@vibes.diy/api-svc 14.3.53 → 14.3.55

package/public/audience-arms-store.d.ts

@@ -1,4 +1,4 @@
-import { type AudienceArmState, type AudienceArmWriteState } from "@vibes.diy/api-types";
+import { type AudienceArmState, type AudienceArmWriteState, type StoredAudienceArm } from "@vibes.diy/api-types";
 import { VibesApiSQLCtx } from "../types.js";
 export interface ArmKey {
     subjectHandle: string;
@@ -17,11 +17,22 @@ export declare function setArm(vctx: VibesApiSQLCtx, key: ArmKey & {
 }): Promise<void>;
 export declare function isArmed(vctx: VibesApiSQLCtx, key: ArmKey): Promise<boolean>;
 export declare function getArmState(vctx: VibesApiSQLCtx, key: ArmKey): Promise<AudienceArmState | null>;
+export declare function getArmRow(vctx: VibesApiSQLCtx, key: ArmKey): Promise<StoredAudienceArm | null>;
+export declare function stampSensitiveJoins(vctx: VibesApiSQLCtx, input: {
+    ownerHandle: string;
+    appSlug: string;
+    subjects: readonly string[];
+}): Promise<void>;
 export declare function armStatesForSubjects(vctx: VibesApiSQLCtx, input: {
     ownerHandle: string;
     appSlug: string;
     subjects: string[];
 }): Promise<Map<string, AudienceArmState>>;
+export declare function armRowsForSubjects(vctx: VibesApiSQLCtx, input: {
+    ownerHandle: string;
+    appSlug: string;
+    subjects: string[];
+}): Promise<Map<string, StoredAudienceArm>>;
 export declare function armedSubjects(vctx: VibesApiSQLCtx, input: {
     ownerHandle: string;
     appSlug: string;
@@ -31,6 +42,7 @@ export declare function listArmsForSubject(vctx: VibesApiSQLCtx, subjectHandle:
     ownerHandle: string;
     appSlug: string;
     state: AudienceArmState;
+    joinedWhileSensitive: boolean;
 }[]>;
 export declare function listArmsForApp(vctx: VibesApiSQLCtx, key: {
     ownerHandle: string;

package/public/audience-arms-store.js

@@ -1,6 +1,6 @@
 import { and, eq, inArray } from "drizzle-orm/sql/expressions";
 import { exception2Result } from "@adviser/cement";
-import { ActiveEntry, effectiveAudienceVisibility, isActiveAudiencePolicy, isActivePrivacySensitive, isDownwardAudienceTransition, normalizeArmState, parseArrayWarning, } from "@vibes.diy/api-types";
+import { ActiveEntry, effectiveAudienceVisibility, isActiveAudiencePolicy, isActivePrivacySensitive, isDownwardAudienceTransition, isSensitiveJoinStamp, normalizeArmState, parseArrayWarning, SENSITIVE_JOIN_SOURCE, storedAudienceArmFromRow, subjectAudienceInputs, } from "@vibes.diy/api-types";
 import { patchAudienceKeys } from "./audience-key-patch.js";
 import { readComposedSettingsForApp } from "./app-setting-items.js";
 function now() {
@@ -94,7 +94,7 @@ export async function setArm(vctx, key) {
             console.error("audience-arm clear teardown failed (degrade-to-resubscribe):", rClear.Err());
         return;
     }
-    const oldState = await getArmState(vctx, key);
+    const oldRow = await getArmRow(vctx, key);
     const state = normalizeArmState(key.state);
     const ts = now();
     await vctx.sql.db
@@ -104,17 +104,21 @@ export async function setArm(vctx, key) {
         ownerHandle: key.ownerHandle,
         appSlug: key.appSlug,
         state,
+        source: null,
         created: ts,
         updated: ts,
     })
         .onConflictDoUpdate({
         target: [t.subjectHandle, t.ownerHandle, t.appSlug],
-        set: { state, updated: ts },
+        set: { state, source: null, updated: ts },
     });
     const rTeardown = await exception2Result(async () => {
-        const [sensitive, policy] = await Promise.all([appPrivacySensitive(vctx, key), subjectHandleIntent(vctx, key.subjectHandle)]);
-        const before = effectiveAudienceVisibility({ state: oldState, sensitive, policy });
-        const after = effectiveAudienceVisibility({ state, sensitive, policy });
+        const [appSensitive, policy] = await Promise.all([
+            appPrivacySensitive(vctx, key),
+            subjectHandleIntent(vctx, key.subjectHandle),
+        ]);
+        const before = effectiveAudienceVisibility({ ...subjectAudienceInputs({ row: oldRow, appSensitive }), policy });
+        const after = effectiveAudienceVisibility({ ...subjectAudienceInputs({ row: { state, source: null }, appSensitive }), policy });
         if (isDownwardAudienceTransition(before, after) || state === "private") {
             const skipFollowers = before === "public" && after === "followers";
             await revokeArmedKeys(vctx, key, { skipFollowers });
@@ -134,29 +138,65 @@ export async function isArmed(vctx, key) {
     return row !== undefined && normalizeArmState(row.state) !== "private";
 }
 export async function getArmState(vctx, key) {
+    return (await getArmRow(vctx, key))?.state ?? null;
+}
+export async function getArmRow(vctx, key) {
     const t = vctx.sql.tables.audienceArms;
     const row = await vctx.sql.db
-        .select({ state: t.state })
+        .select({ state: t.state, source: t.source, created: t.created, updated: t.updated })
         .from(t)
         .where(and(eq(t.subjectHandle, key.subjectHandle), eq(t.ownerHandle, key.ownerHandle), eq(t.appSlug, key.appSlug)))
         .limit(1)
         .then((r) => r[0]);
     if (row === undefined)
         return null;
-    return normalizeArmState(row.state);
+    return storedAudienceArmFromRow({
+        state: normalizeArmState(row.state),
+        source: row.source ?? null,
+        created: row.created,
+        updated: row.updated,
+    });
+}
+export async function stampSensitiveJoins(vctx, input) {
+    if (input.subjects.length === 0)
+        return;
+    const t = vctx.sql.tables.audienceArms;
+    const ts = now();
+    await vctx.sql.db
+        .insert(t)
+        .values([...new Set(input.subjects)].map((subjectHandle) => ({
+        subjectHandle,
+        ownerHandle: input.ownerHandle,
+        appSlug: input.appSlug,
+        state: "private",
+        source: SENSITIVE_JOIN_SOURCE,
+        created: ts,
+        updated: ts,
+    })))
+        .onConflictDoNothing({ target: [t.subjectHandle, t.ownerHandle, t.appSlug] });
 }
 export async function armStatesForSubjects(vctx, input) {
-    const states = new Map();
+    const rows = await armRowsForSubjects(vctx, input);
+    return new Map([...rows].map(([subject, row]) => [subject, row.state]));
+}
+export async function armRowsForSubjects(vctx, input) {
+    const rows = new Map();
     if (input.subjects.length === 0)
-        return states;
+        return rows;
     const t = vctx.sql.tables.audienceArms;
-    const rows = await vctx.sql.db
-        .select({ subjectHandle: t.subjectHandle, state: t.state })
+    const found = await vctx.sql.db
+        .select({ subjectHandle: t.subjectHandle, state: t.state, source: t.source, created: t.created, updated: t.updated })
         .from(t)
         .where(and(eq(t.ownerHandle, input.ownerHandle), eq(t.appSlug, input.appSlug), inArray(t.subjectHandle, input.subjects)));
-    for (const r of rows)
-        states.set(r.subjectHandle, normalizeArmState(r.state));
-    return states;
+    for (const r of found) {
+        rows.set(r.subjectHandle, storedAudienceArmFromRow({
+            state: normalizeArmState(r.state),
+            source: r.source ?? null,
+            created: r.created,
+            updated: r.updated,
+        }));
+    }
+    return rows;
 }
 export async function armedSubjects(vctx, input) {
     const states = await armStatesForSubjects(vctx, input);
@@ -169,14 +209,25 @@ export async function armedSubjects(vctx, input) {
 export async function listArmsForSubject(vctx, subjectHandle) {
     const t = vctx.sql.tables.audienceArms;
     const rows = await vctx.sql.db
-        .select({ ownerHandle: t.ownerHandle, appSlug: t.appSlug, state: t.state })
+        .select({
+        ownerHandle: t.ownerHandle,
+        appSlug: t.appSlug,
+        state: t.state,
+        source: t.source,
+        created: t.created,
+        updated: t.updated,
+    })
         .from(t)
         .where(eq(t.subjectHandle, subjectHandle));
-    return rows.map((r) => ({
-        ownerHandle: r.ownerHandle,
-        appSlug: r.appSlug,
-        state: normalizeArmState(r.state),
-    }));
+    return rows.map((r) => {
+        const state = normalizeArmState(r.state);
+        return {
+            ownerHandle: r.ownerHandle,
+            appSlug: r.appSlug,
+            state,
+            joinedWhileSensitive: isSensitiveJoinStamp(storedAudienceArmFromRow({ state, source: r.source ?? null, created: r.created, updated: r.updated })),
+        };
+    });
 }
 export async function listArmsForApp(vctx, key) {
     const t = vctx.sql.tables.audienceArms;

package/public/audience-arms-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"audience-arms-store.js","sourceRoot":"","sources":["../../jsr/public/audience-arms-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,WAAW,EAIX,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAyB,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAoBpE,SAAS,GAAG;IACV,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AASD,KAAK,UAAU,qBAAqB,CAAC,IAAoB,EAAE,cAAsB;IAC/E,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3B,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC;SAC5C,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;AAC3C,CAAC;AAMD,KAAK,UAAU,mBAAmB,CAAC,IAAoB,EAAE,GAA6C;IACpG,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;AACpE,CAAC;AAKD,KAAK,UAAU,mBAAmB,CAAC,IAAoB,EAAE,aAAqB;IAC5E,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;SAChC,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAE,GAAG,CAAC,QAAsB,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACvF,OAAO,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;AAC/D,CAAC;AAqBD,KAAK,UAAU,gBAAgB,CAC7B,IAAoB,EACpB,aAAqB,EACrB,KAAuB,EACvB,IAAI,GAAyD,EAAE;IAE/D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,KAAK,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS,CAAC;IAEjG,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvH,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAIjF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACrH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,CACnC,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;YACvE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;SAC5E,CAAC,CACH,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACpG,CAAC;IAKD,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,EAAE,CAAC;QACjD,KAAK,MAAM,cAAc,IAAI,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACnH,IAAI,CAAC,CAAC,KAAK,EAAE;gBAAE,OAAO,CAAC,KAAK,CAAC,2DAA2D,cAAc,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;AACH,CAAC;AAKD,KAAK,UAAU,eAAe,CAAC,IAAoB,EAAE,GAAW,EAAE,IAAI,GAAgC,EAAE;IACtG,MAAM,gBAAgB,CACpB,IAAI,EACJ,GAAG,CAAC,aAAa,EACjB;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,CAAC,kBAAkB,GAAG,CAAC,aAAa,EAAE,EAAE,gBAAgB,GAAG,CAAC,aAAa,EAAE,CAAC;QACtF,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;KACjE,EACD,IAAI,CACL,CAAC;AACJ,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAoB,EACpB,aAAqB,EACrB,IAAI,GAAgC,EAAE;IAEtC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAU3D,MAAM,eAAe,GAAG,IAAI;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,gBAAgB,CACpB,IAAI,EACJ,aAAa,EACb;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,CAAC,kBAAkB,aAAa,EAAE,EAAE,gBAAgB,aAAa,EAAE,CAAC;QAC9E,eAAe;KAChB,EACD,IAAI,CACL,CAAC;AACJ,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,IAAoB,EACpB,GAA6C;IAE7C,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAU7C,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC7F,MAAM,gBAAgB,CACpB,IAAI,EACJ,EAAE,EACF;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;QAChE,mBAAmB,EAAE,IAAI;QACzB,cAAc;KACf,EACD,EAAE,aAAa,EAAE,KAAK,EAAE,CACzB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAoB,EAAE,GAAqD;IACtG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IAWvC,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;aACd,MAAM,CAAC,CAAC,CAAC;aACT,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAItH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,KAAK,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,8DAA8D,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAChH,OAAO;IACT,CAAC;IAID,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAK9C,MAAM,KAAK,GAAqB,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;IACjB,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SACd,MAAM,CAAC,CAAC,CAAC;SACT,MAAM,CAAC;QACN,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK;QACL,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;KACZ,CAAC;SACD,kBAAkB,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC;QACnD,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;KAC5B,CAAC,CAAC;IAkBL,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE;QAClD,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC9H,MAAM,MAAM,GAAG,2BAA2B,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,2BAA2B,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAMxE,IAAI,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAGvE,MAAM,aAAa,GAAG,MAAM,KAAK,QAAQ,IAAI,KAAK,KAAK,WAAW,CAAC;YACnE,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,KAAK,EAAE;QAAE,OAAO,CAAC,KAAK,CAAC,wDAAwD,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;AAClH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAoB,EAAE,GAAW;IAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;SAClH,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAGrB,OAAO,GAAG,KAAK,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAA8B,CAAC,KAAK,SAAS,CAAC;AAClG,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAoB,EAAE,GAAW;IACjE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;SAClH,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAA8B,CAAC,CAAC;AAC/D,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAoB,EACpB,KAAmE;IAEnE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3B,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SAC1D,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAA8B,CAAC,CAAC,CAAC;IACvG,OAAO,MAAM,CAAC;AAChB,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAoB,EACpB,KAAmE;IAEnE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM;QAAE,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnF,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAoB,EACpB,aAAqB;IAErB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3B,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SAC1E,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAA8B,CAAC;KAC3D,CAAC,CAAC,CAAC;AACN,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAoB,EACpB,GAA6C;IAE7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3B,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SAC1D,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAA8B,CAAC;KAC3D,CAAC,CAAC,CAAC;AACN,CAAC"}
+{"version":3,"file":"audience-arms-store.js","sourceRoot":"","sources":["../../jsr/public/audience-arms-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,WAAW,EAIX,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,4BAA4B,EAC5B,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EAErB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAyB,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAoBpE,SAAS,GAAG;IACV,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AASD,KAAK,UAAU,qBAAqB,CAAC,IAAoB,EAAE,cAAsB;IAC/E,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3B,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC;SAC5C,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;AAC3C,CAAC;AAMD,KAAK,UAAU,mBAAmB,CAAC,IAAoB,EAAE,GAA6C;IACpG,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;AACpE,CAAC;AAKD,KAAK,UAAU,mBAAmB,CAAC,IAAoB,EAAE,aAAqB;IAC5E,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;SAChC,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAE,GAAG,CAAC,QAAsB,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACvF,OAAO,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;AAC/D,CAAC;AAqBD,KAAK,UAAU,gBAAgB,CAC7B,IAAoB,EACpB,aAAqB,EACrB,KAAuB,EACvB,IAAI,GAAyD,EAAE;IAE/D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,KAAK,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS,CAAC;IAEjG,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvH,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAIjF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACrH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,CACnC,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;YACvE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;SAC5E,CAAC,CACH,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACpG,CAAC;IAKD,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,EAAE,CAAC;QACjD,KAAK,MAAM,cAAc,IAAI,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACnH,IAAI,CAAC,CAAC,KAAK,EAAE;gBAAE,OAAO,CAAC,KAAK,CAAC,2DAA2D,cAAc,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;AACH,CAAC;AAKD,KAAK,UAAU,eAAe,CAAC,IAAoB,EAAE,GAAW,EAAE,IAAI,GAAgC,EAAE;IACtG,MAAM,gBAAgB,CACpB,IAAI,EACJ,GAAG,CAAC,aAAa,EACjB;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,CAAC,kBAAkB,GAAG,CAAC,aAAa,EAAE,EAAE,gBAAgB,GAAG,CAAC,aAAa,EAAE,CAAC;QACtF,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;KACjE,EACD,IAAI,CACL,CAAC;AACJ,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAoB,EACpB,aAAqB,EACrB,IAAI,GAAgC,EAAE;IAEtC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAU3D,MAAM,eAAe,GAAG,IAAI;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,gBAAgB,CACpB,IAAI,EACJ,aAAa,EACb;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,CAAC,kBAAkB,aAAa,EAAE,EAAE,gBAAgB,aAAa,EAAE,CAAC;QAC9E,eAAe;KAChB,EACD,IAAI,CACL,CAAC;AACJ,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,IAAoB,EACpB,GAA6C;IAE7C,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAU7C,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC7F,MAAM,gBAAgB,CACpB,IAAI,EACJ,EAAE,EACF;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;QAChE,mBAAmB,EAAE,IAAI;QACzB,cAAc;KACf,EACD,EAAE,aAAa,EAAE,KAAK,EAAE,CACzB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAoB,EAAE,GAAqD;IACtG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IAWvC,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;aACd,MAAM,CAAC,CAAC,CAAC;aACT,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAItH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,KAAK,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,8DAA8D,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAChH,OAAO;IACT,CAAC;IAKD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAK1C,MAAM,KAAK,GAAqB,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;IACjB,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SACd,MAAM,CAAC,CAAC,CAAC;SACT,MAAM,CAAC;QACN,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK;QAGL,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;KACZ,CAAC;SACD,kBAAkB,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC;QACnD,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;KAC1C,CAAC,CAAC;IAkBL,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE;QAClD,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/C,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC;YAC9B,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,2BAA2B,CAAC,EAAE,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAChH,MAAM,KAAK,GAAG,2BAA2B,CAAC,EAAE,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAMhI,IAAI,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAGvE,MAAM,aAAa,GAAG,MAAM,KAAK,QAAQ,IAAI,KAAK,KAAK,WAAW,CAAC;YACnE,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,KAAK,EAAE;QAAE,OAAO,CAAC,KAAK,CAAC,wDAAwD,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;AAClH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAoB,EAAE,GAAW;IAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;SAClH,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAGrB,OAAO,GAAG,KAAK,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAA8B,CAAC,KAAK,SAAS,CAAC;AAClG,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAoB,EAAE,GAAW;IACjE,OAAO,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;AACrD,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAoB,EAAE,GAAW;IAC/D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACpF,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;SAClH,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,wBAAwB,CAAC;QAC9B,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAA8B,CAAC;QAC5D,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC,CAAC;AACL,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAoB,EACpB,KAA4E;IAE5E,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;IACjB,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SACd,MAAM,CAAC,CAAC,CAAC;SACT,MAAM,CACL,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACnD,aAAa;QACb,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,qBAAqB;QAC7B,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;KACZ,CAAC,CAAC,CACJ;SACA,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAoB,EACpB,KAAmE;IAEnE,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnD,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAoB,EACpB,KAAmE;IAEnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAA6B,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC5B,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACpH,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CACN,CAAC,CAAC,aAAa,EACf,wBAAwB,CAAC;YACvB,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAA8B,CAAC;YAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;YACxB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAoB,EACpB,KAAmE;IAEnE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM;QAAE,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnF,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAoB,EACpB,aAAqB;IAErB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3B,MAAM,CAAC;QACN,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO;KACnB,CAAC;SACD,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpB,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,KAA8B,CAAC,CAAC;QAClE,OAAO;YACL,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,KAAK;YACL,oBAAoB,EAAE,oBAAoB,CACxC,wBAAwB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CACtG;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAoB,EACpB,GAA6C;IAE7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3B,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SAC1D,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAA8B,CAAC;KAC3D,CAAC,CAAC,CAAC;AACN,CAAC"}

package/public/audience-effective-arm.d.ts

@@ -1,10 +1,24 @@
-import { type AudienceArmState, type AudiencePolicy } from "@vibes.diy/api-types";
+import { type AudienceArmState, type AudiencePolicy, type StoredAudienceArm } from "@vibes.diy/api-types";
 import { VibesApiSQLCtx } from "../types.js";
-import { type ArmKey } from "./audience-arms-store.js";
+import { Result } from "@adviser/cement";
+import { stampSensitiveJoins, type ArmKey } from "./audience-arms-store.js";
 export declare function getAppPrivacySensitive(vctx: VibesApiSQLCtx, key: {
     ownerHandle: string;
     appSlug: string;
 }): Promise<boolean>;
+export declare function getSubjectPrivacySensitive(vctx: VibesApiSQLCtx, key: ArmKey): Promise<boolean>;
+export declare function ensureSensitiveJoinStamp(vctx: VibesApiSQLCtx, key: ArmKey, deps?: {
+    readonly stamp?: typeof stampSensitiveJoins;
+}): Promise<Result<{
+    readonly row: StoredAudienceArm | null;
+    readonly appSensitive: boolean;
+}>>;
+export declare function resolveSubjectArmOnOpen(vctx: VibesApiSQLCtx, key: ArmKey, deps?: {
+    readonly stamp?: typeof stampSensitiveJoins;
+}): Promise<Result<{
+    readonly state: AudienceArmState | null;
+    readonly sensitive: boolean;
+}>>;
 export declare function audiencePoliciesFor(vctx: VibesApiSQLCtx, handles: string[]): Promise<Map<string, AudiencePolicy>>;
 export declare function effectiveAudienceVisibilities(vctx: VibesApiSQLCtx, input: {
     ownerHandle: string;

package/public/audience-effective-arm.js

@@ -1,11 +1,34 @@
 import { inArray } from "drizzle-orm/sql/expressions";
-import { ActiveEntry, effectiveAudienceVisibility, isActiveAudiencePolicy, isActivePrivacySensitive, parseArrayWarning, } from "@vibes.diy/api-types";
-import { armStatesForSubjects } from "./audience-arms-store.js";
+import { ActiveEntry, effectiveAudienceVisibility, isActiveAudiencePolicy, isActivePrivacySensitive, isSensitiveJoinStamp, parseArrayWarning, subjectAudienceInputs, } from "@vibes.diy/api-types";
+import { exception2Result, Result } from "@adviser/cement";
+import { armRowsForSubjects, getArmRow, stampSensitiveJoins } from "./audience-arms-store.js";
 import { readComposedSettingsForApp } from "./app-setting-items.js";
 export async function getAppPrivacySensitive(vctx, key) {
     const entries = await readComposedSettingsForApp(vctx, key.ownerHandle, key.appSlug);
     return entries.find(isActivePrivacySensitive)?.sensitive === true;
 }
+export async function getSubjectPrivacySensitive(vctx, key) {
+    const [row, appSensitive] = await Promise.all([getArmRow(vctx, key), getAppPrivacySensitive(vctx, key)]);
+    return appSensitive || isSensitiveJoinStamp(row);
+}
+export async function ensureSensitiveJoinStamp(vctx, key, deps = {}) {
+    const stamp = deps.stamp ?? stampSensitiveJoins;
+    const [row, appSensitive] = await Promise.all([getArmRow(vctx, key), getAppPrivacySensitive(vctx, key)]);
+    if (row === null && appSensitive) {
+        const rStamp = await exception2Result(() => stamp(vctx, { ownerHandle: key.ownerHandle, appSlug: key.appSlug, subjects: [key.subjectHandle] }));
+        if (rStamp.isErr()) {
+            console.error("sensitive-join stamp failed:", rStamp.Err());
+            return Result.Err(rStamp.Err());
+        }
+    }
+    return Result.Ok({ row, appSensitive });
+}
+export async function resolveSubjectArmOnOpen(vctx, key, deps = {}) {
+    const r = await ensureSensitiveJoinStamp(vctx, key, deps);
+    if (r.isErr())
+        return Result.Err(r.Err());
+    return Result.Ok(subjectAudienceInputs({ row: r.Ok().row, appSensitive: r.Ok().appSensitive }));
+}
 function parseEntries(settings) {
     const { filtered } = parseArrayWarning(settings ?? [], ActiveEntry);
     return filtered;
@@ -27,16 +50,19 @@ export async function effectiveAudienceVisibilities(vctx, input) {
     const out = new Map();
     if (input.subjects.length === 0)
         return out;
-    const states = await armStatesForSubjects(vctx, input);
-    const rowless = input.subjects.filter((subject) => states.has(subject) === false);
-    const needsSensitive = rowless.length > 0 || [...states.values()].some((state) => state === "public");
-    const [sensitive, policies] = await Promise.all([
+    const rows = await armRowsForSubjects(vctx, input);
+    const rowless = input.subjects.filter((subject) => {
+        const row = rows.get(subject);
+        return row === undefined || isSensitiveJoinStamp(row);
+    });
+    const needsSensitive = rowless.length > 0 || [...rows.values()].some((row) => row.state === "public");
+    const [appSensitive, policies] = await Promise.all([
         needsSensitive ? getAppPrivacySensitive(vctx, input) : Promise.resolve(false),
         rowless.length > 0 ? audiencePoliciesFor(vctx, rowless) : Promise.resolve(new Map()),
     ]);
     for (const subject of input.subjects) {
-        const state = states.get(subject);
-        out.set(subject, effectiveAudienceVisibility({ state: state ?? null, sensitive, policy: policies.get(subject) ?? null }));
+        const inputs = subjectAudienceInputs({ row: rows.get(subject), appSensitive });
+        out.set(subject, effectiveAudienceVisibility({ ...inputs, policy: policies.get(subject) ?? null }));
     }
     return out;
 }

package/public/audience-effective-arm.js.map

@@ -1 +1 @@
-{"version":3,"file":"audience-effective-arm.js","sourceRoot":"","sources":["../../jsr/public/audience-effective-arm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EACL,WAAW,EAGX,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,oBAAoB,EAAe,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AASpE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoB,EACpB,GAA6C;IAE7C,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;AACpE,CAAC;AAED,SAAS,YAAY,CAAC,QAAiB;IACrC,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAE,QAAsB,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACnF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAoB,EAAE,OAAiB;IAC/E,MAAM,GAAG,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5H,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtE,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAoB,EACpB,KAAmE;IAEnE,MAAM,GAAG,GAAG,IAAI,GAAG,EAA4B,CAAC;IAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAE5C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC;IAIlF,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IACtG,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7E,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,GAAG,EAA0B,CAAC;KAC7G,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAGlC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,2BAA2B,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5H,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoB,EACpB,KAAmE;IAEnE,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAoB,EAAE,GAAW;IACxE,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE;QAC/C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"audience-effective-arm.js","sourceRoot":"","sources":["../../jsr/public/audience-effective-arm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EACL,WAAW,EAGX,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GAEtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAe,MAAM,0BAA0B,CAAC;AAC3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAcpE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoB,EACpB,GAA6C;IAE7C,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;AACpE,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAoB,EAAE,GAAW;IAChF,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACzG,OAAO,YAAY,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAoB,EACpB,GAAW,EACX,IAAI,GAAoD,EAAE;IAE1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC;IAChD,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,GAAG,KAAK,IAAI,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACzC,KAAK,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CACnG,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;AAC1C,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAoB,EACpB,GAAW,EACX,IAAI,GAAoD,EAAE;IAE1D,MAAM,CAAC,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,YAAY,CAAC,QAAiB;IACrC,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAE,QAAsB,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACnF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAoB,EAAE,OAAiB;IAC/E,MAAM,GAAG,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5H,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtE,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAoB,EACpB,KAAmE;IAEnE,MAAM,GAAG,GAAG,IAAI,GAAG,EAA4B,CAAC;IAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAE5C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAInD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,GAAG,KAAK,SAAS,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAIH,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IACtG,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7E,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,GAAG,EAA0B,CAAC;KAC7G,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAIrC,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/E,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,2BAA2B,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoB,EACpB,KAAmE;IAEnE,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAoB,EAAE,GAAW;IACxE,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE;QAC/C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AACtC,CAAC"}

package/public/cid-asset.js

@@ -1,5 +1,6 @@
 import { Result, Option, EventoResult, URI, exception2Result, } from "@adviser/cement";
 import { isFetchErrResult, isFetchNotFoundResult, isFetchOkResult, } from "@vibes.diy/api-types";
+import { CORS_OMIT, CORS_PUBLIC } from "../svc-http-send-provider.js";
 import { dataUriBody, isInlineServable, resolveServableAsset } from "../intern/resolve-servable-asset.js";
 import { resolveCidAssetAccess } from "./cid-asset-access.js";
 export const cidAsset = {
@@ -50,6 +51,7 @@ export const cidAsset = {
             "Cache-Control": access.public ? servable.cacheControl : "private, no-store",
             Vary: "Cookie, Authorization",
             ...(servable.state === "disabled" ? {} : { ETag: servable.etag }),
+            "Access-Control-Allow-Origin": access.public ? CORS_PUBLIC : CORS_OMIT,
         };
         if (isInlineServable(servable)) {
             ctx.send.send(ctx, {

package/public/cid-asset.js.map

@@ -1 +1 @@
-{"version":3,"file":"cid-asset.js","sourceRoot":"","sources":["../../jsr/public/cid-asset.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,MAAM,EAGN,MAAM,EACN,YAAY,EACZ,GAAG,EACH,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE1G,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,CAAC,MAAM,QAAQ,GAAmE;IACtF,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,CAAC,GAAwE,EAAE,EAAE;QACrF,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrH,OAAO,OAAO,CAAC,OAAO,CACpB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,IAAI,CAAC;oBAEV,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAE;oBACzB,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,0BAA0B;iBACzD,CAAC,CACH,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAsE,EAAqC,EAAE;QAC1H,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,KAAK,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YAChG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjB,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;gBACnC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,mBAAmB,EAAE;gBACrF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aACzE,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE;YAChD,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE;gBACX,IAAI,EAAE,IAAI,MAAM,CAAC,GAAG,GAAG;gBACvB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,mBAAmB;aAC1F;YAKD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;SAClF,CAAC,CAAC;QACH,MAAM,WAAW,GAAG;YAClB,cAAc,EAAE,QAAQ,CAAC,IAAI;YAC7B,yBAAyB,EAAE,6BAA6B;YACxD,wBAAwB,EAAE,SAAS;YACnC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB;YAC5E,IAAI,EAAE,uBAAuB;YAC7B,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;SAClE,CAAC;QACF,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAG/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjB,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;aACD,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,gBAAgB,CAAC,MAAM,CAAC;gBAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;qBAC9B;iBAC6B,CAAC,CAAC;gBAClC,MAAM;YACR,KAAK,qBAAqB,CAAC,MAAM,CAAC;gBAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,2BAA2B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;qBACxD;iBAC6B,CAAC,CAAC;gBAClC,MAAM;YACR,KAAK,eAAe,CAAC,MAAM,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,WAAW;oBACpB,IAAI,EAAE,MAAM,CAAC,IAAI;iBACa,CAAC,CAAC;gBAClC,MAAM;YACR;gBACE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,wCAAwC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;qBACrE;iBAC6B,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC"}
+{"version":3,"file":"cid-asset.js","sourceRoot":"","sources":["../../jsr/public/cid-asset.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,MAAM,EAGN,MAAM,EACN,YAAY,EACZ,GAAG,EACH,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE1G,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,CAAC,MAAM,QAAQ,GAAmE;IACtF,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,CAAC,GAAwE,EAAE,EAAE;QACrF,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrH,OAAO,OAAO,CAAC,OAAO,CACpB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,IAAI,CAAC;oBAEV,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAE;oBACzB,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,0BAA0B;iBACzD,CAAC,CACH,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAsE,EAAqC,EAAE;QAC1H,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,KAAK,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YAChG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjB,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;gBACnC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,mBAAmB,EAAE;gBACrF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aACzE,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE;YAChD,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE;gBACX,IAAI,EAAE,IAAI,MAAM,CAAC,GAAG,GAAG;gBACvB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,mBAAmB;aAC1F;YAKD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;SAClF,CAAC,CAAC;QAOH,MAAM,WAAW,GAAG;YAClB,cAAc,EAAE,QAAQ,CAAC,IAAI;YAC7B,yBAAyB,EAAE,6BAA6B;YACxD,wBAAwB,EAAE,SAAS;YACnC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB;YAC5E,IAAI,EAAE,uBAAuB;YAC7B,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjE,6BAA6B,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;SACvE,CAAC;QACF,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAG/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjB,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;aACD,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,gBAAgB,CAAC,MAAM,CAAC;gBAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;qBAC9B;iBAC6B,CAAC,CAAC;gBAClC,MAAM;YACR,KAAK,qBAAqB,CAAC,MAAM,CAAC;gBAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,2BAA2B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;qBACxD;iBAC6B,CAAC,CAAC;gBAClC,MAAM;YACR,KAAK,eAAe,CAAC,MAAM,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,WAAW;oBACpB,IAAI,EAAE,MAAM,CAAC,IAAI;iBACa,CAAC,CAAC;gBAClC,MAAM;YACR;gBACE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,wCAAwC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;qBACrE;iBAC6B,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF,CAAC"}

package/public/db-acl-resolver.js

@@ -31,7 +31,7 @@ export async function resolveDbAccess({ vctx, ownerHandle, appSlug, dbName }) {
         entry,
         settingsCreated: rSettings.Ok().created,
     });
-    const wildcard = wildcardFor(posture, anonWrite);
+    const wildcard = wildcardFor(posture, anonWrite, entry.editorWritesOnly);
     const stored = entry.dbAcls?.[dbName];
     if (stored !== undefined)
         return Result.Ok({ posture, wildcard, pin: stored });

package/public/db-acl-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"db-acl-resolver.js","sourceRoot":"","sources":["../../jsr/public/db-acl-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,WAAW,EAA8C,MAAM,sBAAsB,CAAC;AAC/G,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAOxF,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AA0ClD,OAAO,EACL,cAAc,EACd,uBAAuB,EACvB,0BAA0B,EAC1B,yBAAyB,EACzB,kCAAkC,EAKlC,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAU9B,MAAM,UAAU,cAAc,CAAC,GAAqB,EAAE,GAAqB,EAAE,MAAiB;IAC5F,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC9G,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAoB;IAQ5F,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAM/G,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,MAAM,4BAA4B,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAOD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,SAAS,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAMtC,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;QACnD,IAAI;QACJ,WAAW;QACX,OAAO;QACP,KAAK;QACL,eAAe,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,OAAO;KACxC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAK/E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAsB;IACvD,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"db-acl-resolver.js","sourceRoot":"","sources":["../../jsr/public/db-acl-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,WAAW,EAA8C,MAAM,sBAAsB,CAAC;AAC/G,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAOxF,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AA0ClD,OAAO,EACL,cAAc,EACd,uBAAuB,EACvB,0BAA0B,EAC1B,yBAAyB,EACzB,kCAAkC,EAKlC,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAU9B,MAAM,UAAU,cAAc,CAAC,GAAqB,EAAE,GAAqB,EAAE,MAAiB;IAC5F,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC9G,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAoB;IAQ5F,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAM/G,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,MAAM,4BAA4B,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAOD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,SAAS,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAMtC,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;QACnD,IAAI;QACJ,WAAW;QACX,OAAO;QACP,KAAK;QACL,eAAe,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,OAAO;KACxC,CAAC,CAAC;IAKH,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAK/E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAsB;IACvD,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/public/ensure-app-settings.js

@@ -1,5 +1,5 @@
 import { Result, Option, EventoResult, exception2Result } from "@adviser/cement";
-import { settingsAreAnyoneReadable, isActiveCachedSuggestion, isActiveDbAcl, isActiveTheme, isActiveLayoutArchetype, isActiveFlourishes, isActiveEnv, isActiveIconDescription, isActiveModelSettingRuntime, isActiveModelSettingCodegen, isActiveModelSettingImg, isActiveColorTheme, isActiveStyle, isDraftStyle, isActiveAnonWrite, isActivePrivacySensitive, isActiveSkills, isReqEnsureAppSettingsColorTheme, isReqEnsureAppSettingsStyle, isReqEnsureAppSettingsDraftStyle, isReqEnsureAppSettingsStylePublish, isReqEnsureAppSettingsIconDescription, isReqEnsureAppSettingsIconRegen, isReqEnsureAppSettingsImg, isReqEnsureAppSettingsPrivacySensitive, isReqEnsureAppSettingsSkills, isReqEnsureAppSettingsTheme, isReqEnsureAppSettingsVariety, isActiveTitle, isEnableRequest, isReqEnsureAppSettings, isReqEnsureAppSettingsRuntime, isReqEnsureAppSettingsCodegen, isReqEnsureAppSettingsCachedSuggestion, isReqEnsureAppSettingsCachedSuggestionBless, isReqEnsureAppSettingsDbAcl, isReqEnsureAppSettingsDbAclRemove, isReqEnsureAppSettingsEnv, isReqEnsureAppSettingsSecretSet, isReqEnsureAppSettingsSecretRemove, isReqEnsureAppSettingsTitle, isReqEnsureAppSettingsRecommendedAdd, isReqEnsureAppSettingsRecommendedRemove, isReqEnsureAppSettingsRecommendedMask, isActiveRecommendedCurated, isActiveRecommendedMasked, RECOMMENDED_CURATED_CAP, RECOMMENDED_MASKED_CAP, isReqEnsureAppSettingsAnonWrite, isReqEnsureAppSettingsPosture, isActivePosture, postureLegacySettings, wizardDefaultPosture, isReqPublicAccess, isReqRequest, } from "@vibes.diy/api-types";
+import { settingsAreAnyoneReadable, isActiveAppNature, effectiveAppNature, isReqEnsureAppSettingsAppNature, isActiveCachedSuggestion, isActiveDbAcl, isActiveTheme, isActiveLayoutArchetype, isActiveFlourishes, isActiveEnv, isActiveIconDescription, isActiveModelSettingRuntime, isActiveModelSettingCodegen, isActiveModelSettingImg, isActiveColorTheme, isActiveStyle, isDraftStyle, isActiveAnonWrite, isActiveEditorWritesOnly, isActivePrivacySensitive, isActiveSkills, isReqEnsureAppSettingsColorTheme, isReqEnsureAppSettingsStyle, isReqEnsureAppSettingsDraftStyle, isReqEnsureAppSettingsStylePublish, isReqEnsureAppSettingsIconDescription, isReqEnsureAppSettingsIconRegen, isReqEnsureAppSettingsImg, isReqEnsureAppSettingsPrivacySensitive, isReqEnsureAppSettingsSkills, isReqEnsureAppSettingsTheme, isReqEnsureAppSettingsVariety, isActiveTitle, isEnableRequest, isReqEnsureAppSettings, isReqEnsureAppSettingsRuntime, isReqEnsureAppSettingsCodegen, isReqEnsureAppSettingsCachedSuggestion, isReqEnsureAppSettingsCachedSuggestionBless, isReqEnsureAppSettingsDbAcl, isReqEnsureAppSettingsDbAclRemove, isReqEnsureAppSettingsEnv, isReqEnsureAppSettingsSecretSet, isReqEnsureAppSettingsSecretRemove, isReqEnsureAppSettingsTitle, isReqEnsureAppSettingsRecommendedAdd, isReqEnsureAppSettingsRecommendedRemove, isReqEnsureAppSettingsRecommendedMask, isActiveRecommendedCurated, isActiveRecommendedMasked, RECOMMENDED_CURATED_CAP, RECOMMENDED_MASKED_CAP, isReqEnsureAppSettingsAnonWrite, isReqEnsureAppSettingsEditorWritesOnly, isReqEnsureAppSettingsPosture, isActivePosture, postureLegacySettings, wizardDefaultPosture, isReqPublicAccess, isReqRequest, } from "@vibes.diy/api-types";
 import { ensureLogger } from "@vibes.diy/identity";
 import { unwrapMsgBase } from "../unwrap-msg-base.js";
 import { optAuth } from "../check-auth.js";
@@ -11,6 +11,7 @@ import { stampableStyleForTheme, styleForLookColorway, styleForTheme } from "../
 import { THEME_SLUGS, isKnownThemeSlug } from "@vibes.diy/prompts/themes/theme-slugs.js";
 import { hasLookColorways, validateColorwayPinForLook, validateVarietyPinForLook } from "@vibes.diy/prompts/themes/looks/index.js";
 import { buildEnsureEntryResult, sqlPromoteDraftStyle, sqlRemove, sqlUpsert, sqlUpsertMulti } from "./app-settings-sql-upsert.js";
+import { LOWER_OWNER_ONLY, LOWER_STAMP_FAILED, privacySensitiveLowerCoverage, runLowerAfterFlipHookForTests, runLowerBeforeFlipHookForTests, stampEveryKnownWriter, } from "./privacy-sensitive-lower.js";
 import { readComposedSettings } from "./app-setting-items.js";
 import { selectAppSettingsRecord } from "./app-settings-snapshot.js";
 import { applySecretOp, redactModelApiKeys, redactSecretEntries } from "./app-settings-secrets.js";
@@ -81,6 +82,61 @@ async function withdrawAppClipCardIfReadRemoved(vctx, target, before, after) {
         return;
     await enqueueAppClipDeactivate(vctx, { ownerHandle: target.ownerHandle, appSlug: target.appSlug });
 }
+async function applyPrivacySensitiveWrite(vctx, args) {
+    const { res, settings, value, now } = args;
+    const current = settings.find(isActivePrivacySensitive);
+    const currentlySensitive = current?.sensitive === true;
+    const isLower = value === false && currentlySensitive;
+    if (isLower && args.mayLower === false)
+        return [res.settings, LOWER_OWNER_ONLY];
+    if (isLower) {
+        const coverage = args.skipCoverage === true ? { ok: true } : privacySensitiveLowerCoverage({ flag: current });
+        if (coverage.ok === false)
+            return [res.settings, coverage.error];
+        const rStamp = await exception2Result(() => stampEveryKnownWriter(vctx, { ownerHandle: res.ownerHandle, appSlug: res.appSlug }));
+        if (rStamp.isErr()) {
+            console.error("privacy-sensitive lower: join-stamp pass failed, flag left on:", rStamp.Err());
+            return [res.settings, LOWER_STAMP_FAILED];
+        }
+        await runLowerBeforeFlipHookForTests();
+    }
+    const genuineRaise = value === true && currentlySensitive === false;
+    const nextFlag = value === false
+        ? { type: "active.privacy-sensitive", sensitive: false }
+        : genuineRaise || current === undefined
+            ? { type: "active.privacy-sensitive", sensitive: true, joinStampsSince: now }
+            : current;
+    const [nextSettings, error] = await sqlUpsertMulti(vctx, res, settings, {
+        upserts: args.withNature === undefined ? [nextFlag] : [args.withNature, nextFlag],
+    });
+    if (isLower && error === undefined) {
+        const rRestamp = await exception2Result(async () => {
+            await runLowerAfterFlipHookForTests();
+            return stampEveryKnownWriter(vctx, { ownerHandle: res.ownerHandle, appSlug: res.appSlug });
+        });
+        if (rRestamp.isErr()) {
+            console.error("privacy-sensitive lower: post-flip re-stamp failed, restoring the flag:", rRestamp.Err());
+            const previousNature = settings.find(isActiveAppNature);
+            const [restored] = await sqlUpsertMulti(vctx, res, args.withNature === undefined ? settings : [...settings, args.withNature], {
+                upserts: [
+                    current ?? { type: "active.privacy-sensitive", sensitive: true },
+                    ...(previousNature === undefined ? [] : [previousNature]),
+                ],
+                removeMatch: (e) => args.withNature !== undefined && previousNature === undefined && isActiveAppNature(e),
+            });
+            const rTeardown = await exception2Result(() => revokeAppAudienceKeysForUnsetSubjects(vctx, { ownerHandle: res.ownerHandle, appSlug: res.appSlug }));
+            if (rTeardown.isErr())
+                console.error("restore teardown failed (degrade-to-resubscribe):", rTeardown.Err());
+            return [restored, LOWER_STAMP_FAILED];
+        }
+    }
+    if (error === undefined && genuineRaise) {
+        const rRaise = await exception2Result(() => revokeAppAudienceKeysForUnsetSubjects(vctx, { ownerHandle: res.ownerHandle, appSlug: res.appSlug }));
+        if (rRaise.isErr())
+            console.error("audience sensitive-raise teardown failed (degrade-to-resubscribe):", rRaise.Err());
+    }
+    return [nextSettings, error];
+}
 export async function ensureAppSettings(vctx, req, userId, opts) {
     const rPrev = await selectAppSettingsRecord(vctx, req.ownerHandle, req.appSlug);
     if (rPrev.isErr()) {
@@ -132,6 +188,20 @@ export async function ensureAppSettings(vctx, req, userId, opts) {
             created: now,
         });
     }
+    if (isReqEnsureAppSettingsEditorWritesOnly(req) && isOwnerOrDeveloper === false) {
+        return Result.Ok({
+            type: "vibes.diy.res-ensure-app-settings",
+            userId: record?.UserSlugBindings.userId ?? "------",
+            appSlug: req.appSlug,
+            ledger: record?.AppSlugBindings.ledger ?? req.appSlug,
+            ownerHandle: req.ownerHandle,
+            tenant: record?.UserSlugBindings.tenant ?? req.ownerHandle,
+            error: "owner-only:editor-writes-only",
+            settings: buildEnsureEntryResult([]),
+            updated: now,
+            created: now,
+        });
+    }
     if (userId === undefined || (isOwnerOrDeveloper === false && isAdminBless === false && isAdminPrivacySensitiveLower === false)) {
         if (!record) {
             return Result.Ok({
@@ -194,10 +264,17 @@ export async function ensureAppSettings(vctx, req, userId, opts) {
     };
     if (isAdminBless || isAdminPrivacySensitiveLower) {
         if (isReqEnsureAppSettingsPrivacySensitive(req)) {
-            [res.settings, res.error] = await sqlUpsert(vctx, res, settings, isActivePrivacySensitive, () => ({ type: "active.privacy-sensitive", sensitive: false }));
+            [res.settings, res.error] = await applyPrivacySensitiveWrite(vctx, {
+                res,
+                settings,
+                value: false,
+                now,
+                skipCoverage: true,
+                mayLower: true,
+            });
             if (res.error === undefined) {
                 logAdminOverride(vctx, {
-                    op: "privacy-sensitive-lower",
+                    op: "privacy-sensitive-lower-on-behalf",
                     actingUserId: approverUserId,
                     ownerHandle: req.ownerHandle,
                     appSlug: req.appSlug,
@@ -425,26 +502,35 @@ export async function ensureAppSettings(vctx, req, userId, opts) {
             break;
         }
         case isReqEnsureAppSettingsPrivacySensitive(req): {
+            [res.settings, res.error] = await applyPrivacySensitiveWrite(vctx, {
+                res,
+                settings,
+                value: req.privacySensitive,
+                now,
+                mayLower: isOwner,
+            });
+            break;
+        }
+        case isReqEnsureAppSettingsAppNature(req): {
+            const wanted = req.appNature;
             const currentlySensitive = settings.find(isActivePrivacySensitive)?.sensitive === true;
-            const isElevatedLower = req.privacySensitive === false && currentlySensitive && isPlatformAdminHere;
-            if (req.privacySensitive === false && currentlySensitive && !isElevatedLower) {
-                res.error = "privacy-sensitive:owner-lower-forbidden";
+            if (wanted === "sensitive") {
+                [res.settings, res.error] = await applyPrivacySensitiveWrite(vctx, { res, settings, value: true, now, mayLower: isOwner });
                 break;
             }
-            [res.settings, res.error] = await sqlUpsert(vctx, res, settings, isActivePrivacySensitive, () => ({ type: "active.privacy-sensitive", sensitive: req.privacySensitive }));
-            if (isElevatedLower && res.error === undefined) {
-                logAdminOverride(vctx, {
-                    op: "privacy-sensitive-lower",
-                    actingUserId: approverUserId,
-                    ownerHandle: req.ownerHandle,
-                    appSlug: req.appSlug,
+            const natureRow = { type: "active.app-nature", nature: wanted };
+            if (currentlySensitive) {
+                [res.settings, res.error] = await applyPrivacySensitiveWrite(vctx, {
+                    res,
+                    settings,
+                    value: false,
+                    now,
+                    mayLower: isOwner,
+                    withNature: natureRow,
                 });
+                break;
             }
-            if (res.error === undefined && req.privacySensitive === true && currentlySensitive === false) {
-                const rRaise = await exception2Result(() => revokeAppAudienceKeysForUnsetSubjects(vctx, { ownerHandle: res.ownerHandle, appSlug: res.appSlug }));
-                if (rRaise.isErr())
-                    console.error("audience sensitive-raise teardown failed (degrade-to-resubscribe):", rRaise.Err());
-            }
+            [res.settings, res.error] = await sqlUpsert(vctx, res, settings, isActiveAppNature, () => natureRow);
             break;
         }
         case isReqEnsureAppSettingsRuntime(req):
@@ -561,7 +647,12 @@ export async function ensureAppSettings(vctx, req, userId, opts) {
             break;
         }
         case isReqEnsureAppSettingsPosture(req): {
-            const posture = req.posture === "default" ? wizardDefaultPosture(settings.find(isActivePrivacySensitive)?.sensitive) : req.posture;
+            const posture = req.posture === "default"
+                ? wizardDefaultPosture(effectiveAppNature({
+                    privacySensitive: settings.find(isActivePrivacySensitive)?.sensitive,
+                    stored: settings.find(isActiveAppNature)?.nature,
+                }))
+                : req.posture;
             const legacy = postureLegacySettings(posture);
             const prevAutoAcceptRole = settings.find(isEnableRequest)?.autoAcceptRole;
             [res.settings, res.error] = await sqlUpsertMulti(vctx, res, settings, {
@@ -598,6 +689,12 @@ export async function ensureAppSettings(vctx, req, userId, opts) {
                 mode: req.anonWrite,
             }));
             break;
+        case isReqEnsureAppSettingsEditorWritesOnly(req):
+            [res.settings, res.error] = await sqlUpsert(vctx, res, settings, isActiveEditorWritesOnly, () => ({
+                type: "active.editor-writes-only",
+                enable: req.editorWritesOnly,
+            }));
+            break;
         case isReqEnsureAppSettingsDbAcl(req):
             if (req.dbAcl.dbName === "*") {
                 res.error = "db-acl:wildcard-reserved";