@storyshelf/app 0.5.3

package/dist/routers/health-report.mjs

@@ -0,0 +1,159 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { sanitizeErrorText } from "@storyshelf/core/utils";
+//#region src/routers/health-report.ts
+const PROBE_TIMEOUT_MS = 2e3;
+const DETAIL_MAX_LENGTH = 500;
+function pushTarget(targets, adapter) {
+	if (adapter) targets.push(adapter);
+}
+function pushAll(targets, adapters) {
+	for (const adapter of adapters) pushTarget(targets, adapter);
+}
+function targetsOf(sources) {
+	const targets = [];
+	pushAll(targets, [
+		sources.database,
+		sources.storage,
+		sources.captureRunner,
+		sources.captureQueue
+	]);
+	pushAll(targets, sources.gitHosts ?? []);
+	pushAll(targets, sources.notifiers ?? []);
+	pushTarget(targets, sources.emailSender);
+	return targets;
+}
+function sanitize(detail) {
+	return sanitizeErrorText(detail, DETAIL_MAX_LENGTH);
+}
+function messageOf(reason) {
+	return sanitize(reason instanceof Error ? reason.message : String(reason));
+}
+async function timeoutError() {
+	await new Promise((resolve) => {
+		setTimeout(resolve, PROBE_TIMEOUT_MS);
+	});
+	throw new Error("health probe timed out");
+}
+function baseReport(target) {
+	const { category, kind, name, version, description } = target.metadata;
+	return {
+		category,
+		kind,
+		name,
+		version,
+		...description === void 0 ? {} : { description },
+		hasLifecycle: target.lifecycle?.health !== void 0
+	};
+}
+function okReport(target, latencyMs, detail) {
+	return {
+		...baseReport(target),
+		state: "ok",
+		latencyMs,
+		...detail === void 0 ? {} : { detail }
+	};
+}
+function failedReport(target, latencyMs, detail) {
+	return {
+		...baseReport(target),
+		state: "failed",
+		latencyMs,
+		detail
+	};
+}
+function setupFailedReport(target, detail) {
+	return {
+		...baseReport(target),
+		state: "failed",
+		detail
+	};
+}
+function startingReport(target) {
+	return {
+		...baseReport(target),
+		state: "starting"
+	};
+}
+function noLifecycleReport(target) {
+	return {
+		...baseReport(target),
+		state: "ok"
+	};
+}
+function detailOf(result, fallback) {
+	return result.detail === void 0 ? fallback : sanitize(result.detail);
+}
+async function raceProbe(target, probe, started) {
+	try {
+		const result = await Promise.race([probe(), timeoutError()]);
+		const latencyMs = Date.now() - started;
+		if (!result.ok) return failedReport(target, latencyMs, detailOf(result, "probe reported failure"));
+		return okReport(target, latencyMs, result.detail === void 0 ? void 0 : sanitize(result.detail));
+	} catch (error) {
+		return failedReport(target, Date.now() - started, messageOf(error));
+	}
+}
+async function probeHealth(target) {
+	const probe = target.lifecycle?.health;
+	if (!probe) return noLifecycleReport(target);
+	return await raceProbe(target, probe, Date.now());
+}
+async function probeTarget(target, setupErrors, starting) {
+	const setupError = setupErrors.get(`${target.metadata.category}/${target.metadata.kind}`);
+	if (setupError !== void 0) return setupFailedReport(target, sanitize(setupError));
+	if (starting) return startingReport(target);
+	return await probeHealth(target);
+}
+function collectSetupErrors(settled) {
+	const setupErrors = /* @__PURE__ */ new Map();
+	if (settled) for (const failure of settled.failures) setupErrors.set(`${failure.category}/${failure.kind}`, failure.error);
+	return setupErrors;
+}
+function overallStatus(reports) {
+	if (reports.some((report) => report.state === "failed")) return "degraded";
+	if (reports.some((report) => report.state === "starting")) return "starting";
+	return "ok";
+}
+/** Pseudo-adapter entry reporting whether stored credentials decrypt with the configured secret. */
+function credentialsEntry(probe) {
+	const unreadable = probe.unreadable.length;
+	let detail;
+	if (unreadable > 0) detail = `${unreadable} stored credential(s) cannot be decrypted; check SECRET and SECRET_PREVIOUS`;
+	else if (probe.previous > 0) detail = `${probe.previous} credential(s) still encrypted with the previous secret; re-encrypt from the System page`;
+	return {
+		category: "credentials",
+		kind: "secret",
+		name: "Credential encryption",
+		version: "-",
+		hasLifecycle: false,
+		state: unreadable > 0 ? "failed" : "ok",
+		...detail === void 0 ? {} : { detail }
+	};
+}
+/**
+* Probe every wired adapter and assemble the full health report.
+*
+* @param sources - Live adapter instances to probe.
+* @param settled - Setup settlement (null while the eager run is in flight).
+* @param bootTimeMs - Process boot timestamp for uptime.
+* @param version - Server version for the report header.
+* @param credentials - Stored-credential probe (omit when no secret is configured).
+*/
+async function collectHealthReport(sources, settled, bootTimeMs, version, credentials) {
+	const setupErrors = collectSetupErrors(settled);
+	const targets = targetsOf(sources);
+	const adapters = await Promise.all(targets.map(async (target) => await probeTarget(target, setupErrors, settled === null)));
+	if (credentials) adapters.push(credentialsEntry(credentials));
+	return {
+		status: overallStatus(adapters),
+		uptimeSecs: Math.floor((Date.now() - bootTimeMs) / 1e3),
+		version,
+		adapters
+	};
+}
+//#endregion
+export { collectHealthReport };
+
+//# sourceMappingURL=health-report.mjs.map

package/dist/routers/health-report.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-report.mjs","names":[],"sources":["../../src/routers/health-report.ts"],"sourcesContent":["import type {\n  AdapterHealth,\n  AdapterLifecycle,\n  AdapterMetadata,\n} from \"@storyshelf/core/adapter/metadata\";\n/**\n * Shared adapter health probing for the JSON API and the admin System page.\n *\n * `POST /api/v1/health` and `GET /admin` both consume\n * {@link collectHealthReport}; the API strips the page-only metadata fields\n * so its response shape never changes. Probes stay parallel, time-bounded,\n * and secret-free (details are truncated, never raw config).\n */\nimport type { AdapterSetupResult, AdapterSetupSources } from \"@storyshelf/core/adapter/setup\";\nimport type { CredentialProbe } from \"@storyshelf/core/models\";\nimport { sanitizeErrorText } from \"@storyshelf/core/utils\";\n\nexport type AdapterState = \"ok\" | \"starting\" | \"failed\";\n\n/** Per-adapter readiness entry with identity for the admin page. */\nexport interface AdapterReportFull {\n  category: string;\n  kind: string;\n  name: string;\n  version: string;\n  description?: string;\n  hasLifecycle: boolean;\n  state: AdapterState;\n  latencyMs?: number;\n  detail?: string;\n}\n\n/** Collected health report: overall status plus one entry per adapter. */\nexport interface HealthReport {\n  status: \"ok\" | \"starting\" | \"degraded\";\n  uptimeSecs: number;\n  version: string;\n  adapters: AdapterReportFull[];\n}\n\ninterface ProbeTarget {\n  readonly metadata: AdapterMetadata;\n  readonly lifecycle?: AdapterLifecycle;\n}\n\nconst PROBE_TIMEOUT_MS = 2000;\nconst DETAIL_MAX_LENGTH = 500;\n\nfunction pushTarget(targets: ProbeTarget[], adapter: ProbeTarget | undefined): void {\n  if (adapter) {\n    targets.push(adapter);\n  }\n}\n\nfunction pushAll(targets: ProbeTarget[], adapters: ReadonlyArray<ProbeTarget | undefined>): void {\n  for (const adapter of adapters) {\n    pushTarget(targets, adapter);\n  }\n}\n\nfunction targetsOf(sources: AdapterSetupSources): ProbeTarget[] {\n  const targets: ProbeTarget[] = [];\n  pushAll(targets, [\n    sources.database,\n    sources.storage,\n    sources.captureRunner,\n    sources.captureQueue,\n  ]);\n  pushAll(targets, sources.gitHosts ?? []);\n  pushAll(targets, sources.notifiers ?? []);\n  pushTarget(targets, sources.emailSender);\n  return targets;\n}\n\nfunction sanitize(detail: string): string {\n  return sanitizeErrorText(detail, DETAIL_MAX_LENGTH);\n}\n\nfunction messageOf(reason: unknown): string {\n  const message = reason instanceof Error ? reason.message : String(reason);\n  return sanitize(message);\n}\n\nasync function timeoutError(): Promise<never> {\n  await new Promise<void>((resolve) => {\n    setTimeout(resolve, PROBE_TIMEOUT_MS);\n  });\n  throw new Error(\"health probe timed out\");\n}\n\nfunction baseReport(\n  target: ProbeTarget,\n): Omit<AdapterReportFull, \"state\" | \"latencyMs\" | \"detail\"> {\n  const { category, kind, name, version, description } = target.metadata;\n  return {\n    category,\n    kind,\n    name,\n    version,\n    ...(description === undefined ? {} : { description }),\n    hasLifecycle: target.lifecycle?.health !== undefined,\n  };\n}\n\nfunction okReport(\n  target: ProbeTarget,\n  latencyMs: number,\n  detail: string | undefined,\n): AdapterReportFull {\n  return {\n    ...baseReport(target),\n    state: \"ok\",\n    latencyMs,\n    ...(detail === undefined ? {} : { detail }),\n  };\n}\n\nfunction failedReport(target: ProbeTarget, latencyMs: number, detail: string): AdapterReportFull {\n  return { ...baseReport(target), state: \"failed\", latencyMs, detail };\n}\n\nfunction setupFailedReport(target: ProbeTarget, detail: string): AdapterReportFull {\n  return { ...baseReport(target), state: \"failed\", detail };\n}\n\nfunction startingReport(target: ProbeTarget): AdapterReportFull {\n  return { ...baseReport(target), state: \"starting\" };\n}\n\nfunction noLifecycleReport(target: ProbeTarget): AdapterReportFull {\n  return { ...baseReport(target), state: \"ok\" };\n}\n\nfunction detailOf(result: AdapterHealth, fallback: string): string {\n  return result.detail === undefined ? fallback : sanitize(result.detail);\n}\n\nasync function raceProbe(\n  target: ProbeTarget,\n  probe: () => Promise<AdapterHealth>,\n  started: number,\n): Promise<AdapterReportFull> {\n  try {\n    const result = await Promise.race([probe(), timeoutError()]);\n    const latencyMs = Date.now() - started;\n    if (!result.ok) {\n      return failedReport(target, latencyMs, detailOf(result, \"probe reported failure\"));\n    }\n    return okReport(\n      target,\n      latencyMs,\n      result.detail === undefined ? undefined : sanitize(result.detail),\n    );\n  } catch (error) {\n    return failedReport(target, Date.now() - started, messageOf(error));\n  }\n}\n\nasync function probeHealth(target: ProbeTarget): Promise<AdapterReportFull> {\n  const probe = target.lifecycle?.health;\n  if (!probe) {\n    return noLifecycleReport(target);\n  }\n  return await raceProbe(target, probe, Date.now());\n}\n\nasync function probeTarget(\n  target: ProbeTarget,\n  setupErrors: ReadonlyMap<string, string>,\n  starting: boolean,\n): Promise<AdapterReportFull> {\n  const setupError = setupErrors.get(`${target.metadata.category}/${target.metadata.kind}`);\n  if (setupError !== undefined) {\n    return setupFailedReport(target, sanitize(setupError));\n  }\n  if (starting) {\n    return startingReport(target);\n  }\n  return await probeHealth(target);\n}\n\nfunction collectSetupErrors(settled: AdapterSetupResult | null): ReadonlyMap<string, string> {\n  const setupErrors = new Map<string, string>();\n  if (settled) {\n    for (const failure of settled.failures) {\n      setupErrors.set(`${failure.category}/${failure.kind}`, failure.error);\n    }\n  }\n  return setupErrors;\n}\n\nfunction overallStatus(reports: AdapterReportFull[]): HealthReport[\"status\"] {\n  if (reports.some((report) => report.state === \"failed\")) {\n    return \"degraded\";\n  }\n  if (reports.some((report) => report.state === \"starting\")) {\n    return \"starting\";\n  }\n  return \"ok\";\n}\n\n/** Pseudo-adapter entry reporting whether stored credentials decrypt with the configured secret. */\nfunction credentialsEntry(probe: CredentialProbe): AdapterReportFull {\n  const unreadable = probe.unreadable.length;\n  let detail: string | undefined;\n  if (unreadable > 0) {\n    detail = `${unreadable} stored credential(s) cannot be decrypted; check SECRET and SECRET_PREVIOUS`;\n  } else if (probe.previous > 0) {\n    detail = `${probe.previous} credential(s) still encrypted with the previous secret; re-encrypt from the System page`;\n  }\n  return {\n    category: \"credentials\",\n    kind: \"secret\",\n    name: \"Credential encryption\",\n    version: \"-\",\n    hasLifecycle: false,\n    state: unreadable > 0 ? \"failed\" : \"ok\",\n    ...(detail === undefined ? {} : { detail }),\n  };\n}\n\n/**\n * Probe every wired adapter and assemble the full health report.\n *\n * @param sources - Live adapter instances to probe.\n * @param settled - Setup settlement (null while the eager run is in flight).\n * @param bootTimeMs - Process boot timestamp for uptime.\n * @param version - Server version for the report header.\n * @param credentials - Stored-credential probe (omit when no secret is configured).\n */\nexport async function collectHealthReport(\n  sources: AdapterSetupSources,\n  settled: AdapterSetupResult | null,\n  bootTimeMs: number,\n  version: string,\n  credentials?: CredentialProbe | null,\n): Promise<HealthReport> {\n  const setupErrors = collectSetupErrors(settled);\n  const targets = targetsOf(sources);\n  const adapters = await Promise.all(\n    targets.map(async (target) => await probeTarget(target, setupErrors, settled === null)),\n  );\n  if (credentials) {\n    adapters.push(credentialsEntry(credentials));\n  }\n  return {\n    status: overallStatus(adapters),\n    uptimeSecs: Math.floor((Date.now() - bootTimeMs) / 1000),\n    version,\n    adapters,\n  };\n}\n"],"mappings":";;;;;AA6CA,MAAM,mBAAmB;AACzB,MAAM,oBAAoB;AAE1B,SAAS,WAAW,SAAwB,SAAwC;CAClF,IAAI,SACF,QAAQ,KAAK,OAAO;AAExB;AAEA,SAAS,QAAQ,SAAwB,UAAwD;CAC/F,KAAK,MAAM,WAAW,UACpB,WAAW,SAAS,OAAO;AAE/B;AAEA,SAAS,UAAU,SAA6C;CAC9D,MAAM,UAAyB,CAAC;CAChC,QAAQ,SAAS;EACf,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;CACV,CAAC;CACD,QAAQ,SAAS,QAAQ,YAAY,CAAC,CAAC;CACvC,QAAQ,SAAS,QAAQ,aAAa,CAAC,CAAC;CACxC,WAAW,SAAS,QAAQ,WAAW;CACvC,OAAO;AACT;AAEA,SAAS,SAAS,QAAwB;CACxC,OAAO,kBAAkB,QAAQ,iBAAiB;AACpD;AAEA,SAAS,UAAU,QAAyB;CAE1C,OAAO,SADS,kBAAkB,QAAQ,OAAO,UAAU,OAAO,MAAM,CACjD;AACzB;AAEA,eAAe,eAA+B;CAC5C,MAAM,IAAI,SAAe,YAAY;EACnC,WAAW,SAAS,gBAAgB;CACtC,CAAC;CACD,MAAM,IAAI,MAAM,wBAAwB;AAC1C;AAEA,SAAS,WACP,QAC2D;CAC3D,MAAM,EAAE,UAAU,MAAM,MAAM,SAAS,gBAAgB,OAAO;CAC9D,OAAO;EACL;EACA;EACA;EACA;EACA,GAAI,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;EACnD,cAAc,OAAO,WAAW,WAAW,KAAA;CAC7C;AACF;AAEA,SAAS,SACP,QACA,WACA,QACmB;CACnB,OAAO;EACL,GAAG,WAAW,MAAM;EACpB,OAAO;EACP;EACA,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;CAC3C;AACF;AAEA,SAAS,aAAa,QAAqB,WAAmB,QAAmC;CAC/F,OAAO;EAAE,GAAG,WAAW,MAAM;EAAG,OAAO;EAAU;EAAW;CAAO;AACrE;AAEA,SAAS,kBAAkB,QAAqB,QAAmC;CACjF,OAAO;EAAE,GAAG,WAAW,MAAM;EAAG,OAAO;EAAU;CAAO;AAC1D;AAEA,SAAS,eAAe,QAAwC;CAC9D,OAAO;EAAE,GAAG,WAAW,MAAM;EAAG,OAAO;CAAW;AACpD;AAEA,SAAS,kBAAkB,QAAwC;CACjE,OAAO;EAAE,GAAG,WAAW,MAAM;EAAG,OAAO;CAAK;AAC9C;AAEA,SAAS,SAAS,QAAuB,UAA0B;CACjE,OAAO,OAAO,WAAW,KAAA,IAAY,WAAW,SAAS,OAAO,MAAM;AACxE;AAEA,eAAe,UACb,QACA,OACA,SAC4B;CAC5B,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC;EAC3D,MAAM,YAAY,KAAK,IAAI,IAAI;EAC/B,IAAI,CAAC,OAAO,IACV,OAAO,aAAa,QAAQ,WAAW,SAAS,QAAQ,wBAAwB,CAAC;EAEnF,OAAO,SACL,QACA,WACA,OAAO,WAAW,KAAA,IAAY,KAAA,IAAY,SAAS,OAAO,MAAM,CAClE;CACF,SAAS,OAAO;EACd,OAAO,aAAa,QAAQ,KAAK,IAAI,IAAI,SAAS,UAAU,KAAK,CAAC;CACpE;AACF;AAEA,eAAe,YAAY,QAAiD;CAC1E,MAAM,QAAQ,OAAO,WAAW;CAChC,IAAI,CAAC,OACH,OAAO,kBAAkB,MAAM;CAEjC,OAAO,MAAM,UAAU,QAAQ,OAAO,KAAK,IAAI,CAAC;AAClD;AAEA,eAAe,YACb,QACA,aACA,UAC4B;CAC5B,MAAM,aAAa,YAAY,IAAI,GAAG,OAAO,SAAS,SAAS,GAAG,OAAO,SAAS,MAAM;CACxF,IAAI,eAAe,KAAA,GACjB,OAAO,kBAAkB,QAAQ,SAAS,UAAU,CAAC;CAEvD,IAAI,UACF,OAAO,eAAe,MAAM;CAE9B,OAAO,MAAM,YAAY,MAAM;AACjC;AAEA,SAAS,mBAAmB,SAAiE;CAC3F,MAAM,8BAAc,IAAI,IAAoB;CAC5C,IAAI,SACF,KAAK,MAAM,WAAW,QAAQ,UAC5B,YAAY,IAAI,GAAG,QAAQ,SAAS,GAAG,QAAQ,QAAQ,QAAQ,KAAK;CAGxE,OAAO;AACT;AAEA,SAAS,cAAc,SAAsD;CAC3E,IAAI,QAAQ,MAAM,WAAW,OAAO,UAAU,QAAQ,GACpD,OAAO;CAET,IAAI,QAAQ,MAAM,WAAW,OAAO,UAAU,UAAU,GACtD,OAAO;CAET,OAAO;AACT;;AAGA,SAAS,iBAAiB,OAA2C;CACnE,MAAM,aAAa,MAAM,WAAW;CACpC,IAAI;CACJ,IAAI,aAAa,GACf,SAAS,GAAG,WAAW;MAClB,IAAI,MAAM,WAAW,GAC1B,SAAS,GAAG,MAAM,SAAS;CAE7B,OAAO;EACL,UAAU;EACV,MAAM;EACN,MAAM;EACN,SAAS;EACT,cAAc;EACd,OAAO,aAAa,IAAI,WAAW;EACnC,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;CAC3C;AACF;;;;;;;;;;AAWA,eAAsB,oBACpB,SACA,SACA,YACA,SACA,aACuB;CACvB,MAAM,cAAc,mBAAmB,OAAO;CAC9C,MAAM,UAAU,UAAU,OAAO;CACjC,MAAM,WAAW,MAAM,QAAQ,IAC7B,QAAQ,IAAI,OAAO,WAAW,MAAM,YAAY,QAAQ,aAAa,YAAY,IAAI,CAAC,CACxF;CACA,IAAI,aACF,SAAS,KAAK,iBAAiB,WAAW,CAAC;CAE7C,OAAO;EACL,QAAQ,cAAc,QAAQ;EAC9B,YAAY,KAAK,OAAO,KAAK,IAAI,IAAI,cAAc,GAAI;EACvD;EACA;CACF;AACF"}

package/dist/routers/health.mjs

@@ -0,0 +1,46 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { loadCredentialProbe } from "../credentials.mjs";
+import { collectHealthReport } from "./health-report.mjs";
+import { requireSiteAdmin } from "./helpers.mjs";
+//#region src/routers/health.ts
+/** Register `GET /api/v1/health` (open liveness) and `POST` (authed deep readiness). */
+function registerHealth(app, deps) {
+	app.get("/api/v1/health", (c) => {
+		const body = {
+			status: "ok",
+			uptimeSecs: Math.floor((Date.now() - deps.bootTimeMs) / 1e3),
+			version: deps.version
+		};
+		c.header("Cache-Control", "no-store");
+		return c.json(body);
+	});
+	app.post("/api/v1/health", async (c) => {
+		requireSiteAdmin(c);
+		const { db, config } = getStore();
+		const report = await collectHealthReport(deps.sources, deps.getSettled(), deps.bootTimeMs, deps.version, await loadCredentialProbe(db, config));
+		const adapters = report.adapters.map((adapter) => {
+			const entry = {
+				category: adapter.category,
+				kind: adapter.kind,
+				name: adapter.name,
+				state: adapter.state
+			};
+			if (adapter.latencyMs !== void 0) entry.latencyMs = adapter.latencyMs;
+			if (adapter.detail !== void 0) entry.detail = adapter.detail;
+			return entry;
+		});
+		const body = {
+			status: report.status,
+			adapters
+		};
+		c.header("Cache-Control", "no-store");
+		return c.json(body, body.status === "ok" ? 200 : 503);
+	});
+}
+//#endregion
+export { registerHealth };
+
+//# sourceMappingURL=health.mjs.map

package/dist/routers/health.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.mjs","names":[],"sources":["../../src/routers/health.ts"],"sourcesContent":["/**\n * Two-tier health: lightweight liveness (GET, no auth) and deep readiness\n * (POST, site-admin). Neither is gated by adapter setup — liveness must\n * answer mid-migration so orchestrators don't kill the machine, and deep\n * reports the setup settlement state instead of being masked by the gate.\n *\n * Probing lives in `health-report.ts` (shared with the admin System page);\n * this module keeps the API response shape stable.\n */\nimport type { AdapterSetupResult, AdapterSetupSources } from \"@storyshelf/core/adapter/setup\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { loadCredentialProbe } from \"../credentials.ts\";\nimport { getStore } from \"../store.ts\";\nimport { collectHealthReport, type AdapterState } from \"./health-report.ts\";\nimport { requireSiteAdmin } from \"./helpers.ts\";\n\n/** Dependencies for the health routes (no adapter I/O on the GET path). */\nexport interface HealthDeps {\n  sources: AdapterSetupSources;\n  getSettled: () => AdapterSetupResult | null;\n  bootTimeMs: number;\n  version: string;\n}\n\n/** Liveness body: process-level only, safe for unauthenticated probes. */\nexport interface LivenessBody {\n  status: \"ok\";\n  uptimeSecs: number;\n  version: string;\n}\n\n/** Per-adapter readiness entry (error text sanitized — no secrets). */\nexport interface AdapterReport {\n  category: string;\n  kind: string;\n  name: string;\n  state: AdapterState;\n  latencyMs?: number;\n  detail?: string;\n}\n\n/** Deep readiness body. */\nexport interface ReadinessBody {\n  status: \"ok\" | \"starting\" | \"degraded\";\n  adapters: AdapterReport[];\n}\n\n/** Register `GET /api/v1/health` (open liveness) and `POST` (authed deep readiness). */\nexport function registerHealth(app: ShelfRouter, deps: HealthDeps): void {\n  app.get(\"/api/v1/health\", (c) => {\n    const body: LivenessBody = {\n      status: \"ok\",\n      uptimeSecs: Math.floor((Date.now() - deps.bootTimeMs) / 1000),\n      version: deps.version,\n    };\n    c.header(\"Cache-Control\", \"no-store\");\n    return c.json(body);\n  });\n\n  app.post(\"/api/v1/health\", async (c) => {\n    requireSiteAdmin(c);\n    const { db, config } = getStore();\n    const report = await collectHealthReport(\n      deps.sources,\n      deps.getSettled(),\n      deps.bootTimeMs,\n      deps.version,\n      await loadCredentialProbe(db, config),\n    );\n    const adapters: AdapterReport[] = report.adapters.map((adapter) => {\n      const entry: AdapterReport = {\n        category: adapter.category,\n        kind: adapter.kind,\n        name: adapter.name,\n        state: adapter.state,\n      };\n      if (adapter.latencyMs !== undefined) {\n        entry.latencyMs = adapter.latencyMs;\n      }\n      if (adapter.detail !== undefined) {\n        entry.detail = adapter.detail;\n      }\n      return entry;\n    });\n    const body: ReadinessBody = { status: report.status, adapters };\n    c.header(\"Cache-Control\", \"no-store\");\n    return c.json(body, body.status === \"ok\" ? 200 : 503);\n  });\n}\n"],"mappings":";;;;;;;;;AAgDA,SAAgB,eAAe,KAAkB,MAAwB;CACvE,IAAI,IAAI,mBAAmB,MAAM;EAC/B,MAAM,OAAqB;GACzB,QAAQ;GACR,YAAY,KAAK,OAAO,KAAK,IAAI,IAAI,KAAK,cAAc,GAAI;GAC5D,SAAS,KAAK;EAChB;EACA,EAAE,OAAO,iBAAiB,UAAU;EACpC,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,KAAK,kBAAkB,OAAO,MAAM;EACtC,iBAAiB,CAAC;EAClB,MAAM,EAAE,IAAI,WAAW,SAAS;EAChC,MAAM,SAAS,MAAM,oBACnB,KAAK,SACL,KAAK,WAAW,GAChB,KAAK,YACL,KAAK,SACL,MAAM,oBAAoB,IAAI,MAAM,CACtC;EACA,MAAM,WAA4B,OAAO,SAAS,KAAK,YAAY;GACjE,MAAM,QAAuB;IAC3B,UAAU,QAAQ;IAClB,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd,OAAO,QAAQ;GACjB;GACA,IAAI,QAAQ,cAAc,KAAA,GACxB,MAAM,YAAY,QAAQ;GAE5B,IAAI,QAAQ,WAAW,KAAA,GACrB,MAAM,SAAS,QAAQ;GAEzB,OAAO;EACT,CAAC;EACD,MAAM,OAAsB;GAAE,QAAQ,OAAO;GAAQ;EAAS;EAC9D,EAAE,OAAO,iBAAiB,UAAU;EACpC,OAAO,EAAE,KAAK,MAAM,KAAK,WAAW,OAAO,MAAM,GAAG;CACtD,CAAC;AACH"}

package/dist/routers/helpers.mjs

@@ -0,0 +1,110 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { MemberModel, ProjectModel, TokenModel, UserModel } from "@storyshelf/core/models";
+import { sha256, timingSafeEqualString } from "@storyshelf/core/utils";
+import { HTTPException } from "hono/http-exception";
+//#region src/routers/helpers.ts
+/** Throw a 401 Unauthorized error for unauthenticated requests. */
+function unauthorized() {
+	throw new HTTPException(401, { message: "Unauthorized" });
+}
+/** Throw a 403 Forbidden error for requests lacking the required role. */
+function forbidden() {
+	throw new HTTPException(403, { message: "Forbidden" });
+}
+/** Throw a 404 Not Found error with a custom message. */
+function notFound(message = "Not found") {
+	throw new HTTPException(404, { message });
+}
+/** Resolve the current session user's effective role on a project. */
+async function currentProjectRole(projectId) {
+	const { db, user } = getStore();
+	if (!user) return null;
+	return await new MemberModel(db).effectiveRole(user.role, projectId, user.id);
+}
+/** Look up a project by its URL slug, returning null when absent. */
+async function findProjectBySlug(slug) {
+	const { db } = getStore();
+	return await new ProjectModel(db).getBySlug(slug);
+}
+async function resolveProjectByToken(c, slug) {
+	const authHeader = c.req.header("authorization");
+	if (authHeader?.startsWith("Bearer ")) {
+		const token = authHeader.slice(7);
+		const found = await new TokenModel(getStore().db).findByHash(sha256(token));
+		if (!found) unauthorized();
+		const project = await new ProjectModel(getStore().db).get(found.projectId);
+		if (!project || project.slug !== slug) forbidden();
+		return {
+			project,
+			token: found
+		};
+	}
+	return null;
+}
+/**
+* Resolve a bearer token to an effective project role.
+* Tokens without an owner (legacy pre-binding rows) resolve as viewer;
+* tokens whose owner no longer exists resolve to null (deny).
+*/
+async function tokenProjectRole(token, projectId) {
+	if (!token.userId) return "viewer";
+	const { db } = getStore();
+	const user = await new UserModel(db).get(token.userId);
+	if (!user) return null;
+	return await new MemberModel(db).effectiveRole(user.role, projectId, user.id);
+}
+/**
+* True when the request bears the configured bootstrap admin token.
+* Covers site-admin routes AND project routes (as admin) so a fresh
+* instance is fully operable before any user exists. Timing-safe;
+* unset `adminToken` never matches.
+*/
+function requestHasAdminToken(c) {
+	const adminToken = getStore().config.adminToken;
+	if (!adminToken) return false;
+	const header = c.req.header("authorization");
+	if (!header?.startsWith("Bearer ")) return false;
+	return timingSafeEqualString(header.slice(7), adminToken);
+}
+/**
+* Enforce the caller's project role for a given project.
+*
+* Authorization model (ADR 0008):
+* - No auth adapter configured -> all operations permitted (development mode).
+* - Bootstrap admin token -> grants access as admin (see `requestHasAdminToken`).
+* - Bearer token (CLI) -> grants access to its own project regardless of role.
+* - Session user -> must have an effective role in `minRoles`.
+*/
+async function assertRole(projectId, ...minRoles) {
+	if (!getStore().authEnabled) return;
+	const role = await currentProjectRole(projectId);
+	if (!role || !minRoles.includes(role)) forbidden();
+}
+/** Resolve a project by slug and enforce the caller's minimum role. */
+async function resolveAuthorizedProject(c, slug, ...minRoles) {
+	const viaToken = await resolveProjectByToken(c, slug);
+	if (viaToken) {
+		const role = await tokenProjectRole(viaToken.token, viaToken.project.id);
+		if (!role || !minRoles.includes(role)) forbidden();
+		return viaToken.project;
+	}
+	const found = await findProjectBySlug(slug);
+	if (!found) notFound("Project not found");
+	if (requestHasAdminToken(c)) return found;
+	await assertRole(found.id, ...minRoles);
+	return found;
+}
+/** Require a site-level admin (or permit when auth is disabled). */
+function requireSiteAdmin(c) {
+	if (!getStore().authEnabled) return;
+	const { user } = getStore();
+	if (user?.role === "admin" || requestHasAdminToken(c)) return;
+	forbidden();
+}
+//#endregion
+export { assertRole, currentProjectRole, findProjectBySlug, forbidden, notFound, requestHasAdminToken, requireSiteAdmin, resolveAuthorizedProject, unauthorized };
+
+//# sourceMappingURL=helpers.mjs.map

package/dist/routers/helpers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.mjs","names":[],"sources":["../../src/routers/helpers.ts"],"sourcesContent":["import { MemberModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { TokenModel } from \"@storyshelf/core/models\";\nimport { UserModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Token } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { sha256, timingSafeEqualString } from \"@storyshelf/core/utils\";\nimport type { Context, Next } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ContentfulStatusCode } from \"hono/utils/http-status\";\nimport type { ZodType } from \"zod\";\nimport { getStore } from \"../store.ts\";\n/** Send a JSON response with the given status code. */\nexport function json(c: Context, data: unknown, status: ContentfulStatusCode = 200): Response {\n  return c.json(data, status);\n}\n\n/** Parse the request body as JSON and validate it against a Zod schema. */\nexport async function validJson<T>(c: Context, schema: ZodType<T>): Promise<T> {\n  const result = schema.safeParse(await c.req.json());\n  if (!result.success) {\n    throw new HTTPException(400, { message: result.error.message });\n  }\n  return result.data;\n}\n\n/** Throw a 401 Unauthorized error for unauthenticated requests. */\nexport function unauthorized(): never {\n  throw new HTTPException(401, { message: \"Unauthorized\" });\n}\n\n/** Throw a 403 Forbidden error for requests lacking the required role. */\nexport function forbidden(): never {\n  throw new HTTPException(403, { message: \"Forbidden\" });\n}\n\n/** Throw a 404 Not Found error with a custom message. */\nexport function notFound(message = \"Not found\"): never {\n  throw new HTTPException(404, { message });\n}\n\n/** Resolve the current session user's effective role on a project. */\nexport async function currentProjectRole(projectId: string): Promise<ProjectRole | null> {\n  const { db, user } = getStore();\n  if (!user) {\n    return null;\n  }\n  return await new MemberModel(db).effectiveRole(user.role, projectId, user.id);\n}\n\n/** Build middleware that requires one of the given project roles. */\nexport function requireRole(...roles: ProjectRole[]) {\n  return async (c: Context, next: Next): Promise<void> => {\n    const projectId = c.req.param(\"projectId\") ?? c.req.param(\"slug\");\n    if (!projectId) {\n      forbidden();\n    }\n    const role = await currentProjectRole(projectId);\n    if (!role || !roles.includes(role)) {\n      forbidden();\n    }\n    await next();\n  };\n}\n\n/** Look up a project by its URL slug, returning null when absent. */\nexport async function findProjectBySlug(slug: string): Promise<Project | null> {\n  const { db } = getStore();\n  return await new ProjectModel(db).getBySlug(slug);\n}\n\nasync function resolveProjectByToken(\n  c: Context,\n  slug: string,\n): Promise<{ project: Project; token: Token } | null> {\n  const authHeader = c.req.header(\"authorization\");\n  if (authHeader?.startsWith(\"Bearer \")) {\n    const token = authHeader.slice(\"Bearer \".length);\n    const found = await new TokenModel(getStore().db).findByHash(sha256(token));\n    if (!found) {\n      unauthorized();\n    }\n    const project = await new ProjectModel(getStore().db).get(found.projectId);\n    if (!project || project.slug !== slug) {\n      forbidden();\n    }\n    return { project, token: found };\n  }\n  return null;\n}\n\n/**\n * Resolve a bearer token to an effective project role.\n * Tokens without an owner (legacy pre-binding rows) resolve as viewer;\n * tokens whose owner no longer exists resolve to null (deny).\n */\nasync function tokenProjectRole(token: Token, projectId: string): Promise<ProjectRole | null> {\n  if (!token.userId) {\n    return \"viewer\";\n  }\n  const { db } = getStore();\n  const user = await new UserModel(db).get(token.userId);\n  if (!user) {\n    return null;\n  }\n  return await new MemberModel(db).effectiveRole(user.role, projectId, user.id);\n}\n\n/** Resolve a project by slug, honoring CLI bearer-token access. */\nexport async function resolveProject(c: Context, slug: string): Promise<Project> {\n  const viaToken = await resolveProjectByToken(c, slug);\n  if (viaToken) {\n    return viaToken.project;\n  }\n  const found = await findProjectBySlug(slug);\n  if (!found) {\n    notFound(\"Project not found\");\n  }\n  return found;\n}\n\n/**\n * True when the request bears the configured bootstrap admin token.\n * Covers site-admin routes AND project routes (as admin) so a fresh\n * instance is fully operable before any user exists. Timing-safe;\n * unset `adminToken` never matches.\n */\nexport function requestHasAdminToken(c: Context): boolean {\n  const adminToken = getStore().config.adminToken;\n  if (!adminToken) {\n    return false;\n  }\n  const header = c.req.header(\"authorization\");\n  if (!header?.startsWith(\"Bearer \")) {\n    return false;\n  }\n  return timingSafeEqualString(header.slice(\"Bearer \".length), adminToken);\n}\n\n/**\n * Enforce the caller's project role for a given project.\n *\n * Authorization model (ADR 0008):\n * - No auth adapter configured -> all operations permitted (development mode).\n * - Bootstrap admin token -> grants access as admin (see `requestHasAdminToken`).\n * - Bearer token (CLI) -> grants access to its own project regardless of role.\n * - Session user -> must have an effective role in `minRoles`.\n */\nexport async function assertRole(projectId: string, ...minRoles: ProjectRole[]): Promise<void> {\n  if (!getStore().authEnabled) {\n    return;\n  }\n  const role = await currentProjectRole(projectId);\n  if (!role || !minRoles.includes(role)) {\n    forbidden();\n  }\n}\n\n/** Resolve a project by slug and enforce the caller's minimum role. */\nexport async function resolveAuthorizedProject(\n  c: Context,\n  slug: string,\n  ...minRoles: ProjectRole[]\n): Promise<Project> {\n  const viaToken = await resolveProjectByToken(c, slug);\n  if (viaToken) {\n    const role = await tokenProjectRole(viaToken.token, viaToken.project.id);\n    if (!role || !minRoles.includes(role)) {\n      forbidden();\n    }\n    return viaToken.project;\n  }\n  const found = await findProjectBySlug(slug);\n  if (!found) {\n    notFound(\"Project not found\");\n  }\n  if (requestHasAdminToken(c)) {\n    return found;\n  }\n  await assertRole(found.id, ...minRoles);\n  return found;\n}\n\n/** Require a site-level admin (or permit when auth is disabled). */\nexport function requireSiteAdmin(c: Context): void {\n  if (!getStore().authEnabled) {\n    return;\n  }\n  const { user } = getStore();\n  if (user?.role === \"admin\" || requestHasAdminToken(c)) {\n    return;\n  }\n  forbidden();\n}\n\n/** Require the current session user to hold one of the given project roles. */\nexport async function requireProjectRole(\n  projectId: string,\n  ...minRoles: ProjectRole[]\n): Promise<void> {\n  await assertRole(projectId, ...minRoles);\n}\n"],"mappings":";;;;;;;;;AA4BA,SAAgB,eAAsB;CACpC,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,eAAe,CAAC;AAC1D;;AAGA,SAAgB,YAAmB;CACjC,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,YAAY,CAAC;AACvD;;AAGA,SAAgB,SAAS,UAAU,aAAoB;CACrD,MAAM,IAAI,cAAc,KAAK,EAAE,QAAQ,CAAC;AAC1C;;AAGA,eAAsB,mBAAmB,WAAgD;CACvF,MAAM,EAAE,IAAI,SAAS,SAAS;CAC9B,IAAI,CAAC,MACH,OAAO;CAET,OAAO,MAAM,IAAI,YAAY,EAAE,CAAC,CAAC,cAAc,KAAK,MAAM,WAAW,KAAK,EAAE;AAC9E;;AAkBA,eAAsB,kBAAkB,MAAuC;CAC7E,MAAM,EAAE,OAAO,SAAS;CACxB,OAAO,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,UAAU,IAAI;AAClD;AAEA,eAAe,sBACb,GACA,MACoD;CACpD,MAAM,aAAa,EAAE,IAAI,OAAO,eAAe;CAC/C,IAAI,YAAY,WAAW,SAAS,GAAG;EACrC,MAAM,QAAQ,WAAW,MAAM,CAAgB;EAC/C,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,OAAO,KAAK,CAAC;EAC1E,IAAI,CAAC,OACH,aAAa;EAEf,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;EACzE,IAAI,CAAC,WAAW,QAAQ,SAAS,MAC/B,UAAU;EAEZ,OAAO;GAAE;GAAS,OAAO;EAAM;CACjC;CACA,OAAO;AACT;;;;;;AAOA,eAAe,iBAAiB,OAAc,WAAgD;CAC5F,IAAI,CAAC,MAAM,QACT,OAAO;CAET,MAAM,EAAE,OAAO,SAAS;CACxB,MAAM,OAAO,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC,IAAI,MAAM,MAAM;CACrD,IAAI,CAAC,MACH,OAAO;CAET,OAAO,MAAM,IAAI,YAAY,EAAE,CAAC,CAAC,cAAc,KAAK,MAAM,WAAW,KAAK,EAAE;AAC9E;;;;;;;AAqBA,SAAgB,qBAAqB,GAAqB;CACxD,MAAM,aAAa,SAAS,CAAC,CAAC,OAAO;CACrC,IAAI,CAAC,YACH,OAAO;CAET,MAAM,SAAS,EAAE,IAAI,OAAO,eAAe;CAC3C,IAAI,CAAC,QAAQ,WAAW,SAAS,GAC/B,OAAO;CAET,OAAO,sBAAsB,OAAO,MAAM,CAAgB,GAAG,UAAU;AACzE;;;;;;;;;;AAWA,eAAsB,WAAW,WAAmB,GAAG,UAAwC;CAC7F,IAAI,CAAC,SAAS,CAAC,CAAC,aACd;CAEF,MAAM,OAAO,MAAM,mBAAmB,SAAS;CAC/C,IAAI,CAAC,QAAQ,CAAC,SAAS,SAAS,IAAI,GAClC,UAAU;AAEd;;AAGA,eAAsB,yBACpB,GACA,MACA,GAAG,UACe;CAClB,MAAM,WAAW,MAAM,sBAAsB,GAAG,IAAI;CACpD,IAAI,UAAU;EACZ,MAAM,OAAO,MAAM,iBAAiB,SAAS,OAAO,SAAS,QAAQ,EAAE;EACvE,IAAI,CAAC,QAAQ,CAAC,SAAS,SAAS,IAAI,GAClC,UAAU;EAEZ,OAAO,SAAS;CAClB;CACA,MAAM,QAAQ,MAAM,kBAAkB,IAAI;CAC1C,IAAI,CAAC,OACH,SAAS,mBAAmB;CAE9B,IAAI,qBAAqB,CAAC,GACxB,OAAO;CAET,MAAM,WAAW,MAAM,IAAI,GAAG,QAAQ;CACtC,OAAO;AACT;;AAGA,SAAgB,iBAAiB,GAAkB;CACjD,IAAI,CAAC,SAAS,CAAC,CAAC,aACd;CAEF,MAAM,EAAE,SAAS,SAAS;CAC1B,IAAI,MAAM,SAAS,WAAW,qBAAqB,CAAC,GAClD;CAEF,UAAU;AACZ"}

package/dist/routers/htmx.mjs

@@ -0,0 +1,24 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/routers/htmx.ts
+/** Check whether the request came from HTMX (HX-Request header). */
+function isHxRequest(c) {
+	return c.req.header("HX-Request") === "true";
+}
+/** Redirect HTMX requests via HX-Redirect and plain requests via 302. */
+function hxRedirect(c, url) {
+	if (isHxRequest(c)) {
+		c.header("HX-Redirect", url);
+		return c.body(null, 204);
+	}
+	return c.redirect(url, 302);
+}
+/** Ask HTMX to reload the current page (review forms post with `hx-target="body"`). */
+function hxRefresh(c) {
+	if (isHxRequest(c)) c.header("HX-Refresh", "true");
+}
+//#endregion
+export { hxRedirect, hxRefresh, isHxRequest };
+
+//# sourceMappingURL=htmx.mjs.map

package/dist/routers/htmx.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"htmx.mjs","names":[],"sources":["../../src/routers/htmx.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\n/** Check whether the request came from HTMX (HX-Request header). */\nexport function isHxRequest(c: Context): boolean {\n  return c.req.header(\"HX-Request\") === \"true\";\n}\n\n/** Redirect HTMX requests via HX-Redirect and plain requests via 302. */\nexport function hxRedirect(c: Context, url: string): Response {\n  if (isHxRequest(c)) {\n    c.header(\"HX-Redirect\", url);\n    return c.body(null, 204);\n  }\n  return c.redirect(url, 302);\n}\n\n/** Ask HTMX to reload the current page (review forms post with `hx-target=\"body\"`). */\nexport function hxRefresh(c: Context): void {\n  if (isHxRequest(c)) {\n    c.header(\"HX-Refresh\", \"true\");\n  }\n}\n"],"mappings":";;;;;AAGA,SAAgB,YAAY,GAAqB;CAC/C,OAAO,EAAE,IAAI,OAAO,YAAY,MAAM;AACxC;;AAGA,SAAgB,WAAW,GAAY,KAAuB;CAC5D,IAAI,YAAY,CAAC,GAAG;EAClB,EAAE,OAAO,eAAe,GAAG;EAC3B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB;CACA,OAAO,EAAE,SAAS,KAAK,GAAG;AAC5B;;AAGA,SAAgB,UAAU,GAAkB;CAC1C,IAAI,YAAY,CAAC,GACf,EAAE,OAAO,cAAc,MAAM;AAEjC"}

package/dist/routers/labels.mjs

@@ -0,0 +1,118 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { resolveAuthorizedProject } from "./helpers.mjs";
+import { labelTypeCreateSchema, labelTypeSchema, labelTypeUpdateSchema, notFound, unauthorized } from "./schemas.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+import { LabelModel } from "@storyshelf/core/models";
+import { HTTPException } from "hono/http-exception";
+//#region src/routers/labels.ts
+const VIEW_ROLES = [
+	"viewer",
+	"developer",
+	"approver",
+	"admin"
+];
+const ADMIN_ROLES = ["admin"];
+const listLabelsRoute = createRoute({
+	method: "get",
+	tags: ["Labels"],
+	summary: "List label types",
+	path: "/api/v1/projects/{slug}/label-types",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: labelTypeSchema.array() } },
+			description: "List label types"
+		},
+		...notFound,
+		...unauthorized
+	}
+});
+const createLabelRoute = createRoute({
+	method: "post",
+	tags: ["Labels"],
+	summary: "Create a label type",
+	path: "/api/v1/projects/{slug}/label-types",
+	request: {
+		params: z.object({ slug: z.string() }),
+		body: { content: { "application/json": { schema: labelTypeCreateSchema } } }
+	},
+	responses: {
+		201: {
+			content: { "application/json": { schema: labelTypeSchema } },
+			description: "Created label type"
+		},
+		...notFound
+	}
+});
+const deleteLabelRoute = createRoute({
+	method: "delete",
+	tags: ["Labels"],
+	summary: "Delete a label type",
+	path: "/api/v1/projects/{slug}/label-types/{key}",
+	request: { params: z.object({
+		slug: z.string(),
+		key: z.string()
+	}) },
+	responses: {
+		204: { description: "Deleted label type" },
+		...notFound
+	}
+});
+const updateLabelRoute = createRoute({
+	method: "patch",
+	tags: ["Labels"],
+	summary: "Update a label type",
+	path: "/api/v1/projects/{slug}/label-types/{key}",
+	request: {
+		params: z.object({
+			slug: z.string(),
+			key: z.string()
+		}),
+		body: { content: { "application/json": { schema: labelTypeUpdateSchema } } }
+	},
+	responses: {
+		200: {
+			content: { "application/json": { schema: labelTypeSchema } },
+			description: "Updated label type"
+		},
+		...notFound
+	}
+});
+/** Register the project label-type list, create, update, and delete endpoints. */
+function registerLabels(app) {
+	app.openapi(listLabelsRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...VIEW_ROLES);
+		return c.json(await new LabelModel(getStore().db).listTypes(project.id));
+	});
+	app.openapi(createLabelRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const body = c.req.valid("json");
+		return c.json(await new LabelModel(getStore().db).createType(project.id, body), 201);
+	});
+	app.openapi(deleteLabelRoute, async (c) => {
+		const { slug, key } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		await new LabelModel(getStore().db).removeType(project.id, key);
+		return c.body(null, 204);
+	});
+	app.openapi(updateLabelRoute, async (c) => {
+		const { slug, key } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		const body = c.req.valid("json");
+		try {
+			const updated = await new LabelModel(getStore().db).updateType(project.id, key, body);
+			if (!updated) throw new HTTPException(404, { message: "Label type not found" });
+			return c.json(updated);
+		} catch (error) {
+			if (error instanceof HTTPException) throw error;
+			throw new HTTPException(400, { message: error instanceof Error ? error.message : "Cannot update label type" });
+		}
+	});
+}
+//#endregion
+export { registerLabels };
+
+//# sourceMappingURL=labels.mjs.map

package/dist/routers/labels.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"labels.mjs","names":[],"sources":["../../src/routers/labels.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  labelTypeCreateSchema,\n  labelTypeSchema,\n  labelTypeUpdateSchema,\n  notFound,\n  unauthorized,\n} from \"./schemas.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listLabelsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Labels\"],\n  summary: \"List label types\",\n  path: \"/api/v1/projects/{slug}/label-types\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: labelTypeSchema.array() } },\n      description: \"List label types\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createLabelRoute = createRoute({\n  method: \"post\",\n  tags: [\"Labels\"],\n  summary: \"Create a label type\",\n  path: \"/api/v1/projects/{slug}/label-types\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: labelTypeCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: labelTypeSchema } },\n      description: \"Created label type\",\n    },\n    ...notFound,\n  },\n});\n\nconst deleteLabelRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Labels\"],\n  summary: \"Delete a label type\",\n  path: \"/api/v1/projects/{slug}/label-types/{key}\",\n  request: { params: z.object({ slug: z.string(), key: z.string() }) },\n  responses: {\n    204: { description: \"Deleted label type\" },\n    ...notFound,\n  },\n});\n\nconst updateLabelRoute = createRoute({\n  method: \"patch\",\n  tags: [\"Labels\"],\n  summary: \"Update a label type\",\n  path: \"/api/v1/projects/{slug}/label-types/{key}\",\n  request: {\n    params: z.object({ slug: z.string(), key: z.string() }),\n    body: { content: { \"application/json\": { schema: labelTypeUpdateSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: labelTypeSchema } },\n      description: \"Updated label type\",\n    },\n    ...notFound,\n  },\n});\n\n/** Register the project label-type list, create, update, and delete endpoints. */\nexport function registerLabels(app: ShelfRouter): void {\n  app.openapi(listLabelsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    return c.json(await new LabelModel(getStore().db).listTypes(project.id));\n  });\n\n  app.openapi(createLabelRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    return c.json(await new LabelModel(getStore().db).createType(project.id, body), 201);\n  });\n\n  app.openapi(deleteLabelRoute, async (c) => {\n    const { slug, key } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    await new LabelModel(getStore().db).removeType(project.id, key);\n    return c.body(null, 204);\n  });\n\n  app.openapi(updateLabelRoute, async (c) => {\n    const { slug, key } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    try {\n      const updated = await new LabelModel(getStore().db).updateType(project.id, key, body);\n      if (!updated) {\n        throw new HTTPException(404, { message: \"Label type not found\" });\n      }\n      return c.json(updated);\n    } catch (error) {\n      if (error instanceof HTTPException) {\n        throw error;\n      }\n      throw new HTTPException(400, {\n        message: error instanceof Error ? error.message : \"Cannot update label type\",\n      });\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AACtF,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,MAAM,EAAE,EAAE;GACnE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE,EAAE;CAC7E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE;GAC3D,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,KAAK,EAAE,OAAO;CAAE,CAAC,EAAE;CACnE,WAAW;EACT,KAAK,EAAE,aAAa,qBAAqB;EACzC,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,KAAK,EAAE,OAAO;EAAE,CAAC;EACtD,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE,EAAE;CAC7E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE;GAC3D,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,eAAe,KAAwB;CACrD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,OAAO,EAAE,KAAK,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,QAAQ,EAAE,CAAC;CACzE,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,OAAO,EAAE,KAAK,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,QAAQ,IAAI,IAAI,GAAG,GAAG;CACrF,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,QAAQ,IAAI,GAAG;EAC9D,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,IAAI;GACF,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,QAAQ,IAAI,KAAK,IAAI;GACpF,IAAI,CAAC,SACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,uBAAuB,CAAC;GAElE,OAAO,EAAE,KAAK,OAAO;EACvB,SAAS,OAAO;GACd,IAAI,iBAAiB,eACnB,MAAM;GAER,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,iBAAiB,QAAQ,MAAM,UAAU,2BACpD,CAAC;EACH;CACF,CAAC;AACH"}

package/dist/routers/media.mjs

@@ -0,0 +1,53 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
+import { BaselineModel, BuildModel, SnapshotModel } from "@storyshelf/core/models";
+//#region src/routers/media.ts
+const VIEW_ROLES = [
+	"viewer",
+	"developer",
+	"approver",
+	"admin"
+];
+const PNG = "image/png";
+function imageResponse(buffer) {
+	return new Response(new Uint8Array(buffer), { headers: {
+		"content-type": PNG,
+		"cache-control": "private, max-age=3600"
+	} });
+}
+/** Register the PNG image, diff, and baseline media endpoints for snapshots. */
+function registerMedia(app) {
+	app.get("/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image", async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.param("slug"), ...VIEW_ROLES);
+		const snapshot = await findSnapshot(c.req.param("buildId"), c.req.param("snapshotId"), project.id);
+		return imageResponse(await getStore().storage.read(snapshot.screenshotPath));
+	});
+	app.get("/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/diff", async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.param("slug"), ...VIEW_ROLES);
+		const snapshot = await findSnapshot(c.req.param("buildId"), c.req.param("snapshotId"), project.id);
+		if (!snapshot.diffPath) notFound("No diff for this snapshot");
+		return imageResponse(await getStore().storage.read(snapshot.diffPath));
+	});
+	app.get("/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline", async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.param("slug"), ...VIEW_ROLES);
+		const snapshot = await findSnapshot(c.req.param("buildId"), c.req.param("snapshotId"), project.id);
+		const build = await new BuildModel(getStore().db).get(snapshot.buildId);
+		if (!build) notFound("Build not found");
+		const baselines = new BaselineModel(getStore().db, void 0, getStore().storage);
+		const baseline = await baselines.resolve(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, project.gitDefaultBranch);
+		if (!baseline) notFound("No baseline for this snapshot");
+		return imageResponse(await baselines.read(baseline));
+	});
+}
+async function findSnapshot(buildId, snapshotId, projectId) {
+	const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);
+	if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) notFound("Snapshot not found");
+	return snapshot;
+}
+//#endregion
+export { registerMedia };
+
+//# sourceMappingURL=media.mjs.map

package/dist/routers/media.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.mjs","names":[],"sources":["../../src/routers/media.ts"],"sourcesContent":["import { BaselineModel } from \"@storyshelf/core/models\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Snapshot } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { notFound, resolveAuthorizedProject } from \"./helpers.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n\nconst PNG = \"image/png\";\n\nfunction imageResponse(buffer: Buffer): Response {\n  return new Response(new Uint8Array(buffer), {\n    headers: { \"content-type\": PNG, \"cache-control\": \"private, max-age=3600\" },\n  });\n}\n\n/** Register the PNG image, diff, and baseline media endpoints for snapshots. */\nexport function registerMedia(app: ShelfRouter): void {\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    return imageResponse(await getStore().storage.read(snapshot.screenshotPath));\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/diff\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    if (!snapshot.diffPath) {\n      notFound(\"No diff for this snapshot\");\n    }\n    return imageResponse(await getStore().storage.read(snapshot.diffPath));\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    const build = await new BuildModel(getStore().db).get(snapshot.buildId);\n    if (!build) {\n      notFound(\"Build not found\");\n    }\n    const baselines = new BaselineModel(getStore().db, undefined, getStore().storage);\n    const baseline = await baselines.resolve(\n      project.id,\n      snapshot.storyId,\n      snapshot.viewportName,\n      build.gitBranch,\n      project.gitDefaultBranch,\n    );\n    if (!baseline) {\n      notFound(\"No baseline for this snapshot\");\n    }\n    return imageResponse(await baselines.read(baseline));\n  });\n}\n\nasync function findSnapshot(\n  buildId: string,\n  snapshotId: string,\n  projectId: string,\n): Promise<Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n"],"mappings":";;;;;;;AAQA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AAEtF,MAAM,MAAM;AAEZ,SAAS,cAAc,QAA0B;CAC/C,OAAO,IAAI,SAAS,IAAI,WAAW,MAAM,GAAG,EAC1C,SAAS;EAAE,gBAAgB;EAAK,iBAAiB;CAAwB,EAC3E,CAAC;AACH;;AAGA,SAAgB,cAAc,KAAwB;CACpD,IAAI,IAAI,sEAAsE,OAAO,MAAM;EACzF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,cAAc,CAAC;CAC7E,CAAC;CAED,IAAI,IAAI,qEAAqE,OAAO,MAAM;EACxF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,IAAI,CAAC,SAAS,UACZ,SAAS,2BAA2B;EAEtC,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,QAAQ,CAAC;CACvE,CAAC;CAED,IAAI,IAAI,yEAAyE,OAAO,MAAM;EAC5F,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;EACtE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,IAAI,KAAA,GAAW,SAAS,CAAC,CAAC,OAAO;EAChF,MAAM,WAAW,MAAM,UAAU,QAC/B,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,gBACV;EACA,IAAI,CAAC,UACH,SAAS,+BAA+B;EAE1C,OAAO,cAAc,MAAM,UAAU,KAAK,QAAQ,CAAC;CACrD,CAAC;AACH;AAEA,eAAe,aACb,SACA,YACA,WACmB;CACnB,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,WAAW,SAAS,cAAc,WACtE,SAAS,oBAAoB;CAE/B,OAAO;AACT"}