@storyshelf/core 0.1.2 → 0.3.1

package/dist/routers/settings.mjs

@@ -1,255 +1,23 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { ProjectModel } from "../models/project.mjs";
-import { LabelModel } from "../models/label.mjs";
-import { getStore } from "../store.mjs";
-import { MemberModel } from "../models/member.mjs";
-import { TokenModel } from "../models/token.mjs";
-import { randomToken } from "../utils/hash.mjs";
-import { notFound } from "./helpers.mjs";
-import { hxRedirect } from "./htmx.mjs";
-import { WebhookModel } from "../models/webhook.mjs";
-import { StatusConfigModel } from "../models/status-config.mjs";
-import { renderProjectSettingsPage } from "../pages/project-settings.mjs";
+import { registerGeneralSettings } from "./settings-general.mjs";
+import { registerLabelSettings } from "./settings-labels.mjs";
+import { registerMemberSettings } from "./settings-members.mjs";
+import { registerStatusSettings } from "./settings-status.mjs";
+import { registerTokenSettings } from "./settings-tokens.mjs";
+import { registerWebhookSettings } from "./settings-webhooks.mjs";
 //#region src/routers/settings.ts
-async function loadSettingsData(slug) {
-	const project = await new ProjectModel(getStore().db).getBySlug(slug);
-	if (!project) return null;
-	const { db, config, user, authEnabled, gitHosts } = getStore();
-	const labelTypes = await new LabelModel(db).listTypes(project.id);
-	const tokens = (await new TokenModel(db).list(project.id)).map(({ hash: _hash, ...rest }) => rest);
-	const members = await new MemberModel(db).list(project.id);
-	return {
-		project,
-		labelTypes,
-		tokens,
-		members,
-		webhooks: (await new WebhookModel(db).list(project.id)).map((webhook) => ({
-			id: webhook.id,
-			url: webhook.url,
-			events: WebhookModel.eventsOf(webhook)
-		})),
-		statusConfigs: (await new StatusConfigModel(db, config.secret).list(project.id)).map((row) => ({
-			id: row.id,
-			provider: row.provider,
-			config: JSON.parse(row.config),
-			hasToken: row.tokenEncrypted.length > 0,
-			createdAt: row.createdAt,
-			updatedAt: row.updatedAt
-		})),
-		gitHosts,
-		isAdmin: !authEnabled || user?.role === "admin" || members.some((member) => member.userId === user?.id && member.role === "admin")
-	};
-}
-async function renderSettingsPage(c, tab, formState) {
-	const data = await loadSettingsData(c.req.param("slug") ?? "");
-	if (!data) notFound("Project not found");
-	return await renderProjectSettingsPage({
-		project: data.project,
-		activeTab: tab,
-		labelTypes: data.labelTypes,
-		tokens: data.tokens,
-		members: data.members,
-		webhooks: data.webhooks,
-		statusConfigs: data.statusConfigs,
-		gitHosts: data.gitHosts,
-		isAdmin: data.isAdmin
-	}, formState);
-}
-async function settingsPage(c, tab) {
-	const html = await renderSettingsPage(c, tab);
-	if (!html) notFound("Project not found");
-	return html;
-}
-async function findProject(slug) {
-	const project = await new ProjectModel(getStore().db).getBySlug(slug);
-	if (!project) notFound("Project not found");
-	return project;
-}
+/** Register the server-rendered project settings pages and their form handlers. */
 function registerSettingsPages(app) {
-	app.get("/projects/:slug/settings", async (c) => c.html(await settingsPage(c, "general")));
-	app.get("/projects/:slug/settings/tests", async (c) => c.html(await settingsPage(c, "tests")));
-	app.get("/projects/:slug/settings/labels", async (c) => c.html(await settingsPage(c, "labels")));
-	app.get("/projects/:slug/settings/tokens", async (c) => c.html(await settingsPage(c, "tokens")));
-	app.get("/projects/:slug/settings/webhooks", async (c) => c.html(await settingsPage(c, "webhooks")));
-	app.get("/projects/:slug/settings/members", async (c) => c.html(await settingsPage(c, "members")));
-	app.get("/projects/:slug/settings/status", async (c) => c.html(await settingsPage(c, "status")));
-	app.post("/projects/:slug/settings", async (c) => {
-		const slug = c.req.param("slug");
-		const project = await findProject(slug);
-		const form = await c.req.formData();
-		const name = form.get("name");
-		if (typeof name !== "string" || name.trim() === "") return c.html(await renderSettingsPage(c, "general", { errors: { name: "Name is required" } }) ?? "", 400);
-		const gitRepository = asString(form.get("gitRepository"));
-		const gitDefaultBranch = asString(form.get("gitDefaultBranch"));
-		const pixelThreshold = asString(form.get("pixelThreshold"));
-		const maxDiffRatio = asString(form.get("maxDiffRatio"));
-		const publicBranchRegex = asString(form.get("publicBranchRegex"));
-		try {
-			await new ProjectModel(getStore().db).update(project.id, {
-				name: name.trim(),
-				gitRepository: gitRepository ?? void 0,
-				gitDefaultBranch: gitDefaultBranch ?? void 0,
-				pixelThreshold: pixelThreshold ? Number(pixelThreshold) : void 0,
-				maxDiffRatio: maxDiffRatio ? Number(maxDiffRatio) : void 0,
-				publicBranchRegex: publicBranchRegex === "" ? null : publicBranchRegex ?? void 0
-			});
-			return hxRedirect(c, `/projects/${slug}/settings`);
-		} catch (error) {
-			const message = error instanceof Error ? error.message : "Failed to update";
-			return c.html(await renderSettingsPage(c, "general", { globalError: message }) ?? "", 400);
-		}
-	});
-	app.post("/projects/:slug/settings/tests", async (c) => {
-		const slug = c.req.param("slug");
-		const project = await findProject(slug);
-		const form = await c.req.formData();
-		const executePlay = form.get("executePlay") === "true";
-		const playTimeoutMsRaw = asString(form.get("playTimeoutMs"));
-		const playTimeoutMs = playTimeoutMsRaw ? Number(playTimeoutMsRaw) : void 0;
-		if (playTimeoutMs !== void 0 && (Number.isNaN(playTimeoutMs) || playTimeoutMs < 1e3 || playTimeoutMs > 3e4)) return c.html(await renderSettingsPage(c, "tests", { globalError: "Play timeout must be between 1000 and 30000" }) ?? "", 400);
-		try {
-			await new ProjectModel(getStore().db).update(project.id, {
-				executePlay,
-				playTimeoutMs: playTimeoutMs ?? void 0
-			});
-			return hxRedirect(c, `/projects/${slug}/settings/tests`);
-		} catch (error) {
-			const message = error instanceof Error ? error.message : "Failed to update";
-			return c.html(await renderSettingsPage(c, "tests", { globalError: message }) ?? "", 400);
-		}
-	});
-	app.post("/projects/:slug/delete", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		await new ProjectModel(getStore().db).remove(project.id);
-		return hxRedirect(c, "/projects");
-	});
-	app.post("/projects/:slug/settings/labels", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		const form = await c.req.formData();
-		const key = asString(form.get("key"));
-		const labelName = asString(form.get("labelName")) ?? asString(form.get("name"));
-		const linkTemplate = asString(form.get("linkTemplate"));
-		if (!key || !labelName) return c.html(await renderSettingsPage(c, "labels", { globalError: "Key and name are required" }) ?? "", 400);
-		try {
-			await new LabelModel(getStore().db).createType(project.id, {
-				key,
-				name: labelName,
-				linkTemplate
-			});
-			return hxRedirect(c, `/projects/${project.slug}/settings/labels`);
-		} catch (error) {
-			const message = error instanceof Error ? error.message : "Failed to create label";
-			return c.html(await renderSettingsPage(c, "labels", { globalError: message }) ?? "", 400);
-		}
-	});
-	app.post("/projects/:slug/settings/labels/:key/delete", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		try {
-			await new LabelModel(getStore().db).removeType(project.id, c.req.param("key"));
-		} catch {
-			return c.html(await renderSettingsPage(c, "labels", { globalError: "Cannot delete built-in label" }) ?? "", 400);
-		}
-		return hxRedirect(c, `/projects/${project.slug}/settings/labels`);
-	});
-	app.post("/projects/:slug/settings/tokens", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		const form = await c.req.formData();
-		const tokenName = asString(form.get("tokenName")) ?? asString(form.get("name"));
-		if (!tokenName) return c.html(await renderSettingsPage(c, "tokens", { globalError: "Name is required" }) ?? "", 400);
-		const token = randomToken("shelf_");
-		await new TokenModel(getStore().db).create(project.id, tokenName, token.hash);
-		const html = await renderSettingsPage(c, "tokens");
-		const inject = `<div class="alert alert--success" role="alert"><strong class="alert__title">Token created</strong><div class="alert__body">Copy now — shown once: <code>${token.value}</code></div></div>`;
-		const withToken = html.replace("<nav class=\"tabs\"", `${inject}<nav class="tabs"`);
-		return c.html(withToken);
-	});
-	app.post("/projects/:slug/settings/tokens/:tokenId/delete", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		await new TokenModel(getStore().db).remove(c.req.param("tokenId"));
-		return hxRedirect(c, `/projects/${project.slug}/settings/tokens`);
-	});
-	app.post("/projects/:slug/settings/webhooks", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		const form = await c.req.formData();
-		const url = asString(form.get("url"));
-		if (!url) return c.html(await renderSettingsPage(c, "webhooks", { errors: { url: "A valid URL is required" } }) ?? "", 400);
-		let parsedUrl;
-		try {
-			parsedUrl = new URL(url);
-		} catch {
-			return c.html(await renderSettingsPage(c, "webhooks", { errors: { url: "Enter a valid URL" } }) ?? "", 400);
-		}
-		if (parsedUrl.protocol !== "https:" && parsedUrl.protocol !== "http:") return c.html(await renderSettingsPage(c, "webhooks", { errors: { url: "URL must use http or https" } }) ?? "", 400);
-		const eventsRaw = asString(form.get("events"));
-		const events = eventsRaw ? eventsRaw.split(",").map((event) => event.trim()).filter((event) => event.length > 0) : void 0;
-		const webhookModel = new WebhookModel(getStore().db);
-		const secret = randomToken("whsec_").value;
-		await webhookModel.create(project.id, {
-			url,
-			events,
-			secret
-		});
-		return c.html(await renderSettingsPage(c, "webhooks", { secret }) ?? "", 201);
-	});
-	app.post("/projects/:slug/settings/webhooks/:webhookId/delete", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		const webhook = await new WebhookModel(getStore().db).get(project.id, c.req.param("webhookId"));
-		if (!webhook) notFound("Webhook not found");
-		await new WebhookModel(getStore().db).remove(project.id, webhook.id);
-		return hxRedirect(c, `/projects/${project.slug}/settings/webhooks`);
-	});
-	app.post("/projects/:slug/settings/members", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		const form = await c.req.formData();
-		const userId = asString(form.get("userId"));
-		const role = asString(form.get("role"));
-		if (!userId || !role) return c.html(await renderSettingsPage(c, "members", { globalError: "User and role are required" }) ?? "", 400);
-		await new MemberModel(getStore().db).set(project.id, userId, role);
-		return hxRedirect(c, `/projects/${project.slug}/settings/members`);
-	});
-	app.post("/projects/:slug/settings/members/:userId/remove", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		await new MemberModel(getStore().db).remove(project.id, c.req.param("userId"));
-		return hxRedirect(c, `/projects/${project.slug}/settings/members`);
-	});
-	app.post("/projects/:slug/settings/status", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		const form = await c.req.formData();
-		const providerKey = asString(form.get("provider"));
-		const token = asString(form.get("token"));
-		const configRaw = asString(form.get("config")) ?? "{}";
-		const provider = getStore().gitHosts.find((p) => p.metadata.kind === providerKey);
-		if (!provider) return c.html(await renderSettingsPage(c, "status", { globalError: "Unknown git provider" }) ?? "", 400);
-		if (!token) return c.html(await renderSettingsPage(c, "status", { errors: { token: "Token is required" } }) ?? "", 400);
-		let config;
-		try {
-			config = JSON.parse(configRaw);
-		} catch {
-			return c.html(await renderSettingsPage(c, "status", { errors: { config: "Config must be valid JSON" } }) ?? "", 400);
-		}
-		const parsed = provider.metadata.schema.safeParse(config);
-		if (!parsed.success) return c.html(await renderSettingsPage(c, "status", { errors: { config: parsed.error.message } }) ?? "", 400);
-		const { db, config: shelfConfig } = getStore();
-		await new StatusConfigModel(db, shelfConfig.secret).create(project.id, {
-			provider: provider.metadata.kind,
-			config: parsed.data,
-			token
-		});
-		return hxRedirect(c, `/projects/${project.slug}/settings/status`);
-	});
-	app.post("/projects/:slug/settings/status/:id/delete", async (c) => {
-		const project = await findProject(c.req.param("slug"));
-		const { db, config: shelfConfig } = getStore();
-		await new StatusConfigModel(db, shelfConfig.secret).remove(project.id, c.req.param("id"));
-		return hxRedirect(c, `/projects/${project.slug}/settings/status`);
-	});
-}
-function asString(value) {
-	return typeof value === "string" ? value.trim() : void 0;
+	registerGeneralSettings(app);
+	registerLabelSettings(app);
+	registerTokenSettings(app);
+	registerWebhookSettings(app);
+	registerMemberSettings(app);
+	registerStatusSettings(app);
 }
 //#endregion
-export { registerSettingsPages, renderSettingsPage };
+export { registerSettingsPages };
 
 //# sourceMappingURL=settings.mjs.map

package/dist/routers/settings.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings.mjs","names":[],"sources":["../../src/routers/settings.ts"],"sourcesContent":["import type { Context } from \"hono\";\nimport type { GitHostProvider } from \"../adapters/git-host/index.ts\";\nimport type { ShelfApp } from \"../index.tsx\";\n\nimport { LabelModel } from \"../models/label.ts\";\nimport { MemberModel } from \"../models/member.ts\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport { StatusConfigModel } from \"../models/status-config.ts\";\nimport { TokenModel } from \"../models/token.ts\";\nimport { WebhookModel } from \"../models/webhook.ts\";\nimport { renderProjectSettingsPage, type SettingsFormState, type SettingsTab } from \"../pages/project-settings.tsx\";\nimport type { SettingsMember } from \"../pages/settings-members.tsx\";\nimport type { SettingsStatusConfig } from \"../pages/settings-status.tsx\";\nimport type { SettingsWebhook } from \"../pages/settings-webhooks.tsx\";\nimport type { LabelType, Project, Token } from \"../schema.ts\";\nimport { getStore } from \"../store.ts\";\nimport { randomToken } from \"../utils/hash.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\ninterface SettingsData {\n  project: Project;\n  labelTypes: LabelType[];\n  tokens: Omit<Token, \"hash\">[];\n  members: SettingsMember[];\n  webhooks: SettingsWebhook[];\n  statusConfigs: SettingsStatusConfig[];\n  gitHosts: GitHostProvider[];\n  isAdmin: boolean;\n}\n\nasync function loadSettingsData(slug: string): Promise<SettingsData | null> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    return null;\n  }\n  const { db, config, user, authEnabled, gitHosts } = getStore();\n  const labelTypes = await new LabelModel(db).listTypes(project.id);\n  const tokensDb = await new TokenModel(db).list(project.id);\n  const tokens = tokensDb.map(({ hash: _hash, ...rest }) => rest);\n  const members = await new MemberModel(db).list(project.id);\n  const webhooksDb = await new WebhookModel(db).list(project.id);\n  const webhooks = webhooksDb.map((webhook) => ({ id: webhook.id, url: webhook.url, events: WebhookModel.eventsOf(webhook) }));\n  const statusConfigsDb = await new StatusConfigModel(db, config.secret).list(project.id);\n  const statusConfigs = statusConfigsDb.map((row) => ({\n    id: row.id,\n    provider: row.provider,\n    config: JSON.parse(row.config) as Record<string, unknown>,\n    hasToken: row.tokenEncrypted.length > 0,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  }));\n  const isAdmin = !authEnabled || user?.role === \"admin\" || members.some((member) => member.userId === user?.id && member.role === \"admin\");\n  return { project, labelTypes, tokens, members, webhooks, statusConfigs, gitHosts, isAdmin };\n}\n\nexport async function renderSettingsPage(c: Context, tab: SettingsTab, formState?: SettingsFormState): Promise<string> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const data = await loadSettingsData(slug);\n  if (!data) {\n    notFound(\"Project not found\");\n  }\n  return await renderProjectSettingsPage(\n    {\n      project: data.project,\n      activeTab: tab,\n      labelTypes: data.labelTypes,\n      tokens: data.tokens,\n      members: data.members,\n      webhooks: data.webhooks,\n      statusConfigs: data.statusConfigs,\n      gitHosts: data.gitHosts,\n      isAdmin: data.isAdmin,\n    },\n    formState,\n  );\n}\n\nasync function settingsPage(c: Context, tab: SettingsTab): Promise<string> {\n  const html = await renderSettingsPage(c, tab);\n  if (!html) {\n    notFound(\"Project not found\");\n  }\n  return html;\n}\n\nasync function findProject(slug: string): Promise<Project> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    notFound(\"Project not found\");\n  }\n  return project;\n}\n\nexport function registerSettingsPages(app: ShelfApp): void {\n  app.get(\"/projects/:slug/settings\", async (c) => c.html(await settingsPage(c, \"general\")));\n  app.get(\"/projects/:slug/settings/tests\", async (c) => c.html(await settingsPage(c, \"tests\")));\n  app.get(\"/projects/:slug/settings/labels\", async (c) => c.html(await settingsPage(c, \"labels\")));\n  app.get(\"/projects/:slug/settings/tokens\", async (c) => c.html(await settingsPage(c, \"tokens\")));\n  app.get(\"/projects/:slug/settings/webhooks\", async (c) => c.html(await settingsPage(c, \"webhooks\")));\n  app.get(\"/projects/:slug/settings/members\", async (c) => c.html(await settingsPage(c, \"members\")));\n  app.get(\"/projects/:slug/settings/status\", async (c) => c.html(await settingsPage(c, \"status\")));\n\n  app.post(\"/projects/:slug/settings\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await findProject(slug);\n    const form = await c.req.formData();\n    const name = form.get(\"name\");\n    if (typeof name !== \"string\" || name.trim() === \"\") {\n      return c.html((await renderSettingsPage(c, \"general\", { errors: { name: \"Name is required\" } })) ?? \"\", 400);\n    }\n    const gitRepository = asString(form.get(\"gitRepository\"));\n    const gitDefaultBranch = asString(form.get(\"gitDefaultBranch\"));\n    const pixelThreshold = asString(form.get(\"pixelThreshold\"));\n    const maxDiffRatio = asString(form.get(\"maxDiffRatio\"));\n    const publicBranchRegex = asString(form.get(\"publicBranchRegex\"));\n    try {\n      await new ProjectModel(getStore().db).update(project.id, {\n        name: name.trim(),\n        gitRepository: gitRepository ?? undefined,\n        gitDefaultBranch: gitDefaultBranch ?? undefined,\n        pixelThreshold: pixelThreshold ? Number(pixelThreshold) : undefined,\n        maxDiffRatio: maxDiffRatio ? Number(maxDiffRatio) : undefined,\n        publicBranchRegex: publicBranchRegex === \"\" ? null : (publicBranchRegex ?? undefined),\n      });\n      return hxRedirect(c, `/projects/${slug}/settings`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to update\";\n      return c.html((await renderSettingsPage(c, \"general\", { globalError: message })) ?? \"\", 400);\n    }\n  });\n\n  app.post(\"/projects/:slug/settings/tests\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await findProject(slug);\n    const form = await c.req.formData();\n    const executePlay = form.get(\"executePlay\") === \"true\";\n    const playTimeoutMsRaw = asString(form.get(\"playTimeoutMs\"));\n    const playTimeoutMs = playTimeoutMsRaw ? Number(playTimeoutMsRaw) : undefined;\n    if (playTimeoutMs !== undefined && (Number.isNaN(playTimeoutMs) || playTimeoutMs < 1000 || playTimeoutMs > 30_000)) {\n      return c.html((await renderSettingsPage(c, \"tests\", { globalError: \"Play timeout must be between 1000 and 30000\" })) ?? \"\", 400);\n    }\n    try {\n      await new ProjectModel(getStore().db).update(project.id, {\n        executePlay,\n        playTimeoutMs: playTimeoutMs ?? undefined,\n      });\n      return hxRedirect(c, `/projects/${slug}/settings/tests`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to update\";\n      return c.html((await renderSettingsPage(c, \"tests\", { globalError: message })) ?? \"\", 400);\n    }\n  });\n\n  app.post(\"/projects/:slug/delete\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    await new ProjectModel(getStore().db).remove(project.id);\n    return hxRedirect(c, \"/projects\");\n  });\n\n  app.post(\"/projects/:slug/settings/labels\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    const key = asString(form.get(\"key\"));\n    const labelName = asString(form.get(\"labelName\")) ?? asString(form.get(\"name\"));\n    const linkTemplate = asString(form.get(\"linkTemplate\"));\n    if (!key || !labelName) {\n      return c.html((await renderSettingsPage(c, \"labels\", { globalError: \"Key and name are required\" })) ?? \"\", 400);\n    }\n    try {\n      await new LabelModel(getStore().db).createType(project.id, { key, name: labelName, linkTemplate });\n      return hxRedirect(c, `/projects/${project.slug}/settings/labels`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to create label\";\n      return c.html((await renderSettingsPage(c, \"labels\", { globalError: message })) ?? \"\", 400);\n    }\n  });\n\n  app.post(\"/projects/:slug/settings/labels/:key/delete\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    try {\n      await new LabelModel(getStore().db).removeType(project.id, c.req.param(\"key\"));\n    } catch {\n      return c.html((await renderSettingsPage(c, \"labels\", { globalError: \"Cannot delete built-in label\" })) ?? \"\", 400);\n    }\n    return hxRedirect(c, `/projects/${project.slug}/settings/labels`);\n  });\n\n  app.post(\"/projects/:slug/settings/tokens\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    const tokenName = asString(form.get(\"tokenName\")) ?? asString(form.get(\"name\"));\n    if (!tokenName) {\n      return c.html((await renderSettingsPage(c, \"tokens\", { globalError: \"Name is required\" })) ?? \"\", 400);\n    }\n    const token = randomToken(\"shelf_\");\n    await new TokenModel(getStore().db).create(project.id, tokenName, token.hash);\n    const html = await renderSettingsPage(c, \"tokens\");\n    const inject = `<div class=\"alert alert--success\" role=\"alert\"><strong class=\"alert__title\">Token created</strong><div class=\"alert__body\">Copy now — shown once: <code>${token.value}</code></div></div>`;\n    const withToken = html.replace('<nav class=\"tabs\"', `${inject}<nav class=\"tabs\"`);\n    return c.html(withToken);\n  });\n\n  app.post(\"/projects/:slug/settings/tokens/:tokenId/delete\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    await new TokenModel(getStore().db).remove(c.req.param(\"tokenId\"));\n    return hxRedirect(c, `/projects/${project.slug}/settings/tokens`);\n  });\n\n  app.post(\"/projects/:slug/settings/webhooks\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    const url = asString(form.get(\"url\"));\n    if (!url) {\n      return c.html((await renderSettingsPage(c, \"webhooks\", { errors: { url: \"A valid URL is required\" } })) ?? \"\", 400);\n    }\n    let parsedUrl: URL;\n    try {\n      parsedUrl = new URL(url);\n    } catch {\n      return c.html((await renderSettingsPage(c, \"webhooks\", { errors: { url: \"Enter a valid URL\" } })) ?? \"\", 400);\n    }\n    if (parsedUrl.protocol !== \"https:\" && parsedUrl.protocol !== \"http:\") {\n      return c.html((await renderSettingsPage(c, \"webhooks\", { errors: { url: \"URL must use http or https\" } })) ?? \"\", 400);\n    }\n    const eventsRaw = asString(form.get(\"events\"));\n    const events = eventsRaw ? eventsRaw.split(\",\").map((event) => event.trim()).filter((event) => event.length > 0) : undefined;\n    const webhookModel = new WebhookModel(getStore().db);\n    const secret = randomToken(\"whsec_\").value;\n    await webhookModel.create(project.id, { url, events, secret });\n    return c.html((await renderSettingsPage(c, \"webhooks\", { secret })) ?? \"\", 201);\n  });\n\n  app.post(\"/projects/:slug/settings/webhooks/:webhookId/delete\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const webhook = await new WebhookModel(getStore().db).get(project.id, c.req.param(\"webhookId\"));\n    if (!webhook) {\n      notFound(\"Webhook not found\");\n    }\n    await new WebhookModel(getStore().db).remove(project.id, webhook.id);\n    return hxRedirect(c, `/projects/${project.slug}/settings/webhooks`);\n  });\n\n  app.post(\"/projects/:slug/settings/members\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    const userId = asString(form.get(\"userId\"));\n    const role = asString(form.get(\"role\"));\n    if (!userId || !role) {\n      return c.html((await renderSettingsPage(c, \"members\", { globalError: \"User and role are required\" })) ?? \"\", 400);\n    }\n    await new MemberModel(getStore().db).set(project.id, userId, role as never);\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n\n  app.post(\"/projects/:slug/settings/members/:userId/remove\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    await new MemberModel(getStore().db).remove(project.id, c.req.param(\"userId\"));\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n\n  app.post(\"/projects/:slug/settings/status\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const form = await c.req.formData();\n    const providerKey = asString(form.get(\"provider\"));\n    const token = asString(form.get(\"token\"));\n    const configRaw = asString(form.get(\"config\")) ?? \"{}\";\n    const providers = getStore().gitHosts;\n    const provider = providers.find((p) => p.metadata.kind === providerKey);\n    if (!provider) {\n      return c.html((await renderSettingsPage(c, \"status\", { globalError: \"Unknown git provider\" })) ?? \"\", 400);\n    }\n    if (!token) {\n      return c.html((await renderSettingsPage(c, \"status\", { errors: { token: \"Token is required\" } })) ?? \"\", 400);\n    }\n    let config: unknown;\n    try {\n      config = JSON.parse(configRaw);\n    } catch {\n      return c.html((await renderSettingsPage(c, \"status\", { errors: { config: \"Config must be valid JSON\" } })) ?? \"\", 400);\n    }\n    const parsed = provider.metadata.schema.safeParse(config);\n    if (!parsed.success) {\n      return c.html((await renderSettingsPage(c, \"status\", { errors: { config: parsed.error.message } })) ?? \"\", 400);\n    }\n    const { db, config: shelfConfig } = getStore();\n    await new StatusConfigModel(db, shelfConfig.secret).create(project.id, { provider: provider.metadata.kind, config: parsed.data, token });\n    return hxRedirect(c, `/projects/${project.slug}/settings/status`);\n  });\n\n  app.post(\"/projects/:slug/settings/status/:id/delete\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\"));\n    const { db, config: shelfConfig } = getStore();\n    await new StatusConfigModel(db, shelfConfig.secret).remove(project.id, c.req.param(\"id\"));\n    return hxRedirect(c, `/projects/${project.slug}/settings/status`);\n  });\n}\n\nfunction asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}"],"mappings":";;;;;;;;;;;;;;;AA+BA,eAAe,iBAAiB,MAA4C;CAC1E,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,OAAO;CAET,MAAM,EAAE,IAAI,QAAQ,MAAM,aAAa,aAAa,SAAS;CAC7D,MAAM,aAAa,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,QAAQ,EAAE;CAEhE,MAAM,UAAS,MADQ,IAAI,WAAW,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,EAAA,CACjC,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI;CAC9D,MAAM,UAAU,MAAM,IAAI,YAAY,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;CAazD,OAAO;EAAE;EAAS;EAAY;EAAQ;EAAS,WAX9B,MADQ,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,EAAA,CACjC,KAAK,aAAa;GAAE,IAAI,QAAQ;GAAI,KAAK,QAAQ;GAAK,QAAQ,aAAa,SAAS,OAAO;EAAE,EAWnE;EAAG,gBATnC,MADQ,IAAI,kBAAkB,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,EAAE,EAAA,CAChD,KAAK,SAAS;GAClD,IAAI,IAAI;GACR,UAAU,IAAI;GACd,QAAQ,KAAK,MAAM,IAAI,MAAM;GAC7B,UAAU,IAAI,eAAe,SAAS;GACtC,WAAW,IAAI;GACf,WAAW,IAAI;EACjB,EAEqE;EAAG;EAAU,SADlE,CAAC,eAAe,MAAM,SAAS,WAAW,QAAQ,MAAM,WAAW,OAAO,WAAW,MAAM,MAAM,OAAO,SAAS,OAAO;CAC9C;AAC5F;AAEA,eAAsB,mBAAmB,GAAY,KAAkB,WAAgD;CAErH,MAAM,OAAO,MAAM,iBADN,EAAE,IAAI,MAAM,MAAM,KAAK,EACI;CACxC,IAAI,CAAC,MACH,SAAS,mBAAmB;CAE9B,OAAO,MAAM,0BACX;EACE,SAAS,KAAK;EACd,WAAW;EACX,YAAY,KAAK;EACjB,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,UAAU,KAAK;EACf,eAAe,KAAK;EACpB,UAAU,KAAK;EACf,SAAS,KAAK;CAChB,GACA,SACF;AACF;AAEA,eAAe,aAAa,GAAY,KAAmC;CACzE,MAAM,OAAO,MAAM,mBAAmB,GAAG,GAAG;CAC5C,IAAI,CAAC,MACH,SAAS,mBAAmB;CAE9B,OAAO;AACT;AAEA,eAAe,YAAY,MAAgC;CACzD,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;CAE9B,OAAO;AACT;AAEA,SAAgB,sBAAsB,KAAqB;CACzD,IAAI,IAAI,4BAA4B,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC;CACzF,IAAI,IAAI,kCAAkC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC;CAC7F,IAAI,IAAI,mCAAmC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC;CAC/F,IAAI,IAAI,mCAAmC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC;CAC/F,IAAI,IAAI,qCAAqC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC;CACnG,IAAI,IAAI,oCAAoC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC;CACjG,IAAI,IAAI,mCAAmC,OAAO,MAAM,EAAE,KAAK,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC;CAE/F,IAAI,KAAK,4BAA4B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,YAAY,IAAI;EACtC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,OAAO,KAAK,IAAI,MAAM;EAC5B,IAAI,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,IAC9C,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,EAAE,CAAC,KAAM,IAAI,GAAG;EAE7G,MAAM,gBAAgB,SAAS,KAAK,IAAI,eAAe,CAAC;EACxD,MAAM,mBAAmB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EAC9D,MAAM,iBAAiB,SAAS,KAAK,IAAI,gBAAgB,CAAC;EAC1D,MAAM,eAAe,SAAS,KAAK,IAAI,cAAc,CAAC;EACtD,MAAM,oBAAoB,SAAS,KAAK,IAAI,mBAAmB,CAAC;EAChE,IAAI;GACF,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;IACvD,MAAM,KAAK,KAAK;IAChB,eAAe,iBAAiB,KAAA;IAChC,kBAAkB,oBAAoB,KAAA;IACtC,gBAAgB,iBAAiB,OAAO,cAAc,IAAI,KAAA;IAC1D,cAAc,eAAe,OAAO,YAAY,IAAI,KAAA;IACpD,mBAAmB,sBAAsB,KAAK,OAAQ,qBAAqB,KAAA;GAC7E,CAAC;GACD,OAAO,WAAW,GAAG,aAAa,KAAK,UAAU;EACnD,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;EAC7F;CACF,CAAC;CAED,IAAI,KAAK,kCAAkC,OAAO,MAAM;EACtD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,YAAY,IAAI;EACtC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,cAAc,KAAK,IAAI,aAAa,MAAM;EAChD,MAAM,mBAAmB,SAAS,KAAK,IAAI,eAAe,CAAC;EAC3D,MAAM,gBAAgB,mBAAmB,OAAO,gBAAgB,IAAI,KAAA;EACpE,IAAI,kBAAkB,KAAA,MAAc,OAAO,MAAM,aAAa,KAAK,gBAAgB,OAAQ,gBAAgB,MACzG,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,8CAA8C,CAAC,KAAM,IAAI,GAAG;EAEjI,IAAI;GACF,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;IACvD;IACA,eAAe,iBAAiB,KAAA;GAClC,CAAC;GACD,OAAO,WAAW,GAAG,aAAa,KAAK,gBAAgB;EACzD,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;EAC3F;CACF,CAAC;CAED,IAAI,KAAK,0BAA0B,OAAO,MAAM;EAC9C,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,EAAE;EACvD,OAAO,WAAW,GAAG,WAAW;CAClC,CAAC;CAED,IAAI,KAAK,mCAAmC,OAAO,MAAM;EACvD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,CAAC;EACpC,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC,KAAK,SAAS,KAAK,IAAI,MAAM,CAAC;EAC9E,MAAM,eAAe,SAAS,KAAK,IAAI,cAAc,CAAC;EACtD,IAAI,CAAC,OAAO,CAAC,WACX,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,4BAA4B,CAAC,KAAM,IAAI,GAAG;EAEhH,IAAI;GACF,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,QAAQ,IAAI;IAAE;IAAK,MAAM;IAAW;GAAa,CAAC;GACjG,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;EAClE,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;EAC5F;CACF,CAAC;CAED,IAAI,KAAK,+CAA+C,OAAO,MAAM;EACnE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,IAAI;GACF,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,QAAQ,IAAI,EAAE,IAAI,MAAM,KAAK,CAAC;EAC/E,QAAQ;GACN,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,+BAA+B,CAAC,KAAM,IAAI,GAAG;EACnH;EACA,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;CAClE,CAAC;CAED,IAAI,KAAK,mCAAmC,OAAO,MAAM;EACvD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC,KAAK,SAAS,KAAK,IAAI,MAAM,CAAC;EAC9E,IAAI,CAAC,WACH,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,mBAAmB,CAAC,KAAM,IAAI,GAAG;EAEvG,MAAM,QAAQ,YAAY,QAAQ;EAClC,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,WAAW,MAAM,IAAI;EAC5E,MAAM,OAAO,MAAM,mBAAmB,GAAG,QAAQ;EACjD,MAAM,SAAS,2JAA2J,MAAM,MAAM;EACtL,MAAM,YAAY,KAAK,QAAQ,uBAAqB,GAAG,OAAO,kBAAkB;EAChF,OAAO,EAAE,KAAK,SAAS;CACzB,CAAC;CAED,IAAI,KAAK,mDAAmD,OAAO,MAAM;EACvE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,MAAM,SAAS,CAAC;EACjE,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;CAClE,CAAC;CAED,IAAI,KAAK,qCAAqC,OAAO,MAAM;EACzD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,CAAC;EACpC,IAAI,CAAC,KACH,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,YAAY,EAAE,QAAQ,EAAE,KAAK,0BAA0B,EAAE,CAAC,KAAM,IAAI,GAAG;EAEpH,IAAI;EACJ,IAAI;GACF,YAAY,IAAI,IAAI,GAAG;EACzB,QAAQ;GACN,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,YAAY,EAAE,QAAQ,EAAE,KAAK,oBAAoB,EAAE,CAAC,KAAM,IAAI,GAAG;EAC9G;EACA,IAAI,UAAU,aAAa,YAAY,UAAU,aAAa,SAC5D,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,YAAY,EAAE,QAAQ,EAAE,KAAK,6BAA6B,EAAE,CAAC,KAAM,IAAI,GAAG;EAEvH,MAAM,YAAY,SAAS,KAAK,IAAI,QAAQ,CAAC;EAC7C,MAAM,SAAS,YAAY,UAAU,MAAM,GAAG,CAAC,CAAC,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAAC,QAAQ,UAAU,MAAM,SAAS,CAAC,IAAI,KAAA;EACnH,MAAM,eAAe,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE;EACnD,MAAM,SAAS,YAAY,QAAQ,CAAC,CAAC;EACrC,MAAM,aAAa,OAAO,QAAQ,IAAI;GAAE;GAAK;GAAQ;EAAO,CAAC;EAC7D,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,YAAY,EAAE,OAAO,CAAC,KAAM,IAAI,GAAG;CAChF,CAAC;CAED,IAAI,KAAK,uDAAuD,OAAO,MAAM;EAC3E,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,EAAE,IAAI,MAAM,WAAW,CAAC;EAC9F,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,QAAQ,EAAE;EACnE,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,mBAAmB;CACpE,CAAC;CAED,IAAI,KAAK,oCAAoC,OAAO,MAAM;EACxD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC;EAC1C,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,IAAI,CAAC,UAAU,CAAC,MACd,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,6BAA6B,CAAC,KAAM,IAAI,GAAG;EAElH,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,QAAQ,IAAa;EAC1E,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;CAED,IAAI,KAAK,mDAAmD,OAAO,MAAM;EACvE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,EAAE,IAAI,MAAM,QAAQ,CAAC;EAC7E,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;CAED,IAAI,KAAK,mCAAmC,OAAO,MAAM;EACvD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,cAAc,SAAS,KAAK,IAAI,UAAU,CAAC;EACjD,MAAM,QAAQ,SAAS,KAAK,IAAI,OAAO,CAAC;EACxC,MAAM,YAAY,SAAS,KAAK,IAAI,QAAQ,CAAC,KAAK;EAElD,MAAM,WADY,SAAS,CAAC,CAAC,SACF,MAAM,MAAM,EAAE,SAAS,SAAS,WAAW;EACtE,IAAI,CAAC,UACH,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,uBAAuB,CAAC,KAAM,IAAI,GAAG;EAE3G,IAAI,CAAC,OACH,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,QAAQ,EAAE,OAAO,oBAAoB,EAAE,CAAC,KAAM,IAAI,GAAG;EAE9G,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,SAAS;EAC/B,QAAQ;GACN,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,QAAQ,EAAE,QAAQ,4BAA4B,EAAE,CAAC,KAAM,IAAI,GAAG;EACvH;EACA,MAAM,SAAS,SAAS,SAAS,OAAO,UAAU,MAAM;EACxD,IAAI,CAAC,OAAO,SACV,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,QAAQ,EAAE,QAAQ,OAAO,MAAM,QAAQ,EAAE,CAAC,KAAM,IAAI,GAAG;EAEhH,MAAM,EAAE,IAAI,QAAQ,gBAAgB,SAAS;EAC7C,MAAM,IAAI,kBAAkB,IAAI,YAAY,MAAM,CAAC,CAAC,OAAO,QAAQ,IAAI;GAAE,UAAU,SAAS,SAAS;GAAM,QAAQ,OAAO;GAAM;EAAM,CAAC;EACvI,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;CAClE,CAAC;CAED,IAAI,KAAK,8CAA8C,OAAO,MAAM;EAClE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,CAAC;EACrD,MAAM,EAAE,IAAI,QAAQ,gBAAgB,SAAS;EAC7C,MAAM,IAAI,kBAAkB,IAAI,YAAY,MAAM,CAAC,CAAC,OAAO,QAAQ,IAAI,EAAE,IAAI,MAAM,IAAI,CAAC;EACxF,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;CAClE,CAAC;AACH;AAEA,SAAS,SAAS,OAAsD;CACtE,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD"}
+{"version":3,"file":"settings.mjs","names":[],"sources":["../../src/routers/settings.ts"],"sourcesContent":["import type { ShelfApp } from \"../index.tsx\";\nimport { registerGeneralSettings } from \"./settings-general.ts\";\nimport { registerLabelSettings } from \"./settings-labels.ts\";\nimport { registerMemberSettings } from \"./settings-members.ts\";\nimport { registerStatusSettings } from \"./settings-status.ts\";\nimport { registerTokenSettings } from \"./settings-tokens.ts\";\nimport { registerWebhookSettings } from \"./settings-webhooks.ts\";\n\n/** Register the server-rendered project settings pages and their form handlers. */\nexport function registerSettingsPages(app: ShelfApp): void {\n  registerGeneralSettings(app);\n  registerLabelSettings(app);\n  registerTokenSettings(app);\n  registerWebhookSettings(app);\n  registerMemberSettings(app);\n  registerStatusSettings(app);\n}\n"],"mappings":";;;;;;;;;;;AASA,SAAgB,sBAAsB,KAAqB;CACzD,wBAAwB,GAAG;CAC3B,sBAAsB,GAAG;CACzB,sBAAsB,GAAG;CACzB,wBAAwB,GAAG;CAC3B,uBAAuB,GAAG;CAC1B,uBAAuB,GAAG;AAC5B"}

package/dist/routers/snapshots.mjs

@@ -1,10 +1,10 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { SnapshotModel } from "../models/snapshot.mjs";
 import { getStore } from "../store.mjs";
 import { resolveAuthorizedProject } from "./helpers.mjs";
 import { notFound, okSchema, snapshotSchema, unauthorized } from "./schemas.mjs";
-import { SnapshotModel } from "../models/snapshot.mjs";
 import { APPROVER_ROLES, VIEW_ROLES, approveSnapshot, buildForProject, refreshBuild, snapshotForBuild } from "./builds.handlers.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 //#region src/routers/snapshots.ts
@@ -86,6 +86,7 @@ const rejectAllRoute = createRoute({
 		...notFound
 	}
 });
+/** Register the snapshot list, approve, reject, and bulk-review endpoints. */
 function registerSnapshots(app) {
 	app.openapi(listSnapshotsRoute, async (c) => {
 		const { slug, buildId } = c.req.valid("param");

package/dist/routers/snapshots.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"snapshots.mjs","names":[],"sources":["../../src/routers/snapshots.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\n\nimport { SnapshotModel } from \"../models/snapshot.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { snapshotSchema, okSchema, notFound, unauthorized } from \"./schemas.ts\";\nimport { VIEW_ROLES, APPROVER_ROLES, snapshotForBuild, refreshBuild, approveSnapshot, buildForProject } from \"./builds.handlers.ts\";\n\nconst listSnapshotsRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: snapshotSchema.array() } }, description: \"List snapshots for a build\" },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst approveSnapshotRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/approve\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: okSchema } }, description: \"Snapshot approved\" },\n    ...notFound,\n  },\n});\n\nconst rejectSnapshotRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/reject\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: okSchema } }, description: \"Snapshot rejected\" },\n    ...notFound,\n  },\n});\n\nconst approveAllRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/approve-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: okSchema } }, description: \"All snapshots approved\" },\n    ...notFound,\n  },\n});\n\nconst rejectAllRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/reject-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: okSchema } }, description: \"All snapshots rejected\" },\n    ...notFound,\n  },\n});\n\nexport function registerSnapshots(app: ShelfApp): void {\n  app.openapi(listSnapshotsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = new SnapshotModel(getStore().db).listByBuild(build.id);\n    return c.json(await snapshots);\n  });\n\n  app.openapi(approveSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await approveSnapshot(snapshotId, userId);\n    return c.json({ ok: true });\n  });\n\n  app.openapi(rejectSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshot = await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n    await refreshBuild(build.id);\n    return c.json({ ok: true });\n  });\n\n  app.openapi(approveAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await approveSnapshot(snapshot.id, userId);\n        }),\n    );\n    return c.json({ ok: true });\n  });\n\n  app.openapi(rejectAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n        }),\n    );\n    await refreshBuild(build.id);\n    return c.json({ ok: true });\n  });\n}"],"mappings":";;;;;;;;;;AASA,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,eAAe,MAAM,EAAE,EAAE;GAAG,aAAa;EAA6B;EACtH,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,uBAAuB,YAAY;CACvC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GAAG,aAAa;EAAoB;EAC/F,GAAG;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GAAG,aAAa;EAAoB;EAC/F,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GAAG,aAAa;EAAyB;EACpG,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GAAG,aAAa;EAAyB;EACpG,GAAG;CACL;AACF,CAAC;AAED,SAAgB,kBAAkB,KAAqB;CACrD,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EACvE,OAAO,EAAE,KAAK,MAAM,SAAS;CAC/B,CAAC;CAED,IAAI,QAAQ,sBAAsB,OAAO,MAAM;EAC7C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,iBAAiB,OAAO,UAAU;EACxC,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,gBAAgB,YAAY,MAAM;EACxC,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,MAAM,iBAAiB,OAAO,UAAU;EACzD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC7E,MAAM,aAAa,MAAM,EAAE;EAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,gBAAgB,SAAS,IAAI,MAAM;EAC3C,CAAC,CACL;EACA,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC/E,CAAC,CACL;EACA,MAAM,aAAa,MAAM,EAAE;EAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;AACH"}
+{"version":3,"file":"snapshots.mjs","names":[],"sources":["../../src/routers/snapshots.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { SnapshotModel } from \"../models/snapshot.ts\";\nimport { getStore } from \"../store.ts\";\nimport {\n  VIEW_ROLES,\n  APPROVER_ROLES,\n  snapshotForBuild,\n  refreshBuild,\n  approveSnapshot,\n  buildForProject,\n} from \"./builds.handlers.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { snapshotSchema, okSchema, notFound, unauthorized } from \"./schemas.ts\";\n\nconst listSnapshotsRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: snapshotSchema.array() } },\n      description: \"List snapshots for a build\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst approveSnapshotRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/approve\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot approved\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectSnapshotRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/reject\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot rejected\",\n    },\n    ...notFound,\n  },\n});\n\nconst approveAllRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/approve-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"All snapshots approved\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectAllRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/reject-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"All snapshots rejected\",\n    },\n    ...notFound,\n  },\n});\n\n/** Register the snapshot list, approve, reject, and bulk-review endpoints. */\nexport function registerSnapshots(app: ShelfApp): void {\n  app.openapi(listSnapshotsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = new SnapshotModel(getStore().db).listByBuild(build.id);\n    return c.json(await snapshots);\n  });\n\n  app.openapi(approveSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await approveSnapshot(snapshotId, userId);\n    return c.json({ ok: true });\n  });\n\n  app.openapi(rejectSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshot = await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n    await refreshBuild(build.id);\n    return c.json({ ok: true });\n  });\n\n  app.openapi(approveAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await approveSnapshot(snapshot.id, userId);\n        }),\n    );\n    return c.json({ ok: true });\n  });\n\n  app.openapi(rejectAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n        }),\n    );\n    await refreshBuild(build.id);\n    return c.json({ ok: true });\n  });\n}\n"],"mappings":";;;;;;;;;;AAeA,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,eAAe,MAAM,EAAE,EAAE;GAClE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,uBAAuB,YAAY;CACvC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,kBAAkB,KAAqB;CACrD,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EACvE,OAAO,EAAE,KAAK,MAAM,SAAS;CAC/B,CAAC;CAED,IAAI,QAAQ,sBAAsB,OAAO,MAAM;EAC7C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,iBAAiB,OAAO,UAAU;EACxC,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,gBAAgB,YAAY,MAAM;EACxC,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,MAAM,iBAAiB,OAAO,UAAU;EACzD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC7E,MAAM,aAAa,MAAM,EAAE;EAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,gBAAgB,SAAS,IAAI,MAAM;EAC3C,CAAC,CACL;EACA,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC/E,CAAC,CACL;EACA,MAAM,aAAa,MAAM,EAAE;EAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;AACH"}

package/dist/routers/status-configs.mjs

@@ -1,10 +1,10 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { StatusConfigModel } from "../models/status-config.mjs";
 import { getStore } from "../store.mjs";
 import { resolveAuthorizedProject } from "./helpers.mjs";
 import { notFound, statusConfigCreateSchema, statusConfigSchema, unauthorized } from "./schemas.mjs";
-import { StatusConfigModel } from "../models/status-config.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 //#region src/routers/status-configs.ts
 const ADMIN_ROLES = ["admin"];
@@ -63,6 +63,7 @@ function toPublic(row) {
 		updatedAt: row.updatedAt
 	};
 }
+/** Register the git status-config list, create, and delete endpoints. */
 function registerStatusConfigs(app) {
 	app.openapi(listRoute, async (c) => {
 		const { slug } = c.req.valid("param");

package/dist/routers/status-configs.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"status-configs.mjs","names":[],"sources":["../../src/routers/status-configs.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\n\nimport type { ShelfApp } from \"../index.tsx\";\nimport { StatusConfigModel } from \"../models/status-config.ts\";\nimport type { ProjectStatusConfig } from \"../schema.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { notFound, statusConfigCreateSchema, statusConfigSchema, unauthorized } from \"./schemas.ts\";\n\nconst ADMIN_ROLES = [\"admin\"] as const;\n\nconst listRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/status-configs\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: statusConfigSchema.array() } }, description: \"List status configs\" },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createRouteDef = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/status-configs\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: statusConfigCreateSchema } } },\n  },\n  responses: {\n    201: { content: { \"application/json\": { schema: statusConfigSchema } }, description: \"Created status config\" },\n    400: { content: { \"application/json\": { schema: z.object({ message: z.string() }) } }, description: \"Bad request\" },\n    ...notFound,\n  },\n});\n\nconst deleteRoute = createRoute({\n  method: \"delete\",\n  path: \"/api/v1/projects/{slug}/status-configs/{id}\",\n  request: { params: z.object({ slug: z.string(), id: z.string() }) },\n  responses: {\n    204: { description: \"Deleted status config\" },\n    ...notFound,\n  },\n});\n\nfunction toPublic(row: ProjectStatusConfig): {\n  id: string;\n  projectId: string;\n  provider: string;\n  config: Record<string, unknown>;\n  hasToken: boolean;\n  createdAt: string;\n  updatedAt: string;\n} {\n  return {\n    id: row.id,\n    projectId: row.projectId,\n    provider: row.provider,\n    config: JSON.parse(row.config) as Record<string, unknown>,\n    hasToken: true,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\nexport function registerStatusConfigs(app: ShelfApp): void {\n  app.openapi(listRoute, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, \"admin\");\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const rows = await model.list(project.id);\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createRouteDef, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const providers = getStore().gitHosts;\n    const provider = providers.find((p) => p.metadata.kind === body.provider);\n    if (!provider) {\n      return c.json({ message: `Unknown provider: ${body.provider}` }, 400);\n    }\n    const parsed = provider.metadata.schema.safeParse(body.config);\n    if (!parsed.success) {\n      return c.json({ message: parsed.error.message }, 400);\n    }\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const row = await model.create(project.id, {\n      provider: body.provider,\n      config: parsed.data,\n      token: body.token,\n    });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteRoute, async (c) => {\n    const { slug, id } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const existing = await model.get(project.id, id);\n    if (!existing) {\n      return c.json({ message: \"Status config not found\" }, 404);\n    }\n    await model.remove(project.id, id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;AASA,MAAM,cAAc,CAAC,OAAO;AAE5B,MAAM,YAAY,YAAY;CAC5B,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE;GAAG,aAAa;EAAsB;EACnH,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,yBAAyB,EAAE,EAAE;CAChF;CACA,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAAG,aAAa;EAAwB;EAC7G,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAAG,aAAa;EAAc;EAClH,GAAG;CACL;AACF,CAAC;AAED,MAAM,cAAc,YAAY;CAC9B,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,IAAI,EAAE,OAAO;CAAE,CAAC,EAAE;CAClE,WAAW;EACT,KAAK,EAAE,aAAa,wBAAwB;EAC5C,GAAG;CACL;AACF,CAAC;AAED,SAAS,SAAS,KAQhB;CACA,OAAO;EACL,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,QAAQ,KAAK,MAAM,IAAI,MAAM;EAC7B,UAAU;EACV,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;AAEA,SAAgB,sBAAsB,KAAqB;CACzD,IAAI,QAAQ,WAAW,OAAO,MAAM;EAClC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,OAAO;EAE/D,MAAM,OAAO,MAAM,IADD,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAC9C,CAAC,CAAC,KAAK,QAAQ,EAAE;EACxC,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAE/B,MAAM,WADY,SAAS,CAAC,CAAC,SACF,MAAM,MAAM,EAAE,SAAS,SAAS,KAAK,QAAQ;EACxE,IAAI,CAAC,UACH,OAAO,EAAE,KAAK,EAAE,SAAS,qBAAqB,KAAK,WAAW,GAAG,GAAG;EAEtE,MAAM,SAAS,SAAS,SAAS,OAAO,UAAU,KAAK,MAAM;EAC7D,IAAI,CAAC,OAAO,SACV,OAAO,EAAE,KAAK,EAAE,SAAS,OAAO,MAAM,QAAQ,GAAG,GAAG;EAGtD,MAAM,MAAM,MAAM,IADA,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAC/C,CAAC,CAAC,OAAO,QAAQ,IAAI;GACzC,UAAU,KAAK;GACf,QAAQ,OAAO;GACf,OAAO,KAAK;EACd,CAAC;EACD,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,aAAa,OAAO,MAAM;EACpC,MAAM,EAAE,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,IAAI,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAAM;EAE3E,IAAI,CAAC,MADkB,MAAM,IAAI,QAAQ,IAAI,EAAE,GAE7C,OAAO,EAAE,KAAK,EAAE,SAAS,0BAA0B,GAAG,GAAG;EAE3D,MAAM,MAAM,OAAO,QAAQ,IAAI,EAAE;EACjC,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}
+{"version":3,"file":"status-configs.mjs","names":[],"sources":["../../src/routers/status-configs.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { StatusConfigModel } from \"../models/status-config.ts\";\nimport type { ProjectStatusConfig } from \"../schema/status-config.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { notFound, statusConfigCreateSchema, statusConfigSchema, unauthorized } from \"./schemas.ts\";\n\nconst ADMIN_ROLES = [\"admin\"] as const;\n\nconst listRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/status-configs\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: statusConfigSchema.array() } },\n      description: \"List status configs\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createRouteDef = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/status-configs\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: statusConfigCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: statusConfigSchema } },\n      description: \"Created status config\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...notFound,\n  },\n});\n\nconst deleteRoute = createRoute({\n  method: \"delete\",\n  path: \"/api/v1/projects/{slug}/status-configs/{id}\",\n  request: { params: z.object({ slug: z.string(), id: z.string() }) },\n  responses: {\n    204: { description: \"Deleted status config\" },\n    ...notFound,\n  },\n});\n\nfunction toPublic(row: ProjectStatusConfig): {\n  id: string;\n  projectId: string;\n  provider: string;\n  config: Record<string, unknown>;\n  hasToken: boolean;\n  createdAt: string;\n  updatedAt: string;\n} {\n  return {\n    id: row.id,\n    projectId: row.projectId,\n    provider: row.provider,\n    config: JSON.parse(row.config) as Record<string, unknown>,\n    hasToken: true,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\n/** Register the git status-config list, create, and delete endpoints. */\nexport function registerStatusConfigs(app: ShelfApp): void {\n  app.openapi(listRoute, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, \"admin\");\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const rows = await model.list(project.id);\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createRouteDef, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const providers = getStore().gitHosts;\n    const provider = providers.find((p) => p.metadata.kind === body.provider);\n    if (!provider) {\n      return c.json({ message: `Unknown provider: ${body.provider}` }, 400);\n    }\n    const parsed = provider.metadata.schema.safeParse(body.config);\n    if (!parsed.success) {\n      return c.json({ message: parsed.error.message }, 400);\n    }\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const row = await model.create(project.id, {\n      provider: body.provider,\n      config: parsed.data,\n      token: body.token,\n    });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteRoute, async (c) => {\n    const { slug, id } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const existing = await model.get(project.id, id);\n    if (!existing) {\n      return c.json({ message: \"Status config not found\" }, 404);\n    }\n    await model.remove(project.id, id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;AAQA,MAAM,cAAc,CAAC,OAAO;AAE5B,MAAM,YAAY,YAAY;CAC5B,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE;GACtE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,yBAAyB,EAAE,EAAE;CAChF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,cAAc,YAAY;CAC9B,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,IAAI,EAAE,OAAO;CAAE,CAAC,EAAE;CAClE,WAAW;EACT,KAAK,EAAE,aAAa,wBAAwB;EAC5C,GAAG;CACL;AACF,CAAC;AAED,SAAS,SAAS,KAQhB;CACA,OAAO;EACL,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,QAAQ,KAAK,MAAM,IAAI,MAAM;EAC7B,UAAU;EACV,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;;AAGA,SAAgB,sBAAsB,KAAqB;CACzD,IAAI,QAAQ,WAAW,OAAO,MAAM;EAClC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,OAAO;EAE/D,MAAM,OAAO,MAAM,IADD,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAC9C,CAAC,CAAC,KAAK,QAAQ,EAAE;EACxC,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAE/B,MAAM,WADY,SAAS,CAAC,CAAC,SACF,MAAM,MAAM,EAAE,SAAS,SAAS,KAAK,QAAQ;EACxE,IAAI,CAAC,UACH,OAAO,EAAE,KAAK,EAAE,SAAS,qBAAqB,KAAK,WAAW,GAAG,GAAG;EAEtE,MAAM,SAAS,SAAS,SAAS,OAAO,UAAU,KAAK,MAAM;EAC7D,IAAI,CAAC,OAAO,SACV,OAAO,EAAE,KAAK,EAAE,SAAS,OAAO,MAAM,QAAQ,GAAG,GAAG;EAGtD,MAAM,MAAM,MAAM,IADA,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAC/C,CAAC,CAAC,OAAO,QAAQ,IAAI;GACzC,UAAU,KAAK;GACf,QAAQ,OAAO;GACf,OAAO,KAAK;EACd,CAAC;EACD,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,aAAa,OAAO,MAAM;EACpC,MAAM,EAAE,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,IAAI,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAAM;EAE3E,IAAI,CAAC,MADkB,MAAM,IAAI,QAAQ,IAAI,EAAE,GAE7C,OAAO,EAAE,KAAK,EAAE,SAAS,0BAA0B,GAAG,GAAG;EAE3D,MAAM,MAAM,OAAO,QAAQ,IAAI,EAAE;EACjC,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/storybook.mjs

@@ -3,11 +3,11 @@ import "node:url";
 import.meta.url;
 import { BuildModel, isPublicBuild } from "../models/build.mjs";
 import { ProjectModel } from "../models/project.mjs";
-import { LabelModel } from "../models/label.mjs";
+import { storybookDir } from "../paths.mjs";
 import { getStore } from "../store.mjs";
+import { LabelModel } from "../models/label.mjs";
 import { currentProjectRole, notFound } from "./helpers.mjs";
-import { storybookDir } from "../utils/paths.mjs";
-import { renderStorybookPage } from "../pages/storybook.mjs";
+import { renderStorybookPage, renderStorybookPreparingPage } from "../pages/storybook.mjs";
 import { posix } from "node:path";
 //#region src/routers/storybook.ts
 const VIEW_ROLES = /* @__PURE__ */ new Set([
@@ -56,6 +56,11 @@ async function canViewBuild(build, project) {
 	const role = await currentProjectRole(project.id);
 	return Boolean(role && VIEW_ROLES.has(role));
 }
+/** Check whether a build's extracted statics are available for serving. */
+async function staticsReady(projectId, buildId) {
+	return await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), "iframe.html"));
+}
+/** Register the published Storybook resolver and static-asset routes. */
 function registerStorybook(app) {
 	app.get("/projects/:slug/storybook", async (c) => {
 		const slug = c.req.param("slug");
@@ -95,7 +100,10 @@ function registerStorybook(app) {
 		const build = await new BuildModel(getStore().db).get(buildId);
 		if (!build || build.projectId !== project.id) notFound("Build not found");
 		if (!await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
-		if (rest === "") return c.html(renderStorybookPage(project, build, slug), 200);
+		if (rest === "") {
+			if (!await staticsReady(project.id, build.id)) return c.html(renderStorybookPreparingPage(project, build, slug), 200);
+			return c.html(renderStorybookPage(project, build, slug), 200);
+		}
 		if (rest.split("/").some((segment) => !isSafeSegment(segment))) return c.notFound();
 		const path = posix.join(storybookDir(project.id, build.id), rest);
 		if (!await getStore().storage.exists(path)) return c.notFound();

package/dist/routers/storybook.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/routers/storybook.ts"],"sourcesContent":["import { posix } from \"node:path\";\n\nimport type { ShelfApp } from \"../index.tsx\";\n\nimport { isPublicBuild, BuildModel } from \"../models/build.ts\";\nimport { LabelModel } from \"../models/label.ts\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport { renderStorybookPage } from \"../pages/storybook.tsx\";\nimport { getStore } from \"../store.ts\";\nimport type { Build, Project } from \"../schema.ts\";\nimport { storybookDir } from \"../utils/paths.ts\";\nimport { currentProjectRole, notFound } from \"./helpers.ts\";\n\nconst VIEW_ROLES: ReadonlySet<string> = new Set([\"viewer\", \"developer\", \"approver\", \"admin\"]);\n\nconst MIME: Record<string, string> = {\n  \".html\": \"text/html; charset=utf-8\",\n  \".htm\": \"text/html; charset=utf-8\",\n  \".js\": \"application/javascript\",\n  \".mjs\": \"application/javascript\",\n  \".json\": \"application/json\",\n  \".css\": \"text/css; charset=utf-8\",\n  \".png\": \"image/png\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".gif\": \"image/gif\",\n  \".svg\": \"image/svg+xml\",\n  \".webp\": \"image/webp\",\n  \".ico\": \"image/x-icon\",\n  \".woff\": \"font/woff\",\n  \".woff2\": \"font/woff2\",\n  \".ttf\": \"font/ttf\",\n  \".map\": \"application/json\",\n  \".wasm\": \"application/wasm\",\n};\n\nfunction contentTypeFor(path: string): string {\n  const ext = posix.extname(path).toLowerCase();\n  return MIME[ext] ?? \"application/octet-stream\";\n}\n\nfunction isSafeSegment(segment: string): boolean {\n  return segment !== \"..\" && !segment.startsWith(\"/\") && !segment.includes(\"\\\\\") && !segment.includes(\"..\");\n}\n\n/**\n * Decide whether the current request may view `build`'s published Storybook.\n *\n * Public builds (ADR 0011) are viewable without auth; every other build requires\n * a logged-in session with at least `viewer` membership on the project.\n */\nasync function canViewBuild(build: Pick<Build, \"public\" | \"gitBranch\">, project: Project): Promise<boolean> {\n  if (isPublicBuild(project, build)) {\n    return true;\n  }\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const role = await currentProjectRole(project.id);\n  return Boolean(role && VIEW_ROLES.has(role));\n}\n\nexport function registerStorybook(app: ShelfApp): void {\n  // Resolver: latest published build on the default branch.\n  app.get(\"/projects/:slug/storybook\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).latestPublished(project);\n    if (!build) {\n      notFound(\"No published Storybook for this project\");\n    }\n    if (!(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);\n  });\n\n  // Resolver: latest build bearing a label (`build` is a reserved label key).\n  app.get(\"/projects/:slug/storybook/:key/:value\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    if (key === \"build\") {\n      return c.notFound();\n    }\n    const value = c.req.param(\"value\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);\n    if (!buildId) {\n      notFound(\"No build carries that label\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || !(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);\n  });\n\n  // Canonical build route: serves the static Storybook and the landing page.\n  app.get(\"/projects/:slug/storybook/build/:buildId/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // remainder from the raw request path (un-encoded) and decode it ourselves.\n    const base = `/projects/${slug}/storybook/build/${buildId}/`;\n    if (!c.req.path.startsWith(base)) {\n      return c.notFound();\n    }\n    let rest: string;\n    try {\n      rest = decodeURIComponent(c.req.path.slice(base.length));\n    } catch {\n      return c.notFound();\n    }\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      notFound(\"Build not found\");\n    }\n    if (!(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n\n    if (rest === \"\") {\n      return c.html(renderStorybookPage(project, build, slug), 200);\n    }\n\n    const segments = rest.split(\"/\");\n    if (segments.some((segment) => !isSafeSegment(segment))) {\n      return c.notFound();\n    }\n    const path = posix.join(storybookDir(project.id, build.id), rest);\n    if (!(await getStore().storage.exists(path))) {\n      return c.notFound();\n    }\n    const buffer = await getStore().storage.read(path);\n    return c.body(new Uint8Array(buffer), 200, {\n      \"content-type\": contentTypeFor(rest),\n      \"cache-control\": \"public, max-age=3600\",\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;AAaA,MAAM,6BAAkC,IAAI,IAAI;CAAC;CAAU;CAAa;CAAY;AAAO,CAAC;AAE5F,MAAM,OAA+B;CACnC,SAAS;CACT,QAAQ;CACR,OAAO;CACP,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,SAAS;CACT,UAAU;CACV,QAAQ;CACR,QAAQ;CACR,SAAS;AACX;AAEA,SAAS,eAAe,MAAsB;CAC5C,MAAM,MAAM,MAAM,QAAQ,IAAI,CAAC,CAAC,YAAY;CAC5C,OAAO,KAAK,QAAQ;AACtB;AAEA,SAAS,cAAc,SAA0B;CAC/C,OAAO,YAAY,QAAQ,CAAC,QAAQ,WAAW,GAAG,KAAK,CAAC,QAAQ,SAAS,IAAI,KAAK,CAAC,QAAQ,SAAS,IAAI;AAC1G;;;;;;;AAQA,eAAe,aAAa,OAA4C,SAAoC;CAC1G,IAAI,cAAc,SAAS,KAAK,GAC9B,OAAO;CAET,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,OAAO,MAAM,mBAAmB,QAAQ,EAAE;CAChD,OAAO,QAAQ,QAAQ,WAAW,IAAI,IAAI,CAAC;AAC7C;AAEA,SAAgB,kBAAkB,KAAqB;CAErD,IAAI,IAAI,6BAA6B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,yCAAyC;EAEpD,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GACrC,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,MAAM,GAAG,IAAI,GAAG;CACzE,CAAC;CAGD,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC5D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAC7B,IAAI,QAAQ,SACV,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO;EACjC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,QAAQ,IAAI,KAAK,KAAK;EACxF,IAAI,CAAC,SACH,SAAS,6BAA6B;EAExC,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,CAAE,MAAM,aAAa,OAAO,OAAO,GAC/C,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,QAAQ,IAAI,GAAG;CACxE,CAAC;CAGD,IAAI,IAAI,8CAA8C,OAAO,MAAM;EACjE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EAGrC,MAAM,OAAO,aAAa,KAAK,mBAAmB,QAAQ;EAC1D,IAAI,CAAC,EAAE,IAAI,KAAK,WAAW,IAAI,GAC7B,OAAO,EAAE,SAAS;EAEpB,IAAI;EACJ,IAAI;GACF,OAAO,mBAAmB,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC;EACzD,QAAQ;GACN,OAAO,EAAE,SAAS;EACpB;EACA,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,SAAS,iBAAiB;EAE5B,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GACrC,OAAO,EAAE,SAAS,eAAe,GAAG;EAGtC,IAAI,SAAS,IACX,OAAO,EAAE,KAAK,oBAAoB,SAAS,OAAO,IAAI,GAAG,GAAG;EAI9D,IADiB,KAAK,MAAM,GACjB,CAAC,CAAC,MAAM,YAAY,CAAC,cAAc,OAAO,CAAC,GACpD,OAAO,EAAE,SAAS;EAEpB,MAAM,OAAO,MAAM,KAAK,aAAa,QAAQ,IAAI,MAAM,EAAE,GAAG,IAAI;EAChE,IAAI,CAAE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,IAAI,GACxC,OAAO,EAAE,SAAS;EAEpB,MAAM,SAAS,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,IAAI;EACjD,OAAO,EAAE,KAAK,IAAI,WAAW,MAAM,GAAG,KAAK;GACzC,gBAAgB,eAAe,IAAI;GACnC,iBAAiB;EACnB,CAAC;CACH,CAAC;AACH"}
+{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/routers/storybook.ts"],"sourcesContent":["import { posix } from \"node:path\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { isPublicBuild, BuildModel } from \"../models/build.ts\";\nimport { LabelModel } from \"../models/label.ts\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport { renderStorybookPage, renderStorybookPreparingPage } from \"../pages/storybook.tsx\";\nimport type { Build } from \"../schema/build.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport { getStore } from \"../store.ts\";\nimport { storybookDir } from \"../utils/paths.ts\";\nimport { currentProjectRole, notFound } from \"./helpers.ts\";\n\nconst VIEW_ROLES: ReadonlySet<string> = new Set([\"viewer\", \"developer\", \"approver\", \"admin\"]);\n\nconst MIME: Record<string, string> = {\n  \".html\": \"text/html; charset=utf-8\",\n  \".htm\": \"text/html; charset=utf-8\",\n  \".js\": \"application/javascript\",\n  \".mjs\": \"application/javascript\",\n  \".json\": \"application/json\",\n  \".css\": \"text/css; charset=utf-8\",\n  \".png\": \"image/png\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".gif\": \"image/gif\",\n  \".svg\": \"image/svg+xml\",\n  \".webp\": \"image/webp\",\n  \".ico\": \"image/x-icon\",\n  \".woff\": \"font/woff\",\n  \".woff2\": \"font/woff2\",\n  \".ttf\": \"font/ttf\",\n  \".map\": \"application/json\",\n  \".wasm\": \"application/wasm\",\n};\n\nfunction contentTypeFor(path: string): string {\n  const ext = posix.extname(path).toLowerCase();\n  return MIME[ext] ?? \"application/octet-stream\";\n}\n\nfunction isSafeSegment(segment: string): boolean {\n  return (\n    segment !== \"..\" &&\n    !segment.startsWith(\"/\") &&\n    !segment.includes(\"\\\\\") &&\n    !segment.includes(\"..\")\n  );\n}\n\n/**\n * Decide whether the current request may view `build`'s published Storybook.\n *\n * Public builds (ADR 0011) are viewable without auth; every other build requires\n * a logged-in session with at least `viewer` membership on the project.\n */\nasync function canViewBuild(\n  build: Pick<Build, \"public\" | \"gitBranch\">,\n  project: Project,\n): Promise<boolean> {\n  if (isPublicBuild(project, build)) {\n    return true;\n  }\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const role = await currentProjectRole(project.id);\n  return Boolean(role && VIEW_ROLES.has(role));\n}\n\n/** Check whether a build's extracted statics are available for serving. */\nasync function staticsReady(projectId: string, buildId: string): Promise<boolean> {\n  return await getStore().storage.exists(\n    posix.join(storybookDir(projectId, buildId), \"iframe.html\"),\n  );\n}\n\n/** Register the published Storybook resolver and static-asset routes. */\nexport function registerStorybook(app: ShelfApp): void {\n  // Resolver: latest published build on the default branch.\n  app.get(\"/projects/:slug/storybook\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).latestPublished(project);\n    if (!build) {\n      notFound(\"No published Storybook for this project\");\n    }\n    if (!(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);\n  });\n\n  // Resolver: latest build bearing a label (`build` is a reserved label key).\n  app.get(\"/projects/:slug/storybook/:key/:value\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    if (key === \"build\") {\n      return c.notFound();\n    }\n    const value = c.req.param(\"value\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);\n    if (!buildId) {\n      notFound(\"No build carries that label\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || !(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);\n  });\n\n  // Canonical build route: serves the static Storybook and the landing page.\n  app.get(\"/projects/:slug/storybook/build/:buildId/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // remainder from the raw request path (un-encoded) and decode it ourselves.\n    const base = `/projects/${slug}/storybook/build/${buildId}/`;\n    if (!c.req.path.startsWith(base)) {\n      return c.notFound();\n    }\n    let rest: string;\n    try {\n      rest = decodeURIComponent(c.req.path.slice(base.length));\n    } catch {\n      return c.notFound();\n    }\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      notFound(\"Build not found\");\n    }\n    if (!(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n\n    if (rest === \"\") {\n      if (!(await staticsReady(project.id, build.id))) {\n        return c.html(renderStorybookPreparingPage(project, build, slug), 200);\n      }\n      return c.html(renderStorybookPage(project, build, slug), 200);\n    }\n\n    const segments = rest.split(\"/\");\n    if (segments.some((segment) => !isSafeSegment(segment))) {\n      return c.notFound();\n    }\n    const path = posix.join(storybookDir(project.id, build.id), rest);\n    if (!(await getStore().storage.exists(path))) {\n      return c.notFound();\n    }\n    const buffer = await getStore().storage.read(path);\n    return c.body(new Uint8Array(buffer), 200, {\n      \"content-type\": contentTypeFor(rest),\n      \"cache-control\": \"public, max-age=3600\",\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;AAYA,MAAM,6BAAkC,IAAI,IAAI;CAAC;CAAU;CAAa;CAAY;AAAO,CAAC;AAE5F,MAAM,OAA+B;CACnC,SAAS;CACT,QAAQ;CACR,OAAO;CACP,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,SAAS;CACT,UAAU;CACV,QAAQ;CACR,QAAQ;CACR,SAAS;AACX;AAEA,SAAS,eAAe,MAAsB;CAC5C,MAAM,MAAM,MAAM,QAAQ,IAAI,CAAC,CAAC,YAAY;CAC5C,OAAO,KAAK,QAAQ;AACtB;AAEA,SAAS,cAAc,SAA0B;CAC/C,OACE,YAAY,QACZ,CAAC,QAAQ,WAAW,GAAG,KACvB,CAAC,QAAQ,SAAS,IAAI,KACtB,CAAC,QAAQ,SAAS,IAAI;AAE1B;;;;;;;AAQA,eAAe,aACb,OACA,SACkB;CAClB,IAAI,cAAc,SAAS,KAAK,GAC9B,OAAO;CAET,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,OAAO,MAAM,mBAAmB,QAAQ,EAAE;CAChD,OAAO,QAAQ,QAAQ,WAAW,IAAI,IAAI,CAAC;AAC7C;;AAGA,eAAe,aAAa,WAAmB,SAAmC;CAChF,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,OAC9B,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,aAAa,CAC5D;AACF;;AAGA,SAAgB,kBAAkB,KAAqB;CAErD,IAAI,IAAI,6BAA6B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,yCAAyC;EAEpD,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GACrC,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,MAAM,GAAG,IAAI,GAAG;CACzE,CAAC;CAGD,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC5D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAC7B,IAAI,QAAQ,SACV,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO;EACjC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,QAAQ,IAAI,KAAK,KAAK;EACxF,IAAI,CAAC,SACH,SAAS,6BAA6B;EAExC,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,CAAE,MAAM,aAAa,OAAO,OAAO,GAC/C,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,QAAQ,IAAI,GAAG;CACxE,CAAC;CAGD,IAAI,IAAI,8CAA8C,OAAO,MAAM;EACjE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EAGrC,MAAM,OAAO,aAAa,KAAK,mBAAmB,QAAQ;EAC1D,IAAI,CAAC,EAAE,IAAI,KAAK,WAAW,IAAI,GAC7B,OAAO,EAAE,SAAS;EAEpB,IAAI;EACJ,IAAI;GACF,OAAO,mBAAmB,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC;EACzD,QAAQ;GACN,OAAO,EAAE,SAAS;EACpB;EACA,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,SAAS,iBAAiB;EAE5B,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GACrC,OAAO,EAAE,SAAS,eAAe,GAAG;EAGtC,IAAI,SAAS,IAAI;GACf,IAAI,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC3C,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,IAAI,GAAG,GAAG;GAEvE,OAAO,EAAE,KAAK,oBAAoB,SAAS,OAAO,IAAI,GAAG,GAAG;EAC9D;EAGA,IADiB,KAAK,MAAM,GACjB,CAAC,CAAC,MAAM,YAAY,CAAC,cAAc,OAAO,CAAC,GACpD,OAAO,EAAE,SAAS;EAEpB,MAAM,OAAO,MAAM,KAAK,aAAa,QAAQ,IAAI,MAAM,EAAE,GAAG,IAAI;EAChE,IAAI,CAAE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,IAAI,GACxC,OAAO,EAAE,SAAS;EAEpB,MAAM,SAAS,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,IAAI;EACjD,OAAO,EAAE,KAAK,IAAI,WAAW,MAAM,GAAG,KAAK;GACzC,gBAAgB,eAAe,IAAI;GACnC,iBAAiB;EACnB,CAAC;CACH,CAAC;AACH"}

package/dist/routers/tokens.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { randomToken } from "../utils/hash.mjs";
 import { getStore } from "../store.mjs";
 import { TokenModel } from "../models/token.mjs";
-import { randomToken } from "../utils/hash.mjs";
 import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
 import { notFound as notFound$1, tokenCreateSchema, tokenCreatedSchema, tokenPublicSchema, unauthorized } from "./schemas.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
@@ -49,6 +49,7 @@ const deleteTokenRoute = createRoute({
 		...notFound$1
 	}
 });
+/** Register the project API token list, create, and revoke endpoints. */
 function registerTokens(app) {
 	app.openapi(listTokensRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);

package/dist/routers/tokens.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.mjs","names":["notFoundResponse"],"sources":["../../src/routers/tokens.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\n\nimport { TokenModel } from \"../models/token.ts\";\nimport { getStore } from \"../store.ts\";\nimport type { ProjectRole } from \"../types.ts\";\nimport { randomToken } from \"../utils/hash.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  tokenCreatedSchema,\n  tokenCreateSchema,\n  tokenPublicSchema,\n  unauthorized,\n} from \"./schemas.ts\";\n\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listTokensRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: tokenPublicSchema.array() } }, description: \"List API tokens\" },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createTokenRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: tokenCreateSchema } } },\n  },\n  responses: {\n    201: { content: { \"application/json\": { schema: tokenCreatedSchema } }, description: \"Created token\" },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteTokenRoute = createRoute({\n  method: \"delete\",\n  path: \"/api/v1/projects/{slug}/tokens/{tokenId}\",\n  request: { params: z.object({ slug: z.string(), tokenId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted token\" },\n    ...notFoundResponse,\n  },\n});\n\nexport function registerTokens(app: ShelfApp): void {\n  app.openapi(listTokensRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const tokens = await new TokenModel(getStore().db).list(project.id);\n    return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));\n  });\n\n  app.openapi(createTokenRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const token = randomToken(\"shelf_\");\n    await new TokenModel(getStore().db).create(project.id, body.name, token.hash);\n    return c.json({ ...body, token: token.value }, 201);\n  });\n\n  app.openapi(deleteTokenRoute, async (c) => {\n    const { slug, tokenId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const found = await new TokenModel(getStore().db).get(project.id, tokenId);\n    if (!found) {\n      notFound(\"Token not found\");\n    }\n    await new TokenModel(getStore().db).remove(found.id);\n    return c.body(null, 204);\n  });\n}"],"mappings":";;;;;;;;;;AAgBA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,MAAM,EAAE,EAAE;GAAG,aAAa;EAAkB;EAC9G,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CACzE;CACA,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAAG,aAAa;EAAgB;EACrG,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;AAED,SAAgB,eAAe,KAAqB;CAClD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,SAAS,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;EAClE,OAAO,EAAE,KAAK,OAAO,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC;CAC9D,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,YAAY,QAAQ;EAClC,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,KAAK,MAAM,MAAM,IAAI;EAC5E,OAAO,EAAE,KAAK;GAAE,GAAG;GAAM,OAAO,MAAM;EAAM,GAAG,GAAG;CACpD,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}
+{"version":3,"file":"tokens.mjs","names":["notFoundResponse"],"sources":["../../src/routers/tokens.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { TokenModel } from \"../models/token.ts\";\nimport { getStore } from \"../store.ts\";\nimport type { ProjectRole } from \"../types.ts\";\nimport { randomToken } from \"../utils/hash.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  tokenCreatedSchema,\n  tokenCreateSchema,\n  tokenPublicSchema,\n  unauthorized,\n} from \"./schemas.ts\";\n\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listTokensRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: tokenPublicSchema.array() } },\n      description: \"List API tokens\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createTokenRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: tokenCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: tokenCreatedSchema } },\n      description: \"Created token\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteTokenRoute = createRoute({\n  method: \"delete\",\n  path: \"/api/v1/projects/{slug}/tokens/{tokenId}\",\n  request: { params: z.object({ slug: z.string(), tokenId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted token\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project API token list, create, and revoke endpoints. */\nexport function registerTokens(app: ShelfApp): void {\n  app.openapi(listTokensRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const tokens = await new TokenModel(getStore().db).list(project.id);\n    return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));\n  });\n\n  app.openapi(createTokenRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const token = randomToken(\"shelf_\");\n    await new TokenModel(getStore().db).create(project.id, body.name, token.hash);\n    return c.json({ ...body, token: token.value }, 201);\n  });\n\n  app.openapi(deleteTokenRoute, async (c) => {\n    const { slug, tokenId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const found = await new TokenModel(getStore().db).get(project.id, tokenId);\n    if (!found) {\n      notFound(\"Token not found\");\n    }\n    await new TokenModel(getStore().db).remove(found.id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAeA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,MAAM,EAAE,EAAE;GACrE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CACzE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,eAAe,KAAqB;CAClD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,SAAS,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;EAClE,OAAO,EAAE,KAAK,OAAO,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC;CAC9D,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,YAAY,QAAQ;EAClC,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,KAAK,MAAM,MAAM,IAAI;EAC5E,OAAO,EAAE,KAAK;GAAE,GAAG;GAAM,OAAO,MAAM;EAAM,GAAG,GAAG;CACpD,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}