@storyshelf/core 0.1.0

package/dist/routers/settings.mjs

@@ -0,0 +1,235 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ProjectModel } from "../models/project.mjs";
+import { LabelModel } from "../models/label.mjs";
+import { getStore } from "../store.mjs";
+import { MemberModel } from "../models/member.mjs";
+import { TokenModel } from "../models/token.mjs";
+import { randomToken } from "../utils/hash.mjs";
+import { notFound } from "./helpers.mjs";
+import { hxRedirect } from "./htmx.mjs";
+import { WebhookModel } from "../models/webhook.mjs";
+import { StatusConfigModel } from "../models/status-config.mjs";
+import { renderProjectSettingsPage } from "../pages/project-settings.mjs";
+//#region src/routers/settings.ts
+async function loadSettingsData(slug) {
+	const project = await new ProjectModel(getStore().db).getBySlug(slug);
+	if (!project) return null;
+	const { db, config, user, authEnabled, gitHosts } = getStore();
+	const labelTypes = await new LabelModel(db).listTypes(project.id);
+	const tokens = (await new TokenModel(db).list(project.id)).map(({ hash: _hash, ...rest }) => rest);
+	const members = await new MemberModel(db).list(project.id);
+	return {
+		project,
+		labelTypes,
+		tokens,
+		members,
+		webhooks: (await new WebhookModel(db).list(project.id)).map((webhook) => ({
+			id: webhook.id,
+			url: webhook.url,
+			events: WebhookModel.eventsOf(webhook)
+		})),
+		statusConfigs: (await new StatusConfigModel(db, config.secret).list(project.id)).map((row) => ({
+			id: row.id,
+			provider: row.provider,
+			config: JSON.parse(row.config),
+			hasToken: row.tokenEncrypted.length > 0,
+			createdAt: row.createdAt,
+			updatedAt: row.updatedAt
+		})),
+		gitHosts,
+		isAdmin: !authEnabled || user?.role === "admin" || members.some((member) => member.userId === user?.id && member.role === "admin")
+	};
+}
+async function renderSettingsPage(c, tab, formState) {
+	const data = await loadSettingsData(c.req.param("slug") ?? "");
+	if (!data) notFound("Project not found");
+	return await renderProjectSettingsPage({
+		project: data.project,
+		activeTab: tab,
+		labelTypes: data.labelTypes,
+		tokens: data.tokens,
+		members: data.members,
+		webhooks: data.webhooks,
+		statusConfigs: data.statusConfigs,
+		gitHosts: data.gitHosts,
+		isAdmin: data.isAdmin
+	}, formState);
+}
+async function settingsPage(c, tab) {
+	const html = await renderSettingsPage(c, tab);
+	if (!html) notFound("Project not found");
+	return html;
+}
+async function findProject(slug) {
+	const project = await new ProjectModel(getStore().db).getBySlug(slug);
+	if (!project) notFound("Project not found");
+	return project;
+}
+function registerSettingsPages(app) {
+	app.get("/projects/:slug/settings", async (c) => c.html(await settingsPage(c, "general")));
+	app.get("/projects/:slug/settings/labels", async (c) => c.html(await settingsPage(c, "labels")));
+	app.get("/projects/:slug/settings/tokens", async (c) => c.html(await settingsPage(c, "tokens")));
+	app.get("/projects/:slug/settings/webhooks", async (c) => c.html(await settingsPage(c, "webhooks")));
+	app.get("/projects/:slug/settings/members", async (c) => c.html(await settingsPage(c, "members")));
+	app.get("/projects/:slug/settings/status", async (c) => c.html(await settingsPage(c, "status")));
+	app.post("/projects/:slug/settings", async (c) => {
+		const slug = c.req.param("slug");
+		const project = await findProject(slug);
+		const form = await c.req.formData();
+		const name = form.get("name");
+		if (typeof name !== "string" || name.trim() === "") return c.html(await renderSettingsPage(c, "general", { errors: { name: "Name is required" } }) ?? "", 400);
+		const gitRepository = asString(form.get("gitRepository"));
+		const gitDefaultBranch = asString(form.get("gitDefaultBranch"));
+		const pixelThreshold = asString(form.get("pixelThreshold"));
+		const maxDiffRatio = asString(form.get("maxDiffRatio"));
+		const publicBranchRegex = asString(form.get("publicBranchRegex"));
+		try {
+			await new ProjectModel(getStore().db).update(project.id, {
+				name: name.trim(),
+				gitRepository: gitRepository ?? void 0,
+				gitDefaultBranch: gitDefaultBranch ?? void 0,
+				pixelThreshold: pixelThreshold ? Number(pixelThreshold) : void 0,
+				maxDiffRatio: maxDiffRatio ? Number(maxDiffRatio) : void 0,
+				publicBranchRegex: publicBranchRegex === "" ? null : publicBranchRegex ?? void 0
+			});
+			return hxRedirect(c, `/projects/${slug}/settings`);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : "Failed to update";
+			return c.html(await renderSettingsPage(c, "general", { globalError: message }) ?? "", 400);
+		}
+	});
+	app.post("/projects/:slug/delete", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		await new ProjectModel(getStore().db).remove(project.id);
+		return hxRedirect(c, "/projects");
+	});
+	app.post("/projects/:slug/settings/labels", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		const form = await c.req.formData();
+		const key = asString(form.get("key"));
+		const labelName = asString(form.get("labelName")) ?? asString(form.get("name"));
+		const linkTemplate = asString(form.get("linkTemplate"));
+		if (!key || !labelName) return c.html(await renderSettingsPage(c, "labels", { globalError: "Key and name are required" }) ?? "", 400);
+		try {
+			await new LabelModel(getStore().db).createType(project.id, {
+				key,
+				name: labelName,
+				linkTemplate
+			});
+			return hxRedirect(c, `/projects/${project.slug}/settings/labels`);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : "Failed to create label";
+			return c.html(await renderSettingsPage(c, "labels", { globalError: message }) ?? "", 400);
+		}
+	});
+	app.post("/projects/:slug/settings/labels/:key/delete", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		try {
+			await new LabelModel(getStore().db).removeType(project.id, c.req.param("key"));
+		} catch {
+			return c.html(await renderSettingsPage(c, "labels", { globalError: "Cannot delete built-in label" }) ?? "", 400);
+		}
+		return hxRedirect(c, `/projects/${project.slug}/settings/labels`);
+	});
+	app.post("/projects/:slug/settings/tokens", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		const form = await c.req.formData();
+		const tokenName = asString(form.get("tokenName")) ?? asString(form.get("name"));
+		if (!tokenName) return c.html(await renderSettingsPage(c, "tokens", { globalError: "Name is required" }) ?? "", 400);
+		const token = randomToken("shelf_");
+		await new TokenModel(getStore().db).create(project.id, tokenName, token.hash);
+		const html = await renderSettingsPage(c, "tokens");
+		const inject = `<div class="alert alert--success" role="alert"><strong class="alert__title">Token created</strong><div class="alert__body">Copy now — shown once: <code>${token.value}</code></div></div>`;
+		const withToken = html.replace("<nav class=\"tabs\"", `${inject}<nav class="tabs"`);
+		return c.html(withToken);
+	});
+	app.post("/projects/:slug/settings/tokens/:tokenId/delete", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		await new TokenModel(getStore().db).remove(c.req.param("tokenId"));
+		return hxRedirect(c, `/projects/${project.slug}/settings/tokens`);
+	});
+	app.post("/projects/:slug/settings/webhooks", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		const form = await c.req.formData();
+		const url = asString(form.get("url"));
+		if (!url) return c.html(await renderSettingsPage(c, "webhooks", { errors: { url: "A valid URL is required" } }) ?? "", 400);
+		let parsedUrl;
+		try {
+			parsedUrl = new URL(url);
+		} catch {
+			return c.html(await renderSettingsPage(c, "webhooks", { errors: { url: "Enter a valid URL" } }) ?? "", 400);
+		}
+		if (parsedUrl.protocol !== "https:" && parsedUrl.protocol !== "http:") return c.html(await renderSettingsPage(c, "webhooks", { errors: { url: "URL must use http or https" } }) ?? "", 400);
+		const eventsRaw = asString(form.get("events"));
+		const events = eventsRaw ? eventsRaw.split(",").map((event) => event.trim()).filter((event) => event.length > 0) : void 0;
+		const webhookModel = new WebhookModel(getStore().db);
+		const secret = randomToken("whsec_").value;
+		await webhookModel.create(project.id, {
+			url,
+			events,
+			secret
+		});
+		return c.html(await renderSettingsPage(c, "webhooks", { secret }) ?? "", 201);
+	});
+	app.post("/projects/:slug/settings/webhooks/:webhookId/delete", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		const webhook = await new WebhookModel(getStore().db).get(project.id, c.req.param("webhookId"));
+		if (!webhook) notFound("Webhook not found");
+		await new WebhookModel(getStore().db).remove(project.id, webhook.id);
+		return hxRedirect(c, `/projects/${project.slug}/settings/webhooks`);
+	});
+	app.post("/projects/:slug/settings/members", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		const form = await c.req.formData();
+		const userId = asString(form.get("userId"));
+		const role = asString(form.get("role"));
+		if (!userId || !role) return c.html(await renderSettingsPage(c, "members", { globalError: "User and role are required" }) ?? "", 400);
+		await new MemberModel(getStore().db).set(project.id, userId, role);
+		return hxRedirect(c, `/projects/${project.slug}/settings/members`);
+	});
+	app.post("/projects/:slug/settings/members/:userId/remove", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		await new MemberModel(getStore().db).remove(project.id, c.req.param("userId"));
+		return hxRedirect(c, `/projects/${project.slug}/settings/members`);
+	});
+	app.post("/projects/:slug/settings/status", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		const form = await c.req.formData();
+		const providerKey = asString(form.get("provider"));
+		const token = asString(form.get("token"));
+		const configRaw = asString(form.get("config")) ?? "{}";
+		const provider = getStore().gitHosts.find((p) => p.metadata.kind === providerKey);
+		if (!provider) return c.html(await renderSettingsPage(c, "status", { globalError: "Unknown git provider" }) ?? "", 400);
+		if (!token) return c.html(await renderSettingsPage(c, "status", { errors: { token: "Token is required" } }) ?? "", 400);
+		let config;
+		try {
+			config = JSON.parse(configRaw);
+		} catch {
+			return c.html(await renderSettingsPage(c, "status", { errors: { config: "Config must be valid JSON" } }) ?? "", 400);
+		}
+		const parsed = provider.metadata.schema.safeParse(config);
+		if (!parsed.success) return c.html(await renderSettingsPage(c, "status", { errors: { config: parsed.error.message } }) ?? "", 400);
+		const { db, config: shelfConfig } = getStore();
+		await new StatusConfigModel(db, shelfConfig.secret).create(project.id, {
+			provider: provider.metadata.kind,
+			config: parsed.data,
+			token
+		});
+		return hxRedirect(c, `/projects/${project.slug}/settings/status`);
+	});
+	app.post("/projects/:slug/settings/status/:id/delete", async (c) => {
+		const project = await findProject(c.req.param("slug"));
+		const { db, config: shelfConfig } = getStore();
+		await new StatusConfigModel(db, shelfConfig.secret).remove(project.id, c.req.param("id"));
+		return hxRedirect(c, `/projects/${project.slug}/settings/status`);
+	});
+}
+function asString(value) {
+	return typeof value === "string" ? value.trim() : void 0;
+}
+//#endregion
+export { registerSettingsPages, renderSettingsPage };
+
+//# sourceMappingURL=settings.mjs.map

package/dist/routers/settings.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.mjs","names":[],"sources":["../../src/routers/settings.ts"],"sourcesContent":["import type { Context } from \"hono\";\nimport type { GitHostProvider } from \"../adapters/git-host/index.ts\";\nimport type { ShelfApp } from \"../index.tsx\";\n\nimport { LabelModel } from \"../models/label.ts\";\nimport { MemberModel } from \"../models/member.ts\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport { StatusConfigModel } from \"../models/status-config.ts\";\nimport { TokenModel } from \"../models/token.ts\";\nimport { WebhookModel } from \"../models/webhook.ts\";\nimport { renderProjectSettingsPage, type SettingsFormState, type SettingsTab } from \"../pages/project-settings.tsx\";\nimport type { SettingsMember } from \"../pages/settings-members.tsx\";\nimport type { SettingsStatusConfig } from \"../pages/settings-status.tsx\";\nimport type { SettingsWebhook } from \"../pages/settings-webhooks.tsx\";\nimport type { LabelType, Project, Token } from \"../schema.ts\";\nimport { getStore } from \"../store.ts\";\nimport { randomToken } from \"../utils/hash.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\ninterface SettingsData {\n  project: Project;\n  labelTypes: LabelType[];\n  tokens: Array<Omit<Token, \"hash\">>;\n  members: SettingsMember[];\n  webhooks: SettingsWebhook[];\n  statusConfigs: SettingsStatusConfig[];\n  gitHosts: GitHostProvider[];\n  isAdmin: boolean;\n}\n\nasync function loadSettingsData(slug: string): Promise<SettingsData | null> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    return null;\n  }\n  const { db, config, user, authEnabled, gitHosts } = getStore();\n  const labelTypes = await new LabelModel(db).listTypes(project.id);\n  const tokensDb = await new TokenModel(db).list(project.id);\n  const tokens = tokensDb.map(({ hash: _hash, ...rest }) => rest);\n  const members = await new MemberModel(db).list(project.id);\n  const webhooksDb = await new WebhookModel(db).list(project.id);\n  const webhooks = webhooksDb.map((webhook) => ({ id: webhook.id, url: webhook.url, events: WebhookModel.eventsOf(webhook) }));\n  const statusConfigsDb = await new StatusConfigModel(db, config.secret).list(project.id);\n  const statusConfigs = statusConfigsDb.map((row) => ({\n    id: row.id,\n    provider: row.provider,\n    config: JSON.parse(row.config) as Record<string, unknown>,\n    hasToken: row.tokenEncrypted.length > 0,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  }));\n  const isAdmin = !authEnabled || user?.role === \"admin\" || members.some((member) => member.userId === user?.id && member.role === \"admin\");\n  return { project, labelTypes, tokens, members, webhooks, statusConfigs, gitHosts, isAdmin };\n}\n\nexport async function renderSettingsPage(c: Context, tab: SettingsTab, formState?: SettingsFormState): Promise<string> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const data = await loadSettingsData(slug);\n  if (!data) {\n    notFound(\"Project not found\");\n  }\n  return await renderProjectSettingsPage(\n    {\n      project: data.project,\n      activeTab: tab,\n      labelTypes: data.labelTypes,\n      tokens: data.tokens,\n      members: data.members,\n      webhooks: data.webhooks,\n      statusConfigs: data.statusConfigs,\n      gitHosts: data.gitHosts,\n      isAdmin: data.isAdmin,\n    },\n    formState,\n  );\n}\n\nasync function settingsPage(c: Context, tab: SettingsTab): Promise<string> {\n  const html = await renderSettingsPage(c, tab);\n  if (!html) {\n    notFound(\"Project not found\");\n  }\n  return html;\n}\n\nasync function findProject(slug: string): Promise<Project> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    notFound(\"Project not found\");\n  }\n  return project;\n}\n\nexport function registerSettingsPages(app: ShelfApp): void {\n  app.get(\"/projects/:slug/settings\", async (c) => c.html(await settingsPage(c, \"general\")));\n  app.get(\"/projects/:slug/settings/labels\", async (c) => c.html(await settingsPage(c, \"labels\")));\n  app.get(\"/projects/:slug/settings/tokens\", async (c) => c.html(await settingsPage(c, \"tokens\")));\n  app.get(\"/projects/:slug/settings/webhooks\", async (c) => c.html(await settingsPage(c, \"webhooks\")));\n  app.get(\"/projects/:slug/settings/members\", async (c) => c.html(await settingsPage(c, \"members\")));\n  app.get(\"/projects/:slug/settings/status\", async (c) => c.html(await settingsPage(c, \"status\")));\n\n  app.post(\"/projects/:slug/settings\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await findProject(slug);\n    const form = await c.req.formData();\n    const name = form.get(\"name\");\n    if (typeof name !== \"string\" || name.trim() === \"\") {\n      return c.html((await renderSettingsPage(c, \"general\", { errors: { name: \"Name is required\" } })) ?? \"\", 400);\n    }\n    const gitRepository = asString(form.get(\"gitRepository\"));\n    const gitDefaultBranch = asString(form.get(\"gitDefaultBranch\"));\n    const pixelThreshold = asString(form.get(\"pixelThreshold\"));\n    const maxDiffRatio = asString(form.get(\"maxDiffRatio\"));\n    const publicBranchRegex = asString(form.get(\"publicBranchRegex\"));\n    try {\n      await new ProjectModel(getStore().db).update(project.id, {\n        name: name.trim(),\n        gitRepository: gitRepository ?? undefined,\n        gitDefaultBranch: gitDefaultBranch ?? undefined,\n        pixelThreshold: pixelThreshold ? Number(pixelThreshold) : undefined,\n        maxDiffRatio: maxDiffRatio ? Number(maxDiffRatio) : undefined,\n        publicBranchRegex: publicBranchRegex === \"\" ? null : (publicBranchRegex ?? undefined),\n      });\n      return hxRedirect(c, `/projects/${slug}/settings`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to update\";\n      return c.html((await renderSettingsPage(c, \"general\", { globalError: message })) ?? \"\", 400);\n    }\n  });\n\n  app.post(\"/projects/:slug/delete\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    await new ProjectModel(getStore().db).remove(project.id);\n    return hxRedirect(c, \"/projects\");\n  });\n\n  app.post(\"/projects/:slug/settings/labels\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    const key = asString(form.get(\"key\"));\n    const labelName = asString(form.get(\"labelName\")) ?? asString(form.get(\"name\"));\n    const linkTemplate = asString(form.get(\"linkTemplate\"));\n    if (!key || !labelName) {\n      return c.html((await renderSettingsPage(c, \"labels\", { globalError: \"Key and name are required\" })) ?? \"\", 400);\n    }\n    try {\n      await new LabelModel(getStore().db).createType(project.id, { key, name: labelName, linkTemplate });\n      return hxRedirect(c, `/projects/${project.slug}/settings/labels`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to create label\";\n      return c.html((await renderSettingsPage(c, \"labels\", { globalError: message })) ?? \"\", 400);\n    }\n  });\n\n  app.post(\"/projects/:slug/settings/labels/:key/delete\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    try {\n      await new LabelModel(getStore().db).removeType(project.id, c.req.param(\"key\"));\n    } catch {\n      return c.html((await renderSettingsPage(c, \"labels\", { globalError: \"Cannot delete built-in label\" })) ?? \"\", 400);\n    }\n    return hxRedirect(c, `/projects/${project.slug}/settings/labels`);\n  });\n\n  app.post(\"/projects/:slug/settings/tokens\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    const tokenName = asString(form.get(\"tokenName\")) ?? asString(form.get(\"name\"));\n    if (!tokenName) {\n      return c.html((await renderSettingsPage(c, \"tokens\", { globalError: \"Name is required\" })) ?? \"\", 400);\n    }\n    const token = randomToken(\"shelf_\");\n    await new TokenModel(getStore().db).create(project.id, tokenName, token.hash);\n    const html = await renderSettingsPage(c, \"tokens\");\n    const inject = `<div class=\"alert alert--success\" role=\"alert\"><strong class=\"alert__title\">Token created</strong><div class=\"alert__body\">Copy now — shown once: <code>${token.value}</code></div></div>`;\n    const withToken = html.replace('<nav class=\"tabs\"', `${inject}<nav class=\"tabs\"`);\n    return c.html(withToken);\n  });\n\n  app.post(\"/projects/:slug/settings/tokens/:tokenId/delete\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    await new TokenModel(getStore().db).remove(c.req.param(\"tokenId\"));\n    return hxRedirect(c, `/projects/${project.slug}/settings/tokens`);\n  });\n\n  app.post(\"/projects/:slug/settings/webhooks\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    const url = asString(form.get(\"url\"));\n    if (!url) {\n      return c.html((await renderSettingsPage(c, \"webhooks\", { errors: { url: \"A valid URL is required\" } })) ?? \"\", 400);\n    }\n    let parsedUrl: URL;\n    try {\n      parsedUrl = new URL(url);\n    } catch {\n      return c.html((await renderSettingsPage(c, \"webhooks\", { errors: { url: \"Enter a valid URL\" } })) ?? \"\", 400);\n    }\n    if (parsedUrl.protocol !== \"https:\" && parsedUrl.protocol !== \"http:\") {\n      return c.html((await renderSettingsPage(c, \"webhooks\", { errors: { url: \"URL must use http or https\" } })) ?? \"\", 400);\n    }\n    const eventsRaw = asString(form.get(\"events\"));\n    const events = eventsRaw ? eventsRaw.split(\",\").map((event) => event.trim()).filter((event) => event.length > 0) : undefined;\n    const webhookModel = new WebhookModel(getStore().db);\n    const secret = randomToken(\"whsec_\").value;\n    await webhookModel.create(project.id, { url, events, secret });\n    return c.html((await renderSettingsPage(c, \"webhooks\", { secret })) ?? \"\", 201);\n  });\n\n  app.post(\"/projects/:slug/settings/webhooks/:webhookId/delete\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const webhook = await new WebhookModel(getStore().db).get(project.id, c.req.param(\"webhookId\"));\n    if (!webhook) {\n      notFound(\"Webhook not found\");\n    }\n    await new WebhookModel(getStore().db).remove(project.id, webhook.id);\n    return hxRedirect(c, `/projects/${project.slug}/settings/webhooks`);\n  });\n\n  app.post(\"/projects/:slug/settings/members\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    const userId = asString(form.get(\"userId\"));\n    const role = asString(form.get(\"role\"));\n    if (!userId || !role) {\n      return c.html((await renderSettingsPage(c, \"members\", { globalError: \"User and role are required\" })) ?? \"\", 400);\n    }\n    await new MemberModel(getStore().db).set(project.id, userId, role as never);\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n\n  app.post(\"/projects/:slug/settings/members/:userId/remove\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    await new MemberModel(getStore().db).remove(project.id, c.req.param(\"userId\"));\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n\n  app.post(\"/projects/:slug/settings/status\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    const providerKey = asString(form.get(\"provider\"));\n    const token = asString(form.get(\"token\"));\n    const configRaw = asString(form.get(\"config\")) ?? \"{}\";\n    const providers = getStore().gitHosts;\n    const provider = providers.find((p) => p.metadata.kind === providerKey);\n    if (!provider) {\n      return c.html((await renderSettingsPage(c, \"status\", { globalError: \"Unknown git provider\" })) ?? \"\", 400);\n    }\n    if (!token) {\n      return c.html((await renderSettingsPage(c, \"status\", { errors: { token: \"Token is required\" } })) ?? \"\", 400);\n    }\n    let config: unknown;\n    try {\n      config = JSON.parse(configRaw);\n    } catch {\n      return c.html((await renderSettingsPage(c, \"status\", { errors: { config: \"Config must be valid JSON\" } })) ?? \"\", 400);\n    }\n    const parsed = provider.metadata.schema.safeParse(config);\n    if (!parsed.success) {\n      return c.html((await renderSettingsPage(c, \"status\", { errors: { config: parsed.error.message } })) ?? \"\", 400);\n    }\n    const { db, config: shelfConfig } = getStore();\n    await new StatusConfigModel(db, shelfConfig.secret).create(project.id, { provider: provider.metadata.kind, config: parsed.data, token });\n    return hxRedirect(c, `/projects/${project.slug}/settings/status`);\n  });\n\n  app.post(\"/projects/:slug/settings/status/:id/delete\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const { db, config: shelfConfig } = getStore();\n    await new StatusConfigModel(db, shelfConfig.secret).remove(project.id, c.req.param(\"id\"));\n    return hxRedirect(c, `/projects/${project.slug}/settings/status`);\n  });\n}\n\nfunction asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}"],"mappings":";;;;;;;;;;;;;;;AA+BA,eAAe,iBAAiB,MAA4C;CAC1E,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,OAAO;CAET,MAAM,EAAE,IAAI,QAAQ,MAAM,aAAa,aAAa,SAAS;CAC7D,MAAM,aAAa,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,QAAQ,EAAE;CAEhE,MAAM,UAAS,MADQ,IAAI,WAAW,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,EAAA,CACjC,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI;CAC9D,MAAM,UAAU,MAAM,IAAI,YAAY,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;CAazD,OAAO;EAAE;EAAS;EAAY;EAAQ;EAAS,WAX9B,MADQ,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,EAAA,CACjC,KAAK,aAAa;GAAE,IAAI,QAAQ;GAAI,KAAK,QAAQ;GAAK,QAAQ,aAAa,SAAS,OAAO;EAAE,EAWnE;EAAG,gBATnC,MADQ,IAAI,kBAAkB,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,EAAE,EAAA,CAChD,KAAK,SAAS;GAClD,IAAI,IAAI;GACR,UAAU,IAAI;GACd,QAAQ,KAAK,MAAM,IAAI,MAAM;GAC7B,UAAU,IAAI,eAAe,SAAS;GACtC,WAAW,IAAI;GACf,WAAW,IAAI;EACjB,EAEqE;EAAG;EAAU,SADlE,CAAC,eAAe,MAAM,SAAS,WAAW,QAAQ,MAAM,WAAW,OAAO,WAAW,MAAM,MAAM,OAAO,SAAS,OAAO;CAC9C;AAC5F;AAEA,eAAsB,mBAAmB,GAAY,KAAkB,WAAgD;CAErH,MAAM,OAAO,MAAM,iBADN,EAAE,IAAI,MAAM,MAAM,KAAK,EACI;CACxC,IAAI,CAAC,MACH,SAAS,mBAAmB;CAE9B,OAAO,MAAM,0BACX;EACE,SAAS,KAAK;EACd,WAAW;EACX,YAAY,KAAK;EACjB,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,UAAU,KAAK;EACf,eAAe,KAAK;EACpB,UAAU,KAAK;EACf,SAAS,KAAK;CAChB,GACA,SACF;AACF;AAEA,eAAe,aAAa,GAAY,KAAmC;CACzE,MAAM,OAAO,MAAM,mBAAmB,GAAG,GAAG;CAC5C,IAAI,CAAC,MACH,SAAS,mBAAmB;CAE9B,OAAO;AACT;AAEA,eAAe,YAAY,MAAgC;CACzD,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;CAE9B,OAAO;AACT;AAEA,SAAgB,sBAAsB,KAAqB;CACzD,IAAI,IAAI,4BAA4B,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC;CACzF,IAAI,IAAI,mCAAmC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC;CAC/F,IAAI,IAAI,mCAAmC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC;CAC/F,IAAI,IAAI,qCAAqC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC;CACnG,IAAI,IAAI,oCAAoC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC;CACjG,IAAI,IAAI,mCAAmC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC;CAE/F,IAAI,KAAK,4BAA4B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,YAAY,IAAI;EACtC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,OAAO,KAAK,IAAI,MAAM;EAC5B,IAAI,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,IAC9C,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,EAAE,CAAC,KAAM,IAAI,GAAG;EAE7G,MAAM,gBAAgB,SAAS,KAAK,IAAI,eAAe,CAAC;EACxD,MAAM,mBAAmB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EAC9D,MAAM,iBAAiB,SAAS,KAAK,IAAI,gBAAgB,CAAC;EAC1D,MAAM,eAAe,SAAS,KAAK,IAAI,cAAc,CAAC;EACtD,MAAM,oBAAoB,SAAS,KAAK,IAAI,mBAAmB,CAAC;EAChE,IAAI;GACF,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;IACvD,MAAM,KAAK,KAAK;IAChB,eAAe,iBAAiB,KAAA;IAChC,kBAAkB,oBAAoB,KAAA;IACtC,gBAAgB,iBAAiB,OAAO,cAAc,IAAI,KAAA;IAC1D,cAAc,eAAe,OAAO,YAAY,IAAI,KAAA;IACpD,mBAAmB,sBAAsB,KAAK,OAAQ,qBAAqB,KAAA;GAC7E,CAAC;GACD,OAAO,WAAW,GAAG,aAAa,KAAK,UAAU;EACnD,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;EAC7F;CACF,CAAC;CAED,IAAI,KAAK,0BAA0B,OAAO,MAAM;EAC9C,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,EAAE;EACvD,OAAO,WAAW,GAAG,WAAW;CAClC,CAAC;CAED,IAAI,KAAK,mCAAmC,OAAO,MAAM;EACvD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,CAAC;EACpC,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC,KAAK,SAAS,KAAK,IAAI,MAAM,CAAC;EAC9E,MAAM,eAAe,SAAS,KAAK,IAAI,cAAc,CAAC;EACtD,IAAI,CAAC,OAAO,CAAC,WACX,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,4BAA4B,CAAC,KAAM,IAAI,GAAG;EAEhH,IAAI;GACF,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,QAAQ,IAAI;IAAE;IAAK,MAAM;IAAW;GAAa,CAAC;GACjG,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;EAClE,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;EAC5F;CACF,CAAC;CAED,IAAI,KAAK,+CAA+C,OAAO,MAAM;EACnE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,IAAI;GACF,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,QAAQ,IAAI,EAAE,IAAI,MAAM,KAAK,CAAC;EAC/E,QAAQ;GACN,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,+BAA+B,CAAC,KAAM,IAAI,GAAG;EACnH;EACA,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;CAClE,CAAC;CAED,IAAI,KAAK,mCAAmC,OAAO,MAAM;EACvD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC,KAAK,SAAS,KAAK,IAAI,MAAM,CAAC;EAC9E,IAAI,CAAC,WACH,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,mBAAmB,CAAC,KAAM,IAAI,GAAG;EAEvG,MAAM,QAAQ,YAAY,QAAQ;EAClC,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,WAAW,MAAM,IAAI;EAC5E,MAAM,OAAO,MAAM,mBAAmB,GAAG,QAAQ;EACjD,MAAM,SAAS,2JAA2J,MAAM,MAAM;EACtL,MAAM,YAAY,KAAK,QAAQ,uBAAqB,GAAG,OAAO,kBAAkB;EAChF,OAAO,EAAE,KAAK,SAAS;CACzB,CAAC;CAED,IAAI,KAAK,mDAAmD,OAAO,MAAM;EACvE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,MAAM,SAAS,CAAC;EACjE,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;CAClE,CAAC;CAED,IAAI,KAAK,qCAAqC,OAAO,MAAM;EACzD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,CAAC;EACpC,IAAI,CAAC,KACH,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,YAAY,EAAE,QAAQ,EAAE,KAAK,0BAA0B,EAAE,CAAC,KAAM,IAAI,GAAG;EAEpH,IAAI;EACJ,IAAI;GACF,YAAY,IAAI,IAAI,GAAG;EACzB,QAAQ;GACN,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,YAAY,EAAE,QAAQ,EAAE,KAAK,oBAAoB,EAAE,CAAC,KAAM,IAAI,GAAG;EAC9G;EACA,IAAI,UAAU,aAAa,YAAY,UAAU,aAAa,SAC5D,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,YAAY,EAAE,QAAQ,EAAE,KAAK,6BAA6B,EAAE,CAAC,KAAM,IAAI,GAAG;EAEvH,MAAM,YAAY,SAAS,KAAK,IAAI,QAAQ,CAAC;EAC7C,MAAM,SAAS,YAAY,UAAU,MAAM,GAAG,CAAC,CAAC,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAAC,QAAQ,UAAU,MAAM,SAAS,CAAC,IAAI,KAAA;EACnH,MAAM,eAAe,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE;EACnD,MAAM,SAAS,YAAY,QAAQ,CAAC,CAAC;EACrC,MAAM,aAAa,OAAO,QAAQ,IAAI;GAAE;GAAK;GAAQ;EAAO,CAAC;EAC7D,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,YAAY,EAAE,OAAO,CAAC,KAAM,IAAI,GAAG;CAChF,CAAC;CAED,IAAI,KAAK,uDAAuD,OAAO,MAAM;EAC3E,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,EAAE,IAAI,MAAM,WAAW,CAAC;EAC9F,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,QAAQ,EAAE;EACnE,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,mBAAmB;CACpE,CAAC;CAED,IAAI,KAAK,oCAAoC,OAAO,MAAM;EACxD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC;EAC1C,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,IAAI,CAAC,UAAU,CAAC,MACd,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,6BAA6B,CAAC,KAAM,IAAI,GAAG;EAElH,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,QAAQ,IAAa;EAC1E,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;CAED,IAAI,KAAK,mDAAmD,OAAO,MAAM;EACvE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,EAAE,IAAI,MAAM,QAAQ,CAAC;EAC7E,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;CAED,IAAI,KAAK,mCAAmC,OAAO,MAAM;EACvD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,cAAc,SAAS,KAAK,IAAI,UAAU,CAAC;EACjD,MAAM,QAAQ,SAAS,KAAK,IAAI,OAAO,CAAC;EACxC,MAAM,YAAY,SAAS,KAAK,IAAI,QAAQ,CAAC,KAAK;EAElD,MAAM,WADY,SAAS,CAAC,CAAC,SACF,MAAM,MAAM,EAAE,SAAS,SAAS,WAAW;EACtE,IAAI,CAAC,UACH,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,uBAAuB,CAAC,KAAM,IAAI,GAAG;EAE3G,IAAI,CAAC,OACH,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,QAAQ,EAAE,OAAO,oBAAoB,EAAE,CAAC,KAAM,IAAI,GAAG;EAE9G,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,SAAS;EAC/B,QAAQ;GACN,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,QAAQ,EAAE,QAAQ,4BAA4B,EAAE,CAAC,KAAM,IAAI,GAAG;EACvH;EACA,MAAM,SAAS,SAAS,SAAS,OAAO,UAAU,MAAM;EACxD,IAAI,CAAC,OAAO,SACV,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,QAAQ,EAAE,QAAQ,OAAO,MAAM,QAAQ,EAAE,CAAC,KAAM,IAAI,GAAG;EAEhH,MAAM,EAAE,IAAI,QAAQ,gBAAgB,SAAS;EAC7C,MAAM,IAAI,kBAAkB,IAAI,YAAY,MAAM,CAAC,CAAC,OAAO,QAAQ,IAAI;GAAE,UAAU,SAAS,SAAS;GAAM,QAAQ,OAAO;GAAM;EAAM,CAAC;EACvI,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;CAClE,CAAC;CAED,IAAI,KAAK,8CAA8C,OAAO,MAAM;EAClE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,EAAE,IAAI,QAAQ,gBAAgB,SAAS;EAC7C,MAAM,IAAI,kBAAkB,IAAI,YAAY,MAAM,CAAC,CAAC,OAAO,QAAQ,IAAI,EAAE,IAAI,MAAM,IAAI,CAAC;EACxF,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;CAClE,CAAC;AACH;AAEA,SAAS,SAAS,OAAsD;CACtE,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD"}

package/dist/routers/snapshots.mjs

@@ -0,0 +1,143 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { resolveAuthorizedProject } from "./helpers.mjs";
+import { notFound, okSchema, snapshotSchema, unauthorized } from "./schemas.mjs";
+import { SnapshotModel } from "../models/snapshot.mjs";
+import { APPROVER_ROLES, VIEW_ROLES, approveSnapshot, buildForProject, refreshBuild, snapshotForBuild } from "./builds.handlers.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+//#region src/routers/snapshots.ts
+const listSnapshotsRoute = createRoute({
+	method: "get",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/snapshots",
+	request: { params: z.object({
+		slug: z.string(),
+		buildId: z.string()
+	}) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: snapshotSchema.array() } },
+			description: "List snapshots for a build"
+		},
+		...notFound,
+		...unauthorized
+	}
+});
+const approveSnapshotRoute = createRoute({
+	method: "post",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/approve",
+	request: { params: z.object({
+		slug: z.string(),
+		buildId: z.string(),
+		snapshotId: z.string()
+	}) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: okSchema } },
+			description: "Snapshot approved"
+		},
+		...notFound
+	}
+});
+const rejectSnapshotRoute = createRoute({
+	method: "post",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/reject",
+	request: { params: z.object({
+		slug: z.string(),
+		buildId: z.string(),
+		snapshotId: z.string()
+	}) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: okSchema } },
+			description: "Snapshot rejected"
+		},
+		...notFound
+	}
+});
+const approveAllRoute = createRoute({
+	method: "post",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/approve-all",
+	request: { params: z.object({
+		slug: z.string(),
+		buildId: z.string()
+	}) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: okSchema } },
+			description: "All snapshots approved"
+		},
+		...notFound
+	}
+});
+const rejectAllRoute = createRoute({
+	method: "post",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/reject-all",
+	request: { params: z.object({
+		slug: z.string(),
+		buildId: z.string()
+	}) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: okSchema } },
+			description: "All snapshots rejected"
+		},
+		...notFound
+	}
+});
+function registerSnapshots(app) {
+	app.openapi(listSnapshotsRoute, async (c) => {
+		const { slug, buildId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		const snapshots = new SnapshotModel(getStore().db).listByBuild(build.id);
+		return c.json(await snapshots);
+	});
+	app.openapi(approveSnapshotRoute, async (c) => {
+		const { slug, buildId, snapshotId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		await snapshotForBuild(build, snapshotId);
+		const userId = getStore().user?.id ?? "anonymous";
+		await approveSnapshot(snapshotId, userId);
+		return c.json({ ok: true });
+	});
+	app.openapi(rejectSnapshotRoute, async (c) => {
+		const { slug, buildId, snapshotId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		const snapshot = await snapshotForBuild(build, snapshotId);
+		const userId = getStore().user?.id ?? "anonymous";
+		await new SnapshotModel(getStore().db).review(snapshot.id, "rejected", userId);
+		await refreshBuild(build.id);
+		return c.json({ ok: true });
+	});
+	app.openapi(approveAllRoute, async (c) => {
+		const { slug, buildId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);
+		const userId = getStore().user?.id ?? "anonymous";
+		await Promise.all(snapshots.filter((snapshot) => snapshot.status === "new" || snapshot.status === "changed").map(async (snapshot) => {
+			await approveSnapshot(snapshot.id, userId);
+		}));
+		return c.json({ ok: true });
+	});
+	app.openapi(rejectAllRoute, async (c) => {
+		const { slug, buildId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);
+		const userId = getStore().user?.id ?? "anonymous";
+		await Promise.all(snapshots.filter((snapshot) => snapshot.status === "new" || snapshot.status === "changed").map(async (snapshot) => {
+			await new SnapshotModel(getStore().db).review(snapshot.id, "rejected", userId);
+		}));
+		await refreshBuild(build.id);
+		return c.json({ ok: true });
+	});
+}
+//#endregion
+export { registerSnapshots };
+
+//# sourceMappingURL=snapshots.mjs.map

package/dist/routers/snapshots.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshots.mjs","names":[],"sources":["../../src/routers/snapshots.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\n\nimport { SnapshotModel } from \"../models/snapshot.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { snapshotSchema, okSchema, notFound, unauthorized } from \"./schemas.ts\";\nimport { VIEW_ROLES, APPROVER_ROLES, snapshotForBuild, refreshBuild, approveSnapshot, buildForProject } from \"./builds.handlers.ts\";\n\nconst listSnapshotsRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: snapshotSchema.array() } }, description: \"List snapshots for a build\" },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst approveSnapshotRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/approve\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: okSchema } }, description: \"Snapshot approved\" },\n    ...notFound,\n  },\n});\n\nconst rejectSnapshotRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/reject\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: okSchema } }, description: \"Snapshot rejected\" },\n    ...notFound,\n  },\n});\n\nconst approveAllRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/approve-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: okSchema } }, description: \"All snapshots approved\" },\n    ...notFound,\n  },\n});\n\nconst rejectAllRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/reject-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: okSchema } }, description: \"All snapshots rejected\" },\n    ...notFound,\n  },\n});\n\nexport function registerSnapshots(app: ShelfApp): void {\n  app.openapi(listSnapshotsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = new SnapshotModel(getStore().db).listByBuild(build.id);\n    return c.json(await snapshots);\n  });\n\n  app.openapi(approveSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await approveSnapshot(snapshotId, userId);\n    return c.json({ ok: true });\n  });\n\n  app.openapi(rejectSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshot = await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n    await refreshBuild(build.id);\n    return c.json({ ok: true });\n  });\n\n  app.openapi(approveAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await approveSnapshot(snapshot.id, userId);\n        }),\n    );\n    return c.json({ ok: true });\n  });\n\n  app.openapi(rejectAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n        }),\n    );\n    await refreshBuild(build.id);\n    return c.json({ ok: true });\n  });\n}"],"mappings":";;;;;;;;;;AASA,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,eAAe,MAAM,EAAE,EAAE;GAAG,aAAa;EAA6B;EACtH,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,uBAAuB,YAAY;CACvC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GAAG,aAAa;EAAoB;EAC/F,GAAG;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GAAG,aAAa;EAAoB;EAC/F,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GAAG,aAAa;EAAyB;EACpG,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GAAG,aAAa;EAAyB;EACpG,GAAG;CACL;AACF,CAAC;AAED,SAAgB,kBAAkB,KAAqB;CACrD,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EACvE,OAAO,EAAE,KAAK,MAAM,SAAS;CAC/B,CAAC;CAED,IAAI,QAAQ,sBAAsB,OAAO,MAAM;EAC7C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,iBAAiB,OAAO,UAAU;EACxC,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,gBAAgB,YAAY,MAAM;EACxC,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,MAAM,iBAAiB,OAAO,UAAU;EACzD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC7E,MAAM,aAAa,MAAM,EAAE;EAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,gBAAgB,SAAS,IAAI,MAAM;EAC3C,CAAC,CACL;EACA,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC/E,CAAC,CACL;EACA,MAAM,aAAa,MAAM,EAAE;EAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;AACH"}

package/dist/routers/status-configs.mjs

@@ -0,0 +1,100 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { resolveAuthorizedProject } from "./helpers.mjs";
+import { notFound, statusConfigCreateSchema, statusConfigSchema, unauthorized } from "./schemas.mjs";
+import { StatusConfigModel } from "../models/status-config.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+//#region src/routers/status-configs.ts
+const ADMIN_ROLES = ["admin"];
+const listRoute = createRoute({
+	method: "get",
+	path: "/api/v1/projects/{slug}/status-configs",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: statusConfigSchema.array() } },
+			description: "List status configs"
+		},
+		...notFound,
+		...unauthorized
+	}
+});
+const createRouteDef = createRoute({
+	method: "post",
+	path: "/api/v1/projects/{slug}/status-configs",
+	request: {
+		params: z.object({ slug: z.string() }),
+		body: { content: { "application/json": { schema: statusConfigCreateSchema } } }
+	},
+	responses: {
+		201: {
+			content: { "application/json": { schema: statusConfigSchema } },
+			description: "Created status config"
+		},
+		400: {
+			content: { "application/json": { schema: z.object({ message: z.string() }) } },
+			description: "Bad request"
+		},
+		...notFound
+	}
+});
+const deleteRoute = createRoute({
+	method: "delete",
+	path: "/api/v1/projects/{slug}/status-configs/{id}",
+	request: { params: z.object({
+		slug: z.string(),
+		id: z.string()
+	}) },
+	responses: {
+		204: { description: "Deleted status config" },
+		...notFound
+	}
+});
+function toPublic(row) {
+	return {
+		id: row.id,
+		projectId: row.projectId,
+		provider: row.provider,
+		config: JSON.parse(row.config),
+		hasToken: true,
+		createdAt: row.createdAt,
+		updatedAt: row.updatedAt
+	};
+}
+function registerStatusConfigs(app) {
+	app.openapi(listRoute, async (c) => {
+		const { slug } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, "admin");
+		const rows = await new StatusConfigModel(getStore().db, getStore().config.secret).list(project.id);
+		return c.json(rows.map((row) => toPublic(row)));
+	});
+	app.openapi(createRouteDef, async (c) => {
+		const { slug } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		const body = c.req.valid("json");
+		const provider = getStore().gitHosts.find((p) => p.metadata.kind === body.provider);
+		if (!provider) return c.json({ message: `Unknown provider: ${body.provider}` }, 400);
+		const parsed = provider.metadata.schema.safeParse(body.config);
+		if (!parsed.success) return c.json({ message: parsed.error.message }, 400);
+		const row = await new StatusConfigModel(getStore().db, getStore().config.secret).create(project.id, {
+			provider: body.provider,
+			config: parsed.data,
+			token: body.token
+		});
+		return c.json(toPublic(row), 201);
+	});
+	app.openapi(deleteRoute, async (c) => {
+		const { slug, id } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		const model = new StatusConfigModel(getStore().db, getStore().config.secret);
+		if (!await model.get(project.id, id)) return c.json({ message: "Status config not found" }, 404);
+		await model.remove(project.id, id);
+		return c.body(null, 204);
+	});
+}
+//#endregion
+export { registerStatusConfigs };
+
+//# sourceMappingURL=status-configs.mjs.map

package/dist/routers/status-configs.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-configs.mjs","names":[],"sources":["../../src/routers/status-configs.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\n\nimport type { ShelfApp } from \"../index.tsx\";\nimport { StatusConfigModel } from \"../models/status-config.ts\";\nimport type { ProjectStatusConfig } from \"../schema.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { notFound, statusConfigCreateSchema, statusConfigSchema, unauthorized } from \"./schemas.ts\";\n\nconst ADMIN_ROLES = [\"admin\"] as const;\n\nconst listRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/status-configs\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: statusConfigSchema.array() } }, description: \"List status configs\" },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createRouteDef = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/status-configs\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: statusConfigCreateSchema } } },\n  },\n  responses: {\n    201: { content: { \"application/json\": { schema: statusConfigSchema } }, description: \"Created status config\" },\n    400: { content: { \"application/json\": { schema: z.object({ message: z.string() }) } }, description: \"Bad request\" },\n    ...notFound,\n  },\n});\n\nconst deleteRoute = createRoute({\n  method: \"delete\",\n  path: \"/api/v1/projects/{slug}/status-configs/{id}\",\n  request: { params: z.object({ slug: z.string(), id: z.string() }) },\n  responses: {\n    204: { description: \"Deleted status config\" },\n    ...notFound,\n  },\n});\n\nfunction toPublic(row: ProjectStatusConfig): {\n  id: string;\n  projectId: string;\n  provider: string;\n  config: Record<string, unknown>;\n  hasToken: boolean;\n  createdAt: string;\n  updatedAt: string;\n} {\n  return {\n    id: row.id,\n    projectId: row.projectId,\n    provider: row.provider,\n    config: JSON.parse(row.config) as Record<string, unknown>,\n    hasToken: true,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\nexport function registerStatusConfigs(app: ShelfApp): void {\n  app.openapi(listRoute, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, \"admin\");\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const rows = await model.list(project.id);\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createRouteDef, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const providers = getStore().gitHosts;\n    const provider = providers.find((p) => p.metadata.kind === body.provider);\n    if (!provider) {\n      return c.json({ message: `Unknown provider: ${body.provider}` }, 400);\n    }\n    const parsed = provider.metadata.schema.safeParse(body.config);\n    if (!parsed.success) {\n      return c.json({ message: parsed.error.message }, 400);\n    }\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const row = await model.create(project.id, {\n      provider: body.provider,\n      config: parsed.data,\n      token: body.token,\n    });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteRoute, async (c) => {\n    const { slug, id } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const existing = await model.get(project.id, id);\n    if (!existing) {\n      return c.json({ message: \"Status config not found\" }, 404);\n    }\n    await model.remove(project.id, id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;AASA,MAAM,cAAc,CAAC,OAAO;AAE5B,MAAM,YAAY,YAAY;CAC5B,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE;GAAG,aAAa;EAAsB;EACnH,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,yBAAyB,EAAE,EAAE;CAChF;CACA,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAAG,aAAa;EAAwB;EAC7G,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAAG,aAAa;EAAc;EAClH,GAAG;CACL;AACF,CAAC;AAED,MAAM,cAAc,YAAY;CAC9B,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,IAAI,EAAE,OAAO;CAAE,CAAC,EAAE;CAClE,WAAW;EACT,KAAK,EAAE,aAAa,wBAAwB;EAC5C,GAAG;CACL;AACF,CAAC;AAED,SAAS,SAAS,KAQhB;CACA,OAAO;EACL,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,QAAQ,KAAK,MAAM,IAAI,MAAM;EAC7B,UAAU;EACV,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;AAEA,SAAgB,sBAAsB,KAAqB;CACzD,IAAI,QAAQ,WAAW,OAAO,MAAM;EAClC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,OAAO;EAE/D,MAAM,OAAO,MAAM,IADD,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAC9C,CAAC,CAAC,KAAK,QAAQ,EAAE;EACxC,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAE/B,MAAM,WADY,SAAS,CAAC,CAAC,SACF,MAAM,MAAM,EAAE,SAAS,SAAS,KAAK,QAAQ;EACxE,IAAI,CAAC,UACH,OAAO,EAAE,KAAK,EAAE,SAAS,qBAAqB,KAAK,WAAW,GAAG,GAAG;EAEtE,MAAM,SAAS,SAAS,SAAS,OAAO,UAAU,KAAK,MAAM;EAC7D,IAAI,CAAC,OAAO,SACV,OAAO,EAAE,KAAK,EAAE,SAAS,OAAO,MAAM,QAAQ,GAAG,GAAG;EAGtD,MAAM,MAAM,MAAM,IADA,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAC/C,CAAC,CAAC,OAAO,QAAQ,IAAI;GACzC,UAAU,KAAK;GACf,QAAQ,OAAO;GACf,OAAO,KAAK;EACd,CAAC;EACD,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,aAAa,OAAO,MAAM;EACpC,MAAM,EAAE,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,IAAI,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAAM;EAE3E,IAAI,CAAC,MADkB,MAAM,IAAI,QAAQ,IAAI,EAAE,GAE7C,OAAO,EAAE,KAAK,EAAE,SAAS,0BAA0B,GAAG,GAAG;EAE3D,MAAM,MAAM,OAAO,QAAQ,IAAI,EAAE;EACjC,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/tokens.mjs

@@ -0,0 +1,80 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { TokenModel } from "../models/token.mjs";
+import { randomToken } from "../utils/hash.mjs";
+import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
+import { notFound as notFound$1, tokenCreateSchema, tokenCreatedSchema, tokenPublicSchema, unauthorized } from "./schemas.mjs";
+import { createRoute, z } from "@hono/zod-openapi";
+//#region src/routers/tokens.ts
+const ADMIN_ROLES = ["admin"];
+const listTokensRoute = createRoute({
+	method: "get",
+	path: "/api/v1/projects/{slug}/tokens",
+	request: { params: z.object({ slug: z.string() }) },
+	responses: {
+		200: {
+			content: { "application/json": { schema: tokenPublicSchema.array() } },
+			description: "List API tokens"
+		},
+		...notFound$1,
+		...unauthorized
+	}
+});
+const createTokenRoute = createRoute({
+	method: "post",
+	path: "/api/v1/projects/{slug}/tokens",
+	request: {
+		params: z.object({ slug: z.string() }),
+		body: { content: { "application/json": { schema: tokenCreateSchema } } }
+	},
+	responses: {
+		201: {
+			content: { "application/json": { schema: tokenCreatedSchema } },
+			description: "Created token"
+		},
+		...notFound$1
+	}
+});
+const deleteTokenRoute = createRoute({
+	method: "delete",
+	path: "/api/v1/projects/{slug}/tokens/{tokenId}",
+	request: { params: z.object({
+		slug: z.string(),
+		tokenId: z.string()
+	}) },
+	responses: {
+		204: { description: "Deleted token" },
+		...notFound$1
+	}
+});
+function registerTokens(app) {
+	app.openapi(listTokensRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const tokens = await new TokenModel(getStore().db).list(project.id);
+		return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));
+	});
+	app.openapi(createTokenRoute, async (c) => {
+		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
+		const body = c.req.valid("json");
+		const token = randomToken("shelf_");
+		await new TokenModel(getStore().db).create(project.id, body.name, token.hash);
+		return c.json({
+			...body,
+			token: token.value
+		}, 201);
+	});
+	app.openapi(deleteTokenRoute, async (c) => {
+		const { slug, tokenId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
+		const found = await new TokenModel(getStore().db).get(project.id, tokenId);
+		if (!found) notFound("Token not found");
+		await new TokenModel(getStore().db).remove(found.id);
+		return c.body(null, 204);
+	});
+}
+//#endregion
+export { registerTokens };
+
+//# sourceMappingURL=tokens.mjs.map