@storyshelf/app 0.6.2 → 0.7.0

package/dist/routers/notification-channels.mjs

@@ -1,10 +1,10 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { credentialKeys } from "../credential-keys.mjs";
 import { getStore } from "../store.mjs";
 import { notFound, requireSiteAdmin, resolveAuthorizedProject } from "./helpers.mjs";
 import { notFound as notFound$1, notificationChannelCreateSchema, notificationChannelSchema, unauthorized } from "./schemas.mjs";
+import { notificationChannelModel } from "./scoped-models.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { NotificationChannelModel } from "@storyshelf/core/models";
 //#region src/routers/notification-channels.ts
@@ -19,24 +19,12 @@ function toPublic(row) {
 		hasSecret: row.secretEncrypted !== null,
 		events: NotificationChannelModel.eventsOf(row),
 		enabled: row.enabled,
+		lastError: row.lastError,
+		lastErrorAt: row.lastErrorAt,
 		createdAt: row.createdAt,
 		updatedAt: row.updatedAt
 	};
 }
-/** Validate channel input against the provider descriptor. */
-function validateChannelInput(provider, config) {
-	const descriptor = getStore().notifiers.find((candidate) => candidate.metadata.kind === provider);
-	if (!descriptor) return {
-		ok: false,
-		message: `Unknown provider: ${provider}`
-	};
-	const parsed = descriptor.metadata.schema.safeParse(config);
-	if (!parsed.success) return {
-		ok: false,
-		message: parsed.error.message
-	};
-	return { ok: true };
-}
 const listChannelsRoute = createRoute({
 	method: "get",
 	tags: ["Notifications"],
@@ -91,15 +79,18 @@ const deleteChannelRoute = createRoute({
 function registerNotificationChannels(app) {
 	app.openapi(listChannelsRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
-		const rows = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).list(project.id);
+		const rows = await notificationChannelModel().list(project.id);
 		return c.json(rows.map((row) => toPublic(row)));
 	});
 	app.openapi(createChannelRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
 		const body = c.req.valid("json");
-		const valid = validateChannelInput(body.provider, body.config);
+		const valid = NotificationChannelModel.validateInput(getStore().notifiers, body.provider, body.config, {
+			projectId: project.id,
+			hasSecret: body.secret !== void 0
+		});
 		if (!valid.ok) return c.json({ message: valid.message }, 400);
-		const row = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).create({
+		const row = await notificationChannelModel().create({
 			projectId: project.id,
 			...body
 		});
@@ -108,7 +99,7 @@ function registerNotificationChannels(app) {
 	app.openapi(deleteChannelRoute, async (c) => {
 		const { slug, channelId } = c.req.valid("param");
 		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
-		const model = new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config));
+		const model = notificationChannelModel();
 		if ((await model.get(channelId))?.projectId !== project.id) notFound("Notification channel not found");
 		await model.remove(channelId);
 		return c.body(null, 204);
@@ -161,15 +152,18 @@ const deleteSystemRoute = createRoute({
 function registerSystemChannels(app) {
 	app.openapi(listSystemRoute, async (c) => {
 		requireSiteAdmin(c);
-		const rows = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).listSystem();
+		const rows = await notificationChannelModel().listSystem();
 		return c.json(rows.map((row) => toPublic(row)));
 	});
 	app.openapi(createSystemRoute, async (c) => {
 		requireSiteAdmin(c);
 		const body = c.req.valid("json");
-		const valid = validateChannelInput(body.provider, body.config);
+		const valid = NotificationChannelModel.validateInput(getStore().notifiers, body.provider, body.config, {
+			projectId: null,
+			hasSecret: body.secret !== void 0
+		});
 		if (!valid.ok) return c.json({ message: valid.message }, 400);
-		const row = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).create({
+		const row = await notificationChannelModel().create({
 			projectId: null,
 			...body
 		});
@@ -178,7 +172,7 @@ function registerSystemChannels(app) {
 	app.openapi(deleteSystemRoute, async (c) => {
 		requireSiteAdmin(c);
 		const { channelId } = c.req.valid("param");
-		const model = new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config));
+		const model = notificationChannelModel();
 		if ((await model.get(channelId))?.projectId !== null) notFound("Notification channel not found");
 		await model.remove(channelId);
 		return c.body(null, 204);

package/dist/routers/notification-channels.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"notification-channels.mjs","names":["notFoundResponse"],"sources":["../../src/routers/notification-channels.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport type { NotificationChannelRow } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { notFound, requireSiteAdmin, resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  notificationChannelCreateSchema,\n  notificationChannelSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\n/** Public channel view (secret redacted, config/events decoded). */\nfunction toPublic(row: NotificationChannelRow): {\n  id: string;\n  projectId: string | null;\n  provider: string;\n  config: Record<string, unknown>;\n  hasSecret: boolean;\n  events: string[];\n  enabled: boolean;\n  createdAt: string;\n  updatedAt: string;\n} {\n  return {\n    id: row.id,\n    projectId: row.projectId,\n    provider: row.provider,\n    config: NotificationChannelModel.configOf(row),\n    hasSecret: row.secretEncrypted !== null,\n    events: NotificationChannelModel.eventsOf(row),\n    enabled: row.enabled,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\n/** Validate channel input against the provider descriptor. */\nfunction validateChannelInput(\n  provider: string,\n  config: unknown,\n): { ok: true } | { ok: false; message: string } {\n  const descriptor = getStore().notifiers.find((candidate) => candidate.metadata.kind === provider);\n  if (!descriptor) {\n    return { ok: false, message: `Unknown provider: ${provider}` };\n  }\n  const parsed = descriptor.metadata.schema.safeParse(config);\n  if (!parsed.success) {\n    return { ok: false, message: parsed.error.message };\n  }\n  return { ok: true };\n}\n\nconst listChannelsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List notification channels\",\n  path: \"/api/v1/projects/{slug}/notification-channels\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationChannelSchema.array() } },\n      description: \"List notification channels\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createChannelRoute = createRoute({\n  method: \"post\",\n  tags: [\"Notifications\"],\n  summary: \"Create a notification channel\",\n  path: \"/api/v1/projects/{slug}/notification-channels\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: notificationChannelCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: notificationChannelSchema } },\n      description: \"Created notification channel\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteChannelRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Delete a notification channel\",\n  path: \"/api/v1/projects/{slug}/notification-channels/{channelId}\",\n  request: { params: z.object({ slug: z.string(), channelId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted notification channel\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project notification-channel list, create, and delete endpoints. */\nexport function registerNotificationChannels(app: ShelfRouter): void {\n  app.openapi(listChannelsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const rows = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).list(project.id);\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createChannelRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const valid = validateChannelInput(body.provider, body.config);\n    if (!valid.ok) {\n      return c.json({ message: valid.message }, 400);\n    }\n    const row = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).create({ projectId: project.id, ...body });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteChannelRoute, async (c) => {\n    const { slug, channelId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const model = new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    );\n    const existing = await model.get(channelId);\n    if (existing?.projectId !== project.id) {\n      notFound(\"Notification channel not found\");\n    }\n    await model.remove(channelId);\n    return c.body(null, 204);\n  });\n}\n\nconst listSystemRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List site-wide channels\",\n  path: \"/api/v1/admin/notification-channels\",\n  request: {},\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationChannelSchema.array() } },\n      description: \"List site-wide notification channels\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst createSystemRoute = createRoute({\n  method: \"post\",\n  tags: [\"Notifications\"],\n  summary: \"Create a site-wide channel\",\n  path: \"/api/v1/admin/notification-channels\",\n  request: {\n    body: { content: { \"application/json\": { schema: notificationChannelCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: notificationChannelSchema } },\n      description: \"Created site-wide notification channel\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst deleteSystemRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Delete a site-wide channel\",\n  path: \"/api/v1/admin/notification-channels/{channelId}\",\n  request: { params: z.object({ channelId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted site-wide notification channel\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the site-admin (project-less, `sys:*`) channel endpoints. */\nexport function registerSystemChannels(app: ShelfRouter): void {\n  app.openapi(listSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const rows = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).listSystem();\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const body = c.req.valid(\"json\");\n    const valid = validateChannelInput(body.provider, body.config);\n    if (!valid.ok) {\n      return c.json({ message: valid.message }, 400);\n    }\n    const row = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).create({ projectId: null, ...body });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const { channelId } = c.req.valid(\"param\");\n    const model = new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    );\n    const existing = await model.get(channelId);\n    if (existing?.projectId !== null) {\n      notFound(\"Notification channel not found\");\n    }\n    await model.remove(channelId);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,cAAsC,CAAC,OAAO;;AAGpD,SAAS,SAAS,KAUhB;CACA,OAAO;EACL,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,WAAW,IAAI,oBAAoB;EACnC,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,SAAS,IAAI;EACb,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;;AAGA,SAAS,qBACP,UACA,QAC+C;CAC/C,MAAM,aAAa,SAAS,CAAC,CAAC,UAAU,MAAM,cAAc,UAAU,SAAS,SAAS,QAAQ;CAChG,IAAI,CAAC,YACH,OAAO;EAAE,IAAI;EAAO,SAAS,qBAAqB;CAAW;CAE/D,MAAM,SAAS,WAAW,SAAS,OAAO,UAAU,MAAM;CAC1D,IAAI,CAAC,OAAO,SACV,OAAO;EAAE,IAAI;EAAO,SAAS,OAAO,MAAM;CAAQ;CAEpD,OAAO,EAAE,IAAI,KAAK;AACpB;AAEA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,MAAM,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gCAAgC,EAAE,EAAE;CACvF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,+BAA+B;EACnD,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,6BAA6B,KAAwB;CACnE,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,MAAM,IAAI,yBACrB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,KAAK,QAAQ,EAAE;EACjB,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,qBAAqB,KAAK,UAAU,KAAK,MAAM;EAC7D,IAAI,CAAC,MAAM,IACT,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,QAAQ,GAAG,GAAG;EAE/C,MAAM,MAAM,MAAM,IAAI,yBACpB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,OAAO;GAAE,WAAW,QAAQ;GAAI,GAAG;EAAK,CAAC;EAC3C,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,IAAI,yBAChB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC;EAEA,KAAI,MADmB,MAAM,IAAI,SAAS,EAAA,EAC5B,cAAc,QAAQ,IAClC,SAAS,gCAAgC;EAE3C,MAAM,MAAM,OAAO,SAAS;EAC5B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH;AAEA,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,CAAC;CACV,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,MAAM,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EACP,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gCAAgC,EAAE,EAAE,EACvF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE;CACvD,WAAW;EACT,KAAK,EAAE,aAAa,yCAAyC;EAC7D,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,uBAAuB,KAAwB;CAC7D,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,iBAAiB,CAAC;EAClB,MAAM,OAAO,MAAM,IAAI,yBACrB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,WAAW;EACb,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,iBAAiB,CAAC;EAClB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,qBAAqB,KAAK,UAAU,KAAK,MAAM;EAC7D,IAAI,CAAC,MAAM,IACT,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,QAAQ,GAAG,GAAG;EAE/C,MAAM,MAAM,MAAM,IAAI,yBACpB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,OAAO;GAAE,WAAW;GAAM,GAAG;EAAK,CAAC;EACrC,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,iBAAiB,CAAC;EAClB,MAAM,EAAE,cAAc,EAAE,IAAI,MAAM,OAAO;EACzC,MAAM,QAAQ,IAAI,yBAChB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC;EAEA,KAAI,MADmB,MAAM,IAAI,SAAS,EAAA,EAC5B,cAAc,MAC1B,SAAS,gCAAgC;EAE3C,MAAM,MAAM,OAAO,SAAS;EAC5B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}
+{"version":3,"file":"notification-channels.mjs","names":["notFoundResponse"],"sources":["../../src/routers/notification-channels.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport type { NotificationChannelRow } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { notFound, requireSiteAdmin, resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  notificationChannelCreateSchema,\n  notificationChannelSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nimport { notificationChannelModel } from \"./scoped-models.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\n/** Public channel view (secret redacted, config/events decoded). */\nfunction toPublic(row: NotificationChannelRow): {\n  id: string;\n  projectId: string | null;\n  provider: string;\n  config: Record<string, unknown>;\n  hasSecret: boolean;\n  events: string[];\n  enabled: boolean;\n  lastError: string | null;\n  lastErrorAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n} {\n  return {\n    id: row.id,\n    projectId: row.projectId,\n    provider: row.provider,\n    config: NotificationChannelModel.configOf(row),\n    hasSecret: row.secretEncrypted !== null,\n    events: NotificationChannelModel.eventsOf(row),\n    enabled: row.enabled,\n    lastError: row.lastError,\n    lastErrorAt: row.lastErrorAt,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\nconst listChannelsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List notification channels\",\n  path: \"/api/v1/projects/{slug}/notification-channels\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationChannelSchema.array() } },\n      description: \"List notification channels\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createChannelRoute = createRoute({\n  method: \"post\",\n  tags: [\"Notifications\"],\n  summary: \"Create a notification channel\",\n  path: \"/api/v1/projects/{slug}/notification-channels\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: notificationChannelCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: notificationChannelSchema } },\n      description: \"Created notification channel\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteChannelRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Delete a notification channel\",\n  path: \"/api/v1/projects/{slug}/notification-channels/{channelId}\",\n  request: { params: z.object({ slug: z.string(), channelId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted notification channel\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project notification-channel list, create, and delete endpoints. */\nexport function registerNotificationChannels(app: ShelfRouter): void {\n  app.openapi(listChannelsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const rows = await notificationChannelModel().list(project.id);\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createChannelRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const valid = NotificationChannelModel.validateInput(\n      getStore().notifiers,\n      body.provider,\n      body.config,\n      { projectId: project.id, hasSecret: body.secret !== undefined },\n    );\n    if (!valid.ok) {\n      return c.json({ message: valid.message }, 400);\n    }\n    const row = await notificationChannelModel().create({ projectId: project.id, ...body });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteChannelRoute, async (c) => {\n    const { slug, channelId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const model = notificationChannelModel();\n    const existing = await model.get(channelId);\n    if (existing?.projectId !== project.id) {\n      notFound(\"Notification channel not found\");\n    }\n    await model.remove(channelId);\n    return c.body(null, 204);\n  });\n}\n\nconst listSystemRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List site-wide channels\",\n  path: \"/api/v1/admin/notification-channels\",\n  request: {},\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationChannelSchema.array() } },\n      description: \"List site-wide notification channels\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst createSystemRoute = createRoute({\n  method: \"post\",\n  tags: [\"Notifications\"],\n  summary: \"Create a site-wide channel\",\n  path: \"/api/v1/admin/notification-channels\",\n  request: {\n    body: { content: { \"application/json\": { schema: notificationChannelCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: notificationChannelSchema } },\n      description: \"Created site-wide notification channel\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst deleteSystemRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Delete a site-wide channel\",\n  path: \"/api/v1/admin/notification-channels/{channelId}\",\n  request: { params: z.object({ channelId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted site-wide notification channel\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the site-admin (project-less, `sys:*`) channel endpoints. */\nexport function registerSystemChannels(app: ShelfRouter): void {\n  app.openapi(listSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const rows = await notificationChannelModel().listSystem();\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const body = c.req.valid(\"json\");\n    const valid = NotificationChannelModel.validateInput(\n      getStore().notifiers,\n      body.provider,\n      body.config,\n      { projectId: null, hasSecret: body.secret !== undefined },\n    );\n    if (!valid.ok) {\n      return c.json({ message: valid.message }, 400);\n    }\n    const row = await notificationChannelModel().create({ projectId: null, ...body });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const { channelId } = c.req.valid(\"param\");\n    const model = notificationChannelModel();\n    const existing = await model.get(channelId);\n    if (existing?.projectId !== null) {\n      notFound(\"Notification channel not found\");\n    }\n    await model.remove(channelId);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,cAAsC,CAAC,OAAO;;AAGpD,SAAS,SAAS,KAYhB;CACA,OAAO;EACL,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,WAAW,IAAI,oBAAoB;EACnC,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,SAAS,IAAI;EACb,WAAW,IAAI;EACf,aAAa,IAAI;EACjB,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;AAEA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,MAAM,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gCAAgC,EAAE,EAAE;CACvF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,+BAA+B;EACnD,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,6BAA6B,KAAwB;CACnE,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,MAAM,yBAAyB,CAAC,CAAC,KAAK,QAAQ,EAAE;EAC7D,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,yBAAyB,cACrC,SAAS,CAAC,CAAC,WACX,KAAK,UACL,KAAK,QACL;GAAE,WAAW,QAAQ;GAAI,WAAW,KAAK,WAAW,KAAA;EAAU,CAChE;EACA,IAAI,CAAC,MAAM,IACT,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,QAAQ,GAAG,GAAG;EAE/C,MAAM,MAAM,MAAM,yBAAyB,CAAC,CAAC,OAAO;GAAE,WAAW,QAAQ;GAAI,GAAG;EAAK,CAAC;EACtF,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,yBAAyB;EAEvC,KAAI,MADmB,MAAM,IAAI,SAAS,EAAA,EAC5B,cAAc,QAAQ,IAClC,SAAS,gCAAgC;EAE3C,MAAM,MAAM,OAAO,SAAS;EAC5B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH;AAEA,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,CAAC;CACV,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,MAAM,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EACP,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gCAAgC,EAAE,EAAE,EACvF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE;CACvD,WAAW;EACT,KAAK,EAAE,aAAa,yCAAyC;EAC7D,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,uBAAuB,KAAwB;CAC7D,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,iBAAiB,CAAC;EAClB,MAAM,OAAO,MAAM,yBAAyB,CAAC,CAAC,WAAW;EACzD,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,iBAAiB,CAAC;EAClB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,yBAAyB,cACrC,SAAS,CAAC,CAAC,WACX,KAAK,UACL,KAAK,QACL;GAAE,WAAW;GAAM,WAAW,KAAK,WAAW,KAAA;EAAU,CAC1D;EACA,IAAI,CAAC,MAAM,IACT,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,QAAQ,GAAG,GAAG;EAE/C,MAAM,MAAM,MAAM,yBAAyB,CAAC,CAAC,OAAO;GAAE,WAAW;GAAM,GAAG;EAAK,CAAC;EAChF,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,iBAAiB,CAAC;EAClB,MAAM,EAAE,cAAc,EAAE,IAAI,MAAM,OAAO;EACzC,MAAM,QAAQ,yBAAyB;EAEvC,KAAI,MADmB,MAAM,IAAI,SAAS,EAAA,EAC5B,cAAc,MAC1B,SAAS,gCAAgC;EAE3C,MAAM,MAAM,OAAO,SAAS;EAC5B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/oauth-state.mjs

@@ -0,0 +1,45 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { timingSafeEqualString } from "@storyshelf/core/utils";
+import { createHmac, randomBytes } from "node:crypto";
+//#region src/routers/oauth-state.ts
+/** Signed, expiring OAuth `state` for "connect your account" flows (binds user, service and browser). */
+/** State lifetime: long enough to sign in at the service, short enough to limit replay. */
+const STATE_TTL_MS = 6e5;
+/** Issue a signed state for a new flow, with a fresh nonce. */
+function signState(secret, fields, now = Date.now()) {
+	const nonce = randomBytes(16).toString("hex");
+	const body = {
+		...fields,
+		nonce,
+		expiresAt: now + STATE_TTL_MS
+	};
+	const payload = Buffer.from(JSON.stringify(body)).toString("base64url");
+	return {
+		state: `${payload}.${mac(secret, payload)}`,
+		nonce
+	};
+}
+/** Parse and verify a state; null when forged, malformed or expired. */
+function verifyState(secret, state, now = Date.now()) {
+	const [payload, signature] = state.split(".");
+	if (!payload || !signature || !timingSafeEqualString(signature, mac(secret, payload))) return null;
+	try {
+		const body = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+		return body.expiresAt > now ? body : null;
+	} catch {
+		return null;
+	}
+}
+/** A same-site path (never an absolute or protocol-relative URL), else the fallback. */
+function safeReturnPath(value, fallback) {
+	return value && /^\/(?![/\\])/u.test(value) ? value : fallback;
+}
+function mac(secret, payload) {
+	return createHmac("sha256", secret).update(`oauth-connect:${payload}`).digest("base64url");
+}
+//#endregion
+export { safeReturnPath, signState, verifyState };
+
+//# sourceMappingURL=oauth-state.mjs.map

package/dist/routers/oauth-state.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-state.mjs","names":[],"sources":["../../src/routers/oauth-state.ts"],"sourcesContent":["/** Signed, expiring OAuth `state` for \"connect your account\" flows (binds user, service and browser). */\nimport { timingSafeEqualString } from \"@storyshelf/core/utils\";\nimport { createHmac, randomBytes } from \"node:crypto\";\n\n/** State lifetime: long enough to sign in at the service, short enough to limit replay. */\nconst STATE_TTL_MS = 10 * 60_000;\n\n/** What a state asserts about the flow that issued it. */\nexport interface OAuthState {\n  /** User who started the flow. */\n  userId: string;\n  /** Service `metadata.kind`. */\n  service: string;\n  /** Local path to return to afterwards. */\n  returnTo: string;\n  /** Random value also kept in a cookie, binding the state to one browser. */\n  nonce: string;\n  expiresAt: number;\n}\n\n/** Issue a signed state for a new flow, with a fresh nonce. */\nexport function signState(\n  secret: string,\n  fields: Omit<OAuthState, \"nonce\" | \"expiresAt\">,\n  now = Date.now(),\n): { state: string; nonce: string } {\n  const nonce = randomBytes(16).toString(\"hex\");\n  const body: OAuthState = { ...fields, nonce, expiresAt: now + STATE_TTL_MS };\n  const payload = Buffer.from(JSON.stringify(body)).toString(\"base64url\");\n  return { state: `${payload}.${mac(secret, payload)}`, nonce };\n}\n\n/** Parse and verify a state; null when forged, malformed or expired. */\nexport function verifyState(secret: string, state: string, now = Date.now()): OAuthState | null {\n  const [payload, signature] = state.split(\".\");\n  if (!payload || !signature || !timingSafeEqualString(signature, mac(secret, payload))) {\n    return null;\n  }\n  try {\n    const body = JSON.parse(Buffer.from(payload, \"base64url\").toString(\"utf8\")) as OAuthState;\n    return body.expiresAt > now ? body : null;\n  } catch {\n    return null;\n  }\n}\n\n/** A same-site path (never an absolute or protocol-relative URL), else the fallback. */\nexport function safeReturnPath(value: string | undefined, fallback: string): string {\n  return value && /^\\/(?![/\\\\])/u.test(value) ? value : fallback;\n}\n\nfunction mac(secret: string, payload: string): string {\n  return createHmac(\"sha256\", secret).update(`oauth-connect:${payload}`).digest(\"base64url\");\n}\n"],"mappings":";;;;;;;;AAKA,MAAM,eAAe;;AAgBrB,SAAgB,UACd,QACA,QACA,MAAM,KAAK,IAAI,GACmB;CAClC,MAAM,QAAQ,YAAY,EAAE,CAAC,CAAC,SAAS,KAAK;CAC5C,MAAM,OAAmB;EAAE,GAAG;EAAQ;EAAO,WAAW,MAAM;CAAa;CAC3E,MAAM,UAAU,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,SAAS,WAAW;CACtE,OAAO;EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,QAAQ,OAAO;EAAK;CAAM;AAC9D;;AAGA,SAAgB,YAAY,QAAgB,OAAe,MAAM,KAAK,IAAI,GAAsB;CAC9F,MAAM,CAAC,SAAS,aAAa,MAAM,MAAM,GAAG;CAC5C,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,sBAAsB,WAAW,IAAI,QAAQ,OAAO,CAAC,GAClF,OAAO;CAET,IAAI;EACF,MAAM,OAAO,KAAK,MAAM,OAAO,KAAK,SAAS,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EAC1E,OAAO,KAAK,YAAY,MAAM,OAAO;CACvC,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,eAAe,OAA2B,UAA0B;CAClF,OAAO,SAAS,gBAAgB,KAAK,KAAK,IAAI,QAAQ;AACxD;AAEA,SAAS,IAAI,QAAgB,SAAyB;CACpD,OAAO,WAAW,UAAU,MAAM,CAAC,CAAC,OAAO,iBAAiB,SAAS,CAAC,CAAC,OAAO,WAAW;AAC3F"}

package/dist/routers/preview-base.mjs

@@ -0,0 +1,38 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { credentialKeys } from "../credential-keys.mjs";
+import { getStore, testingEnabled } from "../store.mjs";
+import { isAnonymouslyViewable, publishedAccess } from "./published-access.mjs";
+import { STORYBOOK_TOKEN_PREFIX, signStorybookToken } from "@storyshelf/core/utils";
+import { createUrlBuilder } from "@storyshelf/core/urls";
+//#region src/routers/preview-base.ts
+/** Lifetime of the token in a page: long enough to open the frame, short enough to be harmless. */
+const PREVIEW_TOKEN_TTL = 3600;
+/**
+* How often a page asks for a fresh frame token (seconds): well inside {@link PREVIEW_TOKEN_TTL},
+* so a frame on a page left open never holds an expired token. The token stays short-lived.
+*/
+const PREVIEW_TOKEN_REFRESH = 2400;
+/** Whether a frame root is a signed `/_s/<token>` URL, the only kind that expires. */
+function isSignedPreviewBase(base) {
+	return base.startsWith(STORYBOOK_TOKEN_PREFIX);
+}
+/** The frame's root URL (no trailing slash), or null when this viewer cannot be given one. */
+async function previewBaseOf(project, build) {
+	const { config } = getStore();
+	if (isAnonymouslyViewable(build, project)) return createUrlBuilder("/", config.publishedBaseDomain).storybookBuild(project.slug, build.id);
+	const secret = credentialKeys(config);
+	if (!testingEnabled() || !secret || !await publishedAccess(build, project)) return null;
+	const token = signStorybookToken({
+		secret,
+		projectId: project.id,
+		buildId: build.id,
+		ttlSeconds: PREVIEW_TOKEN_TTL
+	});
+	return `${STORYBOOK_TOKEN_PREFIX}${token}`;
+}
+//#endregion
+export { PREVIEW_TOKEN_REFRESH, PREVIEW_TOKEN_TTL, isSignedPreviewBase, previewBaseOf };
+
+//# sourceMappingURL=preview-base.mjs.map

package/dist/routers/preview-base.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-base.mjs","names":[],"sources":["../../src/routers/preview-base.ts"],"sourcesContent":["/**\n * The root a component page's preview frame loads a build's Storybook from (ADR 0006, decision 9).\n * A sandboxed frame has no cookies, so only a URL that needs none works in it: the build's own URL\n * when anyone who reaches the app may open it, otherwise a signed `/_s/<token>` URL minted for a\n * viewer who already has access (ADR 0007, decision 5; needs `testing` and a `secret`).\n */\nimport type { Build, Project } from \"@storyshelf/core/schema\";\nimport { createUrlBuilder } from \"@storyshelf/core/urls\";\nimport {\n  signStorybookToken,\n  STORYBOOK_TOKEN_PREFIX,\n  type SecretInput,\n} from \"@storyshelf/core/utils\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore, testingEnabled } from \"../store.ts\";\nimport { isAnonymouslyViewable, publishedAccess } from \"./published-access.ts\";\n\n/** Lifetime of the token in a page: long enough to open the frame, short enough to be harmless. */\nexport const PREVIEW_TOKEN_TTL = 3600;\n\n/**\n * How often a page asks for a fresh frame token (seconds): well inside {@link PREVIEW_TOKEN_TTL},\n * so a frame on a page left open never holds an expired token. The token stays short-lived.\n */\nexport const PREVIEW_TOKEN_REFRESH = 2400;\n\n/** Whether a frame root is a signed `/_s/<token>` URL, the only kind that expires. */\nexport function isSignedPreviewBase(base: string): boolean {\n  return base.startsWith(STORYBOOK_TOKEN_PREFIX);\n}\n\n/** The frame's root URL (no trailing slash), or null when this viewer cannot be given one. */\nexport async function previewBaseOf(project: Project, build: Build): Promise<string | null> {\n  const { config } = getStore();\n  if (isAnonymouslyViewable(build, project)) {\n    return createUrlBuilder(\"/\", config.publishedBaseDomain).storybookBuild(project.slug, build.id);\n  }\n  const secret: SecretInput = credentialKeys(config);\n  if (!testingEnabled() || !secret || !(await publishedAccess(build, project))) {\n    return null;\n  }\n  const token = signStorybookToken({\n    secret,\n    projectId: project.id,\n    buildId: build.id,\n    ttlSeconds: PREVIEW_TOKEN_TTL,\n  });\n  return `${STORYBOOK_TOKEN_PREFIX}${token}`;\n}\n"],"mappings":";;;;;;;;;;AAkBA,MAAa,oBAAoB;;;;;AAMjC,MAAa,wBAAwB;;AAGrC,SAAgB,oBAAoB,MAAuB;CACzD,OAAO,KAAK,WAAW,sBAAsB;AAC/C;;AAGA,eAAsB,cAAc,SAAkB,OAAsC;CAC1F,MAAM,EAAE,WAAW,SAAS;CAC5B,IAAI,sBAAsB,OAAO,OAAO,GACtC,OAAO,iBAAiB,KAAK,OAAO,mBAAmB,CAAC,CAAC,eAAe,QAAQ,MAAM,MAAM,EAAE;CAEhG,MAAM,SAAsB,eAAe,MAAM;CACjD,IAAI,CAAC,eAAe,KAAK,CAAC,UAAU,CAAE,MAAM,gBAAgB,OAAO,OAAO,GACxE,OAAO;CAET,MAAM,QAAQ,mBAAmB;EAC/B;EACA,WAAW,QAAQ;EACnB,SAAS,MAAM;EACf,YAAY;CACd,CAAC;CACD,OAAO,GAAG,yBAAyB;AACrC"}

package/dist/routers/preview-token.mjs

@@ -0,0 +1,51 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { isSignedPreviewBase, previewBaseOf } from "./preview-base.mjs";
+import { SIGNED_URL_HEADERS } from "./published-files.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+import { BuildModel, ProjectModel } from "@storyshelf/core/models";
+//#region src/routers/preview-token.ts
+/**
+* `GET /api/v1/projects/:slug/builds/:buildId/preview-token`: a fresh root for a component page's preview frame
+* (ADR 0006, decision 9). A frame holding a signed `/_s/<token>` URL (ADR 0007, decision 5) outlives
+* the token's hour on a page left open, so the page's script asks for a new root before then and
+* re-points the frame. Answers `{ base }` for a viewer who may open the build, 404 otherwise or when
+* the build needs no token (anyone may open it). Never cached: the answer carries a token.
+*/
+const previewTokenRoute = createRoute({
+	method: "get",
+	tags: ["Review"],
+	summary: "Get a fresh signed root for a build's preview frame",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/preview-token",
+	request: { params: z.object({
+		slug: z.string(),
+		buildId: z.string()
+	}) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: z.object({ base: z.string() }) } },
+			description: "The signed root (`/_s/<token>`) to frame the build's Storybook under"
+		},
+		404: {
+			content: { "text/plain": { schema: z.string() } },
+			description: "Not found, or the build needs no signed URL"
+		}
+	}
+});
+/** Register the preview token refresh route. */
+function registerPreviewToken(app) {
+	app.openapi(previewTokenRoute, async (c) => {
+		const { db } = getStore();
+		const project = await new ProjectModel(db).getBySlug(c.req.param("slug"));
+		const build = await new BuildModel(db).get(c.req.param("buildId"));
+		const base = project && build?.projectId === project.id ? await previewBaseOf(project, build) : null;
+		if (base === null || !isSignedPreviewBase(base)) return c.text("Not found", 404, SIGNED_URL_HEADERS);
+		return c.json({ base }, 200, SIGNED_URL_HEADERS);
+	});
+}
+//#endregion
+export { registerPreviewToken };
+
+//# sourceMappingURL=preview-token.mjs.map

package/dist/routers/preview-token.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-token.mjs","names":[],"sources":["../../src/routers/preview-token.ts"],"sourcesContent":["/**\n * `GET /api/v1/projects/:slug/builds/:buildId/preview-token`: a fresh root for a component page's preview frame\n * (ADR 0006, decision 9). A frame holding a signed `/_s/<token>` URL (ADR 0007, decision 5) outlives\n * the token's hour on a page left open, so the page's script asks for a new root before then and\n * re-points the frame. Answers `{ base }` for a viewer who may open the build, 404 otherwise or when\n * the build needs no token (anyone may open it). Never cached: the answer carries a token.\n */\nimport { createRoute, z } from \"@hono/zod-openapi\";\nimport { BuildModel, ProjectModel } from \"@storyshelf/core/models\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { isSignedPreviewBase, previewBaseOf } from \"./preview-base.ts\";\nimport { SIGNED_URL_HEADERS } from \"./published-files.ts\";\n\nconst previewTokenRoute = createRoute({\n  method: \"get\",\n  tags: [\"Review\"],\n  summary: \"Get a fresh signed root for a build's preview frame\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/preview-token\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: z.object({ base: z.string() }) } },\n      description: \"The signed root (`/_s/<token>`) to frame the build's Storybook under\",\n    },\n    404: {\n      content: { \"text/plain\": { schema: z.string() } },\n      description: \"Not found, or the build needs no signed URL\",\n    },\n  },\n});\n\n/** Register the preview token refresh route. */\nexport function registerPreviewToken(app: ShelfRouter): void {\n  app.openapi(previewTokenRoute, async (c) => {\n    const { db } = getStore();\n    const project = await new ProjectModel(db).getBySlug(c.req.param(\"slug\"));\n    const build = await new BuildModel(db).get(c.req.param(\"buildId\"));\n    const base =\n      project && build?.projectId === project.id ? await previewBaseOf(project, build) : null;\n    if (base === null || !isSignedPreviewBase(base)) {\n      return c.text(\"Not found\", 404, SIGNED_URL_HEADERS);\n    }\n    return c.json({ base }, 200, SIGNED_URL_HEADERS);\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAcA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC1E,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;GAChD,aAAa;EACf;CACF;AACF,CAAC;;AAGD,SAAgB,qBAAqB,KAAwB;CAC3D,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,OAAO,SAAS;EACxB,MAAM,UAAU,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,MAAM,MAAM,CAAC;EACxE,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,SAAS,CAAC;EACjE,MAAM,OACJ,WAAW,OAAO,cAAc,QAAQ,KAAK,MAAM,cAAc,SAAS,KAAK,IAAI;EACrF,IAAI,SAAS,QAAQ,CAAC,oBAAoB,IAAI,GAC5C,OAAO,EAAE,KAAK,aAAa,KAAK,kBAAkB;EAEpD,OAAO,EAAE,KAAK,EAAE,KAAK,GAAG,KAAK,kBAAkB;CACjD,CAAC;AACH"}

package/dist/routers/profile.mjs

@@ -2,6 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
+import { notificationsPaused } from "../notifications-pause.mjs";
 import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
 import { forwardToEngine } from "./auth.mjs";
@@ -89,7 +90,8 @@ async function profileView(c, user, auth, extra) {
 		subscribedSlugs,
 		isLocal: extra?.local ?? security.hasPassword,
 		security,
-		error: extra?.error
+		error: extra?.error,
+		notificationsPaused: getStore().notifiers.length > 0 && await notificationsPaused()
 	});
 	if (extra?.success) flash(c, extra.success);
 	c.header("Cache-Control", "no-store");

package/dist/routers/profile.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"profile.mjs","names":[],"sources":["../../src/routers/profile.ts"],"sourcesContent":["import type { Auth } from \"@storyshelf/core/auth\";\nimport { MIN_PASSWORD_LENGTH, unsignedToken } from \"@storyshelf/core/auth\";\nimport { NotificationSubscriptionModel, ProjectModel, UserModel } from \"@storyshelf/core/models\";\nimport { eq, getTableColumns } from \"@storyshelf/core/orm\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { SESSION_COOKIE, type AuthUser } from \"@storyshelf/core/types\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { renderProfilePage } from \"../pages/profile.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { forwardToEngine } from \"./auth.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\n/** User columns needed to render the profile page. */\ninterface ProfileRow {\n  email: string;\n  name: string;\n  displayNameOverride: string | null;\n  authProvider: string;\n  lastLoginAt: string | null;\n  createdAt: string;\n}\n\n/** Membership entry for the profile page. */\ninterface ProfileMembership {\n  projectName: string;\n  projectSlug: string;\n  role: string;\n  source: string;\n}\n\nfunction field(form: FormData, name: string): string {\n  const raw = form.get(name);\n  return typeof raw === \"string\" ? raw : \"\";\n}\n\nfunction toDbUser(row: ProfileRow | null): ProfilePage[\"dbUser\"] {\n  if (!row) {\n    return undefined;\n  }\n  return {\n    email: row.email,\n    name: row.name,\n    displayNameOverride: row.displayNameOverride,\n    authProvider: row.authProvider,\n    lastLoginAt: row.lastLoginAt,\n    createdAt: row.createdAt,\n  };\n}\n\ntype ProfilePage = Parameters<typeof renderProfilePage>[0];\n\nasync function loadProfileData(userId: string): Promise<{\n  userRow: ProfileRow | null;\n  memberships: ProfileMembership[];\n  subscribedSlugs: string[];\n}> {\n  const { db } = getStore();\n  const userRow = (await new UserModel(db).get(userId)) as unknown as ProfileRow | null;\n  const members = (await db.list(db.tables.projectMembers, {\n    where: eq(getTableColumns(db.tables.projectMembers)[\"userId\"] as never, userId),\n  })) as unknown as Array<{ projectId: string; role: string; source: string }>;\n  const projects = (await db.list(db.tables.projects)) as unknown as Array<{\n    id: string;\n    name: string;\n    slug: string;\n  }>;\n  const byId = new Map(projects.map((project) => [project.id, project]));\n  const memberships = members.flatMap((member) => {\n    const project = byId.get(member.projectId);\n    return project\n      ? [\n          {\n            projectName: project.name,\n            projectSlug: project.slug,\n            role: member.role,\n            source: member.source,\n          },\n        ]\n      : [];\n  });\n  const subs = await new NotificationSubscriptionModel(db).listForUser(userId);\n  const subscribedIds = new Set(subs.filter((sub) => sub.enabled).map((sub) => sub.projectId));\n  const subscribedSlugs = [...byId.values()]\n    .filter((project) => subscribedIds.has(project.id))\n    .map((project) => project.slug);\n  return { userRow, memberships, subscribedSlugs };\n}\n\nfunction readSessionToken(c: Context): string {\n  const header = c.req.header(\"cookie\") ?? \"\";\n  for (const part of header.split(\";\")) {\n    const eqIndex = part.indexOf(\"=\");\n    if (eqIndex !== -1 && part.slice(0, eqIndex).trim() === SESSION_COOKIE) {\n      // Engine cookies are signed (`token.signature`); the table holds the raw token.\n      return unsignedToken(part.slice(eqIndex + 1).trim());\n    }\n  }\n  return \"\";\n}\n\n/** Engine security overview for the profile page. */\nasync function loadEngineSecurity(\n  c: Context,\n  auth: Auth,\n  user: AuthUser,\n): Promise<NonNullable<ProfilePage[\"security\"]>> {\n  const [sessions, passkeys, hasPassword] = await Promise.all([\n    auth.listSessions(user.id),\n    auth.listPasskeys(user.id),\n    auth.hasPassword(user.id),\n  ]);\n  const current = readSessionToken(c);\n  return {\n    sessions: sessions.map((session) => ({\n      id: session.id,\n      ipAddress: session.ipAddress,\n      userAgent: session.userAgent,\n      createdAt: session.createdAt,\n      expiresAt: session.expiresAt,\n      current: session.token === current,\n    })),\n    passkeys,\n    passkeysEnabled: auth.passkeysEnabled(),\n    hasPassword,\n  };\n}\n\nasync function profileView(\n  c: Context,\n  user: AuthUser,\n  auth: Auth,\n  extra?: { error?: string; success?: string; local?: boolean; status?: 200 | 400 },\n): Promise<Response> {\n  const { userRow, memberships, subscribedSlugs } = await loadProfileData(user.id);\n  const security = await loadEngineSecurity(c, auth, user);\n  const html = await renderProfilePage({\n    user,\n    dbUser: toDbUser(userRow),\n    memberships,\n    subscribedSlugs,\n    isLocal: extra?.local ?? security.hasPassword,\n    security,\n    error: extra?.error,\n  });\n  if (extra?.success) {\n    flash(c, extra.success);\n  }\n  // Device tokens render into the page (per-device revoke forms): never store.\n  c.header(\"Cache-Control\", \"no-store\");\n  return c.html(html, extra?.status ?? 200);\n}\n\n/** Register the personal profile page and its mutations. */\nexport function registerProfile(app: ShelfRouter, auth: Auth): void {\n  app.get(\"/profile\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await profileView(c, user, auth);\n  });\n\n  app.post(\"/profile\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    const displayName = field(await c.req.formData(), \"displayName\").trim();\n    if (!displayName) {\n      return profileView(c, user, auth, { error: \"Display name is required\", status: 400 });\n    }\n    await new UserModel(getStore().db).setDisplayNameOverride(user.id, displayName);\n    flash(c, \"Profile updated\");\n    return hxRedirect(c, \"/profile\");\n  });\n\n  registerPasswordRoute(app, auth);\n  registerSessionRoutes(app, auth);\n  registerPasskeyRoutes(app, auth);\n  registerNotificationsRoute(app, auth);\n}\n\nfunction registerNotificationsRoute(app: ShelfRouter, auth: Auth): void {\n  app.post(\"/profile/notifications\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await saveProfileNotifications(c, user, auth);\n  });\n}\n\n/** Toggle the viewer's own email subscription for one member project. */\nasync function saveProfileNotifications(c: Context, user: AuthUser, auth: Auth): Promise<Response> {\n  const form = await c.req.formData();\n  const project = await memberProject(field(form, \"slug\"), user.id);\n  if (!project) {\n    return profileView(c, user, auth, { error: \"Unknown project\", status: 400 });\n  }\n  await applyProfileToggle(project.id, user.id, field(form, \"enabled\") === \"1\");\n  flash(c, \"Notification preference saved\");\n  return hxRedirect(c, \"/profile\");\n}\n\n/** Resolve a project the viewer belongs to (null otherwise). */\nasync function memberProject(slug: string, userId: string): Promise<Project | null> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    return null;\n  }\n  const { memberships } = await loadProfileData(userId);\n  const isMember = memberships.some((membership) => membership.projectSlug === slug);\n  return isMember ? project : null;\n}\n\n/** Enable (opt-in email) or disable (remove) a subscription. */\nasync function applyProfileToggle(\n  projectId: string,\n  userId: string,\n  enable: boolean,\n): Promise<void> {\n  const model = new NotificationSubscriptionModel(getStore().db);\n  if (enable) {\n    await model.upsert(projectId, userId, { via: [\"email\"] });\n    return;\n  }\n  await model.remove(projectId, userId);\n}\n\nfunction registerPasswordRoute(app: ShelfRouter, auth: Auth): void {\n  app.post(\"/profile/password\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await handleEnginePasswordChange(c, auth, user);\n  });\n}\n\nfunction registerSessionRoutes(app: ShelfRouter, auth: Auth): void {\n  app.post(\"/profile/sessions/revoke\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await handleSessionRevoke(c, auth, user);\n  });\n\n  app.post(\"/profile/sessions/revoke-others\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await handleRevokeOthers(c, auth, user);\n  });\n}\n\nfunction registerPasskeyRoutes(app: ShelfRouter, auth: Auth): void {\n  app.post(\"/profile/passkeys/:passkeyId/delete\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await handlePasskeyDelete(c, auth, user);\n  });\n}\n\nasync function handleSessionRevoke(c: Context, auth: Auth, user: AuthUser): Promise<Response> {\n  const id = await readSessionId(c);\n  if (!id) {\n    return profileView(c, user, auth, { error: \"Missing session\", status: 400 });\n  }\n  const token = await resolveSessionToken(auth, user, id);\n  if (!token) {\n    return profileView(c, user, auth, { error: \"Could not revoke that session\", status: 400 });\n  }\n  const res = await forwardToEngine(c, auth, \"/api/auth/revoke-session\", { token });\n  if (res.status !== 200) {\n    return profileView(c, user, auth, { error: \"Could not revoke that session\", status: 400 });\n  }\n  return profileView(c, user, auth, { success: \"Session revoked\" });\n}\n\nasync function readSessionId(c: Context): Promise<string> {\n  return field(await c.req.formData(), \"sessionId\");\n}\n\nasync function resolveSessionToken(auth: Auth, user: AuthUser, id: string): Promise<string | null> {\n  const sessions = await auth.listSessions(user.id);\n  return sessions.find((session) => session.id === id)?.token ?? null;\n}\n\nasync function handleRevokeOthers(c: Context, auth: Auth, user: AuthUser): Promise<Response> {\n  const res = await forwardToEngine(c, auth, \"/api/auth/revoke-other-sessions\", {});\n  if (res.status !== 200) {\n    return profileView(c, user, auth, { error: \"Could not sign out other devices\", status: 400 });\n  }\n  return profileView(c, user, auth, { success: \"Signed out of other devices\" });\n}\n\nasync function handlePasskeyDelete(c: Context, auth: Auth, user: AuthUser): Promise<Response> {\n  const id = c.req.param(\"passkeyId\") ?? \"\";\n  if (!/^[A-Za-z0-9_-]{1,64}$/u.test(id)) {\n    return profileView(c, user, auth, { error: \"Unknown passkey\", status: 400 });\n  }\n  const res = await forwardToEngine(c, auth, \"/api/auth/passkey/delete-passkey\", { id });\n  if (res.status !== 200) {\n    return profileView(c, user, auth, { error: \"Could not remove that passkey\", status: 400 });\n  }\n  return profileView(c, user, auth, { success: \"Passkey removed\" });\n}\n\nasync function engineErrorMessage(res: Response, fallback: string): Promise<string> {\n  try {\n    const body = (await res.json()) as { message?: unknown };\n    return typeof body.message === \"string\" && body.message ? body.message : fallback;\n  } catch {\n    return fallback;\n  }\n}\n\n/** Validate the password form and change it through the engine. */\nasync function handleEnginePasswordChange(\n  c: Context,\n  auth: Auth,\n  user: AuthUser,\n): Promise<Response> {\n  const { current, next, error } = readPasswordChange(await c.req.formData());\n  if (error) {\n    return profileView(c, user, auth, { error, local: true, status: 400 });\n  }\n  const res = await forwardToEngine(c, auth, \"/api/auth/change-password\", {\n    currentPassword: current,\n    newPassword: next,\n    revokeOtherSessions: true,\n  });\n  if (res.status !== 200) {\n    const message = await engineErrorMessage(res, \"Password change failed\");\n    return profileView(c, user, auth, { error: message, local: true, status: 400 });\n  }\n  return profileView(c, user, auth, { success: \"Password changed\", local: true });\n}\n\nfunction readPasswordChange(form: FormData): { current: string; next: string; error?: string } {\n  const next = field(form, \"newPassword\");\n  if (next !== field(form, \"confirmPassword\")) {\n    return { current: \"\", next: \"\", error: \"Passwords do not match\" };\n  }\n  if (next.length < MIN_PASSWORD_LENGTH) {\n    return {\n      current: \"\",\n      next: \"\",\n      error: `Password must be at least ${MIN_PASSWORD_LENGTH} characters`,\n    };\n  }\n  return { current: field(form, \"currentPassword\"), next };\n}\n"],"mappings":";;;;;;;;;;;;;AAgCA,SAAS,MAAM,MAAgB,MAAsB;CACnD,MAAM,MAAM,KAAK,IAAI,IAAI;CACzB,OAAO,OAAO,QAAQ,WAAW,MAAM;AACzC;AAEA,SAAS,SAAS,KAA+C;CAC/D,IAAI,CAAC,KACH;CAEF,OAAO;EACL,OAAO,IAAI;EACX,MAAM,IAAI;EACV,qBAAqB,IAAI;EACzB,cAAc,IAAI;EAClB,aAAa,IAAI;EACjB,WAAW,IAAI;CACjB;AACF;AAIA,eAAe,gBAAgB,QAI5B;CACD,MAAM,EAAE,OAAO,SAAS;CACxB,MAAM,UAAW,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC,IAAI,MAAM;CACnD,MAAM,UAAW,MAAM,GAAG,KAAK,GAAG,OAAO,gBAAgB,EACvD,OAAO,GAAG,gBAAgB,GAAG,OAAO,cAAc,CAAC,CAAC,WAAoB,MAAM,EAChF,CAAC;CACD,MAAM,WAAY,MAAM,GAAG,KAAK,GAAG,OAAO,QAAQ;CAKlD,MAAM,OAAO,IAAI,IAAI,SAAS,KAAK,YAAY,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;CACrE,MAAM,cAAc,QAAQ,SAAS,WAAW;EAC9C,MAAM,UAAU,KAAK,IAAI,OAAO,SAAS;EACzC,OAAO,UACH,CACE;GACE,aAAa,QAAQ;GACrB,aAAa,QAAQ;GACrB,MAAM,OAAO;GACb,QAAQ,OAAO;EACjB,CACF,IACA,CAAC;CACP,CAAC;CACD,MAAM,OAAO,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC,YAAY,MAAM;CAC3E,MAAM,gBAAgB,IAAI,IAAI,KAAK,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC;CAI3F,OAAO;EAAE;EAAS;EAAa,iBAHP,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CACvC,QAAQ,YAAY,cAAc,IAAI,QAAQ,EAAE,CAAC,CAAC,CAClD,KAAK,YAAY,QAAQ,IACiB;CAAE;AACjD;AAEA,SAAS,iBAAiB,GAAoB;CAC5C,MAAM,SAAS,EAAE,IAAI,OAAO,QAAQ,KAAK;CACzC,KAAK,MAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;EACpC,MAAM,UAAU,KAAK,QAAQ,GAAG;EAChC,IAAI,YAAY,MAAM,KAAK,MAAM,GAAG,OAAO,CAAC,CAAC,KAAK,MAAM,gBAEtD,OAAO,cAAc,KAAK,MAAM,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;CAEvD;CACA,OAAO;AACT;;AAGA,eAAe,mBACb,GACA,MACA,MAC+C;CAC/C,MAAM,CAAC,UAAU,UAAU,eAAe,MAAM,QAAQ,IAAI;EAC1D,KAAK,aAAa,KAAK,EAAE;EACzB,KAAK,aAAa,KAAK,EAAE;EACzB,KAAK,YAAY,KAAK,EAAE;CAC1B,CAAC;CACD,MAAM,UAAU,iBAAiB,CAAC;CAClC,OAAO;EACL,UAAU,SAAS,KAAK,aAAa;GACnC,IAAI,QAAQ;GACZ,WAAW,QAAQ;GACnB,WAAW,QAAQ;GACnB,WAAW,QAAQ;GACnB,WAAW,QAAQ;GACnB,SAAS,QAAQ,UAAU;EAC7B,EAAE;EACF;EACA,iBAAiB,KAAK,gBAAgB;EACtC;CACF;AACF;AAEA,eAAe,YACb,GACA,MACA,MACA,OACmB;CACnB,MAAM,EAAE,SAAS,aAAa,oBAAoB,MAAM,gBAAgB,KAAK,EAAE;CAC/E,MAAM,WAAW,MAAM,mBAAmB,GAAG,MAAM,IAAI;CACvD,MAAM,OAAO,MAAM,kBAAkB;EACnC;EACA,QAAQ,SAAS,OAAO;EACxB;EACA;EACA,SAAS,OAAO,SAAS,SAAS;EAClC;EACA,OAAO,OAAO;CAChB,CAAC;CACD,IAAI,OAAO,SACT,MAAM,GAAG,MAAM,OAAO;CAGxB,EAAE,OAAO,iBAAiB,UAAU;CACpC,OAAO,EAAE,KAAK,MAAM,OAAO,UAAU,GAAG;AAC1C;;AAGA,SAAgB,gBAAgB,KAAkB,MAAkB;CAClE,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,YAAY,GAAG,MAAM,IAAI;CACxC,CAAC;CAED,IAAI,KAAK,YAAY,OAAO,MAAM;EAChC,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,MAAM,cAAc,MAAM,MAAM,EAAE,IAAI,SAAS,GAAG,aAAa,CAAC,CAAC,KAAK;EACtE,IAAI,CAAC,aACH,OAAO,YAAY,GAAG,MAAM,MAAM;GAAE,OAAO;GAA4B,QAAQ;EAAI,CAAC;EAEtF,MAAM,IAAI,UAAU,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB,KAAK,IAAI,WAAW;EAC9E,MAAM,GAAG,iBAAiB;EAC1B,OAAO,WAAW,GAAG,UAAU;CACjC,CAAC;CAED,sBAAsB,KAAK,IAAI;CAC/B,sBAAsB,KAAK,IAAI;CAC/B,sBAAsB,KAAK,IAAI;CAC/B,2BAA2B,KAAK,IAAI;AACtC;AAEA,SAAS,2BAA2B,KAAkB,MAAkB;CACtE,IAAI,KAAK,0BAA0B,OAAO,MAAM;EAC9C,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,yBAAyB,GAAG,MAAM,IAAI;CACrD,CAAC;AACH;;AAGA,eAAe,yBAAyB,GAAY,MAAgB,MAA+B;CACjG,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,UAAU,MAAM,cAAc,MAAM,MAAM,MAAM,GAAG,KAAK,EAAE;CAChE,IAAI,CAAC,SACH,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAmB,QAAQ;CAAI,CAAC;CAE7E,MAAM,mBAAmB,QAAQ,IAAI,KAAK,IAAI,MAAM,MAAM,SAAS,MAAM,GAAG;CAC5E,MAAM,GAAG,+BAA+B;CACxC,OAAO,WAAW,GAAG,UAAU;AACjC;;AAGA,eAAe,cAAc,MAAc,QAAyC;CAClF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,OAAO;CAET,MAAM,EAAE,gBAAgB,MAAM,gBAAgB,MAAM;CAEpD,OADiB,YAAY,MAAM,eAAe,WAAW,gBAAgB,IAC/D,IAAI,UAAU;AAC9B;;AAGA,eAAe,mBACb,WACA,QACA,QACe;CACf,MAAM,QAAQ,IAAI,8BAA8B,SAAS,CAAC,CAAC,EAAE;CAC7D,IAAI,QAAQ;EACV,MAAM,MAAM,OAAO,WAAW,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;EACxD;CACF;CACA,MAAM,MAAM,OAAO,WAAW,MAAM;AACtC;AAEA,SAAS,sBAAsB,KAAkB,MAAkB;CACjE,IAAI,KAAK,qBAAqB,OAAO,MAAM;EACzC,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,2BAA2B,GAAG,MAAM,IAAI;CACvD,CAAC;AACH;AAEA,SAAS,sBAAsB,KAAkB,MAAkB;CACjE,IAAI,KAAK,4BAA4B,OAAO,MAAM;EAChD,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,oBAAoB,GAAG,MAAM,IAAI;CAChD,CAAC;CAED,IAAI,KAAK,mCAAmC,OAAO,MAAM;EACvD,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,mBAAmB,GAAG,MAAM,IAAI;CAC/C,CAAC;AACH;AAEA,SAAS,sBAAsB,KAAkB,MAAkB;CACjE,IAAI,KAAK,uCAAuC,OAAO,MAAM;EAC3D,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,oBAAoB,GAAG,MAAM,IAAI;CAChD,CAAC;AACH;AAEA,eAAe,oBAAoB,GAAY,MAAY,MAAmC;CAC5F,MAAM,KAAK,MAAM,cAAc,CAAC;CAChC,IAAI,CAAC,IACH,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAmB,QAAQ;CAAI,CAAC;CAE7E,MAAM,QAAQ,MAAM,oBAAoB,MAAM,MAAM,EAAE;CACtD,IAAI,CAAC,OACH,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAiC,QAAQ;CAAI,CAAC;CAG3F,KAAI,MADc,gBAAgB,GAAG,MAAM,4BAA4B,EAAE,MAAM,CAAC,EAAA,CACxE,WAAW,KACjB,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAiC,QAAQ;CAAI,CAAC;CAE3F,OAAO,YAAY,GAAG,MAAM,MAAM,EAAE,SAAS,kBAAkB,CAAC;AAClE;AAEA,eAAe,cAAc,GAA6B;CACxD,OAAO,MAAM,MAAM,EAAE,IAAI,SAAS,GAAG,WAAW;AAClD;AAEA,eAAe,oBAAoB,MAAY,MAAgB,IAAoC;CAEjG,QAAO,MADgB,KAAK,aAAa,KAAK,EAAE,EAAA,CAChC,MAAM,YAAY,QAAQ,OAAO,EAAE,CAAC,EAAE,SAAS;AACjE;AAEA,eAAe,mBAAmB,GAAY,MAAY,MAAmC;CAE3F,KAAI,MADc,gBAAgB,GAAG,MAAM,mCAAmC,CAAC,CAAC,EAAA,CACxE,WAAW,KACjB,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAoC,QAAQ;CAAI,CAAC;CAE9F,OAAO,YAAY,GAAG,MAAM,MAAM,EAAE,SAAS,8BAA8B,CAAC;AAC9E;AAEA,eAAe,oBAAoB,GAAY,MAAY,MAAmC;CAC5F,MAAM,KAAK,EAAE,IAAI,MAAM,WAAW,KAAK;CACvC,IAAI,CAAC,yBAAyB,KAAK,EAAE,GACnC,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAmB,QAAQ;CAAI,CAAC;CAG7E,KAAI,MADc,gBAAgB,GAAG,MAAM,oCAAoC,EAAE,GAAG,CAAC,EAAA,CAC7E,WAAW,KACjB,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAiC,QAAQ;CAAI,CAAC;CAE3F,OAAO,YAAY,GAAG,MAAM,MAAM,EAAE,SAAS,kBAAkB,CAAC;AAClE;AAEA,eAAe,mBAAmB,KAAe,UAAmC;CAClF,IAAI;EACF,MAAM,OAAQ,MAAM,IAAI,KAAK;EAC7B,OAAO,OAAO,KAAK,YAAY,YAAY,KAAK,UAAU,KAAK,UAAU;CAC3E,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,eAAe,2BACb,GACA,MACA,MACmB;CACnB,MAAM,EAAE,SAAS,MAAM,UAAU,mBAAmB,MAAM,EAAE,IAAI,SAAS,CAAC;CAC1E,IAAI,OACF,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE;EAAO,OAAO;EAAM,QAAQ;CAAI,CAAC;CAEvE,MAAM,MAAM,MAAM,gBAAgB,GAAG,MAAM,6BAA6B;EACtE,iBAAiB;EACjB,aAAa;EACb,qBAAqB;CACvB,CAAC;CACD,IAAI,IAAI,WAAW,KAEjB,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO,MADrB,mBAAmB,KAAK,wBAAwB;EAClB,OAAO;EAAM,QAAQ;CAAI,CAAC;CAEhF,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,SAAS;EAAoB,OAAO;CAAK,CAAC;AAChF;AAEA,SAAS,mBAAmB,MAAmE;CAC7F,MAAM,OAAO,MAAM,MAAM,aAAa;CACtC,IAAI,SAAS,MAAM,MAAM,iBAAiB,GACxC,OAAO;EAAE,SAAS;EAAI,MAAM;EAAI,OAAO;CAAyB;CAElE,IAAI,KAAK,SAAS,qBAChB,OAAO;EACL,SAAS;EACT,MAAM;EACN,OAAO,6BAA6B,oBAAoB;CAC1D;CAEF,OAAO;EAAE,SAAS,MAAM,MAAM,iBAAiB;EAAG;CAAK;AACzD"}
+{"version":3,"file":"profile.mjs","names":[],"sources":["../../src/routers/profile.ts"],"sourcesContent":["import type { Auth } from \"@storyshelf/core/auth\";\nimport { MIN_PASSWORD_LENGTH, unsignedToken } from \"@storyshelf/core/auth\";\nimport { NotificationSubscriptionModel, ProjectModel, UserModel } from \"@storyshelf/core/models\";\nimport { eq, getTableColumns } from \"@storyshelf/core/orm\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { SESSION_COOKIE, type AuthUser } from \"@storyshelf/core/types\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { notificationsPaused } from \"../notifications-pause.ts\";\nimport { renderProfilePage } from \"../pages/profile.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { forwardToEngine } from \"./auth.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\n/** User columns needed to render the profile page. */\ninterface ProfileRow {\n  email: string;\n  name: string;\n  displayNameOverride: string | null;\n  authProvider: string;\n  lastLoginAt: string | null;\n  createdAt: string;\n}\n\n/** Membership entry for the profile page. */\ninterface ProfileMembership {\n  projectName: string;\n  projectSlug: string;\n  role: string;\n  source: string;\n}\n\nfunction field(form: FormData, name: string): string {\n  const raw = form.get(name);\n  return typeof raw === \"string\" ? raw : \"\";\n}\n\nfunction toDbUser(row: ProfileRow | null): ProfilePage[\"dbUser\"] {\n  if (!row) {\n    return undefined;\n  }\n  return {\n    email: row.email,\n    name: row.name,\n    displayNameOverride: row.displayNameOverride,\n    authProvider: row.authProvider,\n    lastLoginAt: row.lastLoginAt,\n    createdAt: row.createdAt,\n  };\n}\n\ntype ProfilePage = Parameters<typeof renderProfilePage>[0];\n\nasync function loadProfileData(userId: string): Promise<{\n  userRow: ProfileRow | null;\n  memberships: ProfileMembership[];\n  subscribedSlugs: string[];\n}> {\n  const { db } = getStore();\n  const userRow = (await new UserModel(db).get(userId)) as unknown as ProfileRow | null;\n  const members = (await db.list(db.tables.projectMembers, {\n    where: eq(getTableColumns(db.tables.projectMembers)[\"userId\"] as never, userId),\n  })) as unknown as Array<{ projectId: string; role: string; source: string }>;\n  const projects = (await db.list(db.tables.projects)) as unknown as Array<{\n    id: string;\n    name: string;\n    slug: string;\n  }>;\n  const byId = new Map(projects.map((project) => [project.id, project]));\n  const memberships = members.flatMap((member) => {\n    const project = byId.get(member.projectId);\n    return project\n      ? [\n          {\n            projectName: project.name,\n            projectSlug: project.slug,\n            role: member.role,\n            source: member.source,\n          },\n        ]\n      : [];\n  });\n  const subs = await new NotificationSubscriptionModel(db).listForUser(userId);\n  const subscribedIds = new Set(subs.filter((sub) => sub.enabled).map((sub) => sub.projectId));\n  const subscribedSlugs = [...byId.values()]\n    .filter((project) => subscribedIds.has(project.id))\n    .map((project) => project.slug);\n  return { userRow, memberships, subscribedSlugs };\n}\n\nfunction readSessionToken(c: Context): string {\n  const header = c.req.header(\"cookie\") ?? \"\";\n  for (const part of header.split(\";\")) {\n    const eqIndex = part.indexOf(\"=\");\n    if (eqIndex !== -1 && part.slice(0, eqIndex).trim() === SESSION_COOKIE) {\n      // Engine cookies are signed (`token.signature`); the table holds the raw token.\n      return unsignedToken(part.slice(eqIndex + 1).trim());\n    }\n  }\n  return \"\";\n}\n\n/** Engine security overview for the profile page. */\nasync function loadEngineSecurity(\n  c: Context,\n  auth: Auth,\n  user: AuthUser,\n): Promise<NonNullable<ProfilePage[\"security\"]>> {\n  const [sessions, passkeys, hasPassword] = await Promise.all([\n    auth.listSessions(user.id),\n    auth.listPasskeys(user.id),\n    auth.hasPassword(user.id),\n  ]);\n  const current = readSessionToken(c);\n  return {\n    sessions: sessions.map((session) => ({\n      id: session.id,\n      ipAddress: session.ipAddress,\n      userAgent: session.userAgent,\n      createdAt: session.createdAt,\n      expiresAt: session.expiresAt,\n      current: session.token === current,\n    })),\n    passkeys,\n    passkeysEnabled: auth.passkeysEnabled(),\n    hasPassword,\n  };\n}\n\nasync function profileView(\n  c: Context,\n  user: AuthUser,\n  auth: Auth,\n  extra?: { error?: string; success?: string; local?: boolean; status?: 200 | 400 },\n): Promise<Response> {\n  const { userRow, memberships, subscribedSlugs } = await loadProfileData(user.id);\n  const security = await loadEngineSecurity(c, auth, user);\n  const html = await renderProfilePage({\n    user,\n    dbUser: toDbUser(userRow),\n    memberships,\n    subscribedSlugs,\n    isLocal: extra?.local ?? security.hasPassword,\n    security,\n    error: extra?.error,\n    notificationsPaused: getStore().notifiers.length > 0 && (await notificationsPaused()),\n  });\n  if (extra?.success) {\n    flash(c, extra.success);\n  }\n  // Device tokens render into the page (per-device revoke forms): never store.\n  c.header(\"Cache-Control\", \"no-store\");\n  return c.html(html, extra?.status ?? 200);\n}\n\n/** Register the personal profile page and its mutations. */\nexport function registerProfile(app: ShelfRouter, auth: Auth): void {\n  app.get(\"/profile\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await profileView(c, user, auth);\n  });\n\n  app.post(\"/profile\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    const displayName = field(await c.req.formData(), \"displayName\").trim();\n    if (!displayName) {\n      return profileView(c, user, auth, { error: \"Display name is required\", status: 400 });\n    }\n    await new UserModel(getStore().db).setDisplayNameOverride(user.id, displayName);\n    flash(c, \"Profile updated\");\n    return hxRedirect(c, \"/profile\");\n  });\n\n  registerPasswordRoute(app, auth);\n  registerSessionRoutes(app, auth);\n  registerPasskeyRoutes(app, auth);\n  registerNotificationsRoute(app, auth);\n}\n\nfunction registerNotificationsRoute(app: ShelfRouter, auth: Auth): void {\n  app.post(\"/profile/notifications\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await saveProfileNotifications(c, user, auth);\n  });\n}\n\n/** Toggle the viewer's own email subscription for one member project. */\nasync function saveProfileNotifications(c: Context, user: AuthUser, auth: Auth): Promise<Response> {\n  const form = await c.req.formData();\n  const project = await memberProject(field(form, \"slug\"), user.id);\n  if (!project) {\n    return profileView(c, user, auth, { error: \"Unknown project\", status: 400 });\n  }\n  await applyProfileToggle(project.id, user.id, field(form, \"enabled\") === \"1\");\n  flash(c, \"Notification preference saved\");\n  return hxRedirect(c, \"/profile\");\n}\n\n/** Resolve a project the viewer belongs to (null otherwise). */\nasync function memberProject(slug: string, userId: string): Promise<Project | null> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    return null;\n  }\n  const { memberships } = await loadProfileData(userId);\n  const isMember = memberships.some((membership) => membership.projectSlug === slug);\n  return isMember ? project : null;\n}\n\n/** Enable (opt-in email) or disable (remove) a subscription. */\nasync function applyProfileToggle(\n  projectId: string,\n  userId: string,\n  enable: boolean,\n): Promise<void> {\n  const model = new NotificationSubscriptionModel(getStore().db);\n  if (enable) {\n    await model.upsert(projectId, userId, { via: [\"email\"] });\n    return;\n  }\n  await model.remove(projectId, userId);\n}\n\nfunction registerPasswordRoute(app: ShelfRouter, auth: Auth): void {\n  app.post(\"/profile/password\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await handleEnginePasswordChange(c, auth, user);\n  });\n}\n\nfunction registerSessionRoutes(app: ShelfRouter, auth: Auth): void {\n  app.post(\"/profile/sessions/revoke\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await handleSessionRevoke(c, auth, user);\n  });\n\n  app.post(\"/profile/sessions/revoke-others\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await handleRevokeOthers(c, auth, user);\n  });\n}\n\nfunction registerPasskeyRoutes(app: ShelfRouter, auth: Auth): void {\n  app.post(\"/profile/passkeys/:passkeyId/delete\", async (c) => {\n    const { user } = getStore();\n    if (!user) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return await handlePasskeyDelete(c, auth, user);\n  });\n}\n\nasync function handleSessionRevoke(c: Context, auth: Auth, user: AuthUser): Promise<Response> {\n  const id = await readSessionId(c);\n  if (!id) {\n    return profileView(c, user, auth, { error: \"Missing session\", status: 400 });\n  }\n  const token = await resolveSessionToken(auth, user, id);\n  if (!token) {\n    return profileView(c, user, auth, { error: \"Could not revoke that session\", status: 400 });\n  }\n  const res = await forwardToEngine(c, auth, \"/api/auth/revoke-session\", { token });\n  if (res.status !== 200) {\n    return profileView(c, user, auth, { error: \"Could not revoke that session\", status: 400 });\n  }\n  return profileView(c, user, auth, { success: \"Session revoked\" });\n}\n\nasync function readSessionId(c: Context): Promise<string> {\n  return field(await c.req.formData(), \"sessionId\");\n}\n\nasync function resolveSessionToken(auth: Auth, user: AuthUser, id: string): Promise<string | null> {\n  const sessions = await auth.listSessions(user.id);\n  return sessions.find((session) => session.id === id)?.token ?? null;\n}\n\nasync function handleRevokeOthers(c: Context, auth: Auth, user: AuthUser): Promise<Response> {\n  const res = await forwardToEngine(c, auth, \"/api/auth/revoke-other-sessions\", {});\n  if (res.status !== 200) {\n    return profileView(c, user, auth, { error: \"Could not sign out other devices\", status: 400 });\n  }\n  return profileView(c, user, auth, { success: \"Signed out of other devices\" });\n}\n\nasync function handlePasskeyDelete(c: Context, auth: Auth, user: AuthUser): Promise<Response> {\n  const id = c.req.param(\"passkeyId\") ?? \"\";\n  if (!/^[A-Za-z0-9_-]{1,64}$/u.test(id)) {\n    return profileView(c, user, auth, { error: \"Unknown passkey\", status: 400 });\n  }\n  const res = await forwardToEngine(c, auth, \"/api/auth/passkey/delete-passkey\", { id });\n  if (res.status !== 200) {\n    return profileView(c, user, auth, { error: \"Could not remove that passkey\", status: 400 });\n  }\n  return profileView(c, user, auth, { success: \"Passkey removed\" });\n}\n\nasync function engineErrorMessage(res: Response, fallback: string): Promise<string> {\n  try {\n    const body = (await res.json()) as { message?: unknown };\n    return typeof body.message === \"string\" && body.message ? body.message : fallback;\n  } catch {\n    return fallback;\n  }\n}\n\n/** Validate the password form and change it through the engine. */\nasync function handleEnginePasswordChange(\n  c: Context,\n  auth: Auth,\n  user: AuthUser,\n): Promise<Response> {\n  const { current, next, error } = readPasswordChange(await c.req.formData());\n  if (error) {\n    return profileView(c, user, auth, { error, local: true, status: 400 });\n  }\n  const res = await forwardToEngine(c, auth, \"/api/auth/change-password\", {\n    currentPassword: current,\n    newPassword: next,\n    revokeOtherSessions: true,\n  });\n  if (res.status !== 200) {\n    const message = await engineErrorMessage(res, \"Password change failed\");\n    return profileView(c, user, auth, { error: message, local: true, status: 400 });\n  }\n  return profileView(c, user, auth, { success: \"Password changed\", local: true });\n}\n\nfunction readPasswordChange(form: FormData): { current: string; next: string; error?: string } {\n  const next = field(form, \"newPassword\");\n  if (next !== field(form, \"confirmPassword\")) {\n    return { current: \"\", next: \"\", error: \"Passwords do not match\" };\n  }\n  if (next.length < MIN_PASSWORD_LENGTH) {\n    return {\n      current: \"\",\n      next: \"\",\n      error: `Password must be at least ${MIN_PASSWORD_LENGTH} characters`,\n    };\n  }\n  return { current: field(form, \"currentPassword\"), next };\n}\n"],"mappings":";;;;;;;;;;;;;;AAiCA,SAAS,MAAM,MAAgB,MAAsB;CACnD,MAAM,MAAM,KAAK,IAAI,IAAI;CACzB,OAAO,OAAO,QAAQ,WAAW,MAAM;AACzC;AAEA,SAAS,SAAS,KAA+C;CAC/D,IAAI,CAAC,KACH;CAEF,OAAO;EACL,OAAO,IAAI;EACX,MAAM,IAAI;EACV,qBAAqB,IAAI;EACzB,cAAc,IAAI;EAClB,aAAa,IAAI;EACjB,WAAW,IAAI;CACjB;AACF;AAIA,eAAe,gBAAgB,QAI5B;CACD,MAAM,EAAE,OAAO,SAAS;CACxB,MAAM,UAAW,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC,IAAI,MAAM;CACnD,MAAM,UAAW,MAAM,GAAG,KAAK,GAAG,OAAO,gBAAgB,EACvD,OAAO,GAAG,gBAAgB,GAAG,OAAO,cAAc,CAAC,CAAC,WAAoB,MAAM,EAChF,CAAC;CACD,MAAM,WAAY,MAAM,GAAG,KAAK,GAAG,OAAO,QAAQ;CAKlD,MAAM,OAAO,IAAI,IAAI,SAAS,KAAK,YAAY,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;CACrE,MAAM,cAAc,QAAQ,SAAS,WAAW;EAC9C,MAAM,UAAU,KAAK,IAAI,OAAO,SAAS;EACzC,OAAO,UACH,CACE;GACE,aAAa,QAAQ;GACrB,aAAa,QAAQ;GACrB,MAAM,OAAO;GACb,QAAQ,OAAO;EACjB,CACF,IACA,CAAC;CACP,CAAC;CACD,MAAM,OAAO,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC,YAAY,MAAM;CAC3E,MAAM,gBAAgB,IAAI,IAAI,KAAK,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC;CAI3F,OAAO;EAAE;EAAS;EAAa,iBAHP,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CACvC,QAAQ,YAAY,cAAc,IAAI,QAAQ,EAAE,CAAC,CAAC,CAClD,KAAK,YAAY,QAAQ,IACiB;CAAE;AACjD;AAEA,SAAS,iBAAiB,GAAoB;CAC5C,MAAM,SAAS,EAAE,IAAI,OAAO,QAAQ,KAAK;CACzC,KAAK,MAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;EACpC,MAAM,UAAU,KAAK,QAAQ,GAAG;EAChC,IAAI,YAAY,MAAM,KAAK,MAAM,GAAG,OAAO,CAAC,CAAC,KAAK,MAAM,gBAEtD,OAAO,cAAc,KAAK,MAAM,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;CAEvD;CACA,OAAO;AACT;;AAGA,eAAe,mBACb,GACA,MACA,MAC+C;CAC/C,MAAM,CAAC,UAAU,UAAU,eAAe,MAAM,QAAQ,IAAI;EAC1D,KAAK,aAAa,KAAK,EAAE;EACzB,KAAK,aAAa,KAAK,EAAE;EACzB,KAAK,YAAY,KAAK,EAAE;CAC1B,CAAC;CACD,MAAM,UAAU,iBAAiB,CAAC;CAClC,OAAO;EACL,UAAU,SAAS,KAAK,aAAa;GACnC,IAAI,QAAQ;GACZ,WAAW,QAAQ;GACnB,WAAW,QAAQ;GACnB,WAAW,QAAQ;GACnB,WAAW,QAAQ;GACnB,SAAS,QAAQ,UAAU;EAC7B,EAAE;EACF;EACA,iBAAiB,KAAK,gBAAgB;EACtC;CACF;AACF;AAEA,eAAe,YACb,GACA,MACA,MACA,OACmB;CACnB,MAAM,EAAE,SAAS,aAAa,oBAAoB,MAAM,gBAAgB,KAAK,EAAE;CAC/E,MAAM,WAAW,MAAM,mBAAmB,GAAG,MAAM,IAAI;CACvD,MAAM,OAAO,MAAM,kBAAkB;EACnC;EACA,QAAQ,SAAS,OAAO;EACxB;EACA;EACA,SAAS,OAAO,SAAS,SAAS;EAClC;EACA,OAAO,OAAO;EACd,qBAAqB,SAAS,CAAC,CAAC,UAAU,SAAS,KAAM,MAAM,oBAAoB;CACrF,CAAC;CACD,IAAI,OAAO,SACT,MAAM,GAAG,MAAM,OAAO;CAGxB,EAAE,OAAO,iBAAiB,UAAU;CACpC,OAAO,EAAE,KAAK,MAAM,OAAO,UAAU,GAAG;AAC1C;;AAGA,SAAgB,gBAAgB,KAAkB,MAAkB;CAClE,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,YAAY,GAAG,MAAM,IAAI;CACxC,CAAC;CAED,IAAI,KAAK,YAAY,OAAO,MAAM;EAChC,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,MAAM,cAAc,MAAM,MAAM,EAAE,IAAI,SAAS,GAAG,aAAa,CAAC,CAAC,KAAK;EACtE,IAAI,CAAC,aACH,OAAO,YAAY,GAAG,MAAM,MAAM;GAAE,OAAO;GAA4B,QAAQ;EAAI,CAAC;EAEtF,MAAM,IAAI,UAAU,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB,KAAK,IAAI,WAAW;EAC9E,MAAM,GAAG,iBAAiB;EAC1B,OAAO,WAAW,GAAG,UAAU;CACjC,CAAC;CAED,sBAAsB,KAAK,IAAI;CAC/B,sBAAsB,KAAK,IAAI;CAC/B,sBAAsB,KAAK,IAAI;CAC/B,2BAA2B,KAAK,IAAI;AACtC;AAEA,SAAS,2BAA2B,KAAkB,MAAkB;CACtE,IAAI,KAAK,0BAA0B,OAAO,MAAM;EAC9C,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,yBAAyB,GAAG,MAAM,IAAI;CACrD,CAAC;AACH;;AAGA,eAAe,yBAAyB,GAAY,MAAgB,MAA+B;CACjG,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,UAAU,MAAM,cAAc,MAAM,MAAM,MAAM,GAAG,KAAK,EAAE;CAChE,IAAI,CAAC,SACH,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAmB,QAAQ;CAAI,CAAC;CAE7E,MAAM,mBAAmB,QAAQ,IAAI,KAAK,IAAI,MAAM,MAAM,SAAS,MAAM,GAAG;CAC5E,MAAM,GAAG,+BAA+B;CACxC,OAAO,WAAW,GAAG,UAAU;AACjC;;AAGA,eAAe,cAAc,MAAc,QAAyC;CAClF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,OAAO;CAET,MAAM,EAAE,gBAAgB,MAAM,gBAAgB,MAAM;CAEpD,OADiB,YAAY,MAAM,eAAe,WAAW,gBAAgB,IAC/D,IAAI,UAAU;AAC9B;;AAGA,eAAe,mBACb,WACA,QACA,QACe;CACf,MAAM,QAAQ,IAAI,8BAA8B,SAAS,CAAC,CAAC,EAAE;CAC7D,IAAI,QAAQ;EACV,MAAM,MAAM,OAAO,WAAW,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;EACxD;CACF;CACA,MAAM,MAAM,OAAO,WAAW,MAAM;AACtC;AAEA,SAAS,sBAAsB,KAAkB,MAAkB;CACjE,IAAI,KAAK,qBAAqB,OAAO,MAAM;EACzC,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,2BAA2B,GAAG,MAAM,IAAI;CACvD,CAAC;AACH;AAEA,SAAS,sBAAsB,KAAkB,MAAkB;CACjE,IAAI,KAAK,4BAA4B,OAAO,MAAM;EAChD,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,oBAAoB,GAAG,MAAM,IAAI;CAChD,CAAC;CAED,IAAI,KAAK,mCAAmC,OAAO,MAAM;EACvD,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,mBAAmB,GAAG,MAAM,IAAI;CAC/C,CAAC;AACH;AAEA,SAAS,sBAAsB,KAAkB,MAAkB;CACjE,IAAI,KAAK,uCAAuC,OAAO,MAAM;EAC3D,MAAM,EAAE,SAAS,SAAS;EAC1B,IAAI,CAAC,MACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,MAAM,oBAAoB,GAAG,MAAM,IAAI;CAChD,CAAC;AACH;AAEA,eAAe,oBAAoB,GAAY,MAAY,MAAmC;CAC5F,MAAM,KAAK,MAAM,cAAc,CAAC;CAChC,IAAI,CAAC,IACH,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAmB,QAAQ;CAAI,CAAC;CAE7E,MAAM,QAAQ,MAAM,oBAAoB,MAAM,MAAM,EAAE;CACtD,IAAI,CAAC,OACH,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAiC,QAAQ;CAAI,CAAC;CAG3F,KAAI,MADc,gBAAgB,GAAG,MAAM,4BAA4B,EAAE,MAAM,CAAC,EAAA,CACxE,WAAW,KACjB,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAiC,QAAQ;CAAI,CAAC;CAE3F,OAAO,YAAY,GAAG,MAAM,MAAM,EAAE,SAAS,kBAAkB,CAAC;AAClE;AAEA,eAAe,cAAc,GAA6B;CACxD,OAAO,MAAM,MAAM,EAAE,IAAI,SAAS,GAAG,WAAW;AAClD;AAEA,eAAe,oBAAoB,MAAY,MAAgB,IAAoC;CAEjG,QAAO,MADgB,KAAK,aAAa,KAAK,EAAE,EAAA,CAChC,MAAM,YAAY,QAAQ,OAAO,EAAE,CAAC,EAAE,SAAS;AACjE;AAEA,eAAe,mBAAmB,GAAY,MAAY,MAAmC;CAE3F,KAAI,MADc,gBAAgB,GAAG,MAAM,mCAAmC,CAAC,CAAC,EAAA,CACxE,WAAW,KACjB,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAoC,QAAQ;CAAI,CAAC;CAE9F,OAAO,YAAY,GAAG,MAAM,MAAM,EAAE,SAAS,8BAA8B,CAAC;AAC9E;AAEA,eAAe,oBAAoB,GAAY,MAAY,MAAmC;CAC5F,MAAM,KAAK,EAAE,IAAI,MAAM,WAAW,KAAK;CACvC,IAAI,CAAC,yBAAyB,KAAK,EAAE,GACnC,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAmB,QAAQ;CAAI,CAAC;CAG7E,KAAI,MADc,gBAAgB,GAAG,MAAM,oCAAoC,EAAE,GAAG,CAAC,EAAA,CAC7E,WAAW,KACjB,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO;EAAiC,QAAQ;CAAI,CAAC;CAE3F,OAAO,YAAY,GAAG,MAAM,MAAM,EAAE,SAAS,kBAAkB,CAAC;AAClE;AAEA,eAAe,mBAAmB,KAAe,UAAmC;CAClF,IAAI;EACF,MAAM,OAAQ,MAAM,IAAI,KAAK;EAC7B,OAAO,OAAO,KAAK,YAAY,YAAY,KAAK,UAAU,KAAK,UAAU;CAC3E,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,eAAe,2BACb,GACA,MACA,MACmB;CACnB,MAAM,EAAE,SAAS,MAAM,UAAU,mBAAmB,MAAM,EAAE,IAAI,SAAS,CAAC;CAC1E,IAAI,OACF,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE;EAAO,OAAO;EAAM,QAAQ;CAAI,CAAC;CAEvE,MAAM,MAAM,MAAM,gBAAgB,GAAG,MAAM,6BAA6B;EACtE,iBAAiB;EACjB,aAAa;EACb,qBAAqB;CACvB,CAAC;CACD,IAAI,IAAI,WAAW,KAEjB,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,OAAO,MADrB,mBAAmB,KAAK,wBAAwB;EAClB,OAAO;EAAM,QAAQ;CAAI,CAAC;CAEhF,OAAO,YAAY,GAAG,MAAM,MAAM;EAAE,SAAS;EAAoB,OAAO;CAAK,CAAC;AAChF;AAEA,SAAS,mBAAmB,MAAmE;CAC7F,MAAM,OAAO,MAAM,MAAM,aAAa;CACtC,IAAI,SAAS,MAAM,MAAM,iBAAiB,GACxC,OAAO;EAAE,SAAS;EAAI,MAAM;EAAI,OAAO;CAAyB;CAElE,IAAI,KAAK,SAAS,qBAChB,OAAO;EACL,SAAS;EACT,MAAM;EACN,OAAO,6BAA6B,oBAAoB;CAC1D;CAEF,OAAO;EAAE,SAAS,MAAM,MAAM,iBAAiB;EAAG;CAAK;AACzD"}

package/dist/routers/projects.mjs

@@ -3,9 +3,14 @@ import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
 import { forbidden, requireSiteAdmin, resolveAuthorizedProject } from "./helpers.mjs";
+import { assertTargetsSelectable } from "../targets.mjs";
 import { badRequest, forbidden as forbidden$1, notFound, projectCreateSchema, projectSchema, projectUpdateSchema, unauthorized } from "./schemas.mjs";
+import { toProjectPatch } from "./capture-config.mjs";
+import { runSwitchOffPass } from "./review-switch-off.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
+import { resolveBrowsers } from "@storyshelf/core/capture";
 import { LabelModel, MemberModel, ProjectModel } from "@storyshelf/core/models";
+import { HTTPException } from "hono/http-exception";
 //#region src/routers/projects.ts
 const VIEW_ROLES = [
 	"viewer",
@@ -92,6 +97,13 @@ const deleteProjectRoute = createRoute({
 		...notFound
 	}
 });
+/** `aiProfile` is a site-admin data-flow decision; it must name a configured profile. */
+function assertAiProfileChange(c, profile) {
+	if (profile === void 0) return;
+	requireSiteAdmin(c);
+	const { ai } = getStore();
+	if (profile !== null && !ai?.profileNames().includes(profile)) throw new HTTPException(400, { message: `Unknown AI profile "${profile}"` });
+}
 /** Register the project list, create, fetch, update, and delete endpoints. */
 function registerProjects(app) {
 	app.openapi(listProjectsRoute, async (c) => {
@@ -116,7 +128,11 @@ function registerProjects(app) {
 	app.openapi(updateProjectRoute, async (c) => {
 		const { slug } = c.req.valid("param");
 		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
-		const updated = await new ProjectModel(getStore().db).update(project.id, c.req.valid("json"));
+		const body = c.req.valid("json");
+		assertAiProfileChange(c, body.aiProfile);
+		await assertTargetsSelectable(body.browsers ?? (body.browser === void 0 ? [] : [body.browser]), resolveBrowsers(project));
+		const updated = await new ProjectModel(getStore().db).update(project.id, toProjectPatch(body));
+		await runSwitchOffPass(project, updated);
 		return c.json(updated);
 	});
 	app.openapi(deleteProjectRoute, async (c) => {

package/dist/routers/projects.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"projects.mjs","names":["forbiddenResponse"],"sources":["../../src/routers/projects.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { MemberModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { forbidden, requireSiteAdmin, resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  badRequest,\n  forbidden as forbiddenResponse,\n  notFound,\n  projectCreateSchema,\n  projectSchema,\n  projectUpdateSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nfunction requireSessionUser(): void {\n  if (!getStore().authEnabled) {\n    return;\n  }\n  if (!getStore().user) {\n    forbidden();\n  }\n}\n\nconst listProjectsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Projects\"],\n  summary: \"List projects\",\n  path: \"/api/v1/projects\",\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: projectSchema.array() } },\n      description: \"List projects\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst createProjectRoute = createRoute({\n  method: \"post\",\n  tags: [\"Projects\"],\n  summary: \"Create a project\",\n  path: \"/api/v1/projects\",\n  request: { body: { content: { \"application/json\": { schema: projectCreateSchema } } } },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: projectSchema } },\n      description: \"Created project\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...unauthorized,\n  },\n});\n\nconst getProjectRoute = createRoute({\n  method: \"get\",\n  tags: [\"Projects\"],\n  summary: \"Get a project\",\n  path: \"/api/v1/projects/{slug}\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: projectSchema } },\n      description: \"Fetch a project\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst updateProjectRoute = createRoute({\n  method: \"patch\",\n  tags: [\"Projects\"],\n  summary: \"Update a project\",\n  path: \"/api/v1/projects/{slug}\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: projectUpdateSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: projectSchema } },\n      description: \"Updated project\",\n    },\n    ...forbiddenResponse,\n    ...notFound,\n  },\n});\n\nconst deleteProjectRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Projects\"],\n  summary: \"Delete a project\",\n  path: \"/api/v1/projects/{slug}\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    204: { description: \"Deleted project\" },\n    ...forbiddenResponse,\n    ...notFound,\n  },\n});\n\n/** Register the project list, create, fetch, update, and delete endpoints. */\nexport function registerProjects(app: ShelfRouter): void {\n  app.openapi(listProjectsRoute, async (c) => {\n    requireSessionUser();\n    const projects = new ProjectModel(getStore().db);\n    return c.json(await projects.list());\n  });\n\n  app.openapi(createProjectRoute, async (c) => {\n    requireSiteAdmin(c);\n    const body = c.req.valid(\"json\");\n    const projects = new ProjectModel(getStore().db);\n    const project = await projects.create(body);\n    await new LabelModel(getStore().db).seedFor(project.id);\n    const creator = getStore().user;\n    if (creator) {\n      await new MemberModel(getStore().db).set(project.id, creator.id, \"admin\");\n    }\n    return c.json(project, 201);\n  });\n\n  app.openapi(getProjectRoute, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    return c.json(project);\n  });\n\n  app.openapi(updateProjectRoute, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const updated = await new ProjectModel(getStore().db).update(project.id, c.req.valid(\"json\"));\n    return c.json(updated);\n  });\n\n  app.openapi(deleteProjectRoute, async (c) => {\n    requireSiteAdmin(c);\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    await new ProjectModel(getStore().db).remove(project.id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;AAiBA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AACtF,MAAM,cAAsC,CAAC,OAAO;AAEpD,SAAS,qBAA2B;CAClC,IAAI,CAAC,SAAS,CAAC,CAAC,aACd;CAEF,IAAI,CAAC,SAAS,CAAC,CAAC,MACd,UAAU;AAEd;AAEA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,MAAM,EAAE,EAAE;GACjE,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE,EAAE;CACtF,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GACzD,aAAa;EACf;EACA,GAAG;EACH,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GACzD,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;CAC3E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GACzD,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK,EAAE,aAAa,kBAAkB;EACtC,GAAGA;EACH,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,iBAAiB,KAAwB;CACvD,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,mBAAmB;EACnB,MAAM,WAAW,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE;EAC/C,OAAO,EAAE,KAAK,MAAM,SAAS,KAAK,CAAC;CACrC,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,iBAAiB,CAAC;EAClB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAE/B,MAAM,UAAU,MAAM,IADD,aAAa,SAAS,CAAC,CAAC,EAChB,CAAC,CAAC,OAAO,IAAI;EAC1C,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,QAAQ,EAAE;EACtD,MAAM,UAAU,SAAS,CAAC,CAAC;EAC3B,IAAI,SACF,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,QAAQ,IAAI,OAAO;EAE1E,OAAO,EAAE,KAAK,SAAS,GAAG;CAC5B,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,OAAO,EAAE,KAAK,OAAO;CACvB,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,EAAE,IAAI,MAAM,MAAM,CAAC;EAC5F,OAAO,EAAE,KAAK,OAAO;CACvB,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,iBAAiB,CAAC;EAClB,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,EAAE;EACvD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}
+{"version":3,"file":"projects.mjs","names":["forbiddenResponse"],"sources":["../../src/routers/projects.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { resolveBrowsers } from \"@storyshelf/core/capture\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { MemberModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { assertTargetsSelectable } from \"../targets.ts\";\nimport { toProjectPatch } from \"./capture-config.ts\";\nimport { forbidden, requireSiteAdmin, resolveAuthorizedProject } from \"./helpers.ts\";\nimport { runSwitchOffPass } from \"./review-switch-off.ts\";\nimport {\n  badRequest,\n  forbidden as forbiddenResponse,\n  notFound,\n  projectCreateSchema,\n  projectSchema,\n  projectUpdateSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nfunction requireSessionUser(): void {\n  if (!getStore().authEnabled) {\n    return;\n  }\n  if (!getStore().user) {\n    forbidden();\n  }\n}\n\nconst listProjectsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Projects\"],\n  summary: \"List projects\",\n  path: \"/api/v1/projects\",\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: projectSchema.array() } },\n      description: \"List projects\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst createProjectRoute = createRoute({\n  method: \"post\",\n  tags: [\"Projects\"],\n  summary: \"Create a project\",\n  path: \"/api/v1/projects\",\n  request: { body: { content: { \"application/json\": { schema: projectCreateSchema } } } },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: projectSchema } },\n      description: \"Created project\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...unauthorized,\n  },\n});\n\nconst getProjectRoute = createRoute({\n  method: \"get\",\n  tags: [\"Projects\"],\n  summary: \"Get a project\",\n  path: \"/api/v1/projects/{slug}\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: projectSchema } },\n      description: \"Fetch a project\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst updateProjectRoute = createRoute({\n  method: \"patch\",\n  tags: [\"Projects\"],\n  summary: \"Update a project\",\n  path: \"/api/v1/projects/{slug}\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: projectUpdateSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: projectSchema } },\n      description: \"Updated project\",\n    },\n    ...forbiddenResponse,\n    ...notFound,\n  },\n});\n\nconst deleteProjectRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Projects\"],\n  summary: \"Delete a project\",\n  path: \"/api/v1/projects/{slug}\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    204: { description: \"Deleted project\" },\n    ...forbiddenResponse,\n    ...notFound,\n  },\n});\n\n/** `aiProfile` is a site-admin data-flow decision; it must name a configured profile. */\nfunction assertAiProfileChange(c: Context, profile: string | null | undefined): void {\n  if (profile === undefined) {\n    return;\n  }\n  requireSiteAdmin(c);\n  const { ai } = getStore();\n  if (profile !== null && !ai?.profileNames().includes(profile)) {\n    throw new HTTPException(400, { message: `Unknown AI profile \"${profile}\"` });\n  }\n}\n\n/** Register the project list, create, fetch, update, and delete endpoints. */\nexport function registerProjects(app: ShelfRouter): void {\n  app.openapi(listProjectsRoute, async (c) => {\n    requireSessionUser();\n    const projects = new ProjectModel(getStore().db);\n    return c.json(await projects.list());\n  });\n\n  app.openapi(createProjectRoute, async (c) => {\n    requireSiteAdmin(c);\n    const body = c.req.valid(\"json\");\n    const projects = new ProjectModel(getStore().db);\n    const project = await projects.create(body);\n    await new LabelModel(getStore().db).seedFor(project.id);\n    const creator = getStore().user;\n    if (creator) {\n      await new MemberModel(getStore().db).set(project.id, creator.id, \"admin\");\n    }\n    return c.json(project, 201);\n  });\n\n  app.openapi(getProjectRoute, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    return c.json(project);\n  });\n\n  app.openapi(updateProjectRoute, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    assertAiProfileChange(c, body.aiProfile);\n    await assertTargetsSelectable(\n      body.browsers ?? (body.browser === undefined ? [] : [body.browser]),\n      resolveBrowsers(project),\n    );\n    const updated = await new ProjectModel(getStore().db).update(project.id, toProjectPatch(body));\n    await runSwitchOffPass(project, updated);\n    return c.json(updated);\n  });\n\n  app.openapi(deleteProjectRoute, async (c) => {\n    requireSiteAdmin(c);\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    await new ProjectModel(getStore().db).remove(project.id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AAuBA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AACtF,MAAM,cAAsC,CAAC,OAAO;AAEpD,SAAS,qBAA2B;CAClC,IAAI,CAAC,SAAS,CAAC,CAAC,aACd;CAEF,IAAI,CAAC,SAAS,CAAC,CAAC,MACd,UAAU;AAEd;AAEA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,MAAM,EAAE,EAAE;GACjE,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE,EAAE;CACtF,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GACzD,aAAa;EACf;EACA,GAAG;EACH,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GACzD,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;CAC3E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GACzD,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK,EAAE,aAAa,kBAAkB;EACtC,GAAGA;EACH,GAAG;CACL;AACF,CAAC;;AAGD,SAAS,sBAAsB,GAAY,SAA0C;CACnF,IAAI,YAAY,KAAA,GACd;CAEF,iBAAiB,CAAC;CAClB,MAAM,EAAE,OAAO,SAAS;CACxB,IAAI,YAAY,QAAQ,CAAC,IAAI,aAAa,CAAC,CAAC,SAAS,OAAO,GAC1D,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,uBAAuB,QAAQ,GAAG,CAAC;AAE/E;;AAGA,SAAgB,iBAAiB,KAAwB;CACvD,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,mBAAmB;EACnB,MAAM,WAAW,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE;EAC/C,OAAO,EAAE,KAAK,MAAM,SAAS,KAAK,CAAC;CACrC,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,iBAAiB,CAAC;EAClB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAE/B,MAAM,UAAU,MAAM,IADD,aAAa,SAAS,CAAC,CAAC,EAChB,CAAC,CAAC,OAAO,IAAI;EAC1C,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,QAAQ,EAAE;EACtD,MAAM,UAAU,SAAS,CAAC,CAAC;EAC3B,IAAI,SACF,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,QAAQ,IAAI,OAAO;EAE1E,OAAO,EAAE,KAAK,SAAS,GAAG;CAC5B,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,OAAO,EAAE,KAAK,OAAO;CACvB,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,sBAAsB,GAAG,KAAK,SAAS;EACvC,MAAM,wBACJ,KAAK,aAAa,KAAK,YAAY,KAAA,IAAY,CAAC,IAAI,CAAC,KAAK,OAAO,IACjE,gBAAgB,OAAO,CACzB;EACA,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,eAAe,IAAI,CAAC;EAC7F,MAAM,iBAAiB,SAAS,OAAO;EACvC,OAAO,EAAE,KAAK,OAAO;CACvB,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,iBAAiB,CAAC;EAClB,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,EAAE;EACvD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/publish-upload.mjs

@@ -0,0 +1,78 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { DEFAULT_SCRATCH_DIR } from "@storyshelf/core/config";
+import { storybookZipPath } from "@storyshelf/core/utils";
+import { FILE_BY_FILE_HINT, extractionLimitsOf, publishRoute, publishStoredZip, resolvePublishLimits } from "@storyshelf/core/capture";
+import { BuildModel } from "@storyshelf/core/models";
+import { HTTPException } from "hono/http-exception";
+//#region src/routers/publish-upload.ts
+/**
+* What the zip upload route does once the zip is stored (ADR 0006, decision 10): extract it
+* inline when it is small, hand it to a `publish` job when it is larger, or refuse it with a
+* pointer to the file-by-file route on a host that runs no consumer.
+*/
+/** How an upload of `zipBytes` will be published, or a 413 when this host cannot publish it. */
+function planUpload(zipBytes) {
+	const { config, publish } = getStore();
+	const route = publishRoute(zipBytes, resolvePublishLimits(config));
+	if (route === "job" && !publish?.enqueuePublish) throw new HTTPException(413, { message: FILE_BY_FILE_HINT });
+	return route;
+}
+/** Remove a stored zip that was refused (best effort), so no orphan is left behind. */
+async function discardZip(projectId, buildId) {
+	try {
+		await getStore().storage.delete(storybookZipPath(projectId, buildId));
+	} catch (error) {
+		getStore().logger.warn({
+			err: error,
+			buildId
+		}, "could not remove a refused zip");
+	}
+}
+/**
+* Publish the stored zip of `build` per `route`. Inline: extract now and complete the build (a
+* failure fails it, or, with a capture to come, is left for capture to backfill). Job: queue it.
+* Resolves to the build as it stands afterwards.
+*/
+async function publishUpload(route, build, reqId) {
+	const { publish } = getStore();
+	if (route === "job") {
+		await publish?.enqueuePublish?.(build.id, reqId);
+		return build;
+	}
+	await publishInline(build);
+	return await new BuildModel(getStore().db).get(build.id) ?? build;
+}
+async function publishInline(build) {
+	const { storage, config, logger, publish, db } = getStore();
+	try {
+		await publishStoredZip({
+			storage,
+			scratchDir: config.scratchDir ?? DEFAULT_SCRATCH_DIR,
+			limits: extractionLimitsOf(resolvePublishLimits(config)),
+			db,
+			logger
+		}, {
+			projectId: build.projectId,
+			buildId: build.id
+		});
+		logger.info({ buildId: build.id }, "upload statics persisted inline");
+		await publish?.completer.complete(build.id, { ok: true });
+	} catch (error) {
+		const message = error instanceof Error ? error.message : String(error);
+		logger.error({
+			err: error,
+			buildId: build.id
+		}, "inline publish failed");
+		await publish?.completer.complete(build.id, {
+			ok: false,
+			error: message
+		});
+	}
+}
+//#endregion
+export { discardZip, planUpload, publishUpload };
+
+//# sourceMappingURL=publish-upload.mjs.map

package/dist/routers/publish-upload.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-upload.mjs","names":[],"sources":["../../src/routers/publish-upload.ts"],"sourcesContent":["/**\n * What the zip upload route does once the zip is stored (ADR 0006, decision 10): extract it\n * inline when it is small, hand it to a `publish` job when it is larger, or refuse it with a\n * pointer to the file-by-file route on a host that runs no consumer.\n */\nimport {\n  extractionLimitsOf,\n  FILE_BY_FILE_HINT,\n  publishRoute,\n  publishStoredZip,\n  resolvePublishLimits,\n} from \"@storyshelf/core/capture\";\nimport { DEFAULT_SCRATCH_DIR } from \"@storyshelf/core/config\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport { storybookZipPath } from \"@storyshelf/core/utils\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { getStore } from \"../store.ts\";\n\n/** How an upload of `zipBytes` will be published, or a 413 when this host cannot publish it. */\nexport function planUpload(zipBytes: number): \"inline\" | \"job\" {\n  const { config, publish } = getStore();\n  const route = publishRoute(zipBytes, resolvePublishLimits(config));\n  if (route === \"job\" && !publish?.enqueuePublish) {\n    throw new HTTPException(413, { message: FILE_BY_FILE_HINT });\n  }\n  return route;\n}\n\n/** Remove a stored zip that was refused (best effort), so no orphan is left behind. */\nexport async function discardZip(projectId: string, buildId: string): Promise<void> {\n  try {\n    await getStore().storage.delete(storybookZipPath(projectId, buildId));\n  } catch (error) {\n    getStore().logger.warn({ err: error, buildId }, \"could not remove a refused zip\");\n  }\n}\n\n/**\n * Publish the stored zip of `build` per `route`. Inline: extract now and complete the build (a\n * failure fails it, or, with a capture to come, is left for capture to backfill). Job: queue it.\n * Resolves to the build as it stands afterwards.\n */\nexport async function publishUpload(\n  route: \"inline\" | \"job\",\n  build: Build,\n  reqId: string | undefined,\n): Promise<Build> {\n  const { publish } = getStore();\n  if (route === \"job\") {\n    await publish?.enqueuePublish?.(build.id, reqId);\n    return build;\n  }\n  await publishInline(build);\n  return (await new BuildModel(getStore().db).get(build.id)) ?? build;\n}\n\nasync function publishInline(build: Build): Promise<void> {\n  const { storage, config, logger, publish, db } = getStore();\n  try {\n    await publishStoredZip(\n      {\n        storage,\n        scratchDir: config.scratchDir ?? DEFAULT_SCRATCH_DIR,\n        limits: extractionLimitsOf(resolvePublishLimits(config)),\n        db,\n        logger,\n      },\n      { projectId: build.projectId, buildId: build.id },\n    );\n    logger.info({ buildId: build.id }, \"upload statics persisted inline\");\n    await publish?.completer.complete(build.id, { ok: true });\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    logger.error({ err: error, buildId: build.id }, \"inline publish failed\");\n    await publish?.completer.complete(build.id, { ok: false, error: message });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,SAAgB,WAAW,UAAoC;CAC7D,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,QAAQ,aAAa,UAAU,qBAAqB,MAAM,CAAC;CACjE,IAAI,UAAU,SAAS,CAAC,SAAS,gBAC/B,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,kBAAkB,CAAC;CAE7D,OAAO;AACT;;AAGA,eAAsB,WAAW,WAAmB,SAAgC;CAClF,IAAI;EACF,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,iBAAiB,WAAW,OAAO,CAAC;CACtE,SAAS,OAAO;EACd,SAAS,CAAC,CAAC,OAAO,KAAK;GAAE,KAAK;GAAO;EAAQ,GAAG,gCAAgC;CAClF;AACF;;;;;;AAOA,eAAsB,cACpB,OACA,OACA,OACgB;CAChB,MAAM,EAAE,YAAY,SAAS;CAC7B,IAAI,UAAU,OAAO;EACnB,MAAM,SAAS,iBAAiB,MAAM,IAAI,KAAK;EAC/C,OAAO;CACT;CACA,MAAM,cAAc,KAAK;CACzB,OAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,KAAM;AAChE;AAEA,eAAe,cAAc,OAA6B;CACxD,MAAM,EAAE,SAAS,QAAQ,QAAQ,SAAS,OAAO,SAAS;CAC1D,IAAI;EACF,MAAM,iBACJ;GACE;GACA,YAAY,OAAO,cAAc;GACjC,QAAQ,mBAAmB,qBAAqB,MAAM,CAAC;GACvD;GACA;EACF,GACA;GAAE,WAAW,MAAM;GAAW,SAAS,MAAM;EAAG,CAClD;EACA,OAAO,KAAK,EAAE,SAAS,MAAM,GAAG,GAAG,iCAAiC;EACpE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC;CAC1D,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO,MAAM;GAAE,KAAK;GAAO,SAAS,MAAM;EAAG,GAAG,uBAAuB;EACvE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI;GAAE,IAAI;GAAO,OAAO;EAAQ,CAAC;CAC3E;AACF"}