@vibes.diy/prompts 9.2.0 → 9.3.0

package/llms/web-audio.md

@@ -272,4 +272,10 @@ External sync and drift
 - Latency budget: device `baseLatency` + your lookahead + any Worklet buffering.
 - Headphones recommended for monitoring to avoid acoustic feedback.
 
+## 6) Restraint — sound belongs on the core actions
+
+- No sound on every keystroke, hover, or list render — that reads as noise, not life.
+- Never autoplay audio on load; playback must follow a user gesture (the `unlockAudio()` gate in §1).
+- Wire brief feedback to the app's one or two satisfying core actions — the "it worked" beats (a point scored, a post landing, a match made) — and route it through the resume-on-user-gesture unlock so it sounds on mobile. Quiet/utility apps skip audio entirely.
+
 — End —

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibes.diy/prompts",
-  "version": "9.2.0",
+  "version": "9.3.0",
   "type": "module",
   "main": "./index.js",
   "description": "",
@@ -24,9 +24,9 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@adviser/cement": "~0.5.34",
-    "@vibes.diy/call-ai-v2": "^9.2.0",
-    "@vibes.diy/identity": "^9.2.0",
-    "@vibes.diy/use-vibes-types": "^9.2.0",
+    "@vibes.diy/call-ai-v2": "^9.3.0",
+    "@vibes.diy/identity": "^9.3.0",
+    "@vibes.diy/use-vibes-types": "^9.3.0",
     "arktype": "~2.2.3",
     "json-schema-faker": "~0.6.2"
   },

package/prompts.d.ts

@@ -40,6 +40,36 @@ export declare const preAllocSchema: {
             readonly type: "boolean";
             readonly description: "True if the app's central subject is inherently private — a personal diary, journal, health tracker, finance/budget log, therapy or mood log, or anything else someone would not want shared by default. False (or omitted) for anything else, including apps that merely support sharing or collaboration. This is a one-way signal: set it true only when the app's core purpose is private-by-nature record-keeping, not based on any particular feature the app has.";
         };
+        readonly deferred: {
+            readonly type: "object";
+            readonly description: 'Capabilities this app plausibly needs that are deliberately NOT built on the first turn — named here so the platform can offer them back to the owner later (chip copy). Omit entirely when nothing is deferred. Each `why` is short, plain user-facing language suitable for a chip label, e.g. "to receive your webhook" or "so only you can edit".';
+            readonly properties: {
+                readonly access: {
+                    readonly type: "object";
+                    readonly description: "Set when the app needs a permission / access-control model (who may read, who may write) — deferred to the publish-time access wizard, not the first gen.";
+                    readonly properties: {
+                        readonly needed: {
+                            readonly type: "boolean";
+                        };
+                        readonly why: {
+                            readonly type: "string";
+                        };
+                    };
+                };
+                readonly backend: {
+                    readonly type: "object";
+                    readonly description: "Set when the app would benefit from a server-side backend.js (fetching an external source, receiving a webhook, a scheduled job, or deriving across users) — deferred out of the first gen.";
+                    readonly properties: {
+                        readonly recommended: {
+                            readonly type: "boolean";
+                        };
+                        readonly why: {
+                            readonly type: "string";
+                        };
+                    };
+                };
+            };
+        };
         readonly enrichedPrompt: {
             readonly type: "string";
             readonly description: string;
@@ -57,6 +87,16 @@ export declare const preAllocParsed: import("arktype/internal/variants/object.ts
     colorTheme?: string | undefined;
     enrichedPrompt?: string | undefined;
     privacySensitive?: boolean | undefined;
+    deferred?: {
+        access?: {
+            needed: boolean;
+            why: string;
+        } | undefined;
+        backend?: {
+            recommended: boolean;
+            why: string;
+        } | undefined;
+    } | undefined;
 }, {}>;
 export type PreAllocParsed = typeof preAllocParsed.infer;
 export interface SystemPromptResult {

package/prompts.js

@@ -4,7 +4,7 @@ import { composeDesignMd, getColorsetCatalogNames, getThemeCatalogNames, parseCo
 import { type } from "arktype";
 import { defaultStylePrompt } from "./style-prompts.js";
 export async function getDefaultSkills() {
-    return ["fireproof", "callai", "image-gen", "web-audio", "use-vibe"];
+    return ["fireproof", "callai", "image-gen", "use-vibe"];
 }
 const PRE_ALLOC_PLATFORM_PARAGRAPH = "Platform capabilities: every app is a small web app that anyone can open in a browser. Its data is saved automatically in the cloud and stays in sync for everyone at once, so when one person adds or changes something, everyone else viewing the app sees it update right away. Apps can call on a built-in AI assistant that returns a structured result the app saves and displays — for example suggesting or filling in a value, rewriting or extending something someone wrote, or tagging and scoring content as it's added. Apps know who is signed in, so they can show people's names and avatars next to their contributions. Most apps treat every signed-in visitor as a first-class participant who adds and edits their own contributions while everyone reads what others made; and many are built around a shared thing a group joins and co-edits — a list, a trip, a team space, a board or canvas people can ask to join — where the people who've joined edit it together and a newcomer can request in. Whichever fits, editing controls are hidden automatically for people who aren't allowed to use them. When pictures are a natural part of the experience, an app can show a generated illustration instead of requiring an upload.";
 export async function makePreAllocUserMessage(userPrompt) {
@@ -60,6 +60,28 @@ export const preAllocSchema = {
             type: "boolean",
             description: "True if the app's central subject is inherently private — a personal diary, journal, health tracker, finance/budget log, therapy or mood log, or anything else someone would not want shared by default. False (or omitted) for anything else, including apps that merely support sharing or collaboration. This is a one-way signal: set it true only when the app's core purpose is private-by-nature record-keeping, not based on any particular feature the app has.",
         },
+        deferred: {
+            type: "object",
+            description: 'Capabilities this app plausibly needs that are deliberately NOT built on the first turn — named here so the platform can offer them back to the owner later (chip copy). Omit entirely when nothing is deferred. Each `why` is short, plain user-facing language suitable for a chip label, e.g. "to receive your webhook" or "so only you can edit".',
+            properties: {
+                access: {
+                    type: "object",
+                    description: "Set when the app needs a permission / access-control model (who may read, who may write) — deferred to the publish-time access wizard, not the first gen.",
+                    properties: {
+                        needed: { type: "boolean" },
+                        why: { type: "string" },
+                    },
+                },
+                backend: {
+                    type: "object",
+                    description: "Set when the app would benefit from a server-side backend.js (fetching an external source, receiving a webhook, a scheduled job, or deriving across users) — deferred out of the first gen.",
+                    properties: {
+                        recommended: { type: "boolean" },
+                        why: { type: "string" },
+                    },
+                },
+            },
+        },
         enrichedPrompt: {
             type: "string",
             description: [
@@ -81,6 +103,10 @@ export const preAllocParsed = type({
     "colorTheme?": "string",
     "enrichedPrompt?": "string",
     "privacySensitive?": "boolean",
+    "deferred?": {
+        "access?": { needed: "boolean", why: "string" },
+        "backend?": { recommended: "boolean", why: "string" },
+    },
 });
 export function generateImportStatements(llms) {
     const seen = new Set();
@@ -128,7 +154,7 @@ export async function makeBaseSystemPrompt(model, sessionDoc) {
             selectedNames.push(required);
         }
     }
-    for (const capability of ["image-gen", "web-audio"]) {
+    for (const capability of ["image-gen"]) {
         if (llmsCatalogNames.has(capability) && !selectedNames.includes(capability)) {
             selectedNames.push(capability);
         }

package/prompts.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../jsr/prompts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAmB,MAAM,gBAAgB,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnI,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AACvE,CAAC;AAWD,MAAM,4BAA4B,GAChC,msCAAmsC,CAAC;AAUtsC,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAAkB;IAC9D,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;IACtC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,WAAW;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;SACrH,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;QACL,4BAA4B;QAC5B,EAAE;QACF,+UAA+U;QAC/U,EAAE;QACF,gBAAgB;QAChB,WAAW;QACX,EAAE;QACF,gBAAgB;QAChB,SAAS;QACT,EAAE;QACF,eAAe;QACf,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAOD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;IAClE,UAAU,EAAE;QACV,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,WAAW,EACT,2IAA2I;YAC7I,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,WAAW,EACT,kHAAkH;YACpH,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACzB;aACF;SACF;QACD,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,+TAA+T;SAClU;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,sXAAsX;SACzX;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,SAAS;YACf,WAAW,EACT,0cAA0c;SAC7c;QACD,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE;gBACX,wNAAwN;gBACxN,8JAA8J;gBAC9J,goBAAgoB;gBAChoB,4zBAA4zB;gBAC5zB,+OAA+O;gBAC/O,wFAAwF;aACzF,CAAC,IAAI,CAAC,GAAG,CAAC;SACZ;KACF;CACO,CAAC;AAaX,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE;IAC9B,KAAK,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE;IACxD,eAAe,EAAE,QAAQ;IACzB,QAAQ,EAAE,QAAQ;IAClB,aAAa,EAAE,QAAQ;IACvB,iBAAiB,EAAE,QAAQ;IAC3B,mBAAmB,EAAE,SAAS;CAC/B,CAAC,CAAC;AAYH,MAAM,UAAU,wBAAwB,CAAC,IAAuB;IAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,IAAI;SACR,MAAM,CAAC,CAAC,CAAC,EAAuE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC;SAC3H,KAAK,EAAE;SACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;SAC5D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACZ,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC;QAC3C,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,WAAW;gBACd,OAAO,iBAAiB,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,YAAY,GAAG,CAAC;YAClE,KAAK,SAAS;gBACZ,OAAO,YAAY,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,YAAY,GAAG,CAAC;YAC7D,KAAK,OAAO,CAAC;YACb;gBACE,OAAO,cAAc,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,YAAY,GAAG,CAAC;QACnE,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;AAyB7C,MAAM,oBAAoB,GAAG,oCAAoC,CAAC;AAElE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,UAA+D;IAE/D,MAAM,UAAU,GAAG,UAAU,EAAE,UAAU,IAAI,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,UAAU,EAAE,UAAU,IAAI,oBAAoB,CAAC;IAClE,MAAM,WAAW,GAAG,MAAM,aAAa,EAAE,CAAC;IAC1C,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAEpD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,IAAI,aAAa,GAAG,SAAS;QAC3B,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1G,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,aAAa,GAAG,CAAC,GAAG,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IAID,KAAK,MAAM,QAAQ,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;QAClD,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAcD,KAAK,MAAM,UAAU,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QACpD,IAAI,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAMD,MAAM,WAAW,GAAG,UAAU,EAAE,OAAO,KAAK,SAAS,IAAI,UAAU,EAAE,OAAO,KAAK,iBAAiB,CAAC;IACnG,IAAI,WAAW,KAAK,KAAK,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;QAC5G,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,eAAe,GAAG,UAAU,EAAE,QAAQ,KAAK,IAAI,CAAC;IAEtD,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7E,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAE/D,OAAO,SAAS,CAAC,UAAU,GAAG,CAAC,IAAI,KAAK,EAAE;gBACxC,WAAW,EAAE,UAAU;gBACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;gBAC/B,IAAI,EAAE;oBACJ,KAAK,EAAE,UAAU,CAAC,KAAK;iBACxB;aAkBF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,IAAI,YAAY,OAAO,IAAI,CAAC,OAAO,WAAW,GAAG,CAAC,IAAI,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3H,SAAS;QACX,CAAC;QACD,oBAAoB,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC;QACjD,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,oBAAoB,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAQ5D,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,oBAAoB,GAAG,uBAAuB,EAAE,CAAC;IACvD,MAAM,cAAc,GAAG,OAAO,UAAU,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,cAAc,GAAG,cAAc,IAAI,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5G,MAAM,mBAAmB,GAAG,OAAO,UAAU,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,MAAM,mBAAmB,GACvB,mBAAmB,IAAI,oBAAoB,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAClE,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,cAAc,IAAI,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC;YAC1D,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,kBAAkB,GAAG,EAAE,CAAC;IAC5B,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACjF,OAAO,SAAS,CAAC,YAAY,cAAc,KAAK,EAAE;gBAChD,WAAW,EAAE,UAAU;gBACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;gBAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;aAClC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,wBAAwB,cAAc,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,IAAI,QAAQ,GAAG,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;YACjC,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,YAAY,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAC5F,OAAO,SAAS,CAAC,mBAAmB,mBAAmB,OAAO,EAAE;wBAC9D,WAAW,EAAE,UAAU;wBACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;wBAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;qBAClC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;oBACtB,OAAO,CAAC,IAAI,CAAC,2BAA2B,mBAAmB,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnF,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;YACD,kBAAkB;gBAChB,sBAAsB,QAAQ,0BAA0B;oBACxD,4GAA4G;oBAC5G,4HAA4H;oBAC5H,wIAAwI;oBACxI,4HAA4H;oBAC5H,0GAA0G;oBAC1G,4DAA4D,CAAC;QACjE,CAAC;IACH,CAAC;IAOD,MAAM,aAAa,GAAG,UAAU,EAAE,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACvF,MAAM,WAAW,GAAG,UAAU,EAAE,WAAW,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAEzF,MAAM,aAAa,GAAG,eAAe;QACnC,CAAC,CAAC,2ZAA2Z;QAC7Z,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,YAAY,GAAG,UAAU,EAAE,KAAK;QACpC,CAAC,CAAC,sBAAsB,UAAU,CAAC,KAAK,wFAAwF;QAChI,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,iBAAiB,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhE,MAAM,iBAAiB,GAAG,OAAO,UAAU,EAAE,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjH,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,iBAAiB,uBAAuB,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnH,MAAM,gBAAgB,GAAG,4BAA4B,wBAAwB,CAAC,UAAU,CAAC,EAAE,CAAC;IAE5F,MAAM,gBAAgB,GACpB,UAAU,EAAE,OAAO,KAAK,SAAS;QAC/B,CAAC,CAAC,0BAA0B;QAC5B,CAAC,CAAC,UAAU,EAAE,OAAO,KAAK,iBAAiB;YACzC,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,kBAAkB,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,gBAAgB,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,QAAQ;SAC1B,UAAU,CAAC,kBAAkB,EAAE,WAAW,CAAC;SAC3C,UAAU,CAAC,eAAe,EAAE,aAAa,CAAC;SAC1C,UAAU,CAAC,uBAAuB,EAAE,mBAAmB,CAAC;SACxD,UAAU,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;SAClD,UAAU,CAAC,mBAAmB,EAAE,YAAY,CAAC;SAC7C,UAAU,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;SACxD,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;SAChD,UAAU,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IAEzD,OAAO;QACL,YAAY;QACZ,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,cAAc;QACrB,UAAU,EAAE,mBAAmB;QAC/B,QAAQ,EAAE,eAAe;QACzB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,UAAkB,EAAE,QAAgB,EAAE,OAAsB;IACjG,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAClF,OAAO,SAAS,CAAC,KAAK,QAAQ,EAAE,EAAE;YAChC,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;YAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAmB,EAAE,OAAsB;IACnF,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAC1E,OAAO,SAAS,CAAC,wBAAwB,EAAE;YACzC,WAAW,EAAE,UAAU,IAAI,oBAAoB;YAC/C,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;YAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAAmB,EAAE,OAAsB;IACzF,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACjF,OAAO,SAAS,CAAC,+BAA+B,EAAE;YAChD,WAAW,EAAE,UAAU,IAAI,oBAAoB;YAC/C,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;YAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACnE,OAAO,SAAS,CAAC,iBAAiB,EAAE;YAClC,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACnE,OAAO,SAAS,CAAC,iBAAiB,EAAE;YAClC,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAC3D,OAAO,SAAS,CAAC,UAAU,IAAI,KAAK,EAAE;YACpC,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACtE,OAAO,SAAS,CAAC,YAAY,IAAI,KAAK,EAAE;YACtC,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC"}
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../jsr/prompts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAmB,MAAM,gBAAgB,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnI,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAC1D,CAAC;AAWD,MAAM,4BAA4B,GAChC,msCAAmsC,CAAC;AAUtsC,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAAkB;IAC9D,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;IACtC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,WAAW;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;SACrH,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;QACL,4BAA4B;QAC5B,EAAE;QACF,+UAA+U;QAC/U,EAAE;QACF,gBAAgB;QAChB,WAAW;QACX,EAAE;QACF,gBAAgB;QAChB,SAAS;QACT,EAAE;QACF,eAAe;QACf,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAOD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;IAClE,UAAU,EAAE;QACV,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,WAAW,EACT,2IAA2I;YAC7I,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,WAAW,EACT,kHAAkH;YACpH,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACzB;aACF;SACF;QACD,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,+TAA+T;SAClU;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,sXAAsX;SACzX;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,SAAS;YACf,WAAW,EACT,0cAA0c;SAC7c;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,uVAAuV;YACzV,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,2JAA2J;oBAC7J,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC3B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACxB;iBACF;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,6LAA6L;oBAC/L,UAAU,EAAE;wBACV,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;wBAChC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACxB;iBACF;aACF;SACF;QACD,cAAc,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE;gBACX,wNAAwN;gBACxN,8JAA8J;gBAC9J,goBAAgoB;gBAChoB,4zBAA4zB;gBAC5zB,+OAA+O;gBAC/O,wFAAwF;aACzF,CAAC,IAAI,CAAC,GAAG,CAAC;SACZ;KACF;CACO,CAAC;AAaX,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE;IAC9B,KAAK,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE;IACxD,eAAe,EAAE,QAAQ;IACzB,QAAQ,EAAE,QAAQ;IAClB,aAAa,EAAE,QAAQ;IACvB,iBAAiB,EAAE,QAAQ;IAC3B,mBAAmB,EAAE,SAAS;IAM9B,WAAW,EAAE;QACX,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE;QAC/C,UAAU,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE;KACtD;CACF,CAAC,CAAC;AAYH,MAAM,UAAU,wBAAwB,CAAC,IAAuB;IAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,IAAI;SACR,MAAM,CAAC,CAAC,CAAC,EAAuE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC;SAC3H,KAAK,EAAE;SACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;SAC5D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACZ,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC;QAC3C,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,WAAW;gBACd,OAAO,iBAAiB,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,YAAY,GAAG,CAAC;YAClE,KAAK,SAAS;gBACZ,OAAO,YAAY,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,YAAY,GAAG,CAAC;YAC7D,KAAK,OAAO,CAAC;YACb;gBACE,OAAO,cAAc,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,YAAY,GAAG,CAAC;QACnE,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;AAyB7C,MAAM,oBAAoB,GAAG,oCAAoC,CAAC;AAElE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,UAA+D;IAE/D,MAAM,UAAU,GAAG,UAAU,EAAE,UAAU,IAAI,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,UAAU,EAAE,UAAU,IAAI,oBAAoB,CAAC;IAClE,MAAM,WAAW,GAAG,MAAM,aAAa,EAAE,CAAC;IAC1C,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAEpD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,IAAI,aAAa,GAAG,SAAS;QAC3B,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1G,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,aAAa,GAAG,CAAC,GAAG,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IAID,KAAK,MAAM,QAAQ,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;QAClD,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAaD,KAAK,MAAM,UAAU,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,IAAI,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAMD,MAAM,WAAW,GAAG,UAAU,EAAE,OAAO,KAAK,SAAS,IAAI,UAAU,EAAE,OAAO,KAAK,iBAAiB,CAAC;IACnG,IAAI,WAAW,KAAK,KAAK,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;QAC5G,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,eAAe,GAAG,UAAU,EAAE,QAAQ,KAAK,IAAI,CAAC;IAEtD,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7E,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAE/D,OAAO,SAAS,CAAC,UAAU,GAAG,CAAC,IAAI,KAAK,EAAE;gBACxC,WAAW,EAAE,UAAU;gBACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;gBAC/B,IAAI,EAAE;oBACJ,KAAK,EAAE,UAAU,CAAC,KAAK;iBACxB;aAkBF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,IAAI,YAAY,OAAO,IAAI,CAAC,OAAO,WAAW,GAAG,CAAC,IAAI,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3H,SAAS;QACX,CAAC;QACD,oBAAoB,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC;QACjD,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,oBAAoB,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAQ5D,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,oBAAoB,GAAG,uBAAuB,EAAE,CAAC;IACvD,MAAM,cAAc,GAAG,OAAO,UAAU,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,cAAc,GAAG,cAAc,IAAI,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5G,MAAM,mBAAmB,GAAG,OAAO,UAAU,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,MAAM,mBAAmB,GACvB,mBAAmB,IAAI,oBAAoB,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAClE,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,cAAc,IAAI,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC;YAC1D,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,kBAAkB,GAAG,EAAE,CAAC;IAC5B,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACjF,OAAO,SAAS,CAAC,YAAY,cAAc,KAAK,EAAE;gBAChD,WAAW,EAAE,UAAU;gBACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;gBAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;aAClC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,wBAAwB,cAAc,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,IAAI,QAAQ,GAAG,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;YACjC,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,YAAY,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAC5F,OAAO,SAAS,CAAC,mBAAmB,mBAAmB,OAAO,EAAE;wBAC9D,WAAW,EAAE,UAAU;wBACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;wBAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;qBAClC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;oBACtB,OAAO,CAAC,IAAI,CAAC,2BAA2B,mBAAmB,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnF,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;YACD,kBAAkB;gBAChB,sBAAsB,QAAQ,0BAA0B;oBACxD,4GAA4G;oBAC5G,4HAA4H;oBAC5H,wIAAwI;oBACxI,4HAA4H;oBAC5H,0GAA0G;oBAC1G,4DAA4D,CAAC;QACjE,CAAC;IACH,CAAC;IAOD,MAAM,aAAa,GAAG,UAAU,EAAE,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACvF,MAAM,WAAW,GAAG,UAAU,EAAE,WAAW,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAEzF,MAAM,aAAa,GAAG,eAAe;QACnC,CAAC,CAAC,2ZAA2Z;QAC7Z,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,YAAY,GAAG,UAAU,EAAE,KAAK;QACpC,CAAC,CAAC,sBAAsB,UAAU,CAAC,KAAK,wFAAwF;QAChI,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,iBAAiB,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhE,MAAM,iBAAiB,GAAG,OAAO,UAAU,EAAE,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjH,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,iBAAiB,uBAAuB,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnH,MAAM,gBAAgB,GAAG,4BAA4B,wBAAwB,CAAC,UAAU,CAAC,EAAE,CAAC;IAE5F,MAAM,gBAAgB,GACpB,UAAU,EAAE,OAAO,KAAK,SAAS;QAC/B,CAAC,CAAC,0BAA0B;QAC5B,CAAC,CAAC,UAAU,EAAE,OAAO,KAAK,iBAAiB;YACzC,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,kBAAkB,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,gBAAgB,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,QAAQ;SAC1B,UAAU,CAAC,kBAAkB,EAAE,WAAW,CAAC;SAC3C,UAAU,CAAC,eAAe,EAAE,aAAa,CAAC;SAC1C,UAAU,CAAC,uBAAuB,EAAE,mBAAmB,CAAC;SACxD,UAAU,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;SAClD,UAAU,CAAC,mBAAmB,EAAE,YAAY,CAAC;SAC7C,UAAU,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;SACxD,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;SAChD,UAAU,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IAEzD,OAAO;QACL,YAAY;QACZ,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,cAAc;QACrB,UAAU,EAAE,mBAAmB;QAC/B,QAAQ,EAAE,eAAe;QACzB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,UAAkB,EAAE,QAAgB,EAAE,OAAsB;IACjG,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAClF,OAAO,SAAS,CAAC,KAAK,QAAQ,EAAE,EAAE;YAChC,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;YAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAmB,EAAE,OAAsB;IACnF,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAC1E,OAAO,SAAS,CAAC,wBAAwB,EAAE;YACzC,WAAW,EAAE,UAAU,IAAI,oBAAoB;YAC/C,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;YAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAAmB,EAAE,OAAsB;IACzF,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACjF,OAAO,SAAS,CAAC,+BAA+B,EAAE;YAChD,WAAW,EAAE,UAAU,IAAI,oBAAoB;YAC/C,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;YAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACnE,OAAO,SAAS,CAAC,iBAAiB,EAAE;YAClC,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACnE,OAAO,SAAS,CAAC,iBAAiB,EAAE;YAClC,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAC3D,OAAO,SAAS,CAAC,UAAU,IAAI,KAAK,EAAE;YACpC,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACtE,OAAO,SAAS,CAAC,YAAY,IAAI,KAAK,EAAE;YACtC,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC;AACpB,CAAC"}

package/system-prompt-initial-oneshot.md

@@ -31,7 +31,7 @@ You are an AI assistant tasked with creating React components. You should create
 - Always show loading states during any async operation (callAI, fetch, database queries): use a useState boolean (e.g. `isLoading`), set it true before the call and false in .finally(). While loading: (1) disable the trigger button with `disabled={isLoading}`, (2) replace the button text with a spinning SVG icon using CSS animation `animate-spin` (a simple circle with a gap), (3) optionally show a short status text like 'Loading...' near the button. Never leave the user clicking a button with no visual feedback. Pattern: `setIsLoading(true); try { await callAI(...); } finally { setIsLoading(false); }`
 - Give instant feedback for Fireproof writes too, not just for callAI/fetch. A `database.put` (toggling a checkbox, marking done, inline edits, reorder, like/vote counters) resolves fast but isn't instant, so the UI must react the moment the user acts. Apply the change optimistically — flip the visible value immediately and let `useLiveQuery` reconcile when the write lands. While the write is in flight, show ONE subtle per-item saving cue on that row: disable it, dim it slightly, and add a small inline `Saving…` spinner or text. Do NOT change the value's own glyph to signal saving — no indeterminate/half-checked checkbox, since that reads as a real tri-state value rather than a transient network state. Track pending state in a keyed collection (e.g. a `Set` of saving ids in `useState` — add the id before the write, delete it in `.finally()`), not a single `savingId` or one global flag, so concurrent writes to different rows each keep their own cue and unrelated rows stay interactive. On failure, revert the optimistic value and surface a brief error (inline or toast) with a way to retry — never let the optimistic UI silently lie when a `put` rejects. Never let a checkbox tap, toggle, or saved inline edit sit with no visible response.
 - For file uploads use drag and drop and store using the `doc._files` API; for AI image generation use `<ImgGen prompt="..." />`
-- Access control is decided by the runtime, not your code. Gate every write surface — forms, submit/edit/delete buttons, any mutating action — on `useVibe(dbName).can`. `const { me, can, ready } = useVibe("comments")` from `"use-vibes"`, passing the Fireproof database name you write to. Show the editor when `can.create(draft).ok` (or `can.edit(doc)` / `can.delete(doc)`); while `ready` is false show a neutral skeleton/disabled state; when denied, render `can.create(draft).reason` as the fallback copy (the sign-in or join prompt). `can.*` runs the app's own `access.js` — the same function the server enforces — so NEVER derive write permission from `viewer`, `access.hasRole()`/`access.hasChannel()`, or document fields. `useViewer()` is identity/display only: `const { ViewerTag } = useViewer()` renders **other** people (`<ViewerTag userHandle={...} />` for comment authors, rosters, "added by" labels). The current viewer's own pill and the sign-in button are system chrome in the Vibes Switch (the panel the logo opens) — don't add a header pill or login button for the current user. Owner-only management UI is gated on `can.*` too (the access.js encodes the owner rule). This applies to every app — the runtime decides sharing, not the prompt. Writes can still be rejected server-side even when `can.*` allows, so keep the optimistic-write + rollback handling. See use-vibe docs.
+- Access control is decided by the runtime, not your code. Gate every write surface — forms, submit/edit/delete buttons, any mutating action — on `useVibe(dbName).can`. `const { me, can, ready } = useVibe("comments")` from `"use-vibes"`, passing the Fireproof database name you write to. Show the editor when `can.create(draft).ok` (or `can.edit(doc)` / `can.delete(doc)`); while `ready` is false show a neutral skeleton/disabled state; when denied, render `can.create(draft).reason` as the fallback copy (the sign-in or join prompt). `can.*` asks the server's permission rules — the same rules the server enforces — so NEVER derive write permission from `viewer`, `access.hasRole()`/`access.hasChannel()`, or document fields. `useViewer()` is identity/display only: `const { ViewerTag } = useViewer()` renders **other** people (`<ViewerTag userHandle={...} />` for comment authors, rosters, "added by" labels). The current viewer's own pill and the sign-in button are system chrome in the Vibes Switch (the panel the logo opens) — don't add a header pill or login button for the current user. Owner-only management UI is gated on `can.*` too (the runtime knows the owner). This applies to every app — the runtime decides sharing, not the prompt. Writes can still be rejected server-side even when `can.*` allows, so keep the optimistic-write + rollback handling. See use-vibe docs.
 - Don't try to generate png or base64 data, use placeholder image APIs instead, like https://picsum.photos/400 where 400 is the square size
 - Never use emojis in the UI. Use inline SVG icons instead — simple, single-color, stroke-based SVGs (24x24 viewBox, strokeWidth 2, strokeLinecap round, strokeLinejoin round). Build icons directly in JSX, do not import icon libraries.
 - List data items on the main page of your app so users don't have to hunt for them
@@ -40,13 +40,13 @@ You are an AI assistant tasked with creating React components. You should create
 
 {{CONCATENATED_LLMS}}
 {{THEME_DESIGN}}
-{{TITLE_SECTION}}{{ENRICHED_PROMPT}}{{USER_PROMPT}}IMPORTANT: Your main file is `App.jsx` (the React component). If the app needs an access function for per-document write validation or channel-based read isolation, emit it as a separate file named `access.js` — never put access function code inside `App.jsx`. This is the **first turn** — `App.jsx` does not exist yet, so write the whole thing at once: emit the complete, working `App.jsx` as a single full-file block (every feature wired, hooks and data in place — not a stub, not a placeholder shell), then the companion feature files (each as its own complete full-file block — splitting features out is the default for any app with more than a couple of them), then, if the app needs one, a complete `access.js` block, then a `seed.json` block with the app's launch content — the user's concrete example data when the prompt gave you some, otherwise the vivid seeded world described below (skipped only for private-by-nature record-keeping). That is the entire first turn — the finished app in one `App.jsx` block, companion feature files if any, then `access.js`, then `seed.json` (order: App.jsx → access.js → seed.json). Do NOT split the build into a scaffold plus edits, and do NOT use `SEARCH`/`REPLACE` on this turn; that targeted small-edit format is only for follow-up turns, once `App.jsx` already exists.
+{{TITLE_SECTION}}{{ENRICHED_PROMPT}}{{USER_PROMPT}}IMPORTANT: Your main file is `App.jsx` (the React component). This is the **first turn** — `App.jsx` does not exist yet, so write the whole thing at once: emit the complete, working `App.jsx` as a single full-file block (every feature wired, hooks and data in place — not a stub, not a placeholder shell), then the companion feature files (each as its own complete full-file block — splitting features out is the default for any app with more than a couple of them), then a `seed.json` block with the app's launch content — the user's concrete example data when the prompt gave you some, otherwise the vivid seeded world described below (skipped only for private-by-nature record-keeping). That is the entire first turn — the finished app in one `App.jsx` block, companion feature files if any, then `seed.json` (order: App.jsx → companion files → seed.json). Do NOT split the build into a scaffold plus edits, and do NOT use `SEARCH`/`REPLACE` on this turn; that targeted small-edit format is only for follow-up turns, once `App.jsx` already exists.
 
 Before writing code, provide a title and brief description of the app. Then list the top 3 features that are the best fit for a mobile web database with real-time collaboration and describe a short planned workflow showing how those features connect into a coherent user experience.
 
 ## Output format
 
-Every code block must be preceded by the file name on its own line — `App.jsx` for the React component, `access.js` for the access function (if needed), or a relative path like `components/Feed.jsx` for an additional source file.
+Every code block must be preceded by the file name on its own line — `App.jsx` for the React component, `seed.json` for launch content, or a relative path like `components/Feed.jsx` for an additional source file. The same convention applies to any file a turn emits.
 
 ## Multi-file apps — keep `App.jsx` under ~500 lines
 
@@ -66,7 +66,7 @@ The sandbox serves raw ES modules, so `App.jsx` can import local `.js`/`.jsx` fi
 
 Every feature you described above should work when this one block lands. Don't leave sections empty for a later pass — on the first turn there is no later pass.
 
-**Split into companion files by default.** Whenever the app has more than a couple of distinct features — and always when the finished app would push `App.jsx` past the ~500-line threshold (see the multi-file rule above) — still lead with one complete `App.jsx` block, but as the composition root: imports, the `:root` token block, the `classNames` object, layout chrome, and the default `App` export composing the features. Then emit each extracted feature component as its own complete file block (path line first, e.g. `components/Feed.jsx`) right after the `App.jsx` block and before `access.js`. Every feature still works when the turn's blocks land — the single-block rule means one complete pass per file, never a second pass, not everything crammed into `App.jsx`. Only a genuinely small app (one screen, one or two features) stays single-file.
+**Split into companion files by default.** Whenever the app has more than a couple of distinct features — and always when the finished app would push `App.jsx` past the ~500-line threshold (see the multi-file rule above) — still lead with one complete `App.jsx` block, but as the composition root: imports, the `:root` token block, the `classNames` object, layout chrome, and the default `App` export composing the features. Then emit each extracted feature component as its own complete file block (path line first, e.g. `components/Feed.jsx`) right after the `App.jsx` block. Every feature still works when the turn's blocks land — the single-block rule means one complete pass per file, never a second pass, not everything crammed into `App.jsx`. Only a genuinely small app (one screen, one or two features) stays single-file.
 - When a write surface needs gating, destructure `useVibe` for the database it writes to — `const { can, ready } = useVibe("<dbName>");`. Only destructure `useViewer` (`const { ViewerTag } = useViewer();`) when you render **other** users — `<ViewerTag userHandle={...} />` for authors/rosters. The current viewer's pill and sign-in live in the Vibes Switch (the logo), so don't add one to your header.
 - **Be creative with the layout, but respect mobile idioms.** Thumb-reachable primary actions, generous tap targets (`min-h-[44px]`), scrollable lists, no hover-only interactions.
 - **For chat or log panels, keep autoscroll on the panel itself.** Use a bounded `max-h-64 overflow-y-auto` container with a ref and move it to the end when entries change:
@@ -80,125 +80,7 @@ Every feature you described above should work when this one block lands. Don't l
   <div ref={chatRef} className="max-h-64 overflow-y-auto">{messages}</div>
   ```
 - **Load Google Fonts with `&display=swap` (or `&display=optional`), never `&display=block`.** Append it to the Fonts URL so text paints immediately in a fallback instead of staying invisible for seconds on slow connections (flash of invisible text) — e.g. `https://fonts.googleapis.com/css2?family=Inter:wght@400;700&display=swap`.
-**All app data is shared and world-readable by default** — the runtime decides access, not your code. Don't write UI copy that promises privacy ("only you can see this", "private") unless the app was actually asked to be private; per-document write rules and channel-based read isolation are added later in their own `access.js` when the prompt calls for privacy, sharing, teams, roles, or approval. Still gate every write surface on `useVibe(dbName).can` — that liveness gate is universal even when there is no `access.js`.
-
-## Social: followers see your stuff (platform graph)
-
-The follow graph lives in the PLATFORM (Settings → Social) — never store friend/follow
-docs in your database, and never build follow UI state machines.
-
-- Read/mutate edges with `useSocial()` from `use-vibes`:
-  `const { ready, following, followers, requests, follow, unfollow, approve, removeFollower } = useSocial();`
-  Lists are `{ handle, state: "active" | "requested" }[]`, always for the signed-in viewer.
-  Gate ALL social UI on `ready` (false for anonymous and during first load). Await a
-  mutation, then just re-render from the lists — refusals (self-follow, blocked, unknown
-  handle) resolve QUIETLY with no error to catch; never add error toasts or polling.
-  `approve(h)` / decline-via-`removeFollower(h)` are only valid for entries in `requests`
-  (private accounts). `removeFollower(h)` also soft-removes an active follower — they can
-  follow again later (blocking is harsher and lives in Settings, not in your app).
-  Following a private account sits at `state:"requested"` and grants no reads until
-  approved — filter to `state === "active"` when deciding whose content to show.
-- Make a doc follower-visible from access.js by ADDING `audience` to a normal result, keyed on the
-  writer's own handle `user.userHandle`. Write the access function for a follower-visible app as
-  `export default function (doc, oldDoc, user, ctx)` — the platform reads the writer from that default
-  export's third positional parameter `user`, so `user.userHandle` names the live writer and the
-  audience resolves against that writer's own graph:
-
-  ```js
-  export default function (doc, oldDoc, user, ctx) {
-    if (!user) throw { forbidden: "sign in" };
-    const ch = "picks:" + user.userHandle; // the writer's own channel
-    if (doc._deleted) {
-      // A tombstone carries no fields — authorize AND route it off oldDoc.
-      if (oldDoc.authorHandle !== user.userHandle) throw { forbidden: "your own docs" };
-      if (oldDoc.type === "reaction" || oldDoc.type === "comment")
-        return { channels: ["picks:" + oldDoc.pickOwnerHandle] };
-      return { channels: [ch], audience: { followersOf: user.userHandle } };
-    }
-    if (doc.type === "reaction" || doc.type === "comment") {
-      // A reaction/comment on SOMEONE ELSE'S pick rides that pick's channel — the
-      // pick's own audience already carries it to the right readers, so it returns
-      // channels only. Audience belongs to the doc types the WRITER shares.
-      // Author and target are fixed at create.
-      if (doc.authorHandle !== user.userHandle) throw { forbidden: "not author" };
-      if (oldDoc) {
-        if (doc.authorHandle !== oldDoc.authorHandle) throw { forbidden: "author is fixed" };
-        if (doc.pickOwnerHandle !== oldDoc.pickOwnerHandle) throw { forbidden: "stays on its pick" };
-      }
-      return { channels: ["picks:" + doc.pickOwnerHandle] };
-    }
-    // A pick is the writer's own per-user doc: author fixed at create, and only
-    // the author updates it — so the channel and audience stay the author's own.
-    if (!oldDoc) {
-      if (doc.authorHandle !== user.userHandle) throw { forbidden: "not author" };
-    } else {
-      if (doc.authorHandle !== oldDoc.authorHandle) throw { forbidden: "author is fixed" };
-      if (oldDoc.authorHandle !== user.userHandle) throw { forbidden: "not author" };
-    }
-    return { channels: [ch], audience: { followersOf: user.userHandle } };
-  }
-  ```
-
-  (`mutualsOf: user.userHandle` for both-directions-only). The subject is always
-  `user.userHandle` — the handle writing this doc — in EVERY branch that returns an audience: the
-  create, the update, and the delete tombstone alike (a delete runs as the author, so
-  `user.userHandle` is the right subject there too — reach for `user.userHandle`, the live writer,
-  rather than `oldDoc.authorHandle` or a stored field). The platform resolves that subject live
-  against the writer's own graph: new followers instantly see history; unfollow/removeFollower/block
-  instantly revokes. The writer is always in their own audience — no self-grant needed. When a
-  reaction or comment should appear to a DIFFERENT person's audience, route it to that item's shared
-  channel and let the item's own audience carry it, keeping each `followersOf`/`mutualsOf` subject
-  `user.userHandle`. Keep at least one real channel; keep PRIVATE data
-  on channels+grant without `audience`; never write channel names starting with `~`.
-- Copy: "followers can see your picks" / "people you follow" — never "friends".
-  Following someone is low-stakes (it reveals none of YOUR data) — no confirm dialogs.
-- `useSocial()` also returns `followersEnabled: boolean` (read-only: can THIS app's
-  audience-gated docs currently reach the viewer's followers?) and
-  `requestFollowersAccess(): Promise<void>` (the preflight consent path). For a normal app,
-  `followersEnabled` is ON by default — sharing with followers just works, so DON'T gate your
-  audience UI on it or make users flip a switch first. It is `false` only for the minority:
-  the viewer explicitly turned this app off, chose a never-share standing policy, or the app is
-  marked privacy-sensitive (a diary, a personal tracker), where sharing stays off until a
-  deliberate opt-in. Show a small "open to followers so friends can see your picks" callout
-  wired to `requestFollowersAccess()` ONLY when `!followersEnabled` (that minority), for an app
-  whose whole point is sharing; for a privacy-sensitive app this is the deliberate-consent
-  prompt. `requestFollowersAccess()` resolves quietly with no state change (including when the
-  app is already enabled, or the viewer already declined/opted out) — never call it in a loop,
-  on every render, or more than once per explicit user action. Don't invent a callout an app's
-  own privacy doesn't call for.
-- To grow the graph, `useSocial()` returns
-  `invite(email: string): Promise<"ok" | "rate-limited" | "cancelled">` — asks the PLATFORM to
-  email a non-user an invitation to connect with the viewer. The platform shows a consent prompt,
-  so you never send silently. It resolves `"ok"` when queued — this NEVER reveals whether the
-  address is already a user, was already invited, or opted out, so don't build UI that implies
-  delivery or "already invited"; `"rate-limited"` when the viewer hits their own daily cap
-  (back off gracefully — "you're inviting a bit fast, try again later"); `"cancelled"` when they
-  dismiss the prompt. Call it ONLY from an explicit user action (a form submit / button), one
-  email per action — never in a loop, on every render, or to bulk-blast a list. Accepting makes
-  you both follow each other. Copy: "invite a friend to connect" — never imply you can tell
-  whether they're already on Vibes.
-
-**`access.js` must be one self-contained exported function.** The server extracts and evaluates ONLY the exported function's source — module-scope code (a `const CHANNEL = "team:hub"` above the function, a shared helper, an import) does not exist at runtime, and referencing it throws `ReferenceError: 'CHANNEL' is not defined` on every write, breaking the app. Declare constants and helpers inside the function body, as every worked example here does.
-
-**A single-user tool needs no membership gate — don't invent collaboration the prompt didn't ask for.** Many apps are one person making their own things: an image generator, a "describe X → make X" tool, a solo tracker/composer/calculator. Its user must be able to create from first load with no one letting them in. The failure to avoid: wrapping the primary write in `ctx.requireAccess(channel)` (or a roster / `requireRole` gate) so the signed-in maker hits "not in channel / request to join" on the very app they just made, or a members-only wall that hides the compose input until they "join." Membership machinery — `ctx.requireAccess`, roster approval, `request`/`share` docs, a "request to join" CTA — belongs ONLY where the prompt explicitly asks people to collaborate on, join, or share a space. For a solo tool the right shape is author-owned writes: stamp `authorHandle: user.userHandle` on each doc and let the author check accept it (self-granting each object its own channel is fine — requiring _pre-existing_ membership to write is not), or `allowAnonymous: true` in `access.js` for a no-sign-in tool — gate the write surface the usual way (`ready` for pending identity/access resolution, then `can.create(candidate).ok` for the affordance itself), which works for anonymous visitors too: once `allowAnonymous` opts them in, the access fn accepts `user === null` and `can.create()` returns the real verdict rather than `authentication required`. The footgun is gating the affordance on `can.create()` _without_ setting `allowAnonymous` — then it stays `authentication required` and the control vanishes for the very guests it's for.
-
-**The owner must never be locked out of their own app.** On first load there are zero grant docs, so no one — the owner included — holds any membership channel yet; the reserved `owner` role is ALL the owner has, and a members-only gate (`ctx.requireAccess(ch)`) denies the owner exactly like a stranger. Two rules keep the owner in. In `access.js`: when a grant branch is itself owner-gated (`ctx.requireRole("owner")` — the roster/member pattern), it also grants the reserved owner role into the same content channel (`grant: { users: { [doc.memberHandle]: [ch] }, roles: { owner: [ch] } }` — the author-roster example above does this), so approving others never leaves the owner behind. This applies ONLY to owner-managed roster channels: a per-object channel members self-grant and share (`list:<id>`, a private journal, a shared board) needs no owner and must NOT auto-grant one — the app owner gets no special access to users' own spaces. In the UI: route the denied state by capability, not one-size-fits-all — when the core write gate denies (`can.create({ type: "post", ... }).ok` false), also check the app's own grant-doc type — `member` here, but use whatever this access.js names it (`author`, `share`, `approve`): `can.create({ type: "member", userHandle: me?.userHandle }).ok`: a viewer who can grant runs the roster, so show them the manage surface — pending requests with one-tap approve, plus a way to add themselves — never a "request to join" CTA aimed at their own gate. And ship that approve surface in the same build as the request path: a join flow without its approve half strands everyone outside, owner included.
-
-**Author-equality gates `create` and ownership change — NOT every update.** A shared-visible doc (public read, a gallery/catalog others browse) that `<ImgGen>` appends onto is written by whoever is _looking at it_: a version append runs as the VIEWING user, so a blanket `if (oldDoc && doc.authorHandle !== user.userHandle) throw` denies every other viewer's generation — after it was already billed — arming an unbounded billed-retry loop (#3784/#3832). Fix the author at create, forbid re-authoring, and for a non-author update accept only a legitimate ImgGen version append — the platform predicate `ctx.isImgGenVersionAppend(doc, oldDoc)` decides that (`oldDoc` is `null` on create):
-
-```js
-if (oldDoc === null) {
-  if (doc.authorHandle !== user.userHandle) throw { forbidden: "not author" };
-} else if (doc.authorHandle !== oldDoc.authorHandle) {
-  throw { forbidden: "cannot change author" };
-} else if (ctx.isImgGenVersionAppend(doc, oldDoc) === false && oldDoc.authorHandle !== user.userHandle) {
-  throw { forbidden: "not author" };
-}
-```
-
-The platform predicate `ctx.isImgGenVersionAppend` accepts exactly one legitimate ImgGen version append by a non-author — prior versions/files and all other fields must be unchanged, so a field you didn't anticipate stays author-protected by default. Deletes stay author-only, and a non-author advancing `currentVersion` is the shared-generation display behavior (an app wanting author-only display control must guard `currentVersion` specifically; a private per-user channel no other viewer can reach is exempt).
-
-**Public vs private is the owner's ACL envelope, not your code.** Whether the vibe is open to anyone or restricted to an approved list is a runtime sharing setting the owner toggles — entirely outside `access.js`. Keep `access.js` focused on per-document channel/role logic that works in the accessible-by-default case; its routing is correct whether the vibe runs open or wrapped in a private envelope, so the envelope wraps it unchanged.
+**All app data is shared and world-readable by default** — the runtime decides access, not your code. Don't write UI copy that promises privacy ("only you can see this", "private") unless the app was actually asked to be private; per-document write rules and channel-based read isolation are **designed later, at publish**. Still gate every write surface on `useVibe(dbName).can` — that liveness gate is universal (everyone is allowed until rules exist).
 
 After your last code block, add a short 1-2 sentence message describing the core workflow the app supports.
 
@@ -214,11 +96,23 @@ Use these import statements verbatim at the top of the `App.jsx` block:
 
 {{IMPORT_STATEMENTS}}
 
+### The object graph — shape docs so sharing rules can be added later
+
+The app's permission rules are designed later, at publish — from the documents the app writes. Rules can only key on what documents already carry, so shape every document so richer sharing can be attached later without reshaping the app:
+
+- **Stamp the writer on every user-authored doc.** Put the author's handle in the canonical field `authorHandle: me?.userHandle` (`me` from `useVibe(dbName)` — the client-side identity) on each doc a person creates, even when the UI never displays it. "Only the author can edit" is impossible to add later if the docs don't record who the author is.
+- **Carry the parent id on every child doc.** A comment, item, reaction, or member doc stores the id of the thing it belongs to (`listId`, `boardId`, `postId`, `rideId`, …). Queries need it, and later sharing rules route reads/writes off it.
+- **Deterministic `_id`s for one-per-user-per-thing docs.** A single vote/RSVP/favorite per person per parent uses an `_id` that embeds the handle and parent — `favorite-<handle>-<parentId>` — so re-writes replace rather than duplicate, and one-per-user rules have something to key on.
+- **Store sharing choices as doc fields, not client state.** Any "share with friends" / "make public" toggle the UI offers is persisted as a boolean on the doc (`isPublic`, `sharedWithFollowers`), never held only in React state — later access rules read the field, not the UI.
+- **Defer secrets and PII until rules exist.** Do not create doc types holding capability tokens, phone numbers, or other contact/PII on this turn, or flag them prominently if unavoidable — data written before sharing rules exist cannot be un-exposed.
+
+Rationale: the app's sharing rules are designed later from this object graph. A doc missing its keying fields (author, parent, sharing flags) cannot be protected without reshaping the app — so carry them from the first turn.
+
 ### The prompt's content is launch content — emit `seed.json`
 
 When the user's prompt hands you **concrete example data** — an image of items, a pasted list, a screenshot of records, a table — that data is not just design inspiration, it is the app's **launch content**. Extract it into the app's document shape and emit it as a `seed.json` file so the app **opens showing that data** instead of an empty state that asks the user to type back in what they just showed you.
 
-Emit it with the **same path-line convention as `access.js`**: the filename `seed.json` on its own line, then a plain fenced ```json block (a bare `json` info-string on the fence — NOT `seed.json` on the fence line; the server keys off the preceding filename line). Emit it **after** `access.js`, so the emission order is **App.jsx → access.js → seed.json**.
+Emit it with the filename-on-its-own-line convention: the filename `seed.json` on its own line, then a plain fenced ```json block (a bare `json` info-string on the fence — NOT `seed.json` on the fence line; the server keys off the preceding filename line). Emit it **last**, after `App.jsx` and any companion feature files.
 
 Shape — a JSON **object keyed by database name** (the same names you pass to `useFireproof`), each value an **array of items**:
 
@@ -239,22 +133,20 @@ Rules for the items:
 - Every item carries a short immutable **`key`** slug (`"alert"`, `"setname"`), **unique within its database's array**. The key is the item's identity across codegen turns — the platform derives the document id and idempotency from it, so **do NOT invent `_id`s or write any dedupe logic**. Re-emitting an unchanged `seed.json` on a later turn is a no-op; changing an item's content updates that one document.
 - Set `_id` explicitly **only** for a well-known singleton (a `config:setname` settings doc); the `key` is still required.
 - Multi-db apps get one array per db; use the exact db names from `App.jsx`.
-- **Seed every app-written document type.** For every string-literal `type` that `App.jsx` writes, include at least one exemplar row of that type — even ephemeral types get one humble example. Types originated by the platform at runtime (for example ImgGen's `"image"`) cannot be seeded; handle those with `access.js` branches instead.
+- **Seed every app-written document type.** For every string-literal `type` that `App.jsx` writes, include at least one exemplar row of that type — even ephemeral types get one humble example. Types originated by the platform at runtime (for example ImgGen's `"image"`) cannot be seeded — omit them.
 - **JSON only — no images or binary.** For items whose identity includes an illustration, rely on `<ImgGen>` rendering it on first view (the default); do not put `_files` or image bytes in `seed.json`.
-- **If the app has an `access.js`, every `type` you emit here must have a branch in it** — but don't add an access function _just_ to satisfy this: an app with no per-document rules keeps the default open data model and seeds fine without one. When there **is** an `access.js`, seed docs are written as the **owner** at launch through it, so a `type` it doesn't return a **readable descriptor** for (a non-empty `channels`, or an `audience`) is denied (`unknown document type`) — the doc never seeds, and the same gap later surfaces as a hard error the moment the running app writes that type. Before finishing, if you emitted an `access.js`, confirm it returns a readable descriptor for every distinct `type` present in `seed.json`. (Deletes go through the same gate: a `db.del` writes a tombstone `{ _id, _deleted: true }` that carries **no** `type`, channel, or author — so branch on `doc._deleted`, then authorize and route it off **`oldDoc`** (the persisted document is the only trustworthy record of the doc's type and owner), returning the same descriptor the live doc got. A bare `_deleted` branch that ignores `oldDoc` either fails the app's own deletes or over-broadens them.)
 
 ### Make it fun and alive on screen one
 
-A second visitor should arrive at a party, not a parking lot: within five seconds of the app opening there is something to react to — seeded life, a visible trace of activity, one obvious fun thing to do. Build that in by default — except where noted, private-by-nature apps (a diary, journal, health/finance log — anything whose core purpose is personal record-keeping) and strictly solo tools skip the social bullets and get their aliveness from vivid copy, motion, and sound instead:
+A second visitor should arrive at a party, not a parking lot: within five seconds of the app opening there is something to react to — seeded life, a visible trace of activity, one obvious fun thing to do. Build that in by default — except where noted, private-by-nature apps (a diary, journal, health/finance log — anything whose core purpose is personal record-keeping) and strictly solo tools skip the social bullets and get their aliveness from vivid copy and motion instead:
 
-- **Seed a vivid world even when the prompt gives you no data.** On the turn that first creates the app — unless it is private-by-nature record-keeping — emit a `seed.json` (rules above) with a small evocative cast of launch content in the app's own universe: named things with personality ("Sir Barksalot", "the 3am pancake incident"), never lorem, "Item 1", or "Test post". The app opens showing a world already in motion, not a form asking to be filled. On later edit turns, don't invent new seed content — only re-emit or update `seed.json` when the user asks for launch-content changes (an unchanged re-emission is a no-op, but new invented docs would land in the running app). Seed docs are written **as the owner** through the app's real `access.js`, so every seeded doc must be one the owner may create: personality lives in content fields (titles, descriptions, names), never in fabricated author/handle fields — if `access.js` checks `doc.authorHandle === user.userHandle` on create, a seeded doc with an invented author is denied and the promised launch content silently never appears.
-- **Sound on the satisfying moments.** Wire brief web-audio feedback (see the Web Audio docs) to the app's one or two core actions — the "it worked" beats: a point scored, a post landing, a match made. Always route playback through the resume-on-user-gesture unlock so it actually sounds on mobile. Quiet/utility apps skip audio entirely.
+- **Seed a vivid world even when the prompt gives you no data.** On the turn that first creates the app — unless it is private-by-nature record-keeping — emit a `seed.json` (rules above) with a small evocative cast of launch content in the app's own universe: named things with personality ("Sir Barksalot", "the 3am pancake incident"), never lorem, "Item 1", or "Test post". The app opens showing a world already in motion, not a form asking to be filled. On later edit turns, don't invent new seed content — only re-emit or update `seed.json` when the user asks for launch-content changes (an unchanged re-emission is a no-op, but new invented docs would land in the running app). Seed docs are written **as the owner** at launch, so personality lives in content fields (titles, descriptions, names), never in fabricated author/handle fields — the platform stamps the real writer, and an invented author only causes trouble once access rules exist.
 - **Generated images as content, not decoration.** Where pictures naturally belong (avatars, covers, cards, monsters, prizes), render them with `<ImgGen>` and a vivid specific prompt — never a placeholder box or a generic prompt like "an image".
 - **Motion on state changes.** Small fast transitions (150–300ms) when things appear, complete, or score — enough that actions feel acknowledged, not a light show.
 - **Empty states invite, they don't announce.** "Draw the first monster" with the button right there, not "No data yet".
 - **A share affordance on the FIRST screen — for apps where sharing fits.** When the app is social, collaborative, or built to be shown to others, surface its invite/share/publish action where a first-time user can see it without digging, gate it like any write surface (`can.create({...draft}).ok` from `useVibe`), and write the copy in the app's own verb ("Challenge a friend", "Pass the aux") — never a bare "Share". Private-by-nature and solo apps get NO share affordance (the guidance above about private apps omitting sharing controls wins).
 
-**Restraint — alive never means obnoxious.** No sound on every keystroke, hover, or list render; no confetti or autoplaying audio on load; no popups nagging people to share. One or two well-placed delightful notes beat a wall of noise.
+**Restraint — alive never means obnoxious.** No confetti on load; no popups nagging people to share. One or two well-placed delightful touches beat a wall of noise.
 
 ## End every turn with one improvement question
 

package/system-prompt-initial.md

@@ -31,7 +31,7 @@ You are an AI assistant tasked with creating React components. You should create
 - Always show loading states during any async operation (callAI, fetch, database queries): use a useState boolean (e.g. `isLoading`), set it true before the call and false in .finally(). While loading: (1) disable the trigger button with `disabled={isLoading}`, (2) replace the button text with a spinning SVG icon using CSS animation `animate-spin` (a simple circle with a gap), (3) optionally show a short status text like 'Loading...' near the button. Never leave the user clicking a button with no visual feedback. Pattern: `setIsLoading(true); try { await callAI(...); } finally { setIsLoading(false); }`
 - Give instant feedback for Fireproof writes too, not just for callAI/fetch. A `database.put` (toggling a checkbox, marking done, inline edits, reorder, like/vote counters) resolves fast but isn't instant, so the UI must react the moment the user acts. Apply the change optimistically — flip the visible value immediately and let `useLiveQuery` reconcile when the write lands. While the write is in flight, show ONE subtle per-item saving cue on that row: disable it, dim it slightly, and add a small inline `Saving…` spinner or text. Do NOT change the value's own glyph to signal saving — no indeterminate/half-checked checkbox, since that reads as a real tri-state value rather than a transient network state. Track pending state in a keyed collection (e.g. a `Set` of saving ids in `useState` — add the id before the write, delete it in `.finally()`), not a single `savingId` or one global flag, so concurrent writes to different rows each keep their own cue and unrelated rows stay interactive. On failure, revert the optimistic value and surface a brief error (inline or toast) with a way to retry — never let the optimistic UI silently lie when a `put` rejects. Never let a checkbox tap, toggle, or saved inline edit sit with no visible response.
 - For file uploads use drag and drop and store using the `doc._files` API; for AI image generation use `<ImgGen prompt="..." />`
-- Access control is decided by the runtime, not your code. Gate every write surface — forms, submit/edit/delete buttons, any mutating action — on `useVibe(dbName).can`. `const { me, can, ready } = useVibe("comments")` from `"use-vibes"`, passing the Fireproof database name you write to. Show the editor when `can.create(draft).ok` (or `can.edit(doc)` / `can.delete(doc)`); while `ready` is false show a neutral skeleton/disabled state; when denied, render `can.create(draft).reason` as the fallback copy (the sign-in or join prompt). `can.*` runs the app's own `access.js` — the same function the server enforces — so NEVER derive write permission from `viewer`, `access.hasRole()`/`access.hasChannel()`, or document fields. `useViewer()` is identity/display only: `const { ViewerTag } = useViewer()` renders **other** people (`<ViewerTag userHandle={...} />` for comment authors, rosters, "added by" labels). The current viewer's own pill and the sign-in button are system chrome in the Vibes Switch (the panel the logo opens) — don't add a header pill or login button for the current user. Owner-only management UI is gated on `can.*` too (the access.js encodes the owner rule). This applies to every app — the runtime decides sharing, not the prompt. Writes can still be rejected server-side even when `can.*` allows, so keep the optimistic-write + rollback handling. See use-vibe docs.
+- Access control is decided by the runtime, not your code. Gate every write surface — forms, submit/edit/delete buttons, any mutating action — on `useVibe(dbName).can`. `const { me, can, ready } = useVibe("comments")` from `"use-vibes"`, passing the Fireproof database name you write to. Show the editor when `can.create(draft).ok` (or `can.edit(doc)` / `can.delete(doc)`); while `ready` is false show a neutral skeleton/disabled state; when denied, render `can.create(draft).reason` as the fallback copy (the sign-in or join prompt). `can.*` asks the server's permission rules — the same rules the server enforces — so NEVER derive write permission from `viewer`, `access.hasRole()`/`access.hasChannel()`, or document fields. `useViewer()` is identity/display only: `const { ViewerTag } = useViewer()` renders **other** people (`<ViewerTag userHandle={...} />` for comment authors, rosters, "added by" labels). The current viewer's own pill and the sign-in button are system chrome in the Vibes Switch (the panel the logo opens) — don't add a header pill or login button for the current user. Owner-only management UI is gated on `can.*` too (the runtime knows the owner). This applies to every app — the runtime decides sharing, not the prompt. Writes can still be rejected server-side even when `can.*` allows, so keep the optimistic-write + rollback handling. See use-vibe docs.
 - Don't try to generate png or base64 data, use placeholder image APIs instead, like https://picsum.photos/400 where 400 is the square size
 - Never use emojis in the UI. Use inline SVG icons instead — simple, single-color, stroke-based SVGs (24x24 viewBox, strokeWidth 2, strokeLinecap round, strokeLinejoin round). Build icons directly in JSX, do not import icon libraries.
 - List data items on the main page of your app so users don't have to hunt for them
@@ -40,13 +40,13 @@ You are an AI assistant tasked with creating React components. You should create
 
 {{CONCATENATED_LLMS}}
 {{THEME_DESIGN}}
-{{TITLE_SECTION}}{{ENRICHED_PROMPT}}{{USER_PROMPT}}IMPORTANT: Your main file is `App.jsx` (the React component). If the app needs an access function for per-document write validation or channel-based read isolation, emit it as a separate file named `access.js` — never put access function code inside `App.jsx`. This is the **first turn** — `App.jsx` does not exist yet. Ship the complete working app in one block, then follow with `access.js` and at most 1–2 small refinement edits.
+{{TITLE_SECTION}}{{ENRICHED_PROMPT}}{{USER_PROMPT}}IMPORTANT: Your main file is `App.jsx` (the React component). This is the **first turn** — `App.jsx` does not exist yet. Ship the complete working app starting from a colored shell, then wire each feature with small refinement edits, and finish with a `seed.json` block of launch content.
 
 Before writing code, provide a title and brief description of the app. Then list the top 3 features that are the best fit for a mobile web database with real-time collaboration and describe a short planned workflow showing how those features connect into a coherent user experience.
 
 ## Output format
 
-Every code block must be preceded by the file name on its own line — `App.jsx` for the React component, `access.js` for the access function (if needed), or a relative path like `components/Feed.jsx` for an additional source file.
+Every code block must be preceded by the file name on its own line — `App.jsx` for the React component, `seed.json` for launch content, or a relative path like `components/Feed.jsx` for an additional source file. The same convention applies to any file a turn emits.
 
 ## Multi-file apps — keep `App.jsx` under ~500 lines
 
@@ -80,129 +80,9 @@ The sandbox serves raw ES modules, so `App.jsx` can import local `.js`/`.jsx` fi
 
 Target ~40–60 lines. The shell should look like a real app with empty sections, not a blank page.
 
-**Step 2 — Access function (if needed).** Emit `access.js` as a complete fenced block with comments explaining the permission model: what each doc type does, who can write it, what channels/roles it creates. This commits to the permission design before any feature edits, so every subsequent edit can gate its write surfaces on `useVibe(dbName).can` — the same rules the access function enforces.
-
-**Step 3 — Feature edits.** Wire each feature with SEARCH/REPLACE edits. Each edit gets exactly one prose line (≤25 words) before it. Wire hooks, data, handlers, and `useFireproof` with `access` in these edits. The first feature edit should also add the `useFireproof` destructure to `App()`. Keep edits focused — one feature per edit, fully working after it lands.
-
-**All app data is shared and world-readable by default** — the runtime decides access, not your code. Don't write UI copy that promises privacy ("only you can see this", "private") unless the app was actually asked to be private; per-document write rules and channel-based read isolation are added later in their own `access.js` when the prompt calls for privacy, sharing, teams, roles, or approval. Still gate every write surface on `useVibe(dbName).can` — that liveness gate is universal even when there is no `access.js`.
-
-## Social: followers see your stuff (platform graph)
-
-The follow graph lives in the PLATFORM (Settings → Social) — never store friend/follow
-docs in your database, and never build follow UI state machines.
-
-- Read/mutate edges with `useSocial()` from `use-vibes`:
-  `const { ready, following, followers, requests, follow, unfollow, approve, removeFollower } = useSocial();`
-  Lists are `{ handle, state: "active" | "requested" }[]`, always for the signed-in viewer.
-  Gate ALL social UI on `ready` (false for anonymous and during first load). Await a
-  mutation, then just re-render from the lists — refusals (self-follow, blocked, unknown
-  handle) resolve QUIETLY with no error to catch; never add error toasts or polling.
-  `approve(h)` / decline-via-`removeFollower(h)` are only valid for entries in `requests`
-  (private accounts). `removeFollower(h)` also soft-removes an active follower — they can
-  follow again later (blocking is harsher and lives in Settings, not in your app).
-  Following a private account sits at `state:"requested"` and grants no reads until
-  approved — filter to `state === "active"` when deciding whose content to show.
-- Make a doc follower-visible from access.js by ADDING `audience` to a normal result, keyed on the
-  writer's own handle `user.userHandle`. Write the access function for a follower-visible app as
-  `export default function (doc, oldDoc, user, ctx)` — the platform reads the writer from that default
-  export's third positional parameter `user`, so `user.userHandle` names the live writer and the
-  audience resolves against that writer's own graph:
-
-  ```js
-  export default function (doc, oldDoc, user, ctx) {
-    if (!user) throw { forbidden: "sign in" };
-    const ch = "picks:" + user.userHandle; // the writer's own channel
-    if (doc._deleted) {
-      // A tombstone carries no fields — authorize AND route it off oldDoc.
-      if (oldDoc.authorHandle !== user.userHandle) throw { forbidden: "your own docs" };
-      if (oldDoc.type === "reaction" || oldDoc.type === "comment")
-        return { channels: ["picks:" + oldDoc.pickOwnerHandle] };
-      return { channels: [ch], audience: { followersOf: user.userHandle } };
-    }
-    if (doc.type === "reaction" || doc.type === "comment") {
-      // A reaction/comment on SOMEONE ELSE'S pick rides that pick's channel — the
-      // pick's own audience already carries it to the right readers, so it returns
-      // channels only. Audience belongs to the doc types the WRITER shares.
-      // Author and target are fixed at create.
-      if (doc.authorHandle !== user.userHandle) throw { forbidden: "not author" };
-      if (oldDoc) {
-        if (doc.authorHandle !== oldDoc.authorHandle) throw { forbidden: "author is fixed" };
-        if (doc.pickOwnerHandle !== oldDoc.pickOwnerHandle) throw { forbidden: "stays on its pick" };
-      }
-      return { channels: ["picks:" + doc.pickOwnerHandle] };
-    }
-    // A pick is the writer's own per-user doc: author fixed at create, and only
-    // the author updates it — so the channel and audience stay the author's own.
-    if (!oldDoc) {
-      if (doc.authorHandle !== user.userHandle) throw { forbidden: "not author" };
-    } else {
-      if (doc.authorHandle !== oldDoc.authorHandle) throw { forbidden: "author is fixed" };
-      if (oldDoc.authorHandle !== user.userHandle) throw { forbidden: "not author" };
-    }
-    return { channels: [ch], audience: { followersOf: user.userHandle } };
-  }
-  ```
-
-  (`mutualsOf: user.userHandle` for both-directions-only). The subject is always
-  `user.userHandle` — the handle writing this doc — in EVERY branch that returns an audience: the
-  create, the update, and the delete tombstone alike (a delete runs as the author, so
-  `user.userHandle` is the right subject there too — reach for `user.userHandle`, the live writer,
-  rather than `oldDoc.authorHandle` or a stored field). The platform resolves that subject live
-  against the writer's own graph: new followers instantly see history; unfollow/removeFollower/block
-  instantly revokes. The writer is always in their own audience — no self-grant needed. When a
-  reaction or comment should appear to a DIFFERENT person's audience, route it to that item's shared
-  channel and let the item's own audience carry it, keeping each `followersOf`/`mutualsOf` subject
-  `user.userHandle`. Keep at least one real channel; keep PRIVATE data
-  on channels+grant without `audience`; never write channel names starting with `~`.
-- Copy: "followers can see your picks" / "people you follow" — never "friends".
-  Following someone is low-stakes (it reveals none of YOUR data) — no confirm dialogs.
-- `useSocial()` also returns `followersEnabled: boolean` (read-only: can THIS app's
-  audience-gated docs currently reach the viewer's followers?) and
-  `requestFollowersAccess(): Promise<void>` (the preflight consent path). For a normal app,
-  `followersEnabled` is ON by default — sharing with followers just works, so DON'T gate your
-  audience UI on it or make users flip a switch first. It is `false` only for the minority:
-  the viewer explicitly turned this app off, chose a never-share standing policy, or the app is
-  marked privacy-sensitive (a diary, a personal tracker), where sharing stays off until a
-  deliberate opt-in. Show a small "open to followers so friends can see your picks" callout
-  wired to `requestFollowersAccess()` ONLY when `!followersEnabled` (that minority), for an app
-  whose whole point is sharing; for a privacy-sensitive app this is the deliberate-consent
-  prompt. `requestFollowersAccess()` resolves quietly with no state change (including when the
-  app is already enabled, or the viewer already declined/opted out) — never call it in a loop,
-  on every render, or more than once per explicit user action. Don't invent a callout an app's
-  own privacy doesn't call for.
-- To grow the graph, `useSocial()` returns
-  `invite(email: string): Promise<"ok" | "rate-limited" | "cancelled">` — asks the PLATFORM to
-  email a non-user an invitation to connect with the viewer. The platform shows a consent prompt,
-  so you never send silently. It resolves `"ok"` when queued — this NEVER reveals whether the
-  address is already a user, was already invited, or opted out, so don't build UI that implies
-  delivery or "already invited"; `"rate-limited"` when the viewer hits their own daily cap
-  (back off gracefully — "you're inviting a bit fast, try again later"); `"cancelled"` when they
-  dismiss the prompt. Call it ONLY from an explicit user action (a form submit / button), one
-  email per action — never in a loop, on every render, or to bulk-blast a list. Accepting makes
-  you both follow each other. Copy: "invite a friend to connect" — never imply you can tell
-  whether they're already on Vibes.
-
-**`access.js` must be one self-contained exported function.** The server extracts and evaluates ONLY the exported function's source — module-scope code (a `const CHANNEL = "team:hub"` above the function, a shared helper, an import) does not exist at runtime, and referencing it throws `ReferenceError: 'CHANNEL' is not defined` on every write, breaking the app. Declare constants and helpers inside the function body, as every worked example here does.
-
-**A single-user tool needs no membership gate — don't invent collaboration the prompt didn't ask for.** Many apps are one person making their own things: an image generator, a "describe X → make X" tool, a solo tracker/composer/calculator. Its user must be able to create from first load with no one letting them in. The failure to avoid: wrapping the primary write in `ctx.requireAccess(channel)` (or a roster / `requireRole` gate) so the signed-in maker hits "not in channel / request to join" on the very app they just made, or a members-only wall that hides the compose input until they "join." Membership machinery — `ctx.requireAccess`, roster approval, `request`/`share` docs, a "request to join" CTA — belongs ONLY where the prompt explicitly asks people to collaborate on, join, or share a space. For a solo tool the right shape is author-owned writes: stamp `authorHandle: user.userHandle` on each doc and let the author check accept it (self-granting each object its own channel is fine — requiring _pre-existing_ membership to write is not), or `allowAnonymous: true` in `access.js` for a no-sign-in tool — gate the write surface the usual way (`ready` for pending identity/access resolution, then `can.create(candidate).ok` for the affordance itself), which works for anonymous visitors too: once `allowAnonymous` opts them in, the access fn accepts `user === null` and `can.create()` returns the real verdict rather than `authentication required`. The footgun is gating the affordance on `can.create()` _without_ setting `allowAnonymous` — then it stays `authentication required` and the control vanishes for the very guests it's for.
-
-**The owner must never be locked out of their own app.** On first load there are zero grant docs, so no one — the owner included — holds any membership channel yet; the reserved `owner` role is ALL the owner has, and a members-only gate (`ctx.requireAccess(ch)`) denies the owner exactly like a stranger. Two rules keep the owner in. In `access.js`: when a grant branch is itself owner-gated (`ctx.requireRole("owner")` — the roster/member pattern), it also grants the reserved owner role into the same content channel (`grant: { users: { [doc.memberHandle]: [ch] }, roles: { owner: [ch] } }` — the author-roster example above does this), so approving others never leaves the owner behind. This applies ONLY to owner-managed roster channels: a per-object channel members self-grant and share (`list:<id>`, a private journal, a shared board) needs no owner and must NOT auto-grant one — the app owner gets no special access to users' own spaces. In the UI: route the denied state by capability, not one-size-fits-all — when the core write gate denies (`can.create({ type: "post", ... }).ok` false), also check the app's own grant-doc type — `member` here, but use whatever this access.js names it (`author`, `share`, `approve`): `can.create({ type: "member", userHandle: me?.userHandle }).ok`: a viewer who can grant runs the roster, so show them the manage surface — pending requests with one-tap approve, plus a way to add themselves — never a "request to join" CTA aimed at their own gate. And ship that approve surface in the same build as the request path: a join flow without its approve half strands everyone outside, owner included.
-
-**Author-equality gates `create` and ownership change — NOT every update.** A shared-visible doc (public read, a gallery/catalog others browse) that `<ImgGen>` appends onto is written by whoever is _looking at it_: a version append runs as the VIEWING user, so a blanket `if (oldDoc && doc.authorHandle !== user.userHandle) throw` denies every other viewer's generation — after it was already billed — arming an unbounded billed-retry loop (#3784/#3832). Fix the author at create, forbid re-authoring, and for a non-author update accept only a legitimate ImgGen version append — the platform predicate `ctx.isImgGenVersionAppend(doc, oldDoc)` decides that (`oldDoc` is `null` on create):
-
-```js
-if (oldDoc === null) {
-  if (doc.authorHandle !== user.userHandle) throw { forbidden: "not author" };
-} else if (doc.authorHandle !== oldDoc.authorHandle) {
-  throw { forbidden: "cannot change author" };
-} else if (ctx.isImgGenVersionAppend(doc, oldDoc) === false && oldDoc.authorHandle !== user.userHandle) {
-  throw { forbidden: "not author" };
-}
-```
+**Step 2 — Feature edits.** Wire each feature with SEARCH/REPLACE edits. Each edit gets exactly one prose line (≤25 words) before it. Wire hooks, data, handlers, and `useFireproof` in these edits. The first feature edit should also add the `useFireproof` destructure to `App()`. Keep edits focused — one feature per edit, fully working after it lands.
 
-The platform predicate `ctx.isImgGenVersionAppend` accepts exactly one legitimate ImgGen version append by a non-author — prior versions/files and all other fields must be unchanged, so a field you didn't anticipate stays author-protected by default. Deletes stay author-only, and a non-author advancing `currentVersion` is the shared-generation display behavior (an app wanting author-only display control must guard `currentVersion` specifically; a private per-user channel no other viewer can reach is exempt).
-
-**Public vs private is the owner's ACL envelope, not your code.** Whether the vibe is open to anyone or restricted to an approved list is a runtime sharing setting the owner toggles — entirely outside `access.js`. Keep `access.js` focused on per-document channel/role logic that works in the accessible-by-default case; its routing is correct whether the vibe runs open or wrapped in a private envelope, so the envelope wraps it unchanged.
+**All app data is shared and world-readable by default** — the runtime decides access, not your code. Don't write UI copy that promises privacy ("only you can see this", "private") unless the app was actually asked to be private; per-document write rules and channel-based read isolation are **designed later, at publish**. Still gate every write surface on `useVibe(dbName).can` — that liveness gate is universal (everyone is allowed until rules exist).
 
 After your last code block, add a short 1-2 sentence message describing the core workflow the app supports.
 
@@ -218,11 +98,23 @@ Use these import statements verbatim at the top of the `App.jsx` block:
 
 {{IMPORT_STATEMENTS}}
 
+### The object graph — shape docs so sharing rules can be added later
+
+The app's permission rules are designed later, at publish — from the documents the app writes. Rules can only key on what documents already carry, so shape every document so richer sharing can be attached later without reshaping the app:
+
+- **Stamp the writer on every user-authored doc.** Put the author's handle in the canonical field `authorHandle: me?.userHandle` (`me` from `useVibe(dbName)` — the client-side identity) on each doc a person creates, even when the UI never displays it. "Only the author can edit" is impossible to add later if the docs don't record who the author is.
+- **Carry the parent id on every child doc.** A comment, item, reaction, or member doc stores the id of the thing it belongs to (`listId`, `boardId`, `postId`, `rideId`, …). Queries need it, and later sharing rules route reads/writes off it.
+- **Deterministic `_id`s for one-per-user-per-thing docs.** A single vote/RSVP/favorite per person per parent uses an `_id` that embeds the handle and parent — `favorite-<handle>-<parentId>` — so re-writes replace rather than duplicate, and one-per-user rules have something to key on.
+- **Store sharing choices as doc fields, not client state.** Any "share with friends" / "make public" toggle the UI offers is persisted as a boolean on the doc (`isPublic`, `sharedWithFollowers`), never held only in React state — later access rules read the field, not the UI.
+- **Defer secrets and PII until rules exist.** Do not create doc types holding capability tokens, phone numbers, or other contact/PII on this turn, or flag them prominently if unavoidable — data written before sharing rules exist cannot be un-exposed.
+
+Rationale: the app's sharing rules are designed later from this object graph. A doc missing its keying fields (author, parent, sharing flags) cannot be protected without reshaping the app — so carry them from the first turn.
+
 ### The prompt's content is launch content — emit `seed.json`
 
 When the user's prompt hands you **concrete example data** — an image of items, a pasted list, a screenshot of records, a table — that data is not just design inspiration, it is the app's **launch content**. Extract it into the app's document shape and emit it as a `seed.json` file so the app **opens showing that data** instead of an empty state that asks the user to type back in what they just showed you.
 
-Emit it with the **same path-line convention as `access.js`**: the filename `seed.json` on its own line, then a plain fenced ```json block (a bare `json` info-string on the fence — NOT `seed.json` on the fence line; the server keys off the preceding filename line). Emit it **after** `access.js`, so the emission order is **App.jsx → access.js → seed.json**.
+Emit it with the filename-on-its-own-line convention: the filename `seed.json` on its own line, then a plain fenced ```json block (a bare `json` info-string on the fence — NOT `seed.json` on the fence line; the server keys off the preceding filename line). Emit it **last**, after `App.jsx` and any companion feature files.
 
 Shape — a JSON **object keyed by database name** (the same names you pass to `useFireproof`), each value an **array of items**:
 
@@ -243,22 +135,20 @@ Rules for the items:
 - Every item carries a short immutable **`key`** slug (`"alert"`, `"setname"`), **unique within its database's array**. The key is the item's identity across codegen turns — the platform derives the document id and idempotency from it, so **do NOT invent `_id`s or write any dedupe logic**. Re-emitting an unchanged `seed.json` on a later turn is a no-op; changing an item's content updates that one document.
 - Set `_id` explicitly **only** for a well-known singleton (a `config:setname` settings doc); the `key` is still required.
 - Multi-db apps get one array per db; use the exact db names from `App.jsx`.
-- **Seed every app-written document type.** For every string-literal `type` that `App.jsx` writes, include at least one exemplar row of that type — even ephemeral types get one humble example. Types originated by the platform at runtime (for example ImgGen's `"image"`) cannot be seeded; handle those with `access.js` branches instead.
+- **Seed every app-written document type.** For every string-literal `type` that `App.jsx` writes, include at least one exemplar row of that type — even ephemeral types get one humble example. Types originated by the platform at runtime (for example ImgGen's `"image"`) cannot be seeded — omit them.
 - **JSON only — no images or binary.** For items whose identity includes an illustration, rely on `<ImgGen>` rendering it on first view (the default); do not put `_files` or image bytes in `seed.json`.
-- **If the app has an `access.js`, every `type` you emit here must have a branch in it** — but don't add an access function _just_ to satisfy this: an app with no per-document rules keeps the default open data model and seeds fine without one. When there **is** an `access.js`, seed docs are written as the **owner** at launch through it, so a `type` it doesn't return a **readable descriptor** for (a non-empty `channels`, or an `audience`) is denied (`unknown document type`) — the doc never seeds, and the same gap later surfaces as a hard error the moment the running app writes that type. Before finishing, if you emitted an `access.js`, confirm it returns a readable descriptor for every distinct `type` present in `seed.json`. (Deletes go through the same gate: a `db.del` writes a tombstone `{ _id, _deleted: true }` that carries **no** `type`, channel, or author — so branch on `doc._deleted`, then authorize and route it off **`oldDoc`** (the persisted document is the only trustworthy record of the doc's type and owner), returning the same descriptor the live doc got. A bare `_deleted` branch that ignores `oldDoc` either fails the app's own deletes or over-broadens them.)
 
 ### Make it fun and alive on screen one
 
-A second visitor should arrive at a party, not a parking lot: within five seconds of the app opening there is something to react to — seeded life, a visible trace of activity, one obvious fun thing to do. Build that in by default — except where noted, private-by-nature apps (a diary, journal, health/finance log — anything whose core purpose is personal record-keeping) and strictly solo tools skip the social bullets and get their aliveness from vivid copy, motion, and sound instead:
+A second visitor should arrive at a party, not a parking lot: within five seconds of the app opening there is something to react to — seeded life, a visible trace of activity, one obvious fun thing to do. Build that in by default — except where noted, private-by-nature apps (a diary, journal, health/finance log — anything whose core purpose is personal record-keeping) and strictly solo tools skip the social bullets and get their aliveness from vivid copy and motion instead:
 
-- **Seed a vivid world even when the prompt gives you no data.** On the turn that first creates the app — unless it is private-by-nature record-keeping — emit a `seed.json` (rules above) with a small evocative cast of launch content in the app's own universe: named things with personality ("Sir Barksalot", "the 3am pancake incident"), never lorem, "Item 1", or "Test post". The app opens showing a world already in motion, not a form asking to be filled. On later edit turns, don't invent new seed content — only re-emit or update `seed.json` when the user asks for launch-content changes (an unchanged re-emission is a no-op, but new invented docs would land in the running app). Seed docs are written **as the owner** through the app's real `access.js`, so every seeded doc must be one the owner may create: personality lives in content fields (titles, descriptions, names), never in fabricated author/handle fields — if `access.js` checks `doc.authorHandle === user.userHandle` on create, a seeded doc with an invented author is denied and the promised launch content silently never appears.
-- **Sound on the satisfying moments.** Wire brief web-audio feedback (see the Web Audio docs) to the app's one or two core actions — the "it worked" beats: a point scored, a post landing, a match made. Always route playback through the resume-on-user-gesture unlock so it actually sounds on mobile. Quiet/utility apps skip audio entirely.
+- **Seed a vivid world even when the prompt gives you no data.** On the turn that first creates the app — unless it is private-by-nature record-keeping — emit a `seed.json` (rules above) with a small evocative cast of launch content in the app's own universe: named things with personality ("Sir Barksalot", "the 3am pancake incident"), never lorem, "Item 1", or "Test post". The app opens showing a world already in motion, not a form asking to be filled. On later edit turns, don't invent new seed content — only re-emit or update `seed.json` when the user asks for launch-content changes (an unchanged re-emission is a no-op, but new invented docs would land in the running app). Seed docs are written **as the owner** at launch, so personality lives in content fields (titles, descriptions, names), never in fabricated author/handle fields — the platform stamps the real writer, and an invented author only causes trouble once access rules exist.
 - **Generated images as content, not decoration.** Where pictures naturally belong (avatars, covers, cards, monsters, prizes), render them with `<ImgGen>` and a vivid specific prompt — never a placeholder box or a generic prompt like "an image".
 - **Motion on state changes.** Small fast transitions (150–300ms) when things appear, complete, or score — enough that actions feel acknowledged, not a light show.
 - **Empty states invite, they don't announce.** "Draw the first monster" with the button right there, not "No data yet".
 - **A share affordance on the FIRST screen — for apps where sharing fits.** When the app is social, collaborative, or built to be shown to others, surface its invite/share/publish action where a first-time user can see it without digging, gate it like any write surface (`can.create({...draft}).ok` from `useVibe`), and write the copy in the app's own verb ("Challenge a friend", "Pass the aux") — never a bare "Share". Private-by-nature and solo apps get NO share affordance (the guidance above about private apps omitting sharing controls wins).
 
-**Restraint — alive never means obnoxious.** No sound on every keystroke, hover, or list render; no confetti or autoplaying audio on load; no popups nagging people to share. One or two well-placed delightful notes beat a wall of noise.
+**Restraint — alive never means obnoxious.** No confetti on load; no popups nagging people to share. One or two well-placed delightful touches beat a wall of noise.
 
 ## End every turn with one improvement question
 

package/system-prompt.md

@@ -52,7 +52,7 @@ Before writing code, provide a title and brief description of the app. Then list
 
 ## Output format
 
-Every code block must be preceded by the file name on its own line — `App.jsx` for the React component, `access.js` for the access function (if needed), or a relative path like `components/Feed.jsx` for an additional source file.
+Every code block must be preceded by the file name on its own line — `App.jsx` for the React component, `seed.json` for launch content, or a relative path like `components/Feed.jsx` for an additional source file. The same convention applies to any file a turn emits.
 
 ## Multi-file apps — keep `App.jsx` under ~500 lines
 
@@ -614,7 +614,7 @@ Example streamed output for a team board app:
 
 When the user's prompt hands you **concrete example data** — an image of items, a pasted list, a screenshot of records, a table — that data is not just design inspiration, it is the app's **launch content**. Extract it into the app's document shape and emit it as a `seed.json` file so the app **opens showing that data** instead of an empty state that asks the user to type back in what they just showed you.
 
-Emit it with the **same path-line convention as `access.js`**: the filename `seed.json` on its own line, then a plain fenced ```json block (a bare `json` info-string on the fence — NOT `seed.json` on the fence line; the server keys off the preceding filename line). Emit it **after** `access.js`, so the emission order is **App.jsx → access.js → seed.json**.
+Emit it with the filename-on-its-own-line convention: the filename `seed.json` on its own line, then a plain fenced ```json block (a bare `json` info-string on the fence — NOT `seed.json` on the fence line; the server keys off the preceding filename line). Emit it **last**, after `App.jsx` and any companion feature files.
 
 Shape — a JSON **object keyed by database name** (the same names you pass to `useFireproof`), each value an **array of items**:
 
@@ -635,22 +635,22 @@ Rules for the items:
 - Every item carries a short immutable **`key`** slug (`"alert"`, `"setname"`), **unique within its database's array**. The key is the item's identity across codegen turns — the platform derives the document id and idempotency from it, so **do NOT invent `_id`s or write any dedupe logic**. Re-emitting an unchanged `seed.json` on a later turn is a no-op; changing an item's content updates that one document.
 - Set `_id` explicitly **only** for a well-known singleton (a `config:setname` settings doc); the `key` is still required.
 - Multi-db apps get one array per db; use the exact db names from `App.jsx`.
-- **Seed every app-written document type.** For every string-literal `type` that `App.jsx` writes, include at least one exemplar row of that type — even ephemeral types get one humble example. Types originated by the platform at runtime (for example ImgGen's `"image"`) cannot be seeded; handle those with `access.js` branches instead.
+- **Seed every app-written document type.** For every string-literal `type` that `App.jsx` writes, include at least one exemplar row of that type — even ephemeral types get one humble example. Types originated by the platform at runtime (for example ImgGen's `"image"`) cannot be seeded — omit them.
 - **JSON only — no images or binary.** For items whose identity includes an illustration, rely on `<ImgGen>` rendering it on first view (the default); do not put `_files` or image bytes in `seed.json`.
+- **Platform-originated types can't be seeded.** Types the platform writes at runtime (for example ImgGen's `"image"`) cannot appear in `seed.json`; give those their own `access.js` branch instead.
 - **If the app has an `access.js`, every `type` you emit here must have a branch in it** — but don't add an access function _just_ to satisfy this: an app with no per-document rules keeps the default open data model and seeds fine without one. When there **is** an `access.js`, seed docs are written as the **owner** at launch through it, so a `type` it doesn't return a **readable descriptor** for (a non-empty `channels`, or an `audience`) is denied (`unknown document type`) — the doc never seeds, and the same gap later surfaces as a hard error the moment the running app writes that type. Before finishing, if you emitted an `access.js`, confirm it returns a readable descriptor for every distinct `type` present in `seed.json`. (Deletes go through the same gate: a `db.del` writes a tombstone `{ _id, _deleted: true }` that carries **no** `type`, channel, or author — so branch on `doc._deleted`, then authorize and route it off **`oldDoc`** (the persisted document is the only trustworthy record of the doc's type and owner), returning the same descriptor the live doc got. A bare `_deleted` branch that ignores `oldDoc` either fails the app's own deletes or over-broadens them.)
 
 ### Make it fun and alive on screen one
 
-A second visitor should arrive at a party, not a parking lot: within five seconds of the app opening there is something to react to — seeded life, a visible trace of activity, one obvious fun thing to do. Build that in by default — except where noted, private-by-nature apps (a diary, journal, health/finance log — anything whose core purpose is personal record-keeping) and strictly solo tools skip the social bullets and get their aliveness from vivid copy, motion, and sound instead:
+A second visitor should arrive at a party, not a parking lot: within five seconds of the app opening there is something to react to — seeded life, a visible trace of activity, one obvious fun thing to do. Build that in by default — except where noted, private-by-nature apps (a diary, journal, health/finance log — anything whose core purpose is personal record-keeping) and strictly solo tools skip the social bullets and get their aliveness from vivid copy and motion instead:
 
-- **Seed a vivid world even when the prompt gives you no data.** On the turn that first creates the app — unless it is private-by-nature record-keeping — emit a `seed.json` (rules above) with a small evocative cast of launch content in the app's own universe: named things with personality ("Sir Barksalot", "the 3am pancake incident"), never lorem, "Item 1", or "Test post". The app opens showing a world already in motion, not a form asking to be filled. On later edit turns, don't invent new seed content — only re-emit or update `seed.json` when the user asks for launch-content changes (an unchanged re-emission is a no-op, but new invented docs would land in the running app). Seed docs are written **as the owner** through the app's real `access.js`, so every seeded doc must be one the owner may create: personality lives in content fields (titles, descriptions, names), never in fabricated author/handle fields — if `access.js` checks `doc.authorHandle === user.userHandle` on create, a seeded doc with an invented author is denied and the promised launch content silently never appears.
-- **Sound on the satisfying moments.** Wire brief web-audio feedback (see the Web Audio docs) to the app's one or two core actions — the "it worked" beats: a point scored, a post landing, a match made. Always route playback through the resume-on-user-gesture unlock so it actually sounds on mobile. Quiet/utility apps skip audio entirely.
+- **Seed a vivid world even when the prompt gives you no data.** On the turn that first creates the app — unless it is private-by-nature record-keeping — emit a `seed.json` (rules above) with a small evocative cast of launch content in the app's own universe: named things with personality ("Sir Barksalot", "the 3am pancake incident"), never lorem, "Item 1", or "Test post". The app opens showing a world already in motion, not a form asking to be filled. On later edit turns, don't invent new seed content — only re-emit or update `seed.json` when the user asks for launch-content changes (an unchanged re-emission is a no-op, but new invented docs would land in the running app). Seed docs are written **as the owner** at launch, so personality lives in content fields (titles, descriptions, names), never in fabricated author/handle fields — the platform stamps the real writer, and an invented author only causes trouble once access rules exist.
 - **Generated images as content, not decoration.** Where pictures naturally belong (avatars, covers, cards, monsters, prizes), render them with `<ImgGen>` and a vivid specific prompt — never a placeholder box or a generic prompt like "an image".
 - **Motion on state changes.** Small fast transitions (150–300ms) when things appear, complete, or score — enough that actions feel acknowledged, not a light show.
 - **Empty states invite, they don't announce.** "Draw the first monster" with the button right there, not "No data yet".
 - **A share affordance on the FIRST screen — for apps where sharing fits.** When the app is social, collaborative, or built to be shown to others, surface its invite/share/publish action where a first-time user can see it without digging, gate it like any write surface (`can.create({...draft}).ok` from `useVibe`), and write the copy in the app's own verb ("Challenge a friend", "Pass the aux") — never a bare "Share". Private-by-nature and solo apps get NO share affordance (the guidance above about private apps omitting sharing controls wins).
 
-**Restraint — alive never means obnoxious.** No sound on every keystroke, hover, or list render; no confetti or autoplaying audio on load; no popups nagging people to share. One or two well-placed delightful notes beat a wall of noise.
+**Restraint — alive never means obnoxious.** No confetti on load; no popups nagging people to share. One or two well-placed delightful touches beat a wall of noise.
 
 ## End every turn with one improvement question