@storyshelf/core 0.3.2 → 0.5.4

package/dist/routers/builds.mjs

@@ -1,185 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { BuildModel } from "../models/build.mjs";
-import { storybookZipPath } from "../paths.mjs";
-import "../config.mjs";
-import { getStore } from "../store.mjs";
-import { resolveAuthorizedProject } from "./helpers.mjs";
-import { badRequest, buildSchema, forbidden, notFound, unauthorized } from "./schemas.mjs";
-import { APPROVER_ROLES, DEVELOPER_ROLES, VIEW_ROLES, buildCreateJsonSchema, buildForProject, buildListQuery, createBuildRecord, persistInlineStatics, storeUploadStream } from "./builds.handlers.mjs";
-import { registerComments } from "./comments.mjs";
-import { registerSnapshots } from "./snapshots.mjs";
-import { createRoute, z } from "@hono/zod-openapi";
-import { HTTPException } from "hono/http-exception";
-//#region src/routers/builds.ts
-const listBuildsRoute = createRoute({
-	method: "get",
-	path: "/api/v1/projects/{slug}/builds",
-	request: {
-		params: z.object({ slug: z.string() }),
-		query: buildListQuery
-	},
-	responses: {
-		200: {
-			content: { "application/json": { schema: buildSchema.array() } },
-			description: "List builds for a project"
-		},
-		...notFound,
-		...unauthorized
-	}
-});
-const buildCreatedSchema = z.object({
-	build: buildSchema,
-	uploadUrl: z.string()
-}).openapi("BuildCreated");
-const createBuildRoute = createRoute({
-	method: "post",
-	path: "/api/v1/projects/{slug}/builds",
-	request: {
-		params: z.object({ slug: z.string() }),
-		body: { content: { "application/json": { schema: buildCreateJsonSchema } } }
-	},
-	responses: {
-		202: {
-			content: { "application/json": { schema: buildCreatedSchema } },
-			description: "Build created. PUT the Storybook zip to uploadUrl to queue capture."
-		},
-		...badRequest,
-		...forbidden,
-		...notFound
-	}
-});
-const uploadZipRoute = createRoute({
-	method: "put",
-	path: "/api/v1/projects/{slug}/builds/{buildId}/zip",
-	request: {
-		params: z.object({
-			slug: z.string(),
-			buildId: z.string()
-		}),
-		body: { content: { "application/zip": { schema: z.string().openapi({
-			type: "string",
-			format: "binary"
-		}) } } }
-	},
-	responses: {
-		202: {
-			content: { "application/json": { schema: buildSchema } },
-			description: "Zip stored and capture queued"
-		},
-		413: {
-			content: { "application/json": { schema: z.object({ message: z.string() }).openapi("Error") } },
-			description: "Upload exceeds the configured size limit"
-		},
-		...badRequest,
-		...forbidden,
-		...notFound
-	}
-});
-const getBuildRoute = createRoute({
-	method: "get",
-	path: "/api/v1/projects/{slug}/builds/{buildId}",
-	request: { params: z.object({
-		slug: z.string(),
-		buildId: z.string()
-	}) },
-	responses: {
-		200: {
-			content: { "application/json": { schema: buildSchema } },
-			description: "Fetch a build"
-		},
-		...notFound,
-		...unauthorized
-	}
-});
-const retryBuildRoute = createRoute({
-	method: "post",
-	path: "/api/v1/projects/{slug}/builds/{buildId}/retry",
-	request: { params: z.object({
-		slug: z.string(),
-		buildId: z.string()
-	}) },
-	responses: {
-		202: {
-			content: { "application/json": { schema: buildSchema } },
-			description: "Build reset to pending"
-		},
-		...notFound
-	}
-});
-const deleteBuildRoute = createRoute({
-	method: "delete",
-	path: "/api/v1/projects/{slug}/builds/{buildId}",
-	request: { params: z.object({
-		slug: z.string(),
-		buildId: z.string()
-	}) },
-	responses: {
-		204: { description: "Build deleted" },
-		...notFound
-	}
-});
-/** Register the build list, upload, fetch, retry, and delete endpoints. */
-function registerBuilds(app) {
-	app.openapi(listBuildsRoute, async (c) => {
-		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...VIEW_ROLES);
-		const { status, branch, labelKey, labelValue } = c.req.valid("query");
-		const builds = new BuildModel(getStore().db).list(project.id, {
-			status,
-			branch: branch ?? void 0,
-			labelKey: labelKey ?? void 0,
-			labelValue: labelValue ?? void 0
-		});
-		return c.json(await builds);
-	});
-	app.openapi(createBuildRoute, async (c) => {
-		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...DEVELOPER_ROLES);
-		const parsed = buildCreateJsonSchema.safeParse(await c.req.json());
-		if (!parsed.success) throw new HTTPException(400, { message: parsed.error.message });
-		const build = await createBuildRecord(project, parsed.data);
-		const uploadUrl = `/api/v1/projects/${project.slug}/builds/${build.id}/zip`;
-		return c.json({
-			build,
-			uploadUrl
-		}, 202);
-	});
-	app.openapi(uploadZipRoute, async (c) => {
-		const { slug, buildId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		const maxBytes = getStore().config.maxUploadBytes ?? 1073741824;
-		await storeUploadStream(getStore().storage, storybookZipPath(project.id, build.id), c.req.raw.body, maxBytes);
-		const reqId = c.get("requestId");
-		await getStore().enqueueCapture?.(build.id, reqId);
-		const { storage, config, logger } = getStore();
-		await persistInlineStatics(storage, config.scratchDir, config.maxInlineUnzipSize, c.req.header("content-length"), project.id, build.id, logger);
-		return c.json(build, 202);
-	});
-	app.openapi(getBuildRoute, async (c) => {
-		const { slug, buildId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		return c.json(build);
-	});
-	app.openapi(retryBuildRoute, async (c) => {
-		const { slug, buildId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		const updated = await new BuildModel(getStore().db).setStatus(build.id, "pending");
-		return c.json(updated, 202);
-	});
-	app.openapi(deleteBuildRoute, async (c) => {
-		const { slug, buildId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		await new BuildModel(getStore().db).remove(build.id);
-		return c.body(null, 204);
-	});
-	registerSnapshots(app);
-	registerComments(app);
-}
-//#endregion
-export { registerBuilds };
-
-//# sourceMappingURL=builds.mjs.map

package/dist/routers/builds.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"builds.mjs","names":["notFoundResponse","forbiddenResponse"],"sources":["../../src/routers/builds.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { DEFAULT_MAX_UPLOAD_BYTES } from \"../config.ts\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { BuildModel } from \"../models/build.ts\";\nimport { getStore } from \"../store.ts\";\nimport { storybookZipPath } from \"../utils/paths.ts\";\nimport {\n  VIEW_ROLES,\n  DEVELOPER_ROLES,\n  APPROVER_ROLES,\n  buildCreateJsonSchema,\n  buildListQuery,\n  buildForProject,\n  createBuildRecord,\n  persistInlineStatics,\n  storeUploadStream,\n} from \"./builds.handlers.ts\";\nimport { registerComments } from \"./comments.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  badRequest,\n  buildSchema,\n  forbidden as forbiddenResponse,\n  notFound as notFoundResponse,\n  unauthorized,\n} from \"./schemas.ts\";\nimport { registerSnapshots } from \"./snapshots.ts\";\n\nconst listBuildsRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds\",\n  request: { params: z.object({ slug: z.string() }), query: buildListQuery },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: buildSchema.array() } },\n      description: \"List builds for a project\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst buildCreatedSchema = z\n  .object({ build: buildSchema, uploadUrl: z.string() })\n  .openapi(\"BuildCreated\");\n\nconst createBuildRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: {\n      content: {\n        \"application/json\": { schema: buildCreateJsonSchema },\n      },\n    },\n  },\n  responses: {\n    202: {\n      content: {\n        \"application/json\": {\n          schema: buildCreatedSchema,\n        },\n      },\n      description: \"Build created. PUT the Storybook zip to uploadUrl to queue capture.\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst uploadZipRoute = createRoute({\n  method: \"put\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/zip\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: {\n      content: {\n        \"application/zip\": {\n          schema: z.string().openapi({ type: \"string\", format: \"binary\" }),\n        },\n      },\n    },\n  },\n  responses: {\n    202: {\n      content: { \"application/json\": { schema: buildSchema } },\n      description: \"Zip stored and capture queued\",\n    },\n    413: {\n      content: {\n        \"application/json\": {\n          schema: z.object({ message: z.string() }).openapi(\"Error\"),\n        },\n      },\n      description: \"Upload exceeds the configured size limit\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst getBuildRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: buildSchema } }, description: \"Fetch a build\" },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst retryBuildRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/retry\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    202: {\n      content: { \"application/json\": { schema: buildSchema } },\n      description: \"Build reset to pending\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteBuildRoute = createRoute({\n  method: \"delete\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    204: { description: \"Build deleted\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the build list, upload, fetch, retry, and delete endpoints. */\nexport function registerBuilds(app: ShelfApp): void {\n  app.openapi(listBuildsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    const { status, branch, labelKey, labelValue } = c.req.valid(\"query\");\n    const builds = new BuildModel(getStore().db).list(project.id, {\n      status,\n      branch: branch ?? undefined,\n      labelKey: labelKey ?? undefined,\n      labelValue: labelValue ?? undefined,\n    });\n    return c.json(await builds);\n  });\n\n  app.openapi(createBuildRoute, async (c) => {\n    const project = await resolveAuthorizedProject(\n      c,\n      c.req.valid(\"param\").slug,\n      ...DEVELOPER_ROLES,\n    );\n    const parsed = buildCreateJsonSchema.safeParse(await c.req.json());\n    if (!parsed.success) {\n      throw new HTTPException(400, { message: parsed.error.message });\n    }\n    const build = await createBuildRecord(project, parsed.data);\n    const uploadUrl = `/api/v1/projects/${project.slug}/builds/${build.id}/zip`;\n    return c.json({ build, uploadUrl }, 202);\n  });\n\n  app.openapi(uploadZipRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const maxBytes = getStore().config.maxUploadBytes ?? DEFAULT_MAX_UPLOAD_BYTES;\n    await storeUploadStream(\n      getStore().storage,\n      storybookZipPath(project.id, build.id),\n      c.req.raw.body,\n      maxBytes,\n    );\n\n    const reqId = c.get(\"requestId\");\n    await getStore().enqueueCapture?.(build.id, reqId);\n    const { storage, config, logger } = getStore();\n    await persistInlineStatics(\n      storage,\n      config.scratchDir,\n      config.maxInlineUnzipSize,\n      c.req.header(\"content-length\"),\n      project.id,\n      build.id,\n      logger,\n    );\n    return c.json(build, 202);\n  });\n\n  app.openapi(getBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    return c.json(build);\n  });\n\n  app.openapi(retryBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const updated = await new BuildModel(getStore().db).setStatus(build.id, \"pending\");\n    return c.json(updated, 202);\n  });\n\n  app.openapi(deleteBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await new BuildModel(getStore().db).remove(build.id);\n    return c.body(null, 204);\n  });\n\n  registerSnapshots(app);\n  registerComments(app);\n}\n"],"mappings":";;;;;;;;;;;;;;;AA6BA,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS;EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EAAG,OAAO;CAAe;CACzE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,MAAM,EAAE,EAAE;GAC/D,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,EACxB,OAAO;CAAE,OAAO;CAAa,WAAW,EAAE,OAAO;AAAE,CAAC,CAAC,CACrD,QAAQ,cAAc;AAEzB,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EACJ,SAAS,EACP,oBAAoB,EAAE,QAAQ,sBAAsB,EACtD,EACF;CACF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EACP,oBAAoB,EAClB,QAAQ,mBACV,EACF;GACA,aAAa;EACf;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EACJ,SAAS,EACP,mBAAmB,EACjB,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ;GAAE,MAAM;GAAU,QAAQ;EAAS,CAAC,EACjE,EACF,EACF;CACF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EACP,oBAAoB,EAClB,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,OAAO,EAC3D,EACF;GACA,aAAa;EACf;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GAAG,aAAa;EAAgB;EAC9F,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,eAAe,KAAqB;CAClD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,MAAM,EAAE,QAAQ,QAAQ,UAAU,eAAe,EAAE,IAAI,MAAM,OAAO;EACpE,MAAM,SAAS,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI;GAC5D;GACA,QAAQ,UAAU,KAAA;GAClB,UAAU,YAAY,KAAA;GACtB,YAAY,cAAc,KAAA;EAC5B,CAAC;EACD,OAAO,EAAE,KAAK,MAAM,MAAM;CAC5B,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBACpB,GACA,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MACrB,GAAG,eACL;EACA,MAAM,SAAS,sBAAsB,UAAU,MAAM,EAAE,IAAI,KAAK,CAAC;EACjE,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,OAAO,MAAM,QAAQ,CAAC;EAEhE,MAAM,QAAQ,MAAM,kBAAkB,SAAS,OAAO,IAAI;EAC1D,MAAM,YAAY,oBAAoB,QAAQ,KAAK,UAAU,MAAM,GAAG;EACtE,OAAO,EAAE,KAAK;GAAE;GAAO;EAAU,GAAG,GAAG;CACzC,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,SAAS,CAAC,CAAC,OAAO,kBAAA;EACnC,MAAM,kBACJ,SAAS,CAAC,CAAC,SACX,iBAAiB,QAAQ,IAAI,MAAM,EAAE,GACrC,EAAE,IAAI,IAAI,MACV,QACF;EAEA,MAAM,QAAQ,EAAE,IAAI,WAAW;EAC/B,MAAM,SAAS,CAAC,CAAC,iBAAiB,MAAM,IAAI,KAAK;EACjD,MAAM,EAAE,SAAS,QAAQ,WAAW,SAAS;EAC7C,MAAM,qBACJ,SACA,OAAO,YACP,OAAO,oBACP,EAAE,IAAI,OAAO,gBAAgB,GAC7B,QAAQ,IACR,MAAM,IACN,MACF;EACA,OAAO,EAAE,KAAK,OAAO,GAAG;CAC1B,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,OAAO,EAAE,KAAK,KAAK;CACrB,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,MAAM,IAAI,SAAS;EACjF,OAAO,EAAE,KAAK,SAAS,GAAG;CAC5B,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;CAED,kBAAkB,GAAG;CACrB,iBAAiB,GAAG;AACtB"}

package/dist/routers/comments.mjs

@@ -1,90 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { getStore } from "../store.mjs";
-import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
-import { commentCreateSchema, commentSchema, notFound as notFound$1, unauthorized } from "./schemas.mjs";
-import { DEVELOPER_ROLES, VIEW_ROLES, buildForProject } from "./builds.handlers.mjs";
-import { CommentModel } from "../models/comment.mjs";
-import { createRoute, z } from "@hono/zod-openapi";
-//#region src/routers/comments.ts
-const listCommentsRoute = createRoute({
-	method: "get",
-	path: "/api/v1/projects/{slug}/builds/{buildId}/comments",
-	request: { params: z.object({
-		slug: z.string(),
-		buildId: z.string()
-	}) },
-	responses: {
-		200: {
-			content: { "application/json": { schema: commentSchema.array() } },
-			description: "List comments on a build"
-		},
-		...notFound$1,
-		...unauthorized
-	}
-});
-const createCommentRoute = createRoute({
-	method: "post",
-	path: "/api/v1/projects/{slug}/builds/{buildId}/comments",
-	request: {
-		params: z.object({
-			slug: z.string(),
-			buildId: z.string()
-		}),
-		body: { content: { "application/json": { schema: commentCreateSchema } } }
-	},
-	responses: {
-		201: {
-			content: { "application/json": { schema: commentSchema } },
-			description: "Comment created"
-		},
-		...notFound$1
-	}
-});
-const resolveCommentRoute = createRoute({
-	method: "post",
-	path: "/api/v1/projects/{slug}/builds/{buildId}/comments/{commentId}/resolve",
-	request: { params: z.object({
-		slug: z.string(),
-		buildId: z.string(),
-		commentId: z.string()
-	}) },
-	responses: {
-		200: {
-			content: { "application/json": { schema: commentSchema } },
-			description: "Comment resolved"
-		},
-		...notFound$1
-	}
-});
-/** Register the build comment list, create, and resolve endpoints. */
-function registerComments(app) {
-	app.openapi(listCommentsRoute, async (c) => {
-		const { slug, buildId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		return c.json(await new CommentModel(getStore().db).listByBuild(build.id));
-	});
-	app.openapi(createCommentRoute, async (c) => {
-		const { slug, buildId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		const body = c.req.valid("json");
-		const userId = getStore().user?.id ?? "anonymous";
-		const comment = await new CommentModel(getStore().db).create(project.id, build.id, userId, body);
-		return c.json(comment, 201);
-	});
-	app.openapi(resolveCommentRoute, async (c) => {
-		const { slug, buildId, commentId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		const comment = await new CommentModel(getStore().db).resolve(commentId);
-		if (comment.buildId !== build.id) notFound("Comment not found");
-		return c.json(comment);
-	});
-}
-//#endregion
-export { registerComments };
-
-//# sourceMappingURL=comments.mjs.map

package/dist/routers/comments.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"comments.mjs","names":["notFound"],"sources":["../../src/routers/comments.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { CommentModel } from \"../models/comment.ts\";\nimport { getStore } from \"../store.ts\";\nimport { VIEW_ROLES, DEVELOPER_ROLES, buildForProject } from \"./builds.handlers.ts\";\nimport { resolveAuthorizedProject, notFound as throwNotFound } from \"./helpers.ts\";\nimport { commentSchema, commentCreateSchema, notFound, unauthorized } from \"./schemas.ts\";\n\nconst listCommentsRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/comments\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: commentSchema.array() } },\n      description: \"List comments on a build\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createCommentRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/comments\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"application/json\": { schema: commentCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: commentSchema } },\n      description: \"Comment created\",\n    },\n    ...notFound,\n  },\n});\n\nconst resolveCommentRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/comments/{commentId}/resolve\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), commentId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: commentSchema } },\n      description: \"Comment resolved\",\n    },\n    ...notFound,\n  },\n});\n\n/** Register the build comment list, create, and resolve endpoints. */\nexport function registerComments(app: ShelfApp): void {\n  app.openapi(listCommentsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    return c.json(await new CommentModel(getStore().db).listByBuild(build.id));\n  });\n\n  app.openapi(createCommentRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const body = c.req.valid(\"json\");\n    const userId = getStore().user?.id ?? \"anonymous\";\n    const comment = await new CommentModel(getStore().db).create(\n      project.id,\n      build.id,\n      userId,\n      body,\n    );\n    return c.json(comment, 201);\n  });\n\n  app.openapi(resolveCommentRoute, async (c) => {\n    const { slug, buildId, commentId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const comment = await new CommentModel(getStore().db).resolve(commentId);\n    if (comment.buildId !== build.id) {\n      throwNotFound(\"Comment not found\");\n    }\n    return c.json(comment);\n  });\n}\n"],"mappings":";;;;;;;;;;AAQA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,MAAM,EAAE,EAAE;GACjE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;CAC3E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GACzD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CAC9F,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GACzD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,iBAAiB,KAAqB;CACpD,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,OAAO,EAAE,KAAK,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC;CAC3E,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OACpD,QAAQ,IACR,MAAM,IACN,QACA,IACF;EACA,OAAO,EAAE,KAAK,SAAS,GAAG;CAC5B,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,cAAc,EAAE,IAAI,MAAM,OAAO;EACxD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,SAAS;EACvE,IAAI,QAAQ,YAAY,MAAM,IAC5B,SAAc,mBAAmB;EAEnC,OAAO,EAAE,KAAK,OAAO;CACvB,CAAC;AACH"}

package/dist/routers/health.mjs

@@ -1,137 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { requireSiteAdmin } from "./helpers.mjs";
-//#region src/routers/health.ts
-const PROBE_TIMEOUT_MS = 2e3;
-const DETAIL_MAX_LENGTH = 500;
-function pushTarget(targets, adapter) {
-	if (adapter) targets.push(adapter);
-}
-function targetsOf(sources) {
-	const targets = [];
-	pushTarget(targets, sources.database);
-	pushTarget(targets, sources.storage);
-	pushTarget(targets, sources.captureRunner);
-	pushTarget(targets, sources.captureQueue);
-	pushTarget(targets, sources.auth);
-	for (const provider of sources.gitHosts ?? []) pushTarget(targets, provider);
-	return targets;
-}
-function sanitize(detail) {
-	return detail.length > DETAIL_MAX_LENGTH ? detail.slice(0, DETAIL_MAX_LENGTH) : detail;
-}
-function messageOf(reason) {
-	return sanitize(reason instanceof Error ? reason.message : String(reason));
-}
-async function timeoutError() {
-	await new Promise((resolve) => {
-		setTimeout(resolve, PROBE_TIMEOUT_MS);
-	});
-	throw new Error("health probe timed out");
-}
-function okReport(target, latencyMs, detail) {
-	const { category, kind, name } = target.metadata;
-	return {
-		category,
-		kind,
-		name,
-		state: "ok",
-		latencyMs,
-		...detail === void 0 ? {} : { detail }
-	};
-}
-function failedReport(target, latencyMs, detail) {
-	const { category, kind, name } = target.metadata;
-	return {
-		category,
-		kind,
-		name,
-		state: "failed",
-		latencyMs,
-		detail
-	};
-}
-function detailOf(result, fallback) {
-	return result.detail === void 0 ? fallback : sanitize(result.detail);
-}
-async function raceProbe(target, probe, started) {
-	try {
-		const result = await Promise.race([probe(), timeoutError()]);
-		const latencyMs = Date.now() - started;
-		if (!result.ok) return failedReport(target, latencyMs, detailOf(result, "probe reported failure"));
-		return okReport(target, latencyMs, result.detail === void 0 ? void 0 : sanitize(result.detail));
-	} catch (error) {
-		return failedReport(target, Date.now() - started, messageOf(error));
-	}
-}
-async function probeHealth(target) {
-	const probe = target.lifecycle?.health;
-	if (!probe) {
-		const { category, kind, name } = target.metadata;
-		return {
-			category,
-			kind,
-			name,
-			state: "ok"
-		};
-	}
-	return await raceProbe(target, probe, Date.now());
-}
-async function probeTarget(target, initErrors, starting) {
-	const { category, kind, name } = target.metadata;
-	const initError = initErrors.get(`${category}/${kind}`);
-	if (initError !== void 0) return {
-		category,
-		kind,
-		name,
-		state: "failed",
-		detail: sanitize(initError)
-	};
-	if (starting) return {
-		category,
-		kind,
-		name,
-		state: "starting"
-	};
-	return await probeHealth(target);
-}
-function collectInitErrors(settled) {
-	const initErrors = /* @__PURE__ */ new Map();
-	if (settled) for (const failure of settled.failures) initErrors.set(`${failure.category}/${failure.kind}`, failure.error);
-	return initErrors;
-}
-function overallStatus(reports) {
-	if (reports.some((report) => report.state === "failed")) return "degraded";
-	if (reports.some((report) => report.state === "starting")) return "starting";
-	return "ok";
-}
-/** Register `GET /api/v1/health` (open liveness) and `POST` (authed deep readiness). */
-function registerHealth(app, deps) {
-	app.get("/api/v1/health", (c) => {
-		const body = {
-			status: "ok",
-			uptimeSecs: Math.floor((Date.now() - deps.bootTimeMs) / 1e3),
-			version: deps.version
-		};
-		c.header("Cache-Control", "no-store");
-		return c.json(body);
-	});
-	app.post("/api/v1/health", async (c) => {
-		requireSiteAdmin();
-		const settled = deps.getSettled();
-		const initErrors = collectInitErrors(settled);
-		const targets = targetsOf(deps.sources);
-		const reports = await Promise.all(targets.map(async (target) => await probeTarget(target, initErrors, settled === null)));
-		const body = {
-			status: overallStatus(reports),
-			adapters: reports
-		};
-		c.header("Cache-Control", "no-store");
-		return c.json(body, body.status === "ok" ? 200 : 503);
-	});
-}
-//#endregion
-export { registerHealth };
-
-//# sourceMappingURL=health.mjs.map

package/dist/routers/health.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"health.mjs","names":[],"sources":["../../src/routers/health.ts"],"sourcesContent":["/**\n * Two-tier health: lightweight liveness (GET, no auth) and deep readiness\n * (POST, site-admin). Neither is gated by adapter init — liveness must\n * answer mid-migration so orchestrators don't kill the machine, and deep\n * reports the init settlement state instead of being masked by the gate.\n */\nimport type { AdapterInitResult, AdapterInitSources } from \"../adapters/init.ts\";\nimport type { AdapterHealth, AdapterLifecycle, AdapterMetadata } from \"../adapters/metadata.ts\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { requireSiteAdmin } from \"./helpers.ts\";\n\n/** Dependencies for the health routes (no adapter I/O on the GET path). */\nexport interface HealthDeps {\n  sources: AdapterInitSources;\n  getSettled: () => AdapterInitResult | null;\n  bootTimeMs: number;\n  version: string;\n}\n\n/** Liveness body: process-level only, safe for unauthenticated probes. */\nexport interface LivenessBody {\n  status: \"ok\";\n  uptimeSecs: number;\n  version: string;\n}\n\ntype AdapterState = \"ok\" | \"starting\" | \"failed\";\n\n/** Per-adapter readiness entry (error text sanitized — no secrets). */\nexport interface AdapterReport {\n  category: string;\n  kind: string;\n  name: string;\n  state: AdapterState;\n  latencyMs?: number;\n  detail?: string;\n}\n\n/** Deep readiness body. */\nexport interface ReadinessBody {\n  status: \"ok\" | \"starting\" | \"degraded\";\n  adapters: AdapterReport[];\n}\n\ninterface ProbeTarget {\n  readonly metadata: AdapterMetadata;\n  readonly lifecycle?: AdapterLifecycle;\n}\n\nconst PROBE_TIMEOUT_MS = 2000;\nconst DETAIL_MAX_LENGTH = 500;\n\nfunction pushTarget(targets: ProbeTarget[], adapter: ProbeTarget | undefined): void {\n  if (adapter) {\n    targets.push(adapter);\n  }\n}\n\nfunction targetsOf(sources: AdapterInitSources): ProbeTarget[] {\n  const targets: ProbeTarget[] = [];\n  pushTarget(targets, sources.database);\n  pushTarget(targets, sources.storage);\n  pushTarget(targets, sources.captureRunner);\n  pushTarget(targets, sources.captureQueue);\n  pushTarget(targets, sources.auth);\n  for (const provider of sources.gitHosts ?? []) {\n    pushTarget(targets, provider);\n  }\n  return targets;\n}\n\nfunction sanitize(detail: string): string {\n  return detail.length > DETAIL_MAX_LENGTH ? detail.slice(0, DETAIL_MAX_LENGTH) : detail;\n}\n\nfunction messageOf(reason: unknown): string {\n  const message = reason instanceof Error ? reason.message : String(reason);\n  return sanitize(message);\n}\n\nasync function timeoutError(): Promise<never> {\n  await new Promise<void>((resolve) => {\n    setTimeout(resolve, PROBE_TIMEOUT_MS);\n  });\n  throw new Error(\"health probe timed out\");\n}\n\nfunction okReport(\n  target: ProbeTarget,\n  latencyMs: number,\n  detail: string | undefined,\n): AdapterReport {\n  const { category, kind, name } = target.metadata;\n  return {\n    category,\n    kind,\n    name,\n    state: \"ok\",\n    latencyMs,\n    ...(detail === undefined ? {} : { detail }),\n  };\n}\n\nfunction failedReport(target: ProbeTarget, latencyMs: number, detail: string): AdapterReport {\n  const { category, kind, name } = target.metadata;\n  return { category, kind, name, state: \"failed\", latencyMs, detail };\n}\n\nfunction detailOf(result: AdapterHealth, fallback: string): string {\n  return result.detail === undefined ? fallback : sanitize(result.detail);\n}\n\nasync function raceProbe(\n  target: ProbeTarget,\n  probe: () => Promise<AdapterHealth>,\n  started: number,\n): Promise<AdapterReport> {\n  try {\n    const result = await Promise.race([probe(), timeoutError()]);\n    const latencyMs = Date.now() - started;\n    if (!result.ok) {\n      return failedReport(target, latencyMs, detailOf(result, \"probe reported failure\"));\n    }\n    return okReport(\n      target,\n      latencyMs,\n      result.detail === undefined ? undefined : sanitize(result.detail),\n    );\n  } catch (error) {\n    return failedReport(target, Date.now() - started, messageOf(error));\n  }\n}\n\nasync function probeHealth(target: ProbeTarget): Promise<AdapterReport> {\n  const probe = target.lifecycle?.health;\n  if (!probe) {\n    const { category, kind, name } = target.metadata;\n    return { category, kind, name, state: \"ok\" };\n  }\n  return await raceProbe(target, probe, Date.now());\n}\n\nasync function probeTarget(\n  target: ProbeTarget,\n  initErrors: ReadonlyMap<string, string>,\n  starting: boolean,\n): Promise<AdapterReport> {\n  const { category, kind, name } = target.metadata;\n  const initError = initErrors.get(`${category}/${kind}`);\n  if (initError !== undefined) {\n    return { category, kind, name, state: \"failed\", detail: sanitize(initError) };\n  }\n  if (starting) {\n    return { category, kind, name, state: \"starting\" };\n  }\n  return await probeHealth(target);\n}\n\nfunction collectInitErrors(settled: AdapterInitResult | null): ReadonlyMap<string, string> {\n  const initErrors = new Map<string, string>();\n  if (settled) {\n    for (const failure of settled.failures) {\n      initErrors.set(`${failure.category}/${failure.kind}`, failure.error);\n    }\n  }\n  return initErrors;\n}\n\nfunction overallStatus(reports: AdapterReport[]): ReadinessBody[\"status\"] {\n  if (reports.some((report) => report.state === \"failed\")) {\n    return \"degraded\";\n  }\n  if (reports.some((report) => report.state === \"starting\")) {\n    return \"starting\";\n  }\n  return \"ok\";\n}\n\n/** Register `GET /api/v1/health` (open liveness) and `POST` (authed deep readiness). */\nexport function registerHealth(app: ShelfApp, deps: HealthDeps): void {\n  app.get(\"/api/v1/health\", (c) => {\n    const body: LivenessBody = {\n      status: \"ok\",\n      uptimeSecs: Math.floor((Date.now() - deps.bootTimeMs) / 1000),\n      version: deps.version,\n    };\n    c.header(\"Cache-Control\", \"no-store\");\n    return c.json(body);\n  });\n\n  app.post(\"/api/v1/health\", async (c) => {\n    requireSiteAdmin();\n    const settled = deps.getSettled();\n    const initErrors = collectInitErrors(settled);\n    const targets = targetsOf(deps.sources);\n    const reports = await Promise.all(\n      targets.map(async (target) => await probeTarget(target, initErrors, settled === null)),\n    );\n    const body: ReadinessBody = { status: overallStatus(reports), adapters: reports };\n    c.header(\"Cache-Control\", \"no-store\");\n    return c.json(body, body.status === \"ok\" ? 200 : 503);\n  });\n}\n"],"mappings":";;;;;AAiDA,MAAM,mBAAmB;AACzB,MAAM,oBAAoB;AAE1B,SAAS,WAAW,SAAwB,SAAwC;CAClF,IAAI,SACF,QAAQ,KAAK,OAAO;AAExB;AAEA,SAAS,UAAU,SAA4C;CAC7D,MAAM,UAAyB,CAAC;CAChC,WAAW,SAAS,QAAQ,QAAQ;CACpC,WAAW,SAAS,QAAQ,OAAO;CACnC,WAAW,SAAS,QAAQ,aAAa;CACzC,WAAW,SAAS,QAAQ,YAAY;CACxC,WAAW,SAAS,QAAQ,IAAI;CAChC,KAAK,MAAM,YAAY,QAAQ,YAAY,CAAC,GAC1C,WAAW,SAAS,QAAQ;CAE9B,OAAO;AACT;AAEA,SAAS,SAAS,QAAwB;CACxC,OAAO,OAAO,SAAS,oBAAoB,OAAO,MAAM,GAAG,iBAAiB,IAAI;AAClF;AAEA,SAAS,UAAU,QAAyB;CAE1C,OAAO,SADS,kBAAkB,QAAQ,OAAO,UAAU,OAAO,MAAM,CACjD;AACzB;AAEA,eAAe,eAA+B;CAC5C,MAAM,IAAI,SAAe,YAAY;EACnC,WAAW,SAAS,gBAAgB;CACtC,CAAC;CACD,MAAM,IAAI,MAAM,wBAAwB;AAC1C;AAEA,SAAS,SACP,QACA,WACA,QACe;CACf,MAAM,EAAE,UAAU,MAAM,SAAS,OAAO;CACxC,OAAO;EACL;EACA;EACA;EACA,OAAO;EACP;EACA,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;CAC3C;AACF;AAEA,SAAS,aAAa,QAAqB,WAAmB,QAA+B;CAC3F,MAAM,EAAE,UAAU,MAAM,SAAS,OAAO;CACxC,OAAO;EAAE;EAAU;EAAM;EAAM,OAAO;EAAU;EAAW;CAAO;AACpE;AAEA,SAAS,SAAS,QAAuB,UAA0B;CACjE,OAAO,OAAO,WAAW,KAAA,IAAY,WAAW,SAAS,OAAO,MAAM;AACxE;AAEA,eAAe,UACb,QACA,OACA,SACwB;CACxB,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC;EAC3D,MAAM,YAAY,KAAK,IAAI,IAAI;EAC/B,IAAI,CAAC,OAAO,IACV,OAAO,aAAa,QAAQ,WAAW,SAAS,QAAQ,wBAAwB,CAAC;EAEnF,OAAO,SACL,QACA,WACA,OAAO,WAAW,KAAA,IAAY,KAAA,IAAY,SAAS,OAAO,MAAM,CAClE;CACF,SAAS,OAAO;EACd,OAAO,aAAa,QAAQ,KAAK,IAAI,IAAI,SAAS,UAAU,KAAK,CAAC;CACpE;AACF;AAEA,eAAe,YAAY,QAA6C;CACtE,MAAM,QAAQ,OAAO,WAAW;CAChC,IAAI,CAAC,OAAO;EACV,MAAM,EAAE,UAAU,MAAM,SAAS,OAAO;EACxC,OAAO;GAAE;GAAU;GAAM;GAAM,OAAO;EAAK;CAC7C;CACA,OAAO,MAAM,UAAU,QAAQ,OAAO,KAAK,IAAI,CAAC;AAClD;AAEA,eAAe,YACb,QACA,YACA,UACwB;CACxB,MAAM,EAAE,UAAU,MAAM,SAAS,OAAO;CACxC,MAAM,YAAY,WAAW,IAAI,GAAG,SAAS,GAAG,MAAM;CACtD,IAAI,cAAc,KAAA,GAChB,OAAO;EAAE;EAAU;EAAM;EAAM,OAAO;EAAU,QAAQ,SAAS,SAAS;CAAE;CAE9E,IAAI,UACF,OAAO;EAAE;EAAU;EAAM;EAAM,OAAO;CAAW;CAEnD,OAAO,MAAM,YAAY,MAAM;AACjC;AAEA,SAAS,kBAAkB,SAAgE;CACzF,MAAM,6BAAa,IAAI,IAAoB;CAC3C,IAAI,SACF,KAAK,MAAM,WAAW,QAAQ,UAC5B,WAAW,IAAI,GAAG,QAAQ,SAAS,GAAG,QAAQ,QAAQ,QAAQ,KAAK;CAGvE,OAAO;AACT;AAEA,SAAS,cAAc,SAAmD;CACxE,IAAI,QAAQ,MAAM,WAAW,OAAO,UAAU,QAAQ,GACpD,OAAO;CAET,IAAI,QAAQ,MAAM,WAAW,OAAO,UAAU,UAAU,GACtD,OAAO;CAET,OAAO;AACT;;AAGA,SAAgB,eAAe,KAAe,MAAwB;CACpE,IAAI,IAAI,mBAAmB,MAAM;EAC/B,MAAM,OAAqB;GACzB,QAAQ;GACR,YAAY,KAAK,OAAO,KAAK,IAAI,IAAI,KAAK,cAAc,GAAI;GAC5D,SAAS,KAAK;EAChB;EACA,EAAE,OAAO,iBAAiB,UAAU;EACpC,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,KAAK,kBAAkB,OAAO,MAAM;EACtC,iBAAiB;EACjB,MAAM,UAAU,KAAK,WAAW;EAChC,MAAM,aAAa,kBAAkB,OAAO;EAC5C,MAAM,UAAU,UAAU,KAAK,OAAO;EACtC,MAAM,UAAU,MAAM,QAAQ,IAC5B,QAAQ,IAAI,OAAO,WAAW,MAAM,YAAY,QAAQ,YAAY,YAAY,IAAI,CAAC,CACvF;EACA,MAAM,OAAsB;GAAE,QAAQ,cAAc,OAAO;GAAG,UAAU;EAAQ;EAChF,EAAE,OAAO,iBAAiB,UAAU;EACpC,OAAO,EAAE,KAAK,MAAM,KAAK,WAAW,OAAO,MAAM,GAAG;CACtD,CAAC;AACH"}

package/dist/routers/helpers.mjs

@@ -1,82 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { projects } from "../schema/project.mjs";
-import { ProjectModel } from "../models/project.mjs";
-import { sha256 } from "../utils/hash.mjs";
-import { getStore } from "../store.mjs";
-import { MemberModel } from "../models/member.mjs";
-import { TokenModel } from "../models/token.mjs";
-import { eq } from "drizzle-orm";
-import { HTTPException } from "hono/http-exception";
-//#region src/routers/helpers.ts
-/** Throw a 401 Unauthorized error for unauthenticated requests. */
-function unauthorized() {
-	throw new HTTPException(401, { message: "Unauthorized" });
-}
-/** Throw a 403 Forbidden error for requests lacking the required role. */
-function forbidden() {
-	throw new HTTPException(403, { message: "Forbidden" });
-}
-/** Throw a 404 Not Found error with a custom message. */
-function notFound(message = "Not found") {
-	throw new HTTPException(404, { message });
-}
-/** Resolve the current session user's effective role on a project. */
-async function currentProjectRole(projectId) {
-	const { db, user } = getStore();
-	if (!user) return null;
-	return await new MemberModel(db).effectiveRole(user.role, projectId, user.id);
-}
-/** Look up a project by its URL slug, returning null when absent. */
-async function findProjectBySlug(slug) {
-	const { db } = getStore();
-	return (await db.list(projects, {
-		where: eq(projects.slug, slug),
-		limit: 1
-	}))[0] ?? null;
-}
-async function resolveProjectByToken(c, slug) {
-	const authHeader = c.req.header("authorization");
-	if (authHeader?.startsWith("Bearer ")) {
-		const token = authHeader.slice(7);
-		const found = await new TokenModel(getStore().db).findByHash(sha256(token));
-		if (!found) unauthorized();
-		const project = await new ProjectModel(getStore().db).get(found.projectId);
-		if (!project || project.slug !== slug) forbidden();
-		return project;
-	}
-	return null;
-}
-/**
-* Enforce the caller's project role for a given project.
-*
-* Authorization model (ADR 0008):
-* - No auth adapter configured -> all operations permitted (development mode).
-* - Bearer token (CLI) -> grants access to its own project regardless of role.
-* - Session user -> must have an effective role in `minRoles`.
-*/
-async function assertRole(projectId, ...minRoles) {
-	if (!getStore().authEnabled) return;
-	const role = await currentProjectRole(projectId);
-	if (!role || !minRoles.includes(role)) forbidden();
-}
-/** Resolve a project by slug and enforce the caller's minimum role. */
-async function resolveAuthorizedProject(c, slug, ...minRoles) {
-	const project = await resolveProjectByToken(c, slug);
-	if (project) return project;
-	const found = await findProjectBySlug(slug);
-	if (!found) notFound("Project not found");
-	await assertRole(found.id, ...minRoles);
-	return found;
-}
-/** Require a site-level admin (or permit when auth is disabled). */
-function requireSiteAdmin() {
-	if (!getStore().authEnabled) return;
-	const { user } = getStore();
-	if (user?.role !== "admin") forbidden();
-}
-//#endregion
-export { assertRole, currentProjectRole, findProjectBySlug, forbidden, notFound, requireSiteAdmin, resolveAuthorizedProject, unauthorized };
-
-//# sourceMappingURL=helpers.mjs.map

package/dist/routers/helpers.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"helpers.mjs","names":[],"sources":["../../src/routers/helpers.ts"],"sourcesContent":["import { eq } from \"drizzle-orm\";\nimport type { Context, Next } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ContentfulStatusCode } from \"hono/utils/http-status\";\nimport type { ZodType } from \"zod\";\nimport { MemberModel } from \"../models/member.ts\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport { TokenModel } from \"../models/token.ts\";\nimport { projects } from \"../schema/project.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport { getStore } from \"../store.ts\";\nimport type { ProjectRole } from \"../types.ts\";\nimport { sha256 } from \"../utils/hash.ts\";\n\n/** Send a JSON response with the given status code. */\nexport function json(c: Context, data: unknown, status: ContentfulStatusCode = 200): Response {\n  return c.json(data, status);\n}\n\n/** Parse the request body as JSON and validate it against a Zod schema. */\nexport async function validJson<T>(c: Context, schema: ZodType<T>): Promise<T> {\n  const result = schema.safeParse(await c.req.json());\n  if (!result.success) {\n    throw new HTTPException(400, { message: result.error.message });\n  }\n  return result.data;\n}\n\n/** Throw a 401 Unauthorized error for unauthenticated requests. */\nexport function unauthorized(): never {\n  throw new HTTPException(401, { message: \"Unauthorized\" });\n}\n\n/** Throw a 403 Forbidden error for requests lacking the required role. */\nexport function forbidden(): never {\n  throw new HTTPException(403, { message: \"Forbidden\" });\n}\n\n/** Throw a 404 Not Found error with a custom message. */\nexport function notFound(message = \"Not found\"): never {\n  throw new HTTPException(404, { message });\n}\n\n/** Resolve the current session user's effective role on a project. */\nexport async function currentProjectRole(projectId: string): Promise<ProjectRole | null> {\n  const { db, user } = getStore();\n  if (!user) {\n    return null;\n  }\n  return await new MemberModel(db).effectiveRole(user.role, projectId, user.id);\n}\n\n/** Build middleware that requires one of the given project roles. */\nexport function requireRole(...roles: ProjectRole[]) {\n  return async (c: Context, next: Next): Promise<void> => {\n    const projectId = c.req.param(\"projectId\") ?? c.req.param(\"slug\");\n    if (!projectId) {\n      forbidden();\n    }\n    const role = await currentProjectRole(projectId);\n    if (!role || !roles.includes(role)) {\n      forbidden();\n    }\n    await next();\n  };\n}\n\n/** Look up a project by its URL slug, returning null when absent. */\nexport async function findProjectBySlug(slug: string): Promise<Project | null> {\n  const { db } = getStore();\n  const rows = await db.list(projects, { where: eq(projects.slug, slug), limit: 1 });\n  return rows[0] ?? null;\n}\n\nasync function resolveProjectByToken(c: Context, slug: string): Promise<Project | null> {\n  const authHeader = c.req.header(\"authorization\");\n  if (authHeader?.startsWith(\"Bearer \")) {\n    const token = authHeader.slice(\"Bearer \".length);\n    const found = await new TokenModel(getStore().db).findByHash(sha256(token));\n    if (!found) {\n      unauthorized();\n    }\n    const project = await new ProjectModel(getStore().db).get(found.projectId);\n    if (!project || project.slug !== slug) {\n      forbidden();\n    }\n    return project;\n  }\n  return null;\n}\n\n/** Resolve a project by slug, honoring CLI bearer-token access. */\nexport async function resolveProject(c: Context, slug: string): Promise<Project> {\n  const project = await resolveProjectByToken(c, slug);\n  if (project) {\n    return project;\n  }\n  const found = await findProjectBySlug(slug);\n  if (!found) {\n    notFound(\"Project not found\");\n  }\n  return found;\n}\n\n/**\n * Enforce the caller's project role for a given project.\n *\n * Authorization model (ADR 0008):\n * - No auth adapter configured -> all operations permitted (development mode).\n * - Bearer token (CLI) -> grants access to its own project regardless of role.\n * - Session user -> must have an effective role in `minRoles`.\n */\nexport async function assertRole(projectId: string, ...minRoles: ProjectRole[]): Promise<void> {\n  if (!getStore().authEnabled) {\n    return;\n  }\n  const role = await currentProjectRole(projectId);\n  if (!role || !minRoles.includes(role)) {\n    forbidden();\n  }\n}\n\n/** Resolve a project by slug and enforce the caller's minimum role. */\nexport async function resolveAuthorizedProject(\n  c: Context,\n  slug: string,\n  ...minRoles: ProjectRole[]\n): Promise<Project> {\n  const project = await resolveProjectByToken(c, slug);\n  if (project) {\n    return project;\n  }\n  const found = await findProjectBySlug(slug);\n  if (!found) {\n    notFound(\"Project not found\");\n  }\n  await assertRole(found.id, ...minRoles);\n  return found;\n}\n\n/** Require a site-level admin (or permit when auth is disabled). */\nexport function requireSiteAdmin(): void {\n  if (!getStore().authEnabled) {\n    return;\n  }\n  const { user } = getStore();\n  if (user?.role !== \"admin\") {\n    forbidden();\n  }\n}\n\n/** Require the current session user to hold one of the given project roles. */\nexport async function requireProjectRole(\n  projectId: string,\n  ...minRoles: ProjectRole[]\n): Promise<void> {\n  await assertRole(projectId, ...minRoles);\n}\n"],"mappings":";;;;;;;;;;;;;AA6BA,SAAgB,eAAsB;CACpC,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,eAAe,CAAC;AAC1D;;AAGA,SAAgB,YAAmB;CACjC,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,YAAY,CAAC;AACvD;;AAGA,SAAgB,SAAS,UAAU,aAAoB;CACrD,MAAM,IAAI,cAAc,KAAK,EAAE,QAAQ,CAAC;AAC1C;;AAGA,eAAsB,mBAAmB,WAAgD;CACvF,MAAM,EAAE,IAAI,SAAS,SAAS;CAC9B,IAAI,CAAC,MACH,OAAO;CAET,OAAO,MAAM,IAAI,YAAY,EAAE,CAAC,CAAC,cAAc,KAAK,MAAM,WAAW,KAAK,EAAE;AAC9E;;AAkBA,eAAsB,kBAAkB,MAAuC;CAC7E,MAAM,EAAE,OAAO,SAAS;CAExB,QAAO,MADY,GAAG,KAAK,UAAU;EAAE,OAAO,GAAG,SAAS,MAAM,IAAI;EAAG,OAAO;CAAE,CAAC,EAAA,CACrE,MAAM;AACpB;AAEA,eAAe,sBAAsB,GAAY,MAAuC;CACtF,MAAM,aAAa,EAAE,IAAI,OAAO,eAAe;CAC/C,IAAI,YAAY,WAAW,SAAS,GAAG;EACrC,MAAM,QAAQ,WAAW,MAAM,CAAgB;EAC/C,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,OAAO,KAAK,CAAC;EAC1E,IAAI,CAAC,OACH,aAAa;EAEf,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;EACzE,IAAI,CAAC,WAAW,QAAQ,SAAS,MAC/B,UAAU;EAEZ,OAAO;CACT;CACA,OAAO;AACT;;;;;;;;;AAuBA,eAAsB,WAAW,WAAmB,GAAG,UAAwC;CAC7F,IAAI,CAAC,SAAS,CAAC,CAAC,aACd;CAEF,MAAM,OAAO,MAAM,mBAAmB,SAAS;CAC/C,IAAI,CAAC,QAAQ,CAAC,SAAS,SAAS,IAAI,GAClC,UAAU;AAEd;;AAGA,eAAsB,yBACpB,GACA,MACA,GAAG,UACe;CAClB,MAAM,UAAU,MAAM,sBAAsB,GAAG,IAAI;CACnD,IAAI,SACF,OAAO;CAET,MAAM,QAAQ,MAAM,kBAAkB,IAAI;CAC1C,IAAI,CAAC,OACH,SAAS,mBAAmB;CAE9B,MAAM,WAAW,MAAM,IAAI,GAAG,QAAQ;CACtC,OAAO;AACT;;AAGA,SAAgB,mBAAyB;CACvC,IAAI,CAAC,SAAS,CAAC,CAAC,aACd;CAEF,MAAM,EAAE,SAAS,SAAS;CAC1B,IAAI,MAAM,SAAS,SACjB,UAAU;AAEd"}

package/dist/routers/htmx.mjs

@@ -1,20 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-//#region src/routers/htmx.ts
-/** Check whether the request came from HTMX (HX-Request header). */
-function isHxRequest(c) {
-	return c.req.header("HX-Request") === "true";
-}
-/** Redirect HTMX requests via HX-Redirect and plain requests via 302. */
-function hxRedirect(c, url) {
-	if (isHxRequest(c)) {
-		c.header("HX-Redirect", url);
-		return c.body(null, 204);
-	}
-	return c.redirect(url, 302);
-}
-//#endregion
-export { hxRedirect, isHxRequest };
-
-//# sourceMappingURL=htmx.mjs.map

package/dist/routers/htmx.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"htmx.mjs","names":[],"sources":["../../src/routers/htmx.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\n/** Check whether the request came from HTMX (HX-Request header). */\nexport function isHxRequest(c: Context): boolean {\n  return c.req.header(\"HX-Request\") === \"true\";\n}\n\n/** Redirect HTMX requests via HX-Redirect and plain requests via 302. */\nexport function hxRedirect(c: Context, url: string): Response {\n  if (isHxRequest(c)) {\n    c.header(\"HX-Redirect\", url);\n    return c.body(null, 204);\n  }\n  return c.redirect(url, 302);\n}\n"],"mappings":";;;;;AAGA,SAAgB,YAAY,GAAqB;CAC/C,OAAO,EAAE,IAAI,OAAO,YAAY,MAAM;AACxC;;AAGA,SAAgB,WAAW,GAAY,KAAuB;CAC5D,IAAI,YAAY,CAAC,GAAG;EAClB,EAAE,OAAO,eAAe,GAAG;EAC3B,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB;CACA,OAAO,EAAE,SAAS,KAAK,GAAG;AAC5B"}