@storyshelf/app 0.6.2 → 0.8.0

package/dist/routers/insights-ui.mjs

@@ -0,0 +1,63 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { notFound } from "./helpers.mjs";
+import { buildForProject } from "./builds.handlers.mjs";
+import { loadHealthPanel } from "../insights/health-panel.mjs";
+import { loadInsightPanel } from "../insights/panel.mjs";
+import { requestHealth, requestTriage } from "../insights/request.mjs";
+import { InsightPanel } from "../pages/build-diff-insight.mjs";
+import { HealthPanel } from "../pages/health-panel.mjs";
+import { projectForRegenerate, projectForView } from "./insights.handlers.mjs";
+import { jsx } from "hono/jsx/jsx-runtime";
+// src/routers/insights-ui.tsx
+/** Register the HTMX fragments for the project health panel. */
+function registerHealthFragments(app) {
+	app.get("/projects/:slug/insights/health/panel", async (c) => {
+		const { project } = await projectForView(c, c.req.param("slug"));
+		const data = await loadHealthPanel(project);
+		return data ? c.html(/* @__PURE__ */ jsx(HealthPanel, {
+			project,
+			data
+		})) : notFound();
+	});
+	app.post("/projects/:slug/insights/health/generate", async (c) => {
+		const { deps, project } = await projectForRegenerate(c, c.req.param("slug"));
+		const form = await c.req.formData();
+		await requestHealth(deps, project, "30d", { force: form.get("force") === "true" });
+		const data = await loadHealthPanel(project);
+		return data ? c.html(/* @__PURE__ */ jsx(HealthPanel, {
+			project,
+			data
+		})) : notFound();
+	});
+}
+/** Register the HTMX fragments for the build-review AI triage panel. */
+function registerInsightFragments(app) {
+	registerHealthFragments(app);
+	app.get("/projects/:slug/builds/:buildId/insights/panel", async (c) => {
+		const { project } = await projectForView(c, c.req.param("slug"));
+		const build = await buildForProject(project.id, c.req.param("buildId"));
+		const data = await loadInsightPanel(project, build);
+		return data ? c.html(/* @__PURE__ */ jsx(InsightPanel, {
+			project,
+			build,
+			data
+		})) : notFound();
+	});
+	app.post("/projects/:slug/builds/:buildId/insights/generate", async (c) => {
+		const { deps, project } = await projectForRegenerate(c, c.req.param("slug"));
+		const build = await buildForProject(project.id, c.req.param("buildId"));
+		const form = await c.req.formData();
+		await requestTriage(deps, project, build, { force: form.get("force") === "true" });
+		const data = await loadInsightPanel(project, build);
+		return data ? c.html(/* @__PURE__ */ jsx(InsightPanel, {
+			project,
+			build,
+			data
+		})) : notFound();
+	});
+}
+export { registerInsightFragments };
+
+//# sourceMappingURL=insights-ui.mjs.map

package/dist/routers/insights-ui.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"insights-ui.mjs","names":[],"sources":["../../src/routers/insights-ui.tsx"],"sourcesContent":["import type { ShelfRouter } from \"../app-types.ts\";\nimport { HEALTH_UI_WINDOW, loadHealthPanel } from \"../insights/health-panel.ts\";\nimport { loadInsightPanel } from \"../insights/panel.ts\";\nimport { requestHealth, requestTriage } from \"../insights/request.ts\";\nimport { InsightPanel } from \"../pages/build-diff-insight.tsx\";\nimport { HealthPanel } from \"../pages/health-panel.tsx\";\nimport { buildForProject } from \"./builds.handlers.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { projectForRegenerate, projectForView } from \"./insights.handlers.ts\";\n\n/** Register the HTMX fragments for the project health panel. */\nfunction registerHealthFragments(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/insights/health/panel\", async (c) => {\n    const { project } = await projectForView(c, c.req.param(\"slug\"));\n    const data = await loadHealthPanel(project);\n    return data ? c.html(<HealthPanel project={project} data={data} />) : notFound();\n  });\n\n  app.post(\"/projects/:slug/insights/health/generate\", async (c) => {\n    const { deps, project } = await projectForRegenerate(c, c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    await requestHealth(deps, project, HEALTH_UI_WINDOW, { force: form.get(\"force\") === \"true\" });\n    const data = await loadHealthPanel(project);\n    return data ? c.html(<HealthPanel project={project} data={data} />) : notFound();\n  });\n}\n\n/** Register the HTMX fragments for the build-review AI triage panel. */\nexport function registerInsightFragments(app: ShelfRouter): void {\n  registerHealthFragments(app);\n  app.get(\"/projects/:slug/builds/:buildId/insights/panel\", async (c) => {\n    const { project } = await projectForView(c, c.req.param(\"slug\"));\n    const build = await buildForProject(project.id, c.req.param(\"buildId\"));\n    const data = await loadInsightPanel(project, build);\n    return data ? c.html(<InsightPanel project={project} build={build} data={data} />) : notFound();\n  });\n\n  app.post(\"/projects/:slug/builds/:buildId/insights/generate\", async (c) => {\n    const { deps, project } = await projectForRegenerate(c, c.req.param(\"slug\"));\n    const build = await buildForProject(project.id, c.req.param(\"buildId\"));\n    const form = await c.req.formData();\n    await requestTriage(deps, project, build, { force: form.get(\"force\") === \"true\" });\n    const data = await loadInsightPanel(project, build);\n    return data ? c.html(<InsightPanel project={project} build={build} data={data} />) : notFound();\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AAWA,SAAS,wBAAwB,KAAwB;CACvD,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC5D,MAAM,EAAE,YAAY,MAAM,eAAe,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC;EAC/D,MAAM,OAAO,MAAM,gBAAgB,OAAO;EAC1C,OAAO,OAAO,EAAE,KAAK,oBAAC,aAAD;GAAsB;GAAe;EAAO,CAAA,CAAC,IAAI,SAAS;CACjF,CAAC;CAED,IAAI,KAAK,4CAA4C,OAAO,MAAM;EAChE,MAAM,EAAE,MAAM,YAAY,MAAM,qBAAqB,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC;EAC3E,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,cAAc,MAAM,SAAA,OAA2B,EAAE,OAAO,KAAK,IAAI,OAAO,MAAM,OAAO,CAAC;EAC5F,MAAM,OAAO,MAAM,gBAAgB,OAAO;EAC1C,OAAO,OAAO,EAAE,KAAK,oBAAC,aAAD;GAAsB;GAAe;EAAO,CAAA,CAAC,IAAI,SAAS;CACjF,CAAC;AACH;;AAGA,SAAgB,yBAAyB,KAAwB;CAC/D,wBAAwB,GAAG;CAC3B,IAAI,IAAI,kDAAkD,OAAO,MAAM;EACrE,MAAM,EAAE,YAAY,MAAM,eAAe,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC;EAC/D,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,EAAE,IAAI,MAAM,SAAS,CAAC;EACtE,MAAM,OAAO,MAAM,iBAAiB,SAAS,KAAK;EAClD,OAAO,OAAO,EAAE,KAAK,oBAAC,cAAD;GAAuB;GAAgB;GAAa;EAAO,CAAA,CAAC,IAAI,SAAS;CAChG,CAAC;CAED,IAAI,KAAK,qDAAqD,OAAO,MAAM;EACzE,MAAM,EAAE,MAAM,YAAY,MAAM,qBAAqB,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC;EAC3E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,EAAE,IAAI,MAAM,SAAS,CAAC;EACtE,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,cAAc,MAAM,SAAS,OAAO,EAAE,OAAO,KAAK,IAAI,OAAO,MAAM,OAAO,CAAC;EACjF,MAAM,OAAO,MAAM,iBAAiB,SAAS,KAAK;EAClD,OAAO,OAAO,EAAE,KAAK,oBAAC,cAAD;GAAuB;GAAgB;GAAa;EAAO,CAAA,CAAC,IAAI,SAAS;CAChG,CAAC;AACH"}

package/dist/routers/insights.handlers.mjs

@@ -0,0 +1,44 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { failWith } from "../insights/errors.mjs";
+import { assertRole, requestHasAdminToken, resolveAuthorizedProject } from "./helpers.mjs";
+import { insightDepsFromStore } from "../insights/deps.mjs";
+import { APPROVER_ROLES, VIEW_ROLES } from "./builds.handlers.mjs";
+// src/routers/insights.handlers.ts
+/** AI deps or `501 ai-disabled` when the site has no AI configured. */
+function requireAi() {
+	const deps = insightDepsFromStore();
+	if (!deps) failWith(501, "ai-disabled");
+	return deps;
+}
+/** `409 ai-disabled-for-project` unless the project selected a profile. */
+function requireProjectAi(project) {
+	if (project.aiProfile === null || project.aiProfile === void 0) failWith(409, "ai-disabled-for-project");
+}
+/** Whether the caller is a site admin (or auth is off / bootstrap admin token). */
+function isSiteAdmin(c) {
+	const store = getStore();
+	return !store.authEnabled || store.user?.role === "admin" || requestHasAdminToken(c);
+}
+/** Resolve a project for reading insights (all four roles). */
+async function projectForView(c, slug) {
+	return {
+		deps: requireAi(),
+		project: await resolveAuthorizedProject(c, slug, ...VIEW_ROLES)
+	};
+}
+/** Resolve a project for regenerating (approver + admin) in the ADR guard order. */
+async function projectForRegenerate(c, slug) {
+	const { deps, project } = await projectForView(c, slug);
+	requireProjectAi(project);
+	if (!requestHasAdminToken(c)) await assertRole(project.id, ...APPROVER_ROLES);
+	return {
+		deps,
+		project
+	};
+}
+export { isSiteAdmin, projectForRegenerate, projectForView, requireAi, requireProjectAi };
+
+//# sourceMappingURL=insights.handlers.mjs.map

package/dist/routers/insights.handlers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"insights.handlers.mjs","names":[],"sources":["../../src/routers/insights.handlers.ts"],"sourcesContent":["import type { Project } from \"@storyshelf/core/schema\";\n/** Shared guards for the insights API (ADR 0016 §6 guard order). */\nimport type { Context } from \"hono\";\nimport { insightDepsFromStore, type InsightDeps } from \"../insights/deps.ts\";\nimport { failWith } from \"../insights/errors.ts\";\nimport { getStore } from \"../store.ts\";\nimport { APPROVER_ROLES, VIEW_ROLES } from \"./builds.handlers.ts\";\nimport { assertRole, requestHasAdminToken, resolveAuthorizedProject } from \"./helpers.ts\";\n\n/** AI deps or `501 ai-disabled` when the site has no AI configured. */\nexport function requireAi(): InsightDeps {\n  const deps = insightDepsFromStore();\n  if (!deps) {\n    failWith(501, \"ai-disabled\");\n  }\n  return deps;\n}\n\n/** `409 ai-disabled-for-project` unless the project selected a profile. */\nexport function requireProjectAi(project: Project): void {\n  if (project.aiProfile === null || project.aiProfile === undefined) {\n    failWith(409, \"ai-disabled-for-project\");\n  }\n}\n\n/** Whether the caller is a site admin (or auth is off / bootstrap admin token). */\nexport function isSiteAdmin(c: Context): boolean {\n  const store = getStore();\n  return !store.authEnabled || store.user?.role === \"admin\" || requestHasAdminToken(c);\n}\n\n/** Resolve a project for reading insights (all four roles). */\nexport async function projectForView(\n  c: Context,\n  slug: string,\n): Promise<{ deps: InsightDeps; project: Project }> {\n  const deps = requireAi();\n  const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n  return { deps, project };\n}\n\n/** Resolve a project for regenerating (approver + admin) in the ADR guard order. */\nexport async function projectForRegenerate(\n  c: Context,\n  slug: string,\n): Promise<{ deps: InsightDeps; project: Project }> {\n  const { deps, project } = await projectForView(c, slug);\n  requireProjectAi(project);\n  if (!requestHasAdminToken(c)) {\n    await assertRole(project.id, ...APPROVER_ROLES);\n  }\n  return { deps, project };\n}\n"],"mappings":";;;;;;;;;;AAUA,SAAgB,YAAyB;CACvC,MAAM,OAAO,qBAAqB;CAClC,IAAI,CAAC,MACH,SAAS,KAAK,aAAa;CAE7B,OAAO;AACT;;AAGA,SAAgB,iBAAiB,SAAwB;CACvD,IAAI,QAAQ,cAAc,QAAQ,QAAQ,cAAc,KAAA,GACtD,SAAS,KAAK,yBAAyB;AAE3C;;AAGA,SAAgB,YAAY,GAAqB;CAC/C,MAAM,QAAQ,SAAS;CACvB,OAAO,CAAC,MAAM,eAAe,MAAM,MAAM,SAAS,WAAW,qBAAqB,CAAC;AACrF;;AAGA,eAAsB,eACpB,GACA,MACkD;CAGlD,OAAO;EAAE,MAFI,UAED;EAAG,SAAA,MADO,yBAAyB,GAAG,MAAM,GAAG,UAAU;CAC9C;AACzB;;AAGA,eAAsB,qBACpB,GACA,MACkD;CAClD,MAAM,EAAE,MAAM,YAAY,MAAM,eAAe,GAAG,IAAI;CACtD,iBAAiB,OAAO;CACxB,IAAI,CAAC,qBAAqB,CAAC,GACzB,MAAM,WAAW,QAAQ,IAAI,GAAG,cAAc;CAEhD,OAAO;EAAE;EAAM;CAAQ;AACzB"}

package/dist/routers/insights.mjs

@@ -0,0 +1,188 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { failWith } from "../insights/errors.mjs";
+import { notFound } from "./helpers.mjs";
+import { badRequest, errorSchema, healthRequestSchema, insightRequestSchema, insightSchema, notFound as notFound$1, unauthorized } from "./schemas.mjs";
+import { buildForProject } from "./builds.handlers.mjs";
+import { freshen } from "../insights/stale.mjs";
+import { toInsightView } from "../insights/view.mjs";
+import { requestHealth, requestTriage } from "../insights/request.mjs";
+import { isSiteAdmin, projectForRegenerate, projectForView } from "./insights.handlers.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+import { InsightModel } from "@storyshelf/core/models";
+// src/routers/insights.ts
+const BUILD_PARAMS = z.object({
+	slug: z.string(),
+	buildId: z.string()
+});
+const json = (schema) => ({ content: { "application/json": { schema } } });
+const guardResponses = {
+	501: {
+		...json(errorSchema),
+		description: "AI is not configured on this server (ai-disabled)"
+	},
+	409: {
+		...json(errorSchema),
+		description: "AI is disabled for this project"
+	},
+	...notFound$1,
+	...unauthorized
+};
+const latestRoute = createRoute({
+	method: "get",
+	tags: ["Insights"],
+	summary: "Latest build triage",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/insights/latest",
+	request: { params: BUILD_PARAMS },
+	responses: {
+		200: {
+			...json(insightSchema),
+			description: "Latest triage"
+		},
+		...guardResponses
+	}
+});
+const listRoute = createRoute({
+	method: "get",
+	tags: ["Insights"],
+	summary: "Build triage history",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/insights",
+	request: {
+		params: BUILD_PARAMS,
+		query: z.object({ limit: z.coerce.number().int().min(1).max(50).optional() })
+	},
+	responses: {
+		200: {
+			...json(insightSchema.array()),
+			description: "Triage history"
+		},
+		...guardResponses
+	}
+});
+const generateRoute = createRoute({
+	method: "post",
+	tags: ["Insights"],
+	summary: "Generate a build triage",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/insights",
+	request: {
+		params: BUILD_PARAMS,
+		body: { content: { "application/json": { schema: insightRequestSchema } } }
+	},
+	responses: {
+		200: {
+			...json(insightSchema),
+			description: "Cached insight (unbilled)"
+		},
+		202: {
+			...json(insightSchema),
+			description: "Generation started; poll the latest endpoint"
+		},
+		429: {
+			...json(errorSchema),
+			description: "Budget or rate limit reached (see Retry-After)"
+		},
+		...guardResponses
+	}
+});
+const healthGetRoute = createRoute({
+	method: "get",
+	tags: ["Insights"],
+	summary: "Project health digest",
+	path: "/api/v1/projects/{slug}/insights/health",
+	request: {
+		params: z.object({ slug: z.string() }),
+		query: z.object({ window: z.string().optional() })
+	},
+	responses: {
+		200: {
+			...json(insightSchema),
+			description: "Cached digest"
+		},
+		...guardResponses
+	}
+});
+const healthPostRoute = createRoute({
+	method: "post",
+	tags: ["Insights"],
+	summary: "Generate a project health digest",
+	path: "/api/v1/projects/{slug}/insights/health",
+	request: {
+		params: z.object({ slug: z.string() }),
+		body: { content: { "application/json": { schema: healthRequestSchema } } }
+	},
+	responses: {
+		200: {
+			...json(insightSchema),
+			description: "Cached digest (unbilled)"
+		},
+		202: {
+			...json(insightSchema),
+			description: "Generation started"
+		},
+		429: {
+			...json(errorSchema),
+			description: "Budget or rate limit reached (see Retry-After)"
+		},
+		...badRequest,
+		...guardResponses
+	}
+});
+/** Register the build triage endpoints. */
+function registerBuildInsights(app) {
+	app.openapi(latestRoute, async (c) => {
+		const { slug, buildId } = c.req.valid("param");
+		const { deps, project } = await projectForView(c, slug);
+		const build = await buildForProject(project.id, buildId);
+		const [latest] = await new InsightModel(deps.db).listForBuild(build.id, 1);
+		return latest ? c.json(toInsightView(await freshen(deps, latest)), 200) : notFound("never-generated: POST to this build's insights to create one");
+	});
+	app.openapi(listRoute, async (c) => {
+		const { slug, buildId } = c.req.valid("param");
+		const { limit } = c.req.valid("query");
+		const { deps, project } = await projectForView(c, slug);
+		const build = await buildForProject(project.id, buildId);
+		const rows = await new InsightModel(deps.db).listForBuild(build.id, limit ?? 20);
+		return c.json(await Promise.all(rows.map(async (row) => toInsightView(await freshen(deps, row)))), 200);
+	});
+	app.openapi(generateRoute, async (c) => {
+		const { slug, buildId } = c.req.valid("param");
+		const body = c.req.valid("json");
+		const { deps, project } = await projectForRegenerate(c, slug);
+		const build = await buildForProject(project.id, buildId);
+		const outcome = await requestTriage(deps, project, build, {
+			force: body.force ?? false,
+			profile: isSiteAdmin(c) ? body.profile : void 0
+		});
+		const view = toInsightView(outcome.row);
+		return outcome.status === 200 ? c.json(view, 200) : c.json(view, 202, { location: `/api/v1/projects/${slug}/builds/${build.id}/insights/latest` });
+	});
+}
+/** Register the project-health endpoints. */
+function registerHealthInsights(app) {
+	app.openapi(healthGetRoute, async (c) => {
+		const { slug } = c.req.valid("param");
+		const { window } = c.req.valid("query");
+		const { deps, project } = await projectForView(c, slug);
+		const row = await new InsightModel(deps.db).getHealth(project.id, window ?? "30d");
+		return row ? c.json(toInsightView(await freshen(deps, row)), 200) : notFound("never-generated: POST to create a health digest");
+	});
+	app.openapi(healthPostRoute, async (c) => {
+		const { slug } = c.req.valid("param");
+		const body = c.req.valid("json");
+		const { deps, project } = await projectForRegenerate(c, slug);
+		const window = body.window ?? "30d";
+		const outcome = await requestHealth(deps, project, window, { force: body.force ?? false });
+		if (!outcome) failWith(400, "window must look like 30d (1-365 days)");
+		const view = toInsightView(outcome.row);
+		return outcome.status === 200 ? c.json(view, 200) : c.json(view, 202, { location: `/api/v1/projects/${slug}/insights/health?window=${window}` });
+	});
+}
+/** Register the AI insights endpoints (build triage and project health). */
+function registerInsights(app) {
+	registerBuildInsights(app);
+	registerHealthInsights(app);
+}
+export { registerInsights };
+
+//# sourceMappingURL=insights.mjs.map

package/dist/routers/insights.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"insights.mjs","names":["notFound","throwNotFound"],"sources":["../../src/routers/insights.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { InsightModel } from \"@storyshelf/core/models\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { failWith } from \"../insights/errors.ts\";\nimport { requestHealth, requestTriage } from \"../insights/request.ts\";\nimport { freshen } from \"../insights/stale.ts\";\nimport { toInsightView } from \"../insights/view.ts\";\nimport { buildForProject } from \"./builds.handlers.ts\";\nimport { notFound as throwNotFound } from \"./helpers.ts\";\nimport { isSiteAdmin, projectForRegenerate, projectForView } from \"./insights.handlers.ts\";\nimport {\n  badRequest,\n  errorSchema,\n  healthRequestSchema,\n  insightRequestSchema,\n  insightSchema,\n  notFound,\n  unauthorized,\n} from \"./schemas.ts\";\n\nconst BUILD_PARAMS = z.object({ slug: z.string(), buildId: z.string() });\nconst json = (schema: z.ZodType): { content: { \"application/json\": { schema: z.ZodType } } } => ({\n  content: { \"application/json\": { schema } },\n});\nconst guardResponses = {\n  501: { ...json(errorSchema), description: \"AI is not configured on this server (ai-disabled)\" },\n  409: { ...json(errorSchema), description: \"AI is disabled for this project\" },\n  ...notFound,\n  ...unauthorized,\n} as const;\n\nconst latestRoute = createRoute({\n  method: \"get\",\n  tags: [\"Insights\"],\n  summary: \"Latest build triage\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/insights/latest\",\n  request: { params: BUILD_PARAMS },\n  responses: { 200: { ...json(insightSchema), description: \"Latest triage\" }, ...guardResponses },\n});\n\nconst listRoute = createRoute({\n  method: \"get\",\n  tags: [\"Insights\"],\n  summary: \"Build triage history\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/insights\",\n  request: {\n    params: BUILD_PARAMS,\n    query: z.object({ limit: z.coerce.number().int().min(1).max(50).optional() }),\n  },\n  responses: {\n    200: { ...json(insightSchema.array()), description: \"Triage history\" },\n    ...guardResponses,\n  },\n});\n\nconst generateRoute = createRoute({\n  method: \"post\",\n  tags: [\"Insights\"],\n  summary: \"Generate a build triage\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/insights\",\n  request: {\n    params: BUILD_PARAMS,\n    body: { content: { \"application/json\": { schema: insightRequestSchema } } },\n  },\n  responses: {\n    200: { ...json(insightSchema), description: \"Cached insight (unbilled)\" },\n    202: { ...json(insightSchema), description: \"Generation started; poll the latest endpoint\" },\n    429: { ...json(errorSchema), description: \"Budget or rate limit reached (see Retry-After)\" },\n    ...guardResponses,\n  },\n});\n\nconst healthGetRoute = createRoute({\n  method: \"get\",\n  tags: [\"Insights\"],\n  summary: \"Project health digest\",\n  path: \"/api/v1/projects/{slug}/insights/health\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    query: z.object({ window: z.string().optional() }),\n  },\n  responses: { 200: { ...json(insightSchema), description: \"Cached digest\" }, ...guardResponses },\n});\n\nconst healthPostRoute = createRoute({\n  method: \"post\",\n  tags: [\"Insights\"],\n  summary: \"Generate a project health digest\",\n  path: \"/api/v1/projects/{slug}/insights/health\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: healthRequestSchema } } },\n  },\n  responses: {\n    200: { ...json(insightSchema), description: \"Cached digest (unbilled)\" },\n    202: { ...json(insightSchema), description: \"Generation started\" },\n    429: { ...json(errorSchema), description: \"Budget or rate limit reached (see Retry-After)\" },\n    ...badRequest,\n    ...guardResponses,\n  },\n});\n\n/** Register the build triage endpoints. */\nfunction registerBuildInsights(app: ShelfRouter): void {\n  app.openapi(latestRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const { deps, project } = await projectForView(c, slug);\n    const build = await buildForProject(project.id, buildId);\n    const [latest] = await new InsightModel(deps.db).listForBuild(build.id, 1);\n    return latest\n      ? c.json(toInsightView(await freshen(deps, latest)), 200)\n      : throwNotFound(\"never-generated: POST to this build's insights to create one\");\n  });\n\n  app.openapi(listRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const { limit } = c.req.valid(\"query\");\n    const { deps, project } = await projectForView(c, slug);\n    const build = await buildForProject(project.id, buildId);\n    const rows = await new InsightModel(deps.db).listForBuild(build.id, limit ?? 20);\n    return c.json(\n      await Promise.all(rows.map(async (row) => toInsightView(await freshen(deps, row)))),\n      200,\n    );\n  });\n\n  app.openapi(generateRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const body = c.req.valid(\"json\");\n    const { deps, project } = await projectForRegenerate(c, slug);\n    const build = await buildForProject(project.id, buildId);\n    const outcome = await requestTriage(deps, project, build, {\n      force: body.force ?? false,\n      profile: isSiteAdmin(c) ? body.profile : undefined,\n    });\n    const view = toInsightView(outcome.row);\n    return outcome.status === 200\n      ? c.json(view, 200)\n      : c.json(view, 202, {\n          location: `/api/v1/projects/${slug}/builds/${build.id}/insights/latest`,\n        });\n  });\n}\n\n/** Register the project-health endpoints. */\nfunction registerHealthInsights(app: ShelfRouter): void {\n  app.openapi(healthGetRoute, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const { window } = c.req.valid(\"query\");\n    const { deps, project } = await projectForView(c, slug);\n    const row = await new InsightModel(deps.db).getHealth(project.id, window ?? \"30d\");\n    return row\n      ? c.json(toInsightView(await freshen(deps, row)), 200)\n      : throwNotFound(\"never-generated: POST to create a health digest\");\n  });\n\n  app.openapi(healthPostRoute, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const body = c.req.valid(\"json\");\n    const { deps, project } = await projectForRegenerate(c, slug);\n    const window = body.window ?? \"30d\";\n    const outcome = await requestHealth(deps, project, window, { force: body.force ?? false });\n    if (!outcome) {\n      failWith(400, \"window must look like 30d (1-365 days)\");\n    }\n    const view = toInsightView(outcome.row);\n    return outcome.status === 200\n      ? c.json(view, 200)\n      : c.json(view, 202, {\n          location: `/api/v1/projects/${slug}/insights/health?window=${window}`,\n        });\n  });\n}\n\n/** Register the AI insights endpoints (build triage and project health). */\nexport function registerInsights(app: ShelfRouter): void {\n  registerBuildInsights(app);\n  registerHealthInsights(app);\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,MAAM,eAAe,EAAE,OAAO;CAAE,MAAM,EAAE,OAAO;CAAG,SAAS,EAAE,OAAO;AAAE,CAAC;AACvE,MAAM,QAAQ,YAAmF,EAC/F,SAAS,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAC5C;AACA,MAAM,iBAAiB;CACrB,KAAK;EAAE,GAAG,KAAK,WAAW;EAAG,aAAa;CAAoD;CAC9F,KAAK;EAAE,GAAG,KAAK,WAAW;EAAG,aAAa;CAAkC;CAC5E,GAAGA;CACH,GAAG;AACL;AAEA,MAAM,cAAc,YAAY;CAC9B,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,aAAa;CAChC,WAAW;EAAE,KAAK;GAAE,GAAG,KAAK,aAAa;GAAG,aAAa;EAAgB;EAAG,GAAG;CAAe;AAChG,CAAC;AAED,MAAM,YAAY,YAAY;CAC5B,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ;EACR,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;CAC9E;CACA,WAAW;EACT,KAAK;GAAE,GAAG,KAAK,cAAc,MAAM,CAAC;GAAG,aAAa;EAAiB;EACrE,GAAG;CACL;AACF,CAAC;AAED,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ;EACR,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,qBAAqB,EAAE,EAAE;CAC5E;CACA,WAAW;EACT,KAAK;GAAE,GAAG,KAAK,aAAa;GAAG,aAAa;EAA4B;EACxE,KAAK;GAAE,GAAG,KAAK,aAAa;GAAG,aAAa;EAA+C;EAC3F,KAAK;GAAE,GAAG,KAAK,WAAW;GAAG,aAAa;EAAiD;EAC3F,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;CACnD;CACA,WAAW;EAAE,KAAK;GAAE,GAAG,KAAK,aAAa;GAAG,aAAa;EAAgB;EAAG,GAAG;CAAe;AAChG,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,UAAU;CACjB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;CAC3E;CACA,WAAW;EACT,KAAK;GAAE,GAAG,KAAK,aAAa;GAAG,aAAa;EAA2B;EACvE,KAAK;GAAE,GAAG,KAAK,aAAa;GAAG,aAAa;EAAqB;EACjE,KAAK;GAAE,GAAG,KAAK,WAAW;GAAG,aAAa;EAAiD;EAC3F,GAAG;EACH,GAAG;CACL;AACF,CAAC;;AAGD,SAAS,sBAAsB,KAAwB;CACrD,IAAI,QAAQ,aAAa,OAAO,MAAM;EACpC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,EAAE,MAAM,YAAY,MAAM,eAAe,GAAG,IAAI;EACtD,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,CAAC,UAAU,MAAM,IAAI,aAAa,KAAK,EAAE,CAAC,CAAC,aAAa,MAAM,IAAI,CAAC;EACzE,OAAO,SACH,EAAE,KAAK,cAAc,MAAM,QAAQ,MAAM,MAAM,CAAC,GAAG,GAAG,IACtDC,SAAc,8DAA8D;CAClF,CAAC;CAED,IAAI,QAAQ,WAAW,OAAO,MAAM;EAClC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,EAAE,MAAM,YAAY,MAAM,eAAe,GAAG,IAAI;EACtD,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,OAAO,MAAM,IAAI,aAAa,KAAK,EAAE,CAAC,CAAC,aAAa,MAAM,IAAI,SAAS,EAAE;EAC/E,OAAO,EAAE,KACP,MAAM,QAAQ,IAAI,KAAK,IAAI,OAAO,QAAQ,cAAc,MAAM,QAAQ,MAAM,GAAG,CAAC,CAAC,CAAC,GAClF,GACF;CACF,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,EAAE,MAAM,YAAY,MAAM,qBAAqB,GAAG,IAAI;EAC5D,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,UAAU,MAAM,cAAc,MAAM,SAAS,OAAO;GACxD,OAAO,KAAK,SAAS;GACrB,SAAS,YAAY,CAAC,IAAI,KAAK,UAAU,KAAA;EAC3C,CAAC;EACD,MAAM,OAAO,cAAc,QAAQ,GAAG;EACtC,OAAO,QAAQ,WAAW,MACtB,EAAE,KAAK,MAAM,GAAG,IAChB,EAAE,KAAK,MAAM,KAAK,EAChB,UAAU,oBAAoB,KAAK,UAAU,MAAM,GAAG,kBACxD,CAAC;CACP,CAAC;AACH;;AAGA,SAAS,uBAAuB,KAAwB;CACtD,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,EAAE,WAAW,EAAE,IAAI,MAAM,OAAO;EACtC,MAAM,EAAE,MAAM,YAAY,MAAM,eAAe,GAAG,IAAI;EACtD,MAAM,MAAM,MAAM,IAAI,aAAa,KAAK,EAAE,CAAC,CAAC,UAAU,QAAQ,IAAI,UAAU,KAAK;EACjF,OAAO,MACH,EAAE,KAAK,cAAc,MAAM,QAAQ,MAAM,GAAG,CAAC,GAAG,GAAG,IACnDA,SAAc,iDAAiD;CACrE,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,EAAE,MAAM,YAAY,MAAM,qBAAqB,GAAG,IAAI;EAC5D,MAAM,SAAS,KAAK,UAAU;EAC9B,MAAM,UAAU,MAAM,cAAc,MAAM,SAAS,QAAQ,EAAE,OAAO,KAAK,SAAS,MAAM,CAAC;EACzF,IAAI,CAAC,SACH,SAAS,KAAK,wCAAwC;EAExD,MAAM,OAAO,cAAc,QAAQ,GAAG;EACtC,OAAO,QAAQ,WAAW,MACtB,EAAE,KAAK,MAAM,GAAG,IAChB,EAAE,KAAK,MAAM,KAAK,EAChB,UAAU,oBAAoB,KAAK,0BAA0B,SAC/D,CAAC;CACP,CAAC;AACH;;AAGA,SAAgB,iBAAiB,KAAwB;CACvD,sBAAsB,GAAG;CACzB,uBAAuB,GAAG;AAC5B"}

package/dist/routers/labels.mjs

@@ -7,7 +7,7 @@ import { labelTypeCreateSchema, labelTypeSchema, labelTypeUpdateSchema, notFound
 import { createRoute, z } from "@hono/zod-openapi";
 import { LabelModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/labels.ts
+// src/routers/labels.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -112,7 +112,6 @@ function registerLabels(app) {
 		}
 	});
 }
-//#endregion
 export { registerLabels };
 
 //# sourceMappingURL=labels.mjs.map

package/dist/routers/links.handlers.mjs

@@ -0,0 +1,79 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { catalogOf, getStore } from "../store.mjs";
+import { resolveAuthorizedProject } from "./helpers.mjs";
+import { BuildModel, PackageUsageModel, ProjectModel, SnapshotModel, matchUpstreamStory } from "@storyshelf/core/models";
+// src/routers/links.handlers.ts
+const VIEW_ROLES = [
+	"viewer",
+	"developer",
+	"approver",
+	"admin"
+];
+/**
+* Upstream project resolved from its latest approved default build: its stories from the build's
+* snapshots when it has them, from its Storybook catalog otherwise (a hosting-only build).
+*/
+async function resolveUpstream(upstream) {
+	const build = await new BuildModel(getStore().db).latestApprovedDefault(upstream);
+	const stories = (build ? await new SnapshotModel(getStore().db).listByBuild(build.id) : []).flatMap((snapshot) => snapshot.storyImportPath ? [{
+		importPath: snapshot.storyImportPath,
+		storyId: snapshot.storyId
+	}] : []);
+	return {
+		slug: upstream.slug,
+		buildId: build?.id ?? null,
+		stories: stories.length > 0 || !build ? stories : await catalogStories(upstream, build.id)
+	};
+}
+async function catalogStories(upstream, buildId) {
+	return ((await catalogOf().load(upstream.id, buildId).catch(() => null))?.entries ?? []).flatMap((entry) => entry.type === "story" && entry.importPath ? [{
+		importPath: entry.importPath,
+		storyId: entry.id
+	}] : []);
+}
+/** Resolve each linked package once; upstreams the viewer cannot open are omitted. */
+async function resolveLinkedUpstreams(c, project, packages) {
+	const links = (await new PackageUsageModel(getStore().db).listLinks(project.id)).filter((link) => packages.has(link.packageName));
+	const resolved = await Promise.all(links.map(async (link) => {
+		const upstream = await new ProjectModel(getStore().db).get(link.upstreamId);
+		const visible = upstream ? await resolveAuthorizedProject(c, upstream.slug, ...VIEW_ROLES).catch(() => null) : null;
+		return upstream && visible ? [link.packageName, await resolveUpstream(upstream)] : null;
+	}));
+	return new Map(resolved.filter((entry) => entry !== null));
+}
+/**
+* Linked-package usage grouped by story file, resolved with one pass over the
+* build's usage rows and one lookup per linked upstream (never per story).
+* Omits upstreams the viewer cannot open; pass `storyImportPath` to narrow to one story.
+*/
+async function linkedUsageByStory(c, project, buildId, storyImportPath) {
+	const model = new PackageUsageModel(getStore().db);
+	const rows = storyImportPath ? await model.listForStory(buildId, storyImportPath) : await model.listForBuild(buildId);
+	const upstreams = await resolveLinkedUpstreams(c, project, new Set(rows.map((row) => row.packageName)));
+	const byStory = /* @__PURE__ */ new Map();
+	for (const row of rows) {
+		const upstream = upstreams.get(row.packageName);
+		if (upstream) {
+			const upstreamStoryId = matchUpstreamStory(row.modulePath, upstream.stories);
+			byStory.set(row.storyImportPath, [...byStory.get(row.storyImportPath) ?? [], {
+				package: row.packageName,
+				version: row.version,
+				upstreamSlug: upstream.slug,
+				upstreamBuildId: upstream.buildId,
+				upstreamStoryId,
+				upstreamImportPath: upstream.stories.find((story) => story.storyId === upstreamStoryId)?.importPath ?? null
+			}]);
+		}
+	}
+	return byStory;
+}
+/** Linked-package usage of one story, omitting upstreams the viewer cannot open. */
+async function linkedUsageFor(c, project, buildId, storyImportPath) {
+	if (!storyImportPath) return [];
+	return (await linkedUsageByStory(c, project, buildId, storyImportPath)).get(storyImportPath) ?? [];
+}
+export { linkedUsageByStory, linkedUsageFor };
+
+//# sourceMappingURL=links.handlers.mjs.map

package/dist/routers/links.handlers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"links.handlers.mjs","names":[],"sources":["../../src/routers/links.handlers.ts"],"sourcesContent":["import {\n  BuildModel,\n  matchUpstreamStory,\n  PackageUsageModel,\n  ProjectModel,\n  SnapshotModel,\n} from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { LinkedUsageItem } from \"../pages/build-diff-usage.tsx\";\nimport { catalogOf, getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\n\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n\ntype Caller = Parameters<typeof resolveAuthorizedProject>[0];\n\n/** What a link resolves to: the upstream project's latest published build and its stories. */\ninterface ResolvedUpstream {\n  slug: string;\n  buildId: string | null;\n  stories: { importPath: string; storyId: string }[];\n}\n\n/**\n * Upstream project resolved from its latest approved default build: its stories from the build's\n * snapshots when it has them, from its Storybook catalog otherwise (a hosting-only build).\n */\nasync function resolveUpstream(upstream: Project): Promise<ResolvedUpstream> {\n  const build = await new BuildModel(getStore().db).latestApprovedDefault(upstream);\n  const snapshots = build ? await new SnapshotModel(getStore().db).listByBuild(build.id) : [];\n  const stories = snapshots.flatMap((snapshot) =>\n    snapshot.storyImportPath\n      ? [{ importPath: snapshot.storyImportPath, storyId: snapshot.storyId }]\n      : [],\n  );\n  return {\n    slug: upstream.slug,\n    buildId: build?.id ?? null,\n    stories: stories.length > 0 || !build ? stories : await catalogStories(upstream, build.id),\n  };\n}\n\nasync function catalogStories(\n  upstream: Project,\n  buildId: string,\n): Promise<ResolvedUpstream[\"stories\"]> {\n  const catalog = await catalogOf()\n    .load(upstream.id, buildId)\n    .catch(() => null);\n  return (catalog?.entries ?? []).flatMap((entry) =>\n    entry.type === \"story\" && entry.importPath\n      ? [{ importPath: entry.importPath, storyId: entry.id }]\n      : [],\n  );\n}\n\n/** Resolve each linked package once; upstreams the viewer cannot open are omitted. */\nasync function resolveLinkedUpstreams(\n  c: Caller,\n  project: Project,\n  packages: Set<string>,\n): Promise<Map<string, ResolvedUpstream>> {\n  const links = (await new PackageUsageModel(getStore().db).listLinks(project.id)).filter((link) =>\n    packages.has(link.packageName),\n  );\n  const resolved = await Promise.all(\n    links.map(async (link) => {\n      const upstream = await new ProjectModel(getStore().db).get(link.upstreamId);\n      const visible = upstream\n        ? await resolveAuthorizedProject(c, upstream.slug, ...VIEW_ROLES).catch(() => null)\n        : null;\n      return upstream && visible\n        ? ([link.packageName, await resolveUpstream(upstream)] as const)\n        : null;\n    }),\n  );\n  return new Map(resolved.filter((entry) => entry !== null));\n}\n\n/**\n * Linked-package usage grouped by story file, resolved with one pass over the\n * build's usage rows and one lookup per linked upstream (never per story).\n * Omits upstreams the viewer cannot open; pass `storyImportPath` to narrow to one story.\n */\nexport async function linkedUsageByStory(\n  c: Caller,\n  project: Project,\n  buildId: string,\n  storyImportPath?: string,\n): Promise<Map<string, LinkedUsageItem[]>> {\n  const model = new PackageUsageModel(getStore().db);\n  const rows = storyImportPath\n    ? await model.listForStory(buildId, storyImportPath)\n    : await model.listForBuild(buildId);\n  const upstreams = await resolveLinkedUpstreams(\n    c,\n    project,\n    new Set(rows.map((row) => row.packageName)),\n  );\n  const byStory = new Map<string, LinkedUsageItem[]>();\n  for (const row of rows) {\n    const upstream = upstreams.get(row.packageName);\n    if (upstream) {\n      const upstreamStoryId = matchUpstreamStory(row.modulePath, upstream.stories);\n      byStory.set(row.storyImportPath, [\n        ...(byStory.get(row.storyImportPath) ?? []),\n        {\n          package: row.packageName,\n          version: row.version,\n          upstreamSlug: upstream.slug,\n          upstreamBuildId: upstream.buildId,\n          upstreamStoryId,\n          upstreamImportPath:\n            upstream.stories.find((story) => story.storyId === upstreamStoryId)?.importPath ?? null,\n        },\n      ]);\n    }\n  }\n  return byStory;\n}\n\n/** Linked-package usage of one story, omitting upstreams the viewer cannot open. */\nexport async function linkedUsageFor(\n  c: Caller,\n  project: Project,\n  buildId: string,\n  storyImportPath: string | null,\n): Promise<LinkedUsageItem[]> {\n  if (!storyImportPath) {\n    return [];\n  }\n  return (\n    (await linkedUsageByStory(c, project, buildId, storyImportPath)).get(storyImportPath) ?? []\n  );\n}\n"],"mappings":";;;;;;;AAaA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;;;;;AAetF,eAAe,gBAAgB,UAA8C;CAC3E,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,QAAQ;CAEhF,MAAM,WADY,QAAQ,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE,IAAI,CAAC,EAAA,CAChE,SAAS,aACjC,SAAS,kBACL,CAAC;EAAE,YAAY,SAAS;EAAiB,SAAS,SAAS;CAAQ,CAAC,IACpE,CAAC,CACP;CACA,OAAO;EACL,MAAM,SAAS;EACf,SAAS,OAAO,MAAM;EACtB,SAAS,QAAQ,SAAS,KAAK,CAAC,QAAQ,UAAU,MAAM,eAAe,UAAU,MAAM,EAAE;CAC3F;AACF;AAEA,eAAe,eACb,UACA,SACsC;CAItC,SAAQ,MAHc,UAAU,CAAC,CAC9B,KAAK,SAAS,IAAI,OAAO,CAAC,CAC1B,YAAY,IAAI,EAAA,EACF,WAAW,CAAC,EAAA,CAAG,SAAS,UACvC,MAAM,SAAS,WAAW,MAAM,aAC5B,CAAC;EAAE,YAAY,MAAM;EAAY,SAAS,MAAM;CAAG,CAAC,IACpD,CAAC,CACP;AACF;;AAGA,eAAe,uBACb,GACA,SACA,UACwC;CACxC,MAAM,SAAS,MAAM,IAAI,kBAAkB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,QAAQ,EAAE,EAAA,CAAG,QAAQ,SACvF,SAAS,IAAI,KAAK,WAAW,CAC/B;CACA,MAAM,WAAW,MAAM,QAAQ,IAC7B,MAAM,IAAI,OAAO,SAAS;EACxB,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,UAAU;EAC1E,MAAM,UAAU,WACZ,MAAM,yBAAyB,GAAG,SAAS,MAAM,GAAG,UAAU,CAAC,CAAC,YAAY,IAAI,IAChF;EACJ,OAAO,YAAY,UACd,CAAC,KAAK,aAAa,MAAM,gBAAgB,QAAQ,CAAC,IACnD;CACN,CAAC,CACH;CACA,OAAO,IAAI,IAAI,SAAS,QAAQ,UAAU,UAAU,IAAI,CAAC;AAC3D;;;;;;AAOA,eAAsB,mBACpB,GACA,SACA,SACA,iBACyC;CACzC,MAAM,QAAQ,IAAI,kBAAkB,SAAS,CAAC,CAAC,EAAE;CACjD,MAAM,OAAO,kBACT,MAAM,MAAM,aAAa,SAAS,eAAe,IACjD,MAAM,MAAM,aAAa,OAAO;CACpC,MAAM,YAAY,MAAM,uBACtB,GACA,SACA,IAAI,IAAI,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,CAC5C;CACA,MAAM,0BAAU,IAAI,IAA+B;CACnD,KAAK,MAAM,OAAO,MAAM;EACtB,MAAM,WAAW,UAAU,IAAI,IAAI,WAAW;EAC9C,IAAI,UAAU;GACZ,MAAM,kBAAkB,mBAAmB,IAAI,YAAY,SAAS,OAAO;GAC3E,QAAQ,IAAI,IAAI,iBAAiB,CAC/B,GAAI,QAAQ,IAAI,IAAI,eAAe,KAAK,CAAC,GACzC;IACE,SAAS,IAAI;IACb,SAAS,IAAI;IACb,cAAc,SAAS;IACvB,iBAAiB,SAAS;IAC1B;IACA,oBACE,SAAS,QAAQ,MAAM,UAAU,MAAM,YAAY,eAAe,CAAC,EAAE,cAAc;GACvF,CACF,CAAC;EACH;CACF;CACA,OAAO;AACT;;AAGA,eAAsB,eACpB,GACA,SACA,SACA,iBAC4B;CAC5B,IAAI,CAAC,iBACH,OAAO,CAAC;CAEV,QACG,MAAM,mBAAmB,GAAG,SAAS,SAAS,eAAe,EAAA,CAAG,IAAI,eAAe,KAAK,CAAC;AAE9F"}

package/dist/routers/links.mjs

@@ -0,0 +1,138 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { resolveAuthorizedProject } from "./helpers.mjs";
+import { badRequest, forbidden, notFound, unauthorized } from "./schemas.mjs";
+import { buildForProject, snapshotForBuild } from "./builds.handlers.mjs";
+import { linkedUsageFor } from "./links.handlers.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+import { PackageUsageModel, ProjectModel } from "@storyshelf/core/models";
+import { HTTPException } from "hono/http-exception";
+// src/routers/links.ts
+const VIEW_ROLES = [
+	"viewer",
+	"developer",
+	"approver",
+	"admin"
+];
+const ADMIN_ROLES = ["admin"];
+const linkSchema = z.object({
+	package: z.string().min(1).max(214),
+	upstreamSlug: z.string().min(1)
+});
+const linksBodySchema = z.object({ links: z.array(linkSchema).max(200) });
+const usageItemSchema = z.object({
+	package: z.string(),
+	version: z.string().nullable(),
+	upstreamSlug: z.string(),
+	/** Latest approved default build of the upstream project; null when it has none. */
+	upstreamBuildId: z.string().nullable(),
+	/** Upstream story the package module maps to; null falls back to the library. */
+	upstreamStoryId: z.string().nullable(),
+	/** Story file of the matched upstream story; null when nothing matched. */
+	upstreamImportPath: z.string().nullable().optional()
+});
+const projectParams = z.object({ slug: z.string() });
+const listLinksRoute = createRoute({
+	method: "get",
+	tags: ["Links"],
+	summary: "List the packages this project consumes from other projects",
+	path: "/api/v1/projects/{slug}/links",
+	request: { params: projectParams },
+	responses: {
+		200: {
+			content: { "application/json": { schema: linksBodySchema } },
+			description: "Package links of the project"
+		},
+		...notFound,
+		...unauthorized
+	}
+});
+const putLinksRoute = createRoute({
+	method: "put",
+	tags: ["Links"],
+	summary: "Replace the packages this project consumes from other projects",
+	path: "/api/v1/projects/{slug}/links",
+	request: {
+		params: projectParams,
+		body: { content: { "application/json": { schema: linksBodySchema } } }
+	},
+	responses: {
+		200: {
+			content: { "application/json": { schema: linksBodySchema } },
+			description: "Links replaced"
+		},
+		...badRequest,
+		...forbidden,
+		...notFound
+	}
+});
+const usageRoute = createRoute({
+	method: "get",
+	tags: ["Links"],
+	summary: "Linked packages a snapshot's story uses",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/usage",
+	request: { params: z.object({
+		slug: z.string(),
+		buildId: z.string(),
+		snapshotId: z.string()
+	}) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: usageItemSchema.array() } },
+			description: "Usage of linked packages; empty when the build reported none"
+		},
+		...notFound,
+		...unauthorized
+	}
+});
+/** Resolve link slugs to projects, rejecting unknown, self, duplicate, or unviewable ones. */
+async function resolveLinkTargets(c, project, links) {
+	if (new Set(links.map((link) => link.package)).size !== links.length) throw new HTTPException(400, { message: "Each package can be linked once" });
+	return await Promise.all(links.map(async (link) => {
+		if (link.upstreamSlug === project.slug) throw new HTTPException(400, { message: "A project cannot link to itself" });
+		return {
+			upstreamId: (await resolveAuthorizedProject(c, link.upstreamSlug, ...VIEW_ROLES).catch(() => {
+				throw new HTTPException(400, { message: `Unknown project: ${link.upstreamSlug}` });
+			})).id,
+			packageName: link.package
+		};
+	}));
+}
+/** Links of a project as API shape, dropping upstreams that no longer exist. */
+async function linkViews(project) {
+	const db = getStore().db;
+	const links = await new PackageUsageModel(db).listLinks(project.id);
+	return (await Promise.all(links.map(async (link) => {
+		const upstream = await new ProjectModel(db).get(link.upstreamId);
+		return upstream ? {
+			package: link.packageName,
+			upstreamSlug: upstream.slug
+		} : null;
+	}))).filter((view) => view !== null);
+}
+/** Register the package-link and snapshot-usage endpoints. */
+function registerLinks(app) {
+	app.openapi(listLinksRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...VIEW_ROLES);
+		return c.json({ links: await linkViews(project) });
+	});
+	app.openapi(putLinksRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const { links } = c.req.valid("json");
+		const targets = await resolveLinkTargets(c, project, links);
+		await new PackageUsageModel(getStore().db).replaceLinks(project.id, targets);
+		return c.json({ links: await linkViews(project) });
+	});
+	app.openapi(usageRoute, async (c) => {
+		const { slug, buildId, snapshotId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		const snapshot = await snapshotForBuild(build, snapshotId);
+		return c.json(await linkedUsageFor(c, project, build.id, snapshot.storyImportPath));
+	});
+}
+export { registerLinks };
+
+//# sourceMappingURL=links.mjs.map

package/dist/routers/links.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"links.mjs","names":[],"sources":["../../src/routers/links.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { PackageUsageModel, ProjectModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { buildForProject, snapshotForBuild } from \"./builds.handlers.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { linkedUsageFor } from \"./links.handlers.ts\";\nimport { badRequest, forbidden, notFound, unauthorized } from \"./schemas.ts\";\n\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst linkSchema = z.object({\n  package: z.string().min(1).max(214),\n  upstreamSlug: z.string().min(1),\n});\nconst linksBodySchema = z.object({ links: z.array(linkSchema).max(200) });\nconst usageItemSchema = z.object({\n  package: z.string(),\n  version: z.string().nullable(),\n  upstreamSlug: z.string(),\n  /** Latest approved default build of the upstream project; null when it has none. */\n  upstreamBuildId: z.string().nullable(),\n  /** Upstream story the package module maps to; null falls back to the library. */\n  upstreamStoryId: z.string().nullable(),\n  /** Story file of the matched upstream story; null when nothing matched. */\n  upstreamImportPath: z.string().nullable().optional(),\n});\n\nconst projectParams = z.object({ slug: z.string() });\n\nconst listLinksRoute = createRoute({\n  method: \"get\",\n  tags: [\"Links\"],\n  summary: \"List the packages this project consumes from other projects\",\n  path: \"/api/v1/projects/{slug}/links\",\n  request: { params: projectParams },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: linksBodySchema } },\n      description: \"Package links of the project\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst putLinksRoute = createRoute({\n  method: \"put\",\n  tags: [\"Links\"],\n  summary: \"Replace the packages this project consumes from other projects\",\n  path: \"/api/v1/projects/{slug}/links\",\n  request: {\n    params: projectParams,\n    body: { content: { \"application/json\": { schema: linksBodySchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: linksBodySchema } },\n      description: \"Links replaced\",\n    },\n    ...badRequest,\n    ...forbidden,\n    ...notFound,\n  },\n});\n\nconst usageRoute = createRoute({\n  method: \"get\",\n  tags: [\"Links\"],\n  summary: \"Linked packages a snapshot's story uses\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/usage\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: usageItemSchema.array() } },\n      description: \"Usage of linked packages; empty when the build reported none\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\n/** Resolve link slugs to projects, rejecting unknown, self, duplicate, or unviewable ones. */\nasync function resolveLinkTargets(\n  c: Parameters<typeof resolveAuthorizedProject>[0],\n  project: Project,\n  links: z.infer<typeof linkSchema>[],\n): Promise<{ upstreamId: string; packageName: string }[]> {\n  if (new Set(links.map((link) => link.package)).size !== links.length) {\n    throw new HTTPException(400, { message: \"Each package can be linked once\" });\n  }\n  return await Promise.all(\n    links.map(async (link) => {\n      if (link.upstreamSlug === project.slug) {\n        throw new HTTPException(400, { message: \"A project cannot link to itself\" });\n      }\n      const upstream = await resolveAuthorizedProject(c, link.upstreamSlug, ...VIEW_ROLES).catch(\n        () => {\n          throw new HTTPException(400, { message: `Unknown project: ${link.upstreamSlug}` });\n        },\n      );\n      return { upstreamId: upstream.id, packageName: link.package };\n    }),\n  );\n}\n\n/** Links of a project as API shape, dropping upstreams that no longer exist. */\nasync function linkViews(project: Project): Promise<z.infer<typeof linkSchema>[]> {\n  const db = getStore().db;\n  const links = await new PackageUsageModel(db).listLinks(project.id);\n  const views = await Promise.all(\n    links.map(async (link) => {\n      const upstream = await new ProjectModel(db).get(link.upstreamId);\n      return upstream ? { package: link.packageName, upstreamSlug: upstream.slug } : null;\n    }),\n  );\n  return views.filter((view): view is z.infer<typeof linkSchema> => view !== null);\n}\n\n/** Register the package-link and snapshot-usage endpoints. */\nexport function registerLinks(app: ShelfRouter): void {\n  app.openapi(listLinksRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    return c.json({ links: await linkViews(project) });\n  });\n\n  app.openapi(putLinksRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const { links } = c.req.valid(\"json\");\n    const targets = await resolveLinkTargets(c, project, links);\n    await new PackageUsageModel(getStore().db).replaceLinks(project.id, targets);\n    return c.json({ links: await linkViews(project) });\n  });\n\n  app.openapi(usageRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshot = await snapshotForBuild(build, snapshotId);\n    return c.json(await linkedUsageFor(c, project, build.id, snapshot.storyImportPath));\n  });\n}\n"],"mappings":";;;;;;;;;;;;AAYA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AACtF,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,aAAa,EAAE,OAAO;CAC1B,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAClC,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;AAChC,CAAC;AACD,MAAM,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AACxE,MAAM,kBAAkB,EAAE,OAAO;CAC/B,SAAS,EAAE,OAAO;CAClB,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,cAAc,EAAE,OAAO;;CAEvB,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS;;CAErC,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS;;CAErC,oBAAoB,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AACrD,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAEnD,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,OAAO;CACd,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,cAAc;CACjC,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE;GAC3D,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM,CAAC,OAAO;CACd,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ;EACR,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE,EAAE;CACvE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE;GAC3D,aAAa;EACf;EACA,GAAG;EACH,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,aAAa,YAAY;CAC7B,QAAQ;CACR,MAAM,CAAC,OAAO;CACd,SAAS;CACT,MAAM;CACN,SAAS,EACP,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EACpF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,MAAM,EAAE,EAAE;GACnE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;;AAGD,eAAe,mBACb,GACA,SACA,OACwD;CACxD,IAAI,IAAI,IAAI,MAAM,KAAK,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,MAAM,QAC5D,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,kCAAkC,CAAC;CAE7E,OAAO,MAAM,QAAQ,IACnB,MAAM,IAAI,OAAO,SAAS;EACxB,IAAI,KAAK,iBAAiB,QAAQ,MAChC,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,kCAAkC,CAAC;EAO7E,OAAO;GAAE,aAAY,MALE,yBAAyB,GAAG,KAAK,cAAc,GAAG,UAAU,CAAC,CAAC,YAC7E;IACJ,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,oBAAoB,KAAK,eAAe,CAAC;GACnF,CACF,EAAA,CAC8B;GAAI,aAAa,KAAK;EAAQ;CAC9D,CAAC,CACH;AACF;;AAGA,eAAe,UAAU,SAAyD;CAChF,MAAM,KAAK,SAAS,CAAC,CAAC;CACtB,MAAM,QAAQ,MAAM,IAAI,kBAAkB,EAAE,CAAC,CAAC,UAAU,QAAQ,EAAE;CAOlE,QAAO,MANa,QAAQ,IAC1B,MAAM,IAAI,OAAO,SAAS;EACxB,MAAM,WAAW,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,KAAK,UAAU;EAC/D,OAAO,WAAW;GAAE,SAAS,KAAK;GAAa,cAAc,SAAS;EAAK,IAAI;CACjF,CAAC,CACH,EAAA,CACa,QAAQ,SAA6C,SAAS,IAAI;AACjF;;AAGA,SAAgB,cAAc,KAAwB;CACpD,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,UAAU,OAAO,EAAE,CAAC;CACnD,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,MAAM;EACpC,MAAM,UAAU,MAAM,mBAAmB,GAAG,SAAS,KAAK;EAC1D,MAAM,IAAI,kBAAkB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,QAAQ,IAAI,OAAO;EAC3E,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,UAAU,OAAO,EAAE,CAAC;CACnD,CAAC;CAED,IAAI,QAAQ,YAAY,OAAO,MAAM;EACnC,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,MAAM,iBAAiB,OAAO,UAAU;EACzD,OAAO,EAAE,KAAK,MAAM,eAAe,GAAG,SAAS,MAAM,IAAI,SAAS,eAAe,CAAC;CACpF,CAAC;AACH"}