@gentbajko/slopify 3.25.9 → 4.0.0

package/dist/edge/http/channels.js

@@ -7,7 +7,8 @@ import { deleteCastImage, generateCastImage, uploadCastImage, } from "../../slic
 import { castImageMaxBytes } from "../../slices/channels/images.js";
 import { imageBlob } from "../../slices/channels/repo.js";
 import { createCastMember, createChannel, deleteCastMember, deleteChannel, listChannels, moveCastMember, moveTemplate, readChannel, setChannelAiDisclosure, updateCastMember, updateChannel, } from "../../slices/channels/service.js";
-import { onInvalid, problem, titleOf } from "./problem.js";
+import { onInvalid } from "./problem.js";
+import { jsonBody, refusal } from "./refusal.js";
 const idParam = z.object({ id: z.uuid() });
 const memberParam = z.object({ memberId: z.uuid() });
 const imageParam = memberParam.extend({ imageId: z.uuid() });
@@ -26,7 +27,7 @@ export function channelRoutes(deps) {
     return (new Hono()
         .get("/", (c) => c.json({ channels: listChannels(service) }))
         .post("/", async (c) => {
-        const result = createChannel(service, await body(c));
+        const result = createChannel(service, await jsonBody(c));
         return result.ok ? c.json(result.value, 201) : refused(c, result);
     })
         // The pictures by content hash: they never change, so the browser may keep them.
@@ -41,11 +42,11 @@ export function channelRoutes(deps) {
         });
     })
         .put("/templates/:templateId", zValidator("param", templateParam, onInvalid), async (c) => {
-        const result = moveTemplate(service, c.req.valid("param").templateId, await body(c));
+        const result = moveTemplate(service, c.req.valid("param").templateId, await jsonBody(c));
         return result.ok ? c.json(result.value) : refused(c, result);
     })
         .put("/cast/:memberId", zValidator("param", memberParam, onInvalid), async (c) => {
-        const result = updateCastMember(service, c.req.valid("param").memberId, await body(c));
+        const result = updateCastMember(service, c.req.valid("param").memberId, await jsonBody(c));
         return result.ok ? c.json(result.value) : refused(c, result);
     })
         .delete("/cast/:memberId", zValidator("param", memberParam, onInvalid), (c) => {
@@ -66,7 +67,7 @@ export function channelRoutes(deps) {
         return result.ok ? c.json(result.value, 201) : refused(c, result);
     })
         .post("/cast/:memberId/generate", zValidator("param", memberParam, onInvalid), async (c) => {
-        const result = generateCastImage(service, c.req.valid("param").memberId, await body(c));
+        const result = generateCastImage(service, c.req.valid("param").memberId, await jsonBody(c));
         return result.ok ? c.json(result.value, 202) : refused(c, result);
     })
         .delete("/cast/:memberId/images/:imageId", zValidator("param", imageParam, onInvalid), (c) => {
@@ -79,11 +80,11 @@ export function channelRoutes(deps) {
         return result.ok ? c.json(result.value) : refused(c, result);
     })
         .put("/:id", zValidator("param", idParam, onInvalid), async (c) => {
-        const result = updateChannel(service, c.req.valid("param").id, await body(c));
+        const result = updateChannel(service, c.req.valid("param").id, await jsonBody(c));
         return result.ok ? c.json(result.value) : refused(c, result);
     })
         .put("/:id/ai-disclosure", zValidator("param", idParam, onInvalid), async (c) => {
-        const result = setChannelAiDisclosure(service, c.req.valid("param").id, await body(c));
+        const result = setChannelAiDisclosure(service, c.req.valid("param").id, await jsonBody(c));
         return result.ok ? c.json(result.value) : refused(c, result);
     })
         .delete("/:id", zValidator("param", idParam, onInvalid), (c) => {
@@ -91,23 +92,15 @@ export function channelRoutes(deps) {
         return result.ok ? c.body(null, 204) : refused(c, result);
     })
         .post("/:id/cast", zValidator("param", idParam, onInvalid), async (c) => {
-        const result = createCastMember(service, c.req.valid("param").id, await body(c));
+        const result = createCastMember(service, c.req.valid("param").id, await jsonBody(c));
         return result.ok ? c.json(result.value, 201) : refused(c, result);
     })
         // Move up, Move down and their Undo: one member to a place in the cast's order.
         .post("/:id/cast/move", zValidator("param", idParam, onInvalid), async (c) => {
-        const result = moveCastMember(service, c.req.valid("param").id, await body(c));
+        const result = moveCastMember(service, c.req.valid("param").id, await jsonBody(c));
         return result.ok ? c.json({ cast: result.value }) : refused(c, result);
     }));
 }
-async function body(c) {
-    try {
-        return await c.req.json();
-    }
-    catch {
-        return undefined;
-    }
-}
 const details = {
     "not-found": "This channel, cast member or picture no longer exists; it may have been deleted in another tab. Go back to Channels.",
     conflict: "This changed in another tab while you were editing. Reload the page to see the latest, then make your change again.",
@@ -119,15 +112,9 @@ const details = {
     "no-image-provider": "Slopify can't make pictures here yet. Set up an image provider in Settings → Providers, or upload a picture instead.",
 };
 function refused(c, result) {
-    const status = result.reason === "not-found"
-        ? 404
-        : result.reason === "conflict" || result.reason === "has-templates"
-            ? 409
-            : 400;
-    return problem(c, {
-        status,
-        title: titleOf(status),
+    return refusal(c, result.reason, {
+        statuses: { "not-found": 404, conflict: 409, "has-templates": 409 },
+        otherwise: 400,
         detail: result.message ?? details[result.reason],
-        extensions: { reason: result.reason },
     });
 }

package/dist/edge/http/checkpoints.js

@@ -1,37 +1,44 @@
 import { zValidator } from "@hono/zod-validator";
 import { Hono } from "hono";
-import { z } from "zod";
+import { errorText } from "../../kernel/errors.js";
+import { projectPaused } from "../../slices/admission/repo.js";
 import { changeCheckpoints, checkpointChangeSchema, readCheckpointStatus, replayCheckpointApproval, validateCheckpointApproval, } from "../../slices/checkpoints/change.js";
+import { listCheckpoints } from "../../slices/checkpoints/repo.js";
 import { checkpointApprovalSchema, checkpointRowSchema } from "../../slices/checkpoints/schema.js";
 import { withProjectControl } from "../../slices/control/lock.js";
-import { onInvalid, problem, titleOf } from "./problem.js";
-const id = z
-    .string()
-    .min(1)
-    .max(64)
-    .regex(/^[0-9A-Za-z_-]+$/);
-const projectParam = z.object({ id });
+import { projectHolds } from "../../slices/reviews/holds.js";
+import { idParam, idString } from "./ids.js";
+import { onInvalid, problem } from "./problem.js";
+import { refusal } from "./refusal.js";
+const id = idString;
+const projectParam = idParam;
 const approvalParam = projectParam.extend({ checkpointId: id });
-const approvalBody = checkpointApprovalSchema
+export const approvalBody = checkpointApprovalSchema
     .unwrap()
     .omit({ projectId: true, checkpointId: true, approvedAt: true });
 function refused(c, reason) {
-    const status = reason === "not-found" ? 404 : reason === "invalid-input" ? 400 : 409;
-    return problem(c, {
-        status,
-        title: titleOf(status),
+    return refusal(c, reason, {
+        statuses: { "not-found": 404, "invalid-input": 400 },
+        otherwise: 409,
         detail: reason === "not-found"
             ? "This checkpoint no longer exists; the project may have moved on or changed. Reload the page to see where it is now."
             : reason === "invalid-input"
                 ? "This checkpoint answer could not be read. Reload the page and try again."
                 : "This checkpoint changed since the page loaded, for example it was already approved. Reload the page to see its current state, then try again.",
-        extensions: { reason },
+    });
+}
+// Taking a checkpoint off that holds the run now would start the paid steps behind it without
+// the review: that goes through Approve, which checks what is approved is what was looked at.
+function heldThere(c, stage) {
+    return problem(c, {
+        status: 409,
+        detail: `The run is waiting at the checkpoint before ${stage}, so it can't be taken off now: that would start the next steps without the review. Look over what is made, then press Approve on the checkpoint (agents: approve_checkpoint).`,
+        extensions: { reason: "held-at-checkpoint" },
     });
 }
 function alreadyApproved(c) {
     return problem(c, {
         status: 409,
-        title: titleOf(409),
         detail: "This checkpoint was already approved, so nothing changed. Reload the page (or call needs_attention) to see what waits now.",
         extensions: { reason: "already-approved" },
     });
@@ -47,7 +54,7 @@ function buildCheckpointRoutes(deps) {
         catch (error) {
             deps.log.write("error", "checkpoint.notify", {
                 projectId,
-                detail: error instanceof Error ? error.message : String(error),
+                detail: errorText(error),
             });
         }
         if (wake) {
@@ -57,7 +64,7 @@ function buildCheckpointRoutes(deps) {
             catch (error) {
                 deps.log.write("error", "checkpoint.wake", {
                     projectId,
-                    detail: error instanceof Error ? error.message : String(error),
+                    detail: errorText(error),
                 });
             }
         }
@@ -95,6 +102,15 @@ function buildCheckpointRoutes(deps) {
         const projectId = c.req.valid("param").id;
         const body = c.req.valid("json");
         return withProjectControl(deps.db, projectId, () => {
+            // A paused run goes on only through Continue the run, so taking a checkpoint off
+            // then releases nothing by itself.
+            const holding = projectPaused(deps.db, projectId)
+                ? []
+                : (projectHolds(deps.db, { projectId }).holding.get(projectId) ?? []);
+            const removed = listCheckpoints(deps.db, projectId, body.revisionId).filter((row) => !body.stages.includes(row.stage));
+            const held = holding.find((hold) => removed.some((row) => row.checkpointId === hold.checkpointId));
+            if (held !== undefined)
+                return heldThere(c, held.stage);
             const result = changeCheckpoints(deps, { ...body, projectId });
             if (!result.ok)
                 return refused(c, result.reason);

package/dist/edge/http/design-templates.js

@@ -0,0 +1,167 @@
+import { zValidator } from "@hono/zod-validator";
+import { Hono } from "hono";
+import { z } from "zod";
+import { designDocumentSchema } from "../../slices/designs/schema.js";
+import { designAffectedSections, sampleNeedsPicture } from "../../slices/designs/sections.js";
+import { freeSample } from "../../slices/designs/studio-kind.js";
+import { makeFromTemplate, quoteDocument, quoteTemplate, } from "../../slices/designs/template-make.js";
+import { createTemplate, getTemplate, listTemplates, markTemplateReady, saveTemplate, } from "../../slices/designs/templates.js";
+import { trashDesignTemplate } from "../../slices/trash/designs.js";
+import { designRefused } from "./designs.js";
+import { idParam } from "./ids.js";
+import { onInvalid, problem } from "./problem.js";
+import { jsonBody } from "./refusal.js";
+export const sampleRequestSchema = z
+    .object({
+    version: z.number().int().min(1),
+    acknowledgedHigh: z.number().min(0).max(1000),
+    // That the button said the picture's price is unknown, and the person pressed it anyway.
+    acknowledgedUnknown: z.boolean().optional(),
+})
+    .strict();
+const quoteBodySchema = z.object({ document: designDocumentSchema }).strict();
+const notFoundRefusal = {
+    reason: "not-found",
+    message: "This design template no longer exists. Open Library → Designs → Templates to choose another.",
+};
+export function designTemplateRoutes(deps) {
+    const unavailable = (c) => problem(c, {
+        status: 503,
+        detail: "Design templates aren't available in this copy of Slopify. Restart Slopify; if it keeps happening, reinstall it.",
+    });
+    return new Hono()
+        .get("/", (c) => deps === undefined ? unavailable(c) : c.json({ templates: listTemplates(deps.service.db) }))
+        .post("/", async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = createTemplate(deps.service, await jsonBody(c));
+        return result.ok ? c.json(result.value, 201) : designRefused(c, result);
+    })
+        .get("/:id", zValidator("param", idParam, onInvalid), (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const template = getTemplate(deps.service.db, c.req.valid("param").id);
+        return template === undefined
+            ? designRefused(c, {
+                reason: "not-found",
+                message: "This design template no longer exists. Open Library → Designs → Templates to choose another.",
+            })
+            : c.json({ ...template, sample: deps.samples?.state?.(template.id) ?? null });
+    })
+        .put("/:id", zValidator("param", idParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const id = c.req.valid("param").id;
+        const body = await jsonBody(c);
+        const result = saveTemplate(deps.service, id, body);
+        if (!result.ok)
+            return designRefused(c, result);
+        const { template, saved, before } = result.value;
+        if (saved)
+            deps.templateChanged?.(id);
+        const asked = z
+            .object({
+            sample: z.enum(["make", "skip"]).optional(),
+            acknowledgedHigh: z.number().optional(),
+        })
+            .catch({})
+            .parse(body);
+        const sample = deps.samples === undefined || !saved
+            ? null
+            : deps.samples.afterSave({
+                templateId: id,
+                version: template.headVersion,
+                before,
+                after: template.document,
+                sample: asked.sample ?? "skip",
+                acknowledgedHigh: asked.acknowledgedHigh ?? 0,
+            });
+        return c.json({
+            template,
+            saved,
+            sample: sample === null ? null : sample.ok ? sample.value : { refused: sample.message },
+        });
+    })
+        .delete("/:id", zValidator("param", idParam, onInvalid), (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = trashDesignTemplate(deps.service, c.req.valid("param").id);
+        return result.ok
+            ? c.body(null, 204)
+            : designRefused(c, {
+                reason: "not-found",
+                message: "This design template no longer exists. Open Library → Designs → Templates to choose another.",
+            });
+    })
+        .post("/:id/quote", zValidator("param", idParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const id = c.req.valid("param").id;
+        const body = await jsonBody(c);
+        // With a document: what saving it would cost the editor's sample (only a changed
+        // picture is paid). Without: what one piece from the newest version costs.
+        if (typeof body === "object" && body !== null && Object.keys(body).length > 0) {
+            const parsed = quoteBodySchema.safeParse(body);
+            if (!parsed.success)
+                return designRefused(c, {
+                    reason: "invalid",
+                    message: `The template can't be priced: ${parsed.error.issues[0]?.message ?? "a field is missing"}.`,
+                });
+            const template = getTemplate(deps.service.db, id);
+            if (template === undefined)
+                return designRefused(c, notFoundRefusal);
+            const sample = deps.samples?.state?.(id);
+            const sections = designAffectedSections(template.document, parsed.data.document);
+            const makesPicture = sampleNeedsPicture(sections) ||
+                sample === null ||
+                sample === undefined ||
+                sample.designId == null ||
+                sample.state === "failed";
+            const quote = makesPicture
+                ? quoteDocument(deps.catalogue(), parsed.data.document)
+                : freeSample(deps.catalogue());
+            return c.json({ ...quote, sections, makesPicture });
+        }
+        const result = quoteTemplate(deps, id);
+        return result.ok ? c.json(result.value) : designRefused(c, result);
+    })
+        .post("/:id/sample", zValidator("param", idParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const request = deps.samples?.request;
+        if (request === undefined)
+            return unavailable(c);
+        const parsed = sampleRequestSchema.safeParse(await jsonBody(c));
+        if (!parsed.success)
+            return designRefused(c, {
+                reason: "invalid",
+                message: "Say which version to make a sample of and the price you saw, then press Make sample.",
+            });
+        const result = request(c.req.valid("param").id, parsed.data.version, parsed.data.acknowledgedHigh, parsed.data.acknowledgedUnknown);
+        return result.ok ? c.json(result.value, 202) : designRefused(c, result);
+    })
+        .post("/:id/ready", zValidator("param", idParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const id = c.req.valid("param").id;
+        const checks = deps.checks;
+        const result = await markTemplateReady(deps.service, id, await jsonBody(c), checks === undefined ? undefined : (doc, version) => checks(id, doc, version));
+        if (result.ok) {
+            deps.templateChanged?.(id);
+            return c.json(result.value);
+        }
+        return result.reason === "not-ready"
+            ? problem(c, {
+                status: 409,
+                detail: result.message,
+                extensions: { reason: result.reason, checks: result.current },
+            })
+            : designRefused(c, result);
+    })
+        .post("/:id/make", zValidator("param", idParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = makeFromTemplate(deps, c.req.valid("param").id, await jsonBody(c));
+        return result.ok ? c.json(result.value, 202) : designRefused(c, result);
+    });
+}

package/dist/edge/http/designs.js

@@ -0,0 +1,178 @@
+import { readFile } from "node:fs/promises";
+import { zValidator } from "@hono/zod-validator";
+import { Hono } from "hono";
+import { bodyLimit } from "hono/body-limit";
+import { z } from "zod";
+import { castImageMaxBytes } from "../../slices/channels/images.js";
+import { designFormats } from "../../slices/designs/model.js";
+import { createDesign, getDesign, listDesignViews, setDesignHead, stepPicture, storeUploadedPicture, updateDesignRecord, } from "../../slices/designs/service.js";
+import { trashDesign } from "../../slices/trash/designs.js";
+import { idParam, idString } from "./ids.js";
+import { onInvalid, problem } from "./problem.js";
+import { jsonBody } from "./refusal.js";
+const stepParam = idParam.extend({ stepId: idString });
+const fileParam = idParam.extend({
+    file: z.string().regex(new RegExp(`^(?:${designFormats.join("|")})\\.(?:png|pdf)$`)),
+});
+const listQuery = z.object({ projectId: idString.optional() });
+export const designStatuses = {
+    "not-found": 404,
+    invalid: 400,
+    changed: 409,
+    "mutation-reused": 409,
+    "not-an-image": 400,
+    "still-uploading": 409,
+    "upload-gone": 404,
+    "project-not-found": 404,
+    "channel-not-found": 404,
+    busy: 409,
+    "no-image-provider": 409,
+    "cost-changed": 409,
+    "missing-values": 400,
+    "not-ready": 409,
+};
+export function designRefused(c, result) {
+    return problem(c, {
+        status: designStatuses[result.reason],
+        detail: result.message,
+        extensions: {
+            reason: result.reason,
+            ...(result.current === undefined
+                ? {}
+                : result.reason === "cost-changed"
+                    ? { quote: result.current }
+                    : { current: result.current }),
+        },
+    });
+}
+const unavailable = (c) => problem(c, {
+    status: 503,
+    detail: "Designs aren't available in this copy of Slopify. Restart Slopify; if it keeps happening, reinstall it.",
+});
+export function designRoutes(deps) {
+    return (new Hono()
+        .get("/", zValidator("query", listQuery, onInvalid), (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        return c.json({
+            designs: listDesignViews(deps.service.db, c.req.valid("query").projectId),
+        });
+    })
+        .post("/", async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = createDesign(deps.service, await jsonBody(c));
+        return result.ok ? c.json(result.value, 201) : designRefused(c, result);
+    })
+        // The picture's bytes are the body; the answer's sha256 starts a design (fromStepSha).
+        .post("/pictures", bodyLimit({
+        maxSize: castImageMaxBytes,
+        onError: (c) => designRefused(c, {
+            reason: "not-an-image",
+            message: `This picture is larger than ${String(castImageMaxBytes / 1024 / 1024)} MB. Save it smaller (for example as a JPEG) and upload it again.`,
+        }),
+    }), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = storeUploadedPicture(deps.service, new Uint8Array(await c.req.arrayBuffer()));
+        return result.ok ? c.json(result.value, 201) : designRefused(c, result);
+    })
+        .get("/:id", zValidator("param", idParam, onInvalid), (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = getDesign(deps.service, c.req.valid("param").id);
+        return result.ok ? c.json(result.value) : designRefused(c, result);
+    })
+        .put("/:id", zValidator("param", idParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = updateDesignRecord(deps.service, c.req.valid("param").id, await jsonBody(c));
+        return result.ok ? c.json(result.value) : designRefused(c, result);
+    })
+        .delete("/:id", zValidator("param", idParam, onInvalid), (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const id = c.req.valid("param").id;
+        const result = trashDesign(deps.service, id);
+        if (!result.ok)
+            return designRefused(c, {
+                reason: "not-found",
+                message: "This design no longer exists. Open Library → Designs to choose another.",
+            });
+        deps.service.emit?.({ type: "design.changed", designId: id });
+        return c.body(null, 204);
+    })
+        // Quoting records nothing and starts nothing.
+        .post("/:id/quote", zValidator("param", idParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = deps.runner.quoteEdit(c.req.valid("param").id, await jsonBody(c));
+        return result.ok ? c.json(result.value) : designRefused(c, result);
+    })
+        .post("/:id/artwork/quote", zValidator("param", idParam, onInvalid), (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = deps.runner.quoteArtwork(c.req.valid("param").id);
+        return result.ok ? c.json(result.value) : designRefused(c, result);
+    })
+        .post("/:id/edit", zValidator("param", idParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = deps.runner.edit(c.req.valid("param").id, await jsonBody(c));
+        return result.ok ? c.json(result.value, 202) : designRefused(c, result);
+    })
+        .post("/:id/artwork", zValidator("param", idParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = deps.runner.artwork(c.req.valid("param").id, await jsonBody(c));
+        return result.ok ? c.json(result.value, 202) : designRefused(c, result);
+    })
+        .post("/:id/steps/:stepId/retry", zValidator("param", stepParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const { id, stepId } = c.req.valid("param");
+        const result = deps.runner.retry(id, stepId, await jsonBody(c));
+        return result.ok ? c.json(result.value, 202) : designRefused(c, result);
+    })
+        .put("/:id/head", zValidator("param", idParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const result = setDesignHead(deps.service, c.req.valid("param").id, await jsonBody(c));
+        return result.ok ? c.json(result.value) : designRefused(c, result);
+    })
+        // A version never changes, so the browser may keep it.
+        .get("/:id/steps/:stepId/picture", zValidator("param", stepParam, onInvalid), (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const { id, stepId } = c.req.valid("param");
+        const picture = stepPicture(deps.service.db, id, stepId);
+        if (picture === undefined)
+            return designRefused(c, {
+                reason: "not-found",
+                message: "That version has no picture. Reload the design to see its versions.",
+            });
+        return c.body(new Uint8Array(picture.bytes), 200, {
+            "Content-Type": picture.mime,
+            "Cache-Control": "private, max-age=31536000, immutable",
+            "X-Content-Type-Options": "nosniff",
+        });
+    })
+        // Drawn on demand in a child ffmpeg (and the PDF worker), then served from the cache.
+        .get("/:id/files/:file", zValidator("param", fileParam, onInvalid), async (c) => {
+        if (deps === undefined)
+            return unavailable(c);
+        const { id, file } = c.req.valid("param");
+        const format = z.enum(designFormats).parse(file.slice(0, file.lastIndexOf(".")));
+        const type = file.endsWith(".pdf") ? "pdf" : "png";
+        const result = await deps.renderer.render(id, format, type, c.req.raw.signal);
+        if (!result.ok)
+            return designRefused(c, result);
+        const bytes = await readFile(result.value.path);
+        return c.body(new Uint8Array(bytes), 200, {
+            "Content-Type": result.value.mime,
+            "Content-Disposition": `attachment; filename="${result.value.name.replace(/[^\x20-\x7e]|["\\]/g, "_")}"; filename*=UTF-8''${encodeURIComponent(result.value.name)}`,
+            "Cache-Control": "no-store",
+            "X-Content-Type-Options": "nosniff",
+        });
+    }));
+}

package/dist/edge/http/diagnostics.js

@@ -1,5 +1,6 @@
 import { Hono } from "hono";
 import { providerStatuses } from "../../slices/settings/readiness.js";
+import { notTemplateSample } from "../../slices/template-studio/repo.js";
 /**
  * A deliberately boring, secret-free support bundle. It is JSON rather than a
  * filesystem archive so it can be copied from a remote/local browser and is
@@ -13,7 +14,10 @@ export function diagnosticsRoutes(deps) {
             hostCliStatus: deps.hostCliStatus,
             host: deps.speechHost,
         });
-        const projectCount = deps.db.prepare("SELECT count(*) AS count FROM projects").get();
+        // The template studio's hidden samples are no projects of the person's.
+        const projectCount = deps.db
+            .prepare(`SELECT count(*) AS count FROM projects WHERE ${notTemplateSample()}`)
+            .get();
         const schema = deps.db.prepare("SELECT max(version) AS version FROM schema_migrations").get();
         c.header("Cache-Control", "no-store");
         c.header("Content-Disposition", 'attachment; filename="slopify-diagnostics.json"');

package/dist/edge/http/document-themes.js

@@ -6,14 +6,8 @@ import { documentThemeLabels, documentThemes } from "../../slices/document/model
 import { renderSampleDocument } from "../../slices/document/sample.js";
 import { builtInTheme, resolveTheme } from "../../slices/document/theme.js";
 import { documentThemeSchema } from "../../slices/document/theme-schema.js";
-import { onInvalid, problem, titleOf } from "./problem.js";
-const idParam = z.object({
-    id: z
-        .string()
-        .min(1)
-        .max(64)
-        .regex(/^[0-9A-Za-z_-]+$/),
-});
+import { idParam } from "./ids.js";
+import { onInvalid, problem } from "./problem.js";
 // Shape only: the values' ranges are the slice's, so the editor gets field-by-field sentences.
 const themeBody = z.object({ name: z.string(), values: z.unknown() });
 // Library → Documents. The return type is inferred so Hono keeps the route types the SPA's
@@ -57,7 +51,6 @@ function refused(c, failure) {
         case "invalid":
             return problem(c, {
                 status: 400,
-                title: titleOf(400),
                 detail: "This theme can't be saved yet. Fix the highlighted settings and try again.",
                 extensions: { fields: failure.fields },
             });
@@ -65,7 +58,6 @@ function refused(c, failure) {
             const message = "Another PDF theme already has this name. Choose a different name.";
             return problem(c, {
                 status: 409,
-                title: titleOf(409),
                 detail: message,
                 extensions: { fields: [{ field: "name", message }] },
             });
@@ -73,7 +65,6 @@ function refused(c, failure) {
         case "not-found":
             return problem(c, {
                 status: 404,
-                title: titleOf(404),
                 detail: "This PDF theme no longer exists; it may have been deleted in another tab. Go back to Library → PDF themes.",
             });
     }

package/dist/edge/http/draft-files.js

@@ -10,7 +10,7 @@ import { stagedFileById } from "../../slices/storage/repo.js";
 import { fileResponse } from "./byte-range.js";
 import { draftProblem } from "./draft-problem.js";
 import { readMultipart } from "./multipart.js";
-import { onInvalid, problem, titleOf } from "./problem.js";
+import { onInvalid, problem } from "./problem.js";
 const params = z.object({ id: z.uuid(), attachmentId: z.uuid() });
 const imageTypes = {
     ".png": "image/png",
@@ -30,7 +30,6 @@ export function draftFileRoutes(service) {
         if (result === undefined)
             return problem(c, {
                 status: 400,
-                title: titleOf(400),
                 detail: "No file arrived with the upload. Choose the file again and retry.",
             });
         return result.ok
@@ -55,7 +54,6 @@ export function draftFileRoutes(service) {
             contentType === undefined)
             return problem(c, {
                 status: 404,
-                title: titleOf(404),
                 detail: "This attached file has not finished uploading, so it cannot be previewed yet. Wait a moment or attach it again.",
             });
         return fileResponse(c, stagingPath(deps.paths, staged.path), staged.bytes, {

package/dist/edge/http/draft-problem.js

@@ -1,10 +1,5 @@
-import { problem, titleOf } from "./problem.js";
+import { refusal } from "./refusal.js";
 export function draftProblem(c, result) {
-    const status = result.reason === "not-found"
-        ? 404
-        : ["invalid-edit", "readiness"].includes(result.reason)
-            ? 400
-            : 409;
     const { ok: _ok, ...extensions } = result;
     const details = {
         "not-found": "This draft no longer exists; it may have been started or deleted. Reload the page to start a new one.",
@@ -16,9 +11,9 @@ export function draftProblem(c, result) {
         "stale-review": "Something changed since you reviewed this video, such as a setting or a price. Choose Review and start again to see the latest.",
         readiness: "Slopify is not ready to start this video yet. Fix the highlighted problems, then try again.",
     };
-    return problem(c, {
-        status,
-        title: titleOf(status),
+    return refusal(c, result.reason, {
+        statuses: { "not-found": 404, "invalid-edit": 400, readiness: 400 },
+        otherwise: 409,
         detail: details[result.reason],
         extensions,
     });