@storyshelf/app 0.5.3

package/dist/routers/tokens.mjs

@@ -0,0 +1,91 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
+import { notFound as notFound$1, tokenCreateSchema, tokenCreatedSchema, tokenPublicSchema, unauthorized } from "./schemas.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+import { TokenModel } from "@storyshelf/core/models";
+import { randomToken } from "@storyshelf/core/utils";
+//#region src/routers/tokens.ts
+const ADMIN_ROLES = ["admin"];
+const listTokensRoute = createRoute({
+	method: "get",
+	tags: ["Tokens"],
+	summary: "List API tokens",
+	path: "/api/v1/projects/{slug}/tokens",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: tokenPublicSchema.array() } },
+			description: "List API tokens"
+		},
+		...notFound$1,
+		...unauthorized
+	}
+});
+const createTokenRoute = createRoute({
+	method: "post",
+	tags: ["Tokens"],
+	summary: "Create an API token",
+	path: "/api/v1/projects/{slug}/tokens",
+	request: {
+		params: z.object({ slug: z.string() }),
+		body: { content: { "application/json": { schema: tokenCreateSchema } } }
+	},
+	responses: {
+		201: {
+			content: { "application/json": { schema: tokenCreatedSchema } },
+			description: "Created token"
+		},
+		...notFound$1
+	}
+});
+const deleteTokenRoute = createRoute({
+	method: "delete",
+	tags: ["Tokens"],
+	summary: "Delete an API token",
+	path: "/api/v1/projects/{slug}/tokens/{tokenId}",
+	request: { params: z.object({
+		slug: z.string(),
+		tokenId: z.string()
+	}) },
+	responses: {
+		204: { description: "Deleted token" },
+		...notFound$1
+	}
+});
+/** Register the project API token list, create, and revoke endpoints. */
+function registerTokens(app) {
+	app.openapi(listTokensRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const tokens = await new TokenModel(getStore().db).list(project.id);
+		return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));
+	});
+	app.openapi(createTokenRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const body = c.req.valid("json");
+		const token = randomToken("shelf_");
+		await new TokenModel(getStore().db).create(project.id, {
+			name: body.name,
+			hash: token.hash,
+			userId: getStore().user?.id ?? null
+		});
+		return c.json({
+			...body,
+			token: token.value
+		}, 201);
+	});
+	app.openapi(deleteTokenRoute, async (c) => {
+		const { slug, tokenId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		const found = await new TokenModel(getStore().db).get(project.id, tokenId);
+		if (!found) notFound("Token not found");
+		await new TokenModel(getStore().db).remove(found.id);
+		return c.body(null, 204);
+	});
+}
+//#endregion
+export { registerTokens };
+
+//# sourceMappingURL=tokens.mjs.map

package/dist/routers/tokens.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.mjs","names":["notFoundResponse"],"sources":["../../src/routers/tokens.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { TokenModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { randomToken } from \"@storyshelf/core/utils\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  tokenCreatedSchema,\n  tokenCreateSchema,\n  tokenPublicSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listTokensRoute = createRoute({\n  method: \"get\",\n  tags: [\"Tokens\"],\n  summary: \"List API tokens\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: tokenPublicSchema.array() } },\n      description: \"List API tokens\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createTokenRoute = createRoute({\n  method: \"post\",\n  tags: [\"Tokens\"],\n  summary: \"Create an API token\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: tokenCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: tokenCreatedSchema } },\n      description: \"Created token\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteTokenRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Tokens\"],\n  summary: \"Delete an API token\",\n  path: \"/api/v1/projects/{slug}/tokens/{tokenId}\",\n  request: { params: z.object({ slug: z.string(), tokenId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted token\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project API token list, create, and revoke endpoints. */\nexport function registerTokens(app: ShelfRouter): void {\n  app.openapi(listTokensRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const tokens = await new TokenModel(getStore().db).list(project.id);\n    return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));\n  });\n\n  app.openapi(createTokenRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const token = randomToken(\"shelf_\");\n    await new TokenModel(getStore().db).create(project.id, {\n      name: body.name,\n      hash: token.hash,\n      userId: getStore().user?.id ?? null,\n    });\n    return c.json({ ...body, token: token.value }, 201);\n  });\n\n  app.openapi(deleteTokenRoute, async (c) => {\n    const { slug, tokenId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const found = await new TokenModel(getStore().db).get(project.id, tokenId);\n    if (!found) {\n      notFound(\"Token not found\");\n    }\n    await new TokenModel(getStore().db).remove(found.id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,MAAM,EAAE,EAAE;GACrE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CACzE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,eAAe,KAAwB;CACrD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,SAAS,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;EAClE,OAAO,EAAE,KAAK,OAAO,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC;CAC9D,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,YAAY,QAAQ;EAClC,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACrD,MAAM,KAAK;GACX,MAAM,MAAM;GACZ,QAAQ,SAAS,CAAC,CAAC,MAAM,MAAM;EACjC,CAAC;EACD,OAAO,EAAE,KAAK;GAAE,GAAG;GAAM,OAAO,MAAM;EAAM,GAAG,GAAG;CACpD,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/ui.mjs

@@ -0,0 +1,166 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { hxRedirect } from "./htmx.mjs";
+import { flash } from "./flash.mjs";
+import { currentProjectRole } from "./helpers.mjs";
+import { loadBaselineView } from "./baseline-guard.mjs";
+import { renderBuildDetailPage } from "../pages/build-detail.mjs";
+import { renderBuildDiffPage } from "../pages/build-diff.mjs";
+import { renderActiveQueue, renderComputeJobsPage } from "../pages/compute-jobs.mjs";
+import { renderLabelDetailPage, renderLabelsPage } from "../pages/label-detail.mjs";
+import { renderLibraryPage } from "../pages/library.mjs";
+import { renderProjectBuildsPage } from "../pages/project-builds.mjs";
+import { renderProjectCreatePage } from "../pages/project-create.mjs";
+import { renderProjectsPage } from "../pages/projects.mjs";
+import { renderRootPage } from "../pages/root.mjs";
+import { registerSettingsPages } from "./settings.mjs";
+import { BuildModel, CommentModel, LabelModel, ProjectModel, SnapshotModel } from "@storyshelf/core/models";
+//#region src/routers/ui.ts
+function asString(value) {
+	return typeof value === "string" ? value.trim() : void 0;
+}
+function decodeRest(value) {
+	try {
+		return decodeURIComponent(value);
+	} catch {
+		return "";
+	}
+}
+async function getQueueView() {
+	const queue = getStore().captureQueue;
+	if (!queue) return [];
+	return (await queue.active()).map((entry) => ({
+		buildId: entry.buildId,
+		status: entry.status,
+		queuedAt: entry.queuedAt,
+		startedAt: entry.startedAt,
+		finishedAt: entry.finishedAt,
+		error: entry.error
+	}));
+}
+async function canManageJobs(projectId) {
+	const { authEnabled } = getStore();
+	if (!authEnabled) return true;
+	const roles = [
+		"developer",
+		"approver",
+		"admin"
+	];
+	const role = await currentProjectRole(projectId);
+	return Boolean(role && roles.includes(role));
+}
+/** Register the server-rendered HTML pages (projects, builds, diffs, labels, settings). */
+function registerUiPages(app) {
+	app.get("/", async (c) => c.html(await renderRootPage()));
+	app.get("/projects", async (c) => c.html(await renderProjectsPage()));
+	app.get("/projects/new", async (c) => c.html(await renderProjectCreatePage()));
+	app.post("/projects/new", async (c) => {
+		const form = await c.req.formData();
+		const name = asString(form.get("name"));
+		const gitRepository = asString(form.get("gitRepository"));
+		const gitDefaultBranch = asString(form.get("gitDefaultBranch"));
+		if (!name) return c.html(renderProjectCreatePage({
+			values: {
+				name,
+				gitRepository,
+				gitDefaultBranch
+			},
+			errors: { name: "Name is required" }
+		}), 400);
+		try {
+			const project = await new ProjectModel(getStore().db).create({
+				name,
+				gitRepository,
+				gitDefaultBranch
+			});
+			await new LabelModel(getStore().db).seedFor(project.id);
+			flash(c, `Created ${project.name}`);
+			return hxRedirect(c, `/projects/${project.slug}/library`);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : "Failed to create project";
+			return c.html(renderProjectCreatePage({
+				values: {
+					name,
+					gitRepository,
+					gitDefaultBranch
+				},
+				globalError: message
+			}), 400);
+		}
+	});
+	app.get("/projects/:slug", (c) => c.redirect(`/projects/${c.req.param("slug")}/library`, 302));
+	app.get("/projects/:slug/builds", async (c) => {
+		const html = await renderProjectBuildsPage(c.req.param("slug"), {
+			status: c.req.query("status"),
+			branch: c.req.query("branch")
+		});
+		if (!html) return c.notFound();
+		return c.html(html);
+	});
+	app.get("/projects/:slug/builds/:buildId", async (c) => {
+		const html = await renderBuildDetailPage(c.req.param("buildId"));
+		if (!html) return c.notFound();
+		return c.html(html);
+	});
+	app.get("/projects/:slug/jobs", async (c) => {
+		const slug = c.req.param("slug");
+		const project = await new ProjectModel(getStore().db).getBySlug(slug);
+		if (!project) return c.notFound();
+		const queueView = await getQueueView();
+		const canRetry = await canManageJobs(project.id);
+		if (c.req.query("partial") === "queue") return c.html(renderActiveQueue(slug, queueView));
+		const html = await renderComputeJobsPage(slug, queueView, canRetry, getStore().captureQueue?.metadata.kind === "memory");
+		if (!html) return c.notFound();
+		return c.html(html);
+	});
+	app.get("/projects/:slug/builds/:buildId/diff", async (c) => {
+		const slug = c.req.param("slug");
+		const buildId = c.req.param("buildId");
+		const snapshotId = c.req.query("snapshot");
+		const project = await new ProjectModel(getStore().db).getBySlug(slug);
+		if (!project) return c.notFound();
+		const build = await new BuildModel(getStore().db).get(buildId);
+		if (!build || build.projectId !== project.id) return c.notFound();
+		const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);
+		const comments = await new CommentModel(getStore().db).listByBuild(build.id);
+		const { hasBaseline, drifted } = await loadBaselineView(project, build, snapshots);
+		const { user, authEnabled } = getStore();
+		const canReview = !authEnabled || Boolean(user);
+		return c.html(renderBuildDiffPage({
+			project,
+			build,
+			snapshots,
+			comments,
+			selectedId: snapshotId,
+			canReview,
+			hasBaseline,
+			drifted
+		}));
+	});
+	app.get("/projects/:slug/labels", async (c) => {
+		const html = await renderLabelsPage(c.req.param("slug"));
+		if (!html) return c.notFound();
+		return c.html(html);
+	});
+	app.get("/projects/:slug/labels/:key/*", async (c) => {
+		const slug = c.req.param("slug");
+		const key = c.req.param("key");
+		const base = `/projects/${slug}/labels/${key}/`;
+		const value = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : "";
+		const html = await renderLabelDetailPage(slug, key, value);
+		if (!html) return c.notFound();
+		return c.html(html);
+	});
+	app.get("/projects/:slug/library", async (c) => {
+		const html = await renderLibraryPage(c.req.param("slug"), c.req.query("branch"));
+		if (!html) return c.notFound();
+		return c.html(html);
+	});
+	registerSettingsPages(app);
+}
+//#endregion
+export { registerUiPages };
+
+//# sourceMappingURL=ui.mjs.map

package/dist/routers/ui.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.mjs","names":[],"sources":["../../src/routers/ui.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { CommentModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { renderBuildDetailPage } from \"../pages/build-detail.tsx\";\nimport { renderBuildDiffPage } from \"../pages/build-diff.tsx\";\nimport { renderComputeJobsPage, renderActiveQueue } from \"../pages/compute-jobs.tsx\";\nimport { renderLabelDetailPage, renderLabelsPage } from \"../pages/label-detail.tsx\";\nimport { renderLibraryPage } from \"../pages/library.tsx\";\nimport { renderProjectBuildsPage } from \"../pages/project-builds.tsx\";\nimport { renderProjectCreatePage } from \"../pages/project-create.tsx\";\nimport { renderProjectsPage } from \"../pages/projects.tsx\";\nimport { renderRootPage } from \"../pages/root.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { loadBaselineView } from \"./baseline-guard.ts\";\nimport { flash } from \"./flash.ts\";\nimport { currentProjectRole } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { registerSettingsPages } from \"./settings.ts\";\nfunction asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n\nfunction decodeRest(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return \"\";\n  }\n}\n\ninterface QueueView {\n  buildId: string;\n  status: string;\n  queuedAt: string;\n  startedAt?: string;\n  finishedAt?: string;\n  error?: string;\n}\n\nasync function getQueueView(): Promise<QueueView[]> {\n  const queue = getStore().captureQueue;\n  if (!queue) {\n    return [];\n  }\n  const active = await queue.active();\n  return active.map((entry) => ({\n    buildId: entry.buildId,\n    status: entry.status,\n    queuedAt: entry.queuedAt,\n    startedAt: entry.startedAt,\n    finishedAt: entry.finishedAt,\n    error: entry.error,\n  }));\n}\n\nasync function canManageJobs(projectId: string): Promise<boolean> {\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const roles: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n  const role = await currentProjectRole(projectId);\n  return Boolean(role && roles.includes(role));\n}\n\n/** Register the server-rendered HTML pages (projects, builds, diffs, labels, settings). */\nexport function registerUiPages(app: ShelfRouter): void {\n  // eslint-disable-next-line promise-function-async -- renderRootPage returns RenderedContent (string | Promise<string>)\n  app.get(\"/\", async (c) => c.html(await renderRootPage()));\n  app.get(\"/projects\", async (c) => c.html(await renderProjectsPage()));\n  // eslint-disable-next-line promise-function-async -- renderProjectCreatePage returns RenderedContent (string | Promise<string>)\n  app.get(\"/projects/new\", async (c) => c.html(await renderProjectCreatePage()));\n\n  app.post(\"/projects/new\", async (c) => {\n    const form = await c.req.formData();\n    const name = asString(form.get(\"name\"));\n    const gitRepository = asString(form.get(\"gitRepository\"));\n    const gitDefaultBranch = asString(form.get(\"gitDefaultBranch\"));\n    if (!name) {\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          errors: { name: \"Name is required\" },\n        }),\n        400,\n      );\n    }\n    try {\n      const project = await new ProjectModel(getStore().db).create({\n        name,\n        gitRepository,\n        gitDefaultBranch,\n      });\n      await new LabelModel(getStore().db).seedFor(project.id);\n      flash(c, `Created ${project.name}`);\n      return hxRedirect(c, `/projects/${project.slug}/library`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to create project\";\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          globalError: message,\n        }),\n        400,\n      );\n    }\n  });\n\n  app.get(\"/projects/:slug\", (c) => c.redirect(`/projects/${c.req.param(\"slug\")}/library`, 302));\n\n  app.get(\"/projects/:slug/builds\", async (c) => {\n    const html = await renderProjectBuildsPage(c.req.param(\"slug\"), {\n      status: c.req.query(\"status\"),\n      branch: c.req.query(\"branch\"),\n    });\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId\", async (c) => {\n    const html = await renderBuildDetailPage(c.req.param(\"buildId\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/jobs\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const queueView = await getQueueView();\n    const canRetry = await canManageJobs(project.id);\n    if (c.req.query(\"partial\") === \"queue\") {\n      return c.html(renderActiveQueue(slug, queueView));\n    }\n    const html = await renderComputeJobsPage(\n      slug,\n      queueView,\n      canRetry,\n      getStore().captureQueue?.metadata.kind === \"memory\",\n    );\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId/diff\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    const snapshotId = c.req.query(\"snapshot\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      return c.notFound();\n    }\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const comments = await new CommentModel(getStore().db).listByBuild(build.id);\n    const { hasBaseline, drifted } = await loadBaselineView(project, build, snapshots);\n    const { user, authEnabled } = getStore();\n    const canReview = !authEnabled || Boolean(user);\n    return c.html(\n      renderBuildDiffPage({\n        project,\n        build,\n        snapshots,\n        comments,\n        selectedId: snapshotId,\n        canReview,\n        hasBaseline,\n        drifted,\n      }),\n    );\n  });\n\n  app.get(\"/projects/:slug/labels\", async (c) => {\n    const html = await renderLabelsPage(c.req.param(\"slug\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/labels/:key/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // label value from the raw request path and decode it ourselves.\n    const base = `/projects/${slug}/labels/${key}/`;\n    const value = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const html = await renderLabelDetailPage(slug, key, value);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/library\", async (c) => {\n    const html = await renderLibraryPage(c.req.param(\"slug\"), c.req.query(\"branch\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  registerSettingsPages(app);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsBA,SAAS,SAAS,OAAsD;CACtE,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,KAAK;CACjC,QAAQ;EACN,OAAO;CACT;AACF;AAWA,eAAe,eAAqC;CAClD,MAAM,QAAQ,SAAS,CAAC,CAAC;CACzB,IAAI,CAAC,OACH,OAAO,CAAC;CAGV,QAAO,MADc,MAAM,OAAO,EAAA,CACpB,KAAK,WAAW;EAC5B,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB,OAAO,MAAM;CACf,EAAE;AACJ;AAEA,eAAe,cAAc,WAAqC;CAChE,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,QAAgC;EAAC;EAAa;EAAY;CAAO;CACvE,MAAM,OAAO,MAAM,mBAAmB,SAAS;CAC/C,OAAO,QAAQ,QAAQ,MAAM,SAAS,IAAI,CAAC;AAC7C;;AAGA,SAAgB,gBAAgB,KAAwB;CAEtD,IAAI,IAAI,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,eAAe,CAAC,CAAC;CACxD,IAAI,IAAI,aAAa,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,CAAC,CAAC;CAEpE,IAAI,IAAI,iBAAiB,OAAO,MAAM,EAAE,KAAK,MAAM,wBAAwB,CAAC,CAAC;CAE7E,IAAI,KAAK,iBAAiB,OAAO,MAAM;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,MAAM,gBAAgB,SAAS,KAAK,IAAI,eAAe,CAAC;EACxD,MAAM,mBAAmB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EAC9D,IAAI,CAAC,MACH,OAAO,EAAE,KACP,wBAAwB;GACtB,QAAQ;IAAE;IAAM;IAAe;GAAiB;GAChD,QAAQ,EAAE,MAAM,mBAAmB;EACrC,CAAC,GACD,GACF;EAEF,IAAI;GACF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO;IAC3D;IACA;IACA;GACF,CAAC;GACD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,QAAQ,EAAE;GACtD,MAAM,GAAG,WAAW,QAAQ,MAAM;GAClC,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,SAAS;EAC1D,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KACP,wBAAwB;IACtB,QAAQ;KAAE;KAAM;KAAe;IAAiB;IAChD,aAAa;GACf,CAAC,GACD,GACF;EACF;CACF,CAAC;CAED,IAAI,IAAI,oBAAoB,MAAM,EAAE,SAAS,aAAa,EAAE,IAAI,MAAM,MAAM,EAAE,WAAW,GAAG,CAAC;CAE7F,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,wBAAwB,EAAE,IAAI,MAAM,MAAM,GAAG;GAC9D,QAAQ,EAAE,IAAI,MAAM,QAAQ;GAC5B,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAC9B,CAAC;EACD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,mCAAmC,OAAO,MAAM;EACtD,MAAM,OAAO,MAAM,sBAAsB,EAAE,IAAI,MAAM,SAAS,CAAC;EAC/D,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wBAAwB,OAAO,MAAM;EAC3C,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,WAAW,MAAM,cAAc,QAAQ,EAAE;EAC/C,IAAI,EAAE,IAAI,MAAM,SAAS,MAAM,SAC7B,OAAO,EAAE,KAAK,kBAAkB,MAAM,SAAS,CAAC;EAElD,MAAM,OAAO,MAAM,sBACjB,MACA,WACA,UACA,SAAS,CAAC,CAAC,cAAc,SAAS,SAAS,QAC7C;EACA,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wCAAwC,OAAO,MAAM;EAC3D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU;EACzC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC3E,MAAM,EAAE,aAAa,YAAY,MAAM,iBAAiB,SAAS,OAAO,SAAS;EACjF,MAAM,EAAE,MAAM,gBAAgB,SAAS;EACvC,MAAM,YAAY,CAAC,eAAe,QAAQ,IAAI;EAC9C,OAAO,EAAE,KACP,oBAAoB;GAClB;GACA;GACA;GACA;GACA,YAAY;GACZ;GACA;GACA;EACF,CAAC,CACH;CACF,CAAC;CAED,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,iBAAiB,EAAE,IAAI,MAAM,MAAM,CAAC;EACvD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACpD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAG7B,MAAM,OAAO,aAAa,KAAK,UAAU,IAAI;EAC7C,MAAM,QAAQ,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACxF,MAAM,OAAO,MAAM,sBAAsB,MAAM,KAAK,KAAK;EACzD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,2BAA2B,OAAO,MAAM;EAC9C,MAAM,OAAO,MAAM,kBAAkB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,QAAQ,CAAC;EAC/E,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,sBAAsB,GAAG;AAC3B"}

package/dist/routers/webhooks.mjs

@@ -0,0 +1,97 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { credentialKeys } from "../credential-keys.mjs";
+import { getStore } from "../store.mjs";
+import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
+import { notFound as notFound$1, unauthorized, webhookCreateSchema, webhookCreatedSchema, webhookPublicSchema } from "./schemas.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+import { WebhookModel } from "@storyshelf/core/models";
+import { randomToken } from "@storyshelf/core/utils";
+//#region src/routers/webhooks.ts
+const ADMIN_ROLES = ["admin"];
+const listWebhooksRoute = createRoute({
+	method: "get",
+	tags: ["Webhooks"],
+	summary: "List webhooks",
+	path: "/api/v1/projects/{slug}/webhooks",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: webhookPublicSchema.array() } },
+			description: "List webhooks"
+		},
+		...notFound$1,
+		...unauthorized
+	}
+});
+const createWebhookRoute = createRoute({
+	method: "post",
+	tags: ["Webhooks"],
+	summary: "Create a webhook",
+	path: "/api/v1/projects/{slug}/webhooks",
+	request: {
+		params: z.object({ slug: z.string() }),
+		body: { content: { "application/json": { schema: webhookCreateSchema } } }
+	},
+	responses: {
+		201: {
+			content: { "application/json": { schema: webhookCreatedSchema } },
+			description: "Created webhook"
+		},
+		...notFound$1
+	}
+});
+const deleteWebhookRoute = createRoute({
+	method: "delete",
+	tags: ["Webhooks"],
+	summary: "Delete a webhook",
+	path: "/api/v1/projects/{slug}/webhooks/{webhookId}",
+	request: { params: z.object({
+		slug: z.string(),
+		webhookId: z.string()
+	}) },
+	responses: {
+		204: { description: "Deleted webhook" },
+		...notFound$1
+	}
+});
+/** Register the project webhook list, create, and delete endpoints. */
+function registerWebhooks(app) {
+	app.openapi(listWebhooksRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const webhooks = await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).list(project.id);
+		return c.json(webhooks.map((webhook) => ({
+			id: webhook.id,
+			url: webhook.url,
+			events: WebhookModel.eventsOf(webhook)
+		})));
+	});
+	app.openapi(createWebhookRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const body = c.req.valid("json");
+		const secret = randomToken("whsec_").value;
+		const webhook = await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).create(project.id, {
+			...body,
+			secret
+		});
+		return c.json({
+			id: webhook.id,
+			url: webhook.url,
+			events: body.events ?? [],
+			secret
+		}, 201);
+	});
+	app.openapi(deleteWebhookRoute, async (c) => {
+		const { slug, webhookId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		const webhook = await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).get(project.id, webhookId);
+		if (!webhook) notFound("Webhook not found");
+		await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).remove(project.id, webhook.id);
+		return c.body(null, 204);
+	});
+}
+//#endregion
+export { registerWebhooks };
+
+//# sourceMappingURL=webhooks.mjs.map

package/dist/routers/webhooks.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.mjs","names":["notFoundResponse"],"sources":["../../src/routers/webhooks.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { WebhookModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { randomToken } from \"@storyshelf/core/utils\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  unauthorized,\n  webhookCreatedSchema,\n  webhookCreateSchema,\n  webhookPublicSchema,\n} from \"./schemas.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listWebhooksRoute = createRoute({\n  method: \"get\",\n  tags: [\"Webhooks\"],\n  summary: \"List webhooks\",\n  path: \"/api/v1/projects/{slug}/webhooks\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: webhookPublicSchema.array() } },\n      description: \"List webhooks\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createWebhookRoute = createRoute({\n  method: \"post\",\n  tags: [\"Webhooks\"],\n  summary: \"Create a webhook\",\n  path: \"/api/v1/projects/{slug}/webhooks\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: webhookCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: webhookCreatedSchema } },\n      description: \"Created webhook\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteWebhookRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Webhooks\"],\n  summary: \"Delete a webhook\",\n  path: \"/api/v1/projects/{slug}/webhooks/{webhookId}\",\n  request: { params: z.object({ slug: z.string(), webhookId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted webhook\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project webhook list, create, and delete endpoints. */\nexport function registerWebhooks(app: ShelfRouter): void {\n  app.openapi(listWebhooksRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const webhooks = await new WebhookModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).list(project.id);\n    return c.json(\n      webhooks.map((webhook) => ({\n        id: webhook.id,\n        url: webhook.url,\n        events: WebhookModel.eventsOf(webhook),\n      })),\n    );\n  });\n\n  app.openapi(createWebhookRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const secret = randomToken(\"whsec_\").value;\n    const webhook = await new WebhookModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).create(project.id, { ...body, secret });\n    return c.json({ id: webhook.id, url: webhook.url, events: body.events ?? [], secret }, 201);\n  });\n\n  app.openapi(deleteWebhookRoute, async (c) => {\n    const { slug, webhookId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const webhook = await new WebhookModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).get(project.id, webhookId);\n    if (!webhook) {\n      notFound(\"Webhook not found\");\n    }\n    await new WebhookModel(getStore().db, undefined, credentialKeys(getStore().config)).remove(\n      project.id,\n      webhook.id,\n    );\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;;AAeA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,MAAM,EAAE,EAAE;GACvE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;CAC3E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,qBAAqB,EAAE;GAChE,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,kBAAkB;EACtC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,iBAAiB,KAAwB;CACvD,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,WAAW,MAAM,IAAI,aACzB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,KAAK,QAAQ,EAAE;EACjB,OAAO,EAAE,KACP,SAAS,KAAK,aAAa;GACzB,IAAI,QAAQ;GACZ,KAAK,QAAQ;GACb,QAAQ,aAAa,SAAS,OAAO;EACvC,EAAE,CACJ;CACF,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,SAAS,YAAY,QAAQ,CAAC,CAAC;EACrC,MAAM,UAAU,MAAM,IAAI,aACxB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,OAAO,QAAQ,IAAI;GAAE,GAAG;GAAM;EAAO,CAAC;EACxC,OAAO,EAAE,KAAK;GAAE,IAAI,QAAQ;GAAI,KAAK,QAAQ;GAAK,QAAQ,KAAK,UAAU,CAAC;GAAG;EAAO,GAAG,GAAG;CAC5F,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,UAAU,MAAM,IAAI,aACxB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,IAAI,QAAQ,IAAI,SAAS;EAC3B,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,IAAI,KAAA,GAAW,eAAe,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAClF,QAAQ,IACR,QAAQ,EACV;EACA,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/well-known.mjs

@@ -0,0 +1,43 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+//#region src/routers/well-known.ts
+/** SSO-capable login methods (oauth buttons + SSO) with IdP reply URLs. */
+function ssoProviders(auth, origin) {
+	return auth.loginMethods().filter((method) => method.kind === "oauth" || method.kind === "sso").map((method) => ({
+		id: method.id,
+		label: method.label,
+		redirectUris: method.kind === "sso" ? [`${origin}/api/auth/sso/callback/${method.id}`, `${origin}/api/auth/sso/saml2/sp/acs/${method.id}`] : [`${origin}/api/auth/callback/${method.id}`]
+	}));
+}
+function requestOrigin(c) {
+	return getStore().config.publicBaseUrl ?? new URL(c.req.url).origin;
+}
+/** Register public relying-party helper documents (no auth required). */
+function registerWellKnown(app, auth) {
+	app.get("/.well-known/openid-configuration", (c) => {
+		const origin = requestOrigin(c);
+		const providers = ssoProviders(auth, origin);
+		return c.json({
+			issuer: origin,
+			note: "StoryShelf is an OpenID Connect relying party, not an identity provider. This document helps operators register redirect URIs with their provider; it is not provider metadata.",
+			response_types_supported: ["code"],
+			scopes_supported: [
+				"openid",
+				"email",
+				"profile"
+			],
+			redirect_uris: providers.flatMap((provider) => provider.redirectUris),
+			providers: providers.map((method) => ({
+				id: method.id,
+				label: method.label
+			}))
+		}, 200, { "Cache-Control": "public, max-age=300" });
+	});
+	app.get("/.well-known/change-password", (c) => c.redirect("/profile", 302));
+}
+//#endregion
+export { registerWellKnown };
+
+//# sourceMappingURL=well-known.mjs.map

package/dist/routers/well-known.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"well-known.mjs","names":[],"sources":["../../src/routers/well-known.ts"],"sourcesContent":["import type { Auth } from \"@storyshelf/auth\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\n\n/** One SSO-capable login method with its IdP reply URLs. */\ninterface SsoProviderLink {\n  id: string;\n  label: string;\n  redirectUris: string[];\n}\n\n/** SSO-capable login methods (oauth buttons + SSO) with IdP reply URLs. */\nfunction ssoProviders(auth: Auth, origin: string): SsoProviderLink[] {\n  return auth\n    .loginMethods()\n    .filter((method) => method.kind === \"oauth\" || method.kind === \"sso\")\n    .map((method) => ({\n      id: method.id,\n      label: method.label,\n      redirectUris:\n        method.kind === \"sso\"\n          ? [\n              `${origin}/api/auth/sso/callback/${method.id}`,\n              `${origin}/api/auth/sso/saml2/sp/acs/${method.id}`,\n            ]\n          : [`${origin}/api/auth/callback/${method.id}`],\n    }));\n}\n\nfunction requestOrigin(c: Context): string {\n  return getStore().config.publicBaseUrl ?? new URL(c.req.url).origin;\n}\n\n/** Register public relying-party helper documents (no auth required). */\nexport function registerWellKnown(app: ShelfRouter, auth: Auth): void {\n  app.get(\"/.well-known/openid-configuration\", (c) => {\n    const origin = requestOrigin(c);\n    const providers = ssoProviders(auth, origin);\n    return c.json(\n      {\n        issuer: origin,\n        note: \"StoryShelf is an OpenID Connect relying party, not an identity provider. This document helps operators register redirect URIs with their provider; it is not provider metadata.\",\n        response_types_supported: [\"code\"],\n        scopes_supported: [\"openid\", \"email\", \"profile\"],\n        redirect_uris: providers.flatMap((provider) => provider.redirectUris),\n        providers: providers.map((method) => ({ id: method.id, label: method.label })),\n      },\n      200,\n      { \"Cache-Control\": \"public, max-age=300\" },\n    );\n  });\n\n  // oxlint-disable-next-line typescript/promise-function-async -- Hono handler may return Response directly\n  app.get(\"/.well-known/change-password\", (c) => c.redirect(\"/profile\", 302));\n}\n"],"mappings":";;;;;;AAaA,SAAS,aAAa,MAAY,QAAmC;CACnE,OAAO,KACJ,aAAa,CAAC,CACd,QAAQ,WAAW,OAAO,SAAS,WAAW,OAAO,SAAS,KAAK,CAAC,CACpE,KAAK,YAAY;EAChB,IAAI,OAAO;EACX,OAAO,OAAO;EACd,cACE,OAAO,SAAS,QACZ,CACE,GAAG,OAAO,yBAAyB,OAAO,MAC1C,GAAG,OAAO,6BAA6B,OAAO,IAChD,IACA,CAAC,GAAG,OAAO,qBAAqB,OAAO,IAAI;CACnD,EAAE;AACN;AAEA,SAAS,cAAc,GAAoB;CACzC,OAAO,SAAS,CAAC,CAAC,OAAO,iBAAiB,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC;AAC/D;;AAGA,SAAgB,kBAAkB,KAAkB,MAAkB;CACpE,IAAI,IAAI,sCAAsC,MAAM;EAClD,MAAM,SAAS,cAAc,CAAC;EAC9B,MAAM,YAAY,aAAa,MAAM,MAAM;EAC3C,OAAO,EAAE,KACP;GACE,QAAQ;GACR,MAAM;GACN,0BAA0B,CAAC,MAAM;GACjC,kBAAkB;IAAC;IAAU;IAAS;GAAS;GAC/C,eAAe,UAAU,SAAS,aAAa,SAAS,YAAY;GACpE,WAAW,UAAU,KAAK,YAAY;IAAE,IAAI,OAAO;IAAI,OAAO,OAAO;GAAM,EAAE;EAC/E,GACA,KACA,EAAE,iBAAiB,sBAAsB,CAC3C;CACF,CAAC;CAGD,IAAI,IAAI,iCAAiC,MAAM,EAAE,SAAS,YAAY,GAAG,CAAC;AAC5E"}

package/dist/runtime.mjs

@@ -0,0 +1,52 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { validateConfig, validateUiConfig } from "@storyshelf/core/config";
+import { createShelfLogger } from "@storyshelf/core/logger";
+//#region src/runtime.ts
+function addOptionalSnapshots(snap, options) {
+	if (options.captureRunner) snap["captureRunner"] = options.captureRunner.metadata;
+	if (options.captureQueue) snap["captureQueue"] = options.captureQueue.metadata;
+}
+/**
+* Build a snapshot of adapter metadata for the `/api/v1/health` and docs.
+* Collects the name/version of every wired adapter so operators can verify
+* the running configuration at a glance.
+*
+* @param options - Router options containing the wired adapters
+* @returns Metadata map keyed by adapter category (e.g. `database`, `git:github`)
+*/
+function buildAdapterSnapshot(options) {
+	const snap = {
+		database: options.database.metadata,
+		storage: options.storage.metadata
+	};
+	addOptionalSnapshots(snap, options);
+	for (const p of options.gitHosts ?? []) snap[`git:${p.metadata.kind}`] = p.metadata;
+	for (const n of options.notifiers ?? []) snap[`notify:${n.metadata.kind}`] = n.metadata;
+	return snap;
+}
+/** Validate config/ui and derive runtime singletons from options. */
+function resolveRuntime(options) {
+	const rawConfig = options.config ? validateConfig(options.config) : {};
+	const ui = options.ui ? validateUiConfig(options.ui) : {};
+	const logger = options.logger ?? createShelfLogger();
+	const authEnabled = options.auth !== void 0;
+	const gitHosts = options.gitHosts ?? [];
+	const notifiers = options.notifiers ?? [];
+	return {
+		config: rawConfig.adapters ? rawConfig : {
+			...rawConfig,
+			adapters: buildAdapterSnapshot(options)
+		},
+		ui,
+		logger,
+		authEnabled,
+		gitHosts,
+		notifiers
+	};
+}
+//#endregion
+export { buildAdapterSnapshot, resolveRuntime };
+
+//# sourceMappingURL=runtime.mjs.map

package/dist/runtime.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.mjs","names":[],"sources":["../src/runtime.ts"],"sourcesContent":["import type { GitHostProvider } from \"@storyshelf/core/adapter/git-host\";\nimport type { AdapterMetadata, GitAdapterMetadata } from \"@storyshelf/core/adapter/metadata\";\nimport type { NotifierProvider } from \"@storyshelf/core/adapter/notifier\";\nimport type { ShelfConfig, ShelfOptions, UIConfig } from \"@storyshelf/core/config\";\nimport { validateConfig, validateUiConfig } from \"@storyshelf/core/config\";\nimport type { Logger } from \"@storyshelf/core/logger\";\nimport { createShelfLogger } from \"@storyshelf/core/logger\";\n\n/**\n * Resolved server runtime derived from {@link ShelfOptions}.\n * Holds the validated config, UI branding, structured logger, and\n * computed helpers like whether auth is enabled and which git hosts are wired.\n */\nexport interface ServerRuntime {\n  config: ShelfConfig;\n  ui: UIConfig;\n  logger: Logger;\n  authEnabled: boolean;\n  gitHosts: GitHostProvider[];\n  notifiers: NotifierProvider[];\n}\n\nfunction addOptionalSnapshots(\n  snap: Record<string, AdapterMetadata | GitAdapterMetadata>,\n  options: ShelfOptions,\n): void {\n  if (options.captureRunner) {\n    snap[\"captureRunner\"] = options.captureRunner.metadata;\n  }\n  if (options.captureQueue) {\n    snap[\"captureQueue\"] = options.captureQueue.metadata;\n  }\n}\n\n/**\n * Build a snapshot of adapter metadata for the `/api/v1/health` and docs.\n * Collects the name/version of every wired adapter so operators can verify\n * the running configuration at a glance.\n *\n * @param options - Router options containing the wired adapters\n * @returns Metadata map keyed by adapter category (e.g. `database`, `git:github`)\n */\nexport function buildAdapterSnapshot(\n  options: ShelfOptions,\n): Record<string, AdapterMetadata | GitAdapterMetadata> {\n  const snap: Record<string, AdapterMetadata | GitAdapterMetadata> = {\n    database: options.database.metadata,\n    storage: options.storage.metadata,\n  };\n  addOptionalSnapshots(snap, options);\n  for (const p of options.gitHosts ?? []) {\n    snap[`git:${p.metadata.kind}`] = p.metadata;\n  }\n  for (const n of options.notifiers ?? []) {\n    snap[`notify:${n.metadata.kind}`] = n.metadata;\n  }\n  return snap;\n}\n\n/** Validate config/ui and derive runtime singletons from options. */\nexport function resolveRuntime(options: ShelfOptions): ServerRuntime {\n  // eslint-disable-next-line typescript/no-unnecessary-type-assertion -- ShelfConfig lacks index signature\n  const rawConfig = options.config\n    ? validateConfig(options.config as unknown as Record<string, unknown>)\n    : {};\n  // eslint-disable-next-line typescript/no-unnecessary-type-assertion -- UIConfig lacks index signature\n  const ui = options.ui ? validateUiConfig(options.ui as unknown as Record<string, unknown>) : {};\n  const logger = options.logger ?? createShelfLogger();\n  const authEnabled = options.auth !== undefined;\n  const gitHosts = options.gitHosts ?? [];\n  const notifiers = options.notifiers ?? [];\n  // Adapter introspection — auto-populate config.adapters if not supplied\n  const config: ShelfConfig = rawConfig.adapters\n    ? rawConfig\n    : {\n        ...rawConfig,\n        adapters: buildAdapterSnapshot(options),\n      };\n  return { config, ui, logger, authEnabled, gitHosts, notifiers };\n}\n"],"mappings":";;;;;;AAsBA,SAAS,qBACP,MACA,SACM;CACN,IAAI,QAAQ,eACV,KAAK,mBAAmB,QAAQ,cAAc;CAEhD,IAAI,QAAQ,cACV,KAAK,kBAAkB,QAAQ,aAAa;AAEhD;;;;;;;;;AAUA,SAAgB,qBACd,SACsD;CACtD,MAAM,OAA6D;EACjE,UAAU,QAAQ,SAAS;EAC3B,SAAS,QAAQ,QAAQ;CAC3B;CACA,qBAAqB,MAAM,OAAO;CAClC,KAAK,MAAM,KAAK,QAAQ,YAAY,CAAC,GACnC,KAAK,OAAO,EAAE,SAAS,UAAU,EAAE;CAErC,KAAK,MAAM,KAAK,QAAQ,aAAa,CAAC,GACpC,KAAK,UAAU,EAAE,SAAS,UAAU,EAAE;CAExC,OAAO;AACT;;AAGA,SAAgB,eAAe,SAAsC;CAEnE,MAAM,YAAY,QAAQ,SACtB,eAAe,QAAQ,MAA4C,IACnE,CAAC;CAEL,MAAM,KAAK,QAAQ,KAAK,iBAAiB,QAAQ,EAAwC,IAAI,CAAC;CAC9F,MAAM,SAAS,QAAQ,UAAU,kBAAkB;CACnD,MAAM,cAAc,QAAQ,SAAS,KAAA;CACrC,MAAM,WAAW,QAAQ,YAAY,CAAC;CACtC,MAAM,YAAY,QAAQ,aAAa,CAAC;CAQxC,OAAO;EAAE,QANmB,UAAU,WAClC,YACA;GACE,GAAG;GACH,UAAU,qBAAqB,OAAO;EACxC;EACa;EAAI;EAAQ;EAAa;EAAU;CAAU;AAChE"}

package/dist/store.mjs

@@ -0,0 +1,20 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { AsyncLocalStorage } from "node:async_hooks";
+//#region src/store.ts
+const storage = new AsyncLocalStorage();
+/** Run a function with the given request store in scope. */
+function runWithStore(store, fn) {
+	return storage.run(store, fn);
+}
+/** Return the current request store, throwing outside a request scope. */
+function getStore() {
+	const store = storage.getStore();
+	if (!store) throw new Error("Store not available. Use runWithStore().");
+	return store;
+}
+//#endregion
+export { getStore, runWithStore };
+
+//# sourceMappingURL=store.mjs.map

package/dist/store.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.mjs","names":[],"sources":["../src/store.ts"],"sourcesContent":["import type { CaptureQueue } from \"@storyshelf/core/adapter/capture-queue\";\nimport type { DatabaseAdapter } from \"@storyshelf/core/adapter/database\";\nimport type { GitHostProvider } from \"@storyshelf/core/adapter/git-host\";\nimport type { NotifierProvider } from \"@storyshelf/core/adapter/notifier\";\nimport type { StorageAdapter } from \"@storyshelf/core/adapter/storage\";\nimport type { ShelfConfig, UIConfig } from \"@storyshelf/core/config\";\nimport type { Logger } from \"@storyshelf/core/logger\";\nimport type { AuthUser } from \"@storyshelf/core/types\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\n/** Request-scoped dependencies and session state. */\nexport interface Store {\n  db: DatabaseAdapter;\n  storage: StorageAdapter;\n  config: ShelfConfig;\n  ui: UIConfig;\n  logger: Logger;\n  user: AuthUser | null;\n  authEnabled: boolean;\n  /** Raw session cookie value (\"default\" when anonymous); binds CSRF tokens. */\n  sessionId: string;\n  enqueueCapture?: (buildId: string, reqId?: string) => Promise<void>;\n  captureQueue?: CaptureQueue | null;\n  gitHosts: GitHostProvider[];\n  notifiers: NotifierProvider[];\n}\n\nconst storage = new AsyncLocalStorage<Store>();\n\n/** Run a function with the given request store in scope. */\nexport function runWithStore<T>(store: Store, fn: () => T): T {\n  return storage.run(store, fn);\n}\n\n/** Return the current request store, throwing outside a request scope. */\nexport function getStore(): Store {\n  const store = storage.getStore();\n  if (!store) {\n    throw new Error(\"Store not available. Use runWithStore().\");\n  }\n  return store;\n}\n"],"mappings":";;;;;AA2BA,MAAM,UAAU,IAAI,kBAAyB;;AAG7C,SAAgB,aAAgB,OAAc,IAAgB;CAC5D,OAAO,QAAQ,IAAI,OAAO,EAAE;AAC9B;;AAGA,SAAgB,WAAkB;CAChC,MAAM,QAAQ,QAAQ,SAAS;CAC/B,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,0CAA0C;CAE5D,OAAO;AACT"}

package/dist/ui/avatar.mjs

@@ -0,0 +1,76 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { css } from "./css.mjs";
+import { jsx } from "hono/jsx/jsx-runtime";
+//#region src/ui/avatar.tsx
+const avatarBase = css`
+  /* avatar */
+  flex: none;
+  display: inline-grid;
+  place-items: center;
+  width: 1.75rem;
+  height: 1.75rem;
+  border-radius: var(--radius-pill);
+  background: var(--accent-subtle);
+  color: var(--accent-fg);
+  border: 1px solid var(--accent-border);
+  font-size: var(--text-xs);
+  font-weight: 650;
+  line-height: 1;
+  overflow: hidden;
+  object-fit: cover;
+  user-select: none;
+`;
+const avatarSizes = {
+	sm: css`
+  /* avatar-sm */
+  ${avatarBase}
+  width: 1.375rem;
+  height: 1.375rem;
+  font-size: 0.65rem;
+`,
+	md: avatarBase,
+	lg: css`
+  /* avatar-lg */
+  ${avatarBase}
+  width: 2.5rem;
+  height: 2.5rem;
+  font-size: var(--text-base);
+`
+};
+css`
+  /* avatar-group */
+  display: inline-flex;
+  & > * + * {
+    margin-left: -0.4rem;
+    box-shadow: 0 0 0 2px var(--surface-card);
+  }
+`;
+/** Up to two initials from a display name or email. */
+function initials(name) {
+	const parts = name.replace(/@.*$/u, "").split(/[\s._-]+/u).filter((part) => part.length > 0);
+	const first = parts[0];
+	const last = parts.at(-1);
+	if (first === void 0 || last === void 0) return "";
+	return (parts.length > 1 ? `${first.slice(0, 1)}${last.slice(0, 1)}` : first.slice(0, 2)).toUpperCase();
+}
+/** Round user image, falling back to tinted initials (the brand accent shows subtly). */
+const Avatar = ({ name, src, size = "md" }) => {
+	if (src) return /* @__PURE__ */ jsx("img", {
+		class: avatarSizes[size],
+		src,
+		alt: name,
+		loading: "lazy"
+	});
+	return /* @__PURE__ */ jsx("span", {
+		class: avatarSizes[size],
+		role: "img",
+		"aria-label": name,
+		children: initials(name) || "?"
+	});
+};
+//#endregion
+export { Avatar, initials };
+
+//# sourceMappingURL=avatar.mjs.map

package/dist/ui/avatar.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatar.mjs","names":[],"sources":["../../src/ui/avatar.tsx"],"sourcesContent":["import type { FC } from \"hono/jsx\";\nimport { css } from \"./css.ts\";\n\n/* eslint-disable promise-function-async -- Hono JSX components return HtmlEscapedString | Promise<HtmlEscapedString> */\n\ntype AvatarSize = \"sm\" | \"md\" | \"lg\";\n\nconst avatarBase = css`\n  /* avatar */\n  flex: none;\n  display: inline-grid;\n  place-items: center;\n  width: 1.75rem;\n  height: 1.75rem;\n  border-radius: var(--radius-pill);\n  background: var(--accent-subtle);\n  color: var(--accent-fg);\n  border: 1px solid var(--accent-border);\n  font-size: var(--text-xs);\n  font-weight: 650;\n  line-height: 1;\n  overflow: hidden;\n  object-fit: cover;\n  user-select: none;\n`;\n\nconst avatarSm = css`\n  /* avatar-sm */\n  ${avatarBase}\n  width: 1.375rem;\n  height: 1.375rem;\n  font-size: 0.65rem;\n`;\n\nconst avatarLg = css`\n  /* avatar-lg */\n  ${avatarBase}\n  width: 2.5rem;\n  height: 2.5rem;\n  font-size: var(--text-base);\n`;\n\nconst avatarSizes: Record<AvatarSize, Promise<string>> = {\n  sm: avatarSm,\n  md: avatarBase,\n  lg: avatarLg,\n};\n\nconst avatarGroup = css`\n  /* avatar-group */\n  display: inline-flex;\n  & > * + * {\n    margin-left: -0.4rem;\n    box-shadow: 0 0 0 2px var(--surface-card);\n  }\n`;\n\n/** Up to two initials from a display name or email. */\nexport function initials(name: string): string {\n  const parts = name\n    .replace(/@.*$/u, \"\")\n    .split(/[\\s._-]+/u)\n    .filter((part) => part.length > 0);\n  const first = parts[0];\n  const last = parts.at(-1);\n  if (first === undefined || last === undefined) {\n    return \"\";\n  }\n  const letters = parts.length > 1 ? `${first.slice(0, 1)}${last.slice(0, 1)}` : first.slice(0, 2);\n  return letters.toUpperCase();\n}\n\n/** Round user image, falling back to tinted initials (the brand accent shows subtly). */\nexport const Avatar: FC<{ name: string; src?: string | null; size?: AvatarSize }> = ({\n  name,\n  src,\n  size = \"md\",\n}) => {\n  if (src) {\n    return <img class={avatarSizes[size]} src={src} alt={name} loading=\"lazy\" />;\n  }\n  return (\n    <span class={avatarSizes[size]} role=\"img\" aria-label={name}>\n      {initials(name) || \"?\"}\n    </span>\n  );\n};\n\n/** Overlapping avatars for a list of people. */\nexport const AvatarGroup: FC<{ children?: unknown }> = ({ children }) => {\n  return <span class={avatarGroup}>{children}</span>;\n};\n"],"mappings":";;;;;;AAOA,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;AAmCtB,MAAM,cAAmD;CACvD,IAAI,GAjBc;;IAEhB,WAAW;;;;;CAgBb,IAAI;CACJ,IAAI,GAXc;;IAEhB,WAAW;;;;;AAUf;AAEoB,GAAG;;;;;;;;;AAUvB,SAAgB,SAAS,MAAsB;CAC7C,MAAM,QAAQ,KACX,QAAQ,SAAS,EAAE,CAAC,CACpB,MAAM,WAAW,CAAC,CAClB,QAAQ,SAAS,KAAK,SAAS,CAAC;CACnC,MAAM,QAAQ,MAAM;CACpB,MAAM,OAAO,MAAM,GAAG,EAAE;CACxB,IAAI,UAAU,KAAA,KAAa,SAAS,KAAA,GAClC,OAAO;CAGT,QADgB,MAAM,SAAS,IAAI,GAAG,MAAM,MAAM,GAAG,CAAC,IAAI,KAAK,MAAM,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,EAAA,CAChF,YAAY;AAC7B;;AAGA,MAAa,UAAwE,EACnF,MACA,KACA,OAAO,WACH;CACJ,IAAI,KACF,OAAO,oBAAC,OAAD;EAAK,OAAO,YAAY;EAAY;EAAK,KAAK;EAAM,SAAQ;CAAQ,CAAA;CAE7E,OACE,oBAAC,QAAD;EAAM,OAAO,YAAY;EAAO,MAAK;EAAM,cAAY;EACpD,UAAA,SAAS,IAAI,KAAK;CACf,CAAA;AAEV"}