@storyshelf/app 0.6.2 → 0.8.0

package/dist/routers/media.mjs

@@ -1,10 +1,12 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { credentialKeys } from "../credential-keys.mjs";
 import { getStore } from "../store.mjs";
 import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
-import { BaselineModel, BuildModel, SnapshotModel } from "@storyshelf/core/models";
-//#region src/routers/media.ts
+import { readComparisonImage, validFrozenReference } from "./comparison-image.mjs";
+import { BaselineModel, BuildModel, DesignCredentialModel, DesignNodeModel, SnapshotModel, baselineStatus } from "@storyshelf/core/models";
+// src/routers/media.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -12,12 +14,14 @@ const VIEW_ROLES = [
 	"admin"
 ];
 const PNG = "image/png";
-function imageResponse(buffer) {
+function imageResponse(buffer, cacheControl = "private, max-age=3600") {
 	return new Response(new Uint8Array(buffer), { headers: {
 		"content-type": PNG,
-		"cache-control": "private, max-age=3600"
+		"cache-control": cacheControl
 	} });
 }
+/** Design renders are addressed by file version (`?v=`): immutable once the version matches the row. */
+const RENDER_IMMUTABLE = "private, max-age=31536000, immutable";
 /** Register the PNG image, diff, and baseline media endpoints for snapshots. */
 function registerMedia(app) {
 	app.get("/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image", async (c) => {
@@ -31,15 +35,35 @@ function registerMedia(app) {
 		if (!snapshot.diffPath) notFound("No diff for this snapshot");
 		return imageResponse(await getStore().storage.read(snapshot.diffPath));
 	});
+	app.get("/api/v1/projects/:slug/design/renders/:renderId", async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.param("slug"), ...VIEW_ROLES);
+		const { db, config, storage, design } = getStore();
+		const credentials = new DesignCredentialModel(db, credentialKeys(config));
+		const nodes = new DesignNodeModel(db, credentials, design, { storage });
+		const found = await nodes.get(project.id, c.req.param("renderId"));
+		const node = found && (found.viewerId === "" || found.viewerId === getStore().user?.id) ? found : null;
+		const png = node ? await nodes.readRender(node) : null;
+		if (!png) notFound("No design render");
+		return imageResponse(png, node?.renderVersion && c.req.query("v") === node.renderVersion ? RENDER_IMMUTABLE : void 0);
+	});
 	app.get("/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline", async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.param("slug"), ...VIEW_ROLES);
 		const snapshot = await findSnapshot(c.req.param("buildId"), c.req.param("snapshotId"), project.id);
 		const build = await new BuildModel(getStore().db).get(snapshot.buildId);
 		if (!build) notFound("Build not found");
+		if (c.req.query("reference") !== "default" && (snapshot.comparisonImagePath || snapshot.comparisonMetadata)) {
+			const frozen = validFrozenReference(snapshot, project.id, build.id);
+			if (!frozen) notFound("Original baseline is unavailable");
+			const image = await readComparisonImage(frozen.path, frozen.reference.imageSha256);
+			if (!image) notFound("Original baseline image is unavailable");
+			return imageResponse(image, "private, no-store");
+		}
 		const baselines = new BaselineModel(getStore().db, void 0, getStore().storage);
-		const baseline = await baselines.resolve(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, project.gitDefaultBranch);
+		const baseline = c.req.query("reference") === "default" ? await baselines.getFor(project.id, snapshot.storyId, snapshot.viewportName, project.gitDefaultBranch, snapshot.browser) : await baselines.resolve(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, project.gitDefaultBranch, snapshot.browser);
+		if (c.req.query("reference") === "default" && (baseline?.id !== c.req.query("id") || baseline?.updatedAt !== c.req.query("version"))) notFound("Default baseline changed; reload the comparison");
 		if (!baseline) notFound("No baseline for this snapshot");
-		return imageResponse(await baselines.read(baseline));
+		if (c.req.query("reference") !== "default" && snapshot.baselineVersion !== null && baselineStatus(snapshot, baseline) !== "current") notFound("Original baseline is no longer available");
+		return imageResponse(await baselines.read(baseline), "private, no-store");
 	});
 }
 async function findSnapshot(buildId, snapshotId, projectId) {
@@ -47,7 +71,6 @@ async function findSnapshot(buildId, snapshotId, projectId) {
 	if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) notFound("Snapshot not found");
 	return snapshot;
 }
-//#endregion
 export { registerMedia };
 
 //# sourceMappingURL=media.mjs.map

package/dist/routers/media.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"media.mjs","names":[],"sources":["../../src/routers/media.ts"],"sourcesContent":["import { BaselineModel } from \"@storyshelf/core/models\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Snapshot } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { notFound, resolveAuthorizedProject } from \"./helpers.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n\nconst PNG = \"image/png\";\n\nfunction imageResponse(buffer: Buffer): Response {\n  return new Response(new Uint8Array(buffer), {\n    headers: { \"content-type\": PNG, \"cache-control\": \"private, max-age=3600\" },\n  });\n}\n\n/** Register the PNG image, diff, and baseline media endpoints for snapshots. */\nexport function registerMedia(app: ShelfRouter): void {\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    return imageResponse(await getStore().storage.read(snapshot.screenshotPath));\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/diff\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    if (!snapshot.diffPath) {\n      notFound(\"No diff for this snapshot\");\n    }\n    return imageResponse(await getStore().storage.read(snapshot.diffPath));\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    const build = await new BuildModel(getStore().db).get(snapshot.buildId);\n    if (!build) {\n      notFound(\"Build not found\");\n    }\n    const baselines = new BaselineModel(getStore().db, undefined, getStore().storage);\n    const baseline = await baselines.resolve(\n      project.id,\n      snapshot.storyId,\n      snapshot.viewportName,\n      build.gitBranch,\n      project.gitDefaultBranch,\n    );\n    if (!baseline) {\n      notFound(\"No baseline for this snapshot\");\n    }\n    return imageResponse(await baselines.read(baseline));\n  });\n}\n\nasync function findSnapshot(\n  buildId: string,\n  snapshotId: string,\n  projectId: string,\n): Promise<Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n"],"mappings":";;;;;;;AAQA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AAEtF,MAAM,MAAM;AAEZ,SAAS,cAAc,QAA0B;CAC/C,OAAO,IAAI,SAAS,IAAI,WAAW,MAAM,GAAG,EAC1C,SAAS;EAAE,gBAAgB;EAAK,iBAAiB;CAAwB,EAC3E,CAAC;AACH;;AAGA,SAAgB,cAAc,KAAwB;CACpD,IAAI,IAAI,sEAAsE,OAAO,MAAM;EACzF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,cAAc,CAAC;CAC7E,CAAC;CAED,IAAI,IAAI,qEAAqE,OAAO,MAAM;EACxF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,IAAI,CAAC,SAAS,UACZ,SAAS,2BAA2B;EAEtC,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,QAAQ,CAAC;CACvE,CAAC;CAED,IAAI,IAAI,yEAAyE,OAAO,MAAM;EAC5F,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;EACtE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,IAAI,KAAA,GAAW,SAAS,CAAC,CAAC,OAAO;EAChF,MAAM,WAAW,MAAM,UAAU,QAC/B,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,gBACV;EACA,IAAI,CAAC,UACH,SAAS,+BAA+B;EAE1C,OAAO,cAAc,MAAM,UAAU,KAAK,QAAQ,CAAC;CACrD,CAAC;AACH;AAEA,eAAe,aACb,SACA,YACA,WACmB;CACnB,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,WAAW,SAAS,cAAc,WACtE,SAAS,oBAAoB;CAE/B,OAAO;AACT"}
+{"version":3,"file":"media.mjs","names":[],"sources":["../../src/routers/media.ts"],"sourcesContent":["import {\n  BaselineModel,\n  DesignCredentialModel,\n  DesignNodeModel,\n  baselineStatus,\n} from \"@storyshelf/core/models\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Snapshot } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { readComparisonImage, validFrozenReference } from \"./comparison-image.ts\";\nimport { notFound, resolveAuthorizedProject } from \"./helpers.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n\nconst PNG = \"image/png\";\n\nfunction imageResponse(buffer: Buffer, cacheControl = \"private, max-age=3600\"): Response {\n  return new Response(new Uint8Array(buffer), {\n    headers: { \"content-type\": PNG, \"cache-control\": cacheControl },\n  });\n}\n\n/** Design renders are addressed by file version (`?v=`): immutable once the version matches the row. */\nconst RENDER_IMMUTABLE = \"private, max-age=31536000, immutable\";\n\n/** Register the PNG image, diff, and baseline media endpoints for snapshots. */\nexport function registerMedia(app: ShelfRouter): void {\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    return imageResponse(await getStore().storage.read(snapshot.screenshotPath));\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/diff\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    if (!snapshot.diffPath) {\n      notFound(\"No diff for this snapshot\");\n    }\n    return imageResponse(await getStore().storage.read(snapshot.diffPath));\n  });\n\n  // `:renderId` is the internal design_nodes row id (a ULID), not a provider node id.\n  app.get(\"/api/v1/projects/:slug/design/renders/:renderId\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const { db, config, storage, design } = getStore();\n    const credentials = new DesignCredentialModel(db, credentialKeys(config));\n    const nodes = new DesignNodeModel(db, credentials, design, { storage });\n    const found = await nodes.get(project.id, c.req.param(\"renderId\"));\n    // A render fetched with a member's own connection is theirs alone (it may show files others cannot open).\n    const node =\n      found && (found.viewerId === \"\" || found.viewerId === getStore().user?.id) ? found : null;\n    const png = node ? await nodes.readRender(node) : null;\n    if (!png) {\n      notFound(\"No design render\");\n    }\n    const versioned = node?.renderVersion && c.req.query(\"v\") === node.renderVersion;\n    return imageResponse(png, versioned ? RENDER_IMMUTABLE : undefined);\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    const build = await new BuildModel(getStore().db).get(snapshot.buildId);\n    if (!build) {\n      notFound(\"Build not found\");\n    }\n    if (\n      c.req.query(\"reference\") !== \"default\" &&\n      (snapshot.comparisonImagePath || snapshot.comparisonMetadata)\n    ) {\n      const frozen = validFrozenReference(snapshot, project.id, build.id);\n      if (!frozen) {\n        notFound(\"Original baseline is unavailable\");\n      }\n      const image = await readComparisonImage(frozen.path, frozen.reference.imageSha256);\n      if (!image) {\n        notFound(\"Original baseline image is unavailable\");\n      }\n      return imageResponse(image, \"private, no-store\");\n    }\n    const baselines = new BaselineModel(getStore().db, undefined, getStore().storage);\n    const baseline =\n      c.req.query(\"reference\") === \"default\"\n        ? await baselines.getFor(\n            project.id,\n            snapshot.storyId,\n            snapshot.viewportName,\n            project.gitDefaultBranch,\n            snapshot.browser,\n          )\n        : await baselines.resolve(\n            project.id,\n            snapshot.storyId,\n            snapshot.viewportName,\n            build.gitBranch,\n            project.gitDefaultBranch,\n            snapshot.browser,\n          );\n    if (\n      c.req.query(\"reference\") === \"default\" &&\n      (baseline?.id !== c.req.query(\"id\") || baseline?.updatedAt !== c.req.query(\"version\"))\n    ) {\n      notFound(\"Default baseline changed; reload the comparison\");\n    }\n    if (!baseline) {\n      notFound(\"No baseline for this snapshot\");\n    }\n    if (\n      c.req.query(\"reference\") !== \"default\" &&\n      snapshot.baselineVersion !== null &&\n      baselineStatus(snapshot, baseline) !== \"current\"\n    ) {\n      notFound(\"Original baseline is no longer available\");\n    }\n    return imageResponse(await baselines.read(baseline), \"private, no-store\");\n  });\n}\n\nasync function findSnapshot(\n  buildId: string,\n  snapshotId: string,\n  projectId: string,\n): Promise<Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n"],"mappings":";;;;;;;;;AAeA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AAEtF,MAAM,MAAM;AAEZ,SAAS,cAAc,QAAgB,eAAe,yBAAmC;CACvF,OAAO,IAAI,SAAS,IAAI,WAAW,MAAM,GAAG,EAC1C,SAAS;EAAE,gBAAgB;EAAK,iBAAiB;CAAa,EAChE,CAAC;AACH;;AAGA,MAAM,mBAAmB;;AAGzB,SAAgB,cAAc,KAAwB;CACpD,IAAI,IAAI,sEAAsE,OAAO,MAAM;EACzF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,cAAc,CAAC;CAC7E,CAAC;CAED,IAAI,IAAI,qEAAqE,OAAO,MAAM;EACxF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,IAAI,CAAC,SAAS,UACZ,SAAS,2BAA2B;EAEtC,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,QAAQ,CAAC;CACvE,CAAC;CAGD,IAAI,IAAI,mDAAmD,OAAO,MAAM;EACtE,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,EAAE,IAAI,QAAQ,SAAS,WAAW,SAAS;EACjD,MAAM,cAAc,IAAI,sBAAsB,IAAI,eAAe,MAAM,CAAC;EACxE,MAAM,QAAQ,IAAI,gBAAgB,IAAI,aAAa,QAAQ,EAAE,QAAQ,CAAC;EACtE,MAAM,QAAQ,MAAM,MAAM,IAAI,QAAQ,IAAI,EAAE,IAAI,MAAM,UAAU,CAAC;EAEjE,MAAM,OACJ,UAAU,MAAM,aAAa,MAAM,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,MAAM,QAAQ;EACvF,MAAM,MAAM,OAAO,MAAM,MAAM,WAAW,IAAI,IAAI;EAClD,IAAI,CAAC,KACH,SAAS,kBAAkB;EAG7B,OAAO,cAAc,KADH,MAAM,iBAAiB,EAAE,IAAI,MAAM,GAAG,MAAM,KAAK,gBAC7B,mBAAmB,KAAA,CAAS;CACpE,CAAC;CAED,IAAI,IAAI,yEAAyE,OAAO,MAAM;EAC5F,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;EACtE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,IACE,EAAE,IAAI,MAAM,WAAW,MAAM,cAC5B,SAAS,uBAAuB,SAAS,qBAC1C;GACA,MAAM,SAAS,qBAAqB,UAAU,QAAQ,IAAI,MAAM,EAAE;GAClE,IAAI,CAAC,QACH,SAAS,kCAAkC;GAE7C,MAAM,QAAQ,MAAM,oBAAoB,OAAO,MAAM,OAAO,UAAU,WAAW;GACjF,IAAI,CAAC,OACH,SAAS,wCAAwC;GAEnD,OAAO,cAAc,OAAO,mBAAmB;EACjD;EACA,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,IAAI,KAAA,GAAW,SAAS,CAAC,CAAC,OAAO;EAChF,MAAM,WACJ,EAAE,IAAI,MAAM,WAAW,MAAM,YACzB,MAAM,UAAU,OACd,QAAQ,IACR,SAAS,SACT,SAAS,cACT,QAAQ,kBACR,SAAS,OACX,IACA,MAAM,UAAU,QACd,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,kBACR,SAAS,OACX;EACN,IACE,EAAE,IAAI,MAAM,WAAW,MAAM,cAC5B,UAAU,OAAO,EAAE,IAAI,MAAM,IAAI,KAAK,UAAU,cAAc,EAAE,IAAI,MAAM,SAAS,IAEpF,SAAS,iDAAiD;EAE5D,IAAI,CAAC,UACH,SAAS,+BAA+B;EAE1C,IACE,EAAE,IAAI,MAAM,WAAW,MAAM,aAC7B,SAAS,oBAAoB,QAC7B,eAAe,UAAU,QAAQ,MAAM,WAEvC,SAAS,0CAA0C;EAErD,OAAO,cAAc,MAAM,UAAU,KAAK,QAAQ,GAAG,mBAAmB;CAC1E,CAAC;AACH;AAEA,eAAe,aACb,SACA,YACA,WACmB;CACnB,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,WAAW,SAAS,cAAc,WACtE,SAAS,oBAAoB;CAE/B,OAAO;AACT"}

package/dist/routers/members.mjs

@@ -7,7 +7,7 @@ import { groupMappingCreateSchema, groupMappingSchema, memberRoleSchema, memberS
 import { createRoute, z } from "@hono/zod-openapi";
 import { MemberModel, ProjectGroupMappingModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/members.ts
+// src/routers/members.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -161,7 +161,8 @@ function registerGroupMappingRoutes(app) {
 	app.openapi(createGroupMappingRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
 		const body = c.req.valid("json");
-		if (body.groupName.includes("*")) throw new HTTPException(400, { message: "Group names match exactly; wildcards are not expanded. A broad pattern can silently grant org-wide access." });
+		const inputError = ProjectGroupMappingModel.inputError(body.groupName, body.role);
+		if (inputError) throw new HTTPException(400, { message: inputError });
 		return c.json(await new ProjectGroupMappingModel(getStore().db).create(project.id, body.groupName, body.role), 201);
 	});
 	app.openapi(deleteGroupMappingRoute, async (c) => {
@@ -171,7 +172,6 @@ function registerGroupMappingRoutes(app) {
 		return c.body(null, 204);
 	});
 }
-//#endregion
 export { registerMembers };
 
 //# sourceMappingURL=members.mjs.map

package/dist/routers/members.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"members.mjs","names":[],"sources":["../../src/routers/members.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { MemberModel, ProjectGroupMappingModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  groupMappingCreateSchema,\n  groupMappingSchema,\n  memberRoleSchema,\n  memberSchema,\n  memberSetSchema,\n  notFound,\n  unauthorized,\n} from \"./schemas.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listMembersRoute = createRoute({\n  method: \"get\",\n  tags: [\"Members\"],\n  summary: \"List members\",\n  path: \"/api/v1/projects/{slug}/members\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: memberSchema.array() } },\n      description: \"List project members\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst setMemberRoute = createRoute({\n  method: \"post\",\n  tags: [\"Members\"],\n  summary: \"Add or update a member\",\n  path: \"/api/v1/projects/{slug}/members\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: memberSetSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: memberSchema } },\n      description: \"Added or updated member\",\n    },\n    ...notFound,\n  },\n});\n\nconst updateMemberRoute = createRoute({\n  method: \"patch\",\n  tags: [\"Members\"],\n  summary: \"Change a member's role\",\n  path: \"/api/v1/projects/{slug}/members/{userId}\",\n  request: {\n    params: z.object({ slug: z.string(), userId: z.string() }),\n    body: { content: { \"application/json\": { schema: memberRoleSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: memberSchema } },\n      description: \"Updated member role\",\n    },\n    ...notFound,\n  },\n});\n\nconst deleteMemberRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Members\"],\n  summary: \"Remove a member\",\n  path: \"/api/v1/projects/{slug}/members/{userId}\",\n  request: { params: z.object({ slug: z.string(), userId: z.string() }) },\n  responses: {\n    204: { description: \"Removed member\" },\n    ...notFound,\n  },\n});\n\nconst listGroupMappingsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Members\"],\n  summary: \"List group mappings\",\n  path: \"/api/v1/projects/{slug}/group-mappings\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: groupMappingSchema.array() } },\n      description: \"List identity-provider group mappings\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createGroupMappingRoute = createRoute({\n  method: \"post\",\n  tags: [\"Members\"],\n  summary: \"Create a group mapping\",\n  path: \"/api/v1/projects/{slug}/group-mappings\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: groupMappingCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: groupMappingSchema } },\n      description: \"Created group mapping (exact group-name match)\",\n    },\n    ...notFound,\n  },\n});\n\nconst deleteGroupMappingRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Members\"],\n  summary: \"Remove a group mapping\",\n  path: \"/api/v1/projects/{slug}/group-mappings/{mappingId}\",\n  request: { params: z.object({ slug: z.string(), mappingId: z.string() }) },\n  responses: {\n    204: { description: \"Removed group mapping\" },\n    ...notFound,\n  },\n});\n\n/** Register the project member list, upsert, and removal endpoints. */\nexport function registerMembers(app: ShelfRouter): void {\n  app.openapi(listMembersRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    return c.json(await new MemberModel(getStore().db).list(project.id));\n  });\n\n  app.openapi(setMemberRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    return c.json(\n      await new MemberModel(getStore().db).set(project.id, body.userId, body.role),\n      201,\n    );\n  });\n\n  app.openapi(updateMemberRoute, async (c) => {\n    const { slug, userId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    return c.json(await new MemberModel(getStore().db).set(project.id, userId, body.role));\n  });\n\n  app.openapi(deleteMemberRoute, async (c) => {\n    const { slug, userId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    await new MemberModel(getStore().db).remove(project.id, userId);\n    return c.body(null, 204);\n  });\n\n  registerGroupMappingRoutes(app);\n}\n\n/** Register identity-provider group mapping endpoints. */\nfunction registerGroupMappingRoutes(app: ShelfRouter): void {\n  app.openapi(listGroupMappingsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    return c.json(await new ProjectGroupMappingModel(getStore().db).list(project.id));\n  });\n\n  app.openapi(createGroupMappingRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    if (body.groupName.includes(\"*\")) {\n      throw new HTTPException(400, {\n        message:\n          \"Group names match exactly; wildcards are not expanded. A broad pattern can silently grant org-wide access.\",\n      });\n    }\n    return c.json(\n      await new ProjectGroupMappingModel(getStore().db).create(\n        project.id,\n        body.groupName,\n        body.role,\n      ),\n      201,\n    );\n  });\n\n  app.openapi(deleteGroupMappingRoute, async (c) => {\n    const { slug, mappingId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    await new ProjectGroupMappingModel(getStore().db).remove(project.id, mappingId);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAgBA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AACtF,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,aAAa,MAAM,EAAE,EAAE;GAChE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE,EAAE;CACvE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,aAAa,EAAE;GACxD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,QAAQ,EAAE,OAAO;EAAE,CAAC;EACzD,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,iBAAiB,EAAE,EAAE;CACxE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,aAAa,EAAE;GACxD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,QAAQ,EAAE,OAAO;CAAE,CAAC,EAAE;CACtE,WAAW;EACT,KAAK,EAAE,aAAa,iBAAiB;EACrC,GAAG;CACL;AACF,CAAC;AAED,MAAM,yBAAyB,YAAY;CACzC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE;GACtE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,0BAA0B,YAAY;CAC1C,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,yBAAyB,EAAE,EAAE;CAChF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,0BAA0B,YAAY;CAC1C,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,wBAAwB;EAC5C,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,gBAAgB,KAAwB;CACtD,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,OAAO,EAAE,KAAK,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;CACrE,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,OAAO,EAAE,KACP,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,KAAK,QAAQ,KAAK,IAAI,GAC3E,GACF;CACF,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,WAAW,EAAE,IAAI,MAAM,OAAO;EAC5C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,OAAO,EAAE,KAAK,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC;CACvF,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,WAAW,EAAE,IAAI,MAAM,OAAO;EAC5C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,MAAM;EAC9D,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;CAED,2BAA2B,GAAG;AAChC;;AAGA,SAAS,2BAA2B,KAAwB;CAC1D,IAAI,QAAQ,wBAAwB,OAAO,MAAM;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,OAAO,EAAE,KAAK,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;CAClF,CAAC;CAED,IAAI,QAAQ,yBAAyB,OAAO,MAAM;EAChD,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,IAAI,KAAK,UAAU,SAAS,GAAG,GAC7B,MAAM,IAAI,cAAc,KAAK,EAC3B,SACE,6GACJ,CAAC;EAEH,OAAO,EAAE,KACP,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAChD,QAAQ,IACR,KAAK,WACL,KAAK,IACP,GACA,GACF;CACF,CAAC;CAED,IAAI,QAAQ,yBAAyB,OAAO,MAAM;EAChD,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,SAAS;EAC9E,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}
+{"version":3,"file":"members.mjs","names":[],"sources":["../../src/routers/members.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { MemberModel, ProjectGroupMappingModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  groupMappingCreateSchema,\n  groupMappingSchema,\n  memberRoleSchema,\n  memberSchema,\n  memberSetSchema,\n  notFound,\n  unauthorized,\n} from \"./schemas.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listMembersRoute = createRoute({\n  method: \"get\",\n  tags: [\"Members\"],\n  summary: \"List members\",\n  path: \"/api/v1/projects/{slug}/members\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: memberSchema.array() } },\n      description: \"List project members\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst setMemberRoute = createRoute({\n  method: \"post\",\n  tags: [\"Members\"],\n  summary: \"Add or update a member\",\n  path: \"/api/v1/projects/{slug}/members\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: memberSetSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: memberSchema } },\n      description: \"Added or updated member\",\n    },\n    ...notFound,\n  },\n});\n\nconst updateMemberRoute = createRoute({\n  method: \"patch\",\n  tags: [\"Members\"],\n  summary: \"Change a member's role\",\n  path: \"/api/v1/projects/{slug}/members/{userId}\",\n  request: {\n    params: z.object({ slug: z.string(), userId: z.string() }),\n    body: { content: { \"application/json\": { schema: memberRoleSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: memberSchema } },\n      description: \"Updated member role\",\n    },\n    ...notFound,\n  },\n});\n\nconst deleteMemberRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Members\"],\n  summary: \"Remove a member\",\n  path: \"/api/v1/projects/{slug}/members/{userId}\",\n  request: { params: z.object({ slug: z.string(), userId: z.string() }) },\n  responses: {\n    204: { description: \"Removed member\" },\n    ...notFound,\n  },\n});\n\nconst listGroupMappingsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Members\"],\n  summary: \"List group mappings\",\n  path: \"/api/v1/projects/{slug}/group-mappings\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: groupMappingSchema.array() } },\n      description: \"List identity-provider group mappings\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createGroupMappingRoute = createRoute({\n  method: \"post\",\n  tags: [\"Members\"],\n  summary: \"Create a group mapping\",\n  path: \"/api/v1/projects/{slug}/group-mappings\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: groupMappingCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: groupMappingSchema } },\n      description: \"Created group mapping (exact group-name match)\",\n    },\n    ...notFound,\n  },\n});\n\nconst deleteGroupMappingRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Members\"],\n  summary: \"Remove a group mapping\",\n  path: \"/api/v1/projects/{slug}/group-mappings/{mappingId}\",\n  request: { params: z.object({ slug: z.string(), mappingId: z.string() }) },\n  responses: {\n    204: { description: \"Removed group mapping\" },\n    ...notFound,\n  },\n});\n\n/** Register the project member list, upsert, and removal endpoints. */\nexport function registerMembers(app: ShelfRouter): void {\n  app.openapi(listMembersRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    return c.json(await new MemberModel(getStore().db).list(project.id));\n  });\n\n  app.openapi(setMemberRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    return c.json(\n      await new MemberModel(getStore().db).set(project.id, body.userId, body.role),\n      201,\n    );\n  });\n\n  app.openapi(updateMemberRoute, async (c) => {\n    const { slug, userId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    return c.json(await new MemberModel(getStore().db).set(project.id, userId, body.role));\n  });\n\n  app.openapi(deleteMemberRoute, async (c) => {\n    const { slug, userId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    await new MemberModel(getStore().db).remove(project.id, userId);\n    return c.body(null, 204);\n  });\n\n  registerGroupMappingRoutes(app);\n}\n\n/** Register identity-provider group mapping endpoints. */\nfunction registerGroupMappingRoutes(app: ShelfRouter): void {\n  app.openapi(listGroupMappingsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    return c.json(await new ProjectGroupMappingModel(getStore().db).list(project.id));\n  });\n\n  app.openapi(createGroupMappingRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const inputError = ProjectGroupMappingModel.inputError(body.groupName, body.role);\n    if (inputError) {\n      throw new HTTPException(400, { message: inputError });\n    }\n    return c.json(\n      await new ProjectGroupMappingModel(getStore().db).create(\n        project.id,\n        body.groupName,\n        body.role,\n      ),\n      201,\n    );\n  });\n\n  app.openapi(deleteGroupMappingRoute, async (c) => {\n    const { slug, mappingId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    await new ProjectGroupMappingModel(getStore().db).remove(project.id, mappingId);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAgBA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AACtF,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,aAAa,MAAM,EAAE,EAAE;GAChE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE,EAAE;CACvE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,aAAa,EAAE;GACxD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,QAAQ,EAAE,OAAO;EAAE,CAAC;EACzD,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,iBAAiB,EAAE,EAAE;CACxE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,aAAa,EAAE;GACxD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,QAAQ,EAAE,OAAO;CAAE,CAAC,EAAE;CACtE,WAAW;EACT,KAAK,EAAE,aAAa,iBAAiB;EACrC,GAAG;CACL;AACF,CAAC;AAED,MAAM,yBAAyB,YAAY;CACzC,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE;GACtE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,0BAA0B,YAAY;CAC1C,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,yBAAyB,EAAE,EAAE;CAChF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,0BAA0B,YAAY;CAC1C,QAAQ;CACR,MAAM,CAAC,SAAS;CAChB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,wBAAwB;EAC5C,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,gBAAgB,KAAwB;CACtD,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,OAAO,EAAE,KAAK,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;CACrE,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,OAAO,EAAE,KACP,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,KAAK,QAAQ,KAAK,IAAI,GAC3E,GACF;CACF,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,WAAW,EAAE,IAAI,MAAM,OAAO;EAC5C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,OAAO,EAAE,KAAK,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC;CACvF,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,WAAW,EAAE,IAAI,MAAM,OAAO;EAC5C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,MAAM;EAC9D,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;CAED,2BAA2B,GAAG;AAChC;;AAGA,SAAS,2BAA2B,KAAwB;CAC1D,IAAI,QAAQ,wBAAwB,OAAO,MAAM;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,OAAO,EAAE,KAAK,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;CAClF,CAAC;CAED,IAAI,QAAQ,yBAAyB,OAAO,MAAM;EAChD,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,aAAa,yBAAyB,WAAW,KAAK,WAAW,KAAK,IAAI;EAChF,IAAI,YACF,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,WAAW,CAAC;EAEtD,OAAO,EAAE,KACP,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAChD,QAAQ,IACR,KAAK,WACL,KAAK,IACP,GACA,GACF;CACF,CAAC;CAED,IAAI,QAAQ,yBAAyB,OAAO,MAAM;EAChD,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,SAAS;EAC9E,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/notification-channels.mjs

@@ -1,13 +1,13 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { credentialKeys } from "../credential-keys.mjs";
 import { getStore } from "../store.mjs";
 import { notFound, requireSiteAdmin, resolveAuthorizedProject } from "./helpers.mjs";
 import { notFound as notFound$1, notificationChannelCreateSchema, notificationChannelSchema, unauthorized } from "./schemas.mjs";
+import { notificationChannelModel } from "./scoped-models.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { NotificationChannelModel } from "@storyshelf/core/models";
-//#region src/routers/notification-channels.ts
+// src/routers/notification-channels.ts
 const ADMIN_ROLES = ["admin"];
 /** Public channel view (secret redacted, config/events decoded). */
 function toPublic(row) {
@@ -19,24 +19,12 @@ function toPublic(row) {
 		hasSecret: row.secretEncrypted !== null,
 		events: NotificationChannelModel.eventsOf(row),
 		enabled: row.enabled,
+		lastError: row.lastError,
+		lastErrorAt: row.lastErrorAt,
 		createdAt: row.createdAt,
 		updatedAt: row.updatedAt
 	};
 }
-/** Validate channel input against the provider descriptor. */
-function validateChannelInput(provider, config) {
-	const descriptor = getStore().notifiers.find((candidate) => candidate.metadata.kind === provider);
-	if (!descriptor) return {
-		ok: false,
-		message: `Unknown provider: ${provider}`
-	};
-	const parsed = descriptor.metadata.schema.safeParse(config);
-	if (!parsed.success) return {
-		ok: false,
-		message: parsed.error.message
-	};
-	return { ok: true };
-}
 const listChannelsRoute = createRoute({
 	method: "get",
 	tags: ["Notifications"],
@@ -91,15 +79,18 @@ const deleteChannelRoute = createRoute({
 function registerNotificationChannels(app) {
 	app.openapi(listChannelsRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
-		const rows = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).list(project.id);
+		const rows = await notificationChannelModel().list(project.id);
 		return c.json(rows.map((row) => toPublic(row)));
 	});
 	app.openapi(createChannelRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
 		const body = c.req.valid("json");
-		const valid = validateChannelInput(body.provider, body.config);
+		const valid = NotificationChannelModel.validateInput(getStore().notifiers, body.provider, body.config, {
+			projectId: project.id,
+			hasSecret: body.secret !== void 0
+		});
 		if (!valid.ok) return c.json({ message: valid.message }, 400);
-		const row = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).create({
+		const row = await notificationChannelModel().create({
 			projectId: project.id,
 			...body
 		});
@@ -108,7 +99,7 @@ function registerNotificationChannels(app) {
 	app.openapi(deleteChannelRoute, async (c) => {
 		const { slug, channelId } = c.req.valid("param");
 		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
-		const model = new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config));
+		const model = notificationChannelModel();
 		if ((await model.get(channelId))?.projectId !== project.id) notFound("Notification channel not found");
 		await model.remove(channelId);
 		return c.body(null, 204);
@@ -161,15 +152,18 @@ const deleteSystemRoute = createRoute({
 function registerSystemChannels(app) {
 	app.openapi(listSystemRoute, async (c) => {
 		requireSiteAdmin(c);
-		const rows = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).listSystem();
+		const rows = await notificationChannelModel().listSystem();
 		return c.json(rows.map((row) => toPublic(row)));
 	});
 	app.openapi(createSystemRoute, async (c) => {
 		requireSiteAdmin(c);
 		const body = c.req.valid("json");
-		const valid = validateChannelInput(body.provider, body.config);
+		const valid = NotificationChannelModel.validateInput(getStore().notifiers, body.provider, body.config, {
+			projectId: null,
+			hasSecret: body.secret !== void 0
+		});
 		if (!valid.ok) return c.json({ message: valid.message }, 400);
-		const row = await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).create({
+		const row = await notificationChannelModel().create({
 			projectId: null,
 			...body
 		});
@@ -178,13 +172,12 @@ function registerSystemChannels(app) {
 	app.openapi(deleteSystemRoute, async (c) => {
 		requireSiteAdmin(c);
 		const { channelId } = c.req.valid("param");
-		const model = new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config));
+		const model = notificationChannelModel();
 		if ((await model.get(channelId))?.projectId !== null) notFound("Notification channel not found");
 		await model.remove(channelId);
 		return c.body(null, 204);
 	});
 }
-//#endregion
 export { registerNotificationChannels, registerSystemChannels };
 
 //# sourceMappingURL=notification-channels.mjs.map

package/dist/routers/notification-channels.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"notification-channels.mjs","names":["notFoundResponse"],"sources":["../../src/routers/notification-channels.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport type { NotificationChannelRow } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { notFound, requireSiteAdmin, resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  notificationChannelCreateSchema,\n  notificationChannelSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\n/** Public channel view (secret redacted, config/events decoded). */\nfunction toPublic(row: NotificationChannelRow): {\n  id: string;\n  projectId: string | null;\n  provider: string;\n  config: Record<string, unknown>;\n  hasSecret: boolean;\n  events: string[];\n  enabled: boolean;\n  createdAt: string;\n  updatedAt: string;\n} {\n  return {\n    id: row.id,\n    projectId: row.projectId,\n    provider: row.provider,\n    config: NotificationChannelModel.configOf(row),\n    hasSecret: row.secretEncrypted !== null,\n    events: NotificationChannelModel.eventsOf(row),\n    enabled: row.enabled,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\n/** Validate channel input against the provider descriptor. */\nfunction validateChannelInput(\n  provider: string,\n  config: unknown,\n): { ok: true } | { ok: false; message: string } {\n  const descriptor = getStore().notifiers.find((candidate) => candidate.metadata.kind === provider);\n  if (!descriptor) {\n    return { ok: false, message: `Unknown provider: ${provider}` };\n  }\n  const parsed = descriptor.metadata.schema.safeParse(config);\n  if (!parsed.success) {\n    return { ok: false, message: parsed.error.message };\n  }\n  return { ok: true };\n}\n\nconst listChannelsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List notification channels\",\n  path: \"/api/v1/projects/{slug}/notification-channels\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationChannelSchema.array() } },\n      description: \"List notification channels\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createChannelRoute = createRoute({\n  method: \"post\",\n  tags: [\"Notifications\"],\n  summary: \"Create a notification channel\",\n  path: \"/api/v1/projects/{slug}/notification-channels\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: notificationChannelCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: notificationChannelSchema } },\n      description: \"Created notification channel\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteChannelRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Delete a notification channel\",\n  path: \"/api/v1/projects/{slug}/notification-channels/{channelId}\",\n  request: { params: z.object({ slug: z.string(), channelId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted notification channel\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project notification-channel list, create, and delete endpoints. */\nexport function registerNotificationChannels(app: ShelfRouter): void {\n  app.openapi(listChannelsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const rows = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).list(project.id);\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createChannelRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const valid = validateChannelInput(body.provider, body.config);\n    if (!valid.ok) {\n      return c.json({ message: valid.message }, 400);\n    }\n    const row = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).create({ projectId: project.id, ...body });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteChannelRoute, async (c) => {\n    const { slug, channelId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const model = new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    );\n    const existing = await model.get(channelId);\n    if (existing?.projectId !== project.id) {\n      notFound(\"Notification channel not found\");\n    }\n    await model.remove(channelId);\n    return c.body(null, 204);\n  });\n}\n\nconst listSystemRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List site-wide channels\",\n  path: \"/api/v1/admin/notification-channels\",\n  request: {},\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationChannelSchema.array() } },\n      description: \"List site-wide notification channels\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst createSystemRoute = createRoute({\n  method: \"post\",\n  tags: [\"Notifications\"],\n  summary: \"Create a site-wide channel\",\n  path: \"/api/v1/admin/notification-channels\",\n  request: {\n    body: { content: { \"application/json\": { schema: notificationChannelCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: notificationChannelSchema } },\n      description: \"Created site-wide notification channel\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst deleteSystemRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Delete a site-wide channel\",\n  path: \"/api/v1/admin/notification-channels/{channelId}\",\n  request: { params: z.object({ channelId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted site-wide notification channel\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the site-admin (project-less, `sys:*`) channel endpoints. */\nexport function registerSystemChannels(app: ShelfRouter): void {\n  app.openapi(listSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const rows = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).listSystem();\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const body = c.req.valid(\"json\");\n    const valid = validateChannelInput(body.provider, body.config);\n    if (!valid.ok) {\n      return c.json({ message: valid.message }, 400);\n    }\n    const row = await new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    ).create({ projectId: null, ...body });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const { channelId } = c.req.valid(\"param\");\n    const model = new NotificationChannelModel(\n      getStore().db,\n      undefined,\n      credentialKeys(getStore().config),\n    );\n    const existing = await model.get(channelId);\n    if (existing?.projectId !== null) {\n      notFound(\"Notification channel not found\");\n    }\n    await model.remove(channelId);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,cAAsC,CAAC,OAAO;;AAGpD,SAAS,SAAS,KAUhB;CACA,OAAO;EACL,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,WAAW,IAAI,oBAAoB;EACnC,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,SAAS,IAAI;EACb,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;;AAGA,SAAS,qBACP,UACA,QAC+C;CAC/C,MAAM,aAAa,SAAS,CAAC,CAAC,UAAU,MAAM,cAAc,UAAU,SAAS,SAAS,QAAQ;CAChG,IAAI,CAAC,YACH,OAAO;EAAE,IAAI;EAAO,SAAS,qBAAqB;CAAW;CAE/D,MAAM,SAAS,WAAW,SAAS,OAAO,UAAU,MAAM;CAC1D,IAAI,CAAC,OAAO,SACV,OAAO;EAAE,IAAI;EAAO,SAAS,OAAO,MAAM;CAAQ;CAEpD,OAAO,EAAE,IAAI,KAAK;AACpB;AAEA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,MAAM,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gCAAgC,EAAE,EAAE;CACvF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,+BAA+B;EACnD,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,6BAA6B,KAAwB;CACnE,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,MAAM,IAAI,yBACrB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,KAAK,QAAQ,EAAE;EACjB,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,qBAAqB,KAAK,UAAU,KAAK,MAAM;EAC7D,IAAI,CAAC,MAAM,IACT,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,QAAQ,GAAG,GAAG;EAE/C,MAAM,MAAM,MAAM,IAAI,yBACpB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,OAAO;GAAE,WAAW,QAAQ;GAAI,GAAG;EAAK,CAAC;EAC3C,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,IAAI,yBAChB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC;EAEA,KAAI,MADmB,MAAM,IAAI,SAAS,EAAA,EAC5B,cAAc,QAAQ,IAClC,SAAS,gCAAgC;EAE3C,MAAM,MAAM,OAAO,SAAS;EAC5B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH;AAEA,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,CAAC;CACV,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,MAAM,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EACP,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gCAAgC,EAAE,EAAE,EACvF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE;CACvD,WAAW;EACT,KAAK,EAAE,aAAa,yCAAyC;EAC7D,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,uBAAuB,KAAwB;CAC7D,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,iBAAiB,CAAC;EAClB,MAAM,OAAO,MAAM,IAAI,yBACrB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,WAAW;EACb,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,iBAAiB,CAAC;EAClB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,qBAAqB,KAAK,UAAU,KAAK,MAAM;EAC7D,IAAI,CAAC,MAAM,IACT,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,QAAQ,GAAG,GAAG;EAE/C,MAAM,MAAM,MAAM,IAAI,yBACpB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,OAAO;GAAE,WAAW;GAAM,GAAG;EAAK,CAAC;EACrC,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,iBAAiB,CAAC;EAClB,MAAM,EAAE,cAAc,EAAE,IAAI,MAAM,OAAO;EACzC,MAAM,QAAQ,IAAI,yBAChB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC;EAEA,KAAI,MADmB,MAAM,IAAI,SAAS,EAAA,EAC5B,cAAc,MAC1B,SAAS,gCAAgC;EAE3C,MAAM,MAAM,OAAO,SAAS;EAC5B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}
+{"version":3,"file":"notification-channels.mjs","names":["notFoundResponse"],"sources":["../../src/routers/notification-channels.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport type { NotificationChannelRow } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { notFound, requireSiteAdmin, resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  notificationChannelCreateSchema,\n  notificationChannelSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nimport { notificationChannelModel } from \"./scoped-models.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\n/** Public channel view (secret redacted, config/events decoded). */\nfunction toPublic(row: NotificationChannelRow): {\n  id: string;\n  projectId: string | null;\n  provider: string;\n  config: Record<string, unknown>;\n  hasSecret: boolean;\n  events: string[];\n  enabled: boolean;\n  lastError: string | null;\n  lastErrorAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n} {\n  return {\n    id: row.id,\n    projectId: row.projectId,\n    provider: row.provider,\n    config: NotificationChannelModel.configOf(row),\n    hasSecret: row.secretEncrypted !== null,\n    events: NotificationChannelModel.eventsOf(row),\n    enabled: row.enabled,\n    lastError: row.lastError,\n    lastErrorAt: row.lastErrorAt,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\nconst listChannelsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List notification channels\",\n  path: \"/api/v1/projects/{slug}/notification-channels\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationChannelSchema.array() } },\n      description: \"List notification channels\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createChannelRoute = createRoute({\n  method: \"post\",\n  tags: [\"Notifications\"],\n  summary: \"Create a notification channel\",\n  path: \"/api/v1/projects/{slug}/notification-channels\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: notificationChannelCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: notificationChannelSchema } },\n      description: \"Created notification channel\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteChannelRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Delete a notification channel\",\n  path: \"/api/v1/projects/{slug}/notification-channels/{channelId}\",\n  request: { params: z.object({ slug: z.string(), channelId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted notification channel\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project notification-channel list, create, and delete endpoints. */\nexport function registerNotificationChannels(app: ShelfRouter): void {\n  app.openapi(listChannelsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const rows = await notificationChannelModel().list(project.id);\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createChannelRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const valid = NotificationChannelModel.validateInput(\n      getStore().notifiers,\n      body.provider,\n      body.config,\n      { projectId: project.id, hasSecret: body.secret !== undefined },\n    );\n    if (!valid.ok) {\n      return c.json({ message: valid.message }, 400);\n    }\n    const row = await notificationChannelModel().create({ projectId: project.id, ...body });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteChannelRoute, async (c) => {\n    const { slug, channelId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const model = notificationChannelModel();\n    const existing = await model.get(channelId);\n    if (existing?.projectId !== project.id) {\n      notFound(\"Notification channel not found\");\n    }\n    await model.remove(channelId);\n    return c.body(null, 204);\n  });\n}\n\nconst listSystemRoute = createRoute({\n  method: \"get\",\n  tags: [\"Notifications\"],\n  summary: \"List site-wide channels\",\n  path: \"/api/v1/admin/notification-channels\",\n  request: {},\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: notificationChannelSchema.array() } },\n      description: \"List site-wide notification channels\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst createSystemRoute = createRoute({\n  method: \"post\",\n  tags: [\"Notifications\"],\n  summary: \"Create a site-wide channel\",\n  path: \"/api/v1/admin/notification-channels\",\n  request: {\n    body: { content: { \"application/json\": { schema: notificationChannelCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: notificationChannelSchema } },\n      description: \"Created site-wide notification channel\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...unauthorized,\n  },\n});\n\nconst deleteSystemRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Notifications\"],\n  summary: \"Delete a site-wide channel\",\n  path: \"/api/v1/admin/notification-channels/{channelId}\",\n  request: { params: z.object({ channelId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted site-wide notification channel\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the site-admin (project-less, `sys:*`) channel endpoints. */\nexport function registerSystemChannels(app: ShelfRouter): void {\n  app.openapi(listSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const rows = await notificationChannelModel().listSystem();\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const body = c.req.valid(\"json\");\n    const valid = NotificationChannelModel.validateInput(\n      getStore().notifiers,\n      body.provider,\n      body.config,\n      { projectId: null, hasSecret: body.secret !== undefined },\n    );\n    if (!valid.ok) {\n      return c.json({ message: valid.message }, 400);\n    }\n    const row = await notificationChannelModel().create({ projectId: null, ...body });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteSystemRoute, async (c) => {\n    requireSiteAdmin(c);\n    const { channelId } = c.req.valid(\"param\");\n    const model = notificationChannelModel();\n    const existing = await model.get(channelId);\n    if (existing?.projectId !== null) {\n      notFound(\"Notification channel not found\");\n    }\n    await model.remove(channelId);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,cAAsC,CAAC,OAAO;;AAGpD,SAAS,SAAS,KAYhB;CACA,OAAO;EACL,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,WAAW,IAAI,oBAAoB;EACnC,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,SAAS,IAAI;EACb,WAAW,IAAI;EACf,aAAa,IAAI;EACjB,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;AAEA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,MAAM,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gCAAgC,EAAE,EAAE;CACvF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CACzE,WAAW;EACT,KAAK,EAAE,aAAa,+BAA+B;EACnD,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,6BAA6B,KAAwB;CACnE,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,MAAM,yBAAyB,CAAC,CAAC,KAAK,QAAQ,EAAE;EAC7D,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,yBAAyB,cACrC,SAAS,CAAC,CAAC,WACX,KAAK,UACL,KAAK,QACL;GAAE,WAAW,QAAQ;GAAI,WAAW,KAAK,WAAW,KAAA;EAAU,CAChE;EACA,IAAI,CAAC,MAAM,IACT,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,QAAQ,GAAG,GAAG;EAE/C,MAAM,MAAM,MAAM,yBAAyB,CAAC,CAAC,OAAO;GAAE,WAAW,QAAQ;GAAI,GAAG;EAAK,CAAC;EACtF,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,cAAc,EAAE,IAAI,MAAM,OAAO;EAC/C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,yBAAyB;EAEvC,KAAI,MADmB,MAAM,IAAI,SAAS,EAAA,EAC5B,cAAc,QAAQ,IAClC,SAAS,gCAAgC;EAE3C,MAAM,MAAM,OAAO,SAAS;EAC5B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH;AAEA,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,CAAC;CACV,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,MAAM,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EACP,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gCAAgC,EAAE,EAAE,EACvF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,eAAe;CACtB,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE;CACvD,WAAW;EACT,KAAK,EAAE,aAAa,yCAAyC;EAC7D,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,uBAAuB,KAAwB;CAC7D,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,iBAAiB,CAAC;EAClB,MAAM,OAAO,MAAM,yBAAyB,CAAC,CAAC,WAAW;EACzD,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,iBAAiB,CAAC;EAClB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,yBAAyB,cACrC,SAAS,CAAC,CAAC,WACX,KAAK,UACL,KAAK,QACL;GAAE,WAAW;GAAM,WAAW,KAAK,WAAW,KAAA;EAAU,CAC1D;EACA,IAAI,CAAC,MAAM,IACT,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,QAAQ,GAAG,GAAG;EAE/C,MAAM,MAAM,MAAM,yBAAyB,CAAC,CAAC,OAAO;GAAE,WAAW;GAAM,GAAG;EAAK,CAAC;EAChF,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,iBAAiB,CAAC;EAClB,MAAM,EAAE,cAAc,EAAE,IAAI,MAAM,OAAO;EACzC,MAAM,QAAQ,yBAAyB;EAEvC,KAAI,MADmB,MAAM,IAAI,SAAS,EAAA,EAC5B,cAAc,MAC1B,SAAS,gCAAgC;EAE3C,MAAM,MAAM,OAAO,SAAS;EAC5B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/notification-subscriptions.mjs

@@ -6,7 +6,7 @@ import { resolveAuthorizedProject, unauthorized } from "./helpers.mjs";
 import { notFound, notificationSubscriptionPutSchema, notificationSubscriptionSchema, unauthorized as unauthorized$1 } from "./schemas.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { NotificationSubscriptionModel } from "@storyshelf/core/models";
-//#region src/routers/notification-subscriptions.ts
+// src/routers/notification-subscriptions.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -114,7 +114,6 @@ function registerNotificationSubscriptions(app) {
 		return c.json(rows.map((row) => toPublic(row)));
 	});
 }
-//#endregion
 export { registerNotificationSubscriptions };
 
 //# sourceMappingURL=notification-subscriptions.mjs.map

package/dist/routers/oauth-state.mjs

@@ -0,0 +1,44 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { timingSafeEqualString } from "@storyshelf/core/utils";
+import { createHmac, randomBytes } from "node:crypto";
+// src/routers/oauth-state.ts
+/** Signed, expiring OAuth `state` for "connect your account" flows (binds user, service and browser). */
+/** State lifetime: long enough to sign in at the service, short enough to limit replay. */
+const STATE_TTL_MS = 6e5;
+/** Issue a signed state for a new flow, with a fresh nonce. */
+function signState(secret, fields, now = Date.now()) {
+	const nonce = randomBytes(16).toString("hex");
+	const body = {
+		...fields,
+		nonce,
+		expiresAt: now + STATE_TTL_MS
+	};
+	const payload = Buffer.from(JSON.stringify(body)).toString("base64url");
+	return {
+		state: `${payload}.${mac(secret, payload)}`,
+		nonce
+	};
+}
+/** Parse and verify a state; null when forged, malformed or expired. */
+function verifyState(secret, state, now = Date.now()) {
+	const [payload, signature] = state.split(".");
+	if (!payload || !signature || !timingSafeEqualString(signature, mac(secret, payload))) return null;
+	try {
+		const body = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+		return body.expiresAt > now ? body : null;
+	} catch {
+		return null;
+	}
+}
+/** A same-site path (never an absolute or protocol-relative URL), else the fallback. */
+function safeReturnPath(value, fallback) {
+	return value && /^\/(?![/\\])/u.test(value) ? value : fallback;
+}
+function mac(secret, payload) {
+	return createHmac("sha256", secret).update(`oauth-connect:${payload}`).digest("base64url");
+}
+export { safeReturnPath, signState, verifyState };
+
+//# sourceMappingURL=oauth-state.mjs.map

package/dist/routers/oauth-state.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-state.mjs","names":[],"sources":["../../src/routers/oauth-state.ts"],"sourcesContent":["/** Signed, expiring OAuth `state` for \"connect your account\" flows (binds user, service and browser). */\nimport { timingSafeEqualString } from \"@storyshelf/core/utils\";\nimport { createHmac, randomBytes } from \"node:crypto\";\n\n/** State lifetime: long enough to sign in at the service, short enough to limit replay. */\nconst STATE_TTL_MS = 10 * 60_000;\n\n/** What a state asserts about the flow that issued it. */\nexport interface OAuthState {\n  /** User who started the flow. */\n  userId: string;\n  /** Service `metadata.kind`. */\n  service: string;\n  /** Local path to return to afterwards. */\n  returnTo: string;\n  /** Random value also kept in a cookie, binding the state to one browser. */\n  nonce: string;\n  expiresAt: number;\n}\n\n/** Issue a signed state for a new flow, with a fresh nonce. */\nexport function signState(\n  secret: string,\n  fields: Omit<OAuthState, \"nonce\" | \"expiresAt\">,\n  now = Date.now(),\n): { state: string; nonce: string } {\n  const nonce = randomBytes(16).toString(\"hex\");\n  const body: OAuthState = { ...fields, nonce, expiresAt: now + STATE_TTL_MS };\n  const payload = Buffer.from(JSON.stringify(body)).toString(\"base64url\");\n  return { state: `${payload}.${mac(secret, payload)}`, nonce };\n}\n\n/** Parse and verify a state; null when forged, malformed or expired. */\nexport function verifyState(secret: string, state: string, now = Date.now()): OAuthState | null {\n  const [payload, signature] = state.split(\".\");\n  if (!payload || !signature || !timingSafeEqualString(signature, mac(secret, payload))) {\n    return null;\n  }\n  try {\n    const body = JSON.parse(Buffer.from(payload, \"base64url\").toString(\"utf8\")) as OAuthState;\n    return body.expiresAt > now ? body : null;\n  } catch {\n    return null;\n  }\n}\n\n/** A same-site path (never an absolute or protocol-relative URL), else the fallback. */\nexport function safeReturnPath(value: string | undefined, fallback: string): string {\n  return value && /^\\/(?![/\\\\])/u.test(value) ? value : fallback;\n}\n\nfunction mac(secret: string, payload: string): string {\n  return createHmac(\"sha256\", secret).update(`oauth-connect:${payload}`).digest(\"base64url\");\n}\n"],"mappings":";;;;;;;;AAKA,MAAM,eAAe;;AAgBrB,SAAgB,UACd,QACA,QACA,MAAM,KAAK,IAAI,GACmB;CAClC,MAAM,QAAQ,YAAY,EAAE,CAAC,CAAC,SAAS,KAAK;CAC5C,MAAM,OAAmB;EAAE,GAAG;EAAQ;EAAO,WAAW,MAAM;CAAa;CAC3E,MAAM,UAAU,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,SAAS,WAAW;CACtE,OAAO;EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,QAAQ,OAAO;EAAK;CAAM;AAC9D;;AAGA,SAAgB,YAAY,QAAgB,OAAe,MAAM,KAAK,IAAI,GAAsB;CAC9F,MAAM,CAAC,SAAS,aAAa,MAAM,MAAM,GAAG;CAC5C,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,sBAAsB,WAAW,IAAI,QAAQ,OAAO,CAAC,GAClF,OAAO;CAET,IAAI;EACF,MAAM,OAAO,KAAK,MAAM,OAAO,KAAK,SAAS,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EAC1E,OAAO,KAAK,YAAY,MAAM,OAAO;CACvC,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,eAAe,OAA2B,UAA0B;CAClF,OAAO,SAAS,gBAAgB,KAAK,KAAK,IAAI,QAAQ;AACxD;AAEA,SAAS,IAAI,QAAgB,SAAyB;CACpD,OAAO,WAAW,UAAU,MAAM,CAAC,CAAC,OAAO,iBAAiB,SAAS,CAAC,CAAC,OAAO,WAAW;AAC3F"}

package/dist/routers/preview-base.mjs

@@ -0,0 +1,37 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { credentialKeys } from "../credential-keys.mjs";
+import { getStore, testingEnabled } from "../store.mjs";
+import { isAnonymouslyViewable, publishedAccess } from "./published-access.mjs";
+import { STORYBOOK_TOKEN_PREFIX, signStorybookToken } from "@storyshelf/core/utils";
+import { createUrlBuilder } from "@storyshelf/core/urls";
+// src/routers/preview-base.ts
+/** Lifetime of the token in a page: long enough to open the frame, short enough to be harmless. */
+const PREVIEW_TOKEN_TTL = 3600;
+/**
+* How often a page asks for a fresh frame token (seconds): well inside {@link PREVIEW_TOKEN_TTL},
+* so a frame on a page left open never holds an expired token. The token stays short-lived.
+*/
+const PREVIEW_TOKEN_REFRESH = 2400;
+/** Whether a frame root is a signed `/_s/<token>` URL, the only kind that expires. */
+function isSignedPreviewBase(base) {
+	return base.startsWith(STORYBOOK_TOKEN_PREFIX);
+}
+/** The frame's root URL (no trailing slash), or null when this viewer cannot be given one. */
+async function previewBaseOf(project, build) {
+	const { config } = getStore();
+	if (isAnonymouslyViewable(build, project)) return createUrlBuilder("/", config.publishedBaseDomain).storybookBuild(project.slug, build.id);
+	const secret = credentialKeys(config);
+	if (!testingEnabled() || !secret || !await publishedAccess(build, project)) return null;
+	const token = signStorybookToken({
+		secret,
+		projectId: project.id,
+		buildId: build.id,
+		ttlSeconds: PREVIEW_TOKEN_TTL
+	});
+	return `${STORYBOOK_TOKEN_PREFIX}${token}`;
+}
+export { PREVIEW_TOKEN_REFRESH, PREVIEW_TOKEN_TTL, isSignedPreviewBase, previewBaseOf };
+
+//# sourceMappingURL=preview-base.mjs.map

package/dist/routers/preview-base.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-base.mjs","names":[],"sources":["../../src/routers/preview-base.ts"],"sourcesContent":["/**\n * The root a component page's preview frame loads a build's Storybook from (ADR 0006, decision 9).\n * A sandboxed frame has no cookies, so only a URL that needs none works in it: the build's own URL\n * when anyone who reaches the app may open it, otherwise a signed `/_s/<token>` URL minted for a\n * viewer who already has access (ADR 0007, decision 5; needs `testing` and a `secret`).\n */\nimport type { Build, Project } from \"@storyshelf/core/schema\";\nimport { createUrlBuilder } from \"@storyshelf/core/urls\";\nimport {\n  signStorybookToken,\n  STORYBOOK_TOKEN_PREFIX,\n  type SecretInput,\n} from \"@storyshelf/core/utils\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore, testingEnabled } from \"../store.ts\";\nimport { isAnonymouslyViewable, publishedAccess } from \"./published-access.ts\";\n\n/** Lifetime of the token in a page: long enough to open the frame, short enough to be harmless. */\nexport const PREVIEW_TOKEN_TTL = 3600;\n\n/**\n * How often a page asks for a fresh frame token (seconds): well inside {@link PREVIEW_TOKEN_TTL},\n * so a frame on a page left open never holds an expired token. The token stays short-lived.\n */\nexport const PREVIEW_TOKEN_REFRESH = 2400;\n\n/** Whether a frame root is a signed `/_s/<token>` URL, the only kind that expires. */\nexport function isSignedPreviewBase(base: string): boolean {\n  return base.startsWith(STORYBOOK_TOKEN_PREFIX);\n}\n\n/** The frame's root URL (no trailing slash), or null when this viewer cannot be given one. */\nexport async function previewBaseOf(project: Project, build: Build): Promise<string | null> {\n  const { config } = getStore();\n  if (isAnonymouslyViewable(build, project)) {\n    return createUrlBuilder(\"/\", config.publishedBaseDomain).storybookBuild(project.slug, build.id);\n  }\n  const secret: SecretInput = credentialKeys(config);\n  if (!testingEnabled() || !secret || !(await publishedAccess(build, project))) {\n    return null;\n  }\n  const token = signStorybookToken({\n    secret,\n    projectId: project.id,\n    buildId: build.id,\n    ttlSeconds: PREVIEW_TOKEN_TTL,\n  });\n  return `${STORYBOOK_TOKEN_PREFIX}${token}`;\n}\n"],"mappings":";;;;;;;;;;AAkBA,MAAa,oBAAoB;;;;;AAMjC,MAAa,wBAAwB;;AAGrC,SAAgB,oBAAoB,MAAuB;CACzD,OAAO,KAAK,WAAW,sBAAsB;AAC/C;;AAGA,eAAsB,cAAc,SAAkB,OAAsC;CAC1F,MAAM,EAAE,WAAW,SAAS;CAC5B,IAAI,sBAAsB,OAAO,OAAO,GACtC,OAAO,iBAAiB,KAAK,OAAO,mBAAmB,CAAC,CAAC,eAAe,QAAQ,MAAM,MAAM,EAAE;CAEhG,MAAM,SAAsB,eAAe,MAAM;CACjD,IAAI,CAAC,eAAe,KAAK,CAAC,UAAU,CAAE,MAAM,gBAAgB,OAAO,OAAO,GACxE,OAAO;CAET,MAAM,QAAQ,mBAAmB;EAC/B;EACA,WAAW,QAAQ;EACnB,SAAS,MAAM;EACf,YAAY;CACd,CAAC;CACD,OAAO,GAAG,yBAAyB;AACrC"}

package/dist/routers/preview-token.mjs

@@ -0,0 +1,50 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { isSignedPreviewBase, previewBaseOf } from "./preview-base.mjs";
+import { SIGNED_URL_HEADERS } from "./published-files.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+import { BuildModel, ProjectModel } from "@storyshelf/core/models";
+// src/routers/preview-token.ts
+/**
+* `GET /api/v1/projects/:slug/builds/:buildId/preview-token`: a fresh root for a component page's preview frame
+* (ADR 0006, decision 9). A frame holding a signed `/_s/<token>` URL (ADR 0007, decision 5) outlives
+* the token's hour on a page left open, so the page's script asks for a new root before then and
+* re-points the frame. Answers `{ base }` for a viewer who may open the build, 404 otherwise or when
+* the build needs no token (anyone may open it). Never cached: the answer carries a token.
+*/
+const previewTokenRoute = createRoute({
+	method: "get",
+	tags: ["Review"],
+	summary: "Get a fresh signed root for a build's preview frame",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/preview-token",
+	request: { params: z.object({
+		slug: z.string(),
+		buildId: z.string()
+	}) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: z.object({ base: z.string() }) } },
+			description: "The signed root (`/_s/<token>`) to frame the build's Storybook under"
+		},
+		404: {
+			content: { "text/plain": { schema: z.string() } },
+			description: "Not found, or the build needs no signed URL"
+		}
+	}
+});
+/** Register the preview token refresh route. */
+function registerPreviewToken(app) {
+	app.openapi(previewTokenRoute, async (c) => {
+		const { db } = getStore();
+		const project = await new ProjectModel(db).getBySlug(c.req.param("slug"));
+		const build = await new BuildModel(db).get(c.req.param("buildId"));
+		const base = project && build?.projectId === project.id ? await previewBaseOf(project, build) : null;
+		if (base === null || !isSignedPreviewBase(base)) return c.text("Not found", 404, SIGNED_URL_HEADERS);
+		return c.json({ base }, 200, SIGNED_URL_HEADERS);
+	});
+}
+export { registerPreviewToken };
+
+//# sourceMappingURL=preview-token.mjs.map

package/dist/routers/preview-token.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-token.mjs","names":[],"sources":["../../src/routers/preview-token.ts"],"sourcesContent":["/**\n * `GET /api/v1/projects/:slug/builds/:buildId/preview-token`: a fresh root for a component page's preview frame\n * (ADR 0006, decision 9). A frame holding a signed `/_s/<token>` URL (ADR 0007, decision 5) outlives\n * the token's hour on a page left open, so the page's script asks for a new root before then and\n * re-points the frame. Answers `{ base }` for a viewer who may open the build, 404 otherwise or when\n * the build needs no token (anyone may open it). Never cached: the answer carries a token.\n */\nimport { createRoute, z } from \"@hono/zod-openapi\";\nimport { BuildModel, ProjectModel } from \"@storyshelf/core/models\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { isSignedPreviewBase, previewBaseOf } from \"./preview-base.ts\";\nimport { SIGNED_URL_HEADERS } from \"./published-files.ts\";\n\nconst previewTokenRoute = createRoute({\n  method: \"get\",\n  tags: [\"Review\"],\n  summary: \"Get a fresh signed root for a build's preview frame\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/preview-token\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: z.object({ base: z.string() }) } },\n      description: \"The signed root (`/_s/<token>`) to frame the build's Storybook under\",\n    },\n    404: {\n      content: { \"text/plain\": { schema: z.string() } },\n      description: \"Not found, or the build needs no signed URL\",\n    },\n  },\n});\n\n/** Register the preview token refresh route. */\nexport function registerPreviewToken(app: ShelfRouter): void {\n  app.openapi(previewTokenRoute, async (c) => {\n    const { db } = getStore();\n    const project = await new ProjectModel(db).getBySlug(c.req.param(\"slug\"));\n    const build = await new BuildModel(db).get(c.req.param(\"buildId\"));\n    const base =\n      project && build?.projectId === project.id ? await previewBaseOf(project, build) : null;\n    if (base === null || !isSignedPreviewBase(base)) {\n      return c.text(\"Not found\", 404, SIGNED_URL_HEADERS);\n    }\n    return c.json({ base }, 200, SIGNED_URL_HEADERS);\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAcA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC1E,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;GAChD,aAAa;EACf;CACF;AACF,CAAC;;AAGD,SAAgB,qBAAqB,KAAwB;CAC3D,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,OAAO,SAAS;EACxB,MAAM,UAAU,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,MAAM,MAAM,CAAC;EACxE,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,SAAS,CAAC;EACjE,MAAM,OACJ,WAAW,OAAO,cAAc,QAAQ,KAAK,MAAM,cAAc,SAAS,KAAK,IAAI;EACrF,IAAI,SAAS,QAAQ,CAAC,oBAAoB,IAAI,GAC5C,OAAO,EAAE,KAAK,aAAa,KAAK,kBAAkB;EAEpD,OAAO,EAAE,KAAK,EAAE,KAAK,GAAG,KAAK,kBAAkB;CACjD,CAAC;AACH"}

package/dist/routers/profile.mjs

@@ -2,6 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
+import { notificationsPaused } from "../notifications-pause.mjs";
 import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
 import { forwardToEngine } from "./auth.mjs";
@@ -10,7 +11,7 @@ import { NotificationSubscriptionModel, ProjectModel, UserModel } from "@storysh
 import { SESSION_COOKIE } from "@storyshelf/core/types";
 import { MIN_PASSWORD_LENGTH, unsignedToken } from "@storyshelf/core/auth";
 import { eq, getTableColumns } from "@storyshelf/core/orm";
-//#region src/routers/profile.ts
+// src/routers/profile.ts
 function field(form, name) {
 	const raw = form.get(name);
 	return typeof raw === "string" ? raw : "";
@@ -89,7 +90,8 @@ async function profileView(c, user, auth, extra) {
 		subscribedSlugs,
 		isLocal: extra?.local ?? security.hasPassword,
 		security,
-		error: extra?.error
+		error: extra?.error,
+		notificationsPaused: getStore().notifiers.length > 0 && await notificationsPaused()
 	});
 	if (extra?.success) flash(c, extra.success);
 	c.header("Cache-Control", "no-store");
@@ -270,7 +272,6 @@ function readPasswordChange(form) {
 		next
 	};
 }
-//#endregion
 export { registerProfile };
 
 //# sourceMappingURL=profile.mjs.map