@vibes.diy/api-svc 5.0.1 → 5.2.2

package/public/audience-derived-trigger.d.ts

@@ -0,0 +1,15 @@
+import { VibesApiSQLCtx } from "../types.js";
+export declare function getAppPrivacySensitive(vctx: VibesApiSQLCtx, key: {
+    ownerHandle: string;
+    appSlug: string;
+}): Promise<boolean>;
+export interface MaybeResolveAudienceArmOnWriteArgs {
+    readonly ownerHandle: string;
+    readonly appSlug: string;
+    readonly subjectHandle: string;
+    readonly audience: {
+        followersOf?: string;
+        mutualsOf?: string;
+    } | undefined;
+}
+export declare function maybeResolveAudienceArmOnWrite(vctx: VibesApiSQLCtx, args: MaybeResolveAudienceArmOnWriteArgs): Promise<void>;

package/public/audience-derived-trigger.js

@@ -0,0 +1,45 @@
+import { exception2Result } from "@adviser/cement";
+import { and, eq } from "drizzle-orm/sql/expressions";
+import { ActiveEntry, isActivePrivacySensitive, parseArrayWarning, resolvePromptOutcome } from "@vibes.diy/api-types";
+import { ensureLogger } from "@vibes.diy/identity";
+import { getArmState, setArm } from "./audience-arms-store.js";
+import { getAudiencePolicy } from "./social-store.js";
+export async function getAppPrivacySensitive(vctx, key) {
+    const t = vctx.sql.tables.appSettings;
+    const row = await vctx.sql.db
+        .select({ settings: t.settings })
+        .from(t)
+        .where(and(eq(t.appSlug, key.appSlug), eq(t.ownerHandle, key.ownerHandle)))
+        .limit(1)
+        .then((r) => r[0]);
+    const { filtered: entries, warning } = parseArrayWarning(row?.settings ?? [], ActiveEntry);
+    if (warning.length > 0) {
+        ensureLogger(vctx.sthis, "getAppPrivacySensitive").Warn().Any({ parseErrors: warning }).Msg("skip");
+    }
+    return entries.find(isActivePrivacySensitive)?.sensitive === true;
+}
+export async function maybeResolveAudienceArmOnWrite(vctx, args) {
+    const { ownerHandle, appSlug, subjectHandle, audience } = args;
+    if (audience?.followersOf !== subjectHandle && audience?.mutualsOf !== subjectHandle)
+        return;
+    const r = await exception2Result(async () => {
+        const prior = await getArmState(vctx, { subjectHandle, ownerHandle, appSlug });
+        if (prior !== null)
+            return;
+        const [policy, sensitive] = await Promise.all([
+            getAudiencePolicy(vctx, subjectHandle),
+            getAppPrivacySensitive(vctx, { ownerHandle, appSlug }),
+        ]);
+        const outcome = resolvePromptOutcome({ policy, sensitive, prior });
+        if (outcome === "auto-allow") {
+            await setArm(vctx, { subjectHandle, ownerHandle, appSlug, state: "allow" });
+        }
+    });
+    if (r.isErr()) {
+        ensureLogger(vctx.sthis, "maybeResolveAudienceArmOnWrite")
+            .Error()
+            .Any({ err: r.Err(), ownerHandle, appSlug, subjectHandle })
+            .Msg("derived audience-arm trigger failed; write already committed, skipping");
+    }
+}
+//# sourceMappingURL=audience-derived-trigger.js.map

package/public/audience-derived-trigger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience-derived-trigger.js","sourceRoot":"","sources":["../../jsr/public/audience-derived-trigger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACtH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAWtD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoB,EACpB,GAA6C;IAE7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;IACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;SAChC,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;SAC1E,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;AACpE,CAAC;AAgCD,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,IAAoB,EACpB,IAAwC;IAExC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC/D,IAAI,QAAQ,EAAE,WAAW,KAAK,aAAa,IAAI,QAAQ,EAAE,SAAS,KAAK,aAAa;QAAE,OAAO;IAE7F,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE;QAC1C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO;QAE3B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC;YACtC,sBAAsB,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;SACvD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,oBAAoB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;YAC7B,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACd,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,gCAAgC,CAAC;aACvD,KAAK,EAAE;aACP,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;aAC1D,GAAG,CAAC,wEAAwE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC"}

package/public/audience-key-patch.d.ts

@@ -0,0 +1,16 @@
+import type { WSSendProvider } from "../svc-ws-send-provider.js";
+export interface AudienceKeyPatch {
+    readonly op: "add" | "remove";
+    readonly channels: string[];
+    readonly appScope?: {
+        readonly ownerHandle: string;
+        readonly appSlug: string;
+    };
+}
+export interface AudienceKeyPatchHooks {
+    register?(key: string): Promise<void>;
+    deregister?(key: string): Promise<void>;
+    isArmed?(ownerHandle: string, appSlug: string, subjectHandle: string): boolean;
+}
+export declare function subscribedDbPrefixes(conn: Pick<WSSendProvider, "subscribedDocKeys">): Set<string>;
+export declare function patchAudienceKeys(conn: Pick<WSSendProvider, "subscribedDocKeys">, patch: AudienceKeyPatch, hooks?: AudienceKeyPatchHooks): void;

package/public/audience-key-patch.js

@@ -0,0 +1,38 @@
+import { audienceSubjectFromChannel } from "./audience-channels.js";
+export function subscribedDbPrefixes(conn) {
+    const prefixes = new Set();
+    for (const key of conn.subscribedDocKeys) {
+        const parts = key.split("/");
+        if (parts.length < 3)
+            continue;
+        prefixes.add(parts.slice(0, 3).join("/"));
+    }
+    return prefixes;
+}
+export function patchAudienceKeys(conn, patch, hooks) {
+    for (const prefix of subscribedDbPrefixes(conn)) {
+        const [ownerHandle, appSlug] = prefix.split("/");
+        if (patch.appScope !== undefined && (ownerHandle !== patch.appScope.ownerHandle || appSlug !== patch.appScope.appSlug)) {
+            continue;
+        }
+        for (const ch of patch.channels) {
+            const key = `${prefix}/${ch}`;
+            if (patch.op === "add") {
+                if (hooks?.isArmed !== undefined) {
+                    const subject = audienceSubjectFromChannel(ch);
+                    if (subject === undefined || hooks.isArmed(ownerHandle, appSlug, subject) === false)
+                        continue;
+                }
+                if (conn.subscribedDocKeys.has(key) === false) {
+                    conn.subscribedDocKeys.add(key);
+                    hooks?.register?.(key).catch((e) => console.error("audience-key registration error:", e));
+                }
+            }
+            else if (conn.subscribedDocKeys.has(key)) {
+                conn.subscribedDocKeys.delete(key);
+                hooks?.deregister?.(key).catch((e) => console.error("audience-key deregistration error:", e));
+            }
+        }
+    }
+}
+//# sourceMappingURL=audience-key-patch.js.map

package/public/audience-key-patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience-key-patch.js","sourceRoot":"","sources":["../../jsr/public/audience-key-patch.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AA+CpE,MAAM,UAAU,oBAAoB,CAAC,IAA+C;IAClF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAOD,MAAM,UAAU,iBAAiB,CAC/B,IAA+C,EAC/C,KAAuB,EACvB,KAA6B;IAE7B,KAAK,MAAM,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,QAAQ,CAAC,WAAW,IAAI,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvH,SAAS;QACX,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,EAAE,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBACvB,IAAI,KAAK,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,OAAO,GAAG,0BAA0B,CAAC,EAAE,CAAC,CAAC;oBAC/C,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK;wBAAE,SAAS;gBAChG,CAAC;gBACD,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC9C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAChC,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACrG,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACnC,KAAK,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/public/channel-read-filter.js

@@ -1,3 +1,4 @@
+import { audienceChannelsOf } from "./audience-channels.js";
 export function filterDocsByChannel(docs, outputRows, userHandle, effectiveChannels, publicChannels, adminOverride = false, requireOutput = false) {
     if (adminOverride && !requireOutput)
         return docs;
@@ -6,8 +7,9 @@ export function filterDocsByChannel(docs, outputRows, userHandle, effectiveChann
     const docChannels = new Map();
     for (const row of outputRows) {
         const parsed = JSON.parse(row.output);
-        if (parsed.channels !== undefined && Array.isArray(parsed.channels)) {
-            docChannels.set(row.docId, parsed.channels);
+        const channels = [...(Array.isArray(parsed.channels) ? parsed.channels : []), ...audienceChannelsOf(parsed)];
+        if (channels.length > 0) {
+            docChannels.set(row.docId, channels);
         }
     }
     return docs.filter((doc) => {

package/public/channel-read-filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"channel-read-filter.js","sourceRoot":"","sources":["../../jsr/public/channel-read-filter.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,mBAAmB,CACjC,IAAW,EACX,UAAuB,EACvB,UAAyB,EACzB,iBAA8B,EAC9B,cAA2B,EAC3B,aAAa,GAAG,KAAK,EAKrB,aAAa,GAAG,KAAK;IAErB,IAAI,aAAa,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAQjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAA4B,CAAC;QACjE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"channel-read-filter.js","sourceRoot":"","sources":["../../jsr/public/channel-read-filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAS5D,MAAM,UAAU,mBAAmB,CACjC,IAAW,EACX,UAAuB,EACvB,UAAyB,EACzB,iBAA8B,EAC9B,cAA2B,EAC3B,aAAa,GAAG,KAAK,EAKrB,aAAa,GAAG,KAAK;IAErB,IAAI,aAAa,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAQjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAGnC,CAAC;QAMF,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7G,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}

package/public/curated-new-vibes.d.ts

@@ -1,3 +1,5 @@
 import { EventoHandler } from "@adviser/cement";
 import { MsgBase, ReqCuratedNewVibes, ResCuratedNewVibes, VibesDiyError, W3CWebSocketEvent } from "@vibes.diy/api-types";
+import { VibesApiSQLCtx } from "../types.js";
+export declare function computeCuratedNewVibes(vctx: VibesApiSQLCtx, limit: number): Promise<ResCuratedNewVibes>;
 export declare const curatedNewVibesEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqCuratedNewVibes>, ResCuratedNewVibes | VibesDiyError>;

package/public/curated-new-vibes.js

@@ -6,7 +6,7 @@ import { unwrapMsgBase } from "../unwrap-msg-base.js";
 import { optAuth } from "../check-auth.js";
 import { cachedReport } from "./report-cache.js";
 import { clampHomeFeedLimit, HOME_FEED_SCAN_FACTOR, loadVibeDisplayInfo, titleIconKey } from "./home-feed-common.js";
-async function computeCuratedNewVibes(vctx, limit) {
+export async function computeCuratedNewVibes(vctx, limit) {
     const cur = vctx.sql.tables.vibeCuration;
     const asb = vctx.sql.tables.appSlugBinding;
     const candidates = await vctx.sql.db

package/public/curated-new-vibes.js.map

@@ -1 +1 @@
-{"version":3,"file":"curated-new-vibes.js","sourceRoot":"","sources":["../../jsr/public/curated-new-vibes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,MAAM,EAAE,MAAM,EAAsC,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAClH,OAAO,EAQL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAMrH,KAAK,UAAU,sBAAsB,CAAC,IAAoB,EAAE,KAAa;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;IAI3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SACjC,MAAM,CAAC;QACN,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,SAAS;KAC1B,CAAC;SACD,IAAI,CAAC,GAAG,CAAC;SACT,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;SAClH,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;SAChC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;SACtE,KAAK,CAAC,KAAK,GAAG,qBAAqB,CAAC,CAAC;IAIxC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,IAAI,IAAI,EAAE,aAAa,KAAK,IAAI;YAAE,SAAS;QAC3C,KAAK,CAAC,IAAI,CAAC;YACT,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAI9B;IACF,IAAI,EAAE,iCAAiC;IACvC,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,EAAE,OAAO,CACb,KAAK,EACH,GAA8H,EAC3F,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,qBAAqB,KAAK,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAC1F,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CACpC,CAAC;QACF,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC"}
+{"version":3,"file":"curated-new-vibes.js","sourceRoot":"","sources":["../../jsr/public/curated-new-vibes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,MAAM,EAAE,MAAM,EAAsC,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAClH,OAAO,EAQL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAMrH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAoB,EAAE,KAAa;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;IAI3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SACjC,MAAM,CAAC;QACN,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,SAAS;KAC1B,CAAC;SACD,IAAI,CAAC,GAAG,CAAC;SACT,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;SAClH,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;SAChC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;SACtE,KAAK,CAAC,KAAK,GAAG,qBAAqB,CAAC,CAAC;IAIxC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,IAAI,IAAI,EAAE,aAAa,KAAK,IAAI;YAAE,SAAS;QAC3C,KAAK,CAAC,IAAI,CAAC;YACT,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAI9B;IACF,IAAI,EAAE,iCAAiC;IACvC,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,EAAE,OAAO,CACb,KAAK,EACH,GAA8H,EAC3F,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,qBAAqB,KAAK,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAC1F,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CACpC,CAAC;QACF,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC"}

package/public/developer-grants-flow.d.ts

@@ -0,0 +1,5 @@
+import { EventoHandler } from "@adviser/cement";
+import { MsgBase, VibesDiyError, W3CWebSocketEvent, ReqEnsureDeveloperGrant, ResEnsureDeveloperGrant, ReqRevokeDeveloperGrant, ResRevokeDeveloperGrant, ReqListDeveloperGrants, ResListDeveloperGrants } from "@vibes.diy/api-types";
+export declare const ensureDeveloperGrantEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqEnsureDeveloperGrant>, ResEnsureDeveloperGrant | VibesDiyError>;
+export declare const revokeDeveloperGrantEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqRevokeDeveloperGrant>, ResRevokeDeveloperGrant | VibesDiyError>;
+export declare const listDeveloperGrantsEvento: EventoHandler<W3CWebSocketEvent, MsgBase<ReqListDeveloperGrants>, ResListDeveloperGrants | VibesDiyError>;

package/public/developer-grants-flow.js

@@ -0,0 +1,218 @@
+import { Result, Option, EventoResult, exception2Result } from "@adviser/cement";
+import { isReqEnsureDeveloperGrant, isReqRevokeDeveloperGrant, isReqListDeveloperGrants, } from "@vibes.diy/api-types";
+import { unwrapMsgBase } from "../unwrap-msg-base.js";
+import { checkAuth } from "../check-auth.js";
+import { eq, and, lt, desc } from "drizzle-orm/sql/expressions";
+const DEFAULT_LIMIT = 20;
+const MAX_LIMIT = 100;
+async function ownsHandle(vctx, ownerHandle, callerUserId) {
+    const row = await vctx.sql.db
+        .select({ userId: vctx.sql.tables.handleBinding.userId })
+        .from(vctx.sql.tables.handleBinding)
+        .where(and(eq(vctx.sql.tables.handleBinding.handle, ownerHandle), eq(vctx.sql.tables.handleBinding.userId, callerUserId)))
+        .limit(1)
+        .then((rows) => rows[0]);
+    return row !== undefined;
+}
+async function appExists(vctx, ownerHandle, appSlug) {
+    const row = await vctx.sql.db
+        .select({ appSlug: vctx.sql.tables.appSlugBinding.appSlug })
+        .from(vctx.sql.tables.appSlugBinding)
+        .where(and(eq(vctx.sql.tables.appSlugBinding.ownerHandle, ownerHandle), eq(vctx.sql.tables.appSlugBinding.appSlug, appSlug)))
+        .limit(1)
+        .then((rows) => rows[0]);
+    return row !== undefined;
+}
+async function userIdForHandle(vctx, handle) {
+    const row = await vctx.sql.db
+        .select({ userId: vctx.sql.tables.handleBinding.userId })
+        .from(vctx.sql.tables.handleBinding)
+        .where(eq(vctx.sql.tables.handleBinding.handle, handle))
+        .limit(1)
+        .then((rows) => rows[0]);
+    return row?.userId ?? null;
+}
+const OWNER_ERROR = {
+    type: "vibes.diy.res-error",
+    error: { message: "Access denied — developer grants are owner-only", code: "developer-grant-owner-error" },
+};
+export const ensureDeveloperGrantEvento = {
+    hash: "ensure-developer-grant",
+    validate: unwrapMsgBase(async (msg) => {
+        if (isReqEnsureDeveloperGrant(msg.payload)) {
+            return Result.Ok(Option.Some({ ...msg, payload: msg.payload }));
+        }
+        return Result.Ok(Option.None());
+    }),
+    handle: checkAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const callerUserId = req._auth.verifiedAuth.claims.userId;
+        const now = new Date().toISOString();
+        if ((await ownsHandle(vctx, req.ownerHandle, callerUserId)) === false) {
+            await ctx.send.send(ctx, OWNER_ERROR);
+            return Result.Ok(EventoResult.Continue);
+        }
+        if (req.devHandle === req.ownerHandle) {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: { message: "ownerHandle is already a developer", code: "developer-grant-self-handle" },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        if ((await appExists(vctx, req.ownerHandle, req.appSlug)) === false) {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: {
+                    message: `no such app: ${req.ownerHandle}/${req.appSlug}`,
+                    code: "developer-grant-app-not-found",
+                },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        const devUserId = await userIdForHandle(vctx, req.devHandle);
+        if (devUserId === null) {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: { message: `devHandle is not bound: ${req.devHandle}`, code: "developer-grant-unbound-handle" },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        const rUpd = await exception2Result(() => vctx.sql.db
+            .insert(vctx.sql.tables.developerGrants)
+            .values({
+            ownerHandle: req.ownerHandle,
+            appSlug: req.appSlug,
+            devHandle: req.devHandle,
+            devUserId,
+            userId: callerUserId,
+            state: "active",
+            updated: now,
+            created: now,
+        })
+            .onConflictDoUpdate({
+            target: [
+                vctx.sql.tables.developerGrants.ownerHandle,
+                vctx.sql.tables.developerGrants.appSlug,
+                vctx.sql.tables.developerGrants.devHandle,
+            ],
+            set: { devUserId, userId: callerUserId, state: "active", updated: now },
+        }));
+        if (rUpd.isErr())
+            return Result.Err(rUpd);
+        const persisted = await vctx.sql.db
+            .select({ created: vctx.sql.tables.developerGrants.created })
+            .from(vctx.sql.tables.developerGrants)
+            .where(and(eq(vctx.sql.tables.developerGrants.ownerHandle, req.ownerHandle), eq(vctx.sql.tables.developerGrants.appSlug, req.appSlug), eq(vctx.sql.tables.developerGrants.devHandle, req.devHandle)))
+            .limit(1)
+            .then((rows) => rows[0]);
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-ensure-developer-grant",
+            appSlug: req.appSlug,
+            ownerHandle: req.ownerHandle,
+            devHandle: req.devHandle,
+            devUserId,
+            state: "active",
+            updated: now,
+            created: persisted?.created ?? now,
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+export const revokeDeveloperGrantEvento = {
+    hash: "revoke-developer-grant",
+    validate: unwrapMsgBase(async (msg) => {
+        if (isReqRevokeDeveloperGrant(msg.payload)) {
+            return Result.Ok(Option.Some({ ...msg, payload: msg.payload }));
+        }
+        return Result.Ok(Option.None());
+    }),
+    handle: checkAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const callerUserId = req._auth.verifiedAuth.claims.userId;
+        const now = new Date().toISOString();
+        if ((await ownsHandle(vctx, req.ownerHandle, callerUserId)) === false) {
+            await ctx.send.send(ctx, OWNER_ERROR);
+            return Result.Ok(EventoResult.Continue);
+        }
+        const where = and(eq(vctx.sql.tables.developerGrants.ownerHandle, req.ownerHandle), eq(vctx.sql.tables.developerGrants.appSlug, req.appSlug), eq(vctx.sql.tables.developerGrants.devHandle, req.devHandle));
+        const existing = await vctx.sql.db
+            .select({ devHandle: vctx.sql.tables.developerGrants.devHandle })
+            .from(vctx.sql.tables.developerGrants)
+            .where(where)
+            .limit(1)
+            .then((rows) => rows[0]);
+        if (existing === undefined) {
+            await ctx.send.send(ctx, {
+                type: "vibes.diy.res-error",
+                error: {
+                    message: `developer grant not found: ${req.ownerHandle}/${req.appSlug}/${req.devHandle}`,
+                    code: "developer-grant-not-found",
+                },
+            });
+            return Result.Ok(EventoResult.Continue);
+        }
+        const rUpd = await exception2Result(() => vctx.sql.db.update(vctx.sql.tables.developerGrants).set({ state: "revoked", updated: now }).where(where));
+        if (rUpd.isErr())
+            return Result.Err(rUpd);
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-revoke-developer-grant",
+            appSlug: req.appSlug,
+            ownerHandle: req.ownerHandle,
+            devHandle: req.devHandle,
+            state: "revoked",
+            updated: now,
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+export const listDeveloperGrantsEvento = {
+    hash: "list-developer-grants",
+    validate: unwrapMsgBase(async (msg) => {
+        if (isReqListDeveloperGrants(msg.payload)) {
+            return Result.Ok(Option.Some({ ...msg, payload: msg.payload }));
+        }
+        return Result.Ok(Option.None());
+    }),
+    handle: checkAuth(async (ctx) => {
+        const req = ctx.validated.payload;
+        const vctx = ctx.ctx.getOrThrow("vibesApiCtx");
+        const callerUserId = req._auth.verifiedAuth.claims.userId;
+        const limit = Math.min(req.pager.limit ?? DEFAULT_LIMIT, MAX_LIMIT);
+        if ((await ownsHandle(vctx, req.ownerHandle, callerUserId)) === false) {
+            await ctx.send.send(ctx, OWNER_ERROR);
+            return Result.Ok(EventoResult.Continue);
+        }
+        const conditions = [
+            eq(vctx.sql.tables.developerGrants.ownerHandle, req.ownerHandle),
+            eq(vctx.sql.tables.developerGrants.appSlug, req.appSlug),
+        ];
+        if (req.pager.cursor !== undefined) {
+            conditions.push(lt(vctx.sql.tables.developerGrants.created, req.pager.cursor));
+        }
+        const rows = await vctx.sql.db
+            .select({
+            devHandle: vctx.sql.tables.developerGrants.devHandle,
+            devUserId: vctx.sql.tables.developerGrants.devUserId,
+            state: vctx.sql.tables.developerGrants.state,
+            updated: vctx.sql.tables.developerGrants.updated,
+            created: vctx.sql.tables.developerGrants.created,
+        })
+            .from(vctx.sql.tables.developerGrants)
+            .where(and(...conditions))
+            .orderBy(desc(vctx.sql.tables.developerGrants.created))
+            .limit(limit + 1);
+        const hasMore = rows.length > limit;
+        const items = (hasMore ? rows.slice(0, limit) : rows);
+        await ctx.send.send(ctx, {
+            type: "vibes.diy.res-list-developer-grants",
+            appSlug: req.appSlug,
+            ownerHandle: req.ownerHandle,
+            items,
+            ...(hasMore ? { nextCursor: items[items.length - 1].created } : {}),
+        });
+        return Result.Ok(EventoResult.Continue);
+    }),
+};
+//# sourceMappingURL=developer-grants-flow.js.map

package/public/developer-grants-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"developer-grants-flow.js","sourceRoot":"","sources":["../../jsr/public/developer-grants-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,MAAM,EAAE,MAAM,EAAsC,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACpI,OAAO,EAQL,yBAAyB,EAGzB,yBAAyB,EAGzB,wBAAwB,GAEzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAGhE,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,SAAS,GAAG,GAAG,CAAC;AAMtB,KAAK,UAAU,UAAU,CAAC,IAAoB,EAAE,WAAmB,EAAE,YAAoB;IACvF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;SACnC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;SACzH,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,KAAK,SAAS,CAAC;AAC3B,CAAC;AAMD,KAAK,UAAU,SAAS,CAAC,IAAoB,EAAE,WAAmB,EAAE,OAAe;IACjF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;SAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;SACpC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;SAC5H,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,KAAK,SAAS,CAAC;AAC3B,CAAC;AAGD,KAAK,UAAU,eAAe,CAAC,IAAoB,EAAE,MAAc;IACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;SACnC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACvD,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC;AAC7B,CAAC;AAED,MAAM,WAAW,GAAa;IAC5B,IAAI,EAAE,qBAAqB;IAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE,IAAI,EAAE,6BAA6B,EAAE;CAC3G,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAInC;IACF,IAAI,EAAE,wBAAwB;IAC9B,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,IAAI,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAkC,EAAE,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAIC,EACkC,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACtE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAID,IAAI,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE,IAAI,EAAE,6BAA6B,EAAE;aAC7D,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAID,IAAI,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACpE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE;oBACL,OAAO,EAAE,gBAAgB,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,OAAO,EAAE;oBACzD,IAAI,EAAE,+BAA+B;iBACtC;aAC+B,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAID,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,EAAE,OAAO,EAAE,2BAA2B,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE;aACtE,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAID,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACvC,IAAI,CAAC,GAAG,CAAC,EAAE;aACR,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;aACvC,MAAM,CAAC;YACN,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS;YACT,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,GAAG;SACb,CAAC;aACD,kBAAkB,CAAC;YAClB,MAAM,EAAE;gBACN,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW;gBAC3C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO;gBACvC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS;aAC1C;YACD,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE;SACxE,CAAC,CACL,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAG1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;aACrC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAChE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EACxD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAC7D,CACF;aACA,KAAK,CAAC,CAAC,CAAC;aACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3B,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS;YACT,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,GAAG;SACD,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAInC;IACF,IAAI,EAAE,wBAAwB;IAC9B,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,IAAI,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAkC,EAAE,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAIC,EACkC,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACtE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CACf,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,EAChE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EACxD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAC7D,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;aAChE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;aACrC,KAAK,CAAC,KAAK,CAAC;aACZ,KAAK,CAAC,CAAC,CAAC;aACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE;oBACL,OAAO,EAAE,8BAA8B,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,EAAE;oBACxF,IAAI,EAAE,2BAA2B;iBAClC;aAC+B,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAGD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CACzG,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,GAAG;SACqB,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAIlC;IACF,IAAI,EAAE,uBAAuB;IAC7B,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7C,IAAI,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAiC,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,EAAE,SAAS,CACf,KAAK,EACH,GAIC,EACkC,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAiB,aAAa,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,aAAa,EAAE,SAAS,CAAC,CAAC;QAEpE,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACtE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,UAAU,GAAU;YACxB,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC;YAChE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC;SACzD,CAAC;QACF,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;aAC3B,MAAM,CAAC;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS;YACpD,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS;YACpD,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK;YAC5C,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO;YAChD,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO;SACjD,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;aACrC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;aACzB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;aACtD,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAoC,CAAC;QAEzF,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,IAAI,EAAE,qCAAqC;YAC3C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,KAAK;YACL,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnC,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CACF;CACF,CAAC"}

package/public/developer-grants.d.ts

@@ -0,0 +1,12 @@
+import { VibesApiSQLCtx } from "../types.js";
+export declare function resolveDeveloperAccess(vctx: VibesApiSQLCtx, { ownerHandle, appSlug, callerUserId }: {
+    ownerHandle: string;
+    appSlug: string;
+    callerUserId: string;
+}): Promise<{
+    devHandle: string;
+} | null>;
+export declare function resolveDeveloperHandles(vctx: VibesApiSQLCtx, { ownerHandle, appSlug }: {
+    ownerHandle: string;
+    appSlug: string;
+}): Promise<string[]>;

package/public/developer-grants.js

@@ -0,0 +1,40 @@
+import { isDirectChannel } from "@vibes.diy/api-types";
+import { and, eq } from "drizzle-orm/sql/expressions";
+async function currentUserIdForHandle(vctx, handle) {
+    const row = await vctx.sql.db
+        .select({ userId: vctx.sql.tables.handleBinding.userId })
+        .from(vctx.sql.tables.handleBinding)
+        .where(eq(vctx.sql.tables.handleBinding.handle, handle))
+        .limit(1)
+        .then((rows) => rows[0]);
+    return row?.userId ?? null;
+}
+export async function resolveDeveloperAccess(vctx, { ownerHandle, appSlug, callerUserId }) {
+    if (isDirectChannel(ownerHandle))
+        return null;
+    const currentOwnerUserId = await currentUserIdForHandle(vctx, ownerHandle);
+    if (currentOwnerUserId === null)
+        return null;
+    const row = await vctx.sql.db
+        .select({ devHandle: vctx.sql.tables.developerGrants.devHandle })
+        .from(vctx.sql.tables.developerGrants)
+        .innerJoin(vctx.sql.tables.handleBinding, and(eq(vctx.sql.tables.handleBinding.handle, vctx.sql.tables.developerGrants.devHandle), eq(vctx.sql.tables.handleBinding.userId, vctx.sql.tables.developerGrants.devUserId)))
+        .where(and(eq(vctx.sql.tables.developerGrants.ownerHandle, ownerHandle), eq(vctx.sql.tables.developerGrants.appSlug, appSlug), eq(vctx.sql.tables.developerGrants.devUserId, callerUserId), eq(vctx.sql.tables.developerGrants.state, "active"), eq(vctx.sql.tables.developerGrants.userId, currentOwnerUserId)))
+        .limit(1)
+        .then((rows) => rows[0]);
+    return row === undefined ? null : { devHandle: row.devHandle };
+}
+export async function resolveDeveloperHandles(vctx, { ownerHandle, appSlug }) {
+    if (isDirectChannel(ownerHandle))
+        return [];
+    const currentOwnerUserId = await currentUserIdForHandle(vctx, ownerHandle);
+    if (currentOwnerUserId === null)
+        return [];
+    const rows = await vctx.sql.db
+        .select({ devHandle: vctx.sql.tables.developerGrants.devHandle })
+        .from(vctx.sql.tables.developerGrants)
+        .innerJoin(vctx.sql.tables.handleBinding, and(eq(vctx.sql.tables.handleBinding.handle, vctx.sql.tables.developerGrants.devHandle), eq(vctx.sql.tables.handleBinding.userId, vctx.sql.tables.developerGrants.devUserId)))
+        .where(and(eq(vctx.sql.tables.developerGrants.ownerHandle, ownerHandle), eq(vctx.sql.tables.developerGrants.appSlug, appSlug), eq(vctx.sql.tables.developerGrants.state, "active"), eq(vctx.sql.tables.developerGrants.userId, currentOwnerUserId)));
+    return rows.map((r) => r.devHandle);
+}
+//# sourceMappingURL=developer-grants.js.map

package/public/developer-grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"developer-grants.js","sourceRoot":"","sources":["../../jsr/public/developer-grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAgBtD,KAAK,UAAU,sBAAsB,CAAC,IAAoB,EAAE,MAAc;IACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;SACnC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACvD,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC;AAC7B,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoB,EACpB,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAkE;IAEtG,IAAI,eAAe,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAK9C,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3E,IAAI,kBAAkB,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAM7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;SAChE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;SACrC,SAAS,CACR,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAC7B,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,EACnF,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CACpF,CACF;SACA,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,EAC5D,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,EACpD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,EAC3D,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EACnD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAC/D,CACF;SACA,KAAK,CAAC,CAAC,CAAC;SACR,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;AACjE,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAoB,EACpB,EAAE,WAAW,EAAE,OAAO,EAA4C;IAElE,IAAI,eAAe,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAG5C,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3E,IAAI,kBAAkB,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAI3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3B,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;SAChE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;SACrC,SAAS,CACR,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAC7B,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,EACnF,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CACpF,CACF;SACA,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,EAC5D,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,EACpD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EACnD,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAC/D,CACF,CAAC;IAEJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC"}

package/public/ensure-app-settings.js

@@ -1,5 +1,5 @@
 import { Result, Option, EventoResult, exception2Result } from "@adviser/cement";
-import { ActiveEntry, parseArrayWarning, isActiveCachedSuggestion, isActiveDbAcl, isActiveEnv, isActiveIconDescription, isActiveModelSettingRuntime, isActiveModelSettingCodegen, isActiveModelSettingImg, isActiveColorTheme, isActiveSkills, isActiveTheme, isReqEnsureAppSettingsColorTheme, isReqEnsureAppSettingsIconDescription, isReqEnsureAppSettingsIconRegen, isReqEnsureAppSettingsImg, isReqEnsureAppSettingsSkills, isReqEnsureAppSettingsTheme, isActiveTitle, isEnablePublicAccess, isEnableRequest, isReqEnsureAppSettings, isReqEnsureAppSettingsRuntime, isReqEnsureAppSettingsCodegen, isReqEnsureAppSettingsCachedSuggestion, isReqEnsureAppSettingsCachedSuggestionBless, isReqEnsureAppSettingsDbAcl, isReqEnsureAppSettingsDbAclRemove, isReqEnsureAppSettingsEnv, isReqEnsureAppSettingsSecretSet, isReqEnsureAppSettingsSecretRemove, isReqEnsureAppSettingsTitle, isReqPublicAccess, isReqRequest, } from "@vibes.diy/api-types";
+import { ActiveEntry, parseArrayWarning, isActiveCachedSuggestion, isActiveDbAcl, isActiveEnv, isActiveIconDescription, isActiveModelSettingRuntime, isActiveModelSettingCodegen, isActiveModelSettingImg, isActiveColorTheme, isActivePrivacySensitive, isActiveSkills, isActiveTheme, isReqEnsureAppSettingsColorTheme, isReqEnsureAppSettingsIconDescription, isReqEnsureAppSettingsIconRegen, isReqEnsureAppSettingsImg, isReqEnsureAppSettingsPrivacySensitive, isReqEnsureAppSettingsSkills, isReqEnsureAppSettingsTheme, isActiveTitle, isEnablePublicAccess, isEnableRequest, isReqEnsureAppSettings, isReqEnsureAppSettingsRuntime, isReqEnsureAppSettingsCodegen, isReqEnsureAppSettingsCachedSuggestion, isReqEnsureAppSettingsCachedSuggestionBless, isReqEnsureAppSettingsDbAcl, isReqEnsureAppSettingsDbAclRemove, isReqEnsureAppSettingsEnv, isReqEnsureAppSettingsSecretSet, isReqEnsureAppSettingsSecretRemove, isReqEnsureAppSettingsTitle, isReqEnsureAppSettingsRecommendedAdd, isReqEnsureAppSettingsRecommendedRemove, isReqEnsureAppSettingsRecommendedMask, isActiveRecommendedCurated, isActiveRecommendedMasked, RECOMMENDED_CURATED_CAP, RECOMMENDED_MASKED_CAP, isReqPublicAccess, isReqRequest, } from "@vibes.diy/api-types";
 import { ensureLogger } from "@vibes.diy/identity";
 import { unwrapMsgBase } from "../unwrap-msg-base.js";
 import { optAuth } from "../check-auth.js";
@@ -54,6 +54,12 @@ export async function ensureAppSettings(vctx, req, userId) {
     const now = new Date().toISOString();
     const isOwner = !!userId && userId === record?.UserSlugBindings.userId;
     const isAdminBless = !!userId && !!record && !isOwner && isReqEnsureAppSettingsCachedSuggestionBless(req) && adminUserIdSet(vctx).has(userId);
+    const isAdminPrivacySensitiveLower = !!userId &&
+        !!record &&
+        !isOwner &&
+        isReqEnsureAppSettingsPrivacySensitive(req) &&
+        req.privacySensitive === false &&
+        adminUserIdSet(vctx).has(userId);
     if ((isReqEnsureAppSettingsSecretSet(req) || isReqEnsureAppSettingsSecretRemove(req)) && !isOwner) {
         return Result.Ok({
             type: "vibes.diy.res-ensure-app-settings",
@@ -68,7 +74,7 @@ export async function ensureAppSettings(vctx, req, userId) {
             created: now,
         });
     }
-    if (!userId || (!isOwner && !isAdminBless)) {
+    if (userId === undefined || (isOwner === false && isAdminBless === false && isAdminPrivacySensitiveLower === false)) {
         if (!record) {
             return Result.Ok({
                 type: "vibes.diy.res-ensure-app-settings",
@@ -126,7 +132,12 @@ export async function ensureAppSettings(vctx, req, userId) {
         created: record.AppSettings.created,
     };
     if (approverUserId !== ownerUserId) {
-        [res.settings, res.error] = await applyCachedSuggestionBless(vctx, req, res, settings, approverUserId, ownerUserId, now);
+        if (isReqEnsureAppSettingsPrivacySensitive(req)) {
+            [res.settings, res.error] = await sqlUpsert(vctx, res, settings, isActivePrivacySensitive, () => ({ type: "active.privacy-sensitive", sensitive: false }));
+        }
+        else {
+            [res.settings, res.error] = await applyCachedSuggestionBless(vctx, req, res, settings, approverUserId, ownerUserId, now);
+        }
         return Result.Ok(await withModelDefaults(vctx, res, { redactApiKeys: true }));
     }
     if (isReqEnsureAppSettingsSecretSet(req) || isReqEnsureAppSettingsSecretRemove(req)) {
@@ -204,6 +215,15 @@ export async function ensureAppSettings(vctx, req, userId) {
                 [res.settings, res.error] = await sqlUpsert(vctx, res, settings, isActiveColorTheme, () => ({ type: "active.colorTheme", colorTheme }));
             }
             break;
+        case isReqEnsureAppSettingsPrivacySensitive(req): {
+            const currentlySensitive = settings.find(isActivePrivacySensitive)?.sensitive === true;
+            if (req.privacySensitive === false && currentlySensitive && !adminUserIdSet(vctx).has(approverUserId)) {
+                res.error = "privacy-sensitive:owner-lower-forbidden";
+                break;
+            }
+            [res.settings, res.error] = await sqlUpsert(vctx, res, settings, isActivePrivacySensitive, () => ({ type: "active.privacy-sensitive", sensitive: req.privacySensitive }));
+            break;
+        }
         case isReqEnsureAppSettingsRuntime(req):
             if (req.runtime === null) {
                 [res.settings, res.error] = await sqlRemove(vctx, res, settings, isActiveModelSettingRuntime);
@@ -271,6 +291,52 @@ export async function ensureAppSettings(vctx, req, userId) {
         case isReqEnsureAppSettingsCachedSuggestionBless(req):
             [res.settings, res.error] = await applyCachedSuggestionBless(vctx, req, res, settings, approverUserId, ownerUserId, now);
             break;
+        case isReqEnsureAppSettingsRecommendedAdd(req): {
+            const target = req.recommendedAdd;
+            const prevCurated = settings.find(isActiveRecommendedCurated)?.items ?? [];
+            if (prevCurated.length >= RECOMMENDED_CURATED_CAP) {
+                res.error = "recommended-curated:cap-exceeded";
+                break;
+            }
+            const targetRow = await vctx.sql.db
+                .select({ appSlug: vctx.sql.tables.appSlugBinding.appSlug })
+                .from(vctx.sql.tables.appSlugBinding)
+                .where(and(eq(vctx.sql.tables.appSlugBinding.ownerHandle, target.ownerHandle), eq(vctx.sql.tables.appSlugBinding.appSlug, target.appSlug)))
+                .limit(1);
+            if (targetRow.length === 0) {
+                res.error = "recommended-curated:target-not-found";
+                break;
+            }
+            const mintedId = `rc-${vctx.sthis.nextId(8).str}`;
+            [res.settings, res.error] = await sqlUpsert(vctx, res, settings, isActiveRecommendedCurated, (prev) => ({
+                type: "active.recommended-curated",
+                items: [{ id: mintedId, ownerHandle: target.ownerHandle, appSlug: target.appSlug }, ...(prev.items ?? [])],
+            }));
+            break;
+        }
+        case isReqEnsureAppSettingsRecommendedRemove(req): {
+            const removeId = req.recommendedRemove.id;
+            [res.settings, res.error] = await sqlUpsert(vctx, res, settings, isActiveRecommendedCurated, (prev) => ({
+                type: "active.recommended-curated",
+                items: (prev.items ?? []).filter((i) => i.id !== removeId),
+            }));
+            break;
+        }
+        case isReqEnsureAppSettingsRecommendedMask(req): {
+            const m = req.recommendedMask;
+            const prevMasked = settings.find(isActiveRecommendedMasked)?.items ?? [];
+            const without = prevMasked.filter((i) => !(i.ownerHandle === m.ownerHandle && i.appSlug === m.appSlug));
+            if (m.op === "mask" && without.length >= RECOMMENDED_MASKED_CAP) {
+                res.error = "recommended-masked:cap-exceeded";
+                break;
+            }
+            const nextMasked = m.op === "mask" ? [...without, { ownerHandle: m.ownerHandle, appSlug: m.appSlug }] : without;
+            [res.settings, res.error] = await sqlUpsert(vctx, res, settings, isActiveRecommendedMasked, () => ({
+                type: "active.recommended-masked",
+                items: nextMasked,
+            }));
+            break;
+        }
         case isReqEnsureAppSettingsDbAcl(req):
             [res.settings, res.error] = await sqlUpsert(vctx, res, settings, (e) => isActiveDbAcl(e) && e.dbName === req.dbAcl.dbName, () => ({
                 type: "active.db-acl",