@storyshelf/core 0.1.0

package/dist/pages/settings-status.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-status.mjs","names":[],"sources":["../../src/pages/settings-status.tsx"],"sourcesContent":["import type { FC } from \"hono/jsx\";\nimport type { GitHostProvider } from \"../adapters/git-host/index.ts\";\nimport type { Project } from \"../schema.ts\";\nimport { Badge, Field, SelectField, TextareaField } from \"../ui/components.tsx\";\n\nexport interface SettingsStatusConfig {\n  id: string;\n  provider: string;\n  config: Record<string, unknown>;\n  hasToken: boolean;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface StatusFormState {\n  errors?: Record<string, string>;\n  globalError?: string;\n}\n\n/* eslint-disable promise-function-async -- JSX components return HtmlEscapedString | Promise<HtmlEscapedString> */\n\nfunction providerOptions(providers: GitHostProvider[]): { value: string; label: string }[] {\n  return providers.map((provider) => ({ value: provider.metadata.kind, label: provider.metadata.name }));\n}\n\nconst StatusConfigRow: FC<{\n  config: SettingsStatusConfig;\n  provider: GitHostProvider | undefined;\n  project: Project;\n  isAdmin: boolean;\n}> = ({ config, provider, project, isAdmin }) => {\n  const rendered = JSON.stringify(config.config);\n  return (\n    <tr key={config.id}>\n      <td>{provider?.metadata.name ?? config.provider}</td>\n      <td style=\"max-width:32ch; overflow:hidden; text-overflow:ellipsis; white-space:nowrap;\" title={rendered}>\n        <code>{rendered}</code>\n      </td>\n      <td>{config.hasToken ? <Badge tone=\"success\">configured</Badge> : <Badge tone=\"danger\">missing</Badge>}</td>\n      <td>{new Date(config.createdAt).toLocaleDateString()}</td>\n      <td>\n        {isAdmin ? (\n          <form method=\"post\" action={`/projects/${project.slug}/settings/status/${config.id}/delete`} hx-post={`/projects/${project.slug}/settings/status/${config.id}/delete`} hx-target=\"body\">\n            <button class=\"btn btn--ghost\" type=\"submit\">\n              Delete\n            </button>\n          </form>\n        ) : null}\n      </td>\n    </tr>\n  );\n};\n\nconst StatusCreateCard: FC<{\n  project: Project;\n  providers: GitHostProvider[];\n  formState?: StatusFormState;\n}> = ({ project, providers, formState }) => {\n  return (\n    <div class=\"card card--padded\">\n      <h3 style=\"margin:0 0 .5rem;\">Add git provider</h3>\n      <form method=\"post\" action={`/projects/${project.slug}/settings/status`} hx-post={`/projects/${project.slug}/settings/status`} hx-target=\"body\">\n        <SelectField label=\"Provider\" name=\"provider\" options={providerOptions(providers)} hint=\"Integration that posts commit statuses for this project.\" />\n        <Field label=\"Token\" name=\"token\" type=\"password\" required placeholder=\"ghp_…\" error={formState?.errors?.[\"token\"]} hint=\"Scoped token for the provider (e.g. a GitHub PAT with repo:status).\" />\n        <TextareaField\n          label=\"Config\"\n          name=\"config\"\n          rows={6}\n          placeholder='{\"owner\":\"my-org\",\"repo\":\"my-repo\"}'\n          error={formState?.errors?.[\"config\"]}\n          hint=\"JSON configuration for the provider. See the provider documentation for its fields.\"\n        />\n        <button class=\"btn btn--primary\" type=\"submit\">\n          Add git provider\n        </button>\n      </form>\n    </div>\n  );\n};\n\nfunction renderCreateSection(project: Project, providers: GitHostProvider[], formState?: StatusFormState): unknown {\n  if (providers.length === 0) {\n    return <p class=\"field__hint\">No git providers registered on this server.</p>;\n  }\n  return <StatusCreateCard project={project} providers={providers} formState={formState} />;\n}\n\n// eslint-disable-next-line max-params -- matches sibling settings render functions\nexport function renderSettingsStatus(\n  project: Project,\n  statusConfigs: SettingsStatusConfig[],\n  providers: GitHostProvider[],\n  isAdmin: boolean,\n  formState?: StatusFormState,\n): unknown {\n  const byProvider = new Map(providers.map((provider) => [provider.metadata.kind, provider]));\n  return (\n    <div class=\"grid\" style=\"max-width: 880px;\">\n      {formState?.globalError ? (\n        <div class=\"alert alert--danger\" role=\"alert\">\n          {formState.globalError}\n        </div>\n      ) : null}\n\n      <div class=\"card card--padded\">\n        <h2 style=\"margin:0 0 .3rem;\">Git status</h2>\n        <p class=\"field__hint\">\n          Post commit statuses to a git provider so visual tests show up in your PR checks. Status is reported for each configured provider: pending while\n          capturing, success on approval, failure on rejection or capture errors.\n        </p>\n        <div class=\"table-wrap\" style=\"margin-top:.75rem;\">\n          <table>\n            <thead>\n              <tr>\n                <th>Provider</th>\n                <th>Config</th>\n                <th>Token</th>\n                <th>Created</th>\n                <th></th>\n              </tr>\n            </thead>\n            <tbody>\n              {statusConfigs.map((config) => (\n                <StatusConfigRow key={config.id} config={config} provider={byProvider.get(config.provider)} project={project} isAdmin={isAdmin} />\n              ))}\n            </tbody>\n          </table>\n        </div>\n        {statusConfigs.length === 0 ? <p class=\"field__hint\" style=\"margin-top:.5rem;\">No git providers configured for this project.</p> : null}\n      </div>\n\n      {isAdmin ? renderCreateSection(project, providers, formState) : null}\n    </div>\n  );\n}"],"mappings":";;;;;;AAqBA,SAAS,gBAAgB,WAAkE;CACzF,OAAO,UAAU,KAAK,cAAc;EAAE,OAAO,SAAS,SAAS;EAAM,OAAO,SAAS,SAAS;CAAK,EAAE;AACvG;AAEA,MAAM,mBAKA,EAAE,QAAQ,UAAU,SAAS,cAAc;CAC/C,MAAM,WAAW,KAAK,UAAU,OAAO,MAAM;CAC7C,OACE,qBAAC,MAAD,EAAA,UAAA;EACE,oBAAC,MAAD,EAAA,UAAK,UAAU,SAAS,QAAQ,OAAO,SAAa,CAAA;EACpD,oBAAC,MAAD;GAAI,OAAM;GAA+E,OAAO;GAC9F,UAAA,oBAAC,QAAD,EAAA,UAAO,SAAe,CAAA;EACpB,CAAA;EACJ,oBAAC,MAAD,EAAA,UAAK,OAAO,WAAW,oBAAC,OAAD;GAAO,MAAK;GAAU,UAAA;EAAiB,CAAA,IAAI,oBAAC,OAAD;GAAO,MAAK;GAAS,UAAA;EAAc,CAAA,EAAM,CAAA;EAC3G,oBAAC,MAAD,EAAA,UAAK,IAAI,KAAK,OAAO,SAAS,CAAC,CAAC,mBAAmB,EAAM,CAAA;EACzD,oBAAC,MAAD,EAAA,UACG,UACC,oBAAC,QAAD;GAAM,QAAO;GAAO,QAAQ,aAAa,QAAQ,KAAK,mBAAmB,OAAO,GAAG;GAAU,WAAS,aAAa,QAAQ,KAAK,mBAAmB,OAAO,GAAG;GAAU,aAAU;GAC/K,UAAA,oBAAC,UAAD;IAAQ,OAAM;IAAiB,MAAK;IAAS,UAAA;GAErC,CAAA;EACJ,CAAA,IACJ,KACF,CAAA;CACF,EAAA,GAhBK,OAAO,EAgBZ;AAER;AAEA,MAAM,oBAIA,EAAE,SAAS,WAAW,gBAAgB;CAC1C,OACE,qBAAC,OAAD;EAAK,OAAM;EAAX,UAAA,CACE,oBAAC,MAAD;GAAI,OAAM;GAAoB,UAAA;EAAoB,CAAA,GAClD,qBAAC,QAAD;GAAM,QAAO;GAAO,QAAQ,aAAa,QAAQ,KAAK;GAAmB,WAAS,aAAa,QAAQ,KAAK;GAAmB,aAAU;GAAzI,UAAA;IACE,oBAAC,aAAD;KAAa,OAAM;KAAW,MAAK;KAAW,SAAS,gBAAgB,SAAS;KAAG,MAAK;IAA4D,CAAA;IACpJ,oBAAC,OAAD;KAAO,OAAM;KAAQ,MAAK;KAAQ,MAAK;KAAW,UAAA;KAAS,aAAY;KAAQ,OAAO,WAAW,SAAS;KAAU,MAAK;IAAuE,CAAA;IAChM,oBAAC,eAAD;KACE,OAAM;KACN,MAAK;KACL,MAAM;KACN,aAAY;KACZ,OAAO,WAAW,SAAS;KAC3B,MAAK;IACN,CAAA;IACD,oBAAC,UAAD;KAAQ,OAAM;KAAmB,MAAK;KAAS,UAAA;IAEvC,CAAA;GACJ;EACH,CAAA,CAAA;;AAET;AAEA,SAAS,oBAAoB,SAAkB,WAA8B,WAAsC;CACjH,IAAI,UAAU,WAAW,GACvB,OAAO,oBAAC,KAAD;EAAG,OAAM;EAAc,UAAA;CAA8C,CAAA;CAE9E,OAAO,oBAAC,kBAAD;EAA2B;EAAoB;EAAsB;CAAY,CAAA;AAC1F;AAGA,SAAgB,qBACd,SACA,eACA,WACA,SACA,WACS;CACT,MAAM,aAAa,IAAI,IAAI,UAAU,KAAK,aAAa,CAAC,SAAS,SAAS,MAAM,QAAQ,CAAC,CAAC;CAC1F,OACE,qBAAC,OAAD;EAAK,OAAM;EAAO,OAAM;EAAxB,UAAA;GACG,WAAW,cACV,oBAAC,OAAD;IAAK,OAAM;IAAsB,MAAK;IACnC,UAAA,UAAU;GACR,CAAA,IACH;GAEJ,qBAAC,OAAD;IAAK,OAAM;IAAX,UAAA;KACE,oBAAC,MAAD;MAAI,OAAM;MAAoB,UAAA;KAAc,CAAA;KAC5C,oBAAC,KAAD;MAAG,OAAM;MAAc,UAAA;KAGpB,CAAA;KACH,oBAAC,OAAD;MAAK,OAAM;MAAa,OAAM;MAC5B,UAAA,qBAAC,SAAD,EAAA,UAAA,CACE,oBAAC,SAAD,EAAA,UACE,qBAAC,MAAD,EAAA,UAAA;OACE,oBAAC,MAAD,EAAA,UAAI,WAAY,CAAA;OAChB,oBAAC,MAAD,EAAA,UAAI,SAAU,CAAA;OACd,oBAAC,MAAD,EAAA,UAAI,QAAS,CAAA;OACb,oBAAC,MAAD,EAAA,UAAI,UAAW,CAAA;OACf,oBAAC,MAAD,CAAQ,CAAA;MACN,EAAA,CAAA,EACC,CAAA,GACP,oBAAC,SAAD,EAAA,UACG,cAAc,KAAK,WAClB,oBAAC,iBAAD;OAAyC;OAAQ,UAAU,WAAW,IAAI,OAAO,QAAQ;OAAY;OAAkB;MAAU,GAA3G,OAAO,EAAoG,CAClI,EACI,CAAA,CACF,EAAA,CAAA;KACJ,CAAA;KACJ,cAAc,WAAW,IAAI,oBAAC,KAAD;MAAG,OAAM;MAAc,OAAM;MAAoB,UAAA;KAAgD,CAAA,IAAI;IAChI;;GAEJ,UAAU,oBAAoB,SAAS,WAAW,SAAS,IAAI;EAC7D;;AAET"}

package/dist/pages/settings-tokens.mjs

@@ -0,0 +1,95 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { jsx, jsxs } from "hono/jsx/jsx-runtime";
+//#region src/pages/settings-tokens.tsx
+function renderSettingsTokens(project, tokens, isAdmin) {
+	return /* @__PURE__ */ jsxs("div", {
+		class: "grid",
+		style: "max-width: 880px;",
+		children: [/* @__PURE__ */ jsxs("div", {
+			class: "card card--padded",
+			children: [
+				/* @__PURE__ */ jsx("h2", {
+					style: "margin:0 0 .3rem;",
+					children: "API tokens"
+				}),
+				/* @__PURE__ */ jsx("p", {
+					class: "field__hint",
+					children: "Tokens are used by the CLI to upload builds. They are scoped to this project."
+				}),
+				/* @__PURE__ */ jsx("div", {
+					class: "table-wrap",
+					style: "margin-top:.75rem;",
+					children: /* @__PURE__ */ jsxs("table", { children: [/* @__PURE__ */ jsx("thead", { children: /* @__PURE__ */ jsxs("tr", { children: [
+						/* @__PURE__ */ jsx("th", { children: "Name" }),
+						/* @__PURE__ */ jsx("th", { children: "Created" }),
+						/* @__PURE__ */ jsx("th", { children: "Last used" }),
+						/* @__PURE__ */ jsx("th", {})
+					] }) }), /* @__PURE__ */ jsx("tbody", { children: tokens.map((token) => /* @__PURE__ */ jsxs("tr", { children: [
+						/* @__PURE__ */ jsx("td", { children: token.name }),
+						/* @__PURE__ */ jsx("td", { children: new Date(token.createdAt).toLocaleDateString() }),
+						/* @__PURE__ */ jsx("td", { children: token.lastUsedAt ? new Date(token.lastUsedAt).toLocaleDateString() : "—" }),
+						/* @__PURE__ */ jsx("td", { children: isAdmin ? /* @__PURE__ */ jsx("form", {
+							method: "post",
+							action: `/projects/${project.slug}/settings/tokens/${token.id}/delete`,
+							"hx-post": `/projects/${project.slug}/settings/tokens/${token.id}/delete`,
+							"hx-target": "body",
+							children: /* @__PURE__ */ jsx("button", {
+								class: "btn btn--ghost",
+								type: "submit",
+								children: "Revoke"
+							})
+						}) : null })
+					] }, token.id)) })] })
+				}),
+				tokens.length === 0 ? /* @__PURE__ */ jsx("p", {
+					class: "field__hint",
+					style: "margin-top:.5rem;",
+					children: "No tokens yet. Create one for CI."
+				}) : null
+			]
+		}), isAdmin ? /* @__PURE__ */ jsxs("div", {
+			class: "card card--padded",
+			children: [
+				/* @__PURE__ */ jsx("h3", {
+					style: "margin:0 0 .5rem;",
+					children: "Create token"
+				}),
+				/* @__PURE__ */ jsxs("form", {
+					method: "post",
+					action: `/projects/${project.slug}/settings/tokens`,
+					"hx-post": `/projects/${project.slug}/settings/tokens`,
+					"hx-target": "body",
+					children: [/* @__PURE__ */ jsxs("div", {
+						class: "field",
+						children: [/* @__PURE__ */ jsx("label", {
+							class: "field__label",
+							for: "tokenName",
+							children: "Name"
+						}), /* @__PURE__ */ jsx("input", {
+							class: "field__input",
+							id: "tokenName",
+							name: "tokenName",
+							required: true,
+							placeholder: "ci"
+						})]
+					}), /* @__PURE__ */ jsx("button", {
+						class: "btn btn--primary",
+						type: "submit",
+						children: "Create token"
+					})]
+				}),
+				/* @__PURE__ */ jsx("p", {
+					class: "field__hint",
+					style: "margin-top:.5rem;",
+					children: "Token value is shown once after creation. Store it securely."
+				})
+			]
+		}) : null]
+	});
+}
+//#endregion
+export { renderSettingsTokens };
+
+//# sourceMappingURL=settings-tokens.mjs.map

package/dist/pages/settings-tokens.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-tokens.mjs","names":[],"sources":["../../src/pages/settings-tokens.tsx"],"sourcesContent":["import type { Project, Token } from \"../schema.ts\";\n\nexport function renderSettingsTokens(project: Project, tokens: Array<Omit<Token, \"hash\">>, isAdmin: boolean): unknown {\n  return (\n    <div class=\"grid\" style=\"max-width: 880px;\">\n      <div class=\"card card--padded\">\n        <h2 style=\"margin:0 0 .3rem;\">API tokens</h2>\n        <p class=\"field__hint\">Tokens are used by the CLI to upload builds. They are scoped to this project.</p>\n        <div class=\"table-wrap\" style=\"margin-top:.75rem;\">\n          <table>\n            <thead>\n              <tr>\n                <th>Name</th>\n                <th>Created</th>\n                <th>Last used</th>\n                <th></th>\n              </tr>\n            </thead>\n            <tbody>\n              {tokens.map(\n                // eslint-disable-next-line promise-function-async -- JSX.Element includes Promise<HtmlEscapedString>\n                (token) => (\n                  <tr key={token.id}>\n                    <td>{token.name}</td>\n                    <td>{new Date(token.createdAt).toLocaleDateString()}</td>\n                    <td>{token.lastUsedAt ? new Date(token.lastUsedAt).toLocaleDateString() : \"—\"}</td>\n                    <td>\n                      {isAdmin ? (\n                        <form method=\"post\" action={`/projects/${project.slug}/settings/tokens/${token.id}/delete`} hx-post={`/projects/${project.slug}/settings/tokens/${token.id}/delete`} hx-target=\"body\">\n                          <button class=\"btn btn--ghost\" type=\"submit\">\n                            Revoke\n                          </button>\n                        </form>\n                      ) : null}\n                    </td>\n                  </tr>\n                ),\n              )}\n            </tbody>\n          </table>\n        </div>\n        {tokens.length === 0 ? <p class=\"field__hint\" style=\"margin-top:.5rem;\">No tokens yet. Create one for CI.</p> : null}\n      </div>\n\n      {isAdmin ? (\n        <div class=\"card card--padded\">\n          <h3 style=\"margin:0 0 .5rem;\">Create token</h3>\n          <form method=\"post\" action={`/projects/${project.slug}/settings/tokens`} hx-post={`/projects/${project.slug}/settings/tokens`} hx-target=\"body\">\n            <div class=\"field\">\n              <label class=\"field__label\" for=\"tokenName\">\n                Name\n              </label>\n              <input class=\"field__input\" id=\"tokenName\" name=\"tokenName\" required placeholder=\"ci\" />\n            </div>\n            <button class=\"btn btn--primary\" type=\"submit\">\n              Create token\n            </button>\n          </form>\n          <p class=\"field__hint\" style=\"margin-top:.5rem;\">Token value is shown once after creation. Store it securely.</p>\n        </div>\n      ) : null}\n    </div>\n  );\n}"],"mappings":";;;;;AAEA,SAAgB,qBAAqB,SAAkB,QAAoC,SAA2B;CACpH,OACE,qBAAC,OAAD;EAAK,OAAM;EAAO,OAAM;EAAxB,UAAA,CACE,qBAAC,OAAD;GAAK,OAAM;GAAX,UAAA;IACE,oBAAC,MAAD;KAAI,OAAM;KAAoB,UAAA;IAAc,CAAA;IAC5C,oBAAC,KAAD;KAAG,OAAM;KAAc,UAAA;IAAgF,CAAA;IACvG,oBAAC,OAAD;KAAK,OAAM;KAAa,OAAM;KAC5B,UAAA,qBAAC,SAAD,EAAA,UAAA,CACE,oBAAC,SAAD,EAAA,UACE,qBAAC,MAAD,EAAA,UAAA;MACE,oBAAC,MAAD,EAAA,UAAI,OAAQ,CAAA;MACZ,oBAAC,MAAD,EAAA,UAAI,UAAW,CAAA;MACf,oBAAC,MAAD,EAAA,UAAI,YAAa,CAAA;MACjB,oBAAC,MAAD,CAAQ,CAAA;KACN,EAAA,CAAA,EACC,CAAA,GACP,oBAAC,SAAD,EAAA,UACG,OAAO,KAEL,UACC,qBAAC,MAAD,EAAA,UAAA;MACE,oBAAC,MAAD,EAAA,UAAK,MAAM,KAAS,CAAA;MACpB,oBAAC,MAAD,EAAA,UAAK,IAAI,KAAK,MAAM,SAAS,CAAC,CAAC,mBAAmB,EAAM,CAAA;MACxD,oBAAC,MAAD,EAAA,UAAK,MAAM,aAAa,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,mBAAmB,IAAI,IAAQ,CAAA;MAClF,oBAAC,MAAD,EAAA,UACG,UACC,oBAAC,QAAD;OAAM,QAAO;OAAO,QAAQ,aAAa,QAAQ,KAAK,mBAAmB,MAAM,GAAG;OAAU,WAAS,aAAa,QAAQ,KAAK,mBAAmB,MAAM,GAAG;OAAU,aAAU;OAC7K,UAAA,oBAAC,UAAD;QAAQ,OAAM;QAAiB,MAAK;QAAS,UAAA;OAErC,CAAA;MACJ,CAAA,IACJ,KACF,CAAA;KACF,EAAA,GAbK,MAAM,EAaX,CAER,EACK,CAAA,CACF,EAAA,CAAA;IACJ,CAAA;IACJ,OAAO,WAAW,IAAI,oBAAC,KAAD;KAAG,OAAM;KAAc,OAAM;KAAoB,UAAA;IAAoC,CAAA,IAAI;GAC7G;EAEJ,CAAA,GAAA,UACC,qBAAC,OAAD;GAAK,OAAM;GAAX,UAAA;IACE,oBAAC,MAAD;KAAI,OAAM;KAAoB,UAAA;IAAgB,CAAA;IAC9C,qBAAC,QAAD;KAAM,QAAO;KAAO,QAAQ,aAAa,QAAQ,KAAK;KAAmB,WAAS,aAAa,QAAQ,KAAK;KAAmB,aAAU;KAAzI,UAAA,CACE,qBAAC,OAAD;MAAK,OAAM;MAAX,UAAA,CACE,oBAAC,SAAD;OAAO,OAAM;OAAe,KAAI;OAAY,UAAA;MAErC,CAAA,GACP,oBAAC,SAAD;OAAO,OAAM;OAAe,IAAG;OAAY,MAAK;OAAY,UAAA;OAAS,aAAY;MAAM,CAAA,CACpF;KACL,CAAA,GAAA,oBAAC,UAAD;MAAQ,OAAM;MAAmB,MAAK;MAAS,UAAA;KAEvC,CAAA,CACJ;;IACN,oBAAC,KAAD;KAAG,OAAM;KAAc,OAAM;KAAoB,UAAA;IAA+D,CAAA;GAC7G;EACH,CAAA,IAAA,IACD;;AAET"}

package/dist/pages/settings-webhooks.mjs

@@ -0,0 +1,149 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { jsx, jsxs } from "hono/jsx/jsx-runtime";
+//#region src/pages/settings-webhooks.tsx
+function renderSettingsWebhooks(project, webhooks, isAdmin, formState) {
+	return /* @__PURE__ */ jsxs("div", {
+		class: "grid",
+		style: "max-width: 880px;",
+		children: [
+			formState?.secret ? /* @__PURE__ */ jsxs("div", {
+				class: "alert alert--success",
+				role: "alert",
+				children: [/* @__PURE__ */ jsx("strong", {
+					class: "alert__title",
+					children: "Webhook created"
+				}), /* @__PURE__ */ jsxs("div", {
+					class: "alert__body",
+					children: ["Copy the signing secret now — shown once: ", /* @__PURE__ */ jsx("code", { children: formState.secret })]
+				})]
+			}) : null,
+			formState?.globalError ? /* @__PURE__ */ jsx("div", {
+				class: "alert alert--danger",
+				role: "alert",
+				children: formState.globalError
+			}) : null,
+			/* @__PURE__ */ jsxs("div", {
+				class: "card card--padded",
+				children: [
+					/* @__PURE__ */ jsx("h2", {
+						style: "margin:0 0 .3rem;",
+						children: "Webhooks"
+					}),
+					/* @__PURE__ */ jsx("p", {
+						class: "field__hint",
+						children: "Notify external services when builds are created, updated, approved or rejected. Payloads are POSTed as JSON and signed with the webhook secret."
+					}),
+					/* @__PURE__ */ jsx("div", {
+						class: "table-wrap",
+						style: "margin-top:.75rem;",
+						children: /* @__PURE__ */ jsxs("table", { children: [/* @__PURE__ */ jsx("thead", { children: /* @__PURE__ */ jsxs("tr", { children: [
+							/* @__PURE__ */ jsx("th", { children: "URL" }),
+							/* @__PURE__ */ jsx("th", { children: "Events" }),
+							/* @__PURE__ */ jsx("th", {})
+						] }) }), /* @__PURE__ */ jsx("tbody", { children: webhooks.map((webhook) => /* @__PURE__ */ jsxs("tr", { children: [
+							/* @__PURE__ */ jsx("td", {
+								style: "max-width:36ch; overflow:hidden; text-overflow:ellipsis; white-space:nowrap;",
+								title: webhook.url,
+								children: webhook.url
+							}),
+							/* @__PURE__ */ jsx("td", { children: webhook.events.length === 0 ? /* @__PURE__ */ jsx("span", {
+								class: "field__hint",
+								children: "all events"
+							}) : /* @__PURE__ */ jsx("div", {
+								style: "display:flex; gap:.25rem; flex-wrap:wrap;",
+								children: webhook.events.map((event) => /* @__PURE__ */ jsx("span", {
+									class: "badge badge--neutral",
+									children: event
+								}, event))
+							}) }),
+							/* @__PURE__ */ jsx("td", { children: isAdmin ? /* @__PURE__ */ jsx("form", {
+								method: "post",
+								action: `/projects/${project.slug}/settings/webhooks/${webhook.id}/delete`,
+								"hx-post": `/projects/${project.slug}/settings/webhooks/${webhook.id}/delete`,
+								"hx-target": "body",
+								children: /* @__PURE__ */ jsx("button", {
+									class: "btn btn--ghost",
+									type: "submit",
+									children: "Delete"
+								})
+							}) : null })
+						] }, webhook.id)) })] })
+					}),
+					webhooks.length === 0 ? /* @__PURE__ */ jsx("p", {
+						class: "field__hint",
+						style: "margin-top:.5rem;",
+						children: "No webhooks configured."
+					}) : null
+				]
+			}),
+			isAdmin ? /* @__PURE__ */ jsxs("div", {
+				class: "card card--padded",
+				children: [/* @__PURE__ */ jsx("h3", {
+					style: "margin:0 0 .5rem;",
+					children: "Create webhook"
+				}), /* @__PURE__ */ jsxs("form", {
+					method: "post",
+					action: `/projects/${project.slug}/settings/webhooks`,
+					"hx-post": `/projects/${project.slug}/settings/webhooks`,
+					"hx-target": "body",
+					children: [
+						/* @__PURE__ */ jsxs("div", {
+							class: "field",
+							children: [
+								/* @__PURE__ */ jsx("label", {
+									class: "field__label",
+									for: "url",
+									children: "URL"
+								}),
+								/* @__PURE__ */ jsx("input", {
+									class: `field__input ${formState?.errors?.["url"] ? "field__input--error" : ""}`,
+									id: "url",
+									name: "url",
+									type: "url",
+									required: true,
+									placeholder: "https://example.com/hooks/storyshelf"
+								}),
+								formState?.errors?.["url"] ? /* @__PURE__ */ jsx("p", {
+									class: "field__error",
+									role: "alert",
+									children: formState.errors["url"]
+								}) : null
+							]
+						}),
+						/* @__PURE__ */ jsxs("div", {
+							class: "field",
+							children: [
+								/* @__PURE__ */ jsx("label", {
+									class: "field__label",
+									for: "events",
+									children: "Events"
+								}),
+								/* @__PURE__ */ jsx("input", {
+									class: "field__input",
+									id: "events",
+									name: "events",
+									placeholder: "build.created, build.approved, snapshot.reviewed"
+								}),
+								/* @__PURE__ */ jsx("p", {
+									class: "field__hint",
+									children: "Comma-separated. Leave blank to receive all events."
+								})
+							]
+						}),
+						/* @__PURE__ */ jsx("button", {
+							class: "btn btn--primary",
+							type: "submit",
+							children: "Add webhook"
+						})
+					]
+				})]
+			}) : null
+		]
+	});
+}
+//#endregion
+export { renderSettingsWebhooks };
+
+//# sourceMappingURL=settings-webhooks.mjs.map

package/dist/pages/settings-webhooks.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-webhooks.mjs","names":[],"sources":["../../src/pages/settings-webhooks.tsx"],"sourcesContent":["import type { Project } from \"../schema.ts\";\n\nexport interface SettingsWebhook {\n  id: string;\n  url: string;\n  events: string[];\n}\n\nexport function renderSettingsWebhooks(project: Project, webhooks: SettingsWebhook[], isAdmin: boolean, formState?: { errors?: Record<string, string>; globalError?: string; secret?: string }): unknown {\n  return (\n    <div class=\"grid\" style=\"max-width: 880px;\">\n      {formState?.secret ? (\n        <div class=\"alert alert--success\" role=\"alert\">\n          <strong class=\"alert__title\">Webhook created</strong>\n          <div class=\"alert__body\">\n            Copy the signing secret now — shown once: <code>{formState.secret}</code>\n          </div>\n        </div>\n      ) : null}\n      {formState?.globalError ? (\n        <div class=\"alert alert--danger\" role=\"alert\">\n          {formState.globalError}\n        </div>\n      ) : null}\n\n      <div class=\"card card--padded\">\n        <h2 style=\"margin:0 0 .3rem;\">Webhooks</h2>\n        <p class=\"field__hint\">\n          Notify external services when builds are created, updated, approved or rejected. Payloads are POSTed as JSON and signed with the webhook secret.\n        </p>\n        <div class=\"table-wrap\" style=\"margin-top:.75rem;\">\n          <table>\n            <thead>\n              <tr>\n                <th>URL</th>\n                <th>Events</th>\n                <th></th>\n              </tr>\n            </thead>\n            <tbody>\n              {webhooks.map(\n                // eslint-disable-next-line promise-function-async -- JSX.Element includes Promise<HtmlEscapedString>\n                (webhook) => (\n                  <tr key={webhook.id}>\n                    <td style=\"max-width:36ch; overflow:hidden; text-overflow:ellipsis; white-space:nowrap;\" title={webhook.url}>\n                      {webhook.url}\n                    </td>\n                    <td>\n                      {webhook.events.length === 0 ? (\n                        <span class=\"field__hint\">all events</span>\n                      ) : (\n                        <div style=\"display:flex; gap:.25rem; flex-wrap:wrap;\">\n                          {webhook.events.map(\n                            // eslint-disable-next-line promise-function-async -- JSX.Element includes Promise<HtmlEscapedString>\n                            (event) => (\n                              <span key={event} class=\"badge badge--neutral\">\n                                {event}\n                              </span>\n                            ),\n                          )}\n                        </div>\n                      )}\n                    </td>\n                    <td>\n                      {isAdmin ? (\n                        <form method=\"post\" action={`/projects/${project.slug}/settings/webhooks/${webhook.id}/delete`} hx-post={`/projects/${project.slug}/settings/webhooks/${webhook.id}/delete`} hx-target=\"body\">\n                          <button class=\"btn btn--ghost\" type=\"submit\">\n                            Delete\n                          </button>\n                        </form>\n                      ) : null}\n                    </td>\n                  </tr>\n                ),\n              )}\n            </tbody>\n          </table>\n        </div>\n        {webhooks.length === 0 ? <p class=\"field__hint\" style=\"margin-top:.5rem;\">No webhooks configured.</p> : null}\n      </div>\n\n      {isAdmin ? (\n        <div class=\"card card--padded\">\n          <h3 style=\"margin:0 0 .5rem;\">Create webhook</h3>\n          <form method=\"post\" action={`/projects/${project.slug}/settings/webhooks`} hx-post={`/projects/${project.slug}/settings/webhooks`} hx-target=\"body\">\n            <div class=\"field\">\n              <label class=\"field__label\" for=\"url\">\n                URL\n              </label>\n              <input class={`field__input ${formState?.errors?.[\"url\"] ? \"field__input--error\" : \"\"}`} id=\"url\" name=\"url\" type=\"url\" required placeholder=\"https://example.com/hooks/storyshelf\" />\n              {formState?.errors?.[\"url\"] ? (\n                <p class=\"field__error\" role=\"alert\">\n                  {formState.errors[\"url\"]}\n                </p>\n              ) : null}\n            </div>\n            <div class=\"field\">\n              <label class=\"field__label\" for=\"events\">\n                Events\n              </label>\n              <input class=\"field__input\" id=\"events\" name=\"events\" placeholder=\"build.created, build.approved, snapshot.reviewed\" />\n              <p class=\"field__hint\">Comma-separated. Leave blank to receive all events.</p>\n            </div>\n            <button class=\"btn btn--primary\" type=\"submit\">\n              Add webhook\n            </button>\n          </form>\n        </div>\n      ) : null}\n    </div>\n  );\n}"],"mappings":";;;;;AAQA,SAAgB,uBAAuB,SAAkB,UAA6B,SAAkB,WAAiG;CACvM,OACE,qBAAC,OAAD;EAAK,OAAM;EAAO,OAAM;EAAxB,UAAA;GACG,WAAW,SACV,qBAAC,OAAD;IAAK,OAAM;IAAuB,MAAK;IAAvC,UAAA,CACE,oBAAC,UAAD;KAAQ,OAAM;KAAe,UAAA;IAAuB,CAAA,GACpD,qBAAC,OAAD;KAAK,OAAM;KAAX,UAAA,CAAyB,8CACmB,oBAAC,QAAD,EAAA,UAAO,UAAU,OAAa,CAAA,CACrE;IACF,CAAA,CAAA;GACH,CAAA,IAAA;GACH,WAAW,cACV,oBAAC,OAAD;IAAK,OAAM;IAAsB,MAAK;IACnC,UAAA,UAAU;GACR,CAAA,IACH;GAEJ,qBAAC,OAAD;IAAK,OAAM;IAAX,UAAA;KACE,oBAAC,MAAD;MAAI,OAAM;MAAoB,UAAA;KAAY,CAAA;KAC1C,oBAAC,KAAD;MAAG,OAAM;MAAc,UAAA;KAEpB,CAAA;KACH,oBAAC,OAAD;MAAK,OAAM;MAAa,OAAM;MAC5B,UAAA,qBAAC,SAAD,EAAA,UAAA,CACE,oBAAC,SAAD,EAAA,UACE,qBAAC,MAAD,EAAA,UAAA;OACE,oBAAC,MAAD,EAAA,UAAI,MAAO,CAAA;OACX,oBAAC,MAAD,EAAA,UAAI,SAAU,CAAA;OACd,oBAAC,MAAD,CAAQ,CAAA;MACN,EAAA,CAAA,EACC,CAAA,GACP,oBAAC,SAAD,EAAA,UACG,SAAS,KAEP,YACC,qBAAC,MAAD,EAAA,UAAA;OACE,oBAAC,MAAD;QAAI,OAAM;QAA+E,OAAO,QAAQ;QACrG,UAAA,QAAQ;OACP,CAAA;OACJ,oBAAC,MAAD,EAAA,UACG,QAAQ,OAAO,WAAW,IACzB,oBAAC,QAAD;QAAM,OAAM;QAAc,UAAA;OAAgB,CAAA,IAE1C,oBAAC,OAAD;QAAK,OAAM;QACR,UAAA,QAAQ,OAAO,KAEb,UACC,oBAAC,QAAD;SAAkB,OAAM;SACrB,UAAA;QACG,GAFK,KAEL,CAEV;OACG,CAAA,EAEL,CAAA;OACJ,oBAAC,MAAD,EAAA,UACG,UACC,oBAAC,QAAD;QAAM,QAAO;QAAO,QAAQ,aAAa,QAAQ,KAAK,qBAAqB,QAAQ,GAAG;QAAU,WAAS,aAAa,QAAQ,KAAK,qBAAqB,QAAQ,GAAG;QAAU,aAAU;QACrL,UAAA,oBAAC,UAAD;SAAQ,OAAM;SAAiB,MAAK;SAAS,UAAA;QAErC,CAAA;OACJ,CAAA,IACJ,KACF,CAAA;MACF,EAAA,GA7BK,QAAQ,EA6Bb,CAER,EACK,CAAA,CACF,EAAA,CAAA;KACJ,CAAA;KACJ,SAAS,WAAW,IAAI,oBAAC,KAAD;MAAG,OAAM;MAAc,OAAM;MAAoB,UAAA;KAA0B,CAAA,IAAI;IACrG;;GAEJ,UACC,qBAAC,OAAD;IAAK,OAAM;IAAX,UAAA,CACE,oBAAC,MAAD;KAAI,OAAM;KAAoB,UAAA;IAAkB,CAAA,GAChD,qBAAC,QAAD;KAAM,QAAO;KAAO,QAAQ,aAAa,QAAQ,KAAK;KAAqB,WAAS,aAAa,QAAQ,KAAK;KAAqB,aAAU;KAA7I,UAAA;MACE,qBAAC,OAAD;OAAK,OAAM;OAAX,UAAA;QACE,oBAAC,SAAD;SAAO,OAAM;SAAe,KAAI;SAAM,UAAA;QAE/B,CAAA;QACP,oBAAC,SAAD;SAAO,OAAO,gBAAgB,WAAW,SAAS,SAAS,wBAAwB;SAAM,IAAG;SAAM,MAAK;SAAM,MAAK;SAAM,UAAA;SAAS,aAAY;QAAwC,CAAA;QACpL,WAAW,SAAS,SACnB,oBAAC,KAAD;SAAG,OAAM;SAAe,MAAK;SAC1B,UAAA,UAAU,OAAO;QACjB,CAAA,IACD;OACD;;MACL,qBAAC,OAAD;OAAK,OAAM;OAAX,UAAA;QACE,oBAAC,SAAD;SAAO,OAAM;SAAe,KAAI;SAAS,UAAA;QAElC,CAAA;QACP,oBAAC,SAAD;SAAO,OAAM;SAAe,IAAG;SAAS,MAAK;SAAS,aAAY;QAAoD,CAAA;QACtH,oBAAC,KAAD;SAAG,OAAM;SAAc,UAAA;QAAsD,CAAA;OAC1E;;MACL,oBAAC,UAAD;OAAQ,OAAM;OAAmB,MAAK;OAAS,UAAA;MAEvC,CAAA;KACJ;IACH,CAAA,CAAA;GACH,CAAA,IAAA;EACD;;AAET"}

package/dist/retention/purge.d.mts

@@ -0,0 +1,28 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { StorageAdapter } from "../adapter/storage.mjs";
+import { Project } from "../schema.mjs";
+import { Logger } from "pino";
+//#region src/retention/purge.d.ts
+interface PurgeOptions {
+  ttlDays: number;
+  keepLatestPerBranch: boolean;
+}
+interface PurgeResult {
+  removedBuilds: number;
+  removedFiles: number;
+}
+declare class Retention {
+  private readonly db;
+  private readonly storage;
+  private readonly logger?;
+  constructor(db: DatabaseAdapter, storage: StorageAdapter, logger?: Logger | undefined);
+  purge(project: Project, options: PurgeOptions): Promise<PurgeResult>;
+  private removeBuild;
+  private latestPerBranch;
+  private deleteBuildFiles;
+}
+//#endregion
+export { PurgeOptions, PurgeResult, Retention };
+//# sourceMappingURL=purge.d.mts.map

package/dist/retention/purge.mjs

@@ -0,0 +1,66 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { builds } from "../schema.mjs";
+import { BuildModel } from "../models/build.mjs";
+import { TERMINAL_BUILD_STATUSES } from "../types.mjs";
+import { LabelModel } from "../models/label.mjs";
+import { and, eq, inArray, lt, sql } from "drizzle-orm";
+//#region src/retention/purge.ts
+var Retention = class {
+	db;
+	storage;
+	logger;
+	constructor(db, storage, logger) {
+		this.db = db;
+		this.storage = storage;
+		this.logger = logger;
+	}
+	async purge(project, options) {
+		const cutoff = (/* @__PURE__ */ new Date(Date.now() - options.ttlDays * 864e5)).toISOString();
+		const candidates = await this.db.list(builds, { where: and(eq(builds.projectId, project.id), inArray(builds.status, [...TERMINAL_BUILD_STATUSES]), lt(builds.updatedAt, cutoff)) });
+		const keep = options.keepLatestPerBranch ? await this.latestPerBranch(project.id) : /* @__PURE__ */ new Set();
+		const labelModel = new LabelModel(this.db);
+		const buildIds = (await Promise.all(candidates.map(async (build) => {
+			if (keep.has(build.id) || await labelModel.hasPersistent(project.id, build.id)) return null;
+			return build.id;
+		}))).filter((id) => id !== null);
+		const results = await Promise.all(buildIds.map(async (buildId) => ({
+			files: await this.deleteBuildFiles(project.id, buildId),
+			removed: await this.removeBuild(buildId)
+		})));
+		const removedBuilds = results.filter((r) => r.removed).length;
+		const removedFiles = results.reduce((sum, r) => sum + r.files, 0);
+		this.logger?.info({
+			projectId: project.id,
+			removedBuilds,
+			removedFiles
+		}, "build retention purge complete");
+		return {
+			removedBuilds,
+			removedFiles
+		};
+	}
+	async removeBuild(buildId) {
+		await new BuildModel(this.db).remove(buildId);
+		return true;
+	}
+	async latestPerBranch(projectId) {
+		const rows = await this.db.all(sql`SELECT id, gitBranch, createdAt FROM builds WHERE projectId = ${projectId} ORDER BY createdAt DESC`);
+		const latest = /* @__PURE__ */ new Map();
+		for (const row of rows) if (!latest.get(row.gitBranch)) latest.set(row.gitBranch, row.id);
+		return new Set(latest.values());
+	}
+	async deleteBuildFiles(projectId, buildId) {
+		const prefix = `${projectId}/builds/${buildId}/`;
+		const files = await this.storage.list(prefix);
+		await Promise.all(files.map(async (file) => {
+			await this.storage.delete(file);
+		}));
+		return files.length;
+	}
+};
+//#endregion
+export { Retention };
+
+//# sourceMappingURL=purge.mjs.map

package/dist/retention/purge.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge.mjs","names":[],"sources":["../../src/retention/purge.ts"],"sourcesContent":["import { and, eq, inArray, lt, sql } from \"drizzle-orm\";\nimport type { Logger } from \"pino\";\n\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { StorageAdapter } from \"../adapters/storage.ts\";\nimport { BuildModel } from \"../models/build.ts\";\nimport { LabelModel } from \"../models/label.ts\";\nimport { builds, type Project } from \"../schema.ts\";\nimport { TERMINAL_BUILD_STATUSES } from \"../types.ts\";\n\nexport interface PurgeOptions {\n  ttlDays: number;\n  keepLatestPerBranch: boolean;\n}\n\nexport interface PurgeResult {\n  removedBuilds: number;\n  removedFiles: number;\n}\nexport class Retention {\n  constructor(\n    private readonly db: DatabaseAdapter,\n    private readonly storage: StorageAdapter,\n    private readonly logger?: Logger,\n  ) {}\n\n\n  async purge(project: Project, options: PurgeOptions): Promise<PurgeResult> {\n    const cutoff = new Date(Date.now() - options.ttlDays * 86_400_000).toISOString();\n    const candidates = await this.db.list(builds, {\n      where: and(eq(builds.projectId, project.id), inArray(builds.status, [...TERMINAL_BUILD_STATUSES]), lt(builds.updatedAt, cutoff)),\n    });\n\n    const keep = options.keepLatestPerBranch ? await this.latestPerBranch(project.id) : new Set<string>();\n    const labelModel = new LabelModel(this.db);\n    const target = await Promise.all(\n      candidates.map(async (build) => {\n        if (keep.has(build.id) || (await labelModel.hasPersistent(project.id, build.id))) {\n          return null;\n        }\n        return build.id;\n      }),\n    );\n\n    const buildIds = target.filter((id): id is string => id !== null);\n    const results = await Promise.all(\n      buildIds.map(async (buildId) => ({\n        files: await this.deleteBuildFiles(project.id, buildId),\n        removed: await this.removeBuild(buildId),\n      })),\n    );\n    const removedBuilds = results.filter((r) => r.removed).length;\n    const removedFiles = results.reduce((sum, r) => sum + r.files, 0);\n    this.logger?.info({ projectId: project.id, removedBuilds, removedFiles }, \"build retention purge complete\");\n    return { removedBuilds, removedFiles };\n  }\n\n  private async removeBuild(buildId: string): Promise<boolean> {\n    await new BuildModel(this.db).remove(buildId);\n    return true;\n  }\n\n  private async latestPerBranch(projectId: string): Promise<Set<string>> {\n    const rows = await this.db.all<{ id: string; gitBranch: string }>(\n      sql`SELECT id, gitBranch, createdAt FROM builds WHERE projectId = ${projectId} ORDER BY createdAt DESC`,\n    );\n    const latest = new Map<string, string>();\n    for (const row of rows) {\n      const current = latest.get(row.gitBranch);\n      if (!current) {\n        latest.set(row.gitBranch, row.id);\n      }\n    }\n    return new Set(latest.values());\n  }\n\n  private async deleteBuildFiles(projectId: string, buildId: string): Promise<number> {\n    const prefix = `${projectId}/builds/${buildId}/`;\n    const files = await this.storage.list(prefix);\n    await Promise.all(\n      files.map(async (file) => {\n        await this.storage.delete(file);\n      }),\n    );\n    return files.length;\n  }\n}\n"],"mappings":";;;;;;;;;AAmBA,IAAa,YAAb,MAAuB;CAEF;CACA;CACA;CAHnB,YACE,IACA,SACA,QACA;EAHiB,KAAA,KAAA;EACA,KAAA,UAAA;EACA,KAAA,SAAA;CAChB;CAGH,MAAM,MAAM,SAAkB,SAA6C;EACzE,MAAM,0BAAS,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,UAAU,KAAU,EAAA,CAAE,YAAY;EAC/E,MAAM,aAAa,MAAM,KAAK,GAAG,KAAK,QAAQ,EAC5C,OAAO,IAAI,GAAG,OAAO,WAAW,QAAQ,EAAE,GAAG,QAAQ,OAAO,QAAQ,CAAC,GAAG,uBAAuB,CAAC,GAAG,GAAG,OAAO,WAAW,MAAM,CAAC,EACjI,CAAC;EAED,MAAM,OAAO,QAAQ,sBAAsB,MAAM,KAAK,gBAAgB,QAAQ,EAAE,oBAAI,IAAI,IAAY;EACpG,MAAM,aAAa,IAAI,WAAW,KAAK,EAAE;EAUzC,MAAM,YAAW,MATI,QAAQ,IAC3B,WAAW,IAAI,OAAO,UAAU;GAC9B,IAAI,KAAK,IAAI,MAAM,EAAE,KAAM,MAAM,WAAW,cAAc,QAAQ,IAAI,MAAM,EAAE,GAC5E,OAAO;GAET,OAAO,MAAM;EACf,CAAC,CACH,EAAA,CAEwB,QAAQ,OAAqB,OAAO,IAAI;EAChE,MAAM,UAAU,MAAM,QAAQ,IAC5B,SAAS,IAAI,OAAO,aAAa;GAC/B,OAAO,MAAM,KAAK,iBAAiB,QAAQ,IAAI,OAAO;GACtD,SAAS,MAAM,KAAK,YAAY,OAAO;EACzC,EAAE,CACJ;EACA,MAAM,gBAAgB,QAAQ,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC;EACvD,MAAM,eAAe,QAAQ,QAAQ,KAAK,MAAM,MAAM,EAAE,OAAO,CAAC;EAChE,KAAK,QAAQ,KAAK;GAAE,WAAW,QAAQ;GAAI;GAAe;EAAa,GAAG,gCAAgC;EAC1G,OAAO;GAAE;GAAe;EAAa;CACvC;CAEA,MAAc,YAAY,SAAmC;EAC3D,MAAM,IAAI,WAAW,KAAK,EAAE,CAAC,CAAC,OAAO,OAAO;EAC5C,OAAO;CACT;CAEA,MAAc,gBAAgB,WAAyC;EACrE,MAAM,OAAO,MAAM,KAAK,GAAG,IACzB,GAAG,iEAAiE,UAAU,yBAChF;EACA,MAAM,yBAAS,IAAI,IAAoB;EACvC,KAAK,MAAM,OAAO,MAEhB,IAAI,CADY,OAAO,IAAI,IAAI,SACpB,GACT,OAAO,IAAI,IAAI,WAAW,IAAI,EAAE;EAGpC,OAAO,IAAI,IAAI,OAAO,OAAO,CAAC;CAChC;CAEA,MAAc,iBAAiB,WAAmB,SAAkC;EAClF,MAAM,SAAS,GAAG,UAAU,UAAU,QAAQ;EAC9C,MAAM,QAAQ,MAAM,KAAK,QAAQ,KAAK,MAAM;EAC5C,MAAM,QAAQ,IACZ,MAAM,IAAI,OAAO,SAAS;GACxB,MAAM,KAAK,QAAQ,OAAO,IAAI;EAChC,CAAC,CACH;EACA,OAAO,MAAM;CACf;AACF"}

package/dist/routers/admin.mjs

@@ -0,0 +1,41 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ProjectModel } from "../models/project.mjs";
+import { Retention } from "../retention/purge.mjs";
+import { getStore } from "../store.mjs";
+import { requireSiteAdmin } from "./helpers.mjs";
+import { forbidden, purgeInputSchema, purgeSchema } from "./schemas.mjs";
+import { createRoute } from "@hono/zod-openapi";
+//#region src/routers/admin.ts
+const purgeRoute = createRoute({
+	method: "post",
+	path: "/api/v1/admin/purge",
+	request: { body: { content: { "application/json": { schema: purgeInputSchema } } } },
+	responses: {
+		200: {
+			content: { "application/json": { schema: purgeSchema } },
+			description: "Retention purge run"
+		},
+		...forbidden
+	}
+});
+function registerAdmin(app) {
+	app.openapi(purgeRoute, async (c) => {
+		requireSiteAdmin();
+		const ttlDays = c.req.valid("json").ttlDays ?? getStore().config.purgeTtlDays ?? 30;
+		const projects = await new ProjectModel(getStore().db).list();
+		const retention = new Retention(getStore().db, getStore().storage);
+		const removedBuilds = (await Promise.all(projects.map(async (project) => {
+			return await retention.purge(project, {
+				ttlDays,
+				keepLatestPerBranch: true
+			});
+		}))).reduce((sum, result) => sum + result.removedBuilds, 0);
+		return c.json({ removedBuilds });
+	});
+}
+//#endregion
+export { registerAdmin };
+
+//# sourceMappingURL=admin.mjs.map

package/dist/routers/admin.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.mjs","names":["forbiddenResponse"],"sources":["../../src/routers/admin.ts"],"sourcesContent":["import { createRoute } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\n\nimport { ProjectModel } from \"../models/project.ts\";\nimport { Retention } from \"../retention/purge.ts\";\nimport { getStore } from \"../store.ts\";\nimport { requireSiteAdmin } from \"./helpers.ts\";\nimport { forbidden as forbiddenResponse, purgeInputSchema, purgeSchema } from \"./schemas.ts\";\n\nconst purgeRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/admin/purge\",\n  request: { body: { content: { \"application/json\": { schema: purgeInputSchema } } } },\n  responses: {\n    200: { content: { \"application/json\": { schema: purgeSchema } }, description: \"Retention purge run\" },\n    ...forbiddenResponse,\n  },\n});\n\nexport function registerAdmin(app: ShelfApp): void {\n  app.openapi(purgeRoute, async (c) => {\n    requireSiteAdmin();\n    const body = c.req.valid(\"json\");\n    const ttlDays = body.ttlDays ?? getStore().config.purgeTtlDays ?? 30;\n    const projects = await new ProjectModel(getStore().db).list();\n    const retention = new Retention(getStore().db, getStore().storage);\n    const results = await Promise.all(\n      projects.map(async (project) => {\n        return await retention.purge(project, { ttlDays, keepLatestPerBranch: true });\n      }),\n    );\n    const removedBuilds = results.reduce((sum, result) => sum + result.removedBuilds, 0);\n    return c.json({ removedBuilds });\n  });\n}"],"mappings":";;;;;;;;;;AASA,MAAM,aAAa,YAAY;CAC7B,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,iBAAiB,EAAE,EAAE,EAAE;CACnF,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GAAG,aAAa;EAAsB;EACpG,GAAGA;CACL;AACF,CAAC;AAED,SAAgB,cAAc,KAAqB;CACjD,IAAI,QAAQ,YAAY,OAAO,MAAM;EACnC,iBAAiB;EAEjB,MAAM,UADO,EAAE,IAAI,MAAM,MACN,CAAC,CAAC,WAAW,SAAS,CAAC,CAAC,OAAO,gBAAgB;EAClE,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;EAC5D,MAAM,YAAY,IAAI,UAAU,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO;EAMjE,MAAM,iBAAgB,MALA,QAAQ,IAC5B,SAAS,IAAI,OAAO,YAAY;GAC9B,OAAO,MAAM,UAAU,MAAM,SAAS;IAAE;IAAS,qBAAqB;GAAK,CAAC;EAC9E,CAAC,CACH,EAAA,CAC8B,QAAQ,KAAK,WAAW,MAAM,OAAO,eAAe,CAAC;EACnF,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC;CACjC,CAAC;AACH"}

package/dist/routers/assets.mjs

@@ -0,0 +1,24 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { readFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+//#region src/routers/assets.ts
+let htmxSource = null;
+async function htmxScript() {
+	htmxSource ??= await readFile(fileURLToPath(new URL("../assets/htmx.min.js", import.meta.url)), "utf8");
+	return htmxSource;
+}
+function registerAssets(app) {
+	app.get("/assets/htmx.js", async (c) => {
+		const body = await htmxScript();
+		return c.body(body, 200, {
+			"content-type": "application/javascript",
+			"cache-control": "public, max-age=31536000, immutable"
+		});
+	});
+}
+//#endregion
+export { registerAssets };
+
+//# sourceMappingURL=assets.mjs.map

package/dist/routers/assets.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.mjs","names":[],"sources":["../../src/routers/assets.ts"],"sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { fileURLToPath } from \"node:url\";\n\nimport type { ShelfApp } from \"../index.tsx\";\n\nlet htmxSource: string | null = null;\n\nasync function htmxScript(): Promise<string> {\n  htmxSource ??= await readFile(fileURLToPath(new URL(\"../assets/htmx.min.js\", import.meta.url)), \"utf8\");\n  return htmxSource;\n}\n\nexport function registerAssets(app: ShelfApp): void {\n  app.get(\"/assets/htmx.js\", async (c) => {\n    const body = await htmxScript();\n    return c.body(body, 200, {\n      \"content-type\": \"application/javascript\",\n      \"cache-control\": \"public, max-age=31536000, immutable\",\n    });\n  });\n}"],"mappings":";;;;;;AAKA,IAAI,aAA4B;AAEhC,eAAe,aAA8B;CAC3C,eAAe,MAAM,SAAS,cAAc,IAAI,IAAI,yBAAyB,YAAY,GAAG,CAAC,GAAG,MAAM;CACtG,OAAO;AACT;AAEA,SAAgB,eAAe,KAAqB;CAClD,IAAI,IAAI,mBAAmB,OAAO,MAAM;EACtC,MAAM,OAAO,MAAM,WAAW;EAC9B,OAAO,EAAE,KAAK,MAAM,KAAK;GACvB,gBAAgB;GAChB,iBAAiB;EACnB,CAAC;CACH,CAAC;AACH"}

package/dist/routers/auth.mjs

@@ -0,0 +1,77 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { randomToken } from "../utils/hash.mjs";
+import { SESSION_COOKIE } from "../adapter/auth.mjs";
+import { renderLoginPage } from "../pages/login.mjs";
+import { hxRedirect } from "./htmx.mjs";
+import { HTTPException } from "hono/http-exception";
+//#region src/routers/auth.ts
+const OAUTH_STATE_COOKIE = "storyshelf_oauth_state";
+const SESSION_TTL_SECONDS = 604800;
+const SHARED_USER = {
+	id: "shared",
+	email: "admin@local",
+	name: "Admin",
+	role: "admin"
+};
+function sessionCookieHeader(token) {
+	return `${SESSION_COOKIE}=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${SESSION_TTL_SECONDS}`;
+}
+function clearSessionCookieHeader() {
+	return `${SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`;
+}
+function hasPasswordLogin(auth) {
+	return "login" in auth;
+}
+function hasSso(auth) {
+	return "loginUrl" in auth;
+}
+function buildSsoUrl(c, auth) {
+	const state = randomToken("shelf_").value;
+	c.header("set-cookie", `${OAUTH_STATE_COOKIE}=${state}; Path=/; HttpOnly; SameSite=Lax; Max-Age=600`);
+	return auth.loginUrl(state);
+}
+function registerAuth(app, auth) {
+	app.get("/auth/login", async (c) => {
+		if (hasSso(auth) && !hasPasswordLogin(auth)) return c.redirect(buildSsoUrl(c, auth));
+		const ssoUrl = hasSso(auth) ? buildSsoUrl(c, auth) : void 0;
+		return c.html(await renderLoginPage({ ssoUrl }));
+	});
+	app.post("/auth/login", async (c) => {
+		if (!hasPasswordLogin(auth)) throw new HTTPException(404, { message: "Password login is not configured" });
+		const raw = (await c.req.formData()).get("password");
+		const password = typeof raw === "string" ? raw : "";
+		try {
+			const token = await auth.login(password, SHARED_USER);
+			c.header("set-cookie", sessionCookieHeader(token));
+			return hxRedirect(c, "/");
+		} catch {
+			return c.html(await renderLoginPage({ error: "Invalid password" }), 401);
+		}
+	});
+	app.get("/auth/callback", async (c) => {
+		if (!auth.handleCallback) return c.notFound();
+		const code = c.req.query("code") ?? "";
+		const state = c.req.query("state") ?? "";
+		if (!code || !state) throw new HTTPException(400, { message: "Missing code or state" });
+		const user = await auth.handleCallback({
+			provider: "oidc",
+			code,
+			state
+		});
+		if (!user) return c.html(await renderLoginPage({ error: "SSO sign in failed" }), 401);
+		const token = await auth.createSession(user);
+		c.header("set-cookie", sessionCookieHeader(token));
+		return c.redirect("/");
+	});
+	app.post("/auth/logout", async (c) => {
+		await auth.destroySession("");
+		c.header("set-cookie", clearSessionCookieHeader());
+		return hxRedirect(c, "/auth/login");
+	});
+}
+//#endregion
+export { registerAuth };
+
+//# sourceMappingURL=auth.mjs.map

package/dist/routers/auth.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.mjs","names":[],"sources":["../../src/routers/auth.ts"],"sourcesContent":["import type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfApp } from \"../index.tsx\";\n\nimport { SESSION_COOKIE, type AuthAdapter, type AuthUser } from \"../adapters/auth.ts\";\nimport { renderLoginPage } from \"../pages/login.tsx\";\nimport { randomToken } from \"../utils/hash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\nconst OAUTH_STATE_COOKIE = \"storyshelf_oauth_state\";\nconst SESSION_TTL_SECONDS = 7 * 24 * 60 * 60;\n\nconst SHARED_USER: AuthUser = { id: \"shared\", email: \"admin@local\", name: \"Admin\", role: \"admin\" };\n\nfunction sessionCookieHeader(token: string): string {\n  return `${SESSION_COOKIE}=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${SESSION_TTL_SECONDS}`;\n}\n\nfunction clearSessionCookieHeader(): string {\n  return `${SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`;\n}\n\ntype PasswordAuth = AuthAdapter & { login(password: string, user: AuthUser): Promise<string> };\ntype SsoAuth = AuthAdapter & { loginUrl(state: string): string };\n\nfunction hasPasswordLogin(auth: AuthAdapter): auth is PasswordAuth {\n  return \"login\" in auth;\n}\n\nfunction hasSso(auth: AuthAdapter): auth is SsoAuth {\n  return \"loginUrl\" in auth;\n}\n\nfunction buildSsoUrl(c: Context, auth: SsoAuth): string {\n  const state = randomToken(\"shelf_\").value;\n  c.header(\"set-cookie\", `${OAUTH_STATE_COOKIE}=${state}; Path=/; HttpOnly; SameSite=Lax; Max-Age=600`);\n  return auth.loginUrl(state);\n}\n\nexport function registerAuth(app: ShelfApp, auth: AuthAdapter): void {\n  app.get(\"/auth/login\", async (c) => {\n    if (hasSso(auth) && !hasPasswordLogin(auth)) {\n      return c.redirect(buildSsoUrl(c, auth));\n    }\n    const ssoUrl = hasSso(auth) ? buildSsoUrl(c, auth) : undefined;\n    return c.html(await renderLoginPage({ ssoUrl }));\n  });\n\n  app.post(\"/auth/login\", async (c) => {\n    if (!hasPasswordLogin(auth)) {\n      throw new HTTPException(404, { message: \"Password login is not configured\" });\n    }\n    const form = await c.req.formData();\n    const raw = form.get(\"password\");\n    const password = typeof raw === \"string\" ? raw : \"\";\n    try {\n      const token = await auth.login(password, SHARED_USER);\n      c.header(\"set-cookie\", sessionCookieHeader(token));\n      return hxRedirect(c, \"/\");\n    } catch {\n      return c.html(await renderLoginPage({ error: \"Invalid password\" }), 401);\n    }\n  });\n\n  app.get(\"/auth/callback\", async (c) => {\n    if (!auth.handleCallback) {\n      return c.notFound();\n    }\n    const code = c.req.query(\"code\") ?? \"\";\n    const state = c.req.query(\"state\") ?? \"\";\n    if (!code || !state) {\n      throw new HTTPException(400, { message: \"Missing code or state\" });\n    }\n    const user = await auth.handleCallback({ provider: \"oidc\", code, state });\n    if (!user) {\n      return c.html(await renderLoginPage({ error: \"SSO sign in failed\" }), 401);\n    }\n    const token = await auth.createSession(user);\n    c.header(\"set-cookie\", sessionCookieHeader(token));\n    return c.redirect(\"/\");\n  });\n\n  app.post(\"/auth/logout\", async (c) => {\n    await auth.destroySession(\"\");\n    c.header(\"set-cookie\", clearSessionCookieHeader());\n    return hxRedirect(c, \"/auth/login\");\n  });\n}"],"mappings":";;;;;;;;;AASA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,MAAM,cAAwB;CAAE,IAAI;CAAU,OAAO;CAAe,MAAM;CAAS,MAAM;AAAQ;AAEjG,SAAS,oBAAoB,OAAuB;CAClD,OAAO,GAAG,eAAe,GAAG,MAAM,4CAA4C;AAChF;AAEA,SAAS,2BAAmC;CAC1C,OAAO,GAAG,eAAe;AAC3B;AAKA,SAAS,iBAAiB,MAAyC;CACjE,OAAO,WAAW;AACpB;AAEA,SAAS,OAAO,MAAoC;CAClD,OAAO,cAAc;AACvB;AAEA,SAAS,YAAY,GAAY,MAAuB;CACtD,MAAM,QAAQ,YAAY,QAAQ,CAAC,CAAC;CACpC,EAAE,OAAO,cAAc,GAAG,mBAAmB,GAAG,MAAM,8CAA8C;CACpG,OAAO,KAAK,SAAS,KAAK;AAC5B;AAEA,SAAgB,aAAa,KAAe,MAAyB;CACnE,IAAI,IAAI,eAAe,OAAO,MAAM;EAClC,IAAI,OAAO,IAAI,KAAK,CAAC,iBAAiB,IAAI,GACxC,OAAO,EAAE,SAAS,YAAY,GAAG,IAAI,CAAC;EAExC,MAAM,SAAS,OAAO,IAAI,IAAI,YAAY,GAAG,IAAI,IAAI,KAAA;EACrD,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC;CACjD,CAAC;CAED,IAAI,KAAK,eAAe,OAAO,MAAM;EACnC,IAAI,CAAC,iBAAiB,IAAI,GACxB,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,mCAAmC,CAAC;EAG9E,MAAM,OAAM,MADO,EAAE,IAAI,SAAS,EAAA,CACjB,IAAI,UAAU;EAC/B,MAAM,WAAW,OAAO,QAAQ,WAAW,MAAM;EACjD,IAAI;GACF,MAAM,QAAQ,MAAM,KAAK,MAAM,UAAU,WAAW;GACpD,EAAE,OAAO,cAAc,oBAAoB,KAAK,CAAC;GACjD,OAAO,WAAW,GAAG,GAAG;EAC1B,QAAQ;GACN,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,mBAAmB,CAAC,GAAG,GAAG;EACzE;CACF,CAAC;CAED,IAAI,IAAI,kBAAkB,OAAO,MAAM;EACrC,IAAI,CAAC,KAAK,gBACR,OAAO,EAAE,SAAS;EAEpB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;EACpC,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,KAAK;EACtC,IAAI,CAAC,QAAQ,CAAC,OACZ,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,wBAAwB,CAAC;EAEnE,MAAM,OAAO,MAAM,KAAK,eAAe;GAAE,UAAU;GAAQ;GAAM;EAAM,CAAC;EACxE,IAAI,CAAC,MACH,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,qBAAqB,CAAC,GAAG,GAAG;EAE3E,MAAM,QAAQ,MAAM,KAAK,cAAc,IAAI;EAC3C,EAAE,OAAO,cAAc,oBAAoB,KAAK,CAAC;EACjD,OAAO,EAAE,SAAS,GAAG;CACvB,CAAC;CAED,IAAI,KAAK,gBAAgB,OAAO,MAAM;EACpC,MAAM,KAAK,eAAe,EAAE;EAC5B,EAAE,OAAO,cAAc,yBAAyB,CAAC;EACjD,OAAO,WAAW,GAAG,aAAa;CACpC,CAAC;AACH"}