@storyshelf/app 0.6.1 → 0.7.0

package/dist/routers/tokens.mjs

@@ -6,7 +6,6 @@ import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
 import { notFound as notFound$1, tokenCreateSchema, tokenCreatedSchema, tokenPublicSchema, unauthorized } from "./schemas.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { TokenModel } from "@storyshelf/core/models";
-import { randomToken } from "@storyshelf/core/utils";
 //#region src/routers/tokens.ts
 const ADMIN_ROLES = ["admin"];
 const listTokensRoute = createRoute({
@@ -65,15 +64,13 @@ function registerTokens(app) {
 	app.openapi(createTokenRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
 		const body = c.req.valid("json");
-		const token = randomToken("shelf_");
-		await new TokenModel(getStore().db).create(project.id, {
+		const { value } = await new TokenModel(getStore().db).issue(project.id, {
 			name: body.name,
-			hash: token.hash,
 			userId: getStore().user?.id ?? null
 		});
 		return c.json({
 			...body,
-			token: token.value
+			token: value
 		}, 201);
 	});
 	app.openapi(deleteTokenRoute, async (c) => {

package/dist/routers/tokens.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.mjs","names":["notFoundResponse"],"sources":["../../src/routers/tokens.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { TokenModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { randomToken } from \"@storyshelf/core/utils\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  tokenCreatedSchema,\n  tokenCreateSchema,\n  tokenPublicSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listTokensRoute = createRoute({\n  method: \"get\",\n  tags: [\"Tokens\"],\n  summary: \"List API tokens\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: tokenPublicSchema.array() } },\n      description: \"List API tokens\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createTokenRoute = createRoute({\n  method: \"post\",\n  tags: [\"Tokens\"],\n  summary: \"Create an API token\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: tokenCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: tokenCreatedSchema } },\n      description: \"Created token\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteTokenRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Tokens\"],\n  summary: \"Delete an API token\",\n  path: \"/api/v1/projects/{slug}/tokens/{tokenId}\",\n  request: { params: z.object({ slug: z.string(), tokenId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted token\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project API token list, create, and revoke endpoints. */\nexport function registerTokens(app: ShelfRouter): void {\n  app.openapi(listTokensRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const tokens = await new TokenModel(getStore().db).list(project.id);\n    return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));\n  });\n\n  app.openapi(createTokenRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const token = randomToken(\"shelf_\");\n    await new TokenModel(getStore().db).create(project.id, {\n      name: body.name,\n      hash: token.hash,\n      userId: getStore().user?.id ?? null,\n    });\n    return c.json({ ...body, token: token.value }, 201);\n  });\n\n  app.openapi(deleteTokenRoute, async (c) => {\n    const { slug, tokenId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const found = await new TokenModel(getStore().db).get(project.id, tokenId);\n    if (!found) {\n      notFound(\"Token not found\");\n    }\n    await new TokenModel(getStore().db).remove(found.id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,MAAM,EAAE,EAAE;GACrE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CACzE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,eAAe,KAAwB;CACrD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,SAAS,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;EAClE,OAAO,EAAE,KAAK,OAAO,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC;CAC9D,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,YAAY,QAAQ;EAClC,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACrD,MAAM,KAAK;GACX,MAAM,MAAM;GACZ,QAAQ,SAAS,CAAC,CAAC,MAAM,MAAM;EACjC,CAAC;EACD,OAAO,EAAE,KAAK;GAAE,GAAG;GAAM,OAAO,MAAM;EAAM,GAAG,GAAG;CACpD,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}
+{"version":3,"file":"tokens.mjs","names":["notFoundResponse"],"sources":["../../src/routers/tokens.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { TokenModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  tokenCreatedSchema,\n  tokenCreateSchema,\n  tokenPublicSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listTokensRoute = createRoute({\n  method: \"get\",\n  tags: [\"Tokens\"],\n  summary: \"List API tokens\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: tokenPublicSchema.array() } },\n      description: \"List API tokens\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createTokenRoute = createRoute({\n  method: \"post\",\n  tags: [\"Tokens\"],\n  summary: \"Create an API token\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: tokenCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: tokenCreatedSchema } },\n      description: \"Created token\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteTokenRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Tokens\"],\n  summary: \"Delete an API token\",\n  path: \"/api/v1/projects/{slug}/tokens/{tokenId}\",\n  request: { params: z.object({ slug: z.string(), tokenId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted token\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project API token list, create, and revoke endpoints. */\nexport function registerTokens(app: ShelfRouter): void {\n  app.openapi(listTokensRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const tokens = await new TokenModel(getStore().db).list(project.id);\n    return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));\n  });\n\n  app.openapi(createTokenRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const { value } = await new TokenModel(getStore().db).issue(project.id, {\n      name: body.name,\n      userId: getStore().user?.id ?? null,\n    });\n    return c.json({ ...body, token: value }, 201);\n  });\n\n  app.openapi(deleteTokenRoute, async (c) => {\n    const { slug, tokenId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const found = await new TokenModel(getStore().db).get(project.id, tokenId);\n    if (!found) {\n      notFound(\"Token not found\");\n    }\n    await new TokenModel(getStore().db).remove(found.id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;AAaA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,MAAM,EAAE,EAAE;GACrE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CACzE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,eAAe,KAAwB;CACrD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,SAAS,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;EAClE,OAAO,EAAE,KAAK,OAAO,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC;CAC9D,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,EAAE,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,QAAQ,IAAI;GACtE,MAAM,KAAK;GACX,QAAQ,SAAS,CAAC,CAAC,MAAM,MAAM;EACjC,CAAC;EACD,OAAO,EAAE,KAAK;GAAE,GAAG;GAAM,OAAO;EAAM,GAAG,GAAG;CAC9C,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/ui.mjs

@@ -2,12 +2,16 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
+import { currentProjectRole } from "./helpers.mjs";
 import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
-import { currentProjectRole } from "./helpers.mjs";
 import { loadBaselineView } from "./baseline-guard.mjs";
+import { loadInsightPanel } from "../insights/panel.mjs";
+import { linkedUsageByStory, linkedUsageFor } from "./links.handlers.mjs";
+import { designUrlsFor, loadDesignResolutions, loadReviewDesign, returnPathOf } from "./design.handlers.mjs";
 import { renderBuildDetailPage } from "../pages/build-detail.mjs";
-import { renderBuildDiffPage } from "../pages/build-diff.mjs";
+import { renderBuildDiffPage, selectedSnapshot } from "../pages/build-diff.mjs";
+import { renderComponentPage } from "../pages/component-detail.mjs";
 import { renderActiveQueue, renderComputeJobsPage } from "../pages/compute-jobs.mjs";
 import { renderLabelDetailPage, renderLabelsPage } from "../pages/label-detail.mjs";
 import { renderLibraryPage } from "../pages/library.mjs";
@@ -15,6 +19,7 @@ import { renderProjectBuildsPage } from "../pages/project-builds.mjs";
 import { renderProjectCreatePage } from "../pages/project-create.mjs";
 import { renderProjectsPage } from "../pages/projects.mjs";
 import { renderRootPage } from "../pages/root.mjs";
+import { loadComponentPage } from "./component.handlers.mjs";
 import { registerSettingsPages } from "./settings.mjs";
 import { BuildModel, CommentModel, LabelModel, ProjectModel, SnapshotModel } from "@storyshelf/core/models";
 //#region src/routers/ui.ts
@@ -100,7 +105,8 @@ function registerUiPages(app) {
 		return c.html(html);
 	});
 	app.get("/projects/:slug/builds/:buildId", async (c) => {
-		const html = await renderBuildDetailPage(c.req.param("buildId"));
+		const buildId = c.req.param("buildId");
+		const html = await renderBuildDetailPage(buildId, await loadBuildUsage(c, buildId));
 		if (!html) return c.notFound();
 		return c.html(html);
 	});
@@ -111,7 +117,7 @@ function registerUiPages(app) {
 		const queueView = await getQueueView();
 		const canRetry = await canManageJobs(project.id);
 		if (c.req.query("partial") === "queue") return c.html(renderActiveQueue(slug, queueView));
-		const html = await renderComputeJobsPage(slug, queueView, canRetry, getStore().captureQueue?.metadata.kind === "memory");
+		const html = await renderComputeJobsPage(slug, queueView, canRetry);
 		if (!html) return c.notFound();
 		return c.html(html);
 	});
@@ -128,6 +134,8 @@ function registerUiPages(app) {
 		const { hasBaseline, drifted } = await loadBaselineView(project, build, snapshots);
 		const { user, authEnabled } = getStore();
 		const canReview = !authEnabled || Boolean(user);
+		const selected = selectedSnapshot(snapshots, snapshotId);
+		const design = selected ? await loadReviewDesign(project, selected, designUrlsFor(await loadDesignResolutions(project, snapshots), selected), returnPathOf(c)).catch(() => []) : [];
 		return c.html(renderBuildDiffPage({
 			project,
 			build,
@@ -136,7 +144,11 @@ function registerUiPages(app) {
 			selectedId: snapshotId,
 			canReview,
 			hasBaseline,
-			drifted
+			drifted,
+			insight: await loadInsightPanel(project, build),
+			design,
+			usage: await linkedUsageFor(c, project, build.id, selectedSnapshot(snapshots, snapshotId)?.storyImportPath ?? null).catch(() => []),
+			publishedBaseDomain: getStore().config.publishedBaseDomain
 		}));
 	});
 	app.get("/projects/:slug/labels", async (c) => {
@@ -153,6 +165,13 @@ function registerUiPages(app) {
 		if (!html) return c.notFound();
 		return c.html(html);
 	});
+	app.get("/projects/:slug/components/*", async (c) => {
+		const slug = c.req.param("slug");
+		const base = `/projects/${slug}/components/`;
+		const path = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : "";
+		const data = await loadComponentPage(c, slug, path, c.req.query("tab"), c.req.query("story"));
+		return data ? c.html(renderComponentPage(data)) : c.notFound();
+	});
 	app.get("/projects/:slug/library", async (c) => {
 		const html = await renderLibraryPage(c.req.param("slug"), c.req.query("branch"));
 		if (!html) return c.notFound();
@@ -160,6 +179,16 @@ function registerUiPages(app) {
 	});
 	registerSettingsPages(app);
 }
+/** Linked-package usage for every story of a build; empty on any failure so the page still renders. */
+async function loadBuildUsage(c, buildId) {
+	try {
+		const build = await new BuildModel(getStore().db).get(buildId);
+		const project = build ? await new ProjectModel(getStore().db).get(build.projectId) : null;
+		return build && project ? await linkedUsageByStory(c, project, build.id) : /* @__PURE__ */ new Map();
+	} catch {
+		return /* @__PURE__ */ new Map();
+	}
+}
 //#endregion
 export { registerUiPages };
 

package/dist/routers/ui.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ui.mjs","names":[],"sources":["../../src/routers/ui.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { CommentModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { renderBuildDetailPage } from \"../pages/build-detail.tsx\";\nimport { renderBuildDiffPage } from \"../pages/build-diff.tsx\";\nimport { renderComputeJobsPage, renderActiveQueue } from \"../pages/compute-jobs.tsx\";\nimport { renderLabelDetailPage, renderLabelsPage } from \"../pages/label-detail.tsx\";\nimport { renderLibraryPage } from \"../pages/library.tsx\";\nimport { renderProjectBuildsPage } from \"../pages/project-builds.tsx\";\nimport { renderProjectCreatePage } from \"../pages/project-create.tsx\";\nimport { renderProjectsPage } from \"../pages/projects.tsx\";\nimport { renderRootPage } from \"../pages/root.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { loadBaselineView } from \"./baseline-guard.ts\";\nimport { flash } from \"./flash.ts\";\nimport { currentProjectRole } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { registerSettingsPages } from \"./settings.ts\";\nfunction asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n\nfunction decodeRest(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return \"\";\n  }\n}\n\ninterface QueueView {\n  buildId: string;\n  status: string;\n  queuedAt: string;\n  startedAt?: string;\n  finishedAt?: string;\n  error?: string;\n}\n\nasync function getQueueView(): Promise<QueueView[]> {\n  const queue = getStore().captureQueue;\n  if (!queue) {\n    return [];\n  }\n  const active = await queue.active();\n  return active.map((entry) => ({\n    buildId: entry.buildId,\n    status: entry.status,\n    queuedAt: entry.queuedAt,\n    startedAt: entry.startedAt,\n    finishedAt: entry.finishedAt,\n    error: entry.error,\n  }));\n}\n\nasync function canManageJobs(projectId: string): Promise<boolean> {\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const roles: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n  const role = await currentProjectRole(projectId);\n  return Boolean(role && roles.includes(role));\n}\n\n/** Register the server-rendered HTML pages (projects, builds, diffs, labels, settings). */\nexport function registerUiPages(app: ShelfRouter): void {\n  // eslint-disable-next-line promise-function-async -- renderRootPage returns RenderedContent (string | Promise<string>)\n  app.get(\"/\", async (c) => c.html(await renderRootPage()));\n  app.get(\"/projects\", async (c) => c.html(await renderProjectsPage()));\n  // eslint-disable-next-line promise-function-async -- renderProjectCreatePage returns RenderedContent (string | Promise<string>)\n  app.get(\"/projects/new\", async (c) => c.html(await renderProjectCreatePage()));\n\n  app.post(\"/projects/new\", async (c) => {\n    const form = await c.req.formData();\n    const name = asString(form.get(\"name\"));\n    const gitRepository = asString(form.get(\"gitRepository\"));\n    const gitDefaultBranch = asString(form.get(\"gitDefaultBranch\"));\n    if (!name) {\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          errors: { name: \"Name is required\" },\n        }),\n        400,\n      );\n    }\n    try {\n      const project = await new ProjectModel(getStore().db).create({\n        name,\n        gitRepository,\n        gitDefaultBranch,\n      });\n      await new LabelModel(getStore().db).seedFor(project.id);\n      flash(c, `Created ${project.name}`);\n      return hxRedirect(c, `/projects/${project.slug}/library`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to create project\";\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          globalError: message,\n        }),\n        400,\n      );\n    }\n  });\n\n  app.get(\"/projects/:slug\", (c) => c.redirect(`/projects/${c.req.param(\"slug\")}/library`, 302));\n\n  app.get(\"/projects/:slug/builds\", async (c) => {\n    const html = await renderProjectBuildsPage(c.req.param(\"slug\"), {\n      status: c.req.query(\"status\"),\n      branch: c.req.query(\"branch\"),\n    });\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId\", async (c) => {\n    const html = await renderBuildDetailPage(c.req.param(\"buildId\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/jobs\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const queueView = await getQueueView();\n    const canRetry = await canManageJobs(project.id);\n    if (c.req.query(\"partial\") === \"queue\") {\n      return c.html(renderActiveQueue(slug, queueView));\n    }\n    const html = await renderComputeJobsPage(\n      slug,\n      queueView,\n      canRetry,\n      getStore().captureQueue?.metadata.kind === \"memory\",\n    );\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId/diff\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    const snapshotId = c.req.query(\"snapshot\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      return c.notFound();\n    }\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const comments = await new CommentModel(getStore().db).listByBuild(build.id);\n    const { hasBaseline, drifted } = await loadBaselineView(project, build, snapshots);\n    const { user, authEnabled } = getStore();\n    const canReview = !authEnabled || Boolean(user);\n    return c.html(\n      renderBuildDiffPage({\n        project,\n        build,\n        snapshots,\n        comments,\n        selectedId: snapshotId,\n        canReview,\n        hasBaseline,\n        drifted,\n      }),\n    );\n  });\n\n  app.get(\"/projects/:slug/labels\", async (c) => {\n    const html = await renderLabelsPage(c.req.param(\"slug\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/labels/:key/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // label value from the raw request path and decode it ourselves.\n    const base = `/projects/${slug}/labels/${key}/`;\n    const value = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const html = await renderLabelDetailPage(slug, key, value);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/library\", async (c) => {\n    const html = await renderLibraryPage(c.req.param(\"slug\"), c.req.query(\"branch\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  registerSettingsPages(app);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsBA,SAAS,SAAS,OAAsD;CACtE,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,KAAK;CACjC,QAAQ;EACN,OAAO;CACT;AACF;AAWA,eAAe,eAAqC;CAClD,MAAM,QAAQ,SAAS,CAAC,CAAC;CACzB,IAAI,CAAC,OACH,OAAO,CAAC;CAGV,QAAO,MADc,MAAM,OAAO,EAAA,CACpB,KAAK,WAAW;EAC5B,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB,OAAO,MAAM;CACf,EAAE;AACJ;AAEA,eAAe,cAAc,WAAqC;CAChE,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,QAAgC;EAAC;EAAa;EAAY;CAAO;CACvE,MAAM,OAAO,MAAM,mBAAmB,SAAS;CAC/C,OAAO,QAAQ,QAAQ,MAAM,SAAS,IAAI,CAAC;AAC7C;;AAGA,SAAgB,gBAAgB,KAAwB;CAEtD,IAAI,IAAI,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,eAAe,CAAC,CAAC;CACxD,IAAI,IAAI,aAAa,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,CAAC,CAAC;CAEpE,IAAI,IAAI,iBAAiB,OAAO,MAAM,EAAE,KAAK,MAAM,wBAAwB,CAAC,CAAC;CAE7E,IAAI,KAAK,iBAAiB,OAAO,MAAM;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,MAAM,gBAAgB,SAAS,KAAK,IAAI,eAAe,CAAC;EACxD,MAAM,mBAAmB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EAC9D,IAAI,CAAC,MACH,OAAO,EAAE,KACP,wBAAwB;GACtB,QAAQ;IAAE;IAAM;IAAe;GAAiB;GAChD,QAAQ,EAAE,MAAM,mBAAmB;EACrC,CAAC,GACD,GACF;EAEF,IAAI;GACF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO;IAC3D;IACA;IACA;GACF,CAAC;GACD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,QAAQ,EAAE;GACtD,MAAM,GAAG,WAAW,QAAQ,MAAM;GAClC,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,SAAS;EAC1D,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KACP,wBAAwB;IACtB,QAAQ;KAAE;KAAM;KAAe;IAAiB;IAChD,aAAa;GACf,CAAC,GACD,GACF;EACF;CACF,CAAC;CAED,IAAI,IAAI,oBAAoB,MAAM,EAAE,SAAS,aAAa,EAAE,IAAI,MAAM,MAAM,EAAE,WAAW,GAAG,CAAC;CAE7F,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,wBAAwB,EAAE,IAAI,MAAM,MAAM,GAAG;GAC9D,QAAQ,EAAE,IAAI,MAAM,QAAQ;GAC5B,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAC9B,CAAC;EACD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,mCAAmC,OAAO,MAAM;EACtD,MAAM,OAAO,MAAM,sBAAsB,EAAE,IAAI,MAAM,SAAS,CAAC;EAC/D,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wBAAwB,OAAO,MAAM;EAC3C,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,WAAW,MAAM,cAAc,QAAQ,EAAE;EAC/C,IAAI,EAAE,IAAI,MAAM,SAAS,MAAM,SAC7B,OAAO,EAAE,KAAK,kBAAkB,MAAM,SAAS,CAAC;EAElD,MAAM,OAAO,MAAM,sBACjB,MACA,WACA,UACA,SAAS,CAAC,CAAC,cAAc,SAAS,SAAS,QAC7C;EACA,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wCAAwC,OAAO,MAAM;EAC3D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU;EACzC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC3E,MAAM,EAAE,aAAa,YAAY,MAAM,iBAAiB,SAAS,OAAO,SAAS;EACjF,MAAM,EAAE,MAAM,gBAAgB,SAAS;EACvC,MAAM,YAAY,CAAC,eAAe,QAAQ,IAAI;EAC9C,OAAO,EAAE,KACP,oBAAoB;GAClB;GACA;GACA;GACA;GACA,YAAY;GACZ;GACA;GACA;EACF,CAAC,CACH;CACF,CAAC;CAED,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,iBAAiB,EAAE,IAAI,MAAM,MAAM,CAAC;EACvD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACpD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAG7B,MAAM,OAAO,aAAa,KAAK,UAAU,IAAI;EAC7C,MAAM,QAAQ,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACxF,MAAM,OAAO,MAAM,sBAAsB,MAAM,KAAK,KAAK;EACzD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,2BAA2B,OAAO,MAAM;EAC9C,MAAM,OAAO,MAAM,kBAAkB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,QAAQ,CAAC;EAC/E,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,sBAAsB,GAAG;AAC3B"}
+{"version":3,"file":"ui.mjs","names":[],"sources":["../../src/routers/ui.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { CommentModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { loadInsightPanel } from \"../insights/panel.ts\";\nimport { renderBuildDetailPage } from \"../pages/build-detail.tsx\";\nimport type { LinkedUsageItem } from \"../pages/build-diff-usage.tsx\";\nimport { renderBuildDiffPage, selectedSnapshot } from \"../pages/build-diff.tsx\";\nimport { renderComponentPage } from \"../pages/component-detail.tsx\";\nimport { renderComputeJobsPage, renderActiveQueue } from \"../pages/compute-jobs.tsx\";\nimport { renderLabelDetailPage, renderLabelsPage } from \"../pages/label-detail.tsx\";\nimport { renderLibraryPage } from \"../pages/library.tsx\";\nimport { renderProjectBuildsPage } from \"../pages/project-builds.tsx\";\nimport { renderProjectCreatePage } from \"../pages/project-create.tsx\";\nimport { renderProjectsPage } from \"../pages/projects.tsx\";\nimport { renderRootPage } from \"../pages/root.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { loadBaselineView } from \"./baseline-guard.ts\";\nimport { loadComponentPage } from \"./component.handlers.ts\";\nimport {\n  designUrlsFor,\n  loadDesignResolutions,\n  loadReviewDesign,\n  returnPathOf,\n} from \"./design.handlers.ts\";\nimport { flash } from \"./flash.ts\";\nimport { currentProjectRole } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { linkedUsageByStory, linkedUsageFor } from \"./links.handlers.ts\";\nimport { registerSettingsPages } from \"./settings.ts\";\nfunction asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n\nfunction decodeRest(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return \"\";\n  }\n}\n\ninterface QueueView {\n  buildId: string;\n  status: string;\n  queuedAt: string;\n  startedAt?: string;\n  finishedAt?: string;\n  error?: string;\n}\n\nasync function getQueueView(): Promise<QueueView[]> {\n  const queue = getStore().captureQueue;\n  if (!queue) {\n    return [];\n  }\n  const active = await queue.active();\n  return active.map((entry) => ({\n    buildId: entry.buildId,\n    status: entry.status,\n    queuedAt: entry.queuedAt,\n    startedAt: entry.startedAt,\n    finishedAt: entry.finishedAt,\n    error: entry.error,\n  }));\n}\n\nasync function canManageJobs(projectId: string): Promise<boolean> {\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const roles: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n  const role = await currentProjectRole(projectId);\n  return Boolean(role && roles.includes(role));\n}\n\n/** Register the server-rendered HTML pages (projects, builds, diffs, labels, settings). */\nexport function registerUiPages(app: ShelfRouter): void {\n  // eslint-disable-next-line promise-function-async -- renderRootPage returns RenderedContent (string | Promise<string>)\n  app.get(\"/\", async (c) => c.html(await renderRootPage()));\n  app.get(\"/projects\", async (c) => c.html(await renderProjectsPage()));\n  // eslint-disable-next-line promise-function-async -- renderProjectCreatePage returns RenderedContent (string | Promise<string>)\n  app.get(\"/projects/new\", async (c) => c.html(await renderProjectCreatePage()));\n\n  app.post(\"/projects/new\", async (c) => {\n    const form = await c.req.formData();\n    const name = asString(form.get(\"name\"));\n    const gitRepository = asString(form.get(\"gitRepository\"));\n    const gitDefaultBranch = asString(form.get(\"gitDefaultBranch\"));\n    if (!name) {\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          errors: { name: \"Name is required\" },\n        }),\n        400,\n      );\n    }\n    try {\n      const project = await new ProjectModel(getStore().db).create({\n        name,\n        gitRepository,\n        gitDefaultBranch,\n      });\n      await new LabelModel(getStore().db).seedFor(project.id);\n      flash(c, `Created ${project.name}`);\n      return hxRedirect(c, `/projects/${project.slug}/library`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to create project\";\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          globalError: message,\n        }),\n        400,\n      );\n    }\n  });\n\n  app.get(\"/projects/:slug\", (c) => c.redirect(`/projects/${c.req.param(\"slug\")}/library`, 302));\n\n  app.get(\"/projects/:slug/builds\", async (c) => {\n    const html = await renderProjectBuildsPage(c.req.param(\"slug\"), {\n      status: c.req.query(\"status\"),\n      branch: c.req.query(\"branch\"),\n    });\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId\", async (c) => {\n    const buildId = c.req.param(\"buildId\");\n    const html = await renderBuildDetailPage(buildId, await loadBuildUsage(c, buildId));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/jobs\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const queueView = await getQueueView();\n    const canRetry = await canManageJobs(project.id);\n    if (c.req.query(\"partial\") === \"queue\") {\n      return c.html(renderActiveQueue(slug, queueView));\n    }\n    const html = await renderComputeJobsPage(slug, queueView, canRetry);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId/diff\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    const snapshotId = c.req.query(\"snapshot\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      return c.notFound();\n    }\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const comments = await new CommentModel(getStore().db).listByBuild(build.id);\n    const { hasBaseline, drifted } = await loadBaselineView(project, build, snapshots);\n    const { user, authEnabled } = getStore();\n    const canReview = !authEnabled || Boolean(user);\n    const selected = selectedSnapshot(snapshots, snapshotId);\n    const design = selected\n      ? await loadReviewDesign(\n          project,\n          selected,\n          designUrlsFor(await loadDesignResolutions(project, snapshots), selected),\n          returnPathOf(c),\n        ).catch(() => [])\n      : [];\n    return c.html(\n      renderBuildDiffPage({\n        project,\n        build,\n        snapshots,\n        comments,\n        selectedId: snapshotId,\n        canReview,\n        hasBaseline,\n        drifted,\n        insight: await loadInsightPanel(project, build),\n        design,\n        usage: await linkedUsageFor(\n          c,\n          project,\n          build.id,\n          selectedSnapshot(snapshots, snapshotId)?.storyImportPath ?? null,\n        ).catch(() => []),\n        publishedBaseDomain: getStore().config.publishedBaseDomain,\n      }),\n    );\n  });\n\n  app.get(\"/projects/:slug/labels\", async (c) => {\n    const html = await renderLabelsPage(c.req.param(\"slug\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/labels/:key/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // label value from the raw request path and decode it ourselves.\n    const base = `/projects/${slug}/labels/${key}/`;\n    const value = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const html = await renderLabelDetailPage(slug, key, value);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/components/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const base = `/projects/${slug}/components/`;\n    const path = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const data = await loadComponentPage(c, slug, path, c.req.query(\"tab\"), c.req.query(\"story\"));\n    return data ? c.html(renderComponentPage(data)) : c.notFound();\n  });\n\n  app.get(\"/projects/:slug/library\", async (c) => {\n    const html = await renderLibraryPage(c.req.param(\"slug\"), c.req.query(\"branch\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  registerSettingsPages(app);\n}\n\n/** Linked-package usage for every story of a build; empty on any failure so the page still renders. */\nasync function loadBuildUsage(\n  c: Context,\n  buildId: string,\n): Promise<Map<string, LinkedUsageItem[]>> {\n  try {\n    const build = await new BuildModel(getStore().db).get(buildId);\n    const project = build ? await new ProjectModel(getStore().db).get(build.projectId) : null;\n    return build && project ? await linkedUsageByStory(c, project, build.id) : new Map();\n  } catch {\n    return new Map();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,SAAS,SAAS,OAAsD;CACtE,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,KAAK;CACjC,QAAQ;EACN,OAAO;CACT;AACF;AAWA,eAAe,eAAqC;CAClD,MAAM,QAAQ,SAAS,CAAC,CAAC;CACzB,IAAI,CAAC,OACH,OAAO,CAAC;CAGV,QAAO,MADc,MAAM,OAAO,EAAA,CACpB,KAAK,WAAW;EAC5B,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB,OAAO,MAAM;CACf,EAAE;AACJ;AAEA,eAAe,cAAc,WAAqC;CAChE,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,QAAgC;EAAC;EAAa;EAAY;CAAO;CACvE,MAAM,OAAO,MAAM,mBAAmB,SAAS;CAC/C,OAAO,QAAQ,QAAQ,MAAM,SAAS,IAAI,CAAC;AAC7C;;AAGA,SAAgB,gBAAgB,KAAwB;CAEtD,IAAI,IAAI,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,eAAe,CAAC,CAAC;CACxD,IAAI,IAAI,aAAa,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,CAAC,CAAC;CAEpE,IAAI,IAAI,iBAAiB,OAAO,MAAM,EAAE,KAAK,MAAM,wBAAwB,CAAC,CAAC;CAE7E,IAAI,KAAK,iBAAiB,OAAO,MAAM;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,MAAM,gBAAgB,SAAS,KAAK,IAAI,eAAe,CAAC;EACxD,MAAM,mBAAmB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EAC9D,IAAI,CAAC,MACH,OAAO,EAAE,KACP,wBAAwB;GACtB,QAAQ;IAAE;IAAM;IAAe;GAAiB;GAChD,QAAQ,EAAE,MAAM,mBAAmB;EACrC,CAAC,GACD,GACF;EAEF,IAAI;GACF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO;IAC3D;IACA;IACA;GACF,CAAC;GACD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,QAAQ,EAAE;GACtD,MAAM,GAAG,WAAW,QAAQ,MAAM;GAClC,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,SAAS;EAC1D,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KACP,wBAAwB;IACtB,QAAQ;KAAE;KAAM;KAAe;IAAiB;IAChD,aAAa;GACf,CAAC,GACD,GACF;EACF;CACF,CAAC;CAED,IAAI,IAAI,oBAAoB,MAAM,EAAE,SAAS,aAAa,EAAE,IAAI,MAAM,MAAM,EAAE,WAAW,GAAG,CAAC;CAE7F,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,wBAAwB,EAAE,IAAI,MAAM,MAAM,GAAG;GAC9D,QAAQ,EAAE,IAAI,MAAM,QAAQ;GAC5B,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAC9B,CAAC;EACD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,mCAAmC,OAAO,MAAM;EACtD,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,OAAO,MAAM,sBAAsB,SAAS,MAAM,eAAe,GAAG,OAAO,CAAC;EAClF,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wBAAwB,OAAO,MAAM;EAC3C,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,WAAW,MAAM,cAAc,QAAQ,EAAE;EAC/C,IAAI,EAAE,IAAI,MAAM,SAAS,MAAM,SAC7B,OAAO,EAAE,KAAK,kBAAkB,MAAM,SAAS,CAAC;EAElD,MAAM,OAAO,MAAM,sBAAsB,MAAM,WAAW,QAAQ;EAClE,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wCAAwC,OAAO,MAAM;EAC3D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU;EACzC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC3E,MAAM,EAAE,aAAa,YAAY,MAAM,iBAAiB,SAAS,OAAO,SAAS;EACjF,MAAM,EAAE,MAAM,gBAAgB,SAAS;EACvC,MAAM,YAAY,CAAC,eAAe,QAAQ,IAAI;EAC9C,MAAM,WAAW,iBAAiB,WAAW,UAAU;EACvD,MAAM,SAAS,WACX,MAAM,iBACJ,SACA,UACA,cAAc,MAAM,sBAAsB,SAAS,SAAS,GAAG,QAAQ,GACvE,aAAa,CAAC,CAChB,CAAC,CAAC,YAAY,CAAC,CAAC,IAChB,CAAC;EACL,OAAO,EAAE,KACP,oBAAoB;GAClB;GACA;GACA;GACA;GACA,YAAY;GACZ;GACA;GACA;GACA,SAAS,MAAM,iBAAiB,SAAS,KAAK;GAC9C;GACA,OAAO,MAAM,eACX,GACA,SACA,MAAM,IACN,iBAAiB,WAAW,UAAU,CAAC,EAAE,mBAAmB,IAC9D,CAAC,CAAC,YAAY,CAAC,CAAC;GAChB,qBAAqB,SAAS,CAAC,CAAC,OAAO;EACzC,CAAC,CACH;CACF,CAAC;CAED,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,iBAAiB,EAAE,IAAI,MAAM,MAAM,CAAC;EACvD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACpD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAG7B,MAAM,OAAO,aAAa,KAAK,UAAU,IAAI;EAC7C,MAAM,QAAQ,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACxF,MAAM,OAAO,MAAM,sBAAsB,MAAM,KAAK,KAAK;EACzD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,gCAAgC,OAAO,MAAM;EACnD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,OAAO,aAAa,KAAK;EAC/B,MAAM,OAAO,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACvF,MAAM,OAAO,MAAM,kBAAkB,GAAG,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC;EAC5F,OAAO,OAAO,EAAE,KAAK,oBAAoB,IAAI,CAAC,IAAI,EAAE,SAAS;CAC/D,CAAC;CAED,IAAI,IAAI,2BAA2B,OAAO,MAAM;EAC9C,MAAM,OAAO,MAAM,kBAAkB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,QAAQ,CAAC;EAC/E,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,sBAAsB,GAAG;AAC3B;;AAGA,eAAe,eACb,GACA,SACyC;CACzC,IAAI;EACF,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,MAAM,UAAU,QAAQ,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS,IAAI;EACrF,OAAO,SAAS,UAAU,MAAM,mBAAmB,GAAG,SAAS,MAAM,EAAE,oBAAI,IAAI,IAAI;CACrF,QAAQ;EACN,uBAAO,IAAI,IAAI;CACjB;AACF"}

package/dist/routers/webhooks.mjs

@@ -1,13 +1,11 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { credentialKeys } from "../credential-keys.mjs";
-import { getStore } from "../store.mjs";
 import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
 import { notFound as notFound$1, unauthorized, webhookCreateSchema, webhookCreatedSchema, webhookPublicSchema } from "./schemas.mjs";
+import { webhookModel } from "./scoped-models.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { WebhookModel } from "@storyshelf/core/models";
-import { randomToken } from "@storyshelf/core/utils";
 //#region src/routers/webhooks.ts
 const ADMIN_ROLES = ["admin"];
 const listWebhooksRoute = createRoute({
@@ -60,7 +58,7 @@ const deleteWebhookRoute = createRoute({
 function registerWebhooks(app) {
 	app.openapi(listWebhooksRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
-		const webhooks = await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).list(project.id);
+		const webhooks = await webhookModel().list(project.id);
 		return c.json(webhooks.map((webhook) => ({
 			id: webhook.id,
 			url: webhook.url,
@@ -70,11 +68,7 @@ function registerWebhooks(app) {
 	app.openapi(createWebhookRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
 		const body = c.req.valid("json");
-		const secret = randomToken("whsec_").value;
-		const webhook = await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).create(project.id, {
-			...body,
-			secret
-		});
+		const { webhook, secret } = await webhookModel().issue(project.id, body);
 		return c.json({
 			id: webhook.id,
 			url: webhook.url,
@@ -85,9 +79,9 @@ function registerWebhooks(app) {
 	app.openapi(deleteWebhookRoute, async (c) => {
 		const { slug, webhookId } = c.req.valid("param");
 		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
-		const webhook = await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).get(project.id, webhookId);
+		const webhook = await webhookModel().get(project.id, webhookId);
 		if (!webhook) notFound("Webhook not found");
-		await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).remove(project.id, webhook.id);
+		await webhookModel().remove(project.id, webhook.id);
 		return c.body(null, 204);
 	});
 }

package/dist/routers/webhooks.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.mjs","names":["notFoundResponse"],"sources":["../../src/routers/webhooks.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { WebhookModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { randomToken } from \"@storyshelf/core/utils\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  unauthorized,\n  webhookCreatedSchema,\n  webhookCreateSchema,\n  webhookPublicSchema,\n} from \"./schemas.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listWebhooksRoute = createRoute({\n  method: \"get\",\n  tags: [\"Webhooks\"],\n  summary: \"List webhooks\",\n  path: \"/api/v1/projects/{slug}/webhooks\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: webhookPublicSchema.array() } },\n      description: \"List webhooks\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createWebhookRoute = createRoute({\n  method: \"post\",\n  tags: [\"Webhooks\"],\n  summary: \"Create a webhook\",\n  path: \"/api/v1/projects/{slug}/webhooks\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: webhookCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: webhookCreatedSchema } },\n      description: \"Created webhook\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteWebhookRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Webhooks\"],\n  summary: \"Delete a webhook\",\n  path: \"/api/v1/projects/{slug}/webhooks/{webhookId}\",\n  request: { params: z.object({ slug: z.string(), webhookId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted webhook\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project webhook list, create, and delete endpoints. */\nexport function registerWebhooks(app: ShelfRouter): void {\n  app.openapi(listWebhooksRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const webhooks = await new WebhookModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).list(project.id);\n    return c.json(\n      webhooks.map((webhook) => ({\n        id: webhook.id,\n        url: webhook.url,\n        events: WebhookModel.eventsOf(webhook),\n      })),\n    );\n  });\n\n  app.openapi(createWebhookRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const secret = randomToken(\"whsec_\").value;\n    const webhook = await new WebhookModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).create(project.id, { ...body, secret });\n    return c.json({ id: webhook.id, url: webhook.url, events: body.events ?? [], secret }, 201);\n  });\n\n  app.openapi(deleteWebhookRoute, async (c) => {\n    const { slug, webhookId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const webhook = await new WebhookModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).get(project.id, webhookId);\n    if (!webhook) {\n      notFound(\"Webhook not found\");\n    }\n    await new WebhookModel(getStore().db, undefined, credentialKeys(getStore().config)).remove(\n      project.id,\n      webhook.id,\n    );\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;;AAeA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,MAAM,EAAE,EAAE;GACvE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;CAC3E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,qBAAqB,EAAE;GAChE,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,kBAAkB;EACtC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,iBAAiB,KAAwB;CACvD,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,WAAW,MAAM,IAAI,aACzB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,KAAK,QAAQ,EAAE;EACjB,OAAO,EAAE,KACP,SAAS,KAAK,aAAa;GACzB,IAAI,QAAQ;GACZ,KAAK,QAAQ;GACb,QAAQ,aAAa,SAAS,OAAO;EACvC,EAAE,CACJ;CACF,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,SAAS,YAAY,QAAQ,CAAC,CAAC;EACrC,MAAM,UAAU,MAAM,IAAI,aACxB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,OAAO,QAAQ,IAAI;GAAE,GAAG;GAAM;EAAO,CAAC;EACxC,OAAO,EAAE,KAAK;GAAE,IAAI,QAAQ;GAAI,KAAK,QAAQ;GAAK,QAAQ,KAAK,UAAU,CAAC;GAAG;EAAO,GAAG,GAAG;CAC5F,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,UAAU,MAAM,IAAI,aACxB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,IAAI,QAAQ,IAAI,SAAS;EAC3B,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,IAAI,KAAA,GAAW,eAAe,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAClF,QAAQ,IACR,QAAQ,EACV;EACA,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}
+{"version":3,"file":"webhooks.mjs","names":["notFoundResponse"],"sources":["../../src/routers/webhooks.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { WebhookModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  unauthorized,\n  webhookCreatedSchema,\n  webhookCreateSchema,\n  webhookPublicSchema,\n} from \"./schemas.ts\";\nimport { webhookModel } from \"./scoped-models.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listWebhooksRoute = createRoute({\n  method: \"get\",\n  tags: [\"Webhooks\"],\n  summary: \"List webhooks\",\n  path: \"/api/v1/projects/{slug}/webhooks\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: webhookPublicSchema.array() } },\n      description: \"List webhooks\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createWebhookRoute = createRoute({\n  method: \"post\",\n  tags: [\"Webhooks\"],\n  summary: \"Create a webhook\",\n  path: \"/api/v1/projects/{slug}/webhooks\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: webhookCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: webhookCreatedSchema } },\n      description: \"Created webhook\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteWebhookRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Webhooks\"],\n  summary: \"Delete a webhook\",\n  path: \"/api/v1/projects/{slug}/webhooks/{webhookId}\",\n  request: { params: z.object({ slug: z.string(), webhookId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted webhook\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project webhook list, create, and delete endpoints. */\nexport function registerWebhooks(app: ShelfRouter): void {\n  app.openapi(listWebhooksRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const webhooks = await webhookModel().list(project.id);\n    return c.json(\n      webhooks.map((webhook) => ({\n        id: webhook.id,\n        url: webhook.url,\n        events: WebhookModel.eventsOf(webhook),\n      })),\n    );\n  });\n\n  app.openapi(createWebhookRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const { webhook, secret } = await webhookModel().issue(project.id, body);\n    return c.json({ id: webhook.id, url: webhook.url, events: body.events ?? [], secret }, 201);\n  });\n\n  app.openapi(deleteWebhookRoute, async (c) => {\n    const { slug, webhookId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const webhook = await webhookModel().get(project.id, webhookId);\n    if (!webhook) {\n      notFound(\"Webhook not found\");\n    }\n    await webhookModel().remove(project.id, webhook.id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;AAaA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,MAAM,EAAE,EAAE;GACvE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;CAC3E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,qBAAqB,EAAE;GAChE,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,kBAAkB;EACtC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,iBAAiB,KAAwB;CACvD,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,WAAW,MAAM,aAAa,CAAC,CAAC,KAAK,QAAQ,EAAE;EACrD,OAAO,EAAE,KACP,SAAS,KAAK,aAAa;GACzB,IAAI,QAAQ;GACZ,KAAK,QAAQ;GACb,QAAQ,aAAa,SAAS,OAAO;EACvC,EAAE,CACJ;CACF,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,EAAE,SAAS,WAAW,MAAM,aAAa,CAAC,CAAC,MAAM,QAAQ,IAAI,IAAI;EACvE,OAAO,EAAE,KAAK;GAAE,IAAI,QAAQ;GAAI,KAAK,QAAQ;GAAK,QAAQ,KAAK,UAAU,CAAC;GAAG;EAAO,GAAG,GAAG;CAC5F,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,UAAU,MAAM,aAAa,CAAC,CAAC,IAAI,QAAQ,IAAI,SAAS;EAC9D,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,aAAa,CAAC,CAAC,OAAO,QAAQ,IAAI,QAAQ,EAAE;EAClD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/well-known.mjs

@@ -11,13 +11,20 @@ function ssoProviders(auth, origin) {
 		redirectUris: method.kind === "sso" ? [`${origin}/api/auth/sso/callback/${method.id}`, `${origin}/api/auth/sso/saml2/sp/acs/${method.id}`] : [`${origin}/api/auth/callback/${method.id}`]
 	}));
 }
-function requestOrigin(c) {
-	return getStore().config.publicBaseUrl ?? new URL(c.req.url).origin;
+/**
+* The origin of this interactive, request-bound document (ADR 0007, decision 6): the confirmed
+* public origin, else the address the request came in on (the one place besides OAuth redirect
+* URIs where authentication may use it).
+*/
+async function requestOrigin(c) {
+	const { publicOrigin, config } = getStore();
+	const own = new URL(c.req.url).origin;
+	return publicOrigin ? await publicOrigin.authOrigin(own) : config.publicBaseUrl ?? own;
 }
 /** Register public relying-party helper documents (no auth required). */
 function registerWellKnown(app, auth) {
-	app.get("/.well-known/openid-configuration", (c) => {
-		const origin = requestOrigin(c);
+	app.get("/.well-known/openid-configuration", async (c) => {
+		const origin = await requestOrigin(c);
 		const providers = ssoProviders(auth, origin);
 		return c.json({
 			issuer: origin,

package/dist/routers/well-known.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"well-known.mjs","names":[],"sources":["../../src/routers/well-known.ts"],"sourcesContent":["import type { Auth } from \"@storyshelf/auth\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\n\n/** One SSO-capable login method with its IdP reply URLs. */\ninterface SsoProviderLink {\n  id: string;\n  label: string;\n  redirectUris: string[];\n}\n\n/** SSO-capable login methods (oauth buttons + SSO) with IdP reply URLs. */\nfunction ssoProviders(auth: Auth, origin: string): SsoProviderLink[] {\n  return auth\n    .loginMethods()\n    .filter((method) => method.kind === \"oauth\" || method.kind === \"sso\")\n    .map((method) => ({\n      id: method.id,\n      label: method.label,\n      redirectUris:\n        method.kind === \"sso\"\n          ? [\n              `${origin}/api/auth/sso/callback/${method.id}`,\n              `${origin}/api/auth/sso/saml2/sp/acs/${method.id}`,\n            ]\n          : [`${origin}/api/auth/callback/${method.id}`],\n    }));\n}\n\nfunction requestOrigin(c: Context): string {\n  return getStore().config.publicBaseUrl ?? new URL(c.req.url).origin;\n}\n\n/** Register public relying-party helper documents (no auth required). */\nexport function registerWellKnown(app: ShelfRouter, auth: Auth): void {\n  app.get(\"/.well-known/openid-configuration\", (c) => {\n    const origin = requestOrigin(c);\n    const providers = ssoProviders(auth, origin);\n    return c.json(\n      {\n        issuer: origin,\n        note: \"StoryShelf is an OpenID Connect relying party, not an identity provider. This document helps operators register redirect URIs with their provider; it is not provider metadata.\",\n        response_types_supported: [\"code\"],\n        scopes_supported: [\"openid\", \"email\", \"profile\"],\n        redirect_uris: providers.flatMap((provider) => provider.redirectUris),\n        providers: providers.map((method) => ({ id: method.id, label: method.label })),\n      },\n      200,\n      { \"Cache-Control\": \"public, max-age=300\" },\n    );\n  });\n\n  // oxlint-disable-next-line typescript/promise-function-async -- Hono handler may return Response directly\n  app.get(\"/.well-known/change-password\", (c) => c.redirect(\"/profile\", 302));\n}\n"],"mappings":";;;;;;AAaA,SAAS,aAAa,MAAY,QAAmC;CACnE,OAAO,KACJ,aAAa,CAAC,CACd,QAAQ,WAAW,OAAO,SAAS,WAAW,OAAO,SAAS,KAAK,CAAC,CACpE,KAAK,YAAY;EAChB,IAAI,OAAO;EACX,OAAO,OAAO;EACd,cACE,OAAO,SAAS,QACZ,CACE,GAAG,OAAO,yBAAyB,OAAO,MAC1C,GAAG,OAAO,6BAA6B,OAAO,IAChD,IACA,CAAC,GAAG,OAAO,qBAAqB,OAAO,IAAI;CACnD,EAAE;AACN;AAEA,SAAS,cAAc,GAAoB;CACzC,OAAO,SAAS,CAAC,CAAC,OAAO,iBAAiB,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC;AAC/D;;AAGA,SAAgB,kBAAkB,KAAkB,MAAkB;CACpE,IAAI,IAAI,sCAAsC,MAAM;EAClD,MAAM,SAAS,cAAc,CAAC;EAC9B,MAAM,YAAY,aAAa,MAAM,MAAM;EAC3C,OAAO,EAAE,KACP;GACE,QAAQ;GACR,MAAM;GACN,0BAA0B,CAAC,MAAM;GACjC,kBAAkB;IAAC;IAAU;IAAS;GAAS;GAC/C,eAAe,UAAU,SAAS,aAAa,SAAS,YAAY;GACpE,WAAW,UAAU,KAAK,YAAY;IAAE,IAAI,OAAO;IAAI,OAAO,OAAO;GAAM,EAAE;EAC/E,GACA,KACA,EAAE,iBAAiB,sBAAsB,CAC3C;CACF,CAAC;CAGD,IAAI,IAAI,iCAAiC,MAAM,EAAE,SAAS,YAAY,GAAG,CAAC;AAC5E"}
+{"version":3,"file":"well-known.mjs","names":[],"sources":["../../src/routers/well-known.ts"],"sourcesContent":["import type { Auth } from \"@storyshelf/core/auth\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\n\n/** One SSO-capable login method with its IdP reply URLs. */\ninterface SsoProviderLink {\n  id: string;\n  label: string;\n  redirectUris: string[];\n}\n\n/** SSO-capable login methods (oauth buttons + SSO) with IdP reply URLs. */\nfunction ssoProviders(auth: Auth, origin: string): SsoProviderLink[] {\n  return auth\n    .loginMethods()\n    .filter((method) => method.kind === \"oauth\" || method.kind === \"sso\")\n    .map((method) => ({\n      id: method.id,\n      label: method.label,\n      redirectUris:\n        method.kind === \"sso\"\n          ? [\n              `${origin}/api/auth/sso/callback/${method.id}`,\n              `${origin}/api/auth/sso/saml2/sp/acs/${method.id}`,\n            ]\n          : [`${origin}/api/auth/callback/${method.id}`],\n    }));\n}\n\n/**\n * The origin of this interactive, request-bound document (ADR 0007, decision 6): the confirmed\n * public origin, else the address the request came in on (the one place besides OAuth redirect\n * URIs where authentication may use it).\n */\nasync function requestOrigin(c: Context): Promise<string> {\n  const { publicOrigin, config } = getStore();\n  const own = new URL(c.req.url).origin;\n  return publicOrigin ? await publicOrigin.authOrigin(own) : (config.publicBaseUrl ?? own);\n}\n\n/** Register public relying-party helper documents (no auth required). */\nexport function registerWellKnown(app: ShelfRouter, auth: Auth): void {\n  app.get(\"/.well-known/openid-configuration\", async (c) => {\n    const origin = await requestOrigin(c);\n    const providers = ssoProviders(auth, origin);\n    return c.json(\n      {\n        issuer: origin,\n        note: \"StoryShelf is an OpenID Connect relying party, not an identity provider. This document helps operators register redirect URIs with their provider; it is not provider metadata.\",\n        response_types_supported: [\"code\"],\n        scopes_supported: [\"openid\", \"email\", \"profile\"],\n        redirect_uris: providers.flatMap((provider) => provider.redirectUris),\n        providers: providers.map((method) => ({ id: method.id, label: method.label })),\n      },\n      200,\n      { \"Cache-Control\": \"public, max-age=300\" },\n    );\n  });\n\n  // oxlint-disable-next-line typescript/promise-function-async -- Hono handler may return Response directly\n  app.get(\"/.well-known/change-password\", (c) => c.redirect(\"/profile\", 302));\n}\n"],"mappings":";;;;;;AAaA,SAAS,aAAa,MAAY,QAAmC;CACnE,OAAO,KACJ,aAAa,CAAC,CACd,QAAQ,WAAW,OAAO,SAAS,WAAW,OAAO,SAAS,KAAK,CAAC,CACpE,KAAK,YAAY;EAChB,IAAI,OAAO;EACX,OAAO,OAAO;EACd,cACE,OAAO,SAAS,QACZ,CACE,GAAG,OAAO,yBAAyB,OAAO,MAC1C,GAAG,OAAO,6BAA6B,OAAO,IAChD,IACA,CAAC,GAAG,OAAO,qBAAqB,OAAO,IAAI;CACnD,EAAE;AACN;;;;;;AAOA,eAAe,cAAc,GAA6B;CACxD,MAAM,EAAE,cAAc,WAAW,SAAS;CAC1C,MAAM,MAAM,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC;CAC/B,OAAO,eAAe,MAAM,aAAa,WAAW,GAAG,IAAK,OAAO,iBAAiB;AACtF;;AAGA,SAAgB,kBAAkB,KAAkB,MAAkB;CACpE,IAAI,IAAI,qCAAqC,OAAO,MAAM;EACxD,MAAM,SAAS,MAAM,cAAc,CAAC;EACpC,MAAM,YAAY,aAAa,MAAM,MAAM;EAC3C,OAAO,EAAE,KACP;GACE,QAAQ;GACR,MAAM;GACN,0BAA0B,CAAC,MAAM;GACjC,kBAAkB;IAAC;IAAU;IAAS;GAAS;GAC/C,eAAe,UAAU,SAAS,aAAa,SAAS,YAAY;GACpE,WAAW,UAAU,KAAK,YAAY;IAAE,IAAI,OAAO;IAAI,OAAO,OAAO;GAAM,EAAE;EAC/E,GACA,KACA,EAAE,iBAAiB,sBAAsB,CAC3C;CACF,CAAC;CAGD,IAAI,IAAI,iCAAiC,MAAM,EAAE,SAAS,YAAY,GAAG,CAAC;AAC5E"}

package/dist/routes/api-routes.mjs

@@ -0,0 +1,93 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/routes/api-routes.ts
+/** JSON API routes, keyed by `METHOD /hono-pattern`. */
+const API_ROUTE_CLASSES = {
+	"GET /api/v1/projects": "hosting",
+	"POST /api/v1/projects": "hosting",
+	"GET /api/v1/projects/:slug": "hosting",
+	"PATCH /api/v1/projects/:slug": "hosting",
+	"DELETE /api/v1/projects/:slug": "hosting",
+	"GET /api/v1/projects/:slug/builds": "hosting",
+	"POST /api/v1/projects/:slug/builds": "hosting",
+	"POST /api/v1/projects/:slug/builds/:buildId/usage": "hosting",
+	"PUT /api/v1/projects/:slug/builds/:buildId/zip": "hosting",
+	"POST /api/v1/projects/:slug/builds/:buildId/dedup": "hosting",
+	"POST /api/v1/projects/:slug/builds/:buildId/content": "hosting",
+	"POST /api/v1/projects/:slug/builds/:buildId/manifest": "hosting",
+	"GET /api/v1/projects/:slug/builds/:buildId": "hosting",
+	"DELETE /api/v1/projects/:slug/builds/:buildId": "hosting",
+	"GET /api/v1/projects/:slug/label-types": "hosting",
+	"POST /api/v1/projects/:slug/label-types": "hosting",
+	"DELETE /api/v1/projects/:slug/label-types/:key": "hosting",
+	"PATCH /api/v1/projects/:slug/label-types/:key": "hosting",
+	"GET /api/v1/projects/:slug/links": "hosting",
+	"PUT /api/v1/projects/:slug/links": "hosting",
+	"GET /api/v1/projects/:slug/members": "hosting",
+	"POST /api/v1/projects/:slug/members": "hosting",
+	"PATCH /api/v1/projects/:slug/members/:userId": "hosting",
+	"DELETE /api/v1/projects/:slug/members/:userId": "hosting",
+	"GET /api/v1/projects/:slug/group-mappings": "hosting",
+	"POST /api/v1/projects/:slug/group-mappings": "hosting",
+	"DELETE /api/v1/projects/:slug/group-mappings/:mappingId": "hosting",
+	"GET /api/v1/projects/:slug/tokens": "hosting",
+	"POST /api/v1/projects/:slug/tokens": "hosting",
+	"DELETE /api/v1/projects/:slug/tokens/:tokenId": "hosting",
+	"GET /api/v1/projects/:slug/webhooks": "hosting",
+	"POST /api/v1/projects/:slug/webhooks": "hosting",
+	"DELETE /api/v1/projects/:slug/webhooks/:webhookId": "hosting",
+	"GET /api/v1/projects/:slug/notification-channels": "hosting",
+	"POST /api/v1/projects/:slug/notification-channels": "hosting",
+	"DELETE /api/v1/projects/:slug/notification-channels/:channelId": "hosting",
+	"GET /api/v1/projects/:slug/notifications/me": "hosting",
+	"PUT /api/v1/projects/:slug/notifications/me": "hosting",
+	"DELETE /api/v1/projects/:slug/notifications/me": "hosting",
+	"GET /api/v1/projects/:slug/notifications": "hosting",
+	"GET /api/v1/admin/notification-channels": "hosting",
+	"POST /api/v1/admin/notification-channels": "hosting",
+	"DELETE /api/v1/admin/notification-channels/:channelId": "hosting",
+	"GET /api/v1/health": "hosting",
+	"POST /api/v1/health": "hosting",
+	"POST /api/v1/admin/credentials/reencrypt": "hosting",
+	"POST /api/v1/admin/purge": "hosting",
+	"GET /api/v1/openapi.json": "hosting",
+	"GET /api/v1/docs": "hosting",
+	"POST /api/v1/projects/:slug/builds/:buildId/affected": "testing",
+	"POST /api/v1/projects/:slug/builds/:buildId/retry": "testing",
+	"POST /api/v1/projects/:slug/builds/:buildId/cancel": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/snapshots": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/preview-token": "testing",
+	"POST /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/approve": "testing",
+	"POST /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/reject": "testing",
+	"POST /api/v1/projects/:slug/builds/:buildId/approve-all": "testing",
+	"POST /api/v1/projects/:slug/builds/:buildId/reject-all": "testing",
+	"POST /api/v1/projects/:slug/builds/:buildId/stories/:storyId/modes/:modeKey/approve": "testing",
+	"POST /api/v1/projects/:slug/builds/:buildId/stories/:storyId/modes/:modeKey/reject": "testing",
+	"POST /api/v1/projects/:slug/builds/:buildId/rediff": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/attempts": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/attempts/:attemptNo": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/attempts/:attemptNo/logs": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/usage": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/diff": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline": "testing",
+	"GET /api/v1/projects/:slug/design/renders/:renderId": "testing",
+	"GET /api/v1/projects/:slug/baselines/export": "testing",
+	"POST /api/v1/projects/:slug/baselines/import": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/insights/latest": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/insights": "testing",
+	"POST /api/v1/projects/:slug/builds/:buildId/insights": "testing",
+	"GET /api/v1/projects/:slug/insights/health": "testing",
+	"POST /api/v1/projects/:slug/insights/health": "testing",
+	"GET /api/v1/projects/:slug/builds/:buildId/comments": "review",
+	"POST /api/v1/projects/:slug/builds/:buildId/comments": "review",
+	"POST /api/v1/projects/:slug/builds/:buildId/comments/:commentId/resolve": "review",
+	"GET /api/v1/projects/:slug/builds/:buildId/reviews": "review",
+	"POST /api/v1/projects/:slug/builds/:buildId/reviews": "review",
+	"GET /api/v1/projects/:slug/builds/:buildId/changeset": "review"
+};
+//#endregion
+export { API_ROUTE_CLASSES };
+
+//# sourceMappingURL=api-routes.mjs.map

package/dist/routes/api-routes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-routes.mjs","names":[],"sources":["../../src/routes/api-routes.ts"],"sourcesContent":["/** Classes of the JSON API routes under `/api/v1`. */\nimport type { RouteClass } from \"./classification.ts\";\n\n/** JSON API routes, keyed by `METHOD /hono-pattern`. */\nexport const API_ROUTE_CLASSES: Readonly<Record<string, RouteClass>> = {\n  // hosting\n  \"GET /api/v1/projects\": \"hosting\",\n  \"POST /api/v1/projects\": \"hosting\",\n  \"GET /api/v1/projects/:slug\": \"hosting\",\n  \"PATCH /api/v1/projects/:slug\": \"hosting\",\n  \"DELETE /api/v1/projects/:slug\": \"hosting\",\n  \"GET /api/v1/projects/:slug/builds\": \"hosting\",\n  \"POST /api/v1/projects/:slug/builds\": \"hosting\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/usage\": \"hosting\",\n  \"PUT /api/v1/projects/:slug/builds/:buildId/zip\": \"hosting\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/dedup\": \"hosting\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/content\": \"hosting\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/manifest\": \"hosting\",\n  \"GET /api/v1/projects/:slug/builds/:buildId\": \"hosting\",\n  \"DELETE /api/v1/projects/:slug/builds/:buildId\": \"hosting\",\n  \"GET /api/v1/projects/:slug/label-types\": \"hosting\",\n  \"POST /api/v1/projects/:slug/label-types\": \"hosting\",\n  \"DELETE /api/v1/projects/:slug/label-types/:key\": \"hosting\",\n  \"PATCH /api/v1/projects/:slug/label-types/:key\": \"hosting\",\n  \"GET /api/v1/projects/:slug/links\": \"hosting\",\n  \"PUT /api/v1/projects/:slug/links\": \"hosting\",\n  \"GET /api/v1/projects/:slug/members\": \"hosting\",\n  \"POST /api/v1/projects/:slug/members\": \"hosting\",\n  \"PATCH /api/v1/projects/:slug/members/:userId\": \"hosting\",\n  \"DELETE /api/v1/projects/:slug/members/:userId\": \"hosting\",\n  \"GET /api/v1/projects/:slug/group-mappings\": \"hosting\",\n  \"POST /api/v1/projects/:slug/group-mappings\": \"hosting\",\n  \"DELETE /api/v1/projects/:slug/group-mappings/:mappingId\": \"hosting\",\n  \"GET /api/v1/projects/:slug/tokens\": \"hosting\",\n  \"POST /api/v1/projects/:slug/tokens\": \"hosting\",\n  \"DELETE /api/v1/projects/:slug/tokens/:tokenId\": \"hosting\",\n  \"GET /api/v1/projects/:slug/webhooks\": \"hosting\",\n  \"POST /api/v1/projects/:slug/webhooks\": \"hosting\",\n  \"DELETE /api/v1/projects/:slug/webhooks/:webhookId\": \"hosting\",\n  \"GET /api/v1/projects/:slug/notification-channels\": \"hosting\",\n  \"POST /api/v1/projects/:slug/notification-channels\": \"hosting\",\n  \"DELETE /api/v1/projects/:slug/notification-channels/:channelId\": \"hosting\",\n  \"GET /api/v1/projects/:slug/notifications/me\": \"hosting\",\n  \"PUT /api/v1/projects/:slug/notifications/me\": \"hosting\",\n  \"DELETE /api/v1/projects/:slug/notifications/me\": \"hosting\",\n  \"GET /api/v1/projects/:slug/notifications\": \"hosting\",\n  \"GET /api/v1/admin/notification-channels\": \"hosting\",\n  \"POST /api/v1/admin/notification-channels\": \"hosting\",\n  \"DELETE /api/v1/admin/notification-channels/:channelId\": \"hosting\",\n  \"GET /api/v1/health\": \"hosting\",\n  \"POST /api/v1/health\": \"hosting\",\n  \"POST /api/v1/admin/credentials/reencrypt\": \"hosting\",\n  \"POST /api/v1/admin/purge\": \"hosting\",\n  \"GET /api/v1/openapi.json\": \"hosting\",\n  \"GET /api/v1/docs\": \"hosting\",\n  // testing\n  \"POST /api/v1/projects/:slug/builds/:buildId/affected\": \"testing\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/retry\": \"testing\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/cancel\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/snapshots\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/preview-token\": \"testing\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/approve\": \"testing\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/reject\": \"testing\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/approve-all\": \"testing\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/reject-all\": \"testing\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/stories/:storyId/modes/:modeKey/approve\": \"testing\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/stories/:storyId/modes/:modeKey/reject\": \"testing\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/rediff\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/attempts\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/attempts/:attemptNo\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/attempts/:attemptNo/logs\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/usage\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/diff\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline\": \"testing\",\n  \"GET /api/v1/projects/:slug/design/renders/:renderId\": \"testing\",\n  \"GET /api/v1/projects/:slug/baselines/export\": \"testing\",\n  \"POST /api/v1/projects/:slug/baselines/import\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/insights/latest\": \"testing\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/insights\": \"testing\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/insights\": \"testing\",\n  \"GET /api/v1/projects/:slug/insights/health\": \"testing\",\n  \"POST /api/v1/projects/:slug/insights/health\": \"testing\",\n  // review\n  \"GET /api/v1/projects/:slug/builds/:buildId/comments\": \"review\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/comments\": \"review\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/comments/:commentId/resolve\": \"review\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/reviews\": \"review\",\n  \"POST /api/v1/projects/:slug/builds/:buildId/reviews\": \"review\",\n  \"GET /api/v1/projects/:slug/builds/:buildId/changeset\": \"review\",\n};\n"],"mappings":";;;;;AAIA,MAAa,oBAA0D;CAErE,wBAAwB;CACxB,yBAAyB;CACzB,8BAA8B;CAC9B,gCAAgC;CAChC,iCAAiC;CACjC,qCAAqC;CACrC,sCAAsC;CACtC,qDAAqD;CACrD,kDAAkD;CAClD,qDAAqD;CACrD,uDAAuD;CACvD,wDAAwD;CACxD,8CAA8C;CAC9C,iDAAiD;CACjD,0CAA0C;CAC1C,2CAA2C;CAC3C,kDAAkD;CAClD,iDAAiD;CACjD,oCAAoC;CACpC,oCAAoC;CACpC,sCAAsC;CACtC,uCAAuC;CACvC,gDAAgD;CAChD,iDAAiD;CACjD,6CAA6C;CAC7C,8CAA8C;CAC9C,2DAA2D;CAC3D,qCAAqC;CACrC,sCAAsC;CACtC,iDAAiD;CACjD,uCAAuC;CACvC,wCAAwC;CACxC,qDAAqD;CACrD,oDAAoD;CACpD,qDAAqD;CACrD,kEAAkE;CAClE,+CAA+C;CAC/C,+CAA+C;CAC/C,kDAAkD;CAClD,4CAA4C;CAC5C,2CAA2C;CAC3C,4CAA4C;CAC5C,yDAAyD;CACzD,sBAAsB;CACtB,uBAAuB;CACvB,4CAA4C;CAC5C,4BAA4B;CAC5B,4BAA4B;CAC5B,oBAAoB;CAEpB,wDAAwD;CACxD,qDAAqD;CACrD,sDAAsD;CACtD,wDAAwD;CACxD,4DAA4D;CAC5D,6EAA6E;CAC7E,4EAA4E;CAC5E,2DAA2D;CAC3D,0DAA0D;CAC1D,uFAAuF;CACvF,sFAAsF;CACtF,sDAAsD;CACtD,uDAAuD;CACvD,kEAAkE;CAClE,uEAAuE;CACvE,0EAA0E;CAC1E,0EAA0E;CAC1E,yEAAyE;CACzE,6EAA6E;CAC7E,uDAAuD;CACvD,+CAA+C;CAC/C,gDAAgD;CAChD,8DAA8D;CAC9D,uDAAuD;CACvD,wDAAwD;CACxD,8CAA8C;CAC9C,+CAA+C;CAE/C,uDAAuD;CACvD,wDAAwD;CACxD,2EAA2E;CAC3E,sDAAsD;CACtD,uDAAuD;CACvD,wDAAwD;AAC1D"}

package/dist/routes/classification.mjs

@@ -0,0 +1,38 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { API_ROUTE_CLASSES } from "./api-routes.mjs";
+import { PAGE_ROUTE_CLASSES } from "./page-routes.mjs";
+//#region src/routes/classification.ts
+/**
+* Route classification (ADR 0006, decision 8): every route the app registers declares whether it
+* belongs to hosting, testing, review, or both. `classification.test.ts` fails on any registered
+* route missing here and on any entry that no longer matches a route, so a new route must be
+* classified in `api-routes.ts` or `page-routes.ts` in the same change.
+*
+* Today the table only describes the routes; nothing is gated by it yet (gating comes with the
+* `testing` option work, which will apply it as middleware).
+*/
+/** The full table, keyed by `"METHOD /hono-pattern"` exactly as `app.routes` reports it. */
+const ROUTE_CLASSES = {
+	...API_ROUTE_CLASSES,
+	...PAGE_ROUTE_CLASSES
+};
+/**
+* Route families whose individual patterns are not worth listing (content-hashed static assets).
+* A rule applies to any method whose path starts with `prefix`.
+*/
+const ROUTE_PREFIX_CLASSES = [{
+	prefix: "/assets/",
+	routeClass: "hosting"
+}];
+/** The class of a registered route, or `undefined` when it is unclassified. */
+function classOfRoute(method, path) {
+	const exact = ROUTE_CLASSES[`${method} ${path}`];
+	if (exact !== void 0) return exact;
+	return ROUTE_PREFIX_CLASSES.find((rule) => path.startsWith(rule.prefix))?.routeClass;
+}
+//#endregion
+export { ROUTE_CLASSES, ROUTE_PREFIX_CLASSES, classOfRoute };
+
+//# sourceMappingURL=classification.mjs.map

package/dist/routes/classification.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.mjs","names":[],"sources":["../../src/routes/classification.ts"],"sourcesContent":["/**\n * Route classification (ADR 0006, decision 8): every route the app registers declares whether it\n * belongs to hosting, testing, review, or both. `classification.test.ts` fails on any registered\n * route missing here and on any entry that no longer matches a route, so a new route must be\n * classified in `api-routes.ts` or `page-routes.ts` in the same change.\n *\n * Today the table only describes the routes; nothing is gated by it yet (gating comes with the\n * `testing` option work, which will apply it as middleware).\n */\nimport { API_ROUTE_CLASSES } from \"./api-routes.ts\";\nimport { PAGE_ROUTE_CLASSES } from \"./page-routes.ts\";\n\n/**\n * - `hosting`: available with and without `testing`.\n * - `testing`: 404 without `testing`.\n * - `review`: 404 when the project's review switch is off.\n * - `both`: present in both modes, with sections gated by `testing`.\n */\nexport type RouteClass = \"hosting\" | \"testing\" | \"review\" | \"both\";\n\nexport const ROUTE_CLASS_VALUES: readonly RouteClass[] = [\"hosting\", \"testing\", \"review\", \"both\"];\n\n/** The full table, keyed by `\"METHOD /hono-pattern\"` exactly as `app.routes` reports it. */\nexport const ROUTE_CLASSES: Readonly<Record<string, RouteClass>> = {\n  ...API_ROUTE_CLASSES,\n  ...PAGE_ROUTE_CLASSES,\n};\n\n/**\n * Route families whose individual patterns are not worth listing (content-hashed static assets).\n * A rule applies to any method whose path starts with `prefix`.\n */\nexport const ROUTE_PREFIX_CLASSES: readonly { prefix: string; routeClass: RouteClass }[] = [\n  { prefix: \"/assets/\", routeClass: \"hosting\" },\n];\n\n/** The class of a registered route, or `undefined` when it is unclassified. */\nexport function classOfRoute(method: string, path: string): RouteClass | undefined {\n  const exact = ROUTE_CLASSES[`${method} ${path}`];\n  if (exact !== undefined) {\n    return exact;\n  }\n  return ROUTE_PREFIX_CLASSES.find((rule) => path.startsWith(rule.prefix))?.routeClass;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAuBA,MAAa,gBAAsD;CACjE,GAAG;CACH,GAAG;AACL;;;;;AAMA,MAAa,uBAA8E,CACzF;CAAE,QAAQ;CAAY,YAAY;AAAU,CAC9C;;AAGA,SAAgB,aAAa,QAAgB,MAAsC;CACjF,MAAM,QAAQ,cAAc,GAAG,OAAO,GAAG;CACzC,IAAI,UAAU,KAAA,GACZ,OAAO;CAET,OAAO,qBAAqB,MAAM,SAAS,KAAK,WAAW,KAAK,MAAM,CAAC,CAAC,EAAE;AAC5E"}

package/dist/routes/openapi-classes.mjs

@@ -0,0 +1,22 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { classOfRoute } from "./classification.mjs";
+//#region src/routes/openapi-classes.ts
+/** Tags every operation of an OpenAPI document with the class of its route (`x-storyshelf-class`). */
+/** OpenAPI path templates (`{slug}`) as Hono patterns (`:slug`), the form the route table uses. */
+function honoPattern(path) {
+	return path.replaceAll(/\{(?<name>[^}]+)\}/gu, ":$<name>");
+}
+/** `document` with `x-storyshelf-class` on each operation whose route the table classifies. */
+function markRouteClasses(document) {
+	for (const [path, operations] of Object.entries(document.paths ?? {})) for (const [method, operation] of Object.entries(operations)) {
+		const routeClass = classOfRoute(method.toUpperCase(), honoPattern(path));
+		if (routeClass !== void 0 && typeof operation === "object" && operation !== null) operation["x-storyshelf-class"] = routeClass;
+	}
+	return document;
+}
+//#endregion
+export { markRouteClasses };
+
+//# sourceMappingURL=openapi-classes.mjs.map

package/dist/routes/openapi-classes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi-classes.mjs","names":[],"sources":["../../src/routes/openapi-classes.ts"],"sourcesContent":["/** Tags every operation of an OpenAPI document with the class of its route (`x-storyshelf-class`). */\nimport { classOfRoute } from \"./classification.ts\";\n\ninterface OpenApiLike {\n  paths?: object | undefined;\n}\n\n/** OpenAPI path templates (`{slug}`) as Hono patterns (`:slug`), the form the route table uses. */\nfunction honoPattern(path: string): string {\n  return path.replaceAll(/\\{(?<name>[^}]+)\\}/gu, \":$<name>\");\n}\n\n/** `document` with `x-storyshelf-class` on each operation whose route the table classifies. */\nexport function markRouteClasses<T extends OpenApiLike>(document: T): T {\n  for (const [path, operations] of Object.entries(document.paths ?? {}) as [string, object][]) {\n    for (const [method, operation] of Object.entries(operations)) {\n      const routeClass = classOfRoute(method.toUpperCase(), honoPattern(path));\n      if (routeClass !== undefined && typeof operation === \"object\" && operation !== null) {\n        (operation as Record<string, unknown>)[\"x-storyshelf-class\"] = routeClass;\n      }\n    }\n  }\n  return document;\n}\n"],"mappings":";;;;;;;AAQA,SAAS,YAAY,MAAsB;CACzC,OAAO,KAAK,WAAW,wBAAwB,UAAU;AAC3D;;AAGA,SAAgB,iBAAwC,UAAgB;CACtE,KAAK,MAAM,CAAC,MAAM,eAAe,OAAO,QAAQ,SAAS,SAAS,CAAC,CAAC,GAClE,KAAK,MAAM,CAAC,QAAQ,cAAc,OAAO,QAAQ,UAAU,GAAG;EAC5D,MAAM,aAAa,aAAa,OAAO,YAAY,GAAG,YAAY,IAAI,CAAC;EACvE,IAAI,eAAe,KAAA,KAAa,OAAO,cAAc,YAAY,cAAc,MAC7E,UAAuC,wBAAwB;CAEnE;CAEF,OAAO;AACT"}