@snagset/server 0.0.1

package/dist/routes/reviewLinks.js

@@ -0,0 +1,169 @@
+import { Hono } from "hono";
+import { randomUUID, randomBytes, createHash } from "node:crypto";
+import { ID_PREFIX } from "../vendor/types/names.js";
+function fail(c, status, code, message) {
+    return c.json({ error: { code, message, requestId: c.get("requestId") } }, status);
+}
+const sha256 = (s) => createHash("sha256").update(s, "utf8").digest();
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const rowId = (wire, prefix) => {
+    const bare = wire.startsWith(prefix) ? wire.slice(prefix.length) : wire;
+    return UUID.test(bare) ? bare.toLowerCase() : null;
+};
+/** §3.4's six. Anything else is refused rather than stored — an unknown
+ *  permission in the column would be silently dropped at exchange, which reads
+ *  to the operator as "I granted it and it did nothing". */
+const KNOWN = [
+    "thread:create",
+    "comment:create",
+    "thread:resolve",
+    "thread:delete:own",
+    "thread:private",
+    "thread:assign",
+];
+const DEFAULT_PERMISSIONS = ["thread:create", "comment:create", "thread:resolve"];
+/** Never `token`, never `tokenHash`. */
+const shape = (r) => ({
+    id: ID_PREFIX.link + r.id,
+    ...(r.round_id ? { roundId: ID_PREFIX.round + r.round_id } : {}),
+    name: r.name,
+    ...(r.email ? { email: r.email } : {}),
+    environments: r.environments,
+    permissions: r.permissions,
+    allowNameOverride: r.allow_name_override,
+    maxUses: r.max_uses,
+    useCount: r.use_count,
+    createdAt: r.created_at.toISOString(),
+    expiresAt: r.expires_at.toISOString(),
+    revokedAt: r.revoked_at?.toISOString() ?? null,
+    lastUsedAt: r.last_used_at?.toISOString() ?? null,
+});
+export function reviewLinkRoutes(deps) {
+    const app = new Hono();
+    const { sql, projects } = deps;
+    const now = deps.now ?? (() => new Date());
+    const DAY = 86_400_000;
+    /**
+     * Owner-only, and owner OF THIS PROJECT (same pattern as `rounds.ts`).
+     *
+     * `requireOwner()` only proves SOME org's owner is signed in — nothing
+     * here compared `owner.orgId` to the project's before this fix, so an
+     * owner of org A could mint, list, or revoke org B's links by uid. 404
+     * rather than 403 on a mismatch: a project uid existing at all is not
+     * information another org gets to learn.
+     */
+    const owned = async (c) => {
+        const uid = c.req.param("uid");
+        if (!uid)
+            return null;
+        const p = await projects.get(uid).catch(() => null);
+        if (!p)
+            return null;
+        const owner = c.get("owner");
+        return owner && owner.orgId === p.org_id ? p : null;
+    };
+    app.post("/api/v1/projects/:uid/review-links", async (c) => {
+        const project = await owned(c);
+        if (!project)
+            return fail(c, 404, "project_not_found", "No project with that uid.");
+        const body = (await c.req.json().catch(() => null));
+        const name = typeof body?.name === "string" ? body.name.trim().slice(0, 120) : "";
+        if (!name) {
+            return fail(c, 400, "validation_failed", "name is required — it labels the LINK (\"Client review — round 2\"), not a person.");
+        }
+        const permissions = Array.isArray(body?.permissions) ? body.permissions : DEFAULT_PERMISSIONS;
+        const unknown = permissions.filter((p) => !KNOWN.includes(p));
+        if (unknown.length) {
+            return fail(c, 422, "validation_failed", `Unknown permission(s): ${unknown.join(", ")}.`);
+        }
+        // Clamped ON WRITE, per §4.5.1's closing note: one default (14), one
+        // ceiling (90), and the clamp lives here rather than being trusted to a UI.
+        const ceiling = now().getTime() + deps.maxTtlDays * DAY;
+        const asked = typeof body?.expiresAt === "string" ? Date.parse(body.expiresAt) : NaN;
+        const expiresAt = new Date(Math.min(Number.isFinite(asked) ? asked : now().getTime() + deps.ttlDays * DAY, ceiling));
+        if (expiresAt <= now()) {
+            return fail(c, 400, "validation_failed", "expiresAt must be in the future.");
+        }
+        let roundId = null;
+        if (typeof body?.roundId === "string" && body.roundId) {
+            roundId = rowId(body.roundId, ID_PREFIX.round);
+            if (!roundId)
+                return fail(c, 400, "validation_failed", "roundId is not a valid id.");
+            const [round] = await sql `
+        SELECT id FROM rounds WHERE id = ${roundId} AND project_id = ${project.id} AND deleted_at IS NULL
+      `;
+            if (!round)
+                return fail(c, 404, "not_found", "That round is not in this project.");
+        }
+        // 32 bytes, unpadded base64url, 43 chars — foundations §7. Stored as
+        // sha256 only, which is why this response is the token's one appearance.
+        const token = randomBytes(32).toString("base64url");
+        const id = randomUUID();
+        const [row] = await sql `
+      INSERT INTO review_links
+        (id, org_id, project_id, round_id, token_hash, name, email, environments, permissions,
+         allow_name_override, max_uses, expires_at)
+      VALUES
+        (${id}, ${project.org_id}, ${project.id}, ${roundId}, ${sha256(token)}, ${name},
+         ${typeof body?.email === "string" ? body.email : null},
+         ${sql.array(Array.isArray(body?.environments) && body.environments.length ? body.environments : ["*"])},
+         ${sql.array(permissions)},
+         ${body?.allowNameOverride === false ? false : true},
+         ${Number.isInteger(body?.maxUses) && body?.maxUses > 0 ? body.maxUses : null},
+         ${expiresAt})
+      RETURNING id, round_id, name, email, environments, permissions, allow_name_override,
+                max_uses, use_count, created_at, expires_at, revoked_at, last_used_at
+    `;
+        c.header("Location", `/api/v1/review-links/${ID_PREFIX.link}${id}`);
+        return c.json({
+            ...shape(row),
+            // The one and only time. The dashboard builds `<page>#snag_k=<token>` —
+            // the server does not know which page of the reviewed site to point at.
+            token,
+            fragment: `#snag_k=${token}`,
+        }, 201);
+    });
+    app.get("/api/v1/projects/:uid/review-links", async (c) => {
+        const project = await owned(c);
+        if (!project)
+            return fail(c, 404, "project_not_found", "No project with that uid.");
+        const rows = await sql `
+      SELECT id, round_id, name, email, environments, permissions, allow_name_override,
+             max_uses, use_count, created_at, expires_at, revoked_at, last_used_at
+      FROM review_links WHERE project_id = ${project.id} ORDER BY created_at DESC
+    `;
+        return c.json({ data: rows.map(shape), nextCursor: null });
+    });
+    app.delete("/api/v1/review-links/:id", async (c) => {
+        const id = rowId(c.req.param("id"), ID_PREFIX.link);
+        if (!id)
+            return fail(c, 404, "not_found", "No such review link.");
+        // This route is not project-scoped in the URL (a link id is looked up
+        // directly), so the org check has to happen here rather than via
+        // `owned()` — org A's owner must not be able to revoke org B's link by
+        // guessing/enumerating a `lnk_` id. `review_links.org_id` is denormalised
+        // onto the row for exactly this filter.
+        const owner = c.get("owner");
+        const [link] = await sql `
+      SELECT rl.id, rl.project_id, p.uid, rl.revoked_at
+      FROM review_links rl JOIN projects p ON p.id = rl.project_id
+      WHERE rl.id = ${id} AND rl.org_id = ${owner.orgId}
+    `;
+        if (!link)
+            return fail(c, 404, "not_found", "No such review link.");
+        // BOTH, in one transaction. `revoked_at` stops further exchanges; the epoch
+        // bump kills the sessions already issued. Doing only the first leaves every
+        // reviewer who already redeemed the link working for up to 12 hours.
+        await sql.begin(async (tx) => {
+            await tx `UPDATE review_links SET revoked_at = now() WHERE id = ${id} AND revoked_at IS NULL`;
+            await tx `UPDATE projects SET session_epoch = session_epoch + 1 WHERE id = ${link.project_id}`;
+        });
+        // So the operator who clicked sees it on THIS node without waiting out the
+        // 10 s TTL. Other nodes catch up on their own expiry, which is the bound
+        // §4.4 states.
+        projects.invalidate(link.uid);
+        return c.body(null, 204);
+    });
+    return app;
+}
+//# sourceMappingURL=reviewLinks.js.map

package/dist/routes/reviewLinks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewLinks.js","sourceRoot":"","sources":["../../src/routes/reviewLinks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAqCjD,SAAS,IAAI,CAAC,CAAM,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe;IACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAa,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AAEtF,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAC/E,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,MAAc,EAAiB,EAAE;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC,CAAC;AAEF;;4DAE4D;AAC5D,MAAM,KAAK,GAAG;IACZ,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,gBAAgB;IAChB,eAAe;CAChB,CAAC;AACF,MAAM,mBAAmB,GAAG,CAAC,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AAkBlF,wCAAwC;AACxC,MAAM,KAAK,GAAG,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;IACzB,EAAE,EAAE,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE;IACzB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,YAAY;IAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;IAC1B,iBAAiB,EAAE,CAAC,CAAC,mBAAmB;IACxC,OAAO,EAAE,CAAC,CAAC,QAAQ;IACnB,QAAQ,EAAE,CAAC,CAAC,SAAS;IACrB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;IAC9C,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,IAAI;CAClD,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO,CAAC;IAC5B,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,UAAU,CAAC;IAEvB;;;;;;;;OAQG;IACH,MAAM,KAAK,GAAG,KAAK,EAAE,CAAM,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;QAEpF,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA+B,CAAC;QAClF,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CACT,CAAC,EACD,GAAG,EACH,mBAAmB,EACnB,oFAAoF,CACrF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAa,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACxG,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,0BAA0B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5F,CAAC;QAED,qEAAqE;QACrE,4EAA4E;QAC5E,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QACxD,MAAM,KAAK,GAAG,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,GAAG,EAAE,OAAO,CAAC,CACzF,CAAC;QACF,IAAI,SAAS,IAAI,GAAG,EAAE,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,kCAAkC,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,4BAA4B,CAAC,CAAC;YACrF,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,CAAkB;2CACN,OAAO,qBAAqB,OAAO,CAAC,EAAE;OAC1E,CAAC;YACF,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,oCAAoC,CAAC,CAAC;QACrF,CAAC;QAED,qEAAqE;QACrE,yEAAyE;QACzE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QAExB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAO;;;;;WAKvB,EAAE,KAAK,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,EAAE,KAAK,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI;WAC3E,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;WACnD,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;WACpG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;WACtB,IAAI,EAAE,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;WAChD,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,IAAK,IAAI,EAAE,OAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;WACvF,SAAS;;;KAGf,CAAC;QAEF,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,wBAAwB,SAAS,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,IAAI,CACX;YACE,GAAG,KAAK,CAAC,GAAI,CAAC;YACd,wEAAwE;YACxE,wEAAwE;YACxE,KAAK;YACL,QAAQ,EAAE,WAAW,KAAK,EAAE;SAC7B,EACD,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,oCAAoC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAO;;;6CAGY,OAAO,CAAC,EAAE;KAClD,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;QAElE,sEAAsE;QACtE,iEAAiE;QACjE,uEAAuE;QACvE,0EAA0E;QAC1E,wCAAwC;QACxC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,CAA4E;;;sBAGlF,EAAE,oBAAoB,KAAK,CAAC,KAAK;KAClD,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;QAEpE,4EAA4E;QAC5E,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC3B,MAAM,EAAE,CAAA,yDAAyD,EAAE,yBAAyB,CAAC;YAC7F,MAAM,EAAE,CAAA,oEAAoE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChG,CAAC,CAAC,CAAC;QACH,2EAA2E;QAC3E,yEAAyE;QACzE,eAAe;QACf,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE9B,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/rounds.js

@@ -0,0 +1,137 @@
+import { Hono } from "hono";
+import { randomUUID } from "node:crypto";
+import { ID_PREFIX } from "../vendor/types/names.js";
+function fail(c, status, code, message) {
+    return c.json({ error: { code, message, requestId: c.get("requestId") } }, status);
+}
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const rowId = (wire) => {
+    const bare = wire.startsWith(ID_PREFIX.round) ? wire.slice(ID_PREFIX.round.length) : wire;
+    return UUID.test(bare) ? bare.toLowerCase() : null;
+};
+const shape = (r) => ({
+    id: ID_PREFIX.round + r.id,
+    number: r.number,
+    name: r.name,
+    closed: !!r.closed_at,
+    closedAt: r.closed_at?.toISOString(),
+    createdAt: r.created_at.toISOString(),
+    threads: r.threads,
+    // D2's safeguard, server-computed. A closed round still reports this — the
+    // whole point is that closing a round must not make its unfinished work
+    // disappear from view.
+    unresolved: r.unresolved,
+});
+export function roundRoutes(deps) {
+    const app = new Hono();
+    const { sql, projects } = deps;
+    /** Owner-only, and owner OF THIS PROJECT. Returns the project or null. */
+    const owned = async (c) => {
+        const uid = c.req.param("uid");
+        if (!uid)
+            return null;
+        const p = await projects.get(uid).catch(() => null);
+        if (!p)
+            return null;
+        const owner = c.get("owner");
+        return owner && owner.orgId === p.org_id ? p : null;
+    };
+    /** Every round on the project, newest first, each with its counts. */
+    app.get("/api/v1/projects/:uid/rounds", async (c) => {
+        const p = await owned(c);
+        if (!p)
+            return fail(c, 404, "project_not_found", "No project with that uid.");
+        const rows = await sql `
+      SELECT r.id, r.number, r.name, r.closed_at, r.created_at,
+             count(t.id)::int AS threads,
+             count(t.id) FILTER (WHERE t.status <> 'resolved')::int AS unresolved
+      FROM rounds r
+      LEFT JOIN threads t ON t.round_id = r.id AND t.deleted_at IS NULL
+      WHERE r.project_id = ${p.id} AND r.deleted_at IS NULL
+      GROUP BY r.id
+      ORDER BY r.number DESC
+    `;
+        return c.json({ data: rows.map(shape) });
+    });
+    /**
+     * Open a new round. The previous open one is CLOSED in the same transaction,
+     * because "one active round at a time" is the model and two open rounds have
+     * no defined answer to "where does the next thread go".
+     *
+     * Numbering is allocated the same way thread keys are (§2.1): an UPDATE that
+     * row-locks the project, not a sequence, because gapless is the property and
+     * a sequence cannot promise it.
+     */
+    app.post("/api/v1/projects/:uid/rounds", async (c) => {
+        const p = await owned(c);
+        if (!p)
+            return fail(c, 404, "project_not_found", "No project with that uid.");
+        const body = (await c.req.json().catch(() => null));
+        const name = typeof body?.name === "string" ? body.name.trim().slice(0, 80) : "";
+        const owner = c.get("owner");
+        const row = await sql.begin(async (tx) => {
+            await tx `SELECT set_config('app.org_id', ${p.org_id}, true)`;
+            const [next] = await tx `
+        SELECT COALESCE(max(number), 0) + 1 AS n FROM rounds WHERE project_id = ${p.id}
+      `;
+            const number = next.n;
+            const id = randomUUID();
+            const [created] = await tx `
+        WITH closed AS (
+          UPDATE rounds SET closed_at = now(), updated_at = now()
+          WHERE project_id = ${p.id}::uuid AND closed_at IS NULL AND deleted_at IS NULL
+          RETURNING id
+        ),
+        made AS (
+          INSERT INTO rounds (id, org_id, project_id, number, name, created_by)
+          VALUES (${id}::uuid, ${p.org_id}::uuid, ${p.id}::uuid, ${number}::int,
+                  ${name || `Round ${number}`}::text, ${owner.userId}::uuid)
+          RETURNING id, number, name, closed_at, created_at
+        )
+        SELECT made.*, 0::int AS threads, 0::int AS unresolved FROM made
+      `;
+            return created;
+        });
+        return c.json(shape(row), 201);
+    });
+    /**
+     * Rename, close or reopen. Never renumber, and never move threads: `number`
+     * is display order minted once, and a thread's round is immutable (D2).
+     */
+    app.patch("/api/v1/rounds/:id", async (c) => {
+        const owner = c.get("owner");
+        if (!owner)
+            return fail(c, 401, "unauthorized", "Sign in to the dashboard first.");
+        const id = rowId(c.req.param("id"));
+        if (!id)
+            return fail(c, 404, "not_found", "No such round.");
+        const body = (await c.req.json().catch(() => null));
+        const name = typeof body?.name === "string" ? body.name.trim().slice(0, 80) : null;
+        const closed = typeof body?.closed === "boolean" ? body.closed : null;
+        if (name === null && closed === null) {
+            return fail(c, 400, "validation_failed", "Send a name, or closed: true/false.");
+        }
+        if (name !== null && !name)
+            return fail(c, 400, "validation_failed", "A round needs a name.");
+        const [row] = await sql `
+      WITH upd AS (
+        UPDATE rounds SET
+          name = ${name ?? sql `name`},
+          closed_at = ${closed === null ? sql `closed_at` : closed ? sql `now()` : sql `NULL`},
+          updated_at = now()
+        WHERE id = ${id}::uuid AND org_id = ${owner.orgId}::uuid AND deleted_at IS NULL
+        RETURNING id, number, name, closed_at, created_at
+      )
+      SELECT upd.*,
+             (SELECT count(*)::int FROM threads t WHERE t.round_id = upd.id AND t.deleted_at IS NULL) AS threads,
+             (SELECT count(*)::int FROM threads t
+               WHERE t.round_id = upd.id AND t.deleted_at IS NULL AND t.status <> 'resolved') AS unresolved
+      FROM upd
+    `;
+        if (!row)
+            return fail(c, 404, "not_found", "No such round.");
+        return c.json(shape(row));
+    });
+    return app;
+}
+//# sourceMappingURL=rounds.js.map

package/dist/routes/rounds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rounds.js","sourceRoot":"","sources":["../../src/routes/rounds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAkCjD,SAAS,IAAI,CAAC,CAAM,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe;IACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAa,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAC/E,MAAM,KAAK,GAAG,CAAC,IAAY,EAAiB,EAAE;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC,CAAC;AAYF,MAAM,KAAK,GAAG,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;IACzB,EAAE,EAAE,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;IACrB,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO;IAClB,2EAA2E;IAC3E,wEAAwE;IACxE,uBAAuB;IACvB,UAAU,EAAE,CAAC,CAAC,UAAU;CACzB,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO,CAAC;IAC5B,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAE/B,0EAA0E;IAC1E,MAAM,KAAK,GAAG,KAAK,EAAE,CAAM,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC,CAAC;IAEF,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAO;;;;;;6BAMJ,CAAC,CAAC,EAAE;;;KAG5B,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH;;;;;;;;OAQG;IACH,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA8B,CAAC;QACjF,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;QAE9B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACvC,MAAM,EAAE,CAAA,mCAAmC,CAAC,CAAC,MAAM,SAAS,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAiB;kFACoC,CAAC,CAAC,EAAE;OAC/E,CAAC;YACF,MAAM,MAAM,GAAG,IAAK,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAO;;;+BAGR,CAAC,CAAC,EAAE;;;;;oBAKf,EAAE,WAAW,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,EAAE,WAAW,MAAM;oBACrD,IAAI,IAAI,SAAS,MAAM,EAAE,WAAW,KAAK,CAAC,MAAM;;;;OAI7D,CAAC;YACF,OAAO,OAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,iCAAiC,CAAC,CAAC;QACnF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAgD,CAAC;QACnG,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnF,MAAM,MAAM,GAAG,OAAO,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,qCAAqC,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,uBAAuB,CAAC,CAAC;QAE9F,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAO;;;mBAGf,IAAI,IAAI,GAAG,CAAA,MAAM;wBACZ,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAA,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA,MAAM;;qBAErE,EAAE,uBAAuB,KAAK,CAAC,KAAK;;;;;;;;KAQpD,CAAC;QACF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}