@vibes.diy/api-svc 4.5.5 → 5.2.2

package/public/audience-key-patch.js

@@ -0,0 +1,38 @@
+import { audienceSubjectFromChannel } from "./audience-channels.js";
+export function subscribedDbPrefixes(conn) {
+    const prefixes = new Set();
+    for (const key of conn.subscribedDocKeys) {
+        const parts = key.split("/");
+        if (parts.length < 3)
+            continue;
+        prefixes.add(parts.slice(0, 3).join("/"));
+    }
+    return prefixes;
+}
+export function patchAudienceKeys(conn, patch, hooks) {
+    for (const prefix of subscribedDbPrefixes(conn)) {
+        const [ownerHandle, appSlug] = prefix.split("/");
+        if (patch.appScope !== undefined && (ownerHandle !== patch.appScope.ownerHandle || appSlug !== patch.appScope.appSlug)) {
+            continue;
+        }
+        for (const ch of patch.channels) {
+            const key = `${prefix}/${ch}`;
+            if (patch.op === "add") {
+                if (hooks?.isArmed !== undefined) {
+                    const subject = audienceSubjectFromChannel(ch);
+                    if (subject === undefined || hooks.isArmed(ownerHandle, appSlug, subject) === false)
+                        continue;
+                }
+                if (conn.subscribedDocKeys.has(key) === false) {
+                    conn.subscribedDocKeys.add(key);
+                    hooks?.register?.(key).catch((e) => console.error("audience-key registration error:", e));
+                }
+            }
+            else if (conn.subscribedDocKeys.has(key)) {
+                conn.subscribedDocKeys.delete(key);
+                hooks?.deregister?.(key).catch((e) => console.error("audience-key deregistration error:", e));
+            }
+        }
+    }
+}
+//# sourceMappingURL=audience-key-patch.js.map

package/public/audience-key-patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience-key-patch.js","sourceRoot":"","sources":["../../jsr/public/audience-key-patch.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AA+CpE,MAAM,UAAU,oBAAoB,CAAC,IAA+C;IAClF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAOD,MAAM,UAAU,iBAAiB,CAC/B,IAA+C,EAC/C,KAAuB,EACvB,KAA6B;IAE7B,KAAK,MAAM,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,QAAQ,CAAC,WAAW,IAAI,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvH,SAAS;QACX,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,EAAE,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBACvB,IAAI,KAAK,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,OAAO,GAAG,0BAA0B,CAAC,EAAE,CAAC,CAAC;oBAC/C,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK;wBAAE,SAAS;gBAChG,CAAC;gBACD,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC9C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAChC,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACrG,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACnC,KAAK,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/public/billing-msg.d.ts

@@ -0,0 +1,5 @@
+import { EventoHandler } from "@adviser/cement";
+import { MsgBase, ReqBillingCheckout, ReqBillingConfig, ReqBillingCustomer, ResBillingCheckout, ResBillingConfig, ResBillingCustomer, VibesDiyError, W3CWebSocketEvent } from "@vibes.diy/api-types";
+export declare const billingCustomerEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqBillingCustomer>, ResBillingCustomer | VibesDiyError>;
+export declare const billingCheckoutEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqBillingCheckout>, ResBillingCheckout | VibesDiyError>;
+export declare const billingConfigEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqBillingConfig>, ResBillingConfig | VibesDiyError>;

package/public/billing-msg.js

@@ -0,0 +1,143 @@
+import { EventoResult, Option, Result } from "@adviser/cement";
+import { reqBillingCheckout, reqBillingConfig, reqBillingCustomer, } from "@vibes.diy/api-types";
+import { type } from "arktype";
+import { unwrapMsgBase } from "../unwrap-msg-base.js";
+import { checkAuth } from "../check-auth.js";
+function claimsCustomerData(claims) {
+    const params = claims.params;
+    return {
+        ...(typeof params?.name === "string" && params.name !== "" ? { name: params.name } : {}),
+        ...(typeof params?.email === "string" && params.email !== "" ? { email: params.email } : {}),
+    };
+}
+export const billingCustomerEvento = {
+    hash: "billing-customer",
+    validate: unwrapMsgBase(async (msg) => {
+        const ret = reqBillingCustomer(msg.payload);
+        if (ret instanceof type.errors) {
+            return Result.Ok(Option.None());
+        }
+        return Result.Ok(Option.Some({ ...msg, payload: ret }));
+    }),
+    handle: checkAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const claims = req._auth.verifiedAuth.claims;
+        const r = await vctx.billing.customerSummary({
+            userId: claims.userId,
+            customerData: claimsCustomerData(claims),
+        });
+        if (r.isErr()) {
+            vctx.logger.Warn().Err(r).Str("userId", claims.userId).Msg("billing-customer-failed-open");
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-billing-customer",
+                enabled: false,
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-billing-customer",
+            ...r.Ok(),
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+export const billingCheckoutEvento = {
+    hash: "billing-checkout",
+    validate: unwrapMsgBase(async (msg) => {
+        const ret = reqBillingCheckout(msg.payload);
+        if (ret instanceof type.errors) {
+            return Result.Ok(Option.None());
+        }
+        return Result.Ok(Option.Some({ ...msg, payload: ret }));
+    }),
+    handle: checkAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const claims = req._auth.verifiedAuth.claims;
+        const r = await vctx.billing.createCheckout({
+            userId: claims.userId,
+            kind: req.kind,
+            ...(req.units !== undefined ? { units: req.units } : {}),
+            successUrl: req.successUrl,
+            customerData: claimsCustomerData(claims),
+        });
+        if (r.isErr()) {
+            vctx.logger.Warn().Err(r).Str("userId", claims.userId).Str("kind", req.kind).Msg("billing-checkout-failed");
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: { message: "could not start checkout", code: "billing-checkout-failed" },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        const out = r.Ok();
+        if (out.status === "membership-required") {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: { message: "Vibes Plus membership is required to buy credits", code: "billing-membership-required" },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-billing-checkout",
+            checkoutUrl: out.checkoutUrl,
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+export const billingConfigEvento = {
+    hash: "billing-config",
+    validate: unwrapMsgBase(async (msg) => {
+        const ret = reqBillingConfig(msg.payload);
+        if (ret instanceof type.errors) {
+            return Result.Ok(Option.None());
+        }
+        return Result.Ok(Option.Some({ ...msg, payload: ret }));
+    }),
+    handle: checkAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const claims = req._auth.verifiedAuth.claims;
+        const r = await vctx.billing.setAutoRefill({
+            userId: claims.userId,
+            autoRefill: req.autoRefill,
+            customerData: claimsCustomerData(claims),
+        });
+        if (r.isErr()) {
+            const message = r.Err().message;
+            const invalid = message.startsWith("auto-refill");
+            vctx.logger.Warn().Err(r).Str("userId", claims.userId).Msg("billing-config-failed");
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: invalid
+                    ? { message, code: "billing-config-invalid" }
+                    : { message: "could not update auto-refill", code: "billing-config-failed" },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        const out = r.Ok();
+        if (out.status === "membership-required") {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: { message: "Vibes Plus membership is required for auto-refill", code: "billing-membership-required" },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        if (out.status === "no-saved-card") {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: {
+                    message: "auto-refill needs a saved payment method — completing the Vibes Plus checkout saves one",
+                    code: "billing-no-saved-card",
+                },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-billing-config",
+            autoRefill: out.autoRefill,
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+//# sourceMappingURL=billing-msg.js.map

package/public/billing-msg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-msg.js","sourceRoot":"","sources":["../../jsr/public/billing-msg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,YAAY,EAAsC,MAAM,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAClH,OAAO,EAEL,kBAAkB,EAElB,gBAAgB,EAEhB,kBAAkB,GASnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAoB7C,SAAS,kBAAkB,CAAC,MAAe;IACzC,MAAM,MAAM,GAAI,MAAgE,CAAC,MAAM,CAAC;IACxF,OAAO;QACL,GAAG,CAAC,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAI9B;IACF,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAA8H,EAC3F,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QAC7C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;YAC3C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,kBAAkB,CAAC,MAAM,CAAC;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAGd,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC3F,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,KAAK;aACc,CAAC,CAAC;YAChC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,gCAAgC;YACtC,GAAG,CAAC,CAAC,EAAE,EAAE;SACmB,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAI9B;IACF,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAA8H,EAC3F,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QAC7C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,YAAY,EAAE,kBAAkB,CAAC,MAAM,CAAC;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YAC5G,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,yBAAyB,EAAE;aAC7D,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;QACnB,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;YACzC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,IAAI,EAAE,6BAA6B,EAAE;aACzF,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,gCAAgC;YACtC,WAAW,EAAE,GAAG,CAAC,WAAW;SACA,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAkG;IAChI,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAA0H,EACvF,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QAC7C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;YACzC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,YAAY,EAAE,kBAAkB,CAAC,MAAM,CAAC;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAGd,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;YAChC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACpF,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,OAAO;oBACZ,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE;oBAC7C,CAAC,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,IAAI,EAAE,uBAAuB,EAAE;aAC5D,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;QACnB,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;YACzC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,mDAAmD,EAAE,IAAI,EAAE,6BAA6B,EAAE;aAC1F,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE;oBACL,OAAO,EAAE,yFAAyF;oBAClG,IAAI,EAAE,uBAAuB;iBAC9B;aACiB,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,8BAA8B;YACpC,UAAU,EAAE,GAAG,CAAC,UAAU;SACA,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC"}

package/public/channel-read-filter.js

@@ -1,3 +1,4 @@
+import { audienceChannelsOf } from "./audience-channels.js";
 export function filterDocsByChannel(docs, outputRows, userHandle, effectiveChannels, publicChannels, adminOverride = false, requireOutput = false) {
     if (adminOverride && !requireOutput)
         return docs;
@@ -6,8 +7,9 @@ export function filterDocsByChannel(docs, outputRows, userHandle, effectiveChann
     const docChannels = new Map();
     for (const row of outputRows) {
         const parsed = JSON.parse(row.output);
-        if (parsed.channels !== undefined && Array.isArray(parsed.channels)) {
-            docChannels.set(row.docId, parsed.channels);
+        const channels = [...(Array.isArray(parsed.channels) ? parsed.channels : []), ...audienceChannelsOf(parsed)];
+        if (channels.length > 0) {
+            docChannels.set(row.docId, channels);
         }
     }
     return docs.filter((doc) => {

package/public/channel-read-filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"channel-read-filter.js","sourceRoot":"","sources":["../../jsr/public/channel-read-filter.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,mBAAmB,CACjC,IAAW,EACX,UAAuB,EACvB,UAAyB,EACzB,iBAA8B,EAC9B,cAA2B,EAC3B,aAAa,GAAG,KAAK,EAKrB,aAAa,GAAG,KAAK;IAErB,IAAI,aAAa,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAQjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAA4B,CAAC;QACjE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"channel-read-filter.js","sourceRoot":"","sources":["../../jsr/public/channel-read-filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAS5D,MAAM,UAAU,mBAAmB,CACjC,IAAW,EACX,UAAuB,EACvB,UAAyB,EACzB,iBAA8B,EAC9B,cAA2B,EAC3B,aAAa,GAAG,KAAK,EAKrB,aAAa,GAAG,KAAK;IAErB,IAAI,aAAa,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAQjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAGnC,CAAC;QAMF,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7G,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}

package/public/curated-new-vibes.d.ts

@@ -0,0 +1,5 @@
+import { EventoHandler } from "@adviser/cement";
+import { MsgBase, ReqCuratedNewVibes, ResCuratedNewVibes, VibesDiyError, W3CWebSocketEvent } from "@vibes.diy/api-types";
+import { VibesApiSQLCtx } from "../types.js";
+export declare function computeCuratedNewVibes(vctx: VibesApiSQLCtx, limit: number): Promise<ResCuratedNewVibes>;
+export declare const curatedNewVibesEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqCuratedNewVibes>, ResCuratedNewVibes | VibesDiyError>;

package/public/curated-new-vibes.js

@@ -0,0 +1,64 @@
+import { Result, Option, EventoResult } from "@adviser/cement";
+import { reqCuratedNewVibes, resCuratedNewVibes, } from "@vibes.diy/api-types";
+import { type } from "arktype";
+import { and, desc, eq } from "drizzle-orm/sql/expressions";
+import { unwrapMsgBase } from "../unwrap-msg-base.js";
+import { optAuth } from "../check-auth.js";
+import { cachedReport } from "./report-cache.js";
+import { clampHomeFeedLimit, HOME_FEED_SCAN_FACTOR, loadVibeDisplayInfo, titleIconKey } from "./home-feed-common.js";
+export async function computeCuratedNewVibes(vctx, limit) {
+    const cur = vctx.sql.tables.vibeCuration;
+    const asb = vctx.sql.tables.appSlugBinding;
+    const candidates = await vctx.sql.db
+        .select({
+        ownerHandle: cur.ownerHandle,
+        appSlug: cur.appSlug,
+        created: asb.created,
+        approvedAt: cur.decidedAt,
+    })
+        .from(cur)
+        .innerJoin(asb, and(eq(asb.ownerHandle, cur.ownerHandle), eq(asb.appSlug, cur.appSlug), eq(asb.unpublishedAt, "")))
+        .where(eq(cur.state, "approved"))
+        .orderBy(desc(cur.decidedAt), desc(cur.ownerHandle), desc(cur.appSlug))
+        .limit(limit * HOME_FEED_SCAN_FACTOR);
+    const display = await loadVibeDisplayInfo(vctx, candidates);
+    const items = [];
+    for (const row of candidates) {
+        if (items.length >= limit)
+            break;
+        const info = display.get(titleIconKey(row.ownerHandle, row.appSlug));
+        if (info?.worldReadable !== true)
+            continue;
+        items.push({
+            ownerHandle: row.ownerHandle,
+            appSlug: row.appSlug,
+            created: row.created,
+            approvedAt: row.approvedAt,
+            ...(info.title ? { title: info.title } : {}),
+            ...(info.icon ? { icon: info.icon } : {}),
+        });
+    }
+    return {
+        type: "vibes.diy.res-curated-new-vibes",
+        generatedAt: new Date().toISOString(),
+        items,
+    };
+}
+export const curatedNewVibesEvento = {
+    hash: "vibes.diy.req-curated-new-vibes",
+    validate: unwrapMsgBase(async (msg) => {
+        const ret = reqCuratedNewVibes(msg.payload);
+        if (ret instanceof type.errors)
+            return Result.Ok(Option.None());
+        return Result.Ok(Option.Some({ ...msg, payload: ret }));
+    }),
+    handle: optAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const limit = clampHomeFeedLimit(req.limit);
+        const res = await cachedReport(vctx, `curated-new-vibes:${limit}`, resCuratedNewVibes, () => computeCuratedNewVibes(vctx, limit));
+        await ctx.send.send(ctx, res);
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+//# sourceMappingURL=curated-new-vibes.js.map

package/public/curated-new-vibes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"curated-new-vibes.js","sourceRoot":"","sources":["../../jsr/public/curated-new-vibes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,MAAM,EAAE,MAAM,EAAsC,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAClH,OAAO,EAQL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAMrH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAoB,EAAE,KAAa;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;IAI3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SACjC,MAAM,CAAC;QACN,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,SAAS;KAC1B,CAAC;SACD,IAAI,CAAC,GAAG,CAAC;SACT,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;SAClH,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;SAChC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;SACtE,KAAK,CAAC,KAAK,GAAG,qBAAqB,CAAC,CAAC;IAIxC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,IAAI,IAAI,EAAE,aAAa,KAAK,IAAI;YAAE,SAAS;QAC3C,KAAK,CAAC,IAAI,CAAC;YACT,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAI9B;IACF,IAAI,EAAE,iCAAiC;IACvC,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,EAAE,OAAO,CACb,KAAK,EACH,GAA8H,EAC3F,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,qBAAqB,KAAK,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAC1F,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CACpC,CAAC;QACF,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC"}

package/public/developer-grants-flow.d.ts

@@ -0,0 +1,5 @@
+import { EventoHandler } from "@adviser/cement";
+import { MsgBase, VibesDiyError, W3CWebSocketEvent, ReqEnsureDeveloperGrant, ResEnsureDeveloperGrant, ReqRevokeDeveloperGrant, ResRevokeDeveloperGrant, ReqListDeveloperGrants, ResListDeveloperGrants } from "@vibes.diy/api-types";
+export declare const ensureDeveloperGrantEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqEnsureDeveloperGrant>, ResEnsureDeveloperGrant | VibesDiyError>;
+export declare const revokeDeveloperGrantEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqRevokeDeveloperGrant>, ResRevokeDeveloperGrant | VibesDiyError>;
+export declare const listDeveloperGrantsEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqListDeveloperGrants>, ResListDeveloperGrants | VibesDiyError>;

package/public/developer-grants-flow.js

@@ -0,0 +1,218 @@
+import { Result, Option, EventoResult, exception2Result } from "@adviser/cement";
+import { isReqEnsureDeveloperGrant, isReqRevokeDeveloperGrant, isReqListDeveloperGrants, } from "@vibes.diy/api-types";
+import { unwrapMsgBase } from "../unwrap-msg-base.js";
+import { checkAuth } from "../check-auth.js";
+import { eq, and, lt, desc } from "drizzle-orm/sql/expressions";
+const DEFAULT_LIMIT = 20;
+const MAX_LIMIT = 100;
+async function ownsHandle(vctx, ownerHandle, callerUserId) {
+    const row = await vctx.sql.db
+        .select({ userId: vctx.sql.tables.handleBinding.userId })
+        .from(vctx.sql.tables.handleBinding)
+        .where(and(eq(vctx.sql.tables.handleBinding.handle, ownerHandle), eq(vctx.sql.tables.handleBinding.userId, callerUserId)))
+        .limit(1)
+        .then((rows) => rows[0]);
+    return row !== undefined;
+}
+async function appExists(vctx, ownerHandle, appSlug) {
+    const row = await vctx.sql.db
+        .select({ appSlug: vctx.sql.tables.appSlugBinding.appSlug })
+        .from(vctx.sql.tables.appSlugBinding)
+        .where(and(eq(vctx.sql.tables.appSlugBinding.ownerHandle, ownerHandle), eq(vctx.sql.tables.appSlugBinding.appSlug, appSlug)))
+        .limit(1)
+        .then((rows) => rows[0]);
+    return row !== undefined;
+}
+async function userIdForHandle(vctx, handle) {
+    const row = await vctx.sql.db
+        .select({ userId: vctx.sql.tables.handleBinding.userId })
+        .from(vctx.sql.tables.handleBinding)
+        .where(eq(vctx.sql.tables.handleBinding.handle, handle))
+        .limit(1)
+        .then((rows) => rows[0]);
+    return row?.userId ?? null;
+}
+const OWNER_ERROR = {
+    type: "vibes.diy.res-error",
+    error: { message: "Access denied — developer grants are owner-only", code: "developer-grant-owner-error" },
+};
+export const ensureDeveloperGrantEvento = {
+    hash: "ensure-developer-grant",
+    validate: unwrapMsgBase(async (msg) => {
+        if (isReqEnsureDeveloperGrant(msg.payload)) {
+            return Result.Ok(Option.Some({ ...msg, payload: msg.payload }));
+        }
+        return Result.Ok(Option.None());
+    }),
+    handle: checkAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const callerUserId = req._auth.verifiedAuth.claims.userId;
+        const now = new Date().toISOString();
+        if ((await ownsHandle(vctx, req.ownerHandle, callerUserId)) === false) {
+            await ctx.send.send(ctx, OWNER_ERROR);
+            return Result.Ok(EventoResult.Continue);
+        }
+        if (req.devHandle === req.ownerHandle) {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: { message: "ownerHandle is already a developer", code: "developer-grant-self-handle" },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        if ((await appExists(vctx, req.ownerHandle, req.appSlug)) === false) {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: {
+                    message: `no such app: ${req.ownerHandle}/${req.appSlug}`,
+                    code: "developer-grant-app-not-found",
+                },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        const devUserId = await userIdForHandle(vctx, req.devHandle);
+        if (devUserId === null) {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: { message: `devHandle is not bound: ${req.devHandle}`, code: "developer-grant-unbound-handle" },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        const rUpd = await exception2Result(() => vctx.sql.db
+            .insert(vctx.sql.tables.developerGrants)
+            .values({
+            ownerHandle: req.ownerHandle,
+            appSlug: req.appSlug,
+            devHandle: req.devHandle,
+            devUserId,
+            userId: callerUserId,
+            state: "active",
+            updated: now,
+            created: now,
+        })
+            .onConflictDoUpdate({
+            target: [
+                vctx.sql.tables.developerGrants.ownerHandle,
+                vctx.sql.tables.developerGrants.appSlug,
+                vctx.sql.tables.developerGrants.devHandle,
+            ],
+            set: { devUserId, userId: callerUserId, state: "active", updated: now },
+        }));
+        if (rUpd.isErr())
+            return Result.Err(rUpd);
+        const persisted = await vctx.sql.db
+            .select({ created: vctx.sql.tables.developerGrants.created })
+            .from(vctx.sql.tables.developerGrants)
+            .where(and(eq(vctx.sql.tables.developerGrants.ownerHandle, req.ownerHandle), eq(vctx.sql.tables.developerGrants.appSlug, req.appSlug), eq(vctx.sql.tables.developerGrants.devHandle, req.devHandle)))
+            .limit(1)
+            .then((rows) => rows[0]);
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-ensure-developer-grant",
+            appSlug: req.appSlug,
+            ownerHandle: req.ownerHandle,
+            devHandle: req.devHandle,
+            devUserId,
+            state: "active",
+            updated: now,
+            created: persisted?.created ?? now,
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+export const revokeDeveloperGrantEvento = {
+    hash: "revoke-developer-grant",
+    validate: unwrapMsgBase(async (msg) => {
+        if (isReqRevokeDeveloperGrant(msg.payload)) {
+            return Result.Ok(Option.Some({ ...msg, payload: msg.payload }));
+        }
+        return Result.Ok(Option.None());
+    }),
+    handle: checkAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const callerUserId = req._auth.verifiedAuth.claims.userId;
+        const now = new Date().toISOString();
+        if ((await ownsHandle(vctx, req.ownerHandle, callerUserId)) === false) {
+            await ctx.send.send(ctx, OWNER_ERROR);
+            return Result.Ok(EventoResult.Continue);
+        }
+        const where = and(eq(vctx.sql.tables.developerGrants.ownerHandle, req.ownerHandle), eq(vctx.sql.tables.developerGrants.appSlug, req.appSlug), eq(vctx.sql.tables.developerGrants.devHandle, req.devHandle));
+        const existing = await vctx.sql.db
+            .select({ devHandle: vctx.sql.tables.developerGrants.devHandle })
+            .from(vctx.sql.tables.developerGrants)
+            .where(where)
+            .limit(1)
+            .then((rows) => rows[0]);
+        if (existing === undefined) {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: {
+                    message: `developer grant not found: ${req.ownerHandle}/${req.appSlug}/${req.devHandle}`,
+                    code: "developer-grant-not-found",
+                },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        const rUpd = await exception2Result(() => vctx.sql.db.update(vctx.sql.tables.developerGrants).set({ state: "revoked", updated: now }).where(where));
+        if (rUpd.isErr())
+            return Result.Err(rUpd);
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-revoke-developer-grant",
+            appSlug: req.appSlug,
+            ownerHandle: req.ownerHandle,
+            devHandle: req.devHandle,
+            state: "revoked",
+            updated: now,
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+export const listDeveloperGrantsEvento = {
+    hash: "list-developer-grants",
+    validate: unwrapMsgBase(async (msg) => {
+        if (isReqListDeveloperGrants(msg.payload)) {
+            return Result.Ok(Option.Some({ ...msg, payload: msg.payload }));
+        }
+        return Result.Ok(Option.None());
+    }),
+    handle: checkAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const callerUserId = req._auth.verifiedAuth.claims.userId;
+        const limit = Math.min(req.pager.limit ?? DEFAULT_LIMIT, MAX_LIMIT);
+        if ((await ownsHandle(vctx, req.ownerHandle, callerUserId)) === false) {
+            await ctx.send.send(ctx, OWNER_ERROR);
+            return Result.Ok(EventoResult.Continue);
+        }
+        const conditions = [
+            eq(vctx.sql.tables.developerGrants.ownerHandle, req.ownerHandle),
+            eq(vctx.sql.tables.developerGrants.appSlug, req.appSlug),
+        ];
+        if (req.pager.cursor !== undefined) {
+            conditions.push(lt(vctx.sql.tables.developerGrants.created, req.pager.cursor));
+        }
+        const rows = await vctx.sql.db
+            .select({
+            devHandle: vctx.sql.tables.developerGrants.devHandle,
+            devUserId: vctx.sql.tables.developerGrants.devUserId,
+            state: vctx.sql.tables.developerGrants.state,
+            updated: vctx.sql.tables.developerGrants.updated,
+            created: vctx.sql.tables.developerGrants.created,
+        })
+            .from(vctx.sql.tables.developerGrants)
+            .where(and(...conditions))
+            .orderBy(desc(vctx.sql.tables.developerGrants.created))
+            .limit(limit + 1);
+        const hasMore = rows.length > limit;
+        const items = (hasMore ? rows.slice(0, limit) : rows);
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-list-developer-grants",
+            appSlug: req.appSlug,
+            ownerHandle: req.ownerHandle,
+            items,
+            ...(hasMore ? { nextCursor: items[items.length - 1].created } : {}),
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+//# sourceMappingURL=developer-grants-flow.js.map

package/public/developer-grants-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"developer-grants-flow.js","sourceRoot":"","sources":["../../jsr/public/developer-grants-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,MAAM,EAAE,MAAM,EAAsC,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACpI,OAAO,EAQL,yBAAyB,EAGzB,yBAAyB,EAGzB,wBAAwB,GAEzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAGhE,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,SAAS,GAAG,GAAG,CAAC;AAMtB,KAAK,UAAU,UAAU,CAAC,IAAoB,EAAE,WAAmB,EAAE,YAAoB;IACvF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;SACnC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;SACzH,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,KAAK,SAAS,CAAC;AAC3B,CAAC;AAMD,KAAK,UAAU,SAAS,CAAC,IAAoB,EAAE,WAAmB,EAAE,OAAe;IACjF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;SAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;SACpC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;SAC5H,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,KAAK,SAAS,CAAC;AAC3B,CAAC;AAGD,KAAK,UAAU,eAAe,CAAC,IAAoB,EAAE,MAAc;IACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;SACnC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACvD,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC;AAC7B,CAAC;AAED,MAAM,WAAW,GAAa;IAC5B,IAAI,EAAE,qBAAqB;IAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE,IAAI,EAAE,6BAA6B,EAAE;CAC3G,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAInC;IACF,IAAI,EAAE,wBAAwB;IAC9B,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,IAAI,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAkC,EAAE,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAIC,EACkC,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACtE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAID,IAAI,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE,IAAI,EAAE,6BAA6B,EAAE;aAC7D,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAID,IAAI,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACpE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE;oBACL,OAAO,EAAE,gBAAgB,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,OAAO,EAAE;oBACzD,IAAI,EAAE,+BAA+B;iBACtC;aAC+B,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAID,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,2BAA2B,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE;aACtE,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAID,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACvC,IAAI,CAAC,GAAG,CAAC,EAAE;aACR,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;aACvC,MAAM,CAAC;YACN,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS;YACT,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,GAAG;SACb,CAAC;aACD,kBAAkB,CAAC;YAClB,MAAM,EAAE;gBACN,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW;gBAC3C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO;gBACvC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS;aAC1C;YACD,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE;SACxE,CAAC,CACL,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAG1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;aACrC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAChE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EACxD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAC7D,CACF;aACA,KAAK,CAAC,CAAC,CAAC;aACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3B,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS;YACT,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,GAAG;SACD,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAInC;IACF,IAAI,EAAE,wBAAwB;IAC9B,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,IAAI,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAkC,EAAE,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAIC,EACkC,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACtE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CACf,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAChE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EACxD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAC7D,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;aAChE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;aACrC,KAAK,CAAC,KAAK,CAAC;aACZ,KAAK,CAAC,CAAC,CAAC;aACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE;oBACL,OAAO,EAAE,8BAA8B,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,EAAE;oBACxF,IAAI,EAAE,2BAA2B;iBAClC;aAC+B,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAGD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CACzG,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,GAAG;SACqB,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAIlC;IACF,IAAI,EAAE,uBAAuB;IAC7B,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,IAAI,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAiC,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAIC,EACkC,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,aAAa,EAAE,SAAS,CAAC,CAAC;QAEpE,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACtE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,UAAU,GAAU;YACxB,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC;YAChE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC;SACzD,CAAC;QACF,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;aAC3B,MAAM,CAAC;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS;YACpD,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS;YACpD,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK;YAC5C,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO;YAChD,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO;SACjD,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;aACrC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;aACzB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;aACtD,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAoC,CAAC;QAEzF,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,qCAAqC;YAC3C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,KAAK;YACL,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnC,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC"}

package/public/developer-grants.d.ts

@@ -0,0 +1,12 @@
+import { VibesApiSQLCtx } from "../types.js";
+export declare function resolveDeveloperAccess(vctx: VibesApiSQLCtx, { ownerHandle, appSlug, callerUserId }: {
+    ownerHandle: string;
+    appSlug: string;
+    callerUserId: string;
+}): Promise<{
+    devHandle: string;
+} | null>;
+export declare function resolveDeveloperHandles(vctx: VibesApiSQLCtx, { ownerHandle, appSlug }: {
+    ownerHandle: string;
+    appSlug: string;
+}): Promise<string[]>;

package/public/developer-grants.js

@@ -0,0 +1,40 @@
+import { isDirectChannel } from "@vibes.diy/api-types";
+import { and, eq } from "drizzle-orm/sql/expressions";
+async function currentUserIdForHandle(vctx, handle) {
+    const row = await vctx.sql.db
+        .select({ userId: vctx.sql.tables.handleBinding.userId })
+        .from(vctx.sql.tables.handleBinding)
+        .where(eq(vctx.sql.tables.handleBinding.handle, handle))
+        .limit(1)
+        .then((rows) => rows[0]);
+    return row?.userId ?? null;
+}
+export async function resolveDeveloperAccess(vctx, { ownerHandle, appSlug, callerUserId }) {
+    if (isDirectChannel(ownerHandle))
+        return null;
+    const currentOwnerUserId = await currentUserIdForHandle(vctx, ownerHandle);
+    if (currentOwnerUserId === null)
+        return null;
+    const row = await vctx.sql.db
+        .select({ devHandle: vctx.sql.tables.developerGrants.devHandle })
+        .from(vctx.sql.tables.developerGrants)
+        .innerJoin(vctx.sql.tables.handleBinding, and(eq(vctx.sql.tables.handleBinding.handle, vctx.sql.tables.developerGrants.devHandle), eq(vctx.sql.tables.handleBinding.userId, vctx.sql.tables.developerGrants.devUserId)))
+        .where(and(eq(vctx.sql.tables.developerGrants.ownerHandle, ownerHandle), eq(vctx.sql.tables.developerGrants.appSlug, appSlug), eq(vctx.sql.tables.developerGrants.devUserId, callerUserId), eq(vctx.sql.tables.developerGrants.state, "active"), eq(vctx.sql.tables.developerGrants.userId, currentOwnerUserId)))
+        .limit(1)
+        .then((rows) => rows[0]);
+    return row === undefined ? null : { devHandle: row.devHandle };
+}
+export async function resolveDeveloperHandles(vctx, { ownerHandle, appSlug }) {
+    if (isDirectChannel(ownerHandle))
+        return [];
+    const currentOwnerUserId = await currentUserIdForHandle(vctx, ownerHandle);
+    if (currentOwnerUserId === null)
+        return [];
+    const rows = await vctx.sql.db
+        .select({ devHandle: vctx.sql.tables.developerGrants.devHandle })
+        .from(vctx.sql.tables.developerGrants)
+        .innerJoin(vctx.sql.tables.handleBinding, and(eq(vctx.sql.tables.handleBinding.handle, vctx.sql.tables.developerGrants.devHandle), eq(vctx.sql.tables.handleBinding.userId, vctx.sql.tables.developerGrants.devUserId)))
+        .where(and(eq(vctx.sql.tables.developerGrants.ownerHandle, ownerHandle), eq(vctx.sql.tables.developerGrants.appSlug, appSlug), eq(vctx.sql.tables.developerGrants.state, "active"), eq(vctx.sql.tables.developerGrants.userId, currentOwnerUserId)));
+    return rows.map((r) => r.devHandle);
+}
+//# sourceMappingURL=developer-grants.js.map

package/public/developer-grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"developer-grants.js","sourceRoot":"","sources":["../../jsr/public/developer-grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAgBtD,KAAK,UAAU,sBAAsB,CAAC,IAAoB,EAAE,MAAc;IACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;SACnC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACvD,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC;AAC7B,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoB,EACpB,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAkE;IAEtG,IAAI,eAAe,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAK9C,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3E,IAAI,kBAAkB,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAM7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;SAChE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;SACrC,SAAS,CACR,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAC7B,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,EACnF,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CACpF,CACF;SACA,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,EAC5D,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,EACpD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,EAC3D,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EACnD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAC/D,CACF;SACA,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;AACjE,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAoB,EACpB,EAAE,WAAW,EAAE,OAAO,EAA4C;IAElE,IAAI,eAAe,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAG5C,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3E,IAAI,kBAAkB,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAI3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3B,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;SAChE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;SACrC,SAAS,CACR,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAC7B,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,EACnF,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CACpF,CACF;SACA,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,EAC5D,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,EACpD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EACnD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAC/D,CACF,CAAC;IAEJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC"}

package/public/email-unsubscribe.d.ts

@@ -0,0 +1,7 @@
+import { CFEnv } from "@vibes.diy/api-types";
+import { cfDrizzle, VibesApiTables } from "@vibes.diy/api-sql";
+export interface EmailUnsubscribeSql {
+    db: ReturnType<typeof cfDrizzle>["db"];
+    tables: VibesApiTables;
+}
+export declare function handleEmailUnsubscribe(request: Request, env: CFEnv, sqlOverride?: EmailUnsubscribeSql): Promise<Response>;