@musnows/scriverse 0.4.9 → 0.4.11

package/dist/app.js

@@ -24,10 +24,10 @@ import { assertSafeImportedPlainText, decodeUtf8ImportedText } from "./import-se
 import { InvalidRasterImageError, readRasterImageMetadata } from "./image-metadata.js";
 import { createRequestLoggingMiddleware, sanitizeRequestPath } from "./http-logging.js";
 import { accountReference, logger, sanitizeError } from "./logger.js";
-import { runWithRequestActor } from "./request-context.js";
+import { currentRequestActor, runWithRequestActor } from "./request-context.js";
 import { APP_VERSION } from "./version.js";
 import { fullWorkModulePermissions, proseReplacementPermissionModules } from "./work-permissions.js";
-import { CollaborationPresence, presencePageKinds } from "./collaboration-presence.js";
+import { CollaborationPresence, editorPageKey, entityEditorPageKey, modulePageKey, pageLabelForKey, presencePageKinds } from "./collaboration-presence.js";
 import { clearSessionCookie, createCliApiScopeMiddleware, createUserSessionMiddleware, createWorkAuthorizationMiddleware, setSessionCookie, UserAuthService } from "./user-auth.js";
 const nonEmpty = z.string().trim().min(1);
 const identifier = z.string().trim().min(1).max(200);
@@ -423,6 +423,15 @@ export function createRuntime(options) {
     mkdirSync(attachmentStorage.temporaryDirectory, { recursive: true, mode: 0o700 });
     const auth = new UserAuthService(database);
     const collaborationPresence = new CollaborationPresence();
+    const publishCollaborativeChange = (workId, pageKey, label = pageLabelForKey(pageKey)) => {
+        const actor = currentRequestActor();
+        if (!actor || !workId || !pageKey)
+            return;
+        collaborationPresence.publishChange(workId, pageKey, {
+            userId: actor.userId,
+            displayName: actor.displayName
+        }, label);
+    };
     const getDevelopmentUser = () => options.devAuthBypass
         ? auth.listUsers().find((user) => user.status === "active") ?? null
         : null;
@@ -792,11 +801,15 @@ export function createRuntime(options) {
     app.patch("/api/chapters/:chapterId", (request, response) => {
         const input = parse(z.object({ title: nonEmpty.max(300).optional(), content: z.string().max(2_000_000).optional(), excludedFromAnalysis: z.boolean().optional(), chapterType: chapterTypeSchema.optional(), source: z.enum(["manual", "auto"]).optional(), changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const { source, changeNote, expectedVersionNo, ...chapterInput } = input;
-        data(response, store.saveChapter(request.params.chapterId, chapterInput, source ?? "manual", null, changeNote, expectedVersionNo));
+        const chapter = store.saveChapter(request.params.chapterId, chapterInput, source ?? "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(chapter.workId), editorPageKey(String(chapter.id)));
+        data(response, chapter);
     });
     app.delete("/api/chapters/:chapterId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const chapter = store.getChapter(request.params.chapterId);
         store.deleteChapter(request.params.chapterId, input.expectedVersionNo);
+        publishCollaborativeChange(String(chapter.workId), editorPageKey(String(chapter.id)));
         noContent(response);
     });
     app.get("/api/chapters/:chapterId/versions", (request, response) => {
@@ -809,7 +822,9 @@ export function createRuntime(options) {
     });
     app.post("/api/chapters/:chapterId/restore", (request, response) => {
         const input = parse(z.object({ versionNo: z.number().int().positive(), expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
-        data(response, store.restoreChapter(request.params.chapterId, input.versionNo, input.expectedVersionNo));
+        const chapter = store.restoreChapter(request.params.chapterId, input.versionNo, input.expectedVersionNo);
+        publishCollaborativeChange(String(chapter.workId), editorPageKey(String(chapter.id)));
+        data(response, chapter);
     });
     app.post("/api/chapters/:chapterId/move", (request, response) => {
         const input = parse(z.object({ volumeId: identifier, sortOrder: z.number().int().min(0), expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
@@ -823,11 +838,15 @@ export function createRuntime(options) {
     app.get("/api/chapters/:chapterId/outline", (request, response) => data(response, store.getChapterOutline(request.params.chapterId)));
     app.put("/api/chapters/:chapterId/outline", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(chapterOutlineSchema.extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
-        data(response, store.upsertChapterOutline(request.params.chapterId, input, "manual", null, changeNote, expectedVersionNo));
+        const outline = store.upsertChapterOutline(request.params.chapterId, input, "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(outline.workId), modulePageKey("outlines"));
+        data(response, outline);
     });
     app.delete("/api/chapters/:chapterId/outline", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const chapter = store.getChapter(request.params.chapterId);
         store.deleteChapterOutline(request.params.chapterId, input.expectedVersionNo);
+        publishCollaborativeChange(String(chapter.workId), modulePageKey("outlines"));
         noContent(response);
     });
     app.get("/api/works/:workId/foreshadows", (request, response) => {
@@ -841,31 +860,43 @@ export function createRuntime(options) {
             : store.listForeshadows(request.params.workId, query.status, query.currentChapterId));
     });
     app.post("/api/works/:workId/foreshadows", (request, response) => {
-        data(response, store.createForeshadow(request.params.workId, parse(foreshadowSchema, request.body)), 201);
+        const foreshadow = store.createForeshadow(request.params.workId, parse(foreshadowSchema, request.body));
+        publishCollaborativeChange(request.params.workId, modulePageKey("outlines"));
+        data(response, foreshadow, 201);
     });
     app.get("/api/foreshadows/:foreshadowId", (request, response) => data(response, store.getForeshadow(request.params.foreshadowId)));
     app.patch("/api/foreshadows/:foreshadowId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(foreshadowSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
-        data(response, store.updateForeshadow(request.params.foreshadowId, input, "manual", null, changeNote, expectedVersionNo));
+        const foreshadow = store.updateForeshadow(request.params.foreshadowId, input, "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(foreshadow.workId), modulePageKey("outlines"));
+        data(response, foreshadow);
     });
     app.delete("/api/foreshadows/:foreshadowId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const foreshadow = store.getForeshadow(request.params.foreshadowId);
         store.deleteForeshadow(request.params.foreshadowId, input.expectedVersionNo);
+        publishCollaborativeChange(String(foreshadow.workId), modulePageKey("outlines"));
         noContent(response);
     });
     app.post("/api/foreshadows/:foreshadowId/occurrences", (request, response) => {
         const input = parse(foreshadowOccurrenceSchema.extend({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const { expectedVersionNo, ...occurrenceInput } = input;
-        data(response, store.createForeshadowOccurrence(request.params.foreshadowId, occurrenceInput, expectedVersionNo), 201);
+        const occurrence = store.createForeshadowOccurrence(request.params.foreshadowId, occurrenceInput, expectedVersionNo);
+        publishCollaborativeChange(String(occurrence.workId), modulePageKey("outlines"));
+        data(response, occurrence, 201);
     });
     app.patch("/api/foreshadow-occurrences/:occurrenceId", (request, response) => {
         const input = parse(foreshadowOccurrenceSchema.partial().extend({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const { expectedVersionNo, ...occurrenceInput } = input;
-        data(response, store.updateForeshadowOccurrence(request.params.occurrenceId, occurrenceInput, expectedVersionNo));
+        const occurrence = store.updateForeshadowOccurrence(request.params.occurrenceId, occurrenceInput, expectedVersionNo);
+        publishCollaborativeChange(String(occurrence.workId), modulePageKey("outlines"));
+        data(response, occurrence);
     });
     app.delete("/api/foreshadow-occurrences/:occurrenceId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const occurrence = store.getForeshadowOccurrence(request.params.occurrenceId);
         store.deleteForeshadowOccurrence(request.params.occurrenceId, input.expectedVersionNo);
+        publishCollaborativeChange(String(occurrence.workId), modulePageKey("outlines"));
         noContent(response);
     });
     app.get("/api/works/:workId/settings", (request, response) => {
@@ -873,16 +904,24 @@ export function createRuntime(options) {
         const includeContent = request.query.includeContent === "true";
         data(response, pagination ? store.listSettingsPage(request.params.workId, pagination, includeContent) : store.listSettings(request.params.workId, includeContent));
     });
-    app.post("/api/works/:workId/settings", (request, response) => data(response, store.createSetting(request.params.workId, parse(settingSchema, request.body)), 201));
+    app.post("/api/works/:workId/settings", (request, response) => {
+        const setting = store.createSetting(request.params.workId, parse(settingSchema, request.body));
+        publishCollaborativeChange(request.params.workId, modulePageKey("settings"));
+        data(response, setting, 201);
+    });
     app.get("/api/works/:workId/settings/context", (request, response) => data(response, store.listSettings(request.params.workId, true)));
     app.get("/api/settings/:settingId", (request, response) => data(response, store.getSetting(request.params.settingId)));
     app.patch("/api/settings/:settingId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(settingSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
-        data(response, store.updateSetting(request.params.settingId, input, "manual", null, changeNote, expectedVersionNo));
+        const setting = store.updateSetting(request.params.settingId, input, "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(setting.workId), entityEditorPageKey("setting", String(setting.id)));
+        data(response, setting);
     });
     app.delete("/api/settings/:settingId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const setting = store.getSetting(request.params.settingId);
         store.deleteSetting(request.params.settingId, input.expectedVersionNo);
+        publishCollaborativeChange(String(setting.workId), entityEditorPageKey("setting", String(setting.id)));
         noContent(response);
     });
     app.get("/api/works/:workId/characters", (request, response) => {
@@ -900,6 +939,7 @@ export function createRuntime(options) {
     });
     app.post("/api/works/:workId/characters", (request, response) => {
         const character = store.createCharacter(request.params.workId, parse(characterSchema, request.body));
+        publishCollaborativeChange(request.params.workId, modulePageKey("characters"));
         data(response, redactCharacterLinks(character, requestPermissions(request, request.params.workId)), 201);
     });
     app.get("/api/characters/:characterId", (request, response) => {
@@ -908,6 +948,7 @@ export function createRuntime(options) {
     app.patch("/api/characters/:characterId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(characterUpdateSchema.extend({ expectedVersionNo: expectedVersionNoSchema }), request.body);
         const character = store.updateCharacter(request.params.characterId, input, "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(character.workId), entityEditorPageKey("character", String(character.id)));
         data(response, redactCharacterLinks(character, requestPermissions(request)));
     });
     app.get("/api/characters/:characterId/versions", (request, response) => {
@@ -919,11 +960,14 @@ export function createRuntime(options) {
     app.post("/api/characters/:characterId/restore", (request, response) => {
         const input = parse(z.object({ versionNo: z.number().int().positive(), expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const character = store.restoreCharacter(request.params.characterId, input.versionNo, input.expectedVersionNo);
+        publishCollaborativeChange(String(character.workId), entityEditorPageKey("character", String(character.id)));
         data(response, redactCharacterLinks(character, requestPermissions(request)));
     });
     app.delete("/api/characters/:characterId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const character = store.getCharacter(request.params.characterId);
         store.deleteCharacter(request.params.characterId, input.expectedVersionNo);
+        publishCollaborativeChange(String(character.workId), entityEditorPageKey("character", String(character.id)));
         noContent(response);
     });
     app.post("/api/characters/:characterId/merge", (request, response) => {
@@ -947,18 +991,24 @@ export function createRuntime(options) {
             : store.listCharacterProfileSections(request.params.characterId));
     });
     app.post("/api/characters/:characterId/sections", (request, response) => {
-        data(response, store.createCharacterProfileSection(request.params.characterId, parse(characterProfileSectionSchema, request.body)), 201);
+        const section = store.createCharacterProfileSection(request.params.characterId, parse(characterProfileSectionSchema, request.body));
+        publishCollaborativeChange(String(section.workId), entityEditorPageKey("character", String(section.characterId)));
+        data(response, section, 201);
     });
     app.get("/api/character-sections/:sectionId", (request, response) => {
         data(response, store.getCharacterProfileSection(request.params.sectionId));
     });
     app.patch("/api/character-sections/:sectionId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(characterProfileSectionSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
-        data(response, store.updateCharacterProfileSection(request.params.sectionId, input, "manual", null, changeNote, expectedVersionNo));
+        const section = store.updateCharacterProfileSection(request.params.sectionId, input, "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(section.workId), entityEditorPageKey("character", String(section.characterId)));
+        data(response, section);
     });
     app.delete("/api/character-sections/:sectionId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const section = store.getCharacterProfileSection(request.params.sectionId);
         store.deleteCharacterProfileSection(request.params.sectionId, input.expectedVersionNo);
+        publishCollaborativeChange(String(section.workId), entityEditorPageKey("character", String(section.characterId)));
         noContent(response);
     });
     app.get("/api/character-sections/:sectionId/versions", (request, response) => {
@@ -969,7 +1019,9 @@ export function createRuntime(options) {
     });
     app.post("/api/character-sections/:sectionId/restore", (request, response) => {
         const input = parse(z.object({ versionNo: z.number().int().positive(), expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
-        data(response, store.restoreCharacterProfileSection(request.params.sectionId, input.versionNo, input.expectedVersionNo));
+        const section = store.restoreCharacterProfileSection(request.params.sectionId, input.versionNo, input.expectedVersionNo);
+        publishCollaborativeChange(String(section.workId), entityEditorPageKey("character", String(section.characterId)));
+        data(response, section);
     });
     app.get("/api/works/:workId/attachments", (request, response) => {
         const pagination = parsePagination(request.query);
@@ -1025,6 +1077,7 @@ export function createRuntime(options) {
     });
     app.post("/api/works/:workId/races", (request, response) => {
         const race = store.createRace(request.params.workId, parse(raceSchema, request.body));
+        publishCollaborativeChange(request.params.workId, modulePageKey("races"));
         data(response, redactRaceMembers(race, requestPermissions(request, request.params.workId)), 201);
     });
     app.get("/api/races/:raceId", (request, response) => {
@@ -1033,11 +1086,14 @@ export function createRuntime(options) {
     app.patch("/api/races/:raceId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(raceSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const race = store.updateRace(request.params.raceId, input, "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(race.workId), entityEditorPageKey("race", String(race.id)));
         data(response, redactRaceMembers(race, requestPermissions(request)));
     });
     app.delete("/api/races/:raceId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const race = store.getRace(request.params.raceId);
         store.deleteRace(request.params.raceId, input.expectedVersionNo);
+        publishCollaborativeChange(String(race.workId), entityEditorPageKey("race", String(race.id)));
         noContent(response);
     });
     app.post("/api/races/:raceId/merge", (request, response) => {
@@ -1055,6 +1111,7 @@ export function createRuntime(options) {
     });
     app.post("/api/works/:workId/organizations", (request, response) => {
         const organization = store.createOrganization(request.params.workId, parse(organizationSchema, request.body));
+        publishCollaborativeChange(request.params.workId, modulePageKey("organizations"));
         data(response, redactOrganizationMembers(organization, requestPermissions(request, request.params.workId)), 201);
     });
     app.get("/api/organizations/:organizationId", (request, response) => {
@@ -1063,11 +1120,14 @@ export function createRuntime(options) {
     app.patch("/api/organizations/:organizationId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(organizationSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const organization = store.updateOrganization(request.params.organizationId, input, "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(organization.workId), entityEditorPageKey("organization", String(organization.id)));
         data(response, redactOrganizationMembers(organization, requestPermissions(request)));
     });
     app.delete("/api/organizations/:organizationId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const organization = store.getOrganization(request.params.organizationId);
         store.deleteOrganization(request.params.organizationId, input.expectedVersionNo);
+        publishCollaborativeChange(String(organization.workId), entityEditorPageKey("organization", String(organization.id)));
         noContent(response);
     });
     app.post("/api/organizations/:organizationId/merge", (request, response) => {
@@ -1080,22 +1140,34 @@ export function createRuntime(options) {
         const pagination = parsePagination(request.query);
         data(response, pagination ? store.listTimelineTracksPage(request.params.workId, pagination) : store.listTimelineTracks(request.params.workId));
     });
-    app.post("/api/works/:workId/timeline-tracks", (request, response) => data(response, store.createTimelineTrack(request.params.workId, parse(timelineTrackSchema, request.body)), 201));
+    app.post("/api/works/:workId/timeline-tracks", (request, response) => {
+        const track = store.createTimelineTrack(request.params.workId, parse(timelineTrackSchema, request.body));
+        publishCollaborativeChange(request.params.workId, modulePageKey("timeline"));
+        data(response, track, 201);
+    });
     app.get("/api/timeline-tracks/:trackId", (request, response) => data(response, store.getTimelineTrack(request.params.trackId)));
     app.patch("/api/timeline-tracks/:trackId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(timelineTrackSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
-        data(response, store.updateTimelineTrack(request.params.trackId, input, "manual", null, changeNote, expectedVersionNo));
+        const track = store.updateTimelineTrack(request.params.trackId, input, "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(track.workId), modulePageKey("timeline"));
+        data(response, track);
     });
     app.delete("/api/timeline-tracks/:trackId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const track = store.getTimelineTrack(request.params.trackId);
         store.deleteTimelineTrack(request.params.trackId, input.expectedVersionNo);
+        publishCollaborativeChange(String(track.workId), modulePageKey("timeline"));
         noContent(response);
     });
     app.get("/api/works/:workId/timeline", (request, response) => {
         const pagination = parsePagination(request.query);
         data(response, pagination ? store.listTimelineEventsPage(request.params.workId, pagination) : store.listTimelineEvents(request.params.workId));
     });
-    app.post("/api/works/:workId/timeline", (request, response) => data(response, store.createTimelineEvent(request.params.workId, parse(timelineSchema, request.body)), 201));
+    app.post("/api/works/:workId/timeline", (request, response) => {
+        const event = store.createTimelineEvent(request.params.workId, parse(timelineSchema, request.body));
+        publishCollaborativeChange(request.params.workId, modulePageKey("timeline"));
+        data(response, event, 201);
+    });
     app.post("/api/works/:workId/timeline/merge", (request, response) => {
         const input = parse(z.object({
             eventIds: z.array(identifier).min(2),
@@ -1106,12 +1178,16 @@ export function createRuntime(options) {
             expectedVersionNos: z.record(identifier, z.number().int().positive()).optional()
         }).strict(), request.body);
         const { expectedVersionNos, ...mergeInput } = input;
-        data(response, store.mergeTimelineEvents(request.params.workId, input.eventIds, mergeInput, expectedVersionNos), 201);
+        const merged = store.mergeTimelineEvents(request.params.workId, input.eventIds, mergeInput, expectedVersionNos);
+        publishCollaborativeChange(request.params.workId, modulePageKey("timeline"));
+        data(response, merged, 201);
     });
     app.get("/api/timeline/:eventId", (request, response) => data(response, store.getTimelineEvent(request.params.eventId)));
     app.patch("/api/timeline/:eventId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(timelineSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
-        data(response, store.updateTimelineEvent(request.params.eventId, input, "manual", null, changeNote, expectedVersionNo));
+        const event = store.updateTimelineEvent(request.params.eventId, input, "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(event.workId), modulePageKey("timeline"));
+        data(response, event);
     });
     app.post("/api/timeline/:eventId/split", (request, response) => {
         const input = parse(z.object({
@@ -1123,11 +1199,17 @@ export function createRuntime(options) {
             })).min(2),
             expectedVersionNo: expectedVersionNoSchema
         }).strict(), request.body);
-        data(response, store.splitTimelineEvent(request.params.eventId, input.parts, input.expectedVersionNo), 201);
+        const split = store.splitTimelineEvent(request.params.eventId, input.parts, input.expectedVersionNo);
+        const first = split[0];
+        if (first)
+            publishCollaborativeChange(String(first.workId), modulePageKey("timeline"));
+        data(response, split, 201);
     });
     app.delete("/api/timeline/:eventId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const event = store.getTimelineEvent(request.params.eventId);
         store.deleteTimelineEvent(request.params.eventId, input.expectedVersionNo);
+        publishCollaborativeChange(String(event.workId), modulePageKey("timeline"));
         noContent(response);
     });
     app.get("/api/works/:workId/relationships", (request, response) => {
@@ -1139,15 +1221,23 @@ export function createRuntime(options) {
             ? store.listRelationshipsPage(request.params.workId, pagination, confidence)
             : store.listRelationships(request.params.workId, confidence));
     });
-    app.post("/api/works/:workId/relationships", (request, response) => data(response, store.createRelationship(request.params.workId, parse(relationshipSchema, request.body)), 201));
+    app.post("/api/works/:workId/relationships", (request, response) => {
+        const relationship = store.createRelationship(request.params.workId, parse(relationshipSchema, request.body));
+        publishCollaborativeChange(request.params.workId, modulePageKey("relationships"));
+        data(response, relationship, 201);
+    });
     app.get("/api/relationships/:relationshipId", (request, response) => data(response, store.getRelationship(request.params.relationshipId)));
     app.patch("/api/relationships/:relationshipId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(relationshipSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
-        data(response, store.updateRelationship(request.params.relationshipId, input, "manual", null, changeNote, expectedVersionNo));
+        const relationship = store.updateRelationship(request.params.relationshipId, input, "manual", null, changeNote, expectedVersionNo);
+        publishCollaborativeChange(String(relationship.workId), modulePageKey("relationships"));
+        data(response, relationship);
     });
     app.delete("/api/relationships/:relationshipId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const relationship = store.getRelationship(request.params.relationshipId);
         store.deleteRelationship(request.params.relationshipId, input.expectedVersionNo);
+        publishCollaborativeChange(String(relationship.workId), modulePageKey("relationships"));
         noContent(response);
     });
     app.get("/api/entity-versions/:entityType/:entityId", (request, response) => {
@@ -1513,18 +1603,28 @@ export function createRuntime(options) {
             response.type("text/html").send(html);
         };
         app.get(["/", "/index.html"], sendIndexHtml);
+        const setStaticCacheControl = (response) => {
+            const version = response.req.query.v;
+            response.setHeader("Cache-Control", typeof version === "string" && version.length > 0
+                ? "public, max-age=31536000, immutable"
+                : "public, max-age=3600, must-revalidate");
+        };
         const vditorPath = join(process.cwd(), "node_modules", "vditor", "dist");
         if (existsSync(vditorPath)) {
             app.use("/vendor/vditor/dist", express.static(vditorPath, {
+                cacheControl: false,
                 index: false,
-                maxAge: 0,
-                setHeaders: (response) => response.setHeader("Cache-Control", "no-store")
+                etag: true,
+                lastModified: true,
+                setHeaders: setStaticCacheControl
             }));
         }
         app.use(express.static(publicPath, {
+            cacheControl: false,
             index: false,
-            maxAge: 0,
-            setHeaders: (response) => response.setHeader("Cache-Control", "no-store")
+            etag: true,
+            lastModified: true,
+            setHeaders: setStaticCacheControl
         }));
         app.get("/{*path}", (request, response, next) => {
             if (request.path.startsWith("/api/"))