@storyshelf/core 0.3.1 → 0.5.3

package/dist/ddl.mjs

@@ -1,158 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-//#region src/ddl.ts
-/** Canonical SQLite DDL for all StoryShelf tables and indexes. */
-const DDL = `
-CREATE TABLE IF NOT EXISTS projects (
-  id TEXT PRIMARY KEY,
-  name TEXT NOT NULL,
-  slug TEXT NOT NULL UNIQUE,
-  git_repository TEXT,
-  git_default_branch TEXT NOT NULL DEFAULT 'main',
-  pixel_threshold REAL NOT NULL DEFAULT 0.1,
-  max_diff_ratio REAL NOT NULL DEFAULT 0.01,
-  public_branch_regex TEXT,
-  storybook_meta TEXT,
-  execute_play INTEGER NOT NULL DEFAULT 0,
-  play_timeout_ms INTEGER NOT NULL DEFAULT 10000,
-  created_at TEXT NOT NULL,
-  updated_at TEXT NOT NULL
-);
-CREATE TABLE IF NOT EXISTS project_status_configs (
-  id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  provider TEXT NOT NULL,
-  config TEXT NOT NULL,
-  token_encrypted TEXT NOT NULL,
-  created_at TEXT NOT NULL,
-  updated_at TEXT NOT NULL
-);
-CREATE TABLE IF NOT EXISTS builds (
-  id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  git_sha TEXT NOT NULL,
-  git_branch TEXT NOT NULL,
-  is_default INTEGER NOT NULL DEFAULT 0,
-  author_email TEXT,
-  author_name TEXT,
-  message TEXT,
-  public INTEGER NOT NULL DEFAULT 0,
-  status TEXT NOT NULL DEFAULT 'pending',
-  snapshot_count INTEGER NOT NULL DEFAULT 0,
-  changed_count INTEGER NOT NULL DEFAULT 0,
-  approved_count INTEGER NOT NULL DEFAULT 0,
-  rejected_count INTEGER NOT NULL DEFAULT 0,
-  created_at TEXT NOT NULL,
-  updated_at TEXT NOT NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS builds_project_gitsha_idx ON builds (project_id, git_sha);
-CREATE INDEX IF NOT EXISTS builds_git_branch_idx ON builds (git_branch);
-CREATE TABLE IF NOT EXISTS snapshots (
-  id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  build_id TEXT NOT NULL REFERENCES builds(id) ON DELETE CASCADE,
-  story_id TEXT NOT NULL,
-  story_name TEXT NOT NULL,
-  story_title TEXT NOT NULL,
-  story_import_path TEXT,
-  viewport_name TEXT NOT NULL DEFAULT 'desktop',
-  viewport_width INTEGER NOT NULL DEFAULT 1280,
-  viewport_height INTEGER NOT NULL DEFAULT 720,
-  screenshot_path TEXT NOT NULL,
-  diff_path TEXT,
-  diff_pixels INTEGER,
-  diff_ratio REAL,
-  diff_passed INTEGER,
-  status TEXT NOT NULL DEFAULT 'pending',
-  reviewed_by TEXT,
-  reviewed_at TEXT,
-  created_at TEXT NOT NULL,
-  updated_at TEXT NOT NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS snapshots_build_story_viewport_idx ON snapshots (build_id, story_id, viewport_name);
-CREATE INDEX IF NOT EXISTS snapshots_build_id_idx ON snapshots (build_id);
-CREATE TABLE IF NOT EXISTS baselines (
-  id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  story_id TEXT NOT NULL,
-  viewport_name TEXT NOT NULL DEFAULT 'desktop',
-  branch TEXT NOT NULL,
-  snapshot_id TEXT,
-  screenshot_path TEXT NOT NULL,
-  created_at TEXT NOT NULL,
-  updated_at TEXT NOT NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS baselines_project_story_viewport_branch_idx ON baselines (project_id, story_id, viewport_name, branch);
-CREATE INDEX IF NOT EXISTS baselines_project_story_idx ON baselines (project_id, story_id);
-CREATE TABLE IF NOT EXISTS comments (
-  id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  build_id TEXT NOT NULL REFERENCES builds(id) ON DELETE CASCADE,
-  snapshot_id TEXT REFERENCES snapshots(id) ON DELETE CASCADE,
-  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-  body TEXT NOT NULL,
-  parent_id TEXT,
-  resolved INTEGER NOT NULL DEFAULT 0,
-  created_at TEXT NOT NULL,
-  updated_at TEXT NOT NULL
-);
-CREATE INDEX IF NOT EXISTS comments_build_id_idx ON comments (build_id);
-CREATE TABLE IF NOT EXISTS label_types (
-  id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  key TEXT NOT NULL,
-  name TEXT NOT NULL,
-  link_template TEXT,
-  color TEXT,
-  created_at TEXT NOT NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS label_types_project_key_idx ON label_types (project_id, key);
-CREATE TABLE IF NOT EXISTS build_labels (
-  id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  build_id TEXT NOT NULL REFERENCES builds(id) ON DELETE CASCADE,
-  type_key TEXT NOT NULL,
-  value TEXT NOT NULL,
-  created_at TEXT NOT NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS build_labels_build_type_value_idx ON build_labels (build_id, type_key, value);
-CREATE TABLE IF NOT EXISTS tokens (
-  id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  name TEXT NOT NULL,
-  hash TEXT NOT NULL UNIQUE,
-  last_used_at TEXT,
-  created_at TEXT NOT NULL
-);
-CREATE TABLE IF NOT EXISTS webhooks (
-  id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  url TEXT NOT NULL,
-  secret_encrypted TEXT NOT NULL,
-  events TEXT,
-  created_at TEXT NOT NULL,
-  updated_at TEXT NOT NULL
-);
-CREATE TABLE IF NOT EXISTS users (
-  id TEXT PRIMARY KEY,
-  email TEXT NOT NULL UNIQUE,
-  name TEXT NOT NULL,
-  avatar_url TEXT,
-  role TEXT NOT NULL DEFAULT 'member',
-  last_login_at TEXT,
-  created_at TEXT NOT NULL
-);
-CREATE TABLE IF NOT EXISTS project_members (
-  id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-  role TEXT NOT NULL DEFAULT 'viewer',
-  created_at TEXT NOT NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS project_members_project_user_idx ON project_members (project_id, user_id);
-`;
-//#endregion
-export { DDL };
-
-//# sourceMappingURL=ddl.mjs.map

package/dist/ddl.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"ddl.mjs","names":[],"sources":["../src/ddl.ts"],"sourcesContent":["/** Canonical SQLite DDL for all StoryShelf tables and indexes. */\nexport const DDL = `\nCREATE TABLE IF NOT EXISTS projects (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL,\n  slug TEXT NOT NULL UNIQUE,\n  git_repository TEXT,\n  git_default_branch TEXT NOT NULL DEFAULT 'main',\n  pixel_threshold REAL NOT NULL DEFAULT 0.1,\n  max_diff_ratio REAL NOT NULL DEFAULT 0.01,\n  public_branch_regex TEXT,\n  storybook_meta TEXT,\n  execute_play INTEGER NOT NULL DEFAULT 0,\n  play_timeout_ms INTEGER NOT NULL DEFAULT 10000,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS project_status_configs (\n  id TEXT PRIMARY KEY,\n  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,\n  provider TEXT NOT NULL,\n  config TEXT NOT NULL,\n  token_encrypted TEXT NOT NULL,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS builds (\n  id TEXT PRIMARY KEY,\n  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,\n  git_sha TEXT NOT NULL,\n  git_branch TEXT NOT NULL,\n  is_default INTEGER NOT NULL DEFAULT 0,\n  author_email TEXT,\n  author_name TEXT,\n  message TEXT,\n  public INTEGER NOT NULL DEFAULT 0,\n  status TEXT NOT NULL DEFAULT 'pending',\n  snapshot_count INTEGER NOT NULL DEFAULT 0,\n  changed_count INTEGER NOT NULL DEFAULT 0,\n  approved_count INTEGER NOT NULL DEFAULT 0,\n  rejected_count INTEGER NOT NULL DEFAULT 0,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\nCREATE UNIQUE INDEX IF NOT EXISTS builds_project_gitsha_idx ON builds (project_id, git_sha);\nCREATE INDEX IF NOT EXISTS builds_git_branch_idx ON builds (git_branch);\nCREATE TABLE IF NOT EXISTS snapshots (\n  id TEXT PRIMARY KEY,\n  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,\n  build_id TEXT NOT NULL REFERENCES builds(id) ON DELETE CASCADE,\n  story_id TEXT NOT NULL,\n  story_name TEXT NOT NULL,\n  story_title TEXT NOT NULL,\n  story_import_path TEXT,\n  viewport_name TEXT NOT NULL DEFAULT 'desktop',\n  viewport_width INTEGER NOT NULL DEFAULT 1280,\n  viewport_height INTEGER NOT NULL DEFAULT 720,\n  screenshot_path TEXT NOT NULL,\n  diff_path TEXT,\n  diff_pixels INTEGER,\n  diff_ratio REAL,\n  diff_passed INTEGER,\n  status TEXT NOT NULL DEFAULT 'pending',\n  reviewed_by TEXT,\n  reviewed_at TEXT,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\nCREATE UNIQUE INDEX IF NOT EXISTS snapshots_build_story_viewport_idx ON snapshots (build_id, story_id, viewport_name);\nCREATE INDEX IF NOT EXISTS snapshots_build_id_idx ON snapshots (build_id);\nCREATE TABLE IF NOT EXISTS baselines (\n  id TEXT PRIMARY KEY,\n  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,\n  story_id TEXT NOT NULL,\n  viewport_name TEXT NOT NULL DEFAULT 'desktop',\n  branch TEXT NOT NULL,\n  snapshot_id TEXT,\n  screenshot_path TEXT NOT NULL,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\nCREATE UNIQUE INDEX IF NOT EXISTS baselines_project_story_viewport_branch_idx ON baselines (project_id, story_id, viewport_name, branch);\nCREATE INDEX IF NOT EXISTS baselines_project_story_idx ON baselines (project_id, story_id);\nCREATE TABLE IF NOT EXISTS comments (\n  id TEXT PRIMARY KEY,\n  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,\n  build_id TEXT NOT NULL REFERENCES builds(id) ON DELETE CASCADE,\n  snapshot_id TEXT REFERENCES snapshots(id) ON DELETE CASCADE,\n  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n  body TEXT NOT NULL,\n  parent_id TEXT,\n  resolved INTEGER NOT NULL DEFAULT 0,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\nCREATE INDEX IF NOT EXISTS comments_build_id_idx ON comments (build_id);\nCREATE TABLE IF NOT EXISTS label_types (\n  id TEXT PRIMARY KEY,\n  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,\n  key TEXT NOT NULL,\n  name TEXT NOT NULL,\n  link_template TEXT,\n  color TEXT,\n  created_at TEXT NOT NULL\n);\nCREATE UNIQUE INDEX IF NOT EXISTS label_types_project_key_idx ON label_types (project_id, key);\nCREATE TABLE IF NOT EXISTS build_labels (\n  id TEXT PRIMARY KEY,\n  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,\n  build_id TEXT NOT NULL REFERENCES builds(id) ON DELETE CASCADE,\n  type_key TEXT NOT NULL,\n  value TEXT NOT NULL,\n  created_at TEXT NOT NULL\n);\nCREATE UNIQUE INDEX IF NOT EXISTS build_labels_build_type_value_idx ON build_labels (build_id, type_key, value);\nCREATE TABLE IF NOT EXISTS tokens (\n  id TEXT PRIMARY KEY,\n  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,\n  name TEXT NOT NULL,\n  hash TEXT NOT NULL UNIQUE,\n  last_used_at TEXT,\n  created_at TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS webhooks (\n  id TEXT PRIMARY KEY,\n  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,\n  url TEXT NOT NULL,\n  secret_encrypted TEXT NOT NULL,\n  events TEXT,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS users (\n  id TEXT PRIMARY KEY,\n  email TEXT NOT NULL UNIQUE,\n  name TEXT NOT NULL,\n  avatar_url TEXT,\n  role TEXT NOT NULL DEFAULT 'member',\n  last_login_at TEXT,\n  created_at TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS project_members (\n  id TEXT PRIMARY KEY,\n  project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,\n  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n  role TEXT NOT NULL DEFAULT 'viewer',\n  created_at TEXT NOT NULL\n);\nCREATE UNIQUE INDEX IF NOT EXISTS project_members_project_user_idx ON project_members (project_id, user_id);\n`;\n"],"mappings":";;;;;AACA,MAAa,MAAM"}

package/dist/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/index.tsx"],"sourcesContent":["/**\n * StoryShelf core: compose database, storage, capture, auth, and git-host\n * adapters into a complete self-hosted visual-testing Hono server.\n */\nimport { swaggerUI } from \"@hono/swagger-ui\";\nimport { OpenAPIHono } from \"@hono/zod-openapi\";\nimport type { Context, Next } from \"hono\";\nimport { requestId } from \"hono/request-id\";\nimport type { CaptureQueue } from \"./adapters/capture-queue.ts\";\nimport {\n  AdapterLifecycleError,\n  collectCloses,\n  collectInits,\n  runAdapterCloses,\n  runAdapterInits,\n} from \"./adapters/init.ts\";\nimport type { AdapterInitResult } from \"./adapters/init.ts\";\nimport type {\n  AdapterInitContext,\n  AdapterMetadata,\n  GitAdapterMetadata,\n} from \"./adapters/metadata.ts\";\nimport { createDispatchJob } from \"./capture/dispatch.ts\";\nimport type { CaptureJobOptions } from \"./capture/orchestrator.ts\";\nimport { InMemoryCaptureQueue } from \"./capture/queue.ts\";\nimport type { ShelfOptions } from \"./config.ts\";\nimport { validateConfig, validateUiConfig } from \"./config.ts\";\nimport { createShelfLogger } from \"./logger.ts\";\nimport type { Logger } from \"./logger.ts\";\nimport {\n  authGate,\n  csrf,\n  rateLimit,\n  requestLogging,\n  resolveRequestUser,\n  storeScope,\n} from \"./middleware/index.ts\";\nimport { registerAdmin } from \"./routers/admin.ts\";\nimport { registerAssets } from \"./routers/assets.ts\";\nimport { registerAuth } from \"./routers/auth.ts\";\nimport { registerBuilds } from \"./routers/builds.ts\";\nimport { registerHealth } from \"./routers/health.ts\";\nimport type { HealthDeps } from \"./routers/health.ts\";\nimport { registerLabels } from \"./routers/labels.ts\";\nimport { registerMedia } from \"./routers/media.ts\";\nimport { registerMembers } from \"./routers/members.ts\";\nimport { registerProjects } from \"./routers/projects.ts\";\nimport { registerStatusConfigs } from \"./routers/status-configs.ts\";\nimport { registerStorybook } from \"./routers/storybook.ts\";\nimport { registerTokens } from \"./routers/tokens.ts\";\nimport { registerUiPages } from \"./routers/ui.ts\";\nimport { registerWebhooks } from \"./routers/webhooks.ts\";\n\n/** Per-request shelf context (adapters, config, user, capture queue). */\nexport interface ShelfContext {\n  requestId?: string;\n  db: import(\"./adapters/database.ts\").DatabaseAdapter;\n  storage: import(\"./adapters/storage.ts\").StorageAdapter;\n  config: import(\"./config.ts\").ShelfConfig;\n  ui: import(\"./config.ts\").UIConfig;\n  logger: ReturnType<typeof createShelfLogger>;\n  user: import(\"./adapters/auth.ts\").AuthUser | null;\n  authEnabled: boolean;\n  enqueueCapture?: (buildId: string, reqId?: string) => Promise<void>;\n  captureQueue: import(\"./adapters/capture-queue.ts\").CaptureQueue | null;\n  gitHosts: import(\"./adapters/git-host/index.ts\").GitHostProvider[];\n}\n\n/** Hono application type carrying the shelf context variables. */\nexport type ShelfApp = OpenAPIHono<{ Variables: ShelfContext }>;\n\n/** App-scoped adapter lifecycle namespace (single `lifecycle` prop avoids Hono collisions). */\nexport interface ShelfLifecycle {\n  /** Settled summary of the eager background init run; never rejects. */\n  readonly ready: Promise<AdapterInitResult>;\n  /**\n   * Fail-fast await for server startup (`await app.lifecycle.init()`).\n   * Re-runs init so transient failures are retryable; throws AdapterLifecycleError.\n   * Optional — when skipped, the first request gates on `ready` instead.\n   */\n  init(): Promise<void>;\n  /** Graceful teardown for SIGTERM/SIGINT (`await app.lifecycle.close()`). Idempotent. */\n  close(): Promise<void>;\n}\n\n/** Hono app with the shelf lifecycle namespace attached. */\nexport type ShelfRouter = ShelfApp & { readonly lifecycle: ShelfLifecycle };\n\nfunction addOptionalSnapshots(\n  snap: Record<string, AdapterMetadata | GitAdapterMetadata>,\n  options: ShelfOptions,\n): void {\n  if (options.captureRunner) {\n    snap[\"captureRunner\"] = options.captureRunner.metadata;\n  }\n  if (options.captureQueue) {\n    snap[\"captureQueue\"] = options.captureQueue.metadata;\n  }\n  if (options.auth) {\n    snap[\"auth\"] = options.auth.metadata;\n  }\n}\n\nfunction buildAdapterSnapshot(\n  options: ShelfOptions,\n): Record<string, AdapterMetadata | GitAdapterMetadata> {\n  const snap: Record<string, AdapterMetadata | GitAdapterMetadata> = {\n    database: options.database.metadata,\n    storage: options.storage.metadata,\n  };\n  addOptionalSnapshots(snap, options);\n  for (const p of options.gitHosts ?? []) {\n    snap[`git:${p.metadata.kind}`] = p.metadata;\n  }\n  return snap;\n}\n\ninterface ServerRuntime {\n  config: import(\"./config.ts\").ShelfConfig;\n  ui: import(\"./config.ts\").UIConfig;\n  logger: import(\"./logger.ts\").Logger;\n  authEnabled: boolean;\n  gitHosts: import(\"./adapters/git-host/index.ts\").GitHostProvider[];\n}\n\n/** Validate config/ui and derive runtime singletons from options. */\nfunction resolveRuntime(options: ShelfOptions): ServerRuntime {\n  // eslint-disable-next-line typescript/no-unnecessary-type-assertion -- ShelfConfig lacks index signature\n  const rawConfig = options.config\n    ? validateConfig(options.config as unknown as Record<string, unknown>)\n    : {};\n  // eslint-disable-next-line typescript/no-unnecessary-type-assertion -- UIConfig lacks index signature\n  const ui = options.ui ? validateUiConfig(options.ui as unknown as Record<string, unknown>) : {};\n  const logger = options.logger ?? createShelfLogger();\n  const authEnabled = options.auth !== undefined;\n  const gitHosts = options.gitHosts ?? [];\n  // Adapter introspection — auto-populate config.adapters if not supplied\n  const config: import(\"./config.ts\").ShelfConfig = rawConfig.adapters\n    ? rawConfig\n    : {\n        ...rawConfig,\n        adapters: buildAdapterSnapshot(options),\n      };\n  return { config, ui, logger, authEnabled, gitHosts };\n}\n\ninterface QueueWiring {\n  queue: CaptureQueue | null;\n  enqueueCapture: ((buildId: string, reqId?: string) => Promise<void>) | undefined;\n}\n\n/** Assemble the capture queue and its enqueue hook when a runner is configured. */\nfunction setupCaptureQueue(\n  options: ShelfOptions,\n  config: import(\"./config.ts\").ShelfConfig,\n  gitHosts: import(\"./adapters/git-host/index.ts\").GitHostProvider[],\n  logger: import(\"./logger.ts\").Logger,\n): QueueWiring {\n  if (!options.captureRunner) {\n    return { queue: null, enqueueCapture: undefined };\n  }\n  if (!config.scratchDir) {\n    throw new Error(\"captureRunner is enabled but ShelfConfig.scratchDir is not set\");\n  }\n  const jobOptions: CaptureJobOptions = {\n    db: options.database,\n    storage: options.storage,\n    runner: options.captureRunner,\n    scratchDir: config.scratchDir,\n    viewports: config.viewports,\n    logger,\n    secret: config.secret,\n  };\n  const runJob = createDispatchJob({\n    db: options.database,\n    jobOptions,\n    gitHosts,\n    secret: config.secret,\n    logger,\n  });\n  const captureQueue =\n    options.captureQueue ??\n    new InMemoryCaptureQueue({\n      concurrency: config.captureConcurrency ?? 2,\n      logger,\n      runJob,\n    });\n  const enqueueCapture = async (buildId: string, reqId?: string): Promise<void> => {\n    await captureQueue.enqueue({ buildId, reqId });\n  };\n  return { queue: captureQueue, enqueueCapture };\n}\n\ninterface MiddlewareWiring extends ServerRuntime, QueueWiring {\n  options: ShelfOptions;\n  getReady: () => Promise<AdapterInitResult>;\n}\n\n/** Failures safe to expose on the init gate's 503 (no secrets). */\nfunction publicFailures(\n  result: AdapterInitResult,\n): { category: string; kind: string; error: string }[] {\n  return result.failures.map((failure) => ({\n    category: failure.category,\n    kind: failure.kind,\n    error: failure.error,\n  }));\n}\n\n/**\n * Block requests until adapter init settles; answer 503 with the per-adapter\n * failures when init failed. Health probes are exempt (they report init\n * state themselves instead of being masked by the gate).\n */\nfunction initGate(getReady: () => Promise<AdapterInitResult>) {\n  // oxlint-disable-next-line typescript/no-invalid-void-type -- Hono middleware may not return Response\n  return async (c: Context, next: Next): Promise<Response | void> => {\n    if (c.req.path === \"/api/v1/health\") {\n      await next();\n      return;\n    }\n    const result = await getReady();\n    if (!result.ok) {\n      return c.json(\n        { error: \"Adapters failed to initialize\", failures: publicFailures(result) },\n        503,\n      );\n    }\n    await next();\n  };\n}\n\n/** Mutable init-settlement cell shared by the gate, health, and `init()`. */\ninterface LifecycleCell {\n  ready: Promise<AdapterInitResult>;\n  settled: AdapterInitResult | null;\n}\n\nfunction trackSettlement(cell: LifecycleCell, promise: Promise<AdapterInitResult>): void {\n  promise.then(\n    (result) => {\n      cell.settled = result;\n    },\n    () => {\n      cell.settled = { ok: false, failures: [] };\n    },\n  );\n}\n\n/** Kick the eager background init run (resolves; never rejects). */\nfunction kickInit(\n  options: ShelfOptions,\n  ctx: AdapterInitContext,\n  logger: Logger,\n  cell: LifecycleCell,\n): void {\n  cell.ready = runAdapterInits(collectInits(options), ctx, logger);\n  trackSettlement(cell, cell.ready);\n}\n\n/** Kick eager init and attach the `app.lifecycle` namespace (single run). */\nfunction attachLifecycle(\n  app: ShelfApp,\n  options: ShelfOptions,\n  runtime: ServerRuntime,\n  cell: LifecycleCell,\n): void {\n  const initCtx: AdapterInitContext = { config: runtime.config, logger: runtime.logger };\n  kickInit(options, initCtx, runtime.logger, cell);\n  Object.assign(app, { lifecycle: createLifecycle(options, initCtx, runtime.logger, cell) });\n}\n\n/** Build the `app.lifecycle` namespace closing over one settlement cell. */\nfunction createLifecycle(\n  options: ShelfOptions,\n  ctx: AdapterInitContext,\n  logger: Logger,\n  cell: LifecycleCell,\n): ShelfLifecycle {\n  return {\n    get ready() {\n      return cell.ready;\n    },\n    init: async () => {\n      const result = await runAdapterInits(collectInits(options), ctx, logger);\n      cell.ready = Promise.resolve(result);\n      cell.settled = result;\n      if (!result.ok) {\n        throw new AdapterLifecycleError(\"init\", result.failures);\n      }\n    },\n    close: async () => {\n      const result = await runAdapterCloses(collectCloses(options), ctx, logger);\n      if (!result.ok) {\n        throw new AdapterLifecycleError(\"close\", result.failures);\n      }\n    },\n  };\n}\n\n/** Attach global middleware: ids, logging, init gate, limits, store scope, auth gate. */\nfunction wireMiddleware(app: ShelfApp, wiring: MiddlewareWiring): void {\n  const { options, config, ui, logger, authEnabled, enqueueCapture, queue, gitHosts, getReady } =\n    wiring;\n  app.use(\"*\", requestId());\n  // Structured request logging. Uses a Hono-native middleware rather than\n  // Pino-http, which expects a Node server response (`res.on`) incompatible\n  // With Hono's Web `Request`/`Response` model.\n  app.use(\"*\", requestLogging(logger));\n  app.use(\"*\", initGate(getReady));\n  app.use(\"/api/v1/*\", rateLimit({ windowMs: 60_000, max: 100 }));\n  app.use(\"/api/v1/tokens/*\", rateLimit({ windowMs: 60_000, max: 10 }));\n  app.use(\"/api/v1/webhooks/*\", rateLimit({ windowMs: 60_000, max: 20 }));\n  app.use(\"/projects/:slug/settings/*\", csrf());\n  app.use(\n    \"*\",\n    storeScope({\n      db: options.database,\n      storage: options.storage,\n      config,\n      ui,\n      logger,\n      authEnabled,\n      enqueueCapture,\n      captureQueue: queue,\n      gitHosts,\n      resolveUser: async (c) => await resolveRequestUser(c, options.auth),\n    }),\n  );\n  app.use(\"*\", authGate());\n}\n\n/** Register every JSON API router. */\nfunction registerApiRoutes(app: ShelfApp, health: HealthDeps): void {\n  registerProjects(app);\n  registerBuilds(app);\n  registerLabels(app);\n  registerMedia(app);\n  registerMembers(app);\n  registerTokens(app);\n  registerWebhooks(app);\n  registerStatusConfigs(app);\n  registerHealth(app, health);\n  registerAdmin(app);\n}\n\n/** Register HTML pages, assets, and the optional auth flow. */\nfunction registerPageRoutes(app: ShelfApp, options: ShelfOptions): void {\n  if (options.auth) {\n    registerAuth(app, options.auth);\n  }\n  registerAssets(app);\n  registerStorybook(app);\n  registerUiPages(app);\n}\n\n/** Register the OpenAPI document and interactive docs page. */\nfunction registerDocs(app: ShelfApp): void {\n  app.doc(\"/api/v1/openapi.json\", {\n    openapi: \"3.0.0\",\n    info: {\n      title: \"StoryShelf API\",\n      description:\n        \"REST API for the StoryShelf visual testing platform. JSON endpoints live under /api/v1; HTML pages are served at /.\",\n      version: \"1.0.0\",\n    },\n  });\n  app.get(\"/api/v1/docs\", swaggerUI({ url: \"/api/v1/openapi.json\" }));\n}\n\n/** Register every API router, page set, and optional auth flow. */\nfunction registerAllRoutes(app: ShelfApp, options: ShelfOptions, health: HealthDeps): void {\n  registerApiRoutes(app, health);\n  registerPageRoutes(app, options);\n}\n\n/** Package version injected at build via __PKG_VERSION__. */\nfunction packageVersion(): string {\n  return (globalThis as unknown as { __PKG_VERSION__?: string }).__PKG_VERSION__ ?? \"0.0.0\";\n}\n\n/**\n * Create the StoryShelf Hono router with all API routes and HTML pages.\n *\n * Adapter `init` hooks kick off eagerly in the background (the constructor\n * stays synchronous). Await `app.lifecycle.init()` before serving for\n * fail-fast startup, or let the first request gate on settlement.\n */\nexport function createShelfRouter(options: ShelfOptions): ShelfRouter {\n  const app = new OpenAPIHono<{ Variables: ShelfContext }>() as ShelfRouter;\n  const runtime = resolveRuntime(options);\n  const cell: LifecycleCell = { ready: Promise.resolve({ ok: true, failures: [] }), settled: null };\n  attachLifecycle(app, options, runtime, cell);\n  const { queue, enqueueCapture } = setupCaptureQueue(\n    options,\n    runtime.config,\n    runtime.gitHosts,\n    runtime.logger,\n  );\n  wireMiddleware(app, {\n    ...runtime,\n    queue,\n    enqueueCapture,\n    options,\n    getReady: async () => await cell.ready,\n  });\n  registerAllRoutes(app, options, {\n    sources: options,\n    getSettled: () => cell.settled,\n    bootTimeMs: Date.now(),\n    version: packageVersion(),\n  });\n  registerDocs(app);\n\n  return app;\n}\n\n/**\n * Public surface: the router and its types only.\n *\n * `createShelfRouter` plus the option/config types needed to call it. Adapter\n * interfaces live under `core/adapter/*`; runtime helpers under `core/logger`,\n * `core/capture`, `core/paths`, `core/urls`, `core/diff`; tables and row types\n * under `core/schema`. Models and internal tooling (`store`, `middleware`,\n * `retention`, pages) have no public entry. Importing the barrel\n * must never pull the Hono router into bundles that do not serve it.\n */\nexport type { ShelfOptions, ShelfConfig, UIConfig, BrandTheme } from \"./config.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwFA,SAAS,qBACP,MACA,SACM;CACN,IAAI,QAAQ,eACV,KAAK,mBAAmB,QAAQ,cAAc;CAEhD,IAAI,QAAQ,cACV,KAAK,kBAAkB,QAAQ,aAAa;CAE9C,IAAI,QAAQ,MACV,KAAK,UAAU,QAAQ,KAAK;AAEhC;AAEA,SAAS,qBACP,SACsD;CACtD,MAAM,OAA6D;EACjE,UAAU,QAAQ,SAAS;EAC3B,SAAS,QAAQ,QAAQ;CAC3B;CACA,qBAAqB,MAAM,OAAO;CAClC,KAAK,MAAM,KAAK,QAAQ,YAAY,CAAC,GACnC,KAAK,OAAO,EAAE,SAAS,UAAU,EAAE;CAErC,OAAO;AACT;;AAWA,SAAS,eAAe,SAAsC;CAE5D,MAAM,YAAY,QAAQ,SACtB,eAAe,QAAQ,MAA4C,IACnE,CAAC;CAEL,MAAM,KAAK,QAAQ,KAAK,iBAAiB,QAAQ,EAAwC,IAAI,CAAC;CAC9F,MAAM,SAAS,QAAQ,UAAU,kBAAkB;CACnD,MAAM,cAAc,QAAQ,SAAS,KAAA;CACrC,MAAM,WAAW,QAAQ,YAAY,CAAC;CAQtC,OAAO;EAAE,QANyC,UAAU,WACxD,YACA;GACE,GAAG;GACH,UAAU,qBAAqB,OAAO;EACxC;EACa;EAAI;EAAQ;EAAa;CAAS;AACrD;;AAQA,SAAS,kBACP,SACA,QACA,UACA,QACa;CACb,IAAI,CAAC,QAAQ,eACX,OAAO;EAAE,OAAO;EAAM,gBAAgB,KAAA;CAAU;CAElD,IAAI,CAAC,OAAO,YACV,MAAM,IAAI,MAAM,gEAAgE;CAElF,MAAM,aAAgC;EACpC,IAAI,QAAQ;EACZ,SAAS,QAAQ;EACjB,QAAQ,QAAQ;EAChB,YAAY,OAAO;EACnB,WAAW,OAAO;EAClB;EACA,QAAQ,OAAO;CACjB;CACA,MAAM,SAAS,kBAAkB;EAC/B,IAAI,QAAQ;EACZ;EACA;EACA,QAAQ,OAAO;EACf;CACF,CAAC;CACD,MAAM,eACJ,QAAQ,gBACR,IAAI,qBAAqB;EACvB,aAAa,OAAO,sBAAsB;EAC1C;EACA;CACF,CAAC;CACH,MAAM,iBAAiB,OAAO,SAAiB,UAAkC;EAC/E,MAAM,aAAa,QAAQ;GAAE;GAAS;EAAM,CAAC;CAC/C;CACA,OAAO;EAAE,OAAO;EAAc;CAAe;AAC/C;;AAQA,SAAS,eACP,QACqD;CACrD,OAAO,OAAO,SAAS,KAAK,aAAa;EACvC,UAAU,QAAQ;EAClB,MAAM,QAAQ;EACd,OAAO,QAAQ;CACjB,EAAE;AACJ;;;;;;AAOA,SAAS,SAAS,UAA4C;CAE5D,OAAO,OAAO,GAAY,SAAyC;EACjE,IAAI,EAAE,IAAI,SAAS,kBAAkB;GACnC,MAAM,KAAK;GACX;EACF;EACA,MAAM,SAAS,MAAM,SAAS;EAC9B,IAAI,CAAC,OAAO,IACV,OAAO,EAAE,KACP;GAAE,OAAO;GAAiC,UAAU,eAAe,MAAM;EAAE,GAC3E,GACF;EAEF,MAAM,KAAK;CACb;AACF;AAQA,SAAS,gBAAgB,MAAqB,SAA2C;CACvF,QAAQ,MACL,WAAW;EACV,KAAK,UAAU;CACjB,SACM;EACJ,KAAK,UAAU;GAAE,IAAI;GAAO,UAAU,CAAC;EAAE;CAC3C,CACF;AACF;;AAGA,SAAS,SACP,SACA,KACA,QACA,MACM;CACN,KAAK,QAAQ,gBAAgB,aAAa,OAAO,GAAG,KAAK,MAAM;CAC/D,gBAAgB,MAAM,KAAK,KAAK;AAClC;;AAGA,SAAS,gBACP,KACA,SACA,SACA,MACM;CACN,MAAM,UAA8B;EAAE,QAAQ,QAAQ;EAAQ,QAAQ,QAAQ;CAAO;CACrF,SAAS,SAAS,SAAS,QAAQ,QAAQ,IAAI;CAC/C,OAAO,OAAO,KAAK,EAAE,WAAW,gBAAgB,SAAS,SAAS,QAAQ,QAAQ,IAAI,EAAE,CAAC;AAC3F;;AAGA,SAAS,gBACP,SACA,KACA,QACA,MACgB;CAChB,OAAO;EACL,IAAI,QAAQ;GACV,OAAO,KAAK;EACd;EACA,MAAM,YAAY;GAChB,MAAM,SAAS,MAAM,gBAAgB,aAAa,OAAO,GAAG,KAAK,MAAM;GACvE,KAAK,QAAQ,QAAQ,QAAQ,MAAM;GACnC,KAAK,UAAU;GACf,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,sBAAsB,QAAQ,OAAO,QAAQ;EAE3D;EACA,OAAO,YAAY;GACjB,MAAM,SAAS,MAAM,iBAAiB,cAAc,OAAO,GAAG,KAAK,MAAM;GACzE,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,sBAAsB,SAAS,OAAO,QAAQ;EAE5D;CACF;AACF;;AAGA,SAAS,eAAe,KAAe,QAAgC;CACrE,MAAM,EAAE,SAAS,QAAQ,IAAI,QAAQ,aAAa,gBAAgB,OAAO,UAAU,aACjF;CACF,IAAI,IAAI,KAAK,UAAU,CAAC;CAIxB,IAAI,IAAI,KAAK,eAAe,MAAM,CAAC;CACnC,IAAI,IAAI,KAAK,SAAS,QAAQ,CAAC;CAC/B,IAAI,IAAI,aAAa,UAAU;EAAE,UAAU;EAAQ,KAAK;CAAI,CAAC,CAAC;CAC9D,IAAI,IAAI,oBAAoB,UAAU;EAAE,UAAU;EAAQ,KAAK;CAAG,CAAC,CAAC;CACpE,IAAI,IAAI,sBAAsB,UAAU;EAAE,UAAU;EAAQ,KAAK;CAAG,CAAC,CAAC;CACtE,IAAI,IAAI,8BAA8B,KAAK,CAAC;CAC5C,IAAI,IACF,KACA,WAAW;EACT,IAAI,QAAQ;EACZ,SAAS,QAAQ;EACjB;EACA;EACA;EACA;EACA;EACA,cAAc;EACd;EACA,aAAa,OAAO,MAAM,MAAM,mBAAmB,GAAG,QAAQ,IAAI;CACpE,CAAC,CACH;CACA,IAAI,IAAI,KAAK,SAAS,CAAC;AACzB;;AAGA,SAAS,kBAAkB,KAAe,QAA0B;CAClE,iBAAiB,GAAG;CACpB,eAAe,GAAG;CAClB,eAAe,GAAG;CAClB,cAAc,GAAG;CACjB,gBAAgB,GAAG;CACnB,eAAe,GAAG;CAClB,iBAAiB,GAAG;CACpB,sBAAsB,GAAG;CACzB,eAAe,KAAK,MAAM;CAC1B,cAAc,GAAG;AACnB;;AAGA,SAAS,mBAAmB,KAAe,SAA6B;CACtE,IAAI,QAAQ,MACV,aAAa,KAAK,QAAQ,IAAI;CAEhC,eAAe,GAAG;CAClB,kBAAkB,GAAG;CACrB,gBAAgB,GAAG;AACrB;;AAGA,SAAS,aAAa,KAAqB;CACzC,IAAI,IAAI,wBAAwB;EAC9B,SAAS;EACT,MAAM;GACJ,OAAO;GACP,aACE;GACF,SAAS;EACX;CACF,CAAC;CACD,IAAI,IAAI,gBAAgB,UAAU,EAAE,KAAK,uBAAuB,CAAC,CAAC;AACpE;;AAGA,SAAS,kBAAkB,KAAe,SAAuB,QAA0B;CACzF,kBAAkB,KAAK,MAAM;CAC7B,mBAAmB,KAAK,OAAO;AACjC;;AAGA,SAAS,iBAAyB;CAChC,OAAQ,WAAuD,mBAAmB;AACpF;;;;;;;;AASA,SAAgB,kBAAkB,SAAoC;CACpE,MAAM,MAAM,IAAI,YAAyC;CACzD,MAAM,UAAU,eAAe,OAAO;CACtC,MAAM,OAAsB;EAAE,OAAO,QAAQ,QAAQ;GAAE,IAAI;GAAM,UAAU,CAAC;EAAE,CAAC;EAAG,SAAS;CAAK;CAChG,gBAAgB,KAAK,SAAS,SAAS,IAAI;CAC3C,MAAM,EAAE,OAAO,mBAAmB,kBAChC,SACA,QAAQ,QACR,QAAQ,UACR,QAAQ,MACV;CACA,eAAe,KAAK;EAClB,GAAG;EACH;EACA;EACA;EACA,UAAU,YAAY,MAAM,KAAK;CACnC,CAAC;CACD,kBAAkB,KAAK,SAAS;EAC9B,SAAS;EACT,kBAAkB,KAAK;EACvB,YAAY,KAAK,IAAI;EACrB,SAAS,eAAe;CAC1B,CAAC;CACD,aAAa,GAAG;CAEhB,OAAO;AACT"}

package/dist/middleware/auth-gate.mjs

@@ -1,36 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { getStore } from "../store.mjs";
-//#region src/middleware/auth-gate.ts
-/** Resolve the request user from the auth adapter (null when auth is off or a token is used). */
-async function resolveRequestUser(c, auth) {
-	if (!auth) return null;
-	if (c.req.header("authorization")) return null;
-	return await auth.check(c.req.raw);
-}
-/**
-* Gate the server-rendered UI behind auth (ADR 0008): unauthenticated HTML
-* requests redirect to login. API/auth routes answer 401/403 themselves, and
-* published-Storybook routes enforce their own auth (public builds are
-* viewable without a session, ADR 0011).
-*/
-function authGate() {
-	return async (c, next) => {
-		const { user, authEnabled: isAuthEnabled } = getStore();
-		const { path } = c.req;
-		if (!isAuthEnabled || user || path.startsWith("/api/") || path.startsWith("/auth/") || path.startsWith("/assets/") || path.startsWith("/projects/") && path.includes("/storybook")) {
-			await next();
-			return;
-		}
-		if (c.req.header("HX-Request") === "true") {
-			c.header("HX-Redirect", "/auth/login");
-			return c.body(null, 204);
-		}
-		return c.redirect("/auth/login", 302);
-	};
-}
-//#endregion
-export { authGate, resolveRequestUser };
-
-//# sourceMappingURL=auth-gate.mjs.map

package/dist/middleware/auth-gate.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-gate.mjs","names":[],"sources":["../../src/middleware/auth-gate.ts"],"sourcesContent":["import type { Context, Next } from \"hono\";\nimport type { AuthAdapter, AuthUser } from \"../adapters/auth.ts\";\nimport { getStore } from \"../store.ts\";\n\n/** Resolve the request user from the auth adapter (null when auth is off or a token is used). */\nexport async function resolveRequestUser(\n  c: Pick<Context, \"req\">,\n  auth?: AuthAdapter,\n): Promise<AuthUser | null> {\n  if (!auth) {\n    return null;\n  }\n  if (c.req.header(\"authorization\")) {\n    return null;\n  }\n  return await auth.check(c.req.raw);\n}\n\n/**\n * Gate the server-rendered UI behind auth (ADR 0008): unauthenticated HTML\n * requests redirect to login. API/auth routes answer 401/403 themselves, and\n * published-Storybook routes enforce their own auth (public builds are\n * viewable without a session, ADR 0011).\n */\nexport function authGate() {\n  // oxlint-disable-next-line typescript/no-invalid-void-type -- Hono middleware may not return Response\n  return async (c: Context, next: Next): Promise<Response | void> => {\n    const { user, authEnabled: isAuthEnabled } = getStore();\n    const { path } = c.req;\n    if (\n      !isAuthEnabled ||\n      user ||\n      path.startsWith(\"/api/\") ||\n      path.startsWith(\"/auth/\") ||\n      path.startsWith(\"/assets/\") ||\n      (path.startsWith(\"/projects/\") && path.includes(\"/storybook\"))\n    ) {\n      await next();\n      return;\n    }\n    if (c.req.header(\"HX-Request\") === \"true\") {\n      c.header(\"HX-Redirect\", \"/auth/login\");\n      return c.body(null, 204);\n    }\n    return c.redirect(\"/auth/login\", 302);\n  };\n}\n"],"mappings":";;;;;;AAKA,eAAsB,mBACpB,GACA,MAC0B;CAC1B,IAAI,CAAC,MACH,OAAO;CAET,IAAI,EAAE,IAAI,OAAO,eAAe,GAC9B,OAAO;CAET,OAAO,MAAM,KAAK,MAAM,EAAE,IAAI,GAAG;AACnC;;;;;;;AAQA,SAAgB,WAAW;CAEzB,OAAO,OAAO,GAAY,SAAyC;EACjE,MAAM,EAAE,MAAM,aAAa,kBAAkB,SAAS;EACtD,MAAM,EAAE,SAAS,EAAE;EACnB,IACE,CAAC,iBACD,QACA,KAAK,WAAW,OAAO,KACvB,KAAK,WAAW,QAAQ,KACxB,KAAK,WAAW,UAAU,KACzB,KAAK,WAAW,YAAY,KAAK,KAAK,SAAS,YAAY,GAC5D;GACA,MAAM,KAAK;GACX;EACF;EACA,IAAI,EAAE,IAAI,OAAO,YAAY,MAAM,QAAQ;GACzC,EAAE,OAAO,eAAe,aAAa;GACrC,OAAO,EAAE,KAAK,MAAM,GAAG;EACzB;EACA,OAAO,EAAE,SAAS,eAAe,GAAG;CACtC;AACF"}

package/dist/middleware/csrf.mjs

@@ -1,40 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { createHash, randomBytes } from "node:crypto";
-//#region src/middleware/csrf.ts
-const CSRF_SECRET = process.env["CSRF_SECRET"] ?? randomBytes(32).toString("hex");
-function generateToken(sessionId) {
-	const payload = `${sessionId}:${Date.now().toString(36)}`;
-	return `${payload}:${createHash("sha256").update(`${CSRF_SECRET}:${payload}`).digest("hex").slice(0, 16)}`;
-}
-function verifyToken(token, sessionId) {
-	const parts = token.split(":");
-	if (parts.length !== 3) return false;
-	const [payloadTimestamp, signature] = parts.slice(1);
-	if (!payloadTimestamp || !signature) return false;
-	if (signature !== createHash("sha256").update(`${CSRF_SECRET}:${sessionId}:${payloadTimestamp}`).digest("hex").slice(0, 16)) return false;
-	const timestamp = Number.parseInt(payloadTimestamp, 36);
-	const age = Date.now() - timestamp;
-	return age > 0 && age < 864e5;
-}
-/** Hono middleware issuing CSRF tokens on safe methods and verifying them on writes. */
-function csrf() {
-	return async (c, next) => {
-		const { method } = c.req;
-		if (method === "GET" || method === "HEAD" || method === "OPTIONS") {
-			const token = generateToken(c.req.header("session-id") ?? "default");
-			c.header("X-CSRF-Token", token);
-			await next();
-			return;
-		}
-		const sessionId = c.req.header("session-id") ?? "default";
-		const token = c.req.header("x-csrf-token") ?? c.req.query("csrf_token");
-		if (!token || !verifyToken(token, sessionId)) return c.json({ error: "Invalid CSRF token" }, 403);
-		await next();
-	};
-}
-//#endregion
-export { csrf };
-
-//# sourceMappingURL=csrf.mjs.map

package/dist/middleware/csrf.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"csrf.mjs","names":[],"sources":["../../src/middleware/csrf.ts"],"sourcesContent":["import type { Context, Next } from \"hono\";\nimport { createHash, randomBytes } from \"node:crypto\";\n\nconst CSRF_SECRET = process.env[\"CSRF_SECRET\"] ?? randomBytes(32).toString(\"hex\");\n\nfunction generateToken(sessionId: string): string {\n  const timestamp = Date.now().toString(36);\n  const payload = `${sessionId}:${timestamp}`;\n  const signature = createHash(\"sha256\")\n    .update(`${CSRF_SECRET}:${payload}`)\n    .digest(\"hex\")\n    .slice(0, 16);\n  return `${payload}:${signature}`;\n}\n\nfunction verifyToken(token: string, sessionId: string): boolean {\n  const parts = token.split(\":\");\n  if (parts.length !== 3) {\n    return false;\n  }\n  const [payloadTimestamp, signature] = parts.slice(1);\n  if (!payloadTimestamp || !signature) {\n    return false;\n  }\n  const expectedSignature = createHash(\"sha256\")\n    .update(`${CSRF_SECRET}:${sessionId}:${payloadTimestamp}`)\n    .digest(\"hex\")\n    .slice(0, 16);\n  if (signature !== expectedSignature) {\n    return false;\n  }\n  const timestamp = Number.parseInt(payloadTimestamp, 36);\n  const age = Date.now() - timestamp;\n  return age > 0 && age < 24 * 60 * 60 * 1000;\n}\n\n/** Hono middleware issuing CSRF tokens on safe methods and verifying them on writes. */\nexport function csrf() {\n  // oxlint-disable-next-line typescript/no-invalid-void-type -- Hono middleware may not return Response\n  return async (c: Context, next: Next): Promise<Response | void> => {\n    const { method } = c.req;\n    if (method === \"GET\" || method === \"HEAD\" || method === \"OPTIONS\") {\n      const sessionId = c.req.header(\"session-id\") ?? \"default\";\n      const token = generateToken(sessionId);\n      c.header(\"X-CSRF-Token\", token);\n      await next();\n      return;\n    }\n    const sessionId = c.req.header(\"session-id\") ?? \"default\";\n    const token = c.req.header(\"x-csrf-token\") ?? c.req.query(\"csrf_token\");\n    if (!token || !verifyToken(token, sessionId)) {\n      return c.json({ error: \"Invalid CSRF token\" }, 403);\n    }\n    await next();\n  };\n}\n\n/** Generate a CSRF token for the given session. */\nexport function getCsrfToken(sessionId: string): string {\n  return generateToken(sessionId);\n}\n"],"mappings":";;;;;AAGA,MAAM,cAAc,QAAQ,IAAI,kBAAkB,YAAY,EAAE,CAAC,CAAC,SAAS,KAAK;AAEhF,SAAS,cAAc,WAA2B;CAEhD,MAAM,UAAU,GAAG,UAAU,GADX,KAAK,IAAI,CAAC,CAAC,SAAS,EACE;CAKxC,OAAO,GAAG,QAAQ,GAJA,WAAW,QAAQ,CAAC,CACnC,OAAO,GAAG,YAAY,GAAG,SAAS,CAAC,CACnC,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EACiB;AAC/B;AAEA,SAAS,YAAY,OAAe,WAA4B;CAC9D,MAAM,QAAQ,MAAM,MAAM,GAAG;CAC7B,IAAI,MAAM,WAAW,GACnB,OAAO;CAET,MAAM,CAAC,kBAAkB,aAAa,MAAM,MAAM,CAAC;CACnD,IAAI,CAAC,oBAAoB,CAAC,WACxB,OAAO;CAMT,IAAI,cAJsB,WAAW,QAAQ,CAAC,CAC3C,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,kBAAkB,CAAC,CACzD,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EACsB,GAChC,OAAO;CAET,MAAM,YAAY,OAAO,SAAS,kBAAkB,EAAE;CACtD,MAAM,MAAM,KAAK,IAAI,IAAI;CACzB,OAAO,MAAM,KAAK,MAAM;AAC1B;;AAGA,SAAgB,OAAO;CAErB,OAAO,OAAO,GAAY,SAAyC;EACjE,MAAM,EAAE,WAAW,EAAE;EACrB,IAAI,WAAW,SAAS,WAAW,UAAU,WAAW,WAAW;GAEjE,MAAM,QAAQ,cADI,EAAE,IAAI,OAAO,YAAY,KAAK,SACX;GACrC,EAAE,OAAO,gBAAgB,KAAK;GAC9B,MAAM,KAAK;GACX;EACF;EACA,MAAM,YAAY,EAAE,IAAI,OAAO,YAAY,KAAK;EAChD,MAAM,QAAQ,EAAE,IAAI,OAAO,cAAc,KAAK,EAAE,IAAI,MAAM,YAAY;EACtE,IAAI,CAAC,SAAS,CAAC,YAAY,OAAO,SAAS,GACzC,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;EAEpD,MAAM,KAAK;CACb;AACF"}

package/dist/middleware/rate-limit.mjs

@@ -1,39 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-//#region src/middleware/rate-limit.ts
-const stores = /* @__PURE__ */ new Map();
-function cleanup() {
-	const now = Date.now();
-	for (const [key, entry] of stores) if (now > entry.resetAt) stores.delete(key);
-}
-setInterval(cleanup, 6e4).unref();
-/** Hono middleware limiting requests per key within a sliding window. */
-function rateLimit(options) {
-	const { windowMs, max, keyGenerator } = options;
-	return async (c, next) => {
-		const key = keyGenerator ? keyGenerator(c) : c.req.header("x-forwarded-for") ?? "anonymous";
-		const now = Date.now();
-		let entry = stores.get(key);
-		if (!entry || now > entry.resetAt) {
-			entry = {
-				count: 0,
-				resetAt: now + windowMs
-			};
-			stores.set(key, entry);
-		}
-		entry.count += 1;
-		if (entry.count > max) {
-			const retryAfter = Math.ceil((entry.resetAt - now) / 1e3);
-			c.header("Retry-After", String(retryAfter));
-			return c.json({ error: "Too many requests" }, 429);
-		}
-		c.header("X-RateLimit-Limit", String(max));
-		c.header("X-RateLimit-Remaining", String(Math.max(0, max - entry.count)));
-		await next();
-	};
-}
-//#endregion
-export { rateLimit };
-
-//# sourceMappingURL=rate-limit.mjs.map

package/dist/middleware/rate-limit.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"rate-limit.mjs","names":[],"sources":["../../src/middleware/rate-limit.ts"],"sourcesContent":["import type { Context, Next } from \"hono\";\n\ninterface RateLimitEntry {\n  count: number;\n  resetAt: number;\n}\n\ninterface RateLimitOptions {\n  windowMs: number;\n  max: number;\n  keyGenerator?: (c: Context) => string;\n}\n\nconst stores = new Map<string, RateLimitEntry>();\n\nfunction cleanup(): void {\n  const now = Date.now();\n  for (const [key, entry] of stores) {\n    if (now > entry.resetAt) {\n      stores.delete(key);\n    }\n  }\n}\n\nsetInterval(cleanup, 60_000).unref();\n\n/** Hono middleware limiting requests per key within a sliding window. */\nexport function rateLimit(options: RateLimitOptions) {\n  const { windowMs, max, keyGenerator } = options;\n  // oxlint-disable-next-line typescript/no-invalid-void-type -- Hono middleware may not return Response\n  return async (c: Context, next: Next): Promise<Response | void> => {\n    const key = keyGenerator ? keyGenerator(c) : (c.req.header(\"x-forwarded-for\") ?? \"anonymous\");\n    const now = Date.now();\n    let entry = stores.get(key);\n    if (!entry || now > entry.resetAt) {\n      entry = { count: 0, resetAt: now + windowMs };\n      stores.set(key, entry);\n    }\n    entry.count += 1;\n    if (entry.count > max) {\n      const retryAfter = Math.ceil((entry.resetAt - now) / 1000);\n      c.header(\"Retry-After\", String(retryAfter));\n      return c.json({ error: \"Too many requests\" }, 429);\n    }\n    c.header(\"X-RateLimit-Limit\", String(max));\n    c.header(\"X-RateLimit-Remaining\", String(Math.max(0, max - entry.count)));\n    await next();\n  };\n}\n"],"mappings":";;;;AAaA,MAAM,yBAAS,IAAI,IAA4B;AAE/C,SAAS,UAAgB;CACvB,MAAM,MAAM,KAAK,IAAI;CACrB,KAAK,MAAM,CAAC,KAAK,UAAU,QACzB,IAAI,MAAM,MAAM,SACd,OAAO,OAAO,GAAG;AAGvB;AAEA,YAAY,SAAS,GAAM,CAAC,CAAC,MAAM;;AAGnC,SAAgB,UAAU,SAA2B;CACnD,MAAM,EAAE,UAAU,KAAK,iBAAiB;CAExC,OAAO,OAAO,GAAY,SAAyC;EACjE,MAAM,MAAM,eAAe,aAAa,CAAC,IAAK,EAAE,IAAI,OAAO,iBAAiB,KAAK;EACjF,MAAM,MAAM,KAAK,IAAI;EACrB,IAAI,QAAQ,OAAO,IAAI,GAAG;EAC1B,IAAI,CAAC,SAAS,MAAM,MAAM,SAAS;GACjC,QAAQ;IAAE,OAAO;IAAG,SAAS,MAAM;GAAS;GAC5C,OAAO,IAAI,KAAK,KAAK;EACvB;EACA,MAAM,SAAS;EACf,IAAI,MAAM,QAAQ,KAAK;GACrB,MAAM,aAAa,KAAK,MAAM,MAAM,UAAU,OAAO,GAAI;GACzD,EAAE,OAAO,eAAe,OAAO,UAAU,CAAC;GAC1C,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EACnD;EACA,EAAE,OAAO,qBAAqB,OAAO,GAAG,CAAC;EACzC,EAAE,OAAO,yBAAyB,OAAO,KAAK,IAAI,GAAG,MAAM,MAAM,KAAK,CAAC,CAAC;EACxE,MAAM,KAAK;CACb;AACF"}

package/dist/middleware/request-log.mjs

@@ -1,28 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-//#region src/middleware/request-log.ts
-/** Hono middleware logging request start/end with duration. */
-function requestLogging(logger) {
-	return async (c, next) => {
-		const started = performance.now();
-		const id = c.get("requestId");
-		logger.info({
-			reqId: id,
-			method: c.req.method,
-			url: c.req.path
-		}, "request start");
-		await next();
-		logger.info({
-			reqId: id,
-			method: c.req.method,
-			url: c.req.path,
-			status: c.res.status,
-			durationMs: Math.round(performance.now() - started)
-		}, "request end");
-	};
-}
-//#endregion
-export { requestLogging };
-
-//# sourceMappingURL=request-log.mjs.map

package/dist/middleware/request-log.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"request-log.mjs","names":[],"sources":["../../src/middleware/request-log.ts"],"sourcesContent":["import type { Context, Next } from \"hono\";\nimport type { Logger } from \"../logger.ts\";\n\n/** Hono middleware logging request start/end with duration. */\nexport function requestLogging(logger: Logger) {\n  // oxlint-disable-next-line typescript/no-invalid-void-type -- Hono middleware may not return Response\n  return async (c: Context, next: Next): Promise<Response | void> => {\n    const started = performance.now();\n    const id = c.get(\"requestId\");\n    logger.info({ reqId: id, method: c.req.method, url: c.req.path }, \"request start\");\n    await next();\n    logger.info(\n      {\n        reqId: id,\n        method: c.req.method,\n        url: c.req.path,\n        status: c.res.status,\n        durationMs: Math.round(performance.now() - started),\n      },\n      \"request end\",\n    );\n  };\n}\n"],"mappings":";;;;;AAIA,SAAgB,eAAe,QAAgB;CAE7C,OAAO,OAAO,GAAY,SAAyC;EACjE,MAAM,UAAU,YAAY,IAAI;EAChC,MAAM,KAAK,EAAE,IAAI,WAAW;EAC5B,OAAO,KAAK;GAAE,OAAO;GAAI,QAAQ,EAAE,IAAI;GAAQ,KAAK,EAAE,IAAI;EAAK,GAAG,eAAe;EACjF,MAAM,KAAK;EACX,OAAO,KACL;GACE,OAAO;GACP,QAAQ,EAAE,IAAI;GACd,KAAK,EAAE,IAAI;GACX,QAAQ,EAAE,IAAI;GACd,YAAY,KAAK,MAAM,YAAY,IAAI,IAAI,OAAO;EACpD,GACA,aACF;CACF;AACF"}

package/dist/middleware/store-scope.mjs

@@ -1,29 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { runWithStore } from "../store.mjs";
-//#region src/middleware/store-scope.ts
-/** Hono middleware running downstream handlers inside the request store. */
-function storeScope(deps) {
-	return async (c, next) => {
-		const user = await deps.resolveUser(c);
-		await runWithStore({
-			db: deps.db,
-			storage: deps.storage,
-			config: deps.config,
-			ui: deps.ui,
-			logger: deps.logger,
-			user,
-			authEnabled: deps.authEnabled,
-			enqueueCapture: deps.enqueueCapture,
-			captureQueue: deps.captureQueue,
-			gitHosts: deps.gitHosts
-		}, async () => {
-			await next();
-		});
-	};
-}
-//#endregion
-export { storeScope };
-
-//# sourceMappingURL=store-scope.mjs.map

package/dist/middleware/store-scope.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"store-scope.mjs","names":[],"sources":["../../src/middleware/store-scope.ts"],"sourcesContent":["import type { Context, Next } from \"hono\";\nimport type { AuthUser } from \"../adapters/auth.ts\";\nimport type { CaptureQueue } from \"../adapters/capture-queue.ts\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { GitHostProvider } from \"../adapters/git-host/index.ts\";\nimport type { StorageAdapter } from \"../adapters/storage.ts\";\nimport type { ShelfConfig, UIConfig } from \"../config.ts\";\nimport type { Logger } from \"../logger.ts\";\nimport { runWithStore } from \"../store.ts\";\n\n/** Dependencies scoped into the request store for router handlers. */\nexport interface StoreScopeDeps {\n  db: DatabaseAdapter;\n  storage: StorageAdapter;\n  config: ShelfConfig;\n  ui: UIConfig;\n  logger: Logger;\n  authEnabled: boolean;\n  enqueueCapture?: (buildId: string, reqId?: string) => Promise<void>;\n  captureQueue: CaptureQueue | null;\n  gitHosts: GitHostProvider[];\n  resolveUser: (c: Context) => Promise<AuthUser | null>;\n}\n\n/** Hono middleware running downstream handlers inside the request store. */\nexport function storeScope(deps: StoreScopeDeps) {\n  // oxlint-disable-next-line typescript/no-invalid-void-type -- Hono middleware may not return Response\n  return async (c: Context, next: Next): Promise<Response | void> => {\n    const user = await deps.resolveUser(c);\n    await runWithStore(\n      {\n        db: deps.db,\n        storage: deps.storage,\n        config: deps.config,\n        ui: deps.ui,\n        logger: deps.logger,\n        user,\n        authEnabled: deps.authEnabled,\n        enqueueCapture: deps.enqueueCapture,\n        captureQueue: deps.captureQueue,\n        gitHosts: deps.gitHosts,\n      },\n      async () => {\n        await next();\n      },\n    );\n  };\n}\n"],"mappings":";;;;;;AAyBA,SAAgB,WAAW,MAAsB;CAE/C,OAAO,OAAO,GAAY,SAAyC;EACjE,MAAM,OAAO,MAAM,KAAK,YAAY,CAAC;EACrC,MAAM,aACJ;GACE,IAAI,KAAK;GACT,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,IAAI,KAAK;GACT,QAAQ,KAAK;GACb;GACA,aAAa,KAAK;GAClB,gBAAgB,KAAK;GACrB,cAAc,KAAK;GACnB,UAAU,KAAK;EACjB,GACA,YAAY;GACV,MAAM,KAAK;EACb,CACF;CACF;AACF"}