@vibes.diy/api-svc 14.3.65 → 14.3.67

package/intern/guest-principal-claim.js

@@ -0,0 +1,208 @@
+import { exception2Result, Result } from "@adviser/cement";
+import { and, eq, gt, inArray, isNull, max, ne, or, sql } from "drizzle-orm";
+import { isGuestPrincipal } from "@vibes.diy/api-types";
+import { AGENT_SESSION_RECORD_ID } from "./agent-session-store.js";
+import { readGuestPrincipal } from "./guest-principal-store.js";
+import { openTurnValues } from "./open-turn-store.js";
+export async function countPrincipalRows(db, t, userId) {
+    const n = async (q) => (await q).length;
+    return {
+        "UserSlugBindings.userId": await n(db.select({ v: t.handleBinding.userId }).from(t.handleBinding).where(eq(t.handleBinding.userId, userId))),
+        "Apps.userId": await n(db.select({ v: t.apps.userId }).from(t.apps).where(eq(t.apps.userId, userId))),
+        "Apps.deployerUserId": await n(db.select({ v: t.apps.userId }).from(t.apps).where(eq(t.apps.deployerUserId, userId))),
+        "ChatContexts.userId": await n(db.select({ v: t.chatContexts.chatId }).from(t.chatContexts).where(eq(t.chatContexts.userId, userId))),
+        "MintJobs.userId": await n(db.select({ v: t.mintJobs.chatId }).from(t.mintJobs).where(eq(t.mintJobs.userId, userId))),
+        "OpenTurns.userId": await n(db.select({ v: t.openTurns.chatId }).from(t.openTurns).where(eq(t.openTurns.userId, userId))),
+        "PromptContexts.userId": await n(db.select({ v: t.promptContexts.promptId }).from(t.promptContexts).where(eq(t.promptContexts.userId, userId))),
+        "ApplicationChats.userId": await n(db.select({ v: t.applicationChats.chatId }).from(t.applicationChats).where(eq(t.applicationChats.userId, userId))),
+        "UserSettings.userId": await n(db.select({ v: t.userSettings.userId }).from(t.userSettings).where(eq(t.userSettings.userId, userId))),
+        "AppSettings.userId": await n(db.select({ v: t.appSettings.appSlug }).from(t.appSettings).where(eq(t.appSettings.userId, userId))),
+        "AppSettingItems.userId": await n(db.select({ v: t.appSettingItems.appSlug }).from(t.appSettingItems).where(eq(t.appSettingItems.userId, userId))),
+        "HandleSettings.userId": await n(db.select({ v: t.handleSettings.handle }).from(t.handleSettings).where(eq(t.handleSettings.userId, userId))),
+        "RequestGrants.userId": await n(db.select({ v: t.requestGrants.appSlug }).from(t.requestGrants).where(eq(t.requestGrants.userId, userId))),
+        "RequestGrants.foreignUserId": await n(db.select({ v: t.requestGrants.appSlug }).from(t.requestGrants).where(eq(t.requestGrants.foreignUserId, userId))),
+        "DeveloperGrants.userId": await n(db.select({ v: t.developerGrants.appSlug }).from(t.developerGrants).where(eq(t.developerGrants.userId, userId))),
+        "DeveloperGrants.devUserId": await n(db.select({ v: t.developerGrants.appSlug }).from(t.developerGrants).where(eq(t.developerGrants.devUserId, userId))),
+        "AppDocuments.userId": await n(db.select({ v: t.appDocuments.docId }).from(t.appDocuments).where(eq(t.appDocuments.userId, userId))),
+        "SocialInvites.redeemedByUserId": await n(db.select({ v: t.socialInvites.redeemedByUserId }).from(t.socialInvites).where(eq(t.socialInvites.redeemedByUserId, userId))),
+        "InviteGrants.userId": await n(db.select({ v: t.inviteGrants.appSlug }).from(t.inviteGrants).where(eq(t.inviteGrants.userId, userId))),
+        "InviteGrants.tokenOrGrantUserId": await n(db.select({ v: t.inviteGrants.appSlug }).from(t.inviteGrants).where(eq(t.inviteGrants.tokenOrGrantUserId, userId))),
+        "AssetUploads.userId": await n(db.select({ v: t.assetUploads.userId }).from(t.assetUploads).where(eq(t.assetUploads.userId, userId))),
+        "Notifications.userId": await n(db.select({ v: t.notifications.userId }).from(t.notifications).where(eq(t.notifications.userId, userId))),
+        "Notifications.actorUserId": await n(db.select({ v: t.notifications.userId }).from(t.notifications).where(eq(t.notifications.actorUserId, userId))),
+        "NotificationDigests.userId": await n(db.select({ v: t.notificationDigests.userId }).from(t.notificationDigests).where(eq(t.notificationDigests.userId, userId))),
+        "GithubRepoRoutes.installedByUserId": await n(db.select({ v: t.githubRepoRoutes.appSlug }).from(t.githubRepoRoutes).where(eq(t.githubRepoRoutes.installedByUserId, userId))),
+        "SignupAttributions.userId": await n(db.select({ v: t.signupAttributions.userId }).from(t.signupAttributions).where(eq(t.signupAttributions.userId, userId))),
+        "ThirdPartyGrants.userId": await n(db.select({ v: t.thirdPartyGrants.userId }).from(t.thirdPartyGrants).where(eq(t.thirdPartyGrants.userId, userId))),
+        "ThirdPartyConsents.userId": await n(db.select({ v: t.thirdPartyConsents.userId }).from(t.thirdPartyConsents).where(eq(t.thirdPartyConsents.userId, userId))),
+        "ConnectionApprovals.userId": await n(db.select({ v: t.connectionApprovals.userId }).from(t.connectionApprovals).where(eq(t.connectionApprovals.userId, userId))),
+        "AppContentOrdinals.userId": await n(db.select({ v: t.appContentOrdinals.userId }).from(t.appContentOrdinals).where(eq(t.appContentOrdinals.userId, userId))),
+        "AppPublicNames.ownerUserId": await n(db.select({ v: t.appPublicNames.ownerUserId }).from(t.appPublicNames).where(eq(t.appPublicNames.ownerUserId, userId))),
+    };
+}
+export async function rekeyGuestPrincipal(db, t, guest, account) {
+    const guestSlugs = await db.selectDistinct({ appSlug: t.apps.appSlug }).from(t.apps).where(eq(t.apps.userId, guest));
+    for (const { appSlug } of guestSlugs) {
+        const [top] = await db
+            .select({ seq: max(t.apps.releaseSeq) })
+            .from(t.apps)
+            .where(and(eq(t.apps.userId, account), eq(t.apps.appSlug, appSlug)));
+        const offset = top?.seq ?? 0;
+        await db
+            .update(t.apps)
+            .set({ userId: account, releaseSeq: sql `${t.apps.releaseSeq} + ${offset}` })
+            .where(and(eq(t.apps.userId, guest), eq(t.apps.appSlug, appSlug)));
+    }
+    await db.update(t.apps).set({ deployerUserId: account }).where(eq(t.apps.deployerUserId, guest));
+    const rg = t.requestGrants;
+    const asked = await db
+        .select({ userId: rg.userId, appSlug: rg.appSlug, ownerHandle: rg.ownerHandle })
+        .from(rg)
+        .where(eq(rg.foreignUserId, guest));
+    for (const row of asked) {
+        const key = and(eq(rg.userId, row.userId), eq(rg.appSlug, row.appSlug), eq(rg.ownerHandle, row.ownerHandle));
+        const existing = await db
+            .select({ v: rg.foreignUserId })
+            .from(rg)
+            .where(and(key, eq(rg.foreignUserId, account)));
+        if (existing.length > 0)
+            await db.delete(rg).where(and(key, eq(rg.foreignUserId, guest)));
+    }
+    await db.update(rg).set({ foreignUserId: account }).where(eq(rg.foreignUserId, guest));
+    await db.update(rg).set({ userId: account }).where(eq(rg.userId, guest));
+    const nt = t.notifications;
+    const taken = (await db.select({ dedupeKey: nt.dedupeKey }).from(nt).where(eq(nt.userId, account)))
+        .map((r) => r.dedupeKey)
+        .filter((k) => typeof k === "string");
+    if (taken.length > 0)
+        await db.delete(nt).where(and(eq(nt.userId, guest), inArray(nt.dedupeKey, taken)));
+    await db.update(nt).set({ userId: account }).where(eq(nt.userId, guest));
+    await db.update(nt).set({ actorUserId: account }).where(eq(nt.actorUserId, guest));
+    const tg = t.thirdPartyGrants;
+    const providers = (await db.select({ provider: tg.provider }).from(tg).where(eq(tg.userId, account))).map((r) => r.provider);
+    if (providers.length > 0)
+        await db.delete(tg).where(and(eq(tg.userId, guest), inArray(tg.provider, providers)));
+    await db.update(tg).set({ userId: account }).where(eq(tg.userId, guest));
+    const us = t.userSettings;
+    if ((await db.select({ v: us.userId }).from(us).where(eq(us.userId, account))).length > 0)
+        await db.delete(us).where(eq(us.userId, guest));
+    else
+        await db.update(us).set({ userId: account }).where(eq(us.userId, guest));
+    const nd = t.notificationDigests;
+    if ((await db.select({ v: nd.userId }).from(nd).where(eq(nd.userId, account))).length > 0)
+        await db.delete(nd).where(eq(nd.userId, guest));
+    else
+        await db.update(nd).set({ userId: account }).where(eq(nd.userId, guest));
+    const sa = t.signupAttributions;
+    if ((await db.select({ v: sa.userId }).from(sa).where(eq(sa.userId, account))).length > 0)
+        await db.delete(sa).where(eq(sa.userId, guest));
+    else
+        await db.update(sa).set({ userId: account }).where(eq(sa.userId, guest));
+    await db.update(t.handleBinding).set({ userId: account }).where(eq(t.handleBinding.userId, guest));
+    await db.update(t.chatContexts).set({ userId: account }).where(eq(t.chatContexts.userId, guest));
+    await db.update(t.mintJobs).set({ userId: account }).where(eq(t.mintJobs.userId, guest));
+    await db.update(t.openTurns).set({ userId: account }).where(eq(t.openTurns.userId, guest));
+    await db.update(t.promptContexts).set({ userId: account }).where(eq(t.promptContexts.userId, guest));
+    await db.update(t.applicationChats).set({ userId: account }).where(eq(t.applicationChats.userId, guest));
+    await db.update(t.appSettings).set({ userId: account }).where(eq(t.appSettings.userId, guest));
+    await db.update(t.appSettingItems).set({ userId: account }).where(eq(t.appSettingItems.userId, guest));
+    await db.update(t.handleSettings).set({ userId: account }).where(eq(t.handleSettings.userId, guest));
+    await db.update(t.developerGrants).set({ userId: account }).where(eq(t.developerGrants.userId, guest));
+    await db.update(t.developerGrants).set({ devUserId: account }).where(eq(t.developerGrants.devUserId, guest));
+    await db.update(t.appDocuments).set({ userId: account }).where(eq(t.appDocuments.userId, guest));
+    await db.update(t.socialInvites).set({ redeemedByUserId: account }).where(eq(t.socialInvites.redeemedByUserId, guest));
+    await db.update(t.inviteGrants).set({ userId: account }).where(eq(t.inviteGrants.userId, guest));
+    await db.update(t.inviteGrants).set({ tokenOrGrantUserId: account }).where(eq(t.inviteGrants.tokenOrGrantUserId, guest));
+    await db.update(t.assetUploads).set({ userId: account }).where(eq(t.assetUploads.userId, guest));
+    await db.update(t.githubRepoRoutes).set({ installedByUserId: account }).where(eq(t.githubRepoRoutes.installedByUserId, guest));
+    await db.update(t.thirdPartyConsents).set({ userId: account }).where(eq(t.thirdPartyConsents.userId, guest));
+    await db.update(t.connectionApprovals).set({ userId: account }).where(eq(t.connectionApprovals.userId, guest));
+    await db.update(t.appContentOrdinals).set({ userId: account }).where(eq(t.appContentOrdinals.userId, guest));
+    await db.update(t.appPublicNames).set({ ownerUserId: account }).where(eq(t.appPublicNames.ownerUserId, guest));
+}
+async function guestHasOpenTurn(db, t, guest, now) {
+    const ot = t.openTurns;
+    const rows = await db
+        .select({ chatId: ot.chatId })
+        .from(ot)
+        .where(and(eq(ot.userId, guest), eq(ot.status, "open"), ne(ot.promptId, AGENT_SESSION_RECORD_ID), gt(ot.deadlineAt, now.toISOString())))
+        .limit(1);
+    return rows.length > 0;
+}
+export const GUEST_PRINCIPAL_CLAIMED = "guest-principal-claimed: sign in again to keep building";
+class Refused extends Error {
+}
+export async function admitGuestTurn(vctx, input) {
+    const loaded = await readGuestPrincipal(vctx, input.userId);
+    if (loaded.isErr())
+        return Result.Err(loaded.Err());
+    const row = loaded.Ok();
+    if (row === undefined)
+        return Result.Err(GUEST_PRINCIPAL_CLAIMED);
+    const gb = vctx.sql.tables.guestBuilds;
+    const admitted = await exception2Result(() => vctx.sql.db.transaction(async (tx) => {
+        const held = await tx
+            .update(gb)
+            .set({ updated: new Date().toISOString() })
+            .where(and(eq(gb.chatId, row.id), isNull(gb.claimedUserId), eq(gb.status, "issued")))
+            .returning({ id: gb.chatId });
+        if (held.length !== 1)
+            throw new Refused();
+        await tx.insert(vctx.sql.tables.openTurns).values(openTurnValues(input)).onConflictDoNothing();
+    }));
+    if (admitted.isErr()) {
+        return admitted.Err() instanceof Refused ? Result.Err(GUEST_PRINCIPAL_CLAIMED) : Result.Err(admitted.Err());
+    }
+    return Result.Ok(undefined);
+}
+async function handlesOf(vctx, userId) {
+    const hb = vctx.sql.tables.handleBinding;
+    const rows = await exception2Result(() => vctx.sql.db.select({ handle: hb.handle }).from(hb).where(eq(hb.userId, userId)));
+    if (rows.isErr())
+        return Result.Err(rows.Err());
+    return Result.Ok(rows.Ok().map((r) => r.handle));
+}
+export async function claimGuestPrincipal(vctx, input, now = new Date()) {
+    if (isGuestPrincipal(input.accountUserId))
+        return Result.Err("guest-claim-requires-account");
+    const loaded = await readGuestPrincipal(vctx, input.guestUserId);
+    if (loaded.isErr())
+        return Result.Err(loaded.Err());
+    const row = loaded.Ok();
+    if (row === undefined || row.jti !== input.jti)
+        return Result.Err("guest-principal-unavailable");
+    if (row.claimedUserId !== null && row.claimedUserId !== input.accountUserId) {
+        return Result.Err("guest-principal-claimed-by-another-account");
+    }
+    const handles = await handlesOf(vctx, input.guestUserId);
+    if (handles.isErr())
+        return Result.Err(handles.Err());
+    const busyOutside = await exception2Result(() => guestHasOpenTurn(vctx.sql.db, vctx.sql.tables, input.guestUserId, now));
+    if (busyOutside.isErr())
+        return Result.Err(busyOutside.Err());
+    if (busyOutside.Ok())
+        return Result.Ok({ status: "busy", handles: handles.Ok() });
+    const gb = vctx.sql.tables.guestBuilds;
+    const merged = await exception2Result(() => vctx.sql.db.transaction(async (tx) => {
+        const marked = await tx
+            .update(gb)
+            .set({ claimedUserId: input.accountUserId, status: "claimed", updated: now.toISOString() })
+            .where(and(eq(gb.chatId, row.id), or(isNull(gb.claimedUserId), eq(gb.claimedUserId, input.accountUserId))))
+            .returning({ id: gb.chatId });
+        if (marked.length !== 1)
+            return "taken";
+        if (await guestHasOpenTurn(tx, vctx.sql.tables, input.guestUserId, now))
+            throw new Refused();
+        await rekeyGuestPrincipal(tx, vctx.sql.tables, input.guestUserId, input.accountUserId);
+        return "claimed";
+    }));
+    if (merged.isErr()) {
+        if (merged.Err() instanceof Refused)
+            return Result.Ok({ status: "busy", handles: handles.Ok() });
+        return Result.Err(merged.Err());
+    }
+    if (merged.Ok() === "taken")
+        return Result.Err("guest-principal-claimed-by-another-account");
+    return Result.Ok({ status: "claimed", handles: handles.Ok() });
+}
+//# sourceMappingURL=guest-principal-claim.js.map

package/intern/guest-principal-claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-principal-claim.js","sourceRoot":"","sources":["../../jsr/intern/guest-principal-claim.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAsB,MAAM,sBAAsB,CAAC;AAqC1E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAM,EAAE,CAAS,EAAE,MAAc;IACxE,MAAM,CAAC,GAAG,KAAK,EAAE,CAAqB,EAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7E,OAAO;QACL,yBAAyB,EAAE,MAAM,CAAC,CAChC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACzG;QACD,aAAa,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrG,qBAAqB,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QACrH,qBAAqB,EAAE,MAAM,CAAC,CAC5B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACtG;QACD,iBAAiB,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrH,kBAAkB,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzH,uBAAuB,EAAE,MAAM,CAAC,CAC9B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAC9G;QACD,yBAAyB,EAAE,MAAM,CAAC,CAChC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAClH;QACD,qBAAqB,EAAE,MAAM,CAAC,CAC5B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACtG;QACD,oBAAoB,EAAE,MAAM,CAAC,CAC3B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACpG;QACD,wBAAwB,EAAE,MAAM,CAAC,CAC/B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAChH;QACD,uBAAuB,EAAE,MAAM,CAAC,CAC9B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAC5G;QACD,sBAAsB,EAAE,MAAM,CAAC,CAC7B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAC1G;QACD,6BAA6B,EAAE,MAAM,CAAC,CACpC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CACjH;QACD,wBAAwB,EAAE,MAAM,CAAC,CAC/B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAChH;QACD,2BAA2B,EAAE,MAAM,CAAC,CAClC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CACnH;QACD,qBAAqB,EAAE,MAAM,CAAC,CAC5B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACrG;QACD,gCAAgC,EAAE,MAAM,CAAC,CACvC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAC7H;QACD,qBAAqB,EAAE,MAAM,CAAC,CAC5B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACvG;QACD,iCAAiC,EAAE,MAAM,CAAC,CACxC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CACnH;QACD,qBAAqB,EAAE,MAAM,CAAC,CAC5B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACtG;QACD,sBAAsB,EAAE,MAAM,CAAC,CAC7B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACzG;QACD,2BAA2B,EAAE,MAAM,CAAC,CAClC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAC9G;QACD,4BAA4B,EAAE,MAAM,CAAC,CACnC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAC3H;QACD,oCAAoC,EAAE,MAAM,CAAC,CAC3C,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAC9H;QACD,2BAA2B,EAAE,MAAM,CAAC,CAClC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACxH;QACD,yBAAyB,EAAE,MAAM,CAAC,CAChC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAClH;QACD,2BAA2B,EAAE,MAAM,CAAC,CAClC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACxH;QACD,4BAA4B,EAAE,MAAM,CAAC,CACnC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAC3H;QACD,2BAA2B,EAAE,MAAM,CAAC,CAClC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACxH;QACD,4BAA4B,EAAE,MAAM,CAAC,CACnC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CACtH;KACF,CAAC;AACJ,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAM,EAAE,CAAS,EAAE,KAAa,EAAE,OAAe;IAIzF,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACrH,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,UAAU,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;aACvC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7B,MAAM,EAAE;aACL,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;aACd,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAA,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,MAAM,MAAM,EAAE,EAAE,CAAC;aAC3E,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;IAIjG,MAAM,EAAE,GAAG,CAAC,CAAC,aAAa,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;SAC/E,IAAI,CAAC,EAAE,CAAC;SACR,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7G,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC;aAC/B,IAAI,CAAC,EAAE,CAAC;aACR,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IACvF,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAGzE,MAAM,EAAE,GAAG,CAAC,CAAC,aAAa,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;SAChG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;IAGnF,MAAM,EAAE,GAAG,CAAC,CAAC,gBAAgB,CAAC;IAC9B,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC7H,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAChH,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAGzE,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;QACvF,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;;QAC7C,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9E,MAAM,EAAE,GAAG,CAAC,CAAC,mBAAmB,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;QACvF,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;;QAC7C,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9E,MAAM,EAAE,GAAG,CAAC,CAAC,kBAAkB,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;QACvF,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;;QAC7C,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAI9E,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACnG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACjG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACzF,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACrG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACzG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/F,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACvG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACrG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACvG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IAI7G,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACjG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;IACvH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACjG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;IACzH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACjG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/H,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7G,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/G,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7G,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;AACjH,CAAC;AAOD,KAAK,UAAU,gBAAgB,CAAC,EAAM,EAAE,CAAS,EAAE,KAAa,EAAE,GAAS;IACzE,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC;IACvB,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;SAC7B,IAAI,CAAC,EAAE,CAAC;SACR,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EACpB,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EACrB,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,uBAAuB,CAAC,EACxC,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CACrC,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAGD,MAAM,CAAC,MAAM,uBAAuB,GAAG,yDAAyD,CAAC;AAGjG,MAAM,OAAQ,SAAQ,KAAK;CAAG;AAO9B,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAiC,EAAE,KAAoB;IAC1F,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,EAAE,CAAC;IACxB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAC3C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,CAAC,EAAE,CAAC;aACV,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aAC1C,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;aACpF,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3C,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC;IACjG,CAAC,CAAC,CACH,CAAC;IACF,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC,GAAG,EAAE,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAoB,EAAE,MAAc;IAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3H,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACnD,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAoB,EACpB,KAA6F,EAC7F,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,IAAI,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,EAAE,CAAC;IACxB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACjG,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QAC5E,OAAO,MAAM,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IACzH,IAAI,WAAW,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,IAAI,WAAW,CAAC,EAAE,EAAE;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACzC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAyC,EAAE;QAK1E,MAAM,MAAM,GAAG,MAAM,EAAE;aACpB,MAAM,CAAC,EAAE,CAAC;aACV,GAAG,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;aAC1F,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aAC1G,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QAExC,IAAI,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7F,MAAM,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CACH,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACnB,IAAI,MAAM,CAAC,GAAG,EAAE,YAAY,OAAO;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,EAAE,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC"}

package/intern/guest-principal-store.d.ts

@@ -0,0 +1,31 @@
+import { Result } from "@adviser/cement";
+import type { FPApiToken } from "@vibes.diy/identity";
+import { type GuestPrincipalSession } from "@vibes.diy/api-types";
+import type { GuestPrincipalSigner } from "../guest-principal-token.js";
+import type { VibesApiSQLCtx } from "../types.js";
+export declare const GUEST_PRINCIPAL_LIFETIME_MS: number;
+export interface GuestPrincipalRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly jti: string;
+    readonly status: string;
+    readonly claimedUserId: string | null;
+    readonly expiresAt: string;
+    readonly plane: string;
+    readonly issuanceRequestId: string;
+    readonly created: string;
+}
+export declare function guestUserIdFor(id: string): string;
+export declare function guestIdOf(userId: string): string | undefined;
+export declare function readGuestPrincipal(vctx: Pick<VibesApiSQLCtx, "sql">, userId: string): Promise<Result<GuestPrincipalRow | undefined>>;
+export declare function guestPrincipalIsLive(row: GuestPrincipalRow, jti: string, now?: Date): boolean;
+export declare function guestPrincipalTokenApi(args: {
+    readonly signer: GuestPrincipalSigner;
+    readonly sql: () => Pick<VibesApiSQLCtx, "sql">;
+}): FPApiToken;
+export interface IssueGuestPrincipalInput {
+    readonly plane: string;
+    readonly issuanceRequestId: string;
+    readonly draw?: () => string;
+}
+export declare function issueGuestPrincipal(vctx: VibesApiSQLCtx, input: IssueGuestPrincipalInput, now?: Date): Promise<Result<GuestPrincipalSession>>;

package/intern/guest-principal-store.js

@@ -0,0 +1,159 @@
+import { exception2Result, Result } from "@adviser/cement";
+import { and, eq } from "drizzle-orm";
+import { GUEST_PRINCIPAL_PREFIX, guestAccountClaims } from "@vibes.diy/api-types";
+import { dealUnboundWordSlug } from "./onboarding-handle.js";
+import { persistDefaultUserSlug, writeProvisionalHandleBinding } from "./ensure-slug-binding.js";
+export const GUEST_PRINCIPAL_LIFETIME_MS = 7 * 24 * 60 * 60 * 1000;
+export function guestUserIdFor(id) {
+    return `${GUEST_PRINCIPAL_PREFIX}${id}`;
+}
+export function guestIdOf(userId) {
+    return userId.startsWith(GUEST_PRINCIPAL_PREFIX) ? userId.slice(GUEST_PRINCIPAL_PREFIX.length) : undefined;
+}
+function toRow(row) {
+    return {
+        id: row.chatId,
+        userId: guestUserIdFor(row.chatId),
+        jti: row.jti,
+        status: row.status,
+        claimedUserId: row.claimedUserId ?? null,
+        expiresAt: row.expiresAt,
+        plane: row.plane,
+        issuanceRequestId: row.issuanceRequestId,
+        created: row.created,
+    };
+}
+export async function readGuestPrincipal(vctx, userId) {
+    const id = guestIdOf(userId);
+    if (id === undefined)
+        return Result.Ok(undefined);
+    const t = vctx.sql.tables.guestBuilds;
+    const read = await exception2Result(() => vctx.sql.db.select().from(t).where(eq(t.chatId, id)).limit(1));
+    if (read.isErr())
+        return Result.Err(read.Err());
+    const row = read.Ok()[0];
+    return Result.Ok(row === undefined ? undefined : toRow(row));
+}
+export function guestPrincipalIsLive(row, jti, now = new Date()) {
+    return row.jti === jti && row.claimedUserId === null && row.status === "issued" && row.expiresAt > now.toISOString();
+}
+export function guestPrincipalTokenApi(args) {
+    const verify = async (token) => {
+        const verified = await args.signer.verify(token);
+        if (verified.isErr())
+            return Result.Err(verified.Err());
+        const claims = verified.Ok();
+        const loaded = await readGuestPrincipal(args.sql(), claims.userId);
+        if (loaded.isErr())
+            return Result.Err(loaded.Err());
+        const row = loaded.Ok();
+        if (row === undefined || row.plane !== claims.plane || guestPrincipalIsLive(row, claims.jti) === false) {
+            return Result.Err("guest-principal-unavailable");
+        }
+        return Result.Ok({ type: "guest", token, claims: guestAccountClaims(claims) });
+    };
+    return { verify, decode: verify };
+}
+async function rowForRequest(vctx, input) {
+    const t = vctx.sql.tables.guestBuilds;
+    const found = await exception2Result(() => vctx.sql.db
+        .select()
+        .from(t)
+        .where(and(eq(t.plane, input.plane), eq(t.issuanceRequestId, input.issuanceRequestId)))
+        .limit(1));
+    if (found.isErr())
+        return Result.Err(found.Err());
+    const row = found.Ok()[0];
+    return Result.Ok(row === undefined ? undefined : toRow(row));
+}
+async function handleOf(vctx, userId) {
+    const hb = vctx.sql.tables.handleBinding;
+    const rows = await exception2Result(() => vctx.sql.db.select({ handle: hb.handle, created: hb.created }).from(hb).where(eq(hb.userId, userId)));
+    if (rows.isErr())
+        return Result.Err(rows.Err());
+    const earliest = [...rows.Ok()].sort((a, b) => a.created.localeCompare(b.created) || a.handle.localeCompare(b.handle))[0];
+    return Result.Ok(earliest?.handle);
+}
+async function ensureGuestHandle(vctx, userId, draw) {
+    const held = await handleOf(vctx, userId);
+    if (held.isErr())
+        return Result.Err(held.Err());
+    if (held.Ok() !== undefined)
+        return Result.Ok(held.Ok());
+    for (let attempt = 0; attempt < 3; attempt++) {
+        const dealt = await dealUnboundWordSlug(vctx, { draw });
+        if (dealt.isErr())
+            return Result.Err(dealt.Err());
+        const bound = await writeProvisionalHandleBinding(vctx, userId, dealt.Ok());
+        if (bound.isErr())
+            continue;
+        const persisted = await exception2Result(() => persistDefaultUserSlug(vctx, userId, bound.Ok().ownerHandle));
+        if (persisted.isErr())
+            return Result.Err(persisted.Err());
+        return Result.Ok(bound.Ok().ownerHandle);
+    }
+    return Result.Err("guest-handle-unavailable");
+}
+async function sessionFor(vctx, row, ownerHandle) {
+    const signer = vctx.guestPrincipalSigner;
+    if (signer === undefined)
+        return Result.Err("guest-principal-unavailable");
+    const signed = await signer.sign({
+        kind: "guest-principal",
+        plane: row.plane,
+        userId: row.userId,
+        jti: row.jti,
+        iat: Math.floor(Date.parse(row.created) / 1000),
+        exp: Math.floor(Date.parse(row.expiresAt) / 1000),
+    });
+    if (signed.isErr())
+        return Result.Err(signed.Err());
+    return Result.Ok({ token: signed.Ok().token, userId: row.userId, ownerHandle, expiresAt: row.expiresAt });
+}
+export async function issueGuestPrincipal(vctx, input, now = new Date()) {
+    const signer = vctx.guestPrincipalSigner;
+    if (signer === undefined)
+        return Result.Err("guest-principal-unavailable");
+    if (signer.plane !== input.plane)
+        return Result.Err("guest-principal-plane-mismatch");
+    const prior = await rowForRequest(vctx, input);
+    if (prior.isErr())
+        return Result.Err(prior.Err());
+    let row = prior.Ok();
+    if (row === undefined) {
+        const id = vctx.sthis.nextId(16).str;
+        const created = now.toISOString();
+        const inserted = await exception2Result(() => vctx.sql.db
+            .insert(vctx.sql.tables.guestBuilds)
+            .values({
+            chatId: id,
+            jti: vctx.sthis.nextId(32).str,
+            expiresAt: new Date(now.getTime() + GUEST_PRINCIPAL_LIFETIME_MS).toISOString(),
+            status: "issued",
+            revision: 0,
+            plane: input.plane,
+            issuanceRequestId: input.issuanceRequestId,
+            originalPrompt: "",
+            created,
+            updated: created,
+        })
+            .onConflictDoNothing());
+        if (inserted.isErr())
+            return Result.Err(inserted.Err());
+        const won = await rowForRequest(vctx, input);
+        if (won.isErr())
+            return Result.Err(won.Err());
+        row = won.Ok();
+    }
+    if (row === undefined)
+        return Result.Err("guest-principal-unavailable");
+    if (row.claimedUserId !== null)
+        return Result.Err("guest-principal-already-claimed");
+    if (row.expiresAt <= now.toISOString())
+        return Result.Err("guest-principal-expired");
+    const handle = await ensureGuestHandle(vctx, row.userId, input.draw);
+    if (handle.isErr())
+        return Result.Err(handle.Err());
+    return sessionFor(vctx, row, handle.Ok());
+}
+//# sourceMappingURL=guest-principal-store.js.map

package/intern/guest-principal-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-principal-store.js","sourceRoot":"","sources":["../../jsr/intern/guest-principal-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAA8B,MAAM,sBAAsB,CAAC;AAG9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAcjG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAcnE,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,GAAG,sBAAsB,GAAG,EAAE,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7G,CAAC;AAID,SAAS,KAAK,CAAC,GAAmB;IAChC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,MAAM;QACd,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QAClC,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;QACxC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAiC,EACjC,MAAc;IAEd,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAGD,MAAM,UAAU,oBAAoB,CAAC,GAAsB,EAAE,GAAW,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACxF,OAAO,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;AACvH,CAAC;AAOD,MAAM,UAAU,sBAAsB,CAAC,IAGtC;IACC,MAAM,MAAM,GAAG,KAAK,EAAE,KAAa,EAAyC,EAAE;QAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,EAAE,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;YACvG,OAAO,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAUD,KAAK,UAAU,aAAa,CAC1B,IAAoB,EACpB,KAA+B;IAE/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACxC,IAAI,CAAC,GAAG,CAAC,EAAE;SACR,MAAM,EAAE;SACR,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;SACtF,KAAK,CAAC,CAAC,CAAC,CACZ,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAoB,EAAE,MAAc;IAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACrG,CAAC;IACF,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AASD,KAAK,UAAU,iBAAiB,CAAC,IAAoB,EAAE,MAAc,EAAE,IAAmB;IACxF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,EAAE,EAAE,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAY,CAAC,CAAC;IACnE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAE5E,IAAI,KAAK,CAAC,KAAK,EAAE;YAAE,SAAS;QAC5B,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7G,IAAI,SAAS,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAoB,EACpB,GAAsB,EACtB,WAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;QAC/B,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QAC/C,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;KAClD,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;AAC5G,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAoB,EACpB,KAA+B,EAC/B,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,IAAI,GAAG,GAAG,KAAK,CAAC,EAAE,EAAE,CAAC;IACrB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAC3C,IAAI,CAAC,GAAG,CAAC,EAAE;aACR,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;aACnC,MAAM,CAAC;YACN,MAAM,EAAE,EAAE;YACV,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG;YAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,2BAA2B,CAAC,CAAC,WAAW,EAAE;YAC9E,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,cAAc,EAAE,EAAE;YAClB,OAAO;YACP,OAAO,EAAE,OAAO;SACjB,CAAC;aACD,mBAAmB,EAAE,CACzB,CAAC;QACF,IAAI,QAAQ,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QAExD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,GAAG,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9C,GAAG,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACxE,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACrF,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/intern/inflate-file-attachments.d.ts

@@ -1,6 +1,9 @@
-import type { ChatMessage } from "@vibes.diy/call-ai-v2";
+import type { ChatMessage, LLMMessage } from "@vibes.diy/call-ai-v2";
 import type { VibesApiSQLCtx } from "../types.js";
+export declare function dehydrateFileAttachments(messages: readonly LLMMessage[]): LLMMessage[];
 export declare function stripVibesFileBlocks(messages: readonly ChatMessage[]): ChatMessage[];
+export declare const MODEL_IMAGE_EDGE = 768;
+export declare const MODEL_IMAGE_MIME = "image/webp";
 export declare function inflateFileAttachments(vctx: VibesApiSQLCtx, args: {
     readonly messages: ChatMessage[];
     readonly scope?: {

package/intern/inflate-file-attachments.js

@@ -1,7 +1,8 @@
-import { exception2Result, stream2uint8array } from "@adviser/cement";
+import { exception2Result, Result, stream2uint8array } from "@adviser/cement";
 import { inArray, and, eq } from "drizzle-orm/sql/expressions";
 import { isFetchOkResult } from "@vibes.diy/api-types";
 import { ensureLogger } from "@vibes.diy/identity";
+import { isWebpMetadataLeak, transformToWebp, WEBP_RENDITION_MIME } from "./webp-rendition.js";
 const MAX_INLINE_TEXT_CHARS = 64_000;
 function bytesToBase64(bytes) {
     let binary = "";
@@ -11,6 +12,29 @@ function bytesToBase64(bytes) {
     }
     return btoa(binary);
 }
+const inflatedFrom = new WeakMap();
+export function dehydrateFileAttachments(messages) {
+    return messages.map((m) => {
+        if (m.role !== "user")
+            return m;
+        if (m.content.some((part) => inflatedFrom.has(part)) === false)
+            return m;
+        const content = [];
+        let lastGroup;
+        for (const part of m.content) {
+            const origin = inflatedFrom.get(part);
+            if (origin === undefined) {
+                lastGroup = undefined;
+                content.push(part);
+                continue;
+            }
+            if (origin.group !== lastGroup)
+                content.push(origin.ref);
+            lastGroup = origin.group;
+        }
+        return { ...m, content };
+    });
+}
 function unavailable(name) {
     return { type: "text", text: `[attachment unavailable: ${name}]` };
 }
@@ -19,6 +43,42 @@ export function stripVibesFileBlocks(messages) {
         ? { ...m, content: m.content.map((c) => (c.type === "vibes_file" ? unavailable(c.name) : c)) }
         : m);
 }
+export const MODEL_IMAGE_EDGE = 768;
+export const MODEL_IMAGE_MIME = WEBP_RENDITION_MIME;
+async function readAsset(vctx, assetURI) {
+    return exception2Result(async () => {
+        const fetched = await vctx.storage.fetch(assetURI);
+        if (!isFetchOkResult(fetched))
+            throw new Error(`asset fetch failed: ${assetURI}`);
+        return stream2uint8array(fetched.data);
+    });
+}
+async function modelSizedImage(vctx, args) {
+    const images = vctx.images;
+    const logger = ensureLogger(vctx.sthis, "inflateFileAttachments");
+    if (images !== undefined) {
+        const rSmall = await exception2Result(async () => {
+            const fetched = await vctx.storage.fetch(args.assetURI);
+            if (!isFetchOkResult(fetched))
+                throw new Error(`asset fetch failed: ${args.assetURI}`);
+            return transformToWebp(images, fetched.data, { width: MODEL_IMAGE_EDGE, height: MODEL_IMAGE_EDGE });
+        });
+        if (rSmall.isOk())
+            return Result.Ok({ kind: "image", bytes: rSmall.Ok(), mime: MODEL_IMAGE_MIME });
+        if (isWebpMetadataLeak(rSmall.Err())) {
+            logger.Warn().Err(rSmall).Str("assetURI", args.assetURI).Msg("model-sized image carried metadata; withholding the picture");
+            return Result.Ok({ kind: "withheld" });
+        }
+        logger.Warn().Err(rSmall).Str("assetURI", args.assetURI).Msg("model-sized image failed; sending the original");
+    }
+    else {
+        logger.Warn().Str("assetURI", args.assetURI).Msg("no Images binding; sending the original");
+    }
+    const rOriginal = await readAsset(vctx, args.assetURI);
+    if (rOriginal.isErr())
+        return Result.Err(rOriginal);
+    return Result.Ok({ kind: "image", bytes: rOriginal.Ok(), mime: args.mime });
+}
 export async function inflateFileAttachments(vctx, args) {
     const logger = ensureLogger(vctx.sthis, "inflateFileAttachments");
     const refs = [];
@@ -60,23 +120,31 @@ export async function inflateFileAttachments(vctx, args) {
         else if (ref.kind === "image" && !args.modelSupportsImages) {
             parts = [{ type: "text", text: `[Attached image ${ref.name} — the current model cannot view images]` }];
         }
-        else {
-            const rBytes = await exception2Result(async () => {
-                const fetched = await vctx.storage.fetch(row.assetURI);
-                if (!isFetchOkResult(fetched))
-                    throw new Error(`asset fetch failed: ${row.assetURI}`);
-                return stream2uint8array(fetched.data);
-            });
-            if (rBytes.isErr()) {
-                logger.Warn().Err(rBytes).Any({ uploadId: ref.uploadId }).Msg("attachment fetch failed");
+        else if (ref.kind === "image") {
+            const rImage = await modelSizedImage(vctx, { assetURI: row.assetURI, mime: row.mimeType ?? ref.mimeType });
+            const image = rImage.isOk() ? rImage.Ok() : undefined;
+            if (image === undefined) {
+                logger.Warn().Err(rImage).Any({ uploadId: ref.uploadId }).Msg("attachment fetch failed");
                 parts = [unavailable(ref.name)];
             }
-            else if (ref.kind === "image") {
-                const mime = row.mimeType ?? ref.mimeType;
+            else if (image.kind === "withheld") {
+                parts = [{ type: "text", text: `[Attached image ${ref.name} — the picture could not be prepared for the model]` }];
+            }
+            else {
                 parts = [
                     { type: "text", text: `Attached file: ${ref.name}` },
-                    { type: "image_url", image_url: { url: `data:${mime};base64,${bytesToBase64(rBytes.Ok())}` } },
+                    { type: "image_url", image_url: { url: `data:${image.mime};base64,${bytesToBase64(image.bytes)}` } },
                 ];
+                const origin = { ref, group: parts };
+                for (const part of parts)
+                    inflatedFrom.set(part, origin);
+            }
+        }
+        else {
+            const rBytes = await readAsset(vctx, row.assetURI);
+            if (rBytes.isErr()) {
+                logger.Warn().Err(rBytes).Any({ uploadId: ref.uploadId }).Msg("attachment fetch failed");
+                parts = [unavailable(ref.name)];
             }
             else {
                 let text = vctx.sthis.txt.decode(rBytes.Ok());
@@ -85,6 +153,11 @@ export async function inflateFileAttachments(vctx, args) {
                 }
                 parts = [{ type: "text", text: `<attached-file name="${ref.name}" type="${ref.mimeType}">\n${text}\n</attached-file>` }];
             }
+            if (rBytes.isOk()) {
+                const origin = { ref, group: parts };
+                for (const part of parts)
+                    inflatedFrom.set(part, origin);
+            }
         }
         return parts;
     }