@knpkv/jcf-web 0.3.0 → 0.4.0

package/dist/server/Api.d.ts

@@ -414,11 +414,7 @@ declare const JcfWebApi_base: HttpApi.HttpApi<"JcfWebApi", HttpApiGroup.HttpApiG
     readonly provider: Schema.Literal<"codex">;
     readonly model: Schema.NullOr<Schema.String>;
     readonly effort: Schema.NullOr<Schema.Literals<readonly ["minimal", "low", "medium", "high", "xhigh"]>>;
-}>]>>, never, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"mine", "POST", "/api/config/mine", never, never, Schema.toCodecJson<Schema.Struct<{
-    readonly ticketKey: Schema.String;
-}>>, never, Schema.toCodecJson<Schema.Struct<{
-    readonly ownershipOverrides: Schema.$Array<Schema.String>;
-}>>, Schema.toCodecJson<typeof ApiError | typeof ProposalRejectedError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"saveAgent", "POST", "/api/config/agent", never, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
+}>]>>, never, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"saveAgent", "POST", "/api/config/agent", never, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
     readonly provider: Schema.Literal<"claude">;
     readonly model: Schema.NullOr<Schema.String>;
     readonly effort: Schema.NullOr<Schema.Literals<readonly ["low", "medium", "high", "xhigh", "max"]>>;
@@ -434,7 +430,11 @@ declare const JcfWebApi_base: HttpApi.HttpApi<"JcfWebApi", HttpApiGroup.HttpApiG
     readonly provider: Schema.Literal<"codex">;
     readonly model: Schema.NullOr<Schema.String>;
     readonly effort: Schema.NullOr<Schema.Literals<readonly ["minimal", "low", "medium", "high", "xhigh"]>>;
-}>]>>, Schema.toCodecJson<typeof ApiError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"standing", "POST", "/api/config/standing", never, never, Schema.toCodecJson<Schema.Struct<{
+}>]>>, Schema.toCodecJson<typeof ApiError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"mine", "POST", "/api/config/mine", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly ticketKey: Schema.String;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly ownershipOverrides: Schema.$Array<Schema.String>;
+}>>, Schema.toCodecJson<typeof ApiError | typeof ProposalRejectedError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"standing", "POST", "/api/config/standing", never, never, Schema.toCodecJson<Schema.Struct<{
     readonly cwd: Schema.String;
     readonly ticketKey: Schema.String;
 }>>, never, Schema.toCodecJson<Schema.Struct<{
@@ -468,17 +468,23 @@ declare const JcfWebApi_base: HttpApi.HttpApi<"JcfWebApi", HttpApiGroup.HttpApiG
         readonly endMs: Schema.Number;
         readonly description: Schema.NullOr<Schema.String>;
     }>;
-}>>, Schema.toCodecJson<typeof ApiError | typeof PlanExpiredError | typeof ProposalRejectedError>, OwnerSessionAuth, never>, false> | HttpApiGroup.HttpApiGroup<"rows", HttpApiEndpoint.HttpApiEndpoint<"confirm", "POST", "/api/rows/confirm", never, never, Schema.toCodecJson<Schema.Struct<{
-    readonly blocks: Schema.optional<Schema.$Array<Schema.Number>>;
-    readonly note: Schema.optional<Schema.String>;
+}>>, Schema.toCodecJson<typeof ApiError | typeof PlanExpiredError | typeof ProposalRejectedError>, OwnerSessionAuth, never>, false> | HttpApiGroup.HttpApiGroup<"rows", HttpApiEndpoint.HttpApiEndpoint<"describe", "POST", "/api/rows/describe", never, never, Schema.toCodecJson<Schema.Struct<{
     readonly planId: Schema.String;
     readonly rowId: Schema.String;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly planId: Schema.String;
+    readonly rowId: Schema.String;
+    readonly note: Schema.NullOr<Schema.String>;
+}>>, Schema.toCodecJson<typeof ApiError | typeof PlanExpiredError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"manual", "POST", "/api/rows/manual", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly day: Schema.String;
+    readonly note: Schema.optional<Schema.String>;
+    readonly seconds: Schema.Number;
     readonly targets: Schema.optional<Schema.Struct<{
         readonly clockify: Schema.Boolean;
         readonly jira: Schema.Boolean;
     }>>;
-    readonly seconds: Schema.optional<Schema.Number>;
-    readonly ticketKey: Schema.optional<Schema.String>;
+    readonly startClock: Schema.optional<Schema.String>;
+    readonly ticketKey: Schema.String;
 }>>, never, Schema.toCodecJson<Schema.Struct<{
     readonly clockify: Schema.Union<readonly [Schema.TaggedStruct<"Written", {
         readonly seconds: Schema.Number;
@@ -518,23 +524,17 @@ declare const JcfWebApi_base: HttpApi.HttpApi<"JcfWebApi", HttpApiGroup.HttpApiG
         readonly message: Schema.String;
     }>, Schema.TaggedStruct<"NotLoggedIn", {}>]>;
     readonly lines: Schema.$Array<Schema.String>;
-}>>, Schema.toCodecJson<typeof ApiError | typeof PlanExpiredError | typeof ProposalRejectedError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"describe", "POST", "/api/rows/describe", never, never, Schema.toCodecJson<Schema.Struct<{
-    readonly planId: Schema.String;
-    readonly rowId: Schema.String;
-}>>, never, Schema.toCodecJson<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof ApiError | typeof ProposalRejectedError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"confirm", "POST", "/api/rows/confirm", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly blocks: Schema.optional<Schema.$Array<Schema.Number>>;
+    readonly note: Schema.optional<Schema.String>;
     readonly planId: Schema.String;
     readonly rowId: Schema.String;
-    readonly note: Schema.NullOr<Schema.String>;
-}>>, Schema.toCodecJson<typeof ApiError | typeof PlanExpiredError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"manual", "POST", "/api/rows/manual", never, never, Schema.toCodecJson<Schema.Struct<{
-    readonly day: Schema.String;
-    readonly note: Schema.optional<Schema.String>;
-    readonly seconds: Schema.Number;
     readonly targets: Schema.optional<Schema.Struct<{
         readonly clockify: Schema.Boolean;
         readonly jira: Schema.Boolean;
     }>>;
-    readonly startClock: Schema.optional<Schema.String>;
-    readonly ticketKey: Schema.String;
+    readonly seconds: Schema.optional<Schema.Number>;
+    readonly ticketKey: Schema.optional<Schema.String>;
 }>>, never, Schema.toCodecJson<Schema.Struct<{
     readonly clockify: Schema.Union<readonly [Schema.TaggedStruct<"Written", {
         readonly seconds: Schema.Number;
@@ -574,7 +574,110 @@ declare const JcfWebApi_base: HttpApi.HttpApi<"JcfWebApi", HttpApiGroup.HttpApiG
         readonly message: Schema.String;
     }>, Schema.TaggedStruct<"NotLoggedIn", {}>]>;
     readonly lines: Schema.$Array<Schema.String>;
-}>>, Schema.toCodecJson<typeof ApiError | typeof ProposalRejectedError>, OwnerSessionAuth, never>, false> | HttpApiGroup.HttpApiGroup<"week", HttpApiEndpoint.HttpApiEndpoint<"read", "GET", "/api/week/", never, Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof ApiError | typeof PlanExpiredError | typeof ProposalRejectedError>, OwnerSessionAuth, never>, false> | HttpApiGroup.HttpApiGroup<"week", HttpApiEndpoint.HttpApiEndpoint<"saved", "GET", "/api/week/saved", never, Schema.toCodecStringTree<Schema.Struct<{
+    readonly monday: Schema.optional<Schema.String>;
+    readonly only: Schema.optional<Schema.Literals<readonly ["both", "clockify", "jira"]>>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly monday: Schema.String;
+    readonly scope: Schema.Literals<readonly ["both", "clockify", "jira"]>;
+    readonly plan: Schema.NullOr<Schema.Struct<{
+        readonly attributorAvailable: Schema.Boolean;
+        readonly attributorCalls: Schema.Number;
+        readonly days: Schema.$Array<Schema.String>;
+        readonly excludedDays: Schema.$Array<Schema.Struct<{
+            readonly day: Schema.String;
+            readonly reason: Schema.String;
+        }>>;
+        readonly monday: Schema.String;
+        readonly planId: Schema.String;
+        readonly rows: Schema.$Array<Schema.Struct<{
+            readonly clockifyDescription: Schema.NullOr<Schema.String>;
+            readonly clockifySeconds: Schema.Number;
+            readonly day: Schema.String;
+            readonly intervals: Schema.$Array<Schema.Struct<{
+                readonly entry: Schema.optionalKey<Schema.Struct<{
+                    readonly revision: Schema.String;
+                    readonly id: Schema.String;
+                    readonly source: Schema.Literals<readonly ["jira", "clockify"]>;
+                    readonly ticketKey: Schema.NullOr<Schema.String>;
+                    readonly startMs: Schema.Number;
+                    readonly endMs: Schema.Number;
+                    readonly description: Schema.NullOr<Schema.String>;
+                }>>;
+                readonly endMs: Schema.Number;
+                readonly source: Schema.Literals<readonly ["clockify", "jira"]>;
+                readonly startMs: Schema.Number;
+            }>>;
+            readonly jiraSeconds: Schema.Number;
+            readonly proposal: Schema.optional<Schema.Struct<{
+                readonly activeSeconds: Schema.Number;
+                readonly blocks: Schema.$Array<Schema.Struct<{
+                    readonly consumed: Schema.Struct<{
+                        readonly clockify: Schema.Number;
+                        readonly jira: Schema.Number;
+                    }>;
+                    readonly clockifyRefusal: Schema.optionalKey<Schema.Literal<"unlinked-overlap">>;
+                    readonly endMs: Schema.Number;
+                    readonly seconds: Schema.Number;
+                    readonly startMs: Schema.Number;
+                    readonly sourceStartMs: Schema.optional<Schema.Number>;
+                }>>;
+                readonly clockifyDelta: Schema.Number;
+                readonly confidence: Schema.NullOr<Schema.Number>;
+                readonly jiraDelta: Schema.Number;
+                readonly maxSeconds: Schema.Number;
+                readonly sessionCount: Schema.Number;
+                readonly signal: Schema.Literals<readonly ["branch", "path", "standing", "agent", "none"]>;
+            }>>;
+            readonly rowId: Schema.String;
+            readonly ticketKey: Schema.String;
+            readonly ticketTitle: Schema.NullOr<Schema.String>;
+        }>>;
+        readonly unlinkedClockify: Schema.$Array<Schema.Struct<{
+            readonly entry: Schema.optionalKey<Schema.Struct<{
+                readonly revision: Schema.String;
+                readonly id: Schema.String;
+                readonly source: Schema.Literals<readonly ["jira", "clockify"]>;
+                readonly ticketKey: Schema.NullOr<Schema.String>;
+                readonly startMs: Schema.Number;
+                readonly endMs: Schema.Number;
+                readonly description: Schema.NullOr<Schema.String>;
+            }>>;
+            readonly day: Schema.String;
+            readonly seconds: Schema.Number;
+            readonly description: Schema.NullOr<Schema.String>;
+            readonly startMs: Schema.Number;
+            readonly endMs: Schema.Number;
+        }>>;
+        readonly sessionCount: Schema.Number;
+        readonly sessionScanAvailable: Schema.optional<Schema.Boolean>;
+        readonly scope: Schema.Literals<readonly ["both", "clockify", "jira"]>;
+        readonly sessionRootCount: Schema.Number;
+        readonly notMine: Schema.$Array<Schema.Struct<{
+            readonly assignee: Schema.NullOr<Schema.String>;
+            readonly day: Schema.String;
+            readonly seconds: Schema.Number;
+            readonly signal: Schema.Literals<readonly ["branch", "path", "standing", "agent", "none"]>;
+            readonly ticketKey: Schema.String;
+            readonly ticketTitle: Schema.NullOr<Schema.String>;
+        }>>;
+        readonly ownershipChecked: Schema.Boolean;
+        readonly ownership: Schema.Literals<readonly ["assigned", "any"]>;
+        readonly unattributed: Schema.$Array<Schema.Struct<{
+            readonly cwds: Schema.$Array<Schema.String>;
+            readonly day: Schema.String;
+            readonly seconds: Schema.Number;
+            readonly sessionCount: Schema.Number;
+        }>>;
+        readonly withheld: Schema.$Array<Schema.Struct<{
+            readonly confidence: Schema.NullOr<Schema.Number>;
+            readonly day: Schema.String;
+            readonly seconds: Schema.Number;
+            readonly ticketKey: Schema.String;
+            readonly ticketTitle: Schema.NullOr<Schema.String>;
+        }>>;
+    }>>;
+}>>, never, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"read", "GET", "/api/week/", never, Schema.toCodecStringTree<Schema.Struct<{
     readonly monday: Schema.optional<Schema.String>;
     readonly only: Schema.optional<Schema.Literals<readonly ["both", "clockify", "jira"]>>;
 }>>, never, never, Schema.toCodecJson<Schema.Struct<{
@@ -678,110 +781,7 @@ declare const JcfWebApi_base: HttpApi.HttpApi<"JcfWebApi", HttpApiGroup.HttpApiG
 }>>, never, never, HttpApiSchema.StreamUint8Array, Schema.toCodecJson<typeof ApiError | typeof PlanExpiredError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"recordedOnly", "GET", "/api/week/recorded-only", never, Schema.toCodecStringTree<Schema.Struct<{
     readonly monday: Schema.optional<Schema.String>;
     readonly only: Schema.optional<Schema.Literals<readonly ["both", "clockify", "jira"]>>;
-}>>, never, never, HttpApiSchema.StreamUint8Array, Schema.toCodecJson<typeof ApiError | typeof PlanExpiredError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"saved", "GET", "/api/week/saved", never, Schema.toCodecStringTree<Schema.Struct<{
-    readonly monday: Schema.optional<Schema.String>;
-    readonly only: Schema.optional<Schema.Literals<readonly ["both", "clockify", "jira"]>>;
-}>>, never, never, Schema.toCodecJson<Schema.Struct<{
-    readonly monday: Schema.String;
-    readonly scope: Schema.Literals<readonly ["both", "clockify", "jira"]>;
-    readonly plan: Schema.NullOr<Schema.Struct<{
-        readonly attributorAvailable: Schema.Boolean;
-        readonly attributorCalls: Schema.Number;
-        readonly days: Schema.$Array<Schema.String>;
-        readonly excludedDays: Schema.$Array<Schema.Struct<{
-            readonly day: Schema.String;
-            readonly reason: Schema.String;
-        }>>;
-        readonly monday: Schema.String;
-        readonly planId: Schema.String;
-        readonly rows: Schema.$Array<Schema.Struct<{
-            readonly clockifyDescription: Schema.NullOr<Schema.String>;
-            readonly clockifySeconds: Schema.Number;
-            readonly day: Schema.String;
-            readonly intervals: Schema.$Array<Schema.Struct<{
-                readonly entry: Schema.optionalKey<Schema.Struct<{
-                    readonly revision: Schema.String;
-                    readonly id: Schema.String;
-                    readonly source: Schema.Literals<readonly ["jira", "clockify"]>;
-                    readonly ticketKey: Schema.NullOr<Schema.String>;
-                    readonly startMs: Schema.Number;
-                    readonly endMs: Schema.Number;
-                    readonly description: Schema.NullOr<Schema.String>;
-                }>>;
-                readonly endMs: Schema.Number;
-                readonly source: Schema.Literals<readonly ["clockify", "jira"]>;
-                readonly startMs: Schema.Number;
-            }>>;
-            readonly jiraSeconds: Schema.Number;
-            readonly proposal: Schema.optional<Schema.Struct<{
-                readonly activeSeconds: Schema.Number;
-                readonly blocks: Schema.$Array<Schema.Struct<{
-                    readonly consumed: Schema.Struct<{
-                        readonly clockify: Schema.Number;
-                        readonly jira: Schema.Number;
-                    }>;
-                    readonly clockifyRefusal: Schema.optionalKey<Schema.Literal<"unlinked-overlap">>;
-                    readonly endMs: Schema.Number;
-                    readonly seconds: Schema.Number;
-                    readonly startMs: Schema.Number;
-                    readonly sourceStartMs: Schema.optional<Schema.Number>;
-                }>>;
-                readonly clockifyDelta: Schema.Number;
-                readonly confidence: Schema.NullOr<Schema.Number>;
-                readonly jiraDelta: Schema.Number;
-                readonly maxSeconds: Schema.Number;
-                readonly sessionCount: Schema.Number;
-                readonly signal: Schema.Literals<readonly ["branch", "path", "standing", "agent", "none"]>;
-            }>>;
-            readonly rowId: Schema.String;
-            readonly ticketKey: Schema.String;
-            readonly ticketTitle: Schema.NullOr<Schema.String>;
-        }>>;
-        readonly unlinkedClockify: Schema.$Array<Schema.Struct<{
-            readonly entry: Schema.optionalKey<Schema.Struct<{
-                readonly revision: Schema.String;
-                readonly id: Schema.String;
-                readonly source: Schema.Literals<readonly ["jira", "clockify"]>;
-                readonly ticketKey: Schema.NullOr<Schema.String>;
-                readonly startMs: Schema.Number;
-                readonly endMs: Schema.Number;
-                readonly description: Schema.NullOr<Schema.String>;
-            }>>;
-            readonly day: Schema.String;
-            readonly seconds: Schema.Number;
-            readonly description: Schema.NullOr<Schema.String>;
-            readonly startMs: Schema.Number;
-            readonly endMs: Schema.Number;
-        }>>;
-        readonly sessionCount: Schema.Number;
-        readonly sessionScanAvailable: Schema.optional<Schema.Boolean>;
-        readonly scope: Schema.Literals<readonly ["both", "clockify", "jira"]>;
-        readonly sessionRootCount: Schema.Number;
-        readonly notMine: Schema.$Array<Schema.Struct<{
-            readonly assignee: Schema.NullOr<Schema.String>;
-            readonly day: Schema.String;
-            readonly seconds: Schema.Number;
-            readonly signal: Schema.Literals<readonly ["branch", "path", "standing", "agent", "none"]>;
-            readonly ticketKey: Schema.String;
-            readonly ticketTitle: Schema.NullOr<Schema.String>;
-        }>>;
-        readonly ownershipChecked: Schema.Boolean;
-        readonly ownership: Schema.Literals<readonly ["assigned", "any"]>;
-        readonly unattributed: Schema.$Array<Schema.Struct<{
-            readonly cwds: Schema.$Array<Schema.String>;
-            readonly day: Schema.String;
-            readonly seconds: Schema.Number;
-            readonly sessionCount: Schema.Number;
-        }>>;
-        readonly withheld: Schema.$Array<Schema.Struct<{
-            readonly confidence: Schema.NullOr<Schema.Number>;
-            readonly day: Schema.String;
-            readonly seconds: Schema.Number;
-            readonly ticketKey: Schema.String;
-            readonly ticketTitle: Schema.NullOr<Schema.String>;
-        }>>;
-    }>>;
-}>>, never, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"stream", "GET", "/api/week/stream", never, Schema.toCodecStringTree<Schema.Struct<{
+}>>, never, never, HttpApiSchema.StreamUint8Array, Schema.toCodecJson<typeof ApiError | typeof PlanExpiredError>, OwnerSessionAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"stream", "GET", "/api/week/stream", never, Schema.toCodecStringTree<Schema.Struct<{
     readonly monday: Schema.optional<Schema.String>;
     readonly only: Schema.optional<Schema.Literals<readonly ["both", "clockify", "jira"]>>;
 }>>, never, never, HttpApiSchema.StreamUint8Array, Schema.toCodecJson<typeof ApiError | typeof PlanExpiredError>, OwnerSessionAuth, never>, false>>;

package/dist/server/HttpApplication.d.ts

@@ -1,8 +1,18 @@
 /** The same authenticated routes, bootstrap exchange and static client in production and tests. */
 import * as OwnerSession from "@knpkv/browser-pairing/owner-session";
-import { FileSystem, Layer, Path } from "effect";
-import { HttpRouter } from "effect/http";
-/** True only when `candidate` is `root` itself or one of its path-segment descendants. */
-export declare const isWithinDirectory: (path: Path.Path, root: string, candidate: string) => boolean;
+import { Layer, Path } from "effect";
+/**
+ * Serves the built client at `root`, from the same origin as the API so the session cookie applies to
+ * both. Extensionless HTML navigations fall back to `index.html`; `no-cache` makes the browser
+ * revalidate, so a rebuilt `index.html` never points at hashed assets that no longer exist.
+ */
+export declare const staticClient: (root: string) => Layer.Layer<never, import("effect/PlatformError").PlatformError, import("effect/FileSystem").FileSystem | import("effect/http/HttpPlatform").HttpPlatform | import("effect/http/HttpRouter").HttpRouter | Path.Path>;
+/**
+ * The client `vite build` writes next to the compiled server. It reads host files, so give it the
+ * host's FileSystem even where the engine runs on another one.
+ */
+export declare const StaticRouter: Layer.Layer<never, import("effect/PlatformError").BadArgument | import("effect/PlatformError").PlatformError, import("effect/FileSystem").FileSystem | import("effect/http/HttpPlatform").HttpPlatform | import("effect/http/HttpRouter").HttpRouter | Path.Path>;
+/** The authenticated API and the bootstrap exchange: everything that runs on the engine's services. */
+export declare const apiApplication: Layer.Layer<never, never, import("@knpkv/jira-clockify/services/ConfigService.js").ConfigService | import("effect/Crypto").Crypto | import("effect/FileSystem").FileSystem | import("effect/http/Etag").Generator | import("effect/http/HttpPlatform").HttpPlatform | import("effect/http/HttpRouter").HttpRouter | import("@knpkv/jira-clockify/services/IssueFacts.js").IssueFacts | import("@knpkv/jira-api-client").JiraApiClient | import("@knpkv/jira-cli/JiraAuth").JiraAuth | OwnerSession.OwnerSession | Path.Path | import("@knpkv/jira-clockify/services/ReconcileService.js").ReconcileService | import("effect/http/HttpRouter").Request<"Error", import("effect/http/HttpBody").HttpBodyError> | import("@knpkv/jira-clockify/services/SavedEntries.js").SavedEntries | import("@knpkv/jira-clockify/services/SessionAttributor.js").SessionAttributor>;
 /** Supply engine services and owner secrets; listener and platform belong to the executable. */
-export declare const application: Layer.Layer<never, never, import("@knpkv/jira-clockify/services/ConfigService.js").ConfigService | import("effect/Crypto").Crypto | FileSystem.FileSystem | import("effect/http/Etag").Generator | import("effect/http/HttpPlatform").HttpPlatform | HttpRouter.HttpRouter | import("@knpkv/jira-clockify/services/IssueFacts.js").IssueFacts | import("@knpkv/jira-api-client").JiraApiClient | import("@knpkv/jira-cli/JiraAuth").JiraAuth | OwnerSession.OwnerSession | Path.Path | import("@knpkv/jira-clockify/services/ReconcileService.js").ReconcileService | HttpRouter.Request<"Error", import("effect/PlatformError").BadArgument> | HttpRouter.Request<"Error", import("effect/http/HttpBody").HttpBodyError> | HttpRouter.Request<"Error", import("effect/PlatformError").PlatformError> | HttpRouter.Request<"Requires", FileSystem.FileSystem> | HttpRouter.Request<"Requires", Path.Path> | import("@knpkv/jira-clockify/services/SavedEntries.js").SavedEntries | import("@knpkv/jira-clockify/services/SessionAttributor.js").SessionAttributor>;
+export declare const application: Layer.Layer<never, never, import("@knpkv/jira-clockify/services/ConfigService.js").ConfigService | import("effect/Crypto").Crypto | import("effect/FileSystem").FileSystem | import("effect/http/Etag").Generator | import("effect/http/HttpPlatform").HttpPlatform | import("effect/http/HttpRouter").HttpRouter | import("@knpkv/jira-clockify/services/IssueFacts.js").IssueFacts | import("@knpkv/jira-api-client").JiraApiClient | import("@knpkv/jira-cli/JiraAuth").JiraAuth | OwnerSession.OwnerSession | Path.Path | import("@knpkv/jira-clockify/services/ReconcileService.js").ReconcileService | import("effect/http/HttpRouter").Request<"Error", import("effect/http/HttpBody").HttpBodyError> | import("@knpkv/jira-clockify/services/SavedEntries.js").SavedEntries | import("@knpkv/jira-clockify/services/SessionAttributor.js").SessionAttributor>;

package/dist/server/HttpApplication.js

@@ -1,63 +1,29 @@
 /** The same authenticated routes, bootstrap exchange and static client in production and tests. */
 import * as OwnerSession from "@knpkv/browser-pairing/owner-session";
-import { Effect, FileSystem, Layer, Path } from "effect";
-import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/http";
+import { Effect, Layer, Path } from "effect";
+import { HttpStaticServer } from "effect/http";
 import { HttpApiBuilder } from "effect/http-api";
 import { JcfWebApi } from "./Api.js";
 import { ConfigLive, EntriesLive, RowsLive, WeekLive } from "./Handlers.js";
 import { ownerSessionAuthLayer } from "./OwnerSession.js";
 import { layer as weekPlansLayer } from "./WeekPlans.js";
-const mimeTypes = new Map([
-    [".css", "text/css"],
-    [".html", "text/html"],
-    [".ico", "image/x-icon"],
-    [".js", "application/javascript"],
-    [".json", "application/json"],
-    [".map", "application/json"],
-    [".svg", "image/svg+xml"],
-    [".woff2", "font/woff2"]
-]);
-/** True only when `candidate` is `root` itself or one of its path-segment descendants. */
-export const isWithinDirectory = (path, root, candidate) => {
-    const relative = path.relative(root, candidate);
-    return relative === "" || (!path.isAbsolute(relative) && relative !== ".." &&
-        !relative.startsWith(`..${path.sep}`));
-};
-/** The built client, served from the same origin so the session cookie applies to both. */
-const serveStatic = Effect.gen(function* () {
-    const request = yield* HttpServerRequest.HttpServerRequest;
-    const fileSystem = yield* FileSystem.FileSystem;
+/**
+ * Serves the built client at `root`, from the same origin as the API so the session cookie applies to
+ * both. Extensionless HTML navigations fall back to `index.html`; `no-cache` makes the browser
+ * revalidate, so a rebuilt `index.html` never points at hashed assets that no longer exist.
+ */
+export const staticClient = (root) => HttpStaticServer.layer({ cacheControl: "no-cache", root, spa: true });
+/**
+ * The client `vite build` writes next to the compiled server. It reads host files, so give it the
+ * host's FileSystem even where the engine runs on another one.
+ */
+export const StaticRouter = Layer.unwrap(Effect.gen(function* () {
     const path = yield* Path.Path;
-    const requested = decodeURIComponent(new URL(request.url, "http://localhost").pathname).replace(/^\/+/u, "");
-    const here = yield* path.fromFileUrl(new URL(".", import.meta.url));
-    const staticDirectory = path.resolve(here, "../../dist/client");
-    const resolved = path.resolve(staticDirectory, requested === "" ? "index.html" : requested);
-    // A resolved path that escaped the directory is a traversal attempt, not a missing file.
-    if (!isWithinDirectory(path, staticDirectory, resolved)) {
-        return HttpServerResponse.text("Forbidden", { status: 403 });
-    }
-    if (yield* fileSystem.exists(resolved)) {
-        const info = yield* fileSystem.stat(resolved);
-        if (info.type === "File") {
-            return HttpServerResponse.uint8Array(yield* fileSystem.readFile(resolved), {
-                headers: { "content-type": mimeTypes.get(path.extname(resolved)) ?? "application/octet-stream" },
-                status: 200
-            });
-        }
-    }
-    const index = path.join(staticDirectory, "index.html");
-    if (yield* fileSystem.exists(index)) {
-        return HttpServerResponse.uint8Array(yield* fileSystem.readFile(index), {
-            headers: { "content-type": "text/html" },
-            status: 200
-        });
-    }
-    return HttpServerResponse.text("The client has not been built. Run: pnpm --filter @knpkv/jcf-web build", {
-        status: 404
-    });
-});
-const StaticRouter = HttpRouter.use((router) => router.add("GET", "/*", serveStatic));
+    return staticClient(yield* path.fromFileUrl(new URL("../../dist/client", import.meta.url)));
+}));
 const ApiRoutes = HttpApiBuilder.layer(JcfWebApi).pipe(Layer.provide(Layer.mergeAll(WeekLive, RowsLive, ConfigLive, EntriesLive)), Layer.provide(ownerSessionAuthLayer), Layer.provide(weekPlansLayer));
+/** The authenticated API and the bootstrap exchange: everything that runs on the engine's services. */
+export const apiApplication = Layer.mergeAll(ApiRoutes, OwnerSession.BootstrapRouter).pipe(Layer.orDie);
 /** Supply engine services and owner secrets; listener and platform belong to the executable. */
-export const application = Layer.mergeAll(ApiRoutes, OwnerSession.BootstrapRouter, StaticRouter).pipe(Layer.orDie);
+export const application = Layer.mergeAll(apiApplication, StaticRouter).pipe(Layer.orDie);
 //# sourceMappingURL=HttpApplication.js.map

package/dist/server/HttpApplication.js.map

@@ -1 +1 @@
-{"version":3,"file":"HttpApplication.js","sourceRoot":"","sources":["../../src/server/HttpApplication.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACpE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AACzD,OAAO,EAAE,KAAK,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAExD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,CAAC,MAAM,EAAE,UAAU,CAAC;IACpB,CAAC,OAAO,EAAE,WAAW,CAAC;IACtB,CAAC,MAAM,EAAE,cAAc,CAAC;IACxB,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACjC,CAAC,OAAO,EAAE,kBAAkB,CAAC;IAC7B,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAC5B,CAAC,MAAM,EAAE,eAAe,CAAC;IACzB,CAAC,QAAQ,EAAE,YAAY,CAAC;CACzB,CAAC,CAAA;AAEF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAe,EAAE,IAAY,EAAE,SAAiB,EAAW,EAAE;IAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAC/C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,IAAI;QACxE,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;AAC1C,CAAC,CAAA;AAED,2FAA2F;AAC3F,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAA;IAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAE7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IAC5G,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACnE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAA;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAE3F,yFAAyF;IACzF,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxD,OAAO,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,OAAO,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACzE,OAAO,EAAE,EAAE,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,0BAA0B,EAAE;gBAChG,MAAM,EAAE,GAAG;aACZ,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAA;IACtD,IAAI,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YACtE,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;YACxC,MAAM,EAAE,GAAG;SACZ,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,wEAAwE,EAAE;QACvG,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAA;AAErF,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CACpD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,EAC1E,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,EACpC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAC9B,CAAA;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA"}
+{"version":3,"file":"HttpApplication.js","sourceRoot":"","sources":["../../src/server/HttpApplication.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACpE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AACzD,OAAO,EAAE,KAAK,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAExD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;AAEnH;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAC7F,CAAC,CAAC,CAAC,CAAA;AAEH,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CACpD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,EAC1E,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,EACpC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAC9B,CAAA;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAEvG,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA"}