSlug), eq(tOutputs.dbName, dbName), eq(tOutputs.docId, req.docId)));
-            orThrow(await syncChannelIndex(exec, vctx.sql.tables, { ownerHandle: req.ownerHandle, appSlug: req.appSlug, dbName, docId: req.docId }, null), "frontend delete");
-        };
-        let delAlloc;
-        try {
-            delAlloc = await allocateAndInsertRevision({
-                db: vctx.sql.db,
-                flavour: vctx.sql.flavour,
-                table: t,
-                row: {
-                    ownerHandle: req.ownerHandle,
-                    appSlug: req.appSlug,
-                    dbName,
-                    docId: req.docId,
-                    userId: req._auth.verifiedAuth.claims.userId,
-                    data: {},
-                    deleted: 1,
-                    created: now,
-                },
-                sidecar: deleteOutputSidecar,
-            });
-        }
-        catch (err) {
-            if (err instanceof SeqConflictError) {
-                await ctx.send.send(ctx, {
-                    type: "vibes.diy.res-error",
-                    error: { code: "conflict", message: `write conflict: head is at seq ${err.currentHeadSeq}, retry the delete` },
-                });
-                return Result.Ok(EventoResult.Continue);
-            }
-            throw err;
-        }
-        if (delAlloc.inserted) {
-            await bestEffortAppendDelete({
-                db: vctx.sql.db,
-                flavour: vctx.sql.flavour,
-                ownerHandle: req.ownerHandle,
-                appSlug: req.appSlug,
-                dbName,
-                docId: req.docId,
-                seq: delAlloc.seq,
-                created: now,
-            });
-        }
-        if (delAlloc.inserted) {
-            await emitBackendOnChange(vctx, {
-                ownerHandle: req.ownerHandle,
-                appSlug: req.appSlug,
-                dbName,
-                docId: req.docId,
-                seq: delAlloc.seq,
-                deleted: true,
-                doc: {},
-                originDepth: 0,
-                writerUserId: req._auth.verifiedAuth.claims.userId,
-            });
-        }
-        notifyDocChangedFanOut(vctx, {
-            ownerHandle: req.ownerHandle,
-            appSlug: req.appSlug,
-            dbName,
-            docId: req.docId,
-            channels,
+            ...(req.actingHandle === undefined ? {} : { actingHandle: req.actingHandle }),
             senderConnId: clientWsSend(ctx).connId,
         });
-        if (deletedDocHadGrants) {
-            notifyViewerGrantsChangedFanOut(vctx, {
-                ownerHandle: req.ownerHandle,
-                appSlug: req.appSlug,
-                senderConnId: clientWsSend(ctx).connId,
+        if (answer.kind === "denied") {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: { message: answer.message, ...(answer.code === undefined ? {} : { code: answer.code }) },
             });
+            return Result.Ok(EventoResult.Continue);
         }
-        purgeRootHtmlCacheSameColo(vctx, req.ownerHandle, req.appSlug);
         await ctx.send.send(ctx, {
             type: "vibes.diy.res-delete-doc",
             status: "ok",
-            id: req.docId,
+            id: answer.docId,
         });
         return Result.Ok(EventoResult.Continue);
     }),