@storyshelf/app 0.5.3

package/dist/routers/members.mjs

@@ -0,0 +1,177 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { resolveAuthorizedProject } from "./helpers.mjs";
+import { groupMappingCreateSchema, groupMappingSchema, memberRoleSchema, memberSchema, memberSetSchema, notFound, unauthorized } from "./schemas.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+import { MemberModel, ProjectGroupMappingModel } from "@storyshelf/core/models";
+import { HTTPException } from "hono/http-exception";
+//#region src/routers/members.ts
+const VIEW_ROLES = [
+	"viewer",
+	"developer",
+	"approver",
+	"admin"
+];
+const ADMIN_ROLES = ["admin"];
+const listMembersRoute = createRoute({
+	method: "get",
+	tags: ["Members"],
+	summary: "List members",
+	path: "/api/v1/projects/{slug}/members",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: memberSchema.array() } },
+			description: "List project members"
+		},
+		...notFound,
+		...unauthorized
+	}
+});
+const setMemberRoute = createRoute({
+	method: "post",
+	tags: ["Members"],
+	summary: "Add or update a member",
+	path: "/api/v1/projects/{slug}/members",
+	request: {
+		params: z.object({ slug: z.string() }),
+		body: { content: { "application/json": { schema: memberSetSchema } } }
+	},
+	responses: {
+		201: {
+			content: { "application/json": { schema: memberSchema } },
+			description: "Added or updated member"
+		},
+		...notFound
+	}
+});
+const updateMemberRoute = createRoute({
+	method: "patch",
+	tags: ["Members"],
+	summary: "Change a member's role",
+	path: "/api/v1/projects/{slug}/members/{userId}",
+	request: {
+		params: z.object({
+			slug: z.string(),
+			userId: z.string()
+		}),
+		body: { content: { "application/json": { schema: memberRoleSchema } } }
+	},
+	responses: {
+		200: {
+			content: { "application/json": { schema: memberSchema } },
+			description: "Updated member role"
+		},
+		...notFound
+	}
+});
+const deleteMemberRoute = createRoute({
+	method: "delete",
+	tags: ["Members"],
+	summary: "Remove a member",
+	path: "/api/v1/projects/{slug}/members/{userId}",
+	request: { params: z.object({
+		slug: z.string(),
+		userId: z.string()
+	}) },
+	responses: {
+		204: { description: "Removed member" },
+		...notFound
+	}
+});
+const listGroupMappingsRoute = createRoute({
+	method: "get",
+	tags: ["Members"],
+	summary: "List group mappings",
+	path: "/api/v1/projects/{slug}/group-mappings",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: groupMappingSchema.array() } },
+			description: "List identity-provider group mappings"
+		},
+		...notFound,
+		...unauthorized
+	}
+});
+const createGroupMappingRoute = createRoute({
+	method: "post",
+	tags: ["Members"],
+	summary: "Create a group mapping",
+	path: "/api/v1/projects/{slug}/group-mappings",
+	request: {
+		params: z.object({ slug: z.string() }),
+		body: { content: { "application/json": { schema: groupMappingCreateSchema } } }
+	},
+	responses: {
+		201: {
+			content: { "application/json": { schema: groupMappingSchema } },
+			description: "Created group mapping (exact group-name match)"
+		},
+		...notFound
+	}
+});
+const deleteGroupMappingRoute = createRoute({
+	method: "delete",
+	tags: ["Members"],
+	summary: "Remove a group mapping",
+	path: "/api/v1/projects/{slug}/group-mappings/{mappingId}",
+	request: { params: z.object({
+		slug: z.string(),
+		mappingId: z.string()
+	}) },
+	responses: {
+		204: { description: "Removed group mapping" },
+		...notFound
+	}
+});
+/** Register the project member list, upsert, and removal endpoints. */
+function registerMembers(app) {
+	app.openapi(listMembersRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...VIEW_ROLES);
+		return c.json(await new MemberModel(getStore().db).list(project.id));
+	});
+	app.openapi(setMemberRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const body = c.req.valid("json");
+		return c.json(await new MemberModel(getStore().db).set(project.id, body.userId, body.role), 201);
+	});
+	app.openapi(updateMemberRoute, async (c) => {
+		const { slug, userId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		const body = c.req.valid("json");
+		return c.json(await new MemberModel(getStore().db).set(project.id, userId, body.role));
+	});
+	app.openapi(deleteMemberRoute, async (c) => {
+		const { slug, userId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		await new MemberModel(getStore().db).remove(project.id, userId);
+		return c.body(null, 204);
+	});
+	registerGroupMappingRoutes(app);
+}
+/** Register identity-provider group mapping endpoints. */
+function registerGroupMappingRoutes(app) {
+	app.openapi(listGroupMappingsRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...VIEW_ROLES);
+		return c.json(await new ProjectGroupMappingModel(getStore().db).list(project.id));
+	});
+	app.openapi(createGroupMappingRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const body = c.req.valid("json");
+		if (body.groupName.includes("*")) throw new HTTPException(400, { message: "Group names match exactly; wildcards are not expanded. A broad pattern can silently grant org-wide access." });
+		return c.json(await new ProjectGroupMappingModel(getStore().db).create(project.id, body.groupName, body.role), 201);
+	});
+	app.openapi(deleteGroupMappingRoute, async (c) => {
+		const { slug, mappingId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		await new ProjectGroupMappingModel(getStore().db).remove(project.id, mappingId);
+		return c.body(null, 204);
+	});
+}
+//#endregion
+export { registerMembers };
+
+//# sourceMappingURL=members.mjs.map

package/dist/routers/members.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.mjs","names":[],"sources":["../../src/routers/members.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { MemberModel, ProjectGroupMappingModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  groupMappingCreateSchema,\n  groupMappingSchema,\n  memberRoleSchema,\n  memberSchema,\n  memberSetSchema,\n  notFound,\n  unauthorized,\n} from \"./schemas.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listMembersRoute = createRoute({\n  method: \"get\",\n  tags: [\"Members\"],\n  summary: \"List members\",\n  path: \"/api/v1/projects/{slug}/members\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: memberSchema.array() } },\n      description: \"List project members\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst setMemberRoute = createRoute({\n  method: \"post\",\n  tags: [\"Members\"],\n  summary: \"Add or update a member\",\n  path: \"/api/v1/projects/{slug}/members\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: memberSetSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: memberSchema } },\n      description: \"Added or updated member\",\n    },\n    ...notFound,\n  },\n});\n\nconst updateMemberRoute = createRoute({\n  method: \"patch\",\n  tags: [\"Members\"],\n  summary: \"Change a member's role\",\n  path: \"/api/v1/projects/{slug}/members/{userId}\",\n  request: {\n    params: z.object({ slug: z.string(), userId: z.string() }),\n    body: { content: { \"application/json\": { schema: memberRoleSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: memberSchema } },\n      description: \"Updated member role\",\n    },\n    ...notFound,\n  },\n});\n\nconst deleteMemberRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Members\"],\n  summary: \"Remove a member\",\n  path: \"/api/v1/projects/{slug}/members/{userId}\",\n  request: { params: z.object({ slug: z.string(), userId: z.string() }) },\n  responses: {\n    204: { description: \"Removed member\" },\n    ...notFound,\n  },\n});\n\nconst listGroupMappingsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Members\"],\n  summary: \"List group mappings\",\n  path: \"/api/v1/projects/{slug}/group-mappings\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: groupMappingSchema.array() } },\n      description: \"List identity-provider group mappings\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createGroupMappingRoute = createRoute({\n  method: \"post\",\n  tags: [\"Members\"],\n  summary: \"Create a group mapping\",\n  path: \"/api/v1/projects/{slug}/group-mappings\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: groupMappingCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: groupMappingSchema } },\n      description: \"Created group mapping (exact group-name match)\",\n    },\n    ...notFound,\n  },\n});\n\nconst deleteGroupMappingRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Members\"],\n  summary: \"Remove a group mapping\",\n  path: \"/api/v1/projects/{slug}/group-mappings/{mappingId}\",\n  request: { params: z.object({ slug: z.string(), mappingId: z.string() }) },\n  responses: {\n    204: { description: \"Removed group mapping\" },\n    ...notFound,\n  },\n});\n\n/** Register the project member list, upsert, and removal endpoints. */\nexport function registerMembers(app: ShelfRouter): void {\n  app.openapi(listMembersRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    return c.json(await new MemberModel(getStore().db).list(project.id));\n  });\n\n  app.openapi(setMemberRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    return c.json(\n      await new MemberModel(getStore().db).set(project.id, body.userId, body.role),\n      201,\n    );\n  });\n\n  app.openapi(updateMemberRoute, async (c) => {\n    const { slug, userId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    return c.json(await new MemberModel(getStore().db).set(project.id, userId, body.role));\n  });\n\n  app.openapi(deleteMemberRoute, async (c) => {\n    const { slug, userId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    await new MemberModel(getStore().db).remove(project.id, userId);\n    return c.body(null, 204);\n  });\n\n  registerGroupMappingRoutes(app);\n}\n\n/** Register identity-provider group mapping endpoints. */\nfunction registerGroupMappingRoutes(app: ShelfRouter): void {\n  app.openapi(listGroupMappingsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    return c.json(await new ProjectGroupMappingModel(getStore().db).list(project.id));\n  });\n\n  app.openapi(createGroupMappingRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    if (body.groupName.includes(\"*\")) {\n      throw new HTTPException(400, {\n        message:\n          \"Group names match exactly; wildcards are not expanded. A broad pattern can silently grant org-wide access.\",\n      });\n    }\n    return c.json(\n      await new ProjectGroupMappingModel(getStore().db).create(\n        project.id,\n        body.groupName,\n        body.role,\n      ),\n      201,\n    );\n  });\n\n  app.openapi(deleteGroupMappingRoute, async (c) => {\n    const { slug, mappingId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    await new ProjectGroupMappingModel(getStore().db).remove(project.id, mappingId);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAgBA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AACtF,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,aAAa,MAAM,EAAE,EAAE;GAChE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE,EAAE;CACvE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,aAAa,EAAE;GACxD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,QAAQ,EAAE,OAAO;EAAE,CAAC;EACzD,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,iBAAiB,EAAE,EAAE;CACxE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,aAAa,EAAE;GACxD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,QAAQ,EAAE,OAAO;CAAE,CAAC,EAAE;CACtE,WAAW;EACT,KAAK,EAAE,aAAa,iBAAiB;EACrC,GAAG;CACL;AACF,CAAC;AAED,MAAM,yBAAyB,YAAY;CACzC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE;GACtE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,0BAA0B,YAAY;CAC1C,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,yBAAyB,EAAE,EAAE;CAChF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,0BAA0B,YAAY;CAC1C,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,wBAAwB;EAC5C,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,gBAAgB,KAAwB;CACtD,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,OAAO,EAAE,KAAK,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;CACrE,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,OAAO,EAAE,KACP,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,KAAK,QAAQ,KAAK,IAAI,GAC3E,GACF;CACF,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,WAAW,EAAE,IAAI,MAAM,OAAO;EAC5C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,OAAO,EAAE,KAAK,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC;CACvF,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,WAAW,EAAE,IAAI,MAAM,OAAO;EAC5C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,MAAM;EAC9D,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;CAED,2BAA2B,GAAG;AAChC;;AAGA,SAAS,2BAA2B,KAAwB;CAC1D,IAAI,QAAQ,wBAAwB,OAAO,MAAM;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,OAAO,EAAE,KAAK,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;CAClF,CAAC;CAED,IAAI,QAAQ,yBAAyB,OAAO,MAAM;EAChD,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,IAAI,KAAK,UAAU,SAAS,GAAG,GAC7B,MAAM,IAAI,cAAc,KAAK,EAC3B,SACE,6GACJ,CAAC;EAEH,OAAO,EAAE,KACP,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAChD,QAAQ,IACR,KAAK,WACL,KAAK,IACP,GACA,GACF;CACF,CAAC;CAED,IAAI,QAAQ,yBAAyB,OAAO,MAAM;EAChD,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,SAAS;EAC9E,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/notification-channels.mjs

@@ -0,0 +1,190 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { credentialKeys } from "../credential-keys.mjs";
+import { getStore } from "../store.mjs";
+import { notFound, requireSiteAdmin, resolveAuthorizedProject } from "./helpers.mjs";
+import { notFound as notFound$1, notificationChannelCreateSchema, notificationChannelSchema, unauthorized } from "./schemas.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+import { NotificationChannelModel } from "@storyshelf/core/models";
+//#region src/routers/notification-channels.ts
+const ADMIN_ROLES = ["admin"];
+/** Public channel view (secret redacted, config/events decoded). */
+function toPublic(row) {
+	return {
+		id: row.id,
+		projectId: row.projectId,
+		provider: row.provider,
+		config: NotificationChannelModel.configOf(row),
+		hasSecret: row.secretEncrypted !== null,
+		events: NotificationChannelModel.eventsOf(row),
+		enabled: row.enabled,
+		createdAt: row.createdAt,
+		updatedAt: row.updatedAt
+	};
+}
+/** Validate channel input against the provider descriptor. */
+function validateChannelInput(provider, config) {
+	const descriptor = getStore().notifiers.find((candidate) => candidate.metadata.kind === provider);
+	if (!descriptor) return {
+		ok: false,
+		message: `Unknown provider: ${provider}`
+	};
+	const parsed = descriptor.metadata.schema.safeParse(config);
+	if (!parsed.success) return {
+		ok: false,
+		message: parsed.error.message
+	};
+	return { ok: true };
+}
+const listChannelsRoute = createRoute({
+	method: "get",
+	tags: ["Notifications"],
+	summary: "List notification channels",
+	path: "/api/v1/projects/{slug}/notification-channels",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: notificationChannelSchema.array() } },
+			description: "List notification channels"
+		},
+		...notFound$1,
+		...unauthorized
+	}
+});
+const createChannelRoute = createRoute({
+	method: "post",
+	tags: ["Notifications"],
+	summary: "Create a notification channel",
+	path: "/api/v1/projects/{slug}/notification-channels",
+	request: {
+		params: z.object({ slug: z.string() }),
+		body: { content: { "application/json": { schema: notificationChannelCreateSchema } } }
+	},
+	responses: {
+		201: {
+			content: { "application/json": { schema: notificationChannelSchema } },
+			description: "Created notification channel"
+		},
+		400: {
+			content: { "application/json": { schema: z.object({ message: z.string() }) } },
+			description: "Bad request"
+		},
+		...notFound$1
+	}
+});
+const deleteChannelRoute = createRoute({
+	method: "delete",
+	tags: ["Notifications"],
+	summary: "Delete a notification channel",
+	path: "/api/v1/projects/{slug}/notification-channels/{channelId}",
+	request: { params: z.object({
+		slug: z.string(),
+		channelId: z.string()
+	}) },
+	responses: {
+		204: { description: "Deleted notification channel" },
+		...notFound$1
+	}
+});
+/** Register the project notification-channel list, create, and delete endpoints. */
+function registerNotificationChannels(app) {
+	app.openapi(listChannelsRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const rows = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).list(project.id);
+		return c.json(rows.map((row) => toPublic(row)));
+	});
+	app.openapi(createChannelRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const body = c.req.valid("json");
+		const valid = validateChannelInput(body.provider, body.config);
+		if (!valid.ok) return c.json({ message: valid.message }, 400);
+		const row = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).create({
+			projectId: project.id,
+			...body
+		});
+		return c.json(toPublic(row), 201);
+	});
+	app.openapi(deleteChannelRoute, async (c) => {
+		const { slug, channelId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		const model = new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config));
+		if ((await model.get(channelId))?.projectId !== project.id) notFound("Notification channel not found");
+		await model.remove(channelId);
+		return c.body(null, 204);
+	});
+}
+const listSystemRoute = createRoute({
+	method: "get",
+	tags: ["Notifications"],
+	summary: "List site-wide channels",
+	path: "/api/v1/admin/notification-channels",
+	request: {},
+	responses: {
+		200: {
+			content: { "application/json": { schema: notificationChannelSchema.array() } },
+			description: "List site-wide notification channels"
+		},
+		...unauthorized
+	}
+});
+const createSystemRoute = createRoute({
+	method: "post",
+	tags: ["Notifications"],
+	summary: "Create a site-wide channel",
+	path: "/api/v1/admin/notification-channels",
+	request: { body: { content: { "application/json": { schema: notificationChannelCreateSchema } } } },
+	responses: {
+		201: {
+			content: { "application/json": { schema: notificationChannelSchema } },
+			description: "Created site-wide notification channel"
+		},
+		400: {
+			content: { "application/json": { schema: z.object({ message: z.string() }) } },
+			description: "Bad request"
+		},
+		...unauthorized
+	}
+});
+const deleteSystemRoute = createRoute({
+	method: "delete",
+	tags: ["Notifications"],
+	summary: "Delete a site-wide channel",
+	path: "/api/v1/admin/notification-channels/{channelId}",
+	request: { params: z.object({ channelId: z.string() }) },
+	responses: {
+		204: { description: "Deleted site-wide notification channel" },
+		...notFound$1
+	}
+});
+/** Register the site-admin (project-less, `sys:*`) channel endpoints. */
+function registerSystemChannels(app) {
+	app.openapi(listSystemRoute, async (c) => {
+		requireSiteAdmin(c);
+		const rows = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).listSystem();
+		return c.json(rows.map((row) => toPublic(row)));
+	});
+	app.openapi(createSystemRoute, async (c) => {
+		requireSiteAdmin(c);
+		const body = c.req.valid("json");
+		const valid = validateChannelInput(body.provider, body.config);
+		if (!valid.ok) return c.json({ message: valid.message }, 400);
+		const row = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).create({
+			projectId: null,
+			...body
+		});
+		return c.json(toPublic(row), 201);
+	});
+	app.openapi(deleteSystemRoute, async (c) => {
+		requireSiteAdmin(c);
+		const { channelId } = c.req.valid("param");
+		const model = new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config));
+		if ((await model.get(channelId))?.projectId !== null) notFound("Notification channel not found");
+		await model.remove(channelId);
+		return c.body(null, 204);
+	});
+}
+//#endregion
+export { registerNotificationChannels, registerSystemChannels };
+
+//# sourceMappingURL=notification-channels.mjs.map

package/dist/routers/notification-channels.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-channels.mjs","names":["notFoundResponse"],"sources":["../../src/routers/notification-channels.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport type { NotificationChannelRow } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { notFound, requireSiteAdmin, resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  notificationChannelCreateSchema,\n  notificationChannelSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\n/** Public channel view (secret redacted, config/events decoded). */\nfunction toPublic(row: NotificationChannelRow): {\n  id: string;\n  projectId: string | null;\n  provider: string;\n  config: Record<string, unknown>;\n  hasSecret: boolean;\n  events: string[];\n  enabled: boolean;\n  createdAt: string;\n  updatedAt: string;\n} {\n  return {\n    id: row.id,\n    projectId: row.projectId,\n    provider: row.provider,\n    config: NotificationChannelModel.configOf(row),\n    hasSecret: row.secretEncrypted !== null,\n    events: NotificationChannelModel.eventsOf(row),\n    enabled: row.enabled,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\n/** Validate channel input against the provider descriptor. */\nfunction validateChannelInput(\n  provider: string,\n  config: unknown,\n): { ok: true } | { ok: false; message: string } {\n  const descriptor = getStore().notifiers.find((candidate) => candidate.metadata.kind === provider);\n  if (!descriptor) {\n    return { ok: false, message: `Unknown provider: ${provider}` };\n  }\n  const parsed = descriptor.metadata.schema.safeParse(config);\n  if (!parsed.success) {\n    return { ok: false, message: parsed.error.message };\n  }\n  return { ok: true };\n}\n\nconst listChannelsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List notification channels\",\n  path: \"/api/v1/projects/{slug}/notification-channels\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationChannelSchema.array() } },\n      description: \"List notification channels\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createChannelRoute = createRoute({\n  method: \"post\",\n  tags: [\"Notifications\"],\n  summary: \"Create a notification channel\",\n  path: \"/api/v1/projects/{slug}/notification-channels\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: notificationChannelCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: notificationChannelSchema } },\n      description: \"Created notification channel\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteChannelRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Delete a notification channel\",\n  path: \"/api/v1/projects/{slug}/notification-channels/{channelId}\",\n  request: { params: z.object({ slug: z.string(), channelId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted notification channel\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project notification-channel list, create, and delete endpoints. */\nexport function registerNotificationChannels(app: ShelfRouter): void {\n  app.openapi(listChannelsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const rows = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).list(project.id);\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createChannelRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const valid = validateChannelInput(body.provider, body.config);\n    if (!valid.ok) {\n      return c.json({ message: valid.message }, 400);\n    }\n    const row = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).create({ projectId: project.id, ...body });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteChannelRoute, async (c) => {\n    const { slug, channelId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const model = new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    );\n    const existing = await model.get(channelId);\n    if (existing?.projectId !== project.id) {\n      notFound(\"Notification channel not found\");\n    }\n    await model.remove(channelId);\n    return c.body(null, 204);\n  });\n}\n\nconst listSystemRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List site-wide channels\",\n  path: \"/api/v1/admin/notification-channels\",\n  request: {},\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationChannelSchema.array() } },\n      description: \"List site-wide notification channels\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst createSystemRoute = createRoute({\n  method: \"post\",\n  tags: [\"Notifications\"],\n  summary: \"Create a site-wide channel\",\n  path: \"/api/v1/admin/notification-channels\",\n  request: {\n    body: { content: { \"application/json\": { schema: notificationChannelCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: notificationChannelSchema } },\n      description: \"Created site-wide notification channel\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst deleteSystemRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Delete a site-wide channel\",\n  path: \"/api/v1/admin/notification-channels/{channelId}\",\n  request: { params: z.object({ channelId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted site-wide notification channel\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the site-admin (project-less, `sys:*`) channel endpoints. */\nexport function registerSystemChannels(app: ShelfRouter): void {\n  app.openapi(listSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const rows = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).listSystem();\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const body = c.req.valid(\"json\");\n    const valid = validateChannelInput(body.provider, body.config);\n    if (!valid.ok) {\n      return c.json({ message: valid.message }, 400);\n    }\n    const row = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).create({ projectId: null, ...body });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const { channelId } = c.req.valid(\"param\");\n    const model = new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    );\n    const existing = await model.get(channelId);\n    if (existing?.projectId !== null) {\n      notFound(\"Notification channel not found\");\n    }\n    await model.remove(channelId);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,cAAsC,CAAC,OAAO;;AAGpD,SAAS,SAAS,KAUhB;CACA,OAAO;EACL,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,WAAW,IAAI,oBAAoB;EACnC,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,SAAS,IAAI;EACb,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;;AAGA,SAAS,qBACP,UACA,QAC+C;CAC/C,MAAM,aAAa,SAAS,CAAC,CAAC,UAAU,MAAM,cAAc,UAAU,SAAS,SAAS,QAAQ;CAChG,IAAI,CAAC,YACH,OAAO;EAAE,IAAI;EAAO,SAAS,qBAAqB;CAAW;CAE/D,MAAM,SAAS,WAAW,SAAS,OAAO,UAAU,MAAM;CAC1D,IAAI,CAAC,OAAO,SACV,OAAO;EAAE,IAAI;EAAO,SAAS,OAAO,MAAM;CAAQ;CAEpD,OAAO,EAAE,IAAI,KAAK;AACpB;AAEA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,MAAM,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gCAAgC,EAAE,EAAE;CACvF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,+BAA+B;EACnD,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,6BAA6B,KAAwB;CACnE,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,MAAM,IAAI,yBACrB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,KAAK,QAAQ,EAAE;EACjB,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,qBAAqB,KAAK,UAAU,KAAK,MAAM;EAC7D,IAAI,CAAC,MAAM,IACT,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,QAAQ,GAAG,GAAG;EAE/C,MAAM,MAAM,MAAM,IAAI,yBACpB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,OAAO;GAAE,WAAW,QAAQ;GAAI,GAAG;EAAK,CAAC;EAC3C,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,IAAI,yBAChB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC;EAEA,KAAI,MADmB,MAAM,IAAI,SAAS,EAAA,EAC5B,cAAc,QAAQ,IAClC,SAAS,gCAAgC;EAE3C,MAAM,MAAM,OAAO,SAAS;EAC5B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH;AAEA,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,CAAC;CACV,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,MAAM,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EACP,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gCAAgC,EAAE,EAAE,EACvF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE;CACvD,WAAW;EACT,KAAK,EAAE,aAAa,yCAAyC;EAC7D,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,uBAAuB,KAAwB;CAC7D,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,iBAAiB,CAAC;EAClB,MAAM,OAAO,MAAM,IAAI,yBACrB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,WAAW;EACb,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,iBAAiB,CAAC;EAClB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,qBAAqB,KAAK,UAAU,KAAK,MAAM;EAC7D,IAAI,CAAC,MAAM,IACT,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,QAAQ,GAAG,GAAG;EAE/C,MAAM,MAAM,MAAM,IAAI,yBACpB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,OAAO;GAAE,WAAW;GAAM,GAAG;EAAK,CAAC;EACrC,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,iBAAiB,CAAC;EAClB,MAAM,EAAE,cAAc,EAAE,IAAI,MAAM,OAAO;EACzC,MAAM,QAAQ,IAAI,yBAChB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC;EAEA,KAAI,MADmB,MAAM,IAAI,SAAS,EAAA,EAC5B,cAAc,MAC1B,SAAS,gCAAgC;EAE3C,MAAM,MAAM,OAAO,SAAS;EAC5B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/notification-subscriptions.mjs

@@ -0,0 +1,120 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { resolveAuthorizedProject, unauthorized } from "./helpers.mjs";
+import { notFound, notificationSubscriptionPutSchema, notificationSubscriptionSchema, unauthorized as unauthorized$1 } from "./schemas.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+import { NotificationSubscriptionModel } from "@storyshelf/core/models";
+//#region src/routers/notification-subscriptions.ts
+const VIEW_ROLES = [
+	"viewer",
+	"developer",
+	"approver",
+	"admin"
+];
+const ADMIN_ROLES = ["admin"];
+/** Public subscription view (event/via lists decoded). */
+function toPublic(row) {
+	return {
+		projectId: row.projectId,
+		userId: row.userId,
+		events: NotificationSubscriptionModel.eventsOf(row),
+		via: NotificationSubscriptionModel.viaOf(row),
+		enabled: row.enabled
+	};
+}
+/** Require a session user (subscriptions are meaningless without identity). */
+function currentUserId() {
+	const user = getStore().user;
+	if (!user) unauthorized();
+	return user.id;
+}
+const getSubscriptionRoute = createRoute({
+	method: "get",
+	tags: ["Notifications"],
+	summary: "Get my notification subscription",
+	path: "/api/v1/projects/{slug}/notifications/me",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: notificationSubscriptionSchema.nullable() } },
+			description: "Your notification subscription (null when never opted in)"
+		},
+		...notFound,
+		...unauthorized$1
+	}
+});
+const putSubscriptionRoute = createRoute({
+	method: "put",
+	tags: ["Notifications"],
+	summary: "Save my notification subscription",
+	path: "/api/v1/projects/{slug}/notifications/me",
+	request: {
+		params: z.object({ slug: z.string() }),
+		body: { content: { "application/json": { schema: notificationSubscriptionPutSchema } } }
+	},
+	responses: {
+		200: {
+			content: { "application/json": { schema: notificationSubscriptionSchema } },
+			description: "Saved notification subscription"
+		},
+		...notFound,
+		...unauthorized$1
+	}
+});
+const deleteSubscriptionRoute = createRoute({
+	method: "delete",
+	tags: ["Notifications"],
+	summary: "Remove my notification subscription",
+	path: "/api/v1/projects/{slug}/notifications/me",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		204: { description: "Removed notification subscription (opted out)" },
+		...notFound,
+		...unauthorized$1
+	}
+});
+const listSubscriptionsRoute = createRoute({
+	method: "get",
+	tags: ["Notifications"],
+	summary: "List notification subscriptions",
+	path: "/api/v1/projects/{slug}/notifications",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: notificationSubscriptionSchema.array() } },
+			description: "List notification subscriptions (admin audit)"
+		},
+		...notFound,
+		...unauthorized$1
+	}
+});
+/** Register the self-service subscription endpoints plus the admin audit list. */
+function registerNotificationSubscriptions(app) {
+	app.openapi(getSubscriptionRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...VIEW_ROLES);
+		const row = await new NotificationSubscriptionModel(getStore().db).getFor(project.id, currentUserId());
+		return c.json(row ? toPublic(row) : null);
+	});
+	app.openapi(putSubscriptionRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...VIEW_ROLES);
+		const body = c.req.valid("json");
+		const row = await new NotificationSubscriptionModel(getStore().db).upsert(project.id, currentUserId(), body);
+		return c.json(toPublic(row));
+	});
+	app.openapi(deleteSubscriptionRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...VIEW_ROLES);
+		await new NotificationSubscriptionModel(getStore().db).remove(project.id, currentUserId());
+		return c.body(null, 204);
+	});
+	app.openapi(listSubscriptionsRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const rows = await new NotificationSubscriptionModel(getStore().db).list(project.id);
+		return c.json(rows.map((row) => toPublic(row)));
+	});
+}
+//#endregion
+export { registerNotificationSubscriptions };
+
+//# sourceMappingURL=notification-subscriptions.mjs.map

package/dist/routers/notification-subscriptions.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-subscriptions.mjs","names":["notFoundResponse","unauthorizedResponse"],"sources":["../../src/routers/notification-subscriptions.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { NotificationSubscriptionModel } from \"@storyshelf/core/models\";\nimport type { NotificationSubscriptionRow } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject, unauthorized } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  notificationSubscriptionPutSchema,\n  notificationSubscriptionSchema,\n  unauthorized as unauthorizedResponse,\n} from \"./schemas.ts\";\n\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\n/** Public subscription view (event/via lists decoded). */\nfunction toPublic(row: NotificationSubscriptionRow): {\n  projectId: string;\n  userId: string;\n  events: string[];\n  via: string[];\n  enabled: boolean;\n} {\n  return {\n    projectId: row.projectId,\n    userId: row.userId,\n    events: NotificationSubscriptionModel.eventsOf(row),\n    via: NotificationSubscriptionModel.viaOf(row),\n    enabled: row.enabled,\n  };\n}\n\n/** Require a session user (subscriptions are meaningless without identity). */\nfunction currentUserId(): string {\n  const user = getStore().user;\n  if (!user) {\n    unauthorized();\n  }\n  return user.id;\n}\n\nconst getSubscriptionRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"Get my notification subscription\",\n  path: \"/api/v1/projects/{slug}/notifications/me\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationSubscriptionSchema.nullable() } },\n      description: \"Your notification subscription (null when never opted in)\",\n    },\n    ...notFoundResponse,\n    ...unauthorizedResponse,\n  },\n});\n\nconst putSubscriptionRoute = createRoute({\n  method: \"put\",\n  tags: [\"Notifications\"],\n  summary: \"Save my notification subscription\",\n  path: \"/api/v1/projects/{slug}/notifications/me\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: notificationSubscriptionPutSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationSubscriptionSchema } },\n      description: \"Saved notification subscription\",\n    },\n    ...notFoundResponse,\n    ...unauthorizedResponse,\n  },\n});\n\nconst deleteSubscriptionRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Remove my notification subscription\",\n  path: \"/api/v1/projects/{slug}/notifications/me\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    204: { description: \"Removed notification subscription (opted out)\" },\n    ...notFoundResponse,\n    ...unauthorizedResponse,\n  },\n});\n\nconst listSubscriptionsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List notification subscriptions\",\n  path: \"/api/v1/projects/{slug}/notifications\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationSubscriptionSchema.array() } },\n      description: \"List notification subscriptions (admin audit)\",\n    },\n    ...notFoundResponse,\n    ...unauthorizedResponse,\n  },\n});\n\n/** Register the self-service subscription endpoints plus the admin audit list. */\nexport function registerNotificationSubscriptions(app: ShelfRouter): void {\n  app.openapi(getSubscriptionRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    const row = await new NotificationSubscriptionModel(getStore().db).getFor(\n      project.id,\n      currentUserId(),\n    );\n    return c.json(row ? toPublic(row) : null);\n  });\n\n  app.openapi(putSubscriptionRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    const body = c.req.valid(\"json\");\n    const row = await new NotificationSubscriptionModel(getStore().db).upsert(\n      project.id,\n      currentUserId(),\n      body,\n    );\n    return c.json(toPublic(row));\n  });\n\n  app.openapi(deleteSubscriptionRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    await new NotificationSubscriptionModel(getStore().db).remove(project.id, currentUserId());\n    return c.body(null, 204);\n  });\n\n  app.openapi(listSubscriptionsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const rows = await new NotificationSubscriptionModel(getStore().db).list(project.id);\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n}\n"],"mappings":";;;;;;;;;AAcA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AACtF,MAAM,cAAsC,CAAC,OAAO;;AAGpD,SAAS,SAAS,KAMhB;CACA,OAAO;EACL,WAAW,IAAI;EACf,QAAQ,IAAI;EACZ,QAAQ,8BAA8B,SAAS,GAAG;EAClD,KAAK,8BAA8B,MAAM,GAAG;EAC5C,SAAS,IAAI;CACf;AACF;;AAGA,SAAS,gBAAwB;CAC/B,MAAM,OAAO,SAAS,CAAC,CAAC;CACxB,IAAI,CAAC,MACH,aAAa;CAEf,OAAO,KAAK;AACd;AAEA,MAAM,uBAAuB,YAAY;CACvC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,+BAA+B,SAAS,EAAE,EAAE;GACrF,aAAa;EACf;EACA,GAAGA;EACH,GAAGC;CACL;AACF,CAAC;AAED,MAAM,uBAAuB,YAAY;CACvC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kCAAkC,EAAE,EAAE;CACzF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,+BAA+B,EAAE;GAC1E,aAAa;EACf;EACA,GAAGD;EACH,GAAGC;CACL;AACF,CAAC;AAED,MAAM,0BAA0B,YAAY;CAC1C,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK,EAAE,aAAa,gDAAgD;EACpE,GAAGD;EACH,GAAGC;CACL;AACF,CAAC;AAED,MAAM,yBAAyB,YAAY;CACzC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,+BAA+B,MAAM,EAAE,EAAE;GAClF,aAAa;EACf;EACA,GAAGD;EACH,GAAGC;CACL;AACF,CAAC;;AAGD,SAAgB,kCAAkC,KAAwB;CACxE,IAAI,QAAQ,sBAAsB,OAAO,MAAM;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,MAAM,MAAM,MAAM,IAAI,8BAA8B,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OACjE,QAAQ,IACR,cAAc,CAChB;EACA,OAAO,EAAE,KAAK,MAAM,SAAS,GAAG,IAAI,IAAI;CAC1C,CAAC;CAED,IAAI,QAAQ,sBAAsB,OAAO,MAAM;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,MAAM,IAAI,8BAA8B,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OACjE,QAAQ,IACR,cAAc,GACd,IACF;EACA,OAAO,EAAE,KAAK,SAAS,GAAG,CAAC;CAC7B,CAAC;CAED,IAAI,QAAQ,yBAAyB,OAAO,MAAM;EAChD,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,MAAM,IAAI,8BAA8B,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,cAAc,CAAC;EACzF,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;CAED,IAAI,QAAQ,wBAAwB,OAAO,MAAM;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,MAAM,IAAI,8BAA8B,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;EACnF,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;AACH"}