@storyshelf/app 0.6.2 → 0.7.0

package/dist/routers/settings.handlers.mjs

@@ -3,9 +3,12 @@ import "node:url";
 import.meta.url;
 import { credentialKeys } from "../credential-keys.mjs";
 import { getStore } from "../store.mjs";
+import { notificationsPaused } from "../notifications-pause.mjs";
 import { notFound } from "./helpers.mjs";
+import { runnerTargets } from "../targets.mjs";
+import { isSiteAdmin } from "./insights.handlers.mjs";
 import { renderProjectSettingsPage } from "../pages/project-settings.mjs";
-import { LabelModel, MemberModel, NotificationChannelModel, NotificationSubscriptionModel, ProjectGroupMappingModel, ProjectModel, StatusConfigModel, TokenModel, WebhookModel } from "@storyshelf/core/models";
+import { DesignCredentialModel, DesignModel, LabelModel, MemberModel, NotificationChannelModel, NotificationSubscriptionModel, PackageUsageModel, ProjectGroupMappingModel, ProjectModel, TokenModel, WebhookModel, credentialDaysLeft } from "@storyshelf/core/models";
 //#region src/routers/settings.handlers.ts
 /** Tokens without hashes for the settings UI. */
 async function loadTokenSummaries(db, projectId) {
@@ -19,17 +22,6 @@ async function loadWebhookSummaries(db, projectId) {
 		events: WebhookModel.eventsOf(webhook)
 	}));
 }
-/** Status-config summaries for the settings UI. */
-async function loadStatusConfigSummaries(db, secret, projectId) {
-	return (await new StatusConfigModel(db, void 0, secret).list(projectId)).map((row) => ({
-		id: row.id,
-		provider: row.provider,
-		config: JSON.parse(row.config),
-		hasToken: row.tokenEncrypted.length > 0,
-		createdAt: row.createdAt,
-		updatedAt: row.updatedAt
-	}));
-}
 /** True when the user may administer the project. */
 function isProjectAdmin(authEnabled, user, members) {
 	return !authEnabled || user?.role === "admin" || members.some((member) => member.userId === user?.id && member.role === "admin");
@@ -54,15 +46,22 @@ async function loadMembersSection(db, projectId) {
 async function loadGroupMappings(db, projectId) {
 	return await new ProjectGroupMappingModel(db).list(projectId);
 }
+/** Delivery kind of a stored channel's provider (unwired providers read as messages). */
+function deliveryOf(notifiers, provider) {
+	return NotificationChannelModel.isStateKind(notifiers, provider) ? "state" : "message";
+}
 /** Channel summaries for the settings UI. */
-async function loadNotificationChannels(db, secret, projectId) {
+async function loadNotificationChannels(db, secret, projectId, notifiers) {
 	return (await new NotificationChannelModel(db, void 0, secret).list(projectId)).map((row) => ({
 		id: row.id,
 		provider: row.provider,
+		delivery: deliveryOf(notifiers, row.provider),
 		config: NotificationChannelModel.configOf(row),
 		hasSecret: row.secretEncrypted !== null,
 		events: NotificationChannelModel.eventsOf(row),
-		enabled: row.enabled
+		enabled: row.enabled,
+		lastError: row.lastError,
+		lastErrorAt: row.lastErrorAt
 	}));
 }
 /** The viewer's own subscription for the settings UI (null when opted out). */
@@ -78,38 +77,106 @@ async function loadMySubscription(db, projectId, userId) {
 }
 /** Notification channels, providers, and my subscription for the UI. */
 async function loadNotificationSection(db, secret, projectId, userId, notifiers) {
-	const notificationChannels = await loadNotificationChannels(db, secret, projectId);
+	const notificationChannels = await loadNotificationChannels(db, secret, projectId, notifiers);
 	const mySubscription = await loadMySubscription(db, projectId, userId);
 	return {
 		notificationChannels,
-		notifyProviders: notifiers.map((candidate) => candidate.metadata.kind),
+		notifyProviders: notifiers.map((candidate) => ({
+			kind: candidate.metadata.kind,
+			name: candidate.metadata.name,
+			delivery: deliveryOf(notifiers, candidate.metadata.kind)
+		})),
 		mySubscription
 	};
 }
-/** Roster, tokens, webhooks, and status configs for the settings UI. */
-async function loadInventorySection(db, secret, projectId) {
+/** Roster, tokens and webhooks for the settings UI. */
+async function loadInventorySection(db, projectId) {
 	const { labelTypes, members, groupMappings } = await loadMembersSection(db, projectId);
 	return {
 		labelTypes,
 		members,
 		groupMappings,
 		tokens: await loadTokenSummaries(db, projectId),
-		webhooks: await loadWebhookSummaries(db, projectId),
-		statusConfigs: await loadStatusConfigSummaries(db, secret, projectId)
+		webhooks: await loadWebhookSummaries(db, projectId)
 	};
 }
+/** Package links plus the other projects that can be picked as upstream. */
+async function loadLinksSection(db, project) {
+	const projects = await new ProjectModel(db).list();
+	const byId = new Map(projects.map((candidate) => [candidate.id, candidate]));
+	return {
+		links: (await new PackageUsageModel(db).listLinks(project.id)).flatMap((row) => {
+			const upstream = byId.get(row.upstreamId);
+			return upstream ? [{
+				packageName: row.packageName,
+				upstreamSlug: upstream.slug,
+				upstreamName: upstream.name
+			}] : [];
+		}),
+		linkCandidates: projects.filter((candidate) => candidate.id !== project.id).map((candidate) => ({
+			slug: candidate.slug,
+			name: candidate.name
+		}))
+	};
+}
+/** Design files, component mappings and per-provider credential health for the Design tab (never a token). */
+async function loadDesignSection(db, secret, providers, projectId) {
+	const model = new DesignModel(db, providers);
+	const files = (await model.projectLinks(projectId)).map((link) => ({
+		id: link.id,
+		label: link.label ?? "Design file",
+		url: link.url
+	}));
+	const components = (await model.componentLinks(projectId)).map((link) => ({
+		id: link.id,
+		importPath: link.importPath ?? "",
+		url: link.url
+	}));
+	const credentials = new DesignCredentialModel(db, secret);
+	return {
+		files,
+		components,
+		providers: await Promise.all(providers.map(async (provider) => await providerSettings(credentials, provider, projectId)))
+	};
+}
+async function providerSettings(credentials, provider, projectId) {
+	const { metadata } = provider;
+	const maxAgeDays = metadata.credentialMaxAgeDays;
+	const row = await credentials.info(projectId, metadata.kind);
+	return {
+		kind: metadata.kind,
+		name: metadata.name,
+		credentialLabel: metadata.credentialLabel,
+		credentialHelp: metadata.credentialHelp,
+		...metadata.credentialPlaceholder ? { credentialPlaceholder: metadata.credentialPlaceholder } : {},
+		urlHint: metadata.urlHint,
+		...maxAgeDays === void 0 ? {} : { maxAgeDays },
+		credential: row ? {
+			status: credentialState(row.status),
+			daysLeft: maxAgeDays === void 0 ? null : credentialDaysLeft(row.createdAt, maxAgeDays),
+			checkedAt: row.checkedAt
+		} : null
+	};
+}
+/** The stored status column as a known state (anything unrecognized reads as unknown). */
+function credentialState(status) {
+	return status === "ok" || status === "unauthorized" || status === "forbidden" ? status : "unknown";
+}
 async function loadSettingsData(slug) {
 	const project = await new ProjectModel(getStore().db).getBySlug(slug);
 	if (!project) return null;
-	const { db, config, user, authEnabled, gitHosts, notifiers } = getStore();
-	const inventory = await loadInventorySection(db, credentialKeys(config), project.id);
+	const { db, config, user, authEnabled, design: designProviders, notifiers } = getStore();
+	const inventory = await loadInventorySection(db, project.id);
 	const notifications = await loadNotificationSection(db, credentialKeys(config), project.id, user?.id, notifiers);
 	const isAdmin = isProjectAdmin(authEnabled, user, inventory.members);
+	const linksSection = await loadLinksSection(db, project);
+	const design = await loadDesignSection(db, credentialKeys(config), designProviders, project.id);
 	return {
 		project,
 		...inventory,
 		...notifications,
-		gitHosts,
+		...linksSection,
+		design,
 		isAdmin
 	};
 }
@@ -121,6 +188,9 @@ async function renderSettingsPage(c, tab, formState) {
 		project: data.project,
 		activeTab: tab,
 		labelTypes: data.labelTypes,
+		links: data.links,
+		linkCandidates: data.linkCandidates,
+		design: data.design,
 		tokens: data.tokens,
 		members: data.members,
 		groupMappings: data.groupMappings,
@@ -128,11 +198,22 @@ async function renderSettingsPage(c, tab, formState) {
 		notificationChannels: data.notificationChannels,
 		notifyProviders: data.notifyProviders,
 		mySubscription: data.mySubscription,
-		statusConfigs: data.statusConfigs,
-		gitHosts: data.gitHosts,
-		isAdmin: data.isAdmin
+		isAdmin: data.isAdmin,
+		notificationsPaused: data.notifyProviders.length > 0 && await notificationsPaused(),
+		ai: aiSettingsData(c),
+		targets: await runnerTargets()
 	}, formState);
 }
+/** AI availability and profile choices for the settings AI tab. */
+function aiSettingsData(c) {
+	const { ai } = getStore();
+	return {
+		available: ai !== void 0,
+		profiles: ai?.profileNames() ?? [],
+		defaultProfile: ai?.defaultProfile() ?? "",
+		isSiteAdmin: isSiteAdmin(c)
+	};
+}
 /** Find a project by slug or throw 404. */
 async function findProject(slug) {
 	const project = await new ProjectModel(getStore().db).getBySlug(slug);

package/dist/routers/settings.handlers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings.handlers.mjs","names":[],"sources":["../../src/routers/settings.handlers.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"@storyshelf/core/adapter/database\";\nimport type { GitHostProvider } from \"@storyshelf/core/adapter/git-host\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { MemberModel } from \"@storyshelf/core/models\";\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport { NotificationSubscriptionModel } from \"@storyshelf/core/models\";\nimport { ProjectGroupMappingModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { StatusConfigModel } from \"@storyshelf/core/models\";\nimport { TokenModel } from \"@storyshelf/core/models\";\nimport { WebhookModel } from \"@storyshelf/core/models\";\nimport type { LabelType } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { ProjectGroupMapping } from \"@storyshelf/core/schema\";\nimport type { Token } from \"@storyshelf/core/schema\";\nimport type { AuthUser } from \"@storyshelf/core/types\";\nimport type { SecretInput } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport {\n  renderProjectSettingsPage,\n  type SettingsFormState,\n  type SettingsTab,\n} from \"../pages/project-settings.tsx\";\nimport type { SettingsMember } from \"../pages/settings-members.tsx\";\nimport type {\n  SettingsMySubscription,\n  SettingsNotificationChannel,\n} from \"../pages/settings-notifications.tsx\";\nimport type { SettingsStatusConfig } from \"../pages/settings-status.tsx\";\nimport type { SettingsWebhook } from \"../pages/settings-webhooks.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { notFound } from \"./helpers.ts\";\n/** Aggregated data for rendering a settings tab. */\nexport interface SettingsData {\n  project: Project;\n  labelTypes: LabelType[];\n  tokens: Omit<Token, \"hash\">[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n  webhooks: SettingsWebhook[];\n  notificationChannels: SettingsNotificationChannel[];\n  notifyProviders: string[];\n  mySubscription: SettingsMySubscription | null;\n  statusConfigs: SettingsStatusConfig[];\n  gitHosts: GitHostProvider[];\n  isAdmin: boolean;\n}\n\n/** Tokens without hashes for the settings UI. */\nasync function loadTokenSummaries(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<Omit<Token, \"hash\">[]> {\n  const tokensDb = await new TokenModel(db).list(projectId);\n  return tokensDb.map(({ hash: _hash, ...rest }) => rest);\n}\n\n/** Webhook summaries for the settings UI. */\nasync function loadWebhookSummaries(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<SettingsWebhook[]> {\n  const webhooksDb = await new WebhookModel(db).list(projectId);\n  return webhooksDb.map((webhook) => ({\n    id: webhook.id,\n    url: webhook.url,\n    events: WebhookModel.eventsOf(webhook),\n  }));\n}\n\n/** Status-config summaries for the settings UI. */\nasync function loadStatusConfigSummaries(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n): Promise<SettingsStatusConfig[]> {\n  const statusConfigsDb = await new StatusConfigModel(db, undefined, secret).list(projectId);\n  return statusConfigsDb.map((row) => ({\n    id: row.id,\n    provider: row.provider,\n    config: JSON.parse(row.config) as Record<string, unknown>,\n    hasToken: row.tokenEncrypted.length > 0,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  }));\n}\n\n/** True when the user may administer the project. */\nfunction isProjectAdmin(\n  authEnabled: boolean,\n  user: AuthUser | null,\n  members: SettingsMember[],\n): boolean {\n  return (\n    !authEnabled ||\n    user?.role === \"admin\" ||\n    members.some((member) => member.userId === user?.id && member.role === \"admin\")\n  );\n}\n\n/** Label types + member roster for the settings UI. */\nasync function loadProjectRoster(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<{ labelTypes: LabelType[]; members: SettingsMember[] }> {\n  const labelTypes = await new LabelModel(db).listTypes(projectId);\n  const members = await new MemberModel(db).list(projectId);\n  return { labelTypes, members };\n}\n\n/** Label types + member roster + group mappings for the settings UI. */\nasync function loadMembersSection(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<{\n  labelTypes: LabelType[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n}> {\n  const { labelTypes, members } = await loadProjectRoster(db, projectId);\n  const groupMappings = await loadGroupMappings(db, projectId);\n  return { labelTypes, members, groupMappings };\n}\n\n/** Group mappings for the members settings tab. */\nasync function loadGroupMappings(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<ProjectGroupMapping[]> {\n  return await new ProjectGroupMappingModel(db).list(projectId);\n}\n\n/** Channel summaries for the settings UI. */\nasync function loadNotificationChannels(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n): Promise<SettingsNotificationChannel[]> {\n  const rows = await new NotificationChannelModel(db, undefined, secret).list(projectId);\n  return rows.map((row) => ({\n    id: row.id,\n    provider: row.provider,\n    config: NotificationChannelModel.configOf(row),\n    hasSecret: row.secretEncrypted !== null,\n    events: NotificationChannelModel.eventsOf(row),\n    enabled: row.enabled,\n  }));\n}\n\n/** The viewer's own subscription for the settings UI (null when opted out). */\nasync function loadMySubscription(\n  db: DatabaseAdapter,\n  projectId: string,\n  userId: string | undefined,\n): Promise<SettingsMySubscription | null> {\n  if (!userId) {\n    return null;\n  }\n  const row = await new NotificationSubscriptionModel(db).getFor(projectId, userId);\n  if (!row) {\n    return null;\n  }\n  return {\n    events: NotificationSubscriptionModel.eventsOf(row),\n    via: NotificationSubscriptionModel.viaOf(row),\n    enabled: row.enabled,\n  };\n}\n\n/** Notification channels, providers, and my subscription for the UI. */\nasync function loadNotificationSection(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n  userId: string | undefined,\n  notifiers: { metadata: { kind: string } }[],\n): Promise<{\n  notificationChannels: SettingsNotificationChannel[];\n  notifyProviders: string[];\n  mySubscription: SettingsMySubscription | null;\n}> {\n  const notificationChannels = await loadNotificationChannels(db, secret, projectId);\n  const mySubscription = await loadMySubscription(db, projectId, userId);\n  return {\n    notificationChannels,\n    notifyProviders: notifiers.map((candidate) => candidate.metadata.kind),\n    mySubscription,\n  };\n}\n\n/** Roster, tokens, webhooks, and status configs for the settings UI. */\nasync function loadInventorySection(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n): Promise<{\n  labelTypes: LabelType[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n  tokens: Omit<Token, \"hash\">[];\n  webhooks: SettingsWebhook[];\n  statusConfigs: SettingsStatusConfig[];\n}> {\n  const { labelTypes, members, groupMappings } = await loadMembersSection(db, projectId);\n  const tokens = await loadTokenSummaries(db, projectId);\n  const webhooks = await loadWebhookSummaries(db, projectId);\n  const statusConfigs = await loadStatusConfigSummaries(db, secret, projectId);\n  return { labelTypes, members, groupMappings, tokens, webhooks, statusConfigs };\n}\n\nasync function loadSettingsData(slug: string): Promise<SettingsData | null> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    return null;\n  }\n  const { db, config, user, authEnabled, gitHosts, notifiers } = getStore();\n  const inventory = await loadInventorySection(db, credentialKeys(config), project.id);\n  const notifications = await loadNotificationSection(\n    db,\n    credentialKeys(config),\n    project.id,\n    user?.id,\n    notifiers,\n  );\n  const isAdmin = isProjectAdmin(authEnabled, user, inventory.members);\n  return { project, ...inventory, ...notifications, gitHosts, isAdmin };\n}\n\n/** Render the project settings page for the given tab, optionally with form state. */\nexport async function renderSettingsPage(\n  c: Context,\n  tab: SettingsTab,\n  formState?: SettingsFormState,\n): Promise<string> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const data = await loadSettingsData(slug);\n  if (!data) {\n    notFound(\"Project not found\");\n  }\n  return await renderProjectSettingsPage(\n    {\n      project: data.project,\n      activeTab: tab,\n      labelTypes: data.labelTypes,\n      tokens: data.tokens,\n      members: data.members,\n      groupMappings: data.groupMappings,\n      webhooks: data.webhooks,\n      notificationChannels: data.notificationChannels,\n      notifyProviders: data.notifyProviders,\n      mySubscription: data.mySubscription,\n      statusConfigs: data.statusConfigs,\n      gitHosts: data.gitHosts,\n      isAdmin: data.isAdmin,\n    },\n    formState,\n  );\n}\n\n/** Find a project by slug or throw 404. */\nexport async function findProject(slug: string): Promise<Project> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    notFound(\"Project not found\");\n  }\n  return project;\n}\n\n/** Trim a form value to a string, dropping files and blanks. */\nexport function asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n"],"mappings":";;;;;;;;;;AAkDA,eAAe,mBACb,IACA,WACgC;CAEhC,QAAO,MADgB,IAAI,WAAW,EAAE,CAAC,CAAC,KAAK,SAAS,EAAA,CACxC,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI;AACxD;;AAGA,eAAe,qBACb,IACA,WAC4B;CAE5B,QAAO,MADkB,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK,SAAS,EAAA,CAC1C,KAAK,aAAa;EAClC,IAAI,QAAQ;EACZ,KAAK,QAAQ;EACb,QAAQ,aAAa,SAAS,OAAO;CACvC,EAAE;AACJ;;AAGA,eAAe,0BACb,IACA,QACA,WACiC;CAEjC,QAAO,MADuB,IAAI,kBAAkB,IAAI,KAAA,GAAW,MAAM,CAAC,CAAC,KAAK,SAAS,EAAA,CAClE,KAAK,SAAS;EACnC,IAAI,IAAI;EACR,UAAU,IAAI;EACd,QAAQ,KAAK,MAAM,IAAI,MAAM;EAC7B,UAAU,IAAI,eAAe,SAAS;EACtC,WAAW,IAAI;EACf,WAAW,IAAI;CACjB,EAAE;AACJ;;AAGA,SAAS,eACP,aACA,MACA,SACS;CACT,OACE,CAAC,eACD,MAAM,SAAS,WACf,QAAQ,MAAM,WAAW,OAAO,WAAW,MAAM,MAAM,OAAO,SAAS,OAAO;AAElF;;AAGA,eAAe,kBACb,IACA,WACiE;CAGjE,OAAO;EAAE,YAAA,MAFgB,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,SAAS;EAE1C,SAAA,MADC,IAAI,YAAY,EAAE,CAAC,CAAC,KAAK,SAAS;CAC3B;AAC/B;;AAGA,eAAe,mBACb,IACA,WAKC;CACD,MAAM,EAAE,YAAY,YAAY,MAAM,kBAAkB,IAAI,SAAS;CAErE,OAAO;EAAE;EAAY;EAAS,eAAA,MADF,kBAAkB,IAAI,SAAS;CACf;AAC9C;;AAGA,eAAe,kBACb,IACA,WACgC;CAChC,OAAO,MAAM,IAAI,yBAAyB,EAAE,CAAC,CAAC,KAAK,SAAS;AAC9D;;AAGA,eAAe,yBACb,IACA,QACA,WACwC;CAExC,QAAO,MADY,IAAI,yBAAyB,IAAI,KAAA,GAAW,MAAM,CAAC,CAAC,KAAK,SAAS,EAAA,CACzE,KAAK,SAAS;EACxB,IAAI,IAAI;EACR,UAAU,IAAI;EACd,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,WAAW,IAAI,oBAAoB;EACnC,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,SAAS,IAAI;CACf,EAAE;AACJ;;AAGA,eAAe,mBACb,IACA,WACA,QACwC;CACxC,IAAI,CAAC,QACH,OAAO;CAET,MAAM,MAAM,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC,OAAO,WAAW,MAAM;CAChF,IAAI,CAAC,KACH,OAAO;CAET,OAAO;EACL,QAAQ,8BAA8B,SAAS,GAAG;EAClD,KAAK,8BAA8B,MAAM,GAAG;EAC5C,SAAS,IAAI;CACf;AACF;;AAGA,eAAe,wBACb,IACA,QACA,WACA,QACA,WAKC;CACD,MAAM,uBAAuB,MAAM,yBAAyB,IAAI,QAAQ,SAAS;CACjF,MAAM,iBAAiB,MAAM,mBAAmB,IAAI,WAAW,MAAM;CACrE,OAAO;EACL;EACA,iBAAiB,UAAU,KAAK,cAAc,UAAU,SAAS,IAAI;EACrE;CACF;AACF;;AAGA,eAAe,qBACb,IACA,QACA,WAQC;CACD,MAAM,EAAE,YAAY,SAAS,kBAAkB,MAAM,mBAAmB,IAAI,SAAS;CAIrF,OAAO;EAAE;EAAY;EAAS;EAAe,QAAA,MAHxB,mBAAmB,IAAI,SAAS;EAGA,UAAA,MAF9B,qBAAqB,IAAI,SAAS;EAEM,eAAA,MADnC,0BAA0B,IAAI,QAAQ,SAAS;CACE;AAC/E;AAEA,eAAe,iBAAiB,MAA4C;CAC1E,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,OAAO;CAET,MAAM,EAAE,IAAI,QAAQ,MAAM,aAAa,UAAU,cAAc,SAAS;CACxE,MAAM,YAAY,MAAM,qBAAqB,IAAI,eAAe,MAAM,GAAG,QAAQ,EAAE;CACnF,MAAM,gBAAgB,MAAM,wBAC1B,IACA,eAAe,MAAM,GACrB,QAAQ,IACR,MAAM,IACN,SACF;CACA,MAAM,UAAU,eAAe,aAAa,MAAM,UAAU,OAAO;CACnE,OAAO;EAAE;EAAS,GAAG;EAAW,GAAG;EAAe;EAAU;CAAQ;AACtE;;AAGA,eAAsB,mBACpB,GACA,KACA,WACiB;CAEjB,MAAM,OAAO,MAAM,iBADN,EAAE,IAAI,MAAM,MAAM,KAAK,EACI;CACxC,IAAI,CAAC,MACH,SAAS,mBAAmB;CAE9B,OAAO,MAAM,0BACX;EACE,SAAS,KAAK;EACd,WAAW;EACX,YAAY,KAAK;EACjB,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,eAAe,KAAK;EACpB,UAAU,KAAK;EACf,sBAAsB,KAAK;EAC3B,iBAAiB,KAAK;EACtB,gBAAgB,KAAK;EACrB,eAAe,KAAK;EACpB,UAAU,KAAK;EACf,SAAS,KAAK;CAChB,GACA,SACF;AACF;;AAGA,eAAsB,YAAY,MAAgC;CAChE,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;CAE9B,OAAO;AACT;;AAGA,SAAgB,SAAS,OAAsD;CAC7E,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD"}
+{"version":3,"file":"settings.handlers.mjs","names":[],"sources":["../../src/routers/settings.handlers.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"@storyshelf/core/adapter/database\";\nimport type { DesignProvider } from \"@storyshelf/core/adapter/design\";\nimport type { NotifierProvider } from \"@storyshelf/core/adapter/notifier\";\nimport {\n  credentialDaysLeft,\n  DesignCredentialModel,\n  DesignModel,\n  LabelModel,\n} from \"@storyshelf/core/models\";\nimport { PackageUsageModel } from \"@storyshelf/core/models\";\nimport { MemberModel } from \"@storyshelf/core/models\";\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport { NotificationSubscriptionModel } from \"@storyshelf/core/models\";\nimport { ProjectGroupMappingModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { TokenModel } from \"@storyshelf/core/models\";\nimport { WebhookModel } from \"@storyshelf/core/models\";\nimport type { LabelType } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { ProjectGroupMapping } from \"@storyshelf/core/schema\";\nimport type { Token } from \"@storyshelf/core/schema\";\nimport type { AuthUser } from \"@storyshelf/core/types\";\nimport type { SecretInput } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { notificationsPaused } from \"../notifications-pause.ts\";\nimport {\n  renderProjectSettingsPage,\n  type SettingsFormState,\n  type SettingsTab,\n} from \"../pages/project-settings.tsx\";\nimport type { SettingsAiData } from \"../pages/settings-ai.tsx\";\nimport type { DesignCredentialState } from \"../pages/settings-design-credential.tsx\";\nimport type { SettingsDesignData, SettingsDesignProvider } from \"../pages/settings-design.tsx\";\nimport type { SettingsLink, SettingsLinkCandidate } from \"../pages/settings-links.tsx\";\nimport type { SettingsMember } from \"../pages/settings-members.tsx\";\nimport type {\n  SettingsMySubscription,\n  SettingsNotificationChannel,\n  SettingsNotifyProvider,\n} from \"../pages/settings-notifications.tsx\";\nimport type { SettingsWebhook } from \"../pages/settings-webhooks.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { runnerTargets } from \"../targets.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { isSiteAdmin } from \"./insights.handlers.ts\";\n/** Aggregated data for rendering a settings tab. */\nexport interface SettingsData {\n  project: Project;\n  links: SettingsLink[];\n  linkCandidates: SettingsLinkCandidate[];\n  design: SettingsDesignData;\n  labelTypes: LabelType[];\n  tokens: Omit<Token, \"hash\">[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n  webhooks: SettingsWebhook[];\n  notificationChannels: SettingsNotificationChannel[];\n  notifyProviders: SettingsNotifyProvider[];\n  mySubscription: SettingsMySubscription | null;\n  isAdmin: boolean;\n}\n\n/** Tokens without hashes for the settings UI. */\nasync function loadTokenSummaries(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<Omit<Token, \"hash\">[]> {\n  const tokensDb = await new TokenModel(db).list(projectId);\n  return tokensDb.map(({ hash: _hash, ...rest }) => rest);\n}\n\n/** Webhook summaries for the settings UI. */\nasync function loadWebhookSummaries(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<SettingsWebhook[]> {\n  const webhooksDb = await new WebhookModel(db).list(projectId);\n  return webhooksDb.map((webhook) => ({\n    id: webhook.id,\n    url: webhook.url,\n    events: WebhookModel.eventsOf(webhook),\n  }));\n}\n\n/** True when the user may administer the project. */\nfunction isProjectAdmin(\n  authEnabled: boolean,\n  user: AuthUser | null,\n  members: SettingsMember[],\n): boolean {\n  return (\n    !authEnabled ||\n    user?.role === \"admin\" ||\n    members.some((member) => member.userId === user?.id && member.role === \"admin\")\n  );\n}\n\n/** Label types + member roster for the settings UI. */\nasync function loadProjectRoster(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<{ labelTypes: LabelType[]; members: SettingsMember[] }> {\n  const labelTypes = await new LabelModel(db).listTypes(projectId);\n  const members = await new MemberModel(db).list(projectId);\n  return { labelTypes, members };\n}\n\n/** Label types + member roster + group mappings for the settings UI. */\nasync function loadMembersSection(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<{\n  labelTypes: LabelType[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n}> {\n  const { labelTypes, members } = await loadProjectRoster(db, projectId);\n  const groupMappings = await loadGroupMappings(db, projectId);\n  return { labelTypes, members, groupMappings };\n}\n\n/** Group mappings for the members settings tab. */\nasync function loadGroupMappings(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<ProjectGroupMapping[]> {\n  return await new ProjectGroupMappingModel(db).list(projectId);\n}\n\n/** Delivery kind of a stored channel's provider (unwired providers read as messages). */\nfunction deliveryOf(\n  notifiers: readonly NotifierProvider[],\n  provider: string,\n): SettingsNotificationChannel[\"delivery\"] {\n  return NotificationChannelModel.isStateKind(notifiers, provider) ? \"state\" : \"message\";\n}\n\n/** Channel summaries for the settings UI. */\nasync function loadNotificationChannels(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n  notifiers: readonly NotifierProvider[],\n): Promise<SettingsNotificationChannel[]> {\n  const rows = await new NotificationChannelModel(db, undefined, secret).list(projectId);\n  return rows.map((row) => ({\n    id: row.id,\n    provider: row.provider,\n    delivery: deliveryOf(notifiers, row.provider),\n    config: NotificationChannelModel.configOf(row),\n    hasSecret: row.secretEncrypted !== null,\n    events: NotificationChannelModel.eventsOf(row),\n    enabled: row.enabled,\n    lastError: row.lastError,\n    lastErrorAt: row.lastErrorAt,\n  }));\n}\n\n/** The viewer's own subscription for the settings UI (null when opted out). */\nasync function loadMySubscription(\n  db: DatabaseAdapter,\n  projectId: string,\n  userId: string | undefined,\n): Promise<SettingsMySubscription | null> {\n  if (!userId) {\n    return null;\n  }\n  const row = await new NotificationSubscriptionModel(db).getFor(projectId, userId);\n  if (!row) {\n    return null;\n  }\n  return {\n    events: NotificationSubscriptionModel.eventsOf(row),\n    via: NotificationSubscriptionModel.viaOf(row),\n    enabled: row.enabled,\n  };\n}\n\n/** Notification channels, providers, and my subscription for the UI. */\nasync function loadNotificationSection(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n  userId: string | undefined,\n  notifiers: readonly NotifierProvider[],\n): Promise<{\n  notificationChannels: SettingsNotificationChannel[];\n  notifyProviders: SettingsNotifyProvider[];\n  mySubscription: SettingsMySubscription | null;\n}> {\n  const notificationChannels = await loadNotificationChannels(db, secret, projectId, notifiers);\n  const mySubscription = await loadMySubscription(db, projectId, userId);\n  const notifyProviders = notifiers.map((candidate) => ({\n    kind: candidate.metadata.kind,\n    name: candidate.metadata.name,\n    delivery: deliveryOf(notifiers, candidate.metadata.kind),\n  }));\n  return { notificationChannels, notifyProviders, mySubscription };\n}\n\n/** Roster, tokens and webhooks for the settings UI. */\nasync function loadInventorySection(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<{\n  labelTypes: LabelType[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n  tokens: Omit<Token, \"hash\">[];\n  webhooks: SettingsWebhook[];\n}> {\n  const { labelTypes, members, groupMappings } = await loadMembersSection(db, projectId);\n  const tokens = await loadTokenSummaries(db, projectId);\n  const webhooks = await loadWebhookSummaries(db, projectId);\n  return { labelTypes, members, groupMappings, tokens, webhooks };\n}\n\n/** Package links plus the other projects that can be picked as upstream. */\nasync function loadLinksSection(\n  db: DatabaseAdapter,\n  project: Project,\n): Promise<{ links: SettingsLink[]; linkCandidates: SettingsLinkCandidate[] }> {\n  const projects = await new ProjectModel(db).list();\n  const byId = new Map(projects.map((candidate) => [candidate.id, candidate]));\n  const rows = await new PackageUsageModel(db).listLinks(project.id);\n  const links = rows.flatMap((row) => {\n    const upstream = byId.get(row.upstreamId);\n    return upstream\n      ? [{ packageName: row.packageName, upstreamSlug: upstream.slug, upstreamName: upstream.name }]\n      : [];\n  });\n  const linkCandidates = projects\n    .filter((candidate) => candidate.id !== project.id)\n    .map((candidate) => ({ slug: candidate.slug, name: candidate.name }));\n  return { links, linkCandidates };\n}\n\n/** Design files, component mappings and per-provider credential health for the Design tab (never a token). */\nasync function loadDesignSection(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  providers: DesignProvider[],\n  projectId: string,\n): Promise<SettingsDesignData> {\n  const model = new DesignModel(db, providers);\n  const files = (await model.projectLinks(projectId)).map((link) => ({\n    id: link.id,\n    label: link.label ?? \"Design file\",\n    url: link.url,\n  }));\n  const components = (await model.componentLinks(projectId)).map((link) => ({\n    id: link.id,\n    importPath: link.importPath ?? \"\",\n    url: link.url,\n  }));\n  const credentials = new DesignCredentialModel(db, secret);\n  const rows = await Promise.all(\n    providers.map(async (provider) => await providerSettings(credentials, provider, projectId)),\n  );\n  return { files, components, providers: rows };\n}\n\nasync function providerSettings(\n  credentials: DesignCredentialModel,\n  provider: DesignProvider,\n  projectId: string,\n): Promise<SettingsDesignProvider> {\n  const { metadata } = provider;\n  const maxAgeDays = metadata.credentialMaxAgeDays;\n  const row = await credentials.info(projectId, metadata.kind);\n  return {\n    kind: metadata.kind,\n    name: metadata.name,\n    credentialLabel: metadata.credentialLabel,\n    credentialHelp: metadata.credentialHelp,\n    ...(metadata.credentialPlaceholder\n      ? { credentialPlaceholder: metadata.credentialPlaceholder }\n      : {}),\n    urlHint: metadata.urlHint,\n    ...(maxAgeDays === undefined ? {} : { maxAgeDays }),\n    credential: row\n      ? {\n          status: credentialState(row.status),\n          daysLeft: maxAgeDays === undefined ? null : credentialDaysLeft(row.createdAt, maxAgeDays),\n          checkedAt: row.checkedAt,\n        }\n      : null,\n  };\n}\n\n/** The stored status column as a known state (anything unrecognized reads as unknown). */\nfunction credentialState(status: string): DesignCredentialState {\n  return status === \"ok\" || status === \"unauthorized\" || status === \"forbidden\"\n    ? status\n    : \"unknown\";\n}\n\nasync function loadSettingsData(slug: string): Promise<SettingsData | null> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    return null;\n  }\n  const { db, config, user, authEnabled, design: designProviders, notifiers } = getStore();\n  const inventory = await loadInventorySection(db, project.id);\n  const notifications = await loadNotificationSection(\n    db,\n    credentialKeys(config),\n    project.id,\n    user?.id,\n    notifiers,\n  );\n  const isAdmin = isProjectAdmin(authEnabled, user, inventory.members);\n  const linksSection = await loadLinksSection(db, project);\n  const design = await loadDesignSection(db, credentialKeys(config), designProviders, project.id);\n  return { project, ...inventory, ...notifications, ...linksSection, design, isAdmin };\n}\n\n/** Render the project settings page for the given tab, optionally with form state. */\nexport async function renderSettingsPage(\n  c: Context,\n  tab: SettingsTab,\n  formState?: SettingsFormState,\n): Promise<string> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const data = await loadSettingsData(slug);\n  if (!data) {\n    notFound(\"Project not found\");\n  }\n  return await renderProjectSettingsPage(\n    {\n      project: data.project,\n      activeTab: tab,\n      labelTypes: data.labelTypes,\n      links: data.links,\n      linkCandidates: data.linkCandidates,\n      design: data.design,\n      tokens: data.tokens,\n      members: data.members,\n      groupMappings: data.groupMappings,\n      webhooks: data.webhooks,\n      notificationChannels: data.notificationChannels,\n      notifyProviders: data.notifyProviders,\n      mySubscription: data.mySubscription,\n      isAdmin: data.isAdmin,\n      notificationsPaused: data.notifyProviders.length > 0 && (await notificationsPaused()),\n      ai: aiSettingsData(c),\n      targets: await runnerTargets(),\n    },\n    formState,\n  );\n}\n\n/** AI availability and profile choices for the settings AI tab. */\nfunction aiSettingsData(c: Context): SettingsAiData {\n  const { ai } = getStore();\n  return {\n    available: ai !== undefined,\n    profiles: ai?.profileNames() ?? [],\n    defaultProfile: ai?.defaultProfile() ?? \"\",\n    isSiteAdmin: isSiteAdmin(c),\n  };\n}\n\n/** Find a project by slug or throw 404. */\nexport async function findProject(slug: string): Promise<Project> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    notFound(\"Project not found\");\n  }\n  return project;\n}\n\n/** Trim a form value to a string, dropping files and blanks. */\nexport function asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n"],"mappings":";;;;;;;;;;;;;AAgEA,eAAe,mBACb,IACA,WACgC;CAEhC,QAAO,MADgB,IAAI,WAAW,EAAE,CAAC,CAAC,KAAK,SAAS,EAAA,CACxC,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI;AACxD;;AAGA,eAAe,qBACb,IACA,WAC4B;CAE5B,QAAO,MADkB,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK,SAAS,EAAA,CAC1C,KAAK,aAAa;EAClC,IAAI,QAAQ;EACZ,KAAK,QAAQ;EACb,QAAQ,aAAa,SAAS,OAAO;CACvC,EAAE;AACJ;;AAGA,SAAS,eACP,aACA,MACA,SACS;CACT,OACE,CAAC,eACD,MAAM,SAAS,WACf,QAAQ,MAAM,WAAW,OAAO,WAAW,MAAM,MAAM,OAAO,SAAS,OAAO;AAElF;;AAGA,eAAe,kBACb,IACA,WACiE;CAGjE,OAAO;EAAE,YAAA,MAFgB,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,SAAS;EAE1C,SAAA,MADC,IAAI,YAAY,EAAE,CAAC,CAAC,KAAK,SAAS;CAC3B;AAC/B;;AAGA,eAAe,mBACb,IACA,WAKC;CACD,MAAM,EAAE,YAAY,YAAY,MAAM,kBAAkB,IAAI,SAAS;CAErE,OAAO;EAAE;EAAY;EAAS,eAAA,MADF,kBAAkB,IAAI,SAAS;CACf;AAC9C;;AAGA,eAAe,kBACb,IACA,WACgC;CAChC,OAAO,MAAM,IAAI,yBAAyB,EAAE,CAAC,CAAC,KAAK,SAAS;AAC9D;;AAGA,SAAS,WACP,WACA,UACyC;CACzC,OAAO,yBAAyB,YAAY,WAAW,QAAQ,IAAI,UAAU;AAC/E;;AAGA,eAAe,yBACb,IACA,QACA,WACA,WACwC;CAExC,QAAO,MADY,IAAI,yBAAyB,IAAI,KAAA,GAAW,MAAM,CAAC,CAAC,KAAK,SAAS,EAAA,CACzE,KAAK,SAAS;EACxB,IAAI,IAAI;EACR,UAAU,IAAI;EACd,UAAU,WAAW,WAAW,IAAI,QAAQ;EAC5C,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,WAAW,IAAI,oBAAoB;EACnC,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,SAAS,IAAI;EACb,WAAW,IAAI;EACf,aAAa,IAAI;CACnB,EAAE;AACJ;;AAGA,eAAe,mBACb,IACA,WACA,QACwC;CACxC,IAAI,CAAC,QACH,OAAO;CAET,MAAM,MAAM,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC,OAAO,WAAW,MAAM;CAChF,IAAI,CAAC,KACH,OAAO;CAET,OAAO;EACL,QAAQ,8BAA8B,SAAS,GAAG;EAClD,KAAK,8BAA8B,MAAM,GAAG;EAC5C,SAAS,IAAI;CACf;AACF;;AAGA,eAAe,wBACb,IACA,QACA,WACA,QACA,WAKC;CACD,MAAM,uBAAuB,MAAM,yBAAyB,IAAI,QAAQ,WAAW,SAAS;CAC5F,MAAM,iBAAiB,MAAM,mBAAmB,IAAI,WAAW,MAAM;CAMrE,OAAO;EAAE;EAAsB,iBALP,UAAU,KAAK,eAAe;GACpD,MAAM,UAAU,SAAS;GACzB,MAAM,UAAU,SAAS;GACzB,UAAU,WAAW,WAAW,UAAU,SAAS,IAAI;EACzD,EAC6C;EAAG;CAAe;AACjE;;AAGA,eAAe,qBACb,IACA,WAOC;CACD,MAAM,EAAE,YAAY,SAAS,kBAAkB,MAAM,mBAAmB,IAAI,SAAS;CAGrF,OAAO;EAAE;EAAY;EAAS;EAAe,QAAA,MAFxB,mBAAmB,IAAI,SAAS;EAEA,UAAA,MAD9B,qBAAqB,IAAI,SAAS;CACK;AAChE;;AAGA,eAAe,iBACb,IACA,SAC6E;CAC7E,MAAM,WAAW,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK;CACjD,MAAM,OAAO,IAAI,IAAI,SAAS,KAAK,cAAc,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;CAW3E,OAAO;EAAE,QATK,MADK,IAAI,kBAAkB,EAAE,CAAC,CAAC,UAAU,QAAQ,EAAE,EAAA,CAC9C,SAAS,QAAQ;GAClC,MAAM,WAAW,KAAK,IAAI,IAAI,UAAU;GACxC,OAAO,WACH,CAAC;IAAE,aAAa,IAAI;IAAa,cAAc,SAAS;IAAM,cAAc,SAAS;GAAK,CAAC,IAC3F,CAAC;EACP,CAIa;EAAG,gBAHO,SACpB,QAAQ,cAAc,UAAU,OAAO,QAAQ,EAAE,CAAC,CAClD,KAAK,eAAe;GAAE,MAAM,UAAU;GAAM,MAAM,UAAU;EAAK,EACvC;CAAE;AACjC;;AAGA,eAAe,kBACb,IACA,QACA,WACA,WAC6B;CAC7B,MAAM,QAAQ,IAAI,YAAY,IAAI,SAAS;CAC3C,MAAM,SAAS,MAAM,MAAM,aAAa,SAAS,EAAA,CAAG,KAAK,UAAU;EACjE,IAAI,KAAK;EACT,OAAO,KAAK,SAAS;EACrB,KAAK,KAAK;CACZ,EAAE;CACF,MAAM,cAAc,MAAM,MAAM,eAAe,SAAS,EAAA,CAAG,KAAK,UAAU;EACxE,IAAI,KAAK;EACT,YAAY,KAAK,cAAc;EAC/B,KAAK,KAAK;CACZ,EAAE;CACF,MAAM,cAAc,IAAI,sBAAsB,IAAI,MAAM;CAIxD,OAAO;EAAE;EAAO;EAAY,WAAW,MAHpB,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa,MAAM,iBAAiB,aAAa,UAAU,SAAS,CAAC,CAC5F;CAC4C;AAC9C;AAEA,eAAe,iBACb,aACA,UACA,WACiC;CACjC,MAAM,EAAE,aAAa;CACrB,MAAM,aAAa,SAAS;CAC5B,MAAM,MAAM,MAAM,YAAY,KAAK,WAAW,SAAS,IAAI;CAC3D,OAAO;EACL,MAAM,SAAS;EACf,MAAM,SAAS;EACf,iBAAiB,SAAS;EAC1B,gBAAgB,SAAS;EACzB,GAAI,SAAS,wBACT,EAAE,uBAAuB,SAAS,sBAAsB,IACxD,CAAC;EACL,SAAS,SAAS;EAClB,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW;EACjD,YAAY,MACR;GACE,QAAQ,gBAAgB,IAAI,MAAM;GAClC,UAAU,eAAe,KAAA,IAAY,OAAO,mBAAmB,IAAI,WAAW,UAAU;GACxF,WAAW,IAAI;EACjB,IACA;CACN;AACF;;AAGA,SAAS,gBAAgB,QAAuC;CAC9D,OAAO,WAAW,QAAQ,WAAW,kBAAkB,WAAW,cAC9D,SACA;AACN;AAEA,eAAe,iBAAiB,MAA4C;CAC1E,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,OAAO;CAET,MAAM,EAAE,IAAI,QAAQ,MAAM,aAAa,QAAQ,iBAAiB,cAAc,SAAS;CACvF,MAAM,YAAY,MAAM,qBAAqB,IAAI,QAAQ,EAAE;CAC3D,MAAM,gBAAgB,MAAM,wBAC1B,IACA,eAAe,MAAM,GACrB,QAAQ,IACR,MAAM,IACN,SACF;CACA,MAAM,UAAU,eAAe,aAAa,MAAM,UAAU,OAAO;CACnE,MAAM,eAAe,MAAM,iBAAiB,IAAI,OAAO;CACvD,MAAM,SAAS,MAAM,kBAAkB,IAAI,eAAe,MAAM,GAAG,iBAAiB,QAAQ,EAAE;CAC9F,OAAO;EAAE;EAAS,GAAG;EAAW,GAAG;EAAe,GAAG;EAAc;EAAQ;CAAQ;AACrF;;AAGA,eAAsB,mBACpB,GACA,KACA,WACiB;CAEjB,MAAM,OAAO,MAAM,iBADN,EAAE,IAAI,MAAM,MAAM,KAAK,EACI;CACxC,IAAI,CAAC,MACH,SAAS,mBAAmB;CAE9B,OAAO,MAAM,0BACX;EACE,SAAS,KAAK;EACd,WAAW;EACX,YAAY,KAAK;EACjB,OAAO,KAAK;EACZ,gBAAgB,KAAK;EACrB,QAAQ,KAAK;EACb,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,eAAe,KAAK;EACpB,UAAU,KAAK;EACf,sBAAsB,KAAK;EAC3B,iBAAiB,KAAK;EACtB,gBAAgB,KAAK;EACrB,SAAS,KAAK;EACd,qBAAqB,KAAK,gBAAgB,SAAS,KAAM,MAAM,oBAAoB;EACnF,IAAI,eAAe,CAAC;EACpB,SAAS,MAAM,cAAc;CAC/B,GACA,SACF;AACF;;AAGA,SAAS,eAAe,GAA4B;CAClD,MAAM,EAAE,OAAO,SAAS;CACxB,OAAO;EACL,WAAW,OAAO,KAAA;EAClB,UAAU,IAAI,aAAa,KAAK,CAAC;EACjC,gBAAgB,IAAI,eAAe,KAAK;EACxC,aAAa,YAAY,CAAC;CAC5B;AACF;;AAGA,eAAsB,YAAY,MAAgC;CAChE,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;CAE9B,OAAO;AACT;;AAGA,SAAgB,SAAS,OAAsD;CAC7E,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD"}

package/dist/routers/settings.mjs

@@ -1,23 +1,35 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { registerAiSettings } from "./settings-ai.mjs";
+import { registerCaptureSettings } from "./settings-capture.mjs";
+import { registerDesignSettings } from "./settings-design.mjs";
 import { registerGeneralSettings } from "./settings-general.mjs";
 import { registerLabelSettings } from "./settings-labels.mjs";
+import { registerLinkSettings } from "./settings-links.mjs";
 import { registerMemberSettings } from "./settings-members.mjs";
 import { registerNotificationSettings } from "./settings-notifications.mjs";
-import { registerStatusSettings } from "./settings-status.mjs";
 import { registerTokenSettings } from "./settings-tokens.mjs";
 import { registerWebhookSettings } from "./settings-webhooks.mjs";
 //#region src/routers/settings.ts
 /** Register the server-rendered project settings pages and their form handlers. */
 function registerSettingsPages(app) {
-	registerGeneralSettings(app);
-	registerLabelSettings(app);
+	registerProjectSettings(app);
+	registerCatalogSettings(app);
 	registerTokenSettings(app);
 	registerWebhookSettings(app);
 	registerNotificationSettings(app);
 	registerMemberSettings(app);
-	registerStatusSettings(app);
+	registerAiSettings(app);
+}
+function registerProjectSettings(app) {
+	registerGeneralSettings(app);
+	registerCaptureSettings(app);
+}
+function registerCatalogSettings(app) {
+	registerLabelSettings(app);
+	registerLinkSettings(app);
+	registerDesignSettings(app);
 }
 //#endregion
 export { registerSettingsPages };

package/dist/routers/settings.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings.mjs","names":[],"sources":["../../src/routers/settings.ts"],"sourcesContent":["import type { ShelfRouter } from \"../app-types.ts\";\nimport { registerGeneralSettings } from \"./settings-general.ts\";\nimport { registerLabelSettings } from \"./settings-labels.ts\";\nimport { registerMemberSettings } from \"./settings-members.ts\";\nimport { registerNotificationSettings } from \"./settings-notifications.ts\";\nimport { registerStatusSettings } from \"./settings-status.ts\";\nimport { registerTokenSettings } from \"./settings-tokens.ts\";\nimport { registerWebhookSettings } from \"./settings-webhooks.ts\";\n\n/** Register the server-rendered project settings pages and their form handlers. */\nexport function registerSettingsPages(app: ShelfRouter): void {\n  registerGeneralSettings(app);\n  registerLabelSettings(app);\n  registerTokenSettings(app);\n  registerWebhookSettings(app);\n  registerNotificationSettings(app);\n  registerMemberSettings(app);\n  registerStatusSettings(app);\n}\n"],"mappings":";;;;;;;;;;;;AAUA,SAAgB,sBAAsB,KAAwB;CAC5D,wBAAwB,GAAG;CAC3B,sBAAsB,GAAG;CACzB,sBAAsB,GAAG;CACzB,wBAAwB,GAAG;CAC3B,6BAA6B,GAAG;CAChC,uBAAuB,GAAG;CAC1B,uBAAuB,GAAG;AAC5B"}
+{"version":3,"file":"settings.mjs","names":[],"sources":["../../src/routers/settings.ts"],"sourcesContent":["import type { ShelfRouter } from \"../app-types.ts\";\nimport { registerAiSettings } from \"./settings-ai.ts\";\nimport { registerCaptureSettings } from \"./settings-capture.ts\";\nimport { registerDesignSettings } from \"./settings-design.ts\";\nimport { registerGeneralSettings } from \"./settings-general.ts\";\nimport { registerLabelSettings } from \"./settings-labels.ts\";\nimport { registerLinkSettings } from \"./settings-links.ts\";\nimport { registerMemberSettings } from \"./settings-members.ts\";\nimport { registerNotificationSettings } from \"./settings-notifications.ts\";\nimport { registerTokenSettings } from \"./settings-tokens.ts\";\nimport { registerWebhookSettings } from \"./settings-webhooks.ts\";\n\n/** Register the server-rendered project settings pages and their form handlers. */\nexport function registerSettingsPages(app: ShelfRouter): void {\n  registerProjectSettings(app);\n  registerCatalogSettings(app);\n  registerTokenSettings(app);\n  registerWebhookSettings(app);\n  registerNotificationSettings(app);\n  registerMemberSettings(app);\n  registerAiSettings(app);\n}\n\nfunction registerProjectSettings(app: ShelfRouter): void {\n  registerGeneralSettings(app);\n  registerCaptureSettings(app);\n}\n\nfunction registerCatalogSettings(app: ShelfRouter): void {\n  registerLabelSettings(app);\n  registerLinkSettings(app);\n  registerDesignSettings(app);\n}\n"],"mappings":";;;;;;;;;;;;;;;AAaA,SAAgB,sBAAsB,KAAwB;CAC5D,wBAAwB,GAAG;CAC3B,wBAAwB,GAAG;CAC3B,sBAAsB,GAAG;CACzB,wBAAwB,GAAG;CAC3B,6BAA6B,GAAG;CAChC,uBAAuB,GAAG;CAC1B,mBAAmB,GAAG;AACxB;AAEA,SAAS,wBAAwB,KAAwB;CACvD,wBAAwB,GAAG;CAC3B,wBAAwB,GAAG;AAC7B;AAEA,SAAS,wBAAwB,KAAwB;CACvD,sBAAsB,GAAG;CACzB,qBAAqB,GAAG;CACxB,uBAAuB,GAAG;AAC5B"}

package/dist/routers/signed-storybook.mjs

@@ -0,0 +1,53 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { credentialKeys } from "../credential-keys.mjs";
+import { getStore } from "../store.mjs";
+import { publishedAccess } from "./published-access.mjs";
+import { SIGNED_URL_HEADERS, publishedRelativePath, servePublishedFile } from "./published-files.mjs";
+import { STORYBOOK_TOKEN_PREFIX, storybookTokenPath, verifyStorybookToken } from "@storyshelf/core/utils";
+import { BuildModel, ProjectModel } from "@storyshelf/core/models";
+//#region src/routers/signed-storybook.ts
+/**
+* Signed Storybook URLs (ADR 0007, decision 5): `GET /_s/<token>/<file>` serves one build's static
+* Storybook files to a remote browser, with no session. The HMAC token is the only credential; it
+* names one project and one build and expires. The file itself is served by the same handler and
+* access policy as the other published routes (`published-files.ts`, `published-access.ts`).
+* Nothing else lives under `/_s/`: no wrapper page, no API, no other build, no listing.
+*/
+/** Register the signed-URL file route. */
+function registerSignedStorybook(app) {
+	app.get(`${STORYBOOK_TOKEN_PREFIX}:token/*`, async (c) => await serveSigned(c));
+}
+async function serveSigned(c) {
+	const token = c.req.param("token") ?? "";
+	const rel = publishedRelativePath(c.req.path, storybookTokenPath(token));
+	if (!rel) return refuse(c, "bad path");
+	return await serveGranted(c, token, rel) ?? refuse(c, "no such file");
+}
+/** The file the token grants as a response, or null (for the debug log only: why not). */
+async function serveGranted(c, token, rel) {
+	const { config, db } = getStore();
+	const verified = verifyStorybookToken(token, credentialKeys(config));
+	if (!verified.ok) return refuse(c, verified.reason);
+	const { projectId, buildId } = verified.claims;
+	const [project, build] = await Promise.all([new ProjectModel(db).get(projectId), new BuildModel(db).get(buildId)]);
+	const access = project && build ? await publishedAccess(build, project, verified.claims) : null;
+	if (access !== "token") return refuse(c, "unknown build");
+	return await servePublishedFile(c, {
+		projectId,
+		buildId,
+		rel,
+		access,
+		cacheControl: ""
+	});
+}
+/** The one answer for every refusal, so a caller cannot tell a bad signature from an expired token. */
+function refuse(c, reason) {
+	getStore().logger.debug({ reason }, "signed storybook request refused");
+	return c.text("Not found", 404, SIGNED_URL_HEADERS);
+}
+//#endregion
+export { registerSignedStorybook };
+
+//# sourceMappingURL=signed-storybook.mjs.map

package/dist/routers/signed-storybook.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-storybook.mjs","names":[],"sources":["../../src/routers/signed-storybook.ts"],"sourcesContent":["/**\n * Signed Storybook URLs (ADR 0007, decision 5): `GET /_s/<token>/<file>` serves one build's static\n * Storybook files to a remote browser, with no session. The HMAC token is the only credential; it\n * names one project and one build and expires. The file itself is served by the same handler and\n * access policy as the other published routes (`published-files.ts`, `published-access.ts`).\n * Nothing else lives under `/_s/`: no wrapper page, no API, no other build, no listing.\n */\nimport { BuildModel, ProjectModel } from \"@storyshelf/core/models\";\nimport {\n  STORYBOOK_TOKEN_PREFIX,\n  storybookTokenPath,\n  verifyStorybookToken,\n} from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { publishedAccess } from \"./published-access.ts\";\nimport {\n  publishedRelativePath,\n  servePublishedFile,\n  SIGNED_URL_HEADERS,\n} from \"./published-files.ts\";\n\n/** Register the signed-URL file route. */\nexport function registerSignedStorybook(app: ShelfRouter): void {\n  app.get(`${STORYBOOK_TOKEN_PREFIX}:token/*`, async (c) => await serveSigned(c));\n}\n\nasync function serveSigned(c: Context): Promise<Response> {\n  const token = c.req.param(\"token\") ?? \"\";\n  const rel = publishedRelativePath(c.req.path, storybookTokenPath(token));\n  if (!rel) {\n    return refuse(c, \"bad path\");\n  }\n  return (await serveGranted(c, token, rel)) ?? refuse(c, \"no such file\");\n}\n\n/** The file the token grants as a response, or null (for the debug log only: why not). */\nasync function serveGranted(c: Context, token: string, rel: string): Promise<Response | null> {\n  const { config, db } = getStore();\n  const verified = verifyStorybookToken(token, credentialKeys(config));\n  if (!verified.ok) {\n    return refuse(c, verified.reason);\n  }\n  const { projectId, buildId } = verified.claims;\n  const [project, build] = await Promise.all([\n    new ProjectModel(db).get(projectId),\n    new BuildModel(db).get(buildId),\n  ]);\n  const access = project && build ? await publishedAccess(build, project, verified.claims) : null;\n  if (access !== \"token\") {\n    return refuse(c, \"unknown build\");\n  }\n  return await servePublishedFile(c, { projectId, buildId, rel, access, cacheControl: \"\" });\n}\n\n/** The one answer for every refusal, so a caller cannot tell a bad signature from an expired token. */\nfunction refuse(c: Context, reason: string): Response {\n  getStore().logger.debug({ reason }, \"signed storybook request refused\");\n  return c.text(\"Not found\", 404, SIGNED_URL_HEADERS);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAyBA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,GAAG,uBAAuB,WAAW,OAAO,MAAM,MAAM,YAAY,CAAC,CAAC;AAChF;AAEA,eAAe,YAAY,GAA+B;CACxD,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,KAAK;CACtC,MAAM,MAAM,sBAAsB,EAAE,IAAI,MAAM,mBAAmB,KAAK,CAAC;CACvE,IAAI,CAAC,KACH,OAAO,OAAO,GAAG,UAAU;CAE7B,OAAQ,MAAM,aAAa,GAAG,OAAO,GAAG,KAAM,OAAO,GAAG,cAAc;AACxE;;AAGA,eAAe,aAAa,GAAY,OAAe,KAAuC;CAC5F,MAAM,EAAE,QAAQ,OAAO,SAAS;CAChC,MAAM,WAAW,qBAAqB,OAAO,eAAe,MAAM,CAAC;CACnE,IAAI,CAAC,SAAS,IACZ,OAAO,OAAO,GAAG,SAAS,MAAM;CAElC,MAAM,EAAE,WAAW,YAAY,SAAS;CACxC,MAAM,CAAC,SAAS,SAAS,MAAM,QAAQ,IAAI,CACzC,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,SAAS,GAClC,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO,CAChC,CAAC;CACD,MAAM,SAAS,WAAW,QAAQ,MAAM,gBAAgB,OAAO,SAAS,SAAS,MAAM,IAAI;CAC3F,IAAI,WAAW,SACb,OAAO,OAAO,GAAG,eAAe;CAElC,OAAO,MAAM,mBAAmB,GAAG;EAAE;EAAW;EAAS;EAAK;EAAQ,cAAc;CAAG,CAAC;AAC1F;;AAGA,SAAS,OAAO,GAAY,QAA0B;CACpD,SAAS,CAAC,CAAC,OAAO,MAAM,EAAE,OAAO,GAAG,kCAAkC;CACtE,OAAO,EAAE,KAAK,aAAa,KAAK,kBAAkB;AACpD"}

package/dist/routers/snapshot-groups.mjs

@@ -0,0 +1,63 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { notFound } from "./helpers.mjs";
+import { baselineChanged, findDriftedSnapshots, isOpenSnapshot } from "./baseline-guard.mjs";
+import { approveSnapshot, refreshBuild } from "./builds.handlers.mjs";
+import { SnapshotModel } from "@storyshelf/core/models";
+//#region src/routers/snapshot-groups.ts
+/** Shared (story, mode) review: one decision covers every browser's snapshot. */
+/** Identity of a review group: the same story and mode across engines. */
+function groupKey(snapshot) {
+	return `${snapshot.storyId}\u0000${snapshot.viewportName}`;
+}
+/** Open snapshots of one story/mode; 404 when the group has nothing left to decide. */
+async function openMembers(build, storyId, modeKey) {
+	const members = (await new SnapshotModel(getStore().db).listByBuild(build.id)).filter((snapshot) => snapshot.storyId === storyId && snapshot.viewportName === modeKey && isOpenSnapshot(snapshot));
+	if (members.length === 0) notFound("No open snapshots for this story and mode");
+	return members;
+}
+/**
+* Approve every open snapshot of a story/mode, promoting each engine's
+* baseline. All-or-nothing on drift: when any member's baseline moved and
+* `force` is off, nothing is written and the 409 names that snapshot.
+*
+* @returns The approved snapshot ids, primary engine first.
+*/
+async function approveGroup(project, build, target, userId, options = {}) {
+	const members = await openMembers(build, target.storyId, target.modeKey);
+	if (!options.force) {
+		const first = [...(await findDriftedSnapshots(project, build, members)).entries()][0];
+		if (first) throw baselineChanged(first[0], first[1]);
+	}
+	for (const member of members) await approveSnapshot(member.id, userId, {
+		force: options.force ?? false,
+		deferRefresh: true
+	});
+	await refreshBuild(build.id);
+	return members.map((member) => member.id);
+}
+/** Reject every open snapshot of a story/mode and refresh the build once. */
+async function rejectGroup(build, target, userId) {
+	const members = await openMembers(build, target.storyId, target.modeKey);
+	const snapshots = new SnapshotModel(getStore().db);
+	await Promise.all(members.map(async (member) => await snapshots.review(member.id, "rejected", userId)));
+	await refreshBuild(build.id);
+	return members.map((member) => member.id);
+}
+/**
+* Split open snapshots into approvable groups and groups skipped because some
+* member drifted (the whole group is skipped, never half-approved).
+*/
+function splitByDrift(open, drifted) {
+	const blocked = new Set(open.filter((s) => drifted.has(s.id)).map((s) => groupKey(s)));
+	return {
+		approvable: open.filter((s) => !blocked.has(groupKey(s))),
+		skipped: open.filter((s) => blocked.has(groupKey(s)))
+	};
+}
+//#endregion
+export { approveGroup, groupKey, rejectGroup, splitByDrift };
+
+//# sourceMappingURL=snapshot-groups.mjs.map

package/dist/routers/snapshot-groups.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-groups.mjs","names":[],"sources":["../../src/routers/snapshot-groups.ts"],"sourcesContent":["/** Shared (story, mode) review: one decision covers every browser's snapshot. */\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Build, Project, Snapshot } from \"@storyshelf/core/schema\";\nimport { getStore } from \"../store.ts\";\nimport { baselineChanged, findDriftedSnapshots, isOpenSnapshot } from \"./baseline-guard.ts\";\nimport { approveSnapshot, refreshBuild } from \"./builds.handlers.ts\";\nimport { notFound } from \"./helpers.ts\";\n\n/** Identity of a review group: the same story and mode across engines. */\nexport function groupKey(snapshot: Pick<Snapshot, \"storyId\" | \"viewportName\">): string {\n  return `${snapshot.storyId}\\u0000${snapshot.viewportName}`;\n}\n\n/** Open snapshots of one story/mode; 404 when the group has nothing left to decide. */\nasync function openMembers(build: Build, storyId: string, modeKey: string): Promise<Snapshot[]> {\n  const all = await new SnapshotModel(getStore().db).listByBuild(build.id);\n  const members = all.filter(\n    (snapshot) =>\n      snapshot.storyId === storyId && snapshot.viewportName === modeKey && isOpenSnapshot(snapshot),\n  );\n  if (members.length === 0) {\n    notFound(\"No open snapshots for this story and mode\");\n  }\n  return members;\n}\n\n/**\n * Approve every open snapshot of a story/mode, promoting each engine's\n * baseline. All-or-nothing on drift: when any member's baseline moved and\n * `force` is off, nothing is written and the 409 names that snapshot.\n *\n * @returns The approved snapshot ids, primary engine first.\n */\nexport async function approveGroup(\n  project: Project,\n  build: Build,\n  target: { storyId: string; modeKey: string },\n  userId: string | null,\n  options: { force?: boolean } = {},\n): Promise<string[]> {\n  const members = await openMembers(build, target.storyId, target.modeKey);\n  if (!options.force) {\n    const drifted = await findDriftedSnapshots(project, build, members);\n    const first = [...drifted.entries()][0];\n    if (first) {\n      throw baselineChanged(first[0], first[1]);\n    }\n  }\n  for (const member of members) {\n    // oxlint-disable-next-line no-await-in-loop -- baselines are promoted engine by engine\n    await approveSnapshot(member.id, userId, {\n      force: options.force ?? false,\n      deferRefresh: true,\n    });\n  }\n  await refreshBuild(build.id);\n  return members.map((member) => member.id);\n}\n\n/** Reject every open snapshot of a story/mode and refresh the build once. */\nexport async function rejectGroup(\n  build: Build,\n  target: { storyId: string; modeKey: string },\n  userId: string | null,\n): Promise<string[]> {\n  const members = await openMembers(build, target.storyId, target.modeKey);\n  const snapshots = new SnapshotModel(getStore().db);\n  await Promise.all(\n    members.map(async (member) => await snapshots.review(member.id, \"rejected\", userId)),\n  );\n  await refreshBuild(build.id);\n  return members.map((member) => member.id);\n}\n\n/**\n * Split open snapshots into approvable groups and groups skipped because some\n * member drifted (the whole group is skipped, never half-approved).\n */\nexport function splitByDrift(\n  open: Snapshot[],\n  drifted: ReadonlyMap<string, unknown>,\n): { approvable: Snapshot[]; skipped: Snapshot[] } {\n  const blocked = new Set(open.filter((s) => drifted.has(s.id)).map((s) => groupKey(s)));\n  return {\n    approvable: open.filter((s) => !blocked.has(groupKey(s))),\n    skipped: open.filter((s) => blocked.has(groupKey(s))),\n  };\n}\n"],"mappings":";;;;;;;;;;;AASA,SAAgB,SAAS,UAA8D;CACrF,OAAO,GAAG,SAAS,QAAQ,QAAQ,SAAS;AAC9C;;AAGA,eAAe,YAAY,OAAc,SAAiB,SAAsC;CAE9F,MAAM,WAAU,MADE,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE,EAAA,CACnD,QACjB,aACC,SAAS,YAAY,WAAW,SAAS,iBAAiB,WAAW,eAAe,QAAQ,CAChG;CACA,IAAI,QAAQ,WAAW,GACrB,SAAS,2CAA2C;CAEtD,OAAO;AACT;;;;;;;;AASA,eAAsB,aACpB,SACA,OACA,QACA,QACA,UAA+B,CAAC,GACb;CACnB,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,SAAS,OAAO,OAAO;CACvE,IAAI,CAAC,QAAQ,OAAO;EAElB,MAAM,QAAQ,CAAC,IAAG,MADI,qBAAqB,SAAS,OAAO,OAAO,EAAA,CACxC,QAAQ,CAAC,CAAC,CAAC;EACrC,IAAI,OACF,MAAM,gBAAgB,MAAM,IAAI,MAAM,EAAE;CAE5C;CACA,KAAK,MAAM,UAAU,SAEnB,MAAM,gBAAgB,OAAO,IAAI,QAAQ;EACvC,OAAO,QAAQ,SAAS;EACxB,cAAc;CAChB,CAAC;CAEH,MAAM,aAAa,MAAM,EAAE;CAC3B,OAAO,QAAQ,KAAK,WAAW,OAAO,EAAE;AAC1C;;AAGA,eAAsB,YACpB,OACA,QACA,QACmB;CACnB,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,SAAS,OAAO,OAAO;CACvE,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE;CACjD,MAAM,QAAQ,IACZ,QAAQ,IAAI,OAAO,WAAW,MAAM,UAAU,OAAO,OAAO,IAAI,YAAY,MAAM,CAAC,CACrF;CACA,MAAM,aAAa,MAAM,EAAE;CAC3B,OAAO,QAAQ,KAAK,WAAW,OAAO,EAAE;AAC1C;;;;;AAMA,SAAgB,aACd,MACA,SACiD;CACjD,MAAM,UAAU,IAAI,IAAI,KAAK,QAAQ,MAAM,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,SAAS,CAAC,CAAC,CAAC;CACrF,OAAO;EACL,YAAY,KAAK,QAAQ,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC;EACxD,SAAS,KAAK,QAAQ,MAAM,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC;CACtD;AACF"}

package/dist/routers/snapshots.mjs

@@ -2,13 +2,14 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
+import { resolveAuthorizedProject } from "./helpers.mjs";
 import { hxRefresh, isHxRequest } from "./htmx.mjs";
 import { flashHx } from "./flash.mjs";
-import { resolveAuthorizedProject } from "./helpers.mjs";
-import { approveAllResultSchema, baselineChangedSchema, errorSchema, notFound, okSchema, rediffResultSchema, snapshotSchema, unauthorized } from "./schemas.mjs";
+import { approveAllResultSchema, baselineChangedSchema, errorSchema, groupDecisionResultSchema, notFound, okSchema, rediffResultSchema, snapshotSchema, unauthorized } from "./schemas.mjs";
 import { findDriftedSnapshots, isBaselineChanged, isOpenSnapshot } from "./baseline-guard.mjs";
 import { APPROVER_ROLES, VIEW_ROLES, approveSnapshot, buildForProject, refreshBuild, snapshotForBuild } from "./builds.handlers.mjs";
 import { hxAdvance } from "./review-next.mjs";
+import { approveGroup, rejectGroup, splitByDrift } from "./snapshot-groups.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { REDIFFABLE_BUILD_STATUSES, rediffBuild } from "@storyshelf/core/capture";
 import { SnapshotModel } from "@storyshelf/core/models";
@@ -95,6 +96,47 @@ const approveAllRoute = createRoute({
 		...notFound
 	}
 });
+const groupParams = z.object({
+	slug: z.string(),
+	buildId: z.string(),
+	storyId: z.string(),
+	modeKey: z.string()
+});
+const approveGroupRoute = createRoute({
+	method: "post",
+	tags: ["Review"],
+	summary: "Approve a story/mode across all browsers",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/stories/{storyId}/modes/{modeKey}/approve",
+	request: {
+		params: groupParams,
+		query: z.object({ force: z.enum(["true", "false"]).optional() })
+	},
+	responses: {
+		200: {
+			content: { "application/json": { schema: groupDecisionResultSchema } },
+			description: "Every open snapshot of the story and mode approved and each engine's baseline promoted"
+		},
+		409: {
+			content: { "application/json": { schema: baselineChangedSchema } },
+			description: "A member's baseline changed after its diff; nothing was approved. Re-diff or pass force=true"
+		},
+		...notFound
+	}
+});
+const rejectGroupRoute = createRoute({
+	method: "post",
+	tags: ["Review"],
+	summary: "Reject a story/mode across all browsers",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/stories/{storyId}/modes/{modeKey}/reject",
+	request: { params: groupParams },
+	responses: {
+		200: {
+			content: { "application/json": { schema: groupDecisionResultSchema } },
+			description: "Every open snapshot of the story and mode rejected"
+		},
+		...notFound
+	}
+});
 const rediffRoute = createRoute({
 	method: "post",
 	tags: ["Review"],
@@ -191,15 +233,71 @@ function registerSnapshots(app) {
 		const userId = getStore().user?.id ?? null;
 		const forced = force === "true";
 		const drifted = forced ? /* @__PURE__ */ new Map() : await findDriftedSnapshots(project, build, snapshots);
-		await Promise.all(snapshots.filter((snapshot) => isOpenSnapshot(snapshot) && !drifted.has(snapshot.id)).map(async (snapshot) => {
-			await approveSnapshot(snapshot.id, userId, { force: forced });
+		const { approvable, skipped } = splitByDrift(snapshots.filter((snapshot) => isOpenSnapshot(snapshot)), drifted);
+		await Promise.all(approvable.map(async (snapshot) => {
+			await approveSnapshot(snapshot.id, userId, {
+				force: forced,
+				deferRefresh: true
+			});
 		}));
+		await refreshBuild(build.id);
 		hxRefresh(c);
 		return c.json({
 			ok: true,
-			skipped: [...drifted.keys()]
+			skipped: skipped.map((snapshot) => snapshot.id)
 		});
 	});
+	app.openapi(approveGroupRoute, async (c) => {
+		const { slug, buildId, storyId, modeKey } = c.req.valid("param");
+		const { force } = c.req.valid("query");
+		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		const userId = getStore().user?.id ?? null;
+		let snapshotIds;
+		try {
+			snapshotIds = await approveGroup(project, build, {
+				storyId,
+				modeKey
+			}, userId, { force: force === "true" });
+		} catch (error) {
+			if (!isHxRequest(c) || !isBaselineChanged(error)) throw error;
+			c.header("HX-Redirect", `/projects/${slug}/builds/${buildId}/diff`);
+			return c.json({
+				ok: true,
+				snapshotIds: []
+			}, 200);
+		}
+		const first = snapshotIds[0];
+		if (first) await hxAdvance(c, {
+			slug,
+			buildId,
+			snapshotId: first
+		});
+		return c.json({
+			ok: true,
+			snapshotIds
+		}, 200);
+	});
+	app.openapi(rejectGroupRoute, async (c) => {
+		const { slug, buildId, storyId, modeKey } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		const userId = getStore().user?.id ?? null;
+		const snapshotIds = await rejectGroup(build, {
+			storyId,
+			modeKey
+		}, userId);
+		const first = snapshotIds[0];
+		if (first) await hxAdvance(c, {
+			slug,
+			buildId,
+			snapshotId: first
+		});
+		return c.json({
+			ok: true,
+			snapshotIds
+		}, 200);
+	});
 	app.openapi(rediffRoute, async (c) => {
 		const { slug, buildId } = c.req.valid("param");
 		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);