@vibes.diy/api-svc 14.3.82 → 14.3.83

package/intern/seed-repair.js

@@ -0,0 +1,261 @@
+import { exception2Result } from "@adviser/cement";
+import { extractAccessSummary } from "@vibes.diy/api-types";
+import { parseSeed, SEED_OWNER_SENTINEL } from "../seed-parser.js";
+import { accessReceiptField, admittedDocKeys, evaluateAccessVerdicts } from "./access-verdicts.js";
+import { accessSourceResolver, seedVerdictDocs } from "./access-verdict-docs.js";
+import { SAVE_REPAIR_FALLBACK_MODEL } from "./save-repair.js";
+import { callWithDeadline, parseRepairText, renderRepairFiles, repairModelCallFor, } from "./save-repair-io.js";
+export const SEED_REPAIR_MAX_ATTEMPTS = 2;
+export const SEED_REPAIR_TIMEOUT_MS = 30_000;
+export const SEED_REPAIR_MAX_OUTPUT_TOKENS = 12_000;
+export const SEED_REPAIR_FINDINGS_MAX = 8;
+const SEED_PATH = "/seed.json";
+const ACCESS_PATH = "/access.js";
+export function seedRepairEnabled(flag) {
+    return flag !== "off";
+}
+export function seedRefusalCount(report) {
+    if (report === undefined)
+        return 0;
+    return report.counts.seed.refused + report.counts.seed.thrown;
+}
+export function seedRepairFindings(report) {
+    return accessReceiptField(report)
+        .refusals.filter((refusal) => refusal.scope === "seed")
+        .slice(0, SEED_REPAIR_FINDINGS_MAX)
+        .map(function findingLine(refusal) {
+        const type = refusal.type === undefined ? "" : ` (${refusal.type})`;
+        const verdict = refusal.outcome === "thrown" ? "the access function threw" : "refused";
+        return `${refusal.dbName}/${refusal.docId}${type}: ${verdict}: ${refusal.reason ?? "no reason given"}`;
+    });
+}
+const PLACEHOLDER_HANDLE = /^@?(?:(?:your|owner|my|the)[-_ ]?(?:user[-_ ]?)?handle(?:[-_ ]?here)?|<[^<>]*handle[^<>]*>|\{\{\s*[\w.-]*handle\s*\}\}|\$\{?\s*[\w.]*handle\s*\}?|~draft)$/i;
+export function isPlaceholderHandle(value) {
+    return PLACEHOLDER_HANDLE.test(value.trim());
+}
+function substituteValue(value, count) {
+    if (typeof value === "string") {
+        if (isPlaceholderHandle(value) === false)
+            return value;
+        count.n++;
+        return SEED_OWNER_SENTINEL;
+    }
+    if (Array.isArray(value))
+        return value.map((item) => substituteValue(item, count));
+    if (typeof value === "object" && value !== null) {
+        return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, substituteValue(v, count)]));
+    }
+    return value;
+}
+export function substituteSeedPlaceholders(seedText) {
+    const parsed = exception2Result(() => JSON.parse(seedText));
+    if (parsed.isErr())
+        return undefined;
+    const count = { n: 0 };
+    const next = substituteValue(parsed.Ok(), count);
+    if (count.n === 0)
+        return undefined;
+    return { text: JSON.stringify(next, null, 2), replaced: count.n };
+}
+export async function seedAccessReport(vctx, args) {
+    const invoke = vctx.invokeAccessFn;
+    if (invoke === undefined || args.accessJs === undefined)
+        return undefined;
+    const accessJs = args.accessJs;
+    const docs = seedVerdictDocs(args.seedText, { ownerHandle: args.ownerHandle, accessJs });
+    if (docs.length === 0)
+        return undefined;
+    const evaluated = await exception2Result(() => evaluateAccessVerdicts({
+        invoke,
+        cid: `seed-repair-${vctx.sthis.nextId(12).str}`,
+        sourceFor: accessSourceResolver(accessJs),
+        ownerHandle: args.ownerHandle,
+        writer: { userHandle: args.ownerHandle, isOwner: true },
+        docs,
+    }));
+    return evaluated.isErr() ? undefined : evaluated.Ok();
+}
+function seedDocIds(seedText) {
+    if (seedText === undefined)
+        return undefined;
+    const parsed = exception2Result(() => JSON.parse(seedText));
+    if (parsed.isErr())
+        return undefined;
+    const seed = parseSeed(parsed.Ok());
+    if (seed.ok === false)
+        return undefined;
+    return new Set(seed.docs.map((doc) => `${doc.dbName}\u0000${doc.id}`));
+}
+function countsOf(report) {
+    const seed = report.counts.seed;
+    return { admitted: seed.admitted, refused: seed.refused + seed.thrown, total: seed.total };
+}
+function improves(args) {
+    if (args.candidateIds === undefined)
+        return false;
+    if ([...args.candidateIds].some((id) => args.originalIds.has(id) === false))
+        return false;
+    const before = countsOf(args.before);
+    const after = countsOf(args.after);
+    if (after.refused >= before.refused || after.admitted === 0)
+        return false;
+    const admittedAfter = admittedDocKeys(args.after, "seed");
+    return [...admittedDocKeys(args.before, "seed")].every((key) => admittedAfter.has(key));
+}
+function codeFile(files, path) {
+    const file = files.find((item) => item.type === "code-block" && item.filename === path);
+    return file?.type === "code-block" ? file.content : undefined;
+}
+function withSeed(files, seedText) {
+    return files.map((file) => file.type === "code-block" && file.filename === SEED_PATH ? { ...file, content: seedText } : file);
+}
+export function seedRepairBrief(ownerHandle, accessSummary) {
+    const handle = JSON.stringify(ownerHandle);
+    const target = accessSummary === undefined
+        ? []
+        : [
+            `The rules state their intent in the comment access.js ends with, "// Summary: ${accessSummary}" — fit every record to it.`,
+        ];
+    return [
+        "You are bringing a vibes.diy app's seed.json into line with the app's own access.js.",
+        `The app's owner, handle ${handle}, applies the seed. Every record is written as the owner, in file order, with user = { userHandle: ${handle}, isOwner: true }, and the platform stamps nothing on it.`,
+        `So where a rule compares a record's field to the writer (authorHandle, creatorHandle, hostHandle, ownerHandle and the like), that field carries the owner marker ${JSON.stringify(SEED_OWNER_SENTINEL)}: the platform fills in the handle of whoever applies the seed, so the record is the owner's own.`,
+        "Where the rules require a workflow state for a new record, give each seeded record that initial state.",
+        "Give every record each field its branch reads, so the rules admit it.",
+        ...target,
+        "Keep every key and every _id exactly as it is. Put parent records above the records that reference them.",
+        "Drop an item whose type the rules do not authorize; access.js is fixed context and stays as it is.",
+        "Emit only seed.json, complete, under its `### `seed.json`` heading in one fenced json block.",
+    ].join(" ");
+}
+export async function repairSeedFile(vctx, args) {
+    const usage = [];
+    const fail = (reason, detail, attempts, before) => ({ ok: false, reason, detail, attempts, usage, ...(before === undefined ? {} : { before }) });
+    const seedText = codeFile(args.files, SEED_PATH);
+    const accessJs = codeFile(args.files, ACCESS_PATH);
+    if (args.changedPaths.has(SEED_PATH) === false || seedText === undefined || accessJs === undefined) {
+        return fail("not-applicable", "this turn did not write a seed.json beside an access.js", 0);
+    }
+    const before = args.report ?? (await seedAccessReport(vctx, { seedText, accessJs, ownerHandle: args.ownerHandle }));
+    if (before === undefined || seedRefusalCount(before) === 0) {
+        return fail("not-applicable", "every seed record is admitted", 0, before);
+    }
+    const originalIds = seedDocIds(seedText);
+    if (originalIds === undefined)
+        return fail("not-applicable", "seed.json does not parse as a seed", 0, before);
+    const findings = seedRepairFindings(before);
+    const beforeCounts = countsOf(before);
+    let best;
+    const consider = async (text) => {
+        const report = await seedAccessReport(vctx, { seedText: text, accessJs, ownerHandle: args.ownerHandle });
+        if (report === undefined)
+            return undefined;
+        const floor = best?.report ?? before;
+        if (improves({ before: floor, after: report, originalIds, candidateIds: seedDocIds(text) })) {
+            best = { text, report, counts: countsOf(report) };
+        }
+        return report;
+    };
+    const adopted = (attempts, model, placeholders) => {
+        if (best === undefined)
+            return fail("not-better", "no candidate admitted more of the seed", attempts, before);
+        vctx.logger
+            .Info()
+            .Str("promptId", args.promptId)
+            .Any("before", beforeCounts)
+            .Any("after", best.counts)
+            .Uint64("attempts", attempts)
+            .Msg("seed-repair-adopted");
+        return {
+            ok: true,
+            files: withSeed(args.files, best.text),
+            before,
+            note: {
+                attempts,
+                ...(model === undefined ? {} : { model }),
+                repaired: [SEED_PATH],
+                findings,
+                ...(placeholders > 0 ? { placeholders } : {}),
+                before: beforeCounts,
+                after: best.counts,
+                ...(usage.length === 0 ? {} : { usage }),
+            },
+        };
+    };
+    const substituted = substituteSeedPlaceholders(seedText);
+    if (substituted !== undefined)
+        await consider(substituted.text);
+    const placeholders = substituted !== undefined && best !== undefined ? substituted.replaced : 0;
+    if (best !== undefined && best.counts.refused === 0)
+        return adopted(0, undefined, placeholders);
+    const model = nonEmpty(vctx.sthis.env.get("SEED_REPAIR_MODEL")) ?? nonEmpty(args.model) ?? SAVE_REPAIR_FALLBACK_MODEL;
+    const call = args.callModel ?? repairModelCallFor(vctx);
+    const maxAttempts = args.maxAttempts ?? SEED_REPAIR_MAX_ATTEMPTS;
+    const timeoutMs = args.timeoutMs ?? SEED_REPAIR_TIMEOUT_MS;
+    const startText = best?.text ?? seedText;
+    const startFindings = best === undefined ? findings : seedRepairFindings(best.report);
+    const messages = [
+        { role: "system", content: seedRepairBrief(args.ownerHandle, extractAccessSummary(accessJs)) },
+        {
+            role: "user",
+            content: renderRepairFiles({
+                vfs: new Map([
+                    [ACCESS_PATH, accessJs],
+                    [SEED_PATH, startText],
+                ]),
+                intro: "The app's rules (access.js) and its example records (seed.json). Applying the seed as the owner reported refusals.",
+            }) +
+                "\n" +
+                composeSeedAsk(startFindings),
+        },
+    ];
+    let attempts = 0;
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        attempts = attempt;
+        const answer = await callWithDeadline(call, { model, messages, maxTokens: SEED_REPAIR_MAX_OUTPUT_TOKENS }, timeoutMs);
+        if (answer.timedOut) {
+            if (best !== undefined)
+                return adopted(attempt, model, placeholders);
+            return fail("timeout", `seed repair call exceeded ${timeoutMs} ms`, attempt, before);
+        }
+        if (answer.reply.isErr()) {
+            if (best !== undefined)
+                return adopted(attempt, model, placeholders);
+            return fail("model-error", answer.reply.Err().message, attempt, before);
+        }
+        const reply = answer.reply.Ok();
+        if (reply.usage !== undefined)
+            usage.push(reply.usage);
+        const parsed = await parseRepairText(reply.text);
+        const emitted = parsed.isOk() ? emittedSeed(parsed.Ok().vfs) : undefined;
+        const report = emitted === undefined ? undefined : await consider(emitted);
+        if (best !== undefined && best.counts.refused === 0)
+            return adopted(attempt, model, placeholders);
+        if (attempt === maxAttempts)
+            break;
+        const followUp = report === undefined
+            ? [`the reply: ${parsed.isErr() ? parsed.Err().message : "it carried no seed.json that parses as a seed"}`]
+            : seedRepairFindings(report);
+        messages.push({ role: "assistant", content: reply.text }, { role: "user", content: composeSeedAsk(followUp) });
+    }
+    if (best !== undefined)
+        return adopted(attempts, attempts > 0 ? model : undefined, placeholders);
+    vctx.logger.Info().Str("promptId", args.promptId).Uint64("attempts", attempts).Msg("seed-repair-not-better");
+    return fail("not-better", "no candidate admitted more of the seed", attempts, before);
+}
+function emittedSeed(vfs) {
+    for (const [path, content] of vfs) {
+        if (`/${path.replace(/^\/+/, "")}` === SEED_PATH)
+            return content;
+    }
+    return undefined;
+}
+export function composeSeedAsk(findings) {
+    return (`Applying seed.json as the owner reported:\n\n${findings.slice(0, SEED_REPAIR_FINDINGS_MAX).join("\n")}\n\n` +
+        "Write seed.json again in full under its `### `seed.json`` heading, so these records pass the rules in access.js. " +
+        "Keep every record that already passed.");
+}
+function nonEmpty(value) {
+    return value === undefined || value.trim().length === 0 ? undefined : value;
+}
+//# sourceMappingURL=seed-repair.js.map

package/intern/seed-repair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-repair.js","sourceRoot":"","sources":["../../jsr/intern/seed-repair.ts"],"names":[],"mappings":"AA4CA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAiB,MAAM,sBAAsB,CAAC;AAE3E,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,sBAAsB,EAA4B,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,GAInB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,MAAM,SAAS,GAAG,YAAY,CAAC;AAC/B,MAAM,WAAW,GAAG,YAAY,CAAC;AAGjC,MAAM,UAAU,iBAAiB,CAAC,IAAwB;IACxD,OAAO,IAAI,KAAK,KAAK,CAAC;AACxB,CAAC;AAGD,MAAM,UAAU,gBAAgB,CAAC,MAAuC;IACtE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;AAChE,CAAC;AAGD,MAAM,UAAU,kBAAkB,CAAC,MAA2B;IAC5D,OAAO,kBAAkB,CAAC,MAAM,CAAC;SAC9B,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC;SACtD,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC;SAClC,GAAG,CAAC,SAAS,WAAW,CAAC,OAAO;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC;QACpE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,GAAG,IAAI,KAAK,OAAO,KAAK,OAAO,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;IACzG,CAAC,CAAC,CAAC;AACP,CAAC;AAOD,MAAM,kBAAkB,GACtB,6JAA6J,CAAC;AAEhK,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAoB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QACvD,KAAK,CAAC,CAAC,EAAE,CAAC;QACV,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACpC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAmB,EACnB,IAAoH;IAEpH,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAC5C,sBAAsB,CAAC;QACrB,MAAM;QACN,GAAG,EAAE,eAAe,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE;QAC/C,SAAS,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QACzC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;QACvD,IAAI;KACL,CAAC,CACH,CAAC;IACF,OAAO,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;AACxD,CAAC;AAGD,SAAS,UAAU,CAAC,QAA4B;IAC9C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,SAAS,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AASD,SAAS,QAAQ,CAAC,MAA2B;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;IAChC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AAC7F,CAAC;AAQD,SAAS,QAAQ,CAAC,IAKjB;IACC,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1F,CAAC;AAsDD,SAAS,QAAQ,CAAC,KAA0B,EAAE,IAAY;IACxD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IACxF,OAAO,IAAI,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,KAA0B,EAAE,QAAgB;IAC5D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAY,EAAE,CAClC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAClG,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,aAAsB;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,MAAM,GACV,aAAa,KAAK,SAAS;QACzB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE,iFAAiF,aAAa,6BAA6B;SAC5H,CAAC;IACR,OAAO;QACL,sFAAsF;QACtF,2BAA2B,MAAM,sGAAsG,MAAM,2DAA2D;QACxM,oKAAoK,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,mGAAmG;QAC1S,wGAAwG;QACxG,uEAAuE;QACvE,GAAG,MAAM;QACT,0GAA0G;QAC1G,oGAAoG;QACpG,8FAA8F;KAC/F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAA2F,EAC3F,IAAoB;IAEpB,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,CACX,MAAmC,EACnC,MAAc,EACd,QAAgB,EAChB,MAA4B,EACT,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACtH,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnG,OAAO,IAAI,CAAC,gBAAgB,EAAE,yDAAyD,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACpH,IAAI,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,gBAAgB,EAAE,+BAA+B,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,oCAAoC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAGtC,IAAI,IAAyF,CAAC;IAC9F,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAA4C,EAAE;QAChF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACzG,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC;QACrC,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5F,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,KAAyB,EAAE,YAAoB,EAAoB,EAAE;QACtG,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,YAAY,EAAE,wCAAwC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9G,IAAI,CAAC,MAAM;aACR,IAAI,EAAE;aACN,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC;aAC9B,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC;aAC3B,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;aACzB,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC;aAC5B,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;YACtC,MAAM;YACN,IAAI,EAAE;gBACJ,QAAQ;gBACR,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;gBACzC,QAAQ,EAAE,CAAC,SAAS,CAAC;gBACrB,QAAQ;gBACR,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,MAAM,EAAE,YAAY;gBACpB,KAAK,EAAE,IAAI,CAAC,MAAM;gBAClB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;aACzC;SACF,CAAC;IACJ,CAAC,CAAC;IAGF,MAAM,WAAW,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,WAAW,KAAK,SAAS;QAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAEhE,MAAM,YAAY,GAAG,WAAW,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAEhG,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,0BAA0B,CAAC;IACtH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,wBAAwB,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,sBAAsB,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC;IACzC,MAAM,aAAa,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAwB;QACpC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,EAAE;QAC9F;YACE,IAAI,EAAE,MAAM;YACZ,OAAO,EACL,iBAAiB,CAAC;gBAChB,GAAG,EAAE,IAAI,GAAG,CAAC;oBACX,CAAC,WAAW,EAAE,QAAQ,CAAC;oBACvB,CAAC,SAAS,EAAE,SAAS,CAAC;iBACvB,CAAC;gBACF,KAAK,EACH,oHAAoH;aACvH,CAAC;gBACF,IAAI;gBACJ,cAAc,CAAC,aAAa,CAAC;SAChC;KACF,CAAC;IACF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,QAAQ,GAAG,OAAO,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,6BAA6B,EAAE,EAAE,SAAS,CAAC,CAAC;QACtH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAEpB,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,SAAS,EAAE,6BAA6B,SAAS,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QAClG,IAAI,OAAO,KAAK,WAAW;YAAE,MAAM;QACnC,MAAM,QAAQ,GACZ,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,+CAA+C,EAAE,CAAC;YAC3G,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACjG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAC7G,OAAO,IAAI,CAAC,YAAY,EAAE,wCAAwC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACxF,CAAC;AAGD,SAAS,WAAW,CAAC,GAAgC;IACnD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC;QAClC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAGD,MAAM,UAAU,cAAc,CAAC,QAA2B;IACxD,OAAO,CACL,gDAAgD,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;QAC5G,mHAAmH;QACnH,wCAAwC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9E,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibes.diy/api-svc",
-  "version": "14.3.82",
+  "version": "14.3.83",
   "license": "Apache-2.0",
   "type": "module",
   "main": "./index.js",
@@ -37,21 +37,21 @@
     "@neondatabase/serverless": "~1.1.0",
     "@noble/hashes": "~2.4.0",
     "@shadcn/lint": "~0.2.0",
-    "@vibes.diy/api-pkg": "14.3.82",
-    "@vibes.diy/api-sql": "14.3.82",
-    "@vibes.diy/api-types": "14.3.82",
-    "@vibes.diy/call-ai-v2": "14.3.82",
-    "@vibes.diy/identity": "14.3.82",
-    "@vibes.diy/look": "14.3.82",
-    "@vibes.diy/pouf": "14.3.82",
-    "@vibes.diy/prompts": "14.3.82",
-    "@vibes.diy/vibe-db-explorer": "14.3.82",
-    "@vibes.diy/vibe-runtime": "14.3.82",
-    "@vibes.diy/vibe-types": "14.3.82",
+    "@vibes.diy/api-pkg": "14.3.83",
+    "@vibes.diy/api-sql": "14.3.83",
+    "@vibes.diy/api-types": "14.3.83",
+    "@vibes.diy/call-ai-v2": "14.3.83",
+    "@vibes.diy/identity": "14.3.83",
+    "@vibes.diy/look": "14.3.83",
+    "@vibes.diy/pouf": "14.3.83",
+    "@vibes.diy/prompts": "14.3.83",
+    "@vibes.diy/vibe-db-explorer": "14.3.83",
+    "@vibes.diy/vibe-runtime": "14.3.83",
+    "@vibes.diy/vibe-types": "14.3.83",
     "acorn": "~8.17.0",
     "acorn-jsx": "~5.3.2",
     "arktype": "~2.2.6",
-    "call-ai": "14.3.82",
+    "call-ai": "14.3.83",
     "charwise": "~3.0.1",
     "cookie": "~2.0.1",
     "csv-parse": "~7.0.3",

package/public/access-fn-quickjs.d.ts

@@ -0,0 +1,19 @@
+import type { QuickJSWASMModule } from "@cf-wasm/quickjs";
+import type { AccessDescriptor, UserContext } from "@vibes.diy/api-types";
+export interface QuickJSAccessFnParams {
+    cid: string;
+    doc: unknown;
+    oldDoc: unknown | null;
+    user: UserContext | null;
+    source?: string;
+    grantState?: {
+        members: Record<string, string[]>;
+        roleGrants: Record<string, string[]>;
+        userGrants: Record<string, string[]>;
+    };
+    adminMode?: boolean;
+    ownerHandle?: string;
+}
+export declare function invokeAccessFnInQuickJS(QuickJS: QuickJSWASMModule, params: QuickJSAccessFnParams): AccessDescriptor | {
+    forbidden: string;
+};

package/public/access-fn-quickjs.js

@@ -0,0 +1,151 @@
+import { isImgGenVersionAppend } from "@vibes.diy/vibe-types";
+function unexpectedAccessFnError(errVal) {
+    if (typeof errVal === "object" && errVal !== null) {
+        const rec = errVal;
+        const name = typeof rec.name === "string" && rec.name.length > 0 ? rec.name : "Error";
+        const message = typeof rec.message === "string" ? rec.message : "";
+        return message.length > 0 ? `access function error: ${name}: ${message}` : `access function error: ${name}`;
+    }
+    return `access function error: ${String(errVal)}`;
+}
+export function invokeAccessFnInQuickJS(QuickJS, params) {
+    if (!params.source) {
+        return { forbidden: "access function source not provided" };
+    }
+    const source = params.source;
+    const grantState = params.grantState ?? { members: {}, roleGrants: {}, userGrants: {} };
+    function resolveChannels(userHandle) {
+        const channels = new Set();
+        const direct = grantState.userGrants[userHandle];
+        if (direct)
+            for (const ch of direct)
+                channels.add(ch);
+        for (const [role, members] of Object.entries(grantState.members)) {
+            if (members.includes(userHandle)) {
+                const roleChannels = grantState.roleGrants[role];
+                if (roleChannels)
+                    for (const ch of roleChannels)
+                        channels.add(ch);
+            }
+        }
+        return channels;
+    }
+    const vm = QuickJS.newContext();
+    try {
+        for (const stmt of [
+            `const doc = ${JSON.stringify(params.doc)};`,
+            `const oldDoc = ${JSON.stringify(params.oldDoc)};`,
+            `const user = ${JSON.stringify(params.user)};`,
+        ]) {
+            const r = vm.evalCode(stmt);
+            if (r.error) {
+                const errVal = vm.dump(r.error);
+                r.error.dispose();
+                return { forbidden: `access function setup error: ${String(errVal)}` };
+            }
+            else {
+                r.value.dispose();
+            }
+        }
+        const ctxObj = vm.newObject();
+        function helperDenial(reason) {
+            const denial = vm.newObject();
+            const reasonHandle = vm.newString(reason);
+            vm.setProp(denial, "forbidden", reasonHandle);
+            reasonHandle.dispose();
+            return { error: denial };
+        }
+        const requireAccessFn = vm.newFunction("requireAccess", (channelIdHandle) => {
+            if (params.adminMode === true) {
+                return undefined;
+            }
+            const channelId = vm.dump(channelIdHandle);
+            if (!params.user) {
+                return helperDenial("authentication required");
+            }
+            const channels = resolveChannels(params.user.userHandle);
+            if (!channels.has(channelId)) {
+                return helperDenial(`not in channel: ${channelId}`);
+            }
+            return undefined;
+        });
+        const requireRoleFn = vm.newFunction("requireRole", (roleNameHandle) => {
+            if (params.adminMode === true) {
+                return undefined;
+            }
+            const roleName = vm.dump(roleNameHandle);
+            if (!params.user) {
+                return helperDenial("authentication required");
+            }
+            const roleMembers = grantState.members[roleName];
+            if (!roleMembers?.includes(params.user.userHandle)) {
+                return helperDenial(`not in role: ${roleName}`);
+            }
+            return undefined;
+        });
+        const requireBackendFn = vm.newFunction("requireBackend", (kindHandle) => {
+            if (params.adminMode === true) {
+                return undefined;
+            }
+            const kind = kindHandle === undefined ? undefined : vm.dump(kindHandle);
+            const origin = params.user?.backend;
+            if (origin === undefined) {
+                return helperDenial(kind === undefined ? "not a backend write" : `not a ${kind} write`);
+            }
+            if (kind !== undefined && origin !== kind) {
+                return helperDenial(`not a ${kind} write`);
+            }
+            return undefined;
+        });
+        const isImgGenVersionAppendFn = vm.newFunction("isImgGenVersionAppend", (docHandle, oldDocHandle) => {
+            const nextDoc = vm.dump(docHandle);
+            const priorDoc = oldDocHandle === undefined ? undefined : vm.dump(oldDocHandle);
+            return isImgGenVersionAppend(nextDoc, priorDoc) === true ? vm.true : vm.false;
+        });
+        vm.setProp(ctxObj, "requireAccess", requireAccessFn);
+        vm.setProp(ctxObj, "requireRole", requireRoleFn);
+        vm.setProp(ctxObj, "isImgGenVersionAppend", isImgGenVersionAppendFn);
+        vm.setProp(ctxObj, "requireBackend", requireBackendFn);
+        vm.setProp(vm.global, "ctx", ctxObj);
+        requireAccessFn.dispose();
+        requireRoleFn.dispose();
+        isImgGenVersionAppendFn.dispose();
+        requireBackendFn.dispose();
+        ctxObj.dispose();
+        {
+            const r = vm.evalCode(`ctx.ownerHandle = ${JSON.stringify(params.ownerHandle ?? null)};`);
+            if (r.error) {
+                const errVal = vm.dump(r.error);
+                r.error.dispose();
+                return { forbidden: `access function setup error: ${String(errVal)}` };
+            }
+            r.value.dispose();
+        }
+        const cleanSource = source.replace(/export\s+/g, "").replace(/^default\s+/, "");
+        const fnNameMatch = cleanSource.match(/^function\s+(\w+)\s*\(/);
+        const isAnonymousFnOrArrow = /^function\s*\(/.test(cleanSource) || /^\(/.test(cleanSource) || /^\w+\s*=>/.test(cleanSource);
+        const evalSource = fnNameMatch
+            ? `${cleanSource}\n;${fnNameMatch[1]}(doc, oldDoc, user, ctx)`
+            : isAnonymousFnOrArrow
+                ? `const __accessFn = ${cleanSource}\n;__accessFn(doc, oldDoc, user, ctx)`
+                : `(function() { ${cleanSource} })()`;
+        const fnResult = vm.evalCode(evalSource);
+        if (fnResult.error) {
+            const errVal = vm.dump(fnResult.error);
+            fnResult.error.dispose();
+            const reason = typeof errVal === "object" && errVal !== null && "forbidden" in errVal
+                ? String(errVal.forbidden)
+                : typeof errVal === "string"
+                    ? errVal
+                    : unexpectedAccessFnError(errVal);
+            return { forbidden: reason };
+        }
+        const accessResult = vm.dump(fnResult.value);
+        fnResult.value.dispose();
+        return accessResult;
+    }
+    finally {
+        vm.dispose();
+    }
+}
+//# sourceMappingURL=access-fn-quickjs.js.map

package/public/access-fn-quickjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-fn-quickjs.js","sourceRoot":"","sources":["../../jsr/public/access-fn-quickjs.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAM9D,SAAS,uBAAuB,CAAC,MAAe;IAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACtF,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,0BAA0B,IAAI,EAAE,CAAC;IAC9G,CAAC;IACD,OAAO,0BAA0B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AACpD,CAAC;AA0BD,MAAM,UAAU,uBAAuB,CACrC,OAA0B,EAC1B,MAA6B;IAE7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,SAAS,EAAE,qCAAqC,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAExF,SAAS,eAAe,CAAC,UAAkB;QACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,MAAM;YAAE,KAAK,MAAM,EAAE,IAAI,MAAM;gBAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,IAAK,OAAoB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/C,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,YAAY;oBAAE,KAAK,MAAM,EAAE,IAAI,YAAY;wBAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI;YACjB,eAAe,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;YAC5C,kBAAkB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;YAClD,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;SAC/C,EAAE,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAChC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,EAAE,SAAS,EAAE,gCAAgC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;QAS9B,SAAS,YAAY,CAAC,MAAc;YAClC,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC1C,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;YAC9C,YAAY,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,eAAe,GAAG,EAAE,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC,eAA8C,EAAE,EAAE;YACzG,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC9B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAW,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,YAAY,CAAC,yBAAyB,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,cAA6C,EAAE,EAAE;YACpG,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC9B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAW,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,YAAY,CAAC,yBAAyB,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAyB,CAAC;YACzE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnD,OAAO,YAAY,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QAQH,MAAM,gBAAgB,GAAG,EAAE,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,UAAyC,EAAE,EAAE;YACtG,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC9B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAwB,CAAC;YAChG,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;YACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,YAAY,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC1C,OAAO,YAAY,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QASH,MAAM,uBAAuB,GAAG,EAAE,CAAC,WAAW,CAC5C,uBAAuB,EACvB,CAAC,SAAwC,EAAE,YAA2C,EAAE,EAAE;YACxF,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChF,OAAO,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC;QAChF,CAAC,CACF,CAAC;QAEF,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;QACrD,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QACjD,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;QACrE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACvD,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACrC,eAAe,CAAC,OAAO,EAAE,CAAC;QAC1B,aAAa,CAAC,OAAO,EAAE,CAAC;QACxB,uBAAuB,CAAC,OAAO,EAAE,CAAC;QAClC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,OAAO,EAAE,CAAC;QAIjB,CAAC;YACC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1F,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAChC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,EAAE,SAAS,EAAE,gCAAgC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACzE,CAAC;YACD,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAChE,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5H,MAAM,UAAU,GAAG,WAAW;YAC5B,CAAC,CAAC,GAAG,WAAW,MAAM,WAAW,CAAC,CAAC,CAAC,0BAA0B;YAC9D,CAAC,CAAC,oBAAoB;gBACpB,CAAC,CAAC,sBAAsB,WAAW,uCAAuC;gBAC1E,CAAC,CAAC,iBAAiB,WAAW,OAAO,CAAC;QAC1C,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEzC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACvC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,WAAW,IAAI,MAAM;gBACpE,CAAC,CAAC,MAAM,CAAE,MAAkC,CAAC,SAAS,CAAC;gBACvD,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ;oBAC1B,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,YAAY,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,YAAgC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,OAAO,EAAE,CAAC;IACf,CAAC;AACH,CAAC"}

package/public/access-function.js

@@ -141,7 +141,14 @@ function moduleScopePreamble(fullSource, target) {
             pos = span.end;
     }
     rest += fullSource.slice(pos);
-    return rest.replace(/(^|\n)([ \t]*)export\s+(?=async\b|function\b|const\b|let\b|var\b|class\b)/g, "$1$2").trim();
+    const preamble = rest.replace(/(^|\n)([ \t]*)export\s+(?=async\b|function\b|const\b|let\b|var\b|class\b)/g, "$1$2").trim();
+    return isOnlyComments(preamble) ? "" : preamble;
+}
+function isOnlyComments(source) {
+    return (source
+        .replace(/\/\*[\s\S]*?\*\//g, "")
+        .replace(/\/\/[^\n]*/g, "")
+        .trim() === "");
 }
 function defaultStatementEnd(fullSource, from) {
     let depth = 0;

package/public/access-function.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-function.js","sourceRoot":"","sources":["../../jsr/public/access-function.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAa5E,MAAM,UAAU,qBAAqB,CAAC,MAAwB,EAAE,IAAwB;IACtF,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAoBD,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAK/G,OAAO,UAAU,IAAI,WAAW,IAAI,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7E,CAAC;AAQD,MAAM,UAAU,WAAW,CAAC,IAAwB,EAAE,UAAuB,EAAE,SAAS,GAAG,KAAK;IAC9F,MAAM,EAAE,GAAe,UAAU,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAErF,SAAS,eAAe,CAAC,UAAkB;QACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,MAAM;YAAE,KAAK,MAAM,EAAE,IAAI,MAAM;gBAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjC,MAAM,YAAY,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,YAAY;oBAAE,KAAK,MAAM,EAAE,IAAI,YAAY;wBAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO;QACL,aAAa,CAAC,SAAiB;YAC7B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,cAAc,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,cAAc,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,qBAAqB,CAAC,GAAY,EAAE,MAAe;YACjD,OAAO,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAID,cAAc,CAAC,IAAwB;YACrC,IAAI,SAAS;gBAAE,OAAO;YACtB,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC;YAC7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC1C,MAAM,IAAI,cAAc,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,WAAW,CAAC,QAAgB;YAC1B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,cAAc,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,cAAc,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAsBD,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,aAAqB;IAC3E,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,SAAS;QAAE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAGvE,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,QAAQ,QAAQ,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,sBAAsB,GAAG,+FAA+F,CAAC;AAW/H,SAAS,cAAc,CAAC,UAAkB,EAAE,aAAqB;IAC/D,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QAChE,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,yBAAyB,YAAY,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAGzD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAE9F,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,wCAAwC,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/H,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,eAAe,SAAS,wBAAwB,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,OAAe;IACzD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;QACnC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1B,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAMD,SAAS,mBAAmB,CAAC,UAAkB,EAAE,MAAkB;IACjE,MAAM,GAAG,GAAiB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAErE,MAAM,eAAe,GAAG,mDAAmD,CAAC;IAI5E,MAAM,UAAU,GAAG,oEAAoE,CAAC;IAIxF,MAAM,UAAU,GAAG,qFAAqF,CAAC;IACzG,KAAK,MAAM,OAAO,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;QAChE,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAKD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,cAAc,GAAG,6BAA6B,CAAC;QACrD,KAAK,IAAI,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9F,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,GAAG,GAAG;YAAE,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,GAAG,GAAG,GAAG;YAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAG9B,OAAO,IAAI,CAAC,OAAO,CAAC,4EAA4E,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AACnH,CAAC;AAMD,SAAS,mBAAmB,CAAC,UAAkB,EAAE,IAAY;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC/C,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;QACzD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,IAAI,EAAE,KAAK,GAAG;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,EAAE,KAAK,IAAI,IAAI,UAAU;gBAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,UAAU,GAAG,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,SAAS,CAAS;IAE3B,YAAY,MAAc;QACxB,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;IAC1B,CAAC;CACF"}
+{"version":3,"file":"access-function.js","sourceRoot":"","sources":["../../jsr/public/access-function.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAa5E,MAAM,UAAU,qBAAqB,CAAC,MAAwB,EAAE,IAAwB;IACtF,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAoBD,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAK/G,OAAO,UAAU,IAAI,WAAW,IAAI,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7E,CAAC;AAQD,MAAM,UAAU,WAAW,CAAC,IAAwB,EAAE,UAAuB,EAAE,SAAS,GAAG,KAAK;IAC9F,MAAM,EAAE,GAAe,UAAU,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAErF,SAAS,eAAe,CAAC,UAAkB;QACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,MAAM;YAAE,KAAK,MAAM,EAAE,IAAI,MAAM;gBAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjC,MAAM,YAAY,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,YAAY;oBAAE,KAAK,MAAM,EAAE,IAAI,YAAY;wBAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO;QACL,aAAa,CAAC,SAAiB;YAC7B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,cAAc,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,cAAc,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,qBAAqB,CAAC,GAAY,EAAE,MAAe;YACjD,OAAO,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAID,cAAc,CAAC,IAAwB;YACrC,IAAI,SAAS;gBAAE,OAAO;YACtB,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC;YAC7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC1C,MAAM,IAAI,cAAc,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,WAAW,CAAC,QAAgB;YAC1B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,cAAc,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,cAAc,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAsBD,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,aAAqB;IAC3E,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,SAAS;QAAE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAGvE,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,QAAQ,QAAQ,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,sBAAsB,GAAG,+FAA+F,CAAC;AAW/H,SAAS,cAAc,CAAC,UAAkB,EAAE,aAAqB;IAC/D,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QAChE,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,yBAAyB,YAAY,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAGzD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAE9F,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,wCAAwC,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/H,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,eAAe,SAAS,wBAAwB,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,OAAe;IACzD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;QACnC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1B,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAMD,SAAS,mBAAmB,CAAC,UAAkB,EAAE,MAAkB;IACjE,MAAM,GAAG,GAAiB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAErE,MAAM,eAAe,GAAG,mDAAmD,CAAC;IAI5E,MAAM,UAAU,GAAG,oEAAoE,CAAC;IAIxF,MAAM,UAAU,GAAG,qFAAqF,CAAC;IACzG,KAAK,MAAM,OAAO,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;QAChE,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAKD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,cAAc,GAAG,6BAA6B,CAAC;QACrD,KAAK,IAAI,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9F,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,GAAG,GAAG;YAAE,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,GAAG,GAAG,GAAG;YAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAG9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,4EAA4E,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAI3H,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,CACL,MAAM;SACH,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,IAAI,EAAE,KAAK,EAAE,CACjB,CAAC;AACJ,CAAC;AAMD,SAAS,mBAAmB,CAAC,UAAkB,EAAE,IAAY;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC/C,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;QACzD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,IAAI,EAAE,KAAK,GAAG;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,EAAE,KAAK,IAAI,IAAI,UAAU;gBAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,UAAU,GAAG,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,SAAS,CAAS;IAE3B,YAAY,MAAc;QACxB,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;IAC1B,CAAC;CACF"}

package/public/app-documents-read-eventos.js

@@ -17,7 +17,7 @@ import { mintFilesUrls } from "./files-url-mint.js";
 import { applyQueryFilter } from "./app-documents-query-filter.js";
 import { readAllowed, clientWsSend, connectionAdminMode } from "./app-documents-shared.js";
 import { addressesDirectChannel } from "./dm-lane.js";
-import { resolveActingHandle, resolveActiveHandle } from "./resolve-active-handle.js";
+import { resolveActingHandle, resolveActingHandleForApp } from "./resolve-active-handle.js";
 import { audienceChannelsOf, audienceChannelsForReader, collectAudienceSubjects, inheritChannelOf, INHERIT_CAPABILITY_CHANNEL, RESERVED_CHANNEL_PREFIX, } from "./audience-channels.js";
 import { resolveInheritReadChannels } from "./inherit-read-resolver.js";
 import { admitInterestChannelsFailClosed, applyInterestKeys, parseInterestHandles, sweepExpiredInterestKeys, } from "./interest-channels.js";
@@ -138,7 +138,9 @@ export async function getDocForCaller(vctx, args) {
         for (const { row: grantRow, descriptor } of decodedGrantOutputs) {
             reduce.addDoc(grantRow.docId, extractContribution(descriptor));
         }
-        const userHandle = args.userId !== null ? (getPin.actingHandle ?? (await resolveActiveHandle(vctx, args.userId)) ?? null) : null;
+        const userHandle = args.userId !== null
+            ? (getPin.actingHandle ?? (await resolveActingHandleForApp(vctx, args.userId, args.ownerHandle)) ?? null)
+            : null;
         await applyInviteSubjectAliases(vctx, reduce, {
             ownerHandle: args.ownerHandle,
             appSlug: args.appSlug,
@@ -445,7 +447,9 @@ export const subscribeDocsEvento = {
                         reduce.addDoc(row.docId, extractContribution(descriptor));
                     }
                 }
-                const userHandle = req._auth ? ((await resolveActiveHandle(vctx, req._auth.verifiedAuth.claims.userId)) ?? null) : null;
+                const userHandle = req._auth
+                    ? ((await resolveActingHandleForApp(vctx, req._auth.verifiedAuth.claims.userId, req.ownerHandle)) ?? null)
+                    : null;
                 await applyInviteSubjectAliases(vctx, reduce, {
                     ownerHandle: req.ownerHandle,
                     appSlug: req.appSlug,