@vibes.diy/api-svc 6.2.4 → 6.2.6

package/public/audience-channels.d.ts

@@ -3,6 +3,23 @@ export declare const RESERVED_CHANNEL_PREFIX = "~";
 export declare function isReservedChannelId(ch: string): boolean;
 export declare function presentSubject(s: string | undefined): s is string;
 export declare function stripForeignAudience(desc: AccessDescriptor, actingHandle: string | null): AccessDescriptor;
+export declare const INHERIT_CHANNEL_PREFIX = "~inherit:";
+export declare const INHERIT_CAPABILITY_CHANNEL = "~inherit";
+export declare function inheritChannelKey(db: string, docId: string): string;
+export declare function hasInheritChannel(channels: readonly string[]): boolean;
+export declare function presentInheritRead(ir: unknown): ir is {
+    db: string;
+    docId: string;
+};
+export declare function inheritChannelOf(desc: {
+    inheritRead?: unknown;
+}): string[];
+export declare function inheritRefsOf(descriptors: {
+    inheritRead?: unknown;
+}[]): {
+    db: string;
+    docId: string;
+}[];
 export declare function audienceChannelsOf(desc: Pick<AccessDescriptor, "audience">): string[];
 export declare function hasReservedChannel(desc: Pick<AccessDescriptor, "channels" | "grant">): boolean;
 export declare function hasReservedRoleMint(desc: Pick<AccessDescriptor, "members">): boolean;

package/public/audience-channels.js

@@ -15,6 +15,38 @@ export function stripForeignAudience(desc, actingHandle) {
         return desc;
     return { ...desc, audience: undefined };
 }
+export const INHERIT_CHANNEL_PREFIX = "~inherit:";
+export const INHERIT_CAPABILITY_CHANNEL = "~inherit";
+export function inheritChannelKey(db, docId) {
+    return `${INHERIT_CHANNEL_PREFIX}${JSON.stringify([db, docId])}`;
+}
+export function hasInheritChannel(channels) {
+    return channels.some((ch) => ch.startsWith(INHERIT_CHANNEL_PREFIX));
+}
+export function presentInheritRead(ir) {
+    return (typeof ir === "object" &&
+        ir !== null &&
+        "db" in ir &&
+        "docId" in ir &&
+        typeof ir.db === "string" &&
+        ir.db.trim().length > 0 &&
+        typeof ir.docId === "string" &&
+        ir.docId.trim().length > 0);
+}
+export function inheritChannelOf(desc) {
+    return presentInheritRead(desc.inheritRead) ? [inheritChannelKey(desc.inheritRead.db, desc.inheritRead.docId)] : [];
+}
+export function inheritRefsOf(descriptors) {
+    const seen = new Map();
+    for (const d of descriptors) {
+        if (presentInheritRead(d.inheritRead)) {
+            const key = inheritChannelKey(d.inheritRead.db, d.inheritRead.docId);
+            if (seen.has(key) === false)
+                seen.set(key, { db: d.inheritRead.db, docId: d.inheritRead.docId });
+        }
+    }
+    return [...seen.values()];
+}
 export function audienceChannelsOf(desc) {
     const out = [];
     if (presentSubject(desc.audience?.followersOf))

package/public/audience-channels.js.map

@@ -1 +1 @@
-{"version":3,"file":"audience-channels.js","sourceRoot":"","sources":["../../jsr/public/audience-channels.ts"],"names":[],"mappings":"AAiBA,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAM3C,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;AACvD,CAAC;AAMD,MAAM,UAAU,cAAc,CAAC,CAAqB;IAClD,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChD,CAAC;AAyBD,MAAM,UAAU,oBAAoB,CAAC,IAAsB,EAAE,YAA2B;IACtF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,YAAY,KAAK,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;IAClF,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC;AAGD,MAAM,UAAU,kBAAkB,CAAC,IAAwC;IACzE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACxG,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAClG,OAAO,GAAG,CAAC;AACb,CAAC;AASD,MAAM,UAAU,kBAAkB,CAAC,IAAkD;IACnF,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAC7D,CAAC;AAkBD,MAAM,UAAU,mBAAmB,CAAC,IAAuC;IACzE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAC/C,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAQ3C,MAAM,UAAU,0BAA0B,CAAC,EAAU;IACnD,IAAI,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtF,IAAI,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAClF,OAAO,SAAS,CAAC;AACnB,CAAC;AAGD,MAAM,UAAU,yBAAyB,CAAC,CAAuD;IAC/F,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAGD,MAAM,UAAU,uBAAuB,CAAC,WAAiD;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAClF,IAAI,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;AACvB,CAAC"}
+{"version":3,"file":"audience-channels.js","sourceRoot":"","sources":["../../jsr/public/audience-channels.ts"],"names":[],"mappings":"AAiBA,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAM3C,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;AACvD,CAAC;AAMD,MAAM,UAAU,cAAc,CAAC,CAAqB;IAClD,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChD,CAAC;AAyBD,MAAM,UAAU,oBAAoB,CAAC,IAAsB,EAAE,YAA2B;IACtF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,YAAY,KAAK,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;IAClF,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC;AAKD,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAalD,MAAM,CAAC,MAAM,0BAA0B,GAAG,UAAU,CAAC;AAWrD,MAAM,UAAU,iBAAiB,CAAC,EAAU,EAAE,KAAa;IACzD,OAAO,GAAG,sBAAsB,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAMD,MAAM,UAAU,iBAAiB,CAAC,QAA2B;IAC3D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;AACtE,CAAC;AAUD,MAAM,UAAU,kBAAkB,CAAC,EAAW;IAC5C,OAAO,CACL,OAAO,EAAE,KAAK,QAAQ;QACtB,EAAE,KAAK,IAAI;QACX,IAAI,IAAI,EAAE;QACV,OAAO,IAAI,EAAE;QACb,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ;QACzB,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACvB,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ;QAC5B,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC3B,CAAC;AACJ,CAAC;AAMD,MAAM,UAAU,gBAAgB,CAAC,IAA+B;IAC9D,OAAO,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtH,CAAC;AAID,MAAM,UAAU,aAAa,CAAC,WAAwC;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACrE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAGD,MAAM,UAAU,kBAAkB,CAAC,IAAwC;IACzE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACxG,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAClG,OAAO,GAAG,CAAC;AACb,CAAC;AASD,MAAM,UAAU,kBAAkB,CAAC,IAAkD;IACnF,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAC7D,CAAC;AAkBD,MAAM,UAAU,mBAAmB,CAAC,IAAuC;IACzE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAC/C,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAQ3C,MAAM,UAAU,0BAA0B,CAAC,EAAU;IACnD,IAAI,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtF,IAAI,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAClF,OAAO,SAAS,CAAC;AACnB,CAAC;AAGD,MAAM,UAAU,yBAAyB,CAAC,CAAuD;IAC/F,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAGD,MAAM,UAAU,uBAAuB,CAAC,WAAiD;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAClF,IAAI,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;AACvB,CAAC"}

package/public/channel-read-filter.js

@@ -1,4 +1,4 @@
-import { audienceChannelsOf } from "./audience-channels.js";
+import { audienceChannelsOf, inheritChannelOf } from "./audience-channels.js";
 export function filterDocsByChannel(docs, outputRows, userHandle, effectiveChannels, publicChannels, adminOverride = false, requireOutput = false) {
     if (adminOverride && !requireOutput)
         return docs;
@@ -7,7 +7,11 @@ export function filterDocsByChannel(docs, outputRows, userHandle, effectiveChann
     const docChannels = new Map();
     for (const row of outputRows) {
         const parsed = JSON.parse(row.output);
-        const channels = [...(Array.isArray(parsed.channels) ? parsed.channels : []), ...audienceChannelsOf(parsed)];
+        const channels = [
+            ...(Array.isArray(parsed.channels) ? parsed.channels : []),
+            ...audienceChannelsOf(parsed),
+            ...inheritChannelOf(parsed),
+        ];
         if (channels.length > 0) {
             docChannels.set(row.docId, channels);
         }

package/public/channel-read-filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"channel-read-filter.js","sourceRoot":"","sources":["../../jsr/public/channel-read-filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAS5D,MAAM,UAAU,mBAAmB,CACjC,IAAW,EACX,UAAuB,EACvB,UAAyB,EACzB,iBAA8B,EAC9B,cAA2B,EAC3B,aAAa,GAAG,KAAK,EAKrB,aAAa,GAAG,KAAK;IAErB,IAAI,aAAa,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAQjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAGnC,CAAC;QAMF,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7G,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"channel-read-filter.js","sourceRoot":"","sources":["../../jsr/public/channel-read-filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAS9E,MAAM,UAAU,mBAAmB,CACjC,IAAW,EACX,UAAuB,EACvB,UAAyB,EACzB,iBAA8B,EAC9B,cAA2B,EAC3B,aAAa,GAAG,KAAK,EAKrB,aAAa,GAAG,KAAK;IAErB,IAAI,aAAa,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAQjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAInC,CAAC;QASF,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,kBAAkB,CAAC,MAAM,CAAC;YAC7B,GAAG,gBAAgB,CAAC,MAAM,CAAC;SAC5B,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}

package/public/inherit-read-resolver.d.ts

@@ -0,0 +1,18 @@
+import type { VibesApiSQLCtx } from "../types.js";
+import type { DocAccessLevel } from "./access-helpers.js";
+import type { AccessDescriptor } from "./access-function.js";
+interface OutputRow {
+    docId: string;
+    output: string;
+}
+interface ResolveArgs {
+    ownerHandle: string;
+    appSlug: string;
+    outputs: OutputRow[];
+    userHandle: string | null;
+    access: DocAccessLevel;
+    devHandles: string[];
+}
+export declare function safeParseDescriptor(output: string): AccessDescriptor | undefined;
+export declare function resolveInheritReadChannels(vctx: VibesApiSQLCtx, args: ResolveArgs): Promise<Set<string>>;
+export {};

package/public/inherit-read-resolver.js

@@ -0,0 +1,155 @@
+import { exception2Result } from "@adviser/cement";
+import { type } from "arktype";
+import { and, eq, inArray } from "drizzle-orm";
+import { filterDocsByChannel } from "./channel-read-filter.js";
+import { extractContribution, newSeededReduce } from "./grant-reduce.js";
+import { audienceChannelsForReader, collectAudienceSubjects, inheritChannelKey, presentInheritRead } from "./audience-channels.js";
+import { resolveAudienceMembershipFailClosed } from "./social-store.js";
+import { resolveDbAcl } from "./db-acl-resolver.js";
+import { readAllowed } from "./app-documents-shared.js";
+const MAX_INHERIT_HOST_DBS = 32;
+const MAX_INHERIT_REFS = 1024;
+const HOST_DB_CONCURRENCY = 4;
+const INHERIT_IN_CHUNK = 200;
+const MAX_HOST_GRANT_ROWS = 5000;
+const descChannels = type("string[]");
+const descAudience = type({ "followersOf?": "string", "mutualsOf?": "string" });
+const descGrant = type({
+    "users?": { "[string]": "string[]" },
+    "roles?": { "[string]": "string[]" },
+    "public?": "string[]",
+});
+const descMembers = type({ "[string]": "string[]" });
+const descExpiry = type("string | number | null");
+function isRecord(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+export function safeParseDescriptor(output) {
+    const r = exception2Result(() => JSON.parse(output));
+    if (r.isErr())
+        return undefined;
+    const value = r.Ok();
+    if (!isRecord(value))
+        return undefined;
+    const out = {};
+    const channels = descChannels(value.channels);
+    if (!(channels instanceof type.errors))
+        out.channels = channels;
+    const audience = descAudience(value.audience);
+    if (!(audience instanceof type.errors))
+        out.audience = audience;
+    const grant = descGrant(value.grant);
+    if (!(grant instanceof type.errors))
+        out.grant = grant;
+    const members = descMembers(value.members);
+    if (!(members instanceof type.errors))
+        out.members = members;
+    const expiry = descExpiry(value.expiry);
+    if (!(expiry instanceof type.errors))
+        out.expiry = expiry;
+    if (typeof value.allowAnonymous === "boolean")
+        out.allowAnonymous = value.allowAnonymous;
+    if (presentInheritRead(value.inheritRead))
+        out.inheritRead = value.inheritRead;
+    return out;
+}
+export async function resolveInheritReadChannels(vctx, args) {
+    const { ownerHandle, appSlug, outputs, userHandle, access, devHandles } = args;
+    const byDb = new Map();
+    let refCount = 0;
+    for (const row of outputs) {
+        if (refCount >= MAX_INHERIT_REFS)
+            break;
+        const parsed = safeParseDescriptor(row.output);
+        if (parsed === undefined || !presentInheritRead(parsed.inheritRead))
+            continue;
+        const { db, docId } = parsed.inheritRead;
+        let set = byDb.get(db);
+        if (set === undefined) {
+            if (byDb.size >= MAX_INHERIT_HOST_DBS)
+                continue;
+            set = new Set();
+            byDb.set(db, set);
+        }
+        if (set.has(docId) === false) {
+            set.add(docId);
+            refCount++;
+        }
+    }
+    if (byDb.size === 0)
+        return new Set();
+    const result = new Set();
+    const entries = [...byDb];
+    for (let i = 0; i < entries.length; i += HOST_DB_CONCURRENCY) {
+        const batch = entries.slice(i, i + HOST_DB_CONCURRENCY);
+        const batchKeys = await Promise.all(batch.map(([hostDb, ids]) => resolveHostDb(hostDb, [...ids])));
+        for (const keys of batchKeys) {
+            for (const key of keys)
+                result.add(key);
+        }
+    }
+    return result;
+    async function resolveHostDb(hostDb, hostDocIds) {
+        const tOut = vctx.sql.tables.accessFnOutputs;
+        const rAcl = await resolveDbAcl(vctx, ownerHandle, appSlug, hostDb);
+        if (rAcl.isErr())
+            return [];
+        if ((await readAllowed(vctx, rAcl.Ok(), access, appSlug, ownerHandle)) === false)
+            return [];
+        const grantRows = await vctx.sql.db
+            .select({ docId: tOut.docId, output: tOut.output })
+            .from(tOut)
+            .where(and(eq(tOut.ownerHandle, ownerHandle), eq(tOut.appSlug, appSlug), eq(tOut.dbName, hostDb), eq(tOut.hasGrants, 1)))
+            .limit(MAX_HOST_GRANT_ROWS + 1);
+        if (grantRows.length > MAX_HOST_GRANT_ROWS) {
+            console.error(`inherit-read: host db ${ownerHandle}/${appSlug}/${hostDb} has >${MAX_HOST_GRANT_ROWS} grant rows — failing closed (partial grant reduce could mis-compute readability)`);
+            return [];
+        }
+        const refRows = [];
+        for (let j = 0; j < hostDocIds.length; j += INHERIT_IN_CHUNK) {
+            const chunk = hostDocIds.slice(j, j + INHERIT_IN_CHUNK);
+            const rows = await vctx.sql.db
+                .select({ docId: tOut.docId, output: tOut.output })
+                .from(tOut)
+                .where(and(eq(tOut.ownerHandle, ownerHandle), eq(tOut.appSlug, appSlug), eq(tOut.dbName, hostDb), inArray(tOut.docId, chunk)));
+            for (const r of rows)
+                refRows.push(r);
+        }
+        const seen = new Set();
+        const hostOutputRows = [];
+        const parsedRows = [];
+        const grantDocIds = new Set(grantRows.map((r) => r.docId));
+        for (const r of [...grantRows, ...refRows]) {
+            if (seen.has(r.docId))
+                continue;
+            seen.add(r.docId);
+            const desc = safeParseDescriptor(r.output);
+            if (desc === undefined)
+                continue;
+            hostOutputRows.push({ docId: r.docId, output: r.output });
+            parsedRows.push({ docId: r.docId, desc });
+        }
+        const reduce = newSeededReduce(ownerHandle, devHandles);
+        for (const p of parsedRows) {
+            if (grantDocIds.has(p.docId))
+                reduce.addDoc(p.docId, extractContribution(p.desc));
+        }
+        const hostEffective = userHandle !== null ? reduce.resolveEffectiveChannels(userHandle) : new Set();
+        if (userHandle !== null) {
+            const subjects = collectAudienceSubjects(parsedRows.map((p) => p.desc));
+            if (subjects.length > 0) {
+                const membership = await resolveAudienceMembershipFailClosed(vctx, {
+                    handle: userHandle,
+                    subjects,
+                    ownerHandle,
+                    appSlug,
+                });
+                for (const ch of audienceChannelsForReader(membership))
+                    hostEffective.add(ch);
+            }
+        }
+        const survivors = filterDocsByChannel(hostDocIds.map((id) => ({ _id: id })), hostOutputRows, userHandle, hostEffective, reduce.publicChannels);
+        return survivors.map((d) => inheritChannelKey(hostDb, d._id));
+    }
+}
+//# sourceMappingURL=inherit-read-resolver.js.map

package/public/inherit-read-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inherit-read-resolver.js","sourceRoot":"","sources":["../../jsr/public/inherit-read-resolver.ts"],"names":[],"mappings":"AA4CA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAI/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACnI,OAAO,EAAE,mCAAmC,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AA4BxD,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAG9B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAG9B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAO7B,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAOjC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;AAChF,MAAM,SAAS,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;IACpC,QAAQ,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;IACpC,SAAS,EAAE,UAAU;CACtB,CAAC,CAAC;AACH,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;AACrD,MAAM,UAAU,GAAG,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAElD,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAkBD,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;IACrB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEvC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,QAAQ,YAAY,IAAI,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAChE,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,QAAQ,YAAY,IAAI,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAChE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IACvD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,OAAO,YAAY,IAAI,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,YAAY,IAAI,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1D,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IACzF,IAAI,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAoB,EAAE,IAAiB;IACtF,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAM/E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,QAAQ,IAAI,gBAAgB;YAAE,MAAM;QACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC;YAAE,SAAS;QAC9E,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;QACzC,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,IAAI,IAAI,oBAAoB;gBAAE,SAAS;YAChD,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACf,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAU,CAAC;IAE9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAE1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,mBAAmB,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnG,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;IAGd,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,UAAoB;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;QAK7C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC;QAK5F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;aACxH,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,SAAS,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YAC3C,OAAO,CAAC,KAAK,CACX,yBAAyB,WAAW,IAAI,OAAO,IAAI,MAAM,SAAS,mBAAmB,mFAAmF,CACzK,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;QAID,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;iBAC3B,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;iBAClD,IAAI,CAAC,IAAI,CAAC;iBACV,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CACvH,CAAC;YACJ,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;QAMD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,cAAc,GAAgB,EAAE,CAAC;QACvC,MAAM,UAAU,GAAgD,EAAE,CAAC;QACnE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,SAAS;YAChC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,cAAc,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAID,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,aAAa,GAAG,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;QAM5G,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,UAAU,GAAG,MAAM,mCAAmC,CAAC,IAAI,EAAE;oBACjE,MAAM,EAAE,UAAU;oBAClB,QAAQ;oBACR,WAAW;oBACX,OAAO;iBACR,CAAC,CAAC;gBACH,KAAK,MAAM,EAAE,IAAI,yBAAyB,CAAC,UAAU,CAAC;oBAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAKD,MAAM,SAAS,GAAG,mBAAmB,CACnC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EACrC,cAAc,EACd,UAAU,EACV,aAAa,EACb,MAAM,CAAC,cAAc,CACtB,CAAC;QACF,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;AACH,CAAC"}

package/public/media-access-fn.d.ts

@@ -0,0 +1,2 @@
+export declare const MEDIA_BUILTIN_SOURCE = "export function media(doc, oldDoc, user, ctx) {\n  if (user === null || user === undefined) return { forbidden: \"authentication required\" };\n  if (oldDoc !== null && oldDoc !== undefined) {\n    if (oldDoc.authorHandle !== user.userHandle) return { forbidden: \"not author\" };\n    if (oldDoc.type === \"version\") return { forbidden: \"version docs are append-only\" };\n    if (doc === null || doc === undefined || doc.authorHandle !== oldDoc.authorHandle) {\n      return { forbidden: \"authorHandle is immutable\" };\n    }\n    return READ;\n  }\n  if (doc === null || doc === undefined || doc.authorHandle !== user.userHandle) {\n    return { forbidden: \"author must be the caller\" };\n  }\n  return READ;\n}\nconst READ = { channels: [\"media\"], grant: { public: [\"media\"] } };\n";
+export declare const MEDIA_BUILTIN_CID: string;

package/public/media-access-fn.js

@@ -0,0 +1,22 @@
+import { sha256 } from "@noble/hashes/sha2.js";
+import { utf8ToBytes } from "@noble/hashes/utils.js";
+import { base58btc } from "multiformats/bases/base58";
+export const MEDIA_BUILTIN_SOURCE = `export function media(doc, oldDoc, user, ctx) {
+  if (user === null || user === undefined) return { forbidden: "authentication required" };
+  if (oldDoc !== null && oldDoc !== undefined) {
+    if (oldDoc.authorHandle !== user.userHandle) return { forbidden: "not author" };
+    if (oldDoc.type === "version") return { forbidden: "version docs are append-only" };
+    if (doc === null || doc === undefined || doc.authorHandle !== oldDoc.authorHandle) {
+      return { forbidden: "authorHandle is immutable" };
+    }
+    return READ;
+  }
+  if (doc === null || doc === undefined || doc.authorHandle !== user.userHandle) {
+    return { forbidden: "author must be the caller" };
+  }
+  return READ;
+}
+const READ = { channels: ["media"], grant: { public: ["media"] } };
+`;
+export const MEDIA_BUILTIN_CID = base58btc.encode(sha256(utf8ToBytes(MEDIA_BUILTIN_SOURCE)));
+//# sourceMappingURL=media-access-fn.js.map

package/public/media-access-fn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-access-fn.js","sourceRoot":"","sources":["../../jsr/public/media-access-fn.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAWtD,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;CAgBnC,CAAC;AAMF,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC"}