@storyshelf/core 0.3.2 → 0.5.4

package/dist/routers/snapshots.mjs

@@ -1,144 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { SnapshotModel } from "../models/snapshot.mjs";
-import { getStore } from "../store.mjs";
-import { resolveAuthorizedProject } from "./helpers.mjs";
-import { notFound, okSchema, snapshotSchema, unauthorized } from "./schemas.mjs";
-import { APPROVER_ROLES, VIEW_ROLES, approveSnapshot, buildForProject, refreshBuild, snapshotForBuild } from "./builds.handlers.mjs";
-import { createRoute, z } from "@hono/zod-openapi";
-//#region src/routers/snapshots.ts
-const listSnapshotsRoute = createRoute({
-	method: "get",
-	path: "/api/v1/projects/{slug}/builds/{buildId}/snapshots",
-	request: { params: z.object({
-		slug: z.string(),
-		buildId: z.string()
-	}) },
-	responses: {
-		200: {
-			content: { "application/json": { schema: snapshotSchema.array() } },
-			description: "List snapshots for a build"
-		},
-		...notFound,
-		...unauthorized
-	}
-});
-const approveSnapshotRoute = createRoute({
-	method: "post",
-	path: "/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/approve",
-	request: { params: z.object({
-		slug: z.string(),
-		buildId: z.string(),
-		snapshotId: z.string()
-	}) },
-	responses: {
-		200: {
-			content: { "application/json": { schema: okSchema } },
-			description: "Snapshot approved"
-		},
-		...notFound
-	}
-});
-const rejectSnapshotRoute = createRoute({
-	method: "post",
-	path: "/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/reject",
-	request: { params: z.object({
-		slug: z.string(),
-		buildId: z.string(),
-		snapshotId: z.string()
-	}) },
-	responses: {
-		200: {
-			content: { "application/json": { schema: okSchema } },
-			description: "Snapshot rejected"
-		},
-		...notFound
-	}
-});
-const approveAllRoute = createRoute({
-	method: "post",
-	path: "/api/v1/projects/{slug}/builds/{buildId}/approve-all",
-	request: { params: z.object({
-		slug: z.string(),
-		buildId: z.string()
-	}) },
-	responses: {
-		200: {
-			content: { "application/json": { schema: okSchema } },
-			description: "All snapshots approved"
-		},
-		...notFound
-	}
-});
-const rejectAllRoute = createRoute({
-	method: "post",
-	path: "/api/v1/projects/{slug}/builds/{buildId}/reject-all",
-	request: { params: z.object({
-		slug: z.string(),
-		buildId: z.string()
-	}) },
-	responses: {
-		200: {
-			content: { "application/json": { schema: okSchema } },
-			description: "All snapshots rejected"
-		},
-		...notFound
-	}
-});
-/** Register the snapshot list, approve, reject, and bulk-review endpoints. */
-function registerSnapshots(app) {
-	app.openapi(listSnapshotsRoute, async (c) => {
-		const { slug, buildId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		const snapshots = new SnapshotModel(getStore().db).listByBuild(build.id);
-		return c.json(await snapshots);
-	});
-	app.openapi(approveSnapshotRoute, async (c) => {
-		const { slug, buildId, snapshotId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		await snapshotForBuild(build, snapshotId);
-		const userId = getStore().user?.id ?? "anonymous";
-		await approveSnapshot(snapshotId, userId);
-		return c.json({ ok: true });
-	});
-	app.openapi(rejectSnapshotRoute, async (c) => {
-		const { slug, buildId, snapshotId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		const snapshot = await snapshotForBuild(build, snapshotId);
-		const userId = getStore().user?.id ?? "anonymous";
-		await new SnapshotModel(getStore().db).review(snapshot.id, "rejected", userId);
-		await refreshBuild(build.id);
-		return c.json({ ok: true });
-	});
-	app.openapi(approveAllRoute, async (c) => {
-		const { slug, buildId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);
-		const userId = getStore().user?.id ?? "anonymous";
-		await Promise.all(snapshots.filter((snapshot) => snapshot.status === "new" || snapshot.status === "changed").map(async (snapshot) => {
-			await approveSnapshot(snapshot.id, userId);
-		}));
-		return c.json({ ok: true });
-	});
-	app.openapi(rejectAllRoute, async (c) => {
-		const { slug, buildId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
-		const build = await buildForProject(project.id, buildId);
-		const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);
-		const userId = getStore().user?.id ?? "anonymous";
-		await Promise.all(snapshots.filter((snapshot) => snapshot.status === "new" || snapshot.status === "changed").map(async (snapshot) => {
-			await new SnapshotModel(getStore().db).review(snapshot.id, "rejected", userId);
-		}));
-		await refreshBuild(build.id);
-		return c.json({ ok: true });
-	});
-}
-//#endregion
-export { registerSnapshots };
-
-//# sourceMappingURL=snapshots.mjs.map

package/dist/routers/snapshots.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"snapshots.mjs","names":[],"sources":["../../src/routers/snapshots.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { SnapshotModel } from \"../models/snapshot.ts\";\nimport { getStore } from \"../store.ts\";\nimport {\n  VIEW_ROLES,\n  APPROVER_ROLES,\n  snapshotForBuild,\n  refreshBuild,\n  approveSnapshot,\n  buildForProject,\n} from \"./builds.handlers.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { snapshotSchema, okSchema, notFound, unauthorized } from \"./schemas.ts\";\n\nconst listSnapshotsRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: snapshotSchema.array() } },\n      description: \"List snapshots for a build\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst approveSnapshotRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/approve\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot approved\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectSnapshotRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/reject\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot rejected\",\n    },\n    ...notFound,\n  },\n});\n\nconst approveAllRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/approve-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"All snapshots approved\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectAllRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/reject-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"All snapshots rejected\",\n    },\n    ...notFound,\n  },\n});\n\n/** Register the snapshot list, approve, reject, and bulk-review endpoints. */\nexport function registerSnapshots(app: ShelfApp): void {\n  app.openapi(listSnapshotsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = new SnapshotModel(getStore().db).listByBuild(build.id);\n    return c.json(await snapshots);\n  });\n\n  app.openapi(approveSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await approveSnapshot(snapshotId, userId);\n    return c.json({ ok: true });\n  });\n\n  app.openapi(rejectSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshot = await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n    await refreshBuild(build.id);\n    return c.json({ ok: true });\n  });\n\n  app.openapi(approveAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await approveSnapshot(snapshot.id, userId);\n        }),\n    );\n    return c.json({ ok: true });\n  });\n\n  app.openapi(rejectAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? \"anonymous\";\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n        }),\n    );\n    await refreshBuild(build.id);\n    return c.json({ ok: true });\n  });\n}\n"],"mappings":";;;;;;;;;;AAeA,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,eAAe,MAAM,EAAE,EAAE;GAClE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,uBAAuB,YAAY;CACvC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,kBAAkB,KAAqB;CACrD,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EACvE,OAAO,EAAE,KAAK,MAAM,SAAS;CAC/B,CAAC;CAED,IAAI,QAAQ,sBAAsB,OAAO,MAAM;EAC7C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,iBAAiB,OAAO,UAAU;EACxC,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,gBAAgB,YAAY,MAAM;EACxC,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,MAAM,iBAAiB,OAAO,UAAU;EACzD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC7E,MAAM,aAAa,MAAM,EAAE;EAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,gBAAgB,SAAS,IAAI,MAAM;EAC3C,CAAC,CACL;EACA,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC/E,CAAC,CACL;EACA,MAAM,aAAa,MAAM,EAAE;EAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;AACH"}

package/dist/routers/status-configs.mjs

@@ -1,101 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { StatusConfigModel } from "../models/status-config.mjs";
-import { getStore } from "../store.mjs";
-import { resolveAuthorizedProject } from "./helpers.mjs";
-import { notFound, statusConfigCreateSchema, statusConfigSchema, unauthorized } from "./schemas.mjs";
-import { createRoute, z } from "@hono/zod-openapi";
-//#region src/routers/status-configs.ts
-const ADMIN_ROLES = ["admin"];
-const listRoute = createRoute({
-	method: "get",
-	path: "/api/v1/projects/{slug}/status-configs",
-	request: { params: z.object({ slug: z.string() }) },
-	responses: {
-		200: {
-			content: { "application/json": { schema: statusConfigSchema.array() } },
-			description: "List status configs"
-		},
-		...notFound,
-		...unauthorized
-	}
-});
-const createRouteDef = createRoute({
-	method: "post",
-	path: "/api/v1/projects/{slug}/status-configs",
-	request: {
-		params: z.object({ slug: z.string() }),
-		body: { content: { "application/json": { schema: statusConfigCreateSchema } } }
-	},
-	responses: {
-		201: {
-			content: { "application/json": { schema: statusConfigSchema } },
-			description: "Created status config"
-		},
-		400: {
-			content: { "application/json": { schema: z.object({ message: z.string() }) } },
-			description: "Bad request"
-		},
-		...notFound
-	}
-});
-const deleteRoute = createRoute({
-	method: "delete",
-	path: "/api/v1/projects/{slug}/status-configs/{id}",
-	request: { params: z.object({
-		slug: z.string(),
-		id: z.string()
-	}) },
-	responses: {
-		204: { description: "Deleted status config" },
-		...notFound
-	}
-});
-function toPublic(row) {
-	return {
-		id: row.id,
-		projectId: row.projectId,
-		provider: row.provider,
-		config: JSON.parse(row.config),
-		hasToken: true,
-		createdAt: row.createdAt,
-		updatedAt: row.updatedAt
-	};
-}
-/** Register the git status-config list, create, and delete endpoints. */
-function registerStatusConfigs(app) {
-	app.openapi(listRoute, async (c) => {
-		const { slug } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, "admin");
-		const rows = await new StatusConfigModel(getStore().db, getStore().config.secret).list(project.id);
-		return c.json(rows.map((row) => toPublic(row)));
-	});
-	app.openapi(createRouteDef, async (c) => {
-		const { slug } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
-		const body = c.req.valid("json");
-		const provider = getStore().gitHosts.find((p) => p.metadata.kind === body.provider);
-		if (!provider) return c.json({ message: `Unknown provider: ${body.provider}` }, 400);
-		const parsed = provider.metadata.schema.safeParse(body.config);
-		if (!parsed.success) return c.json({ message: parsed.error.message }, 400);
-		const row = await new StatusConfigModel(getStore().db, getStore().config.secret).create(project.id, {
-			provider: body.provider,
-			config: parsed.data,
-			token: body.token
-		});
-		return c.json(toPublic(row), 201);
-	});
-	app.openapi(deleteRoute, async (c) => {
-		const { slug, id } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
-		const model = new StatusConfigModel(getStore().db, getStore().config.secret);
-		if (!await model.get(project.id, id)) return c.json({ message: "Status config not found" }, 404);
-		await model.remove(project.id, id);
-		return c.body(null, 204);
-	});
-}
-//#endregion
-export { registerStatusConfigs };
-
-//# sourceMappingURL=status-configs.mjs.map

package/dist/routers/status-configs.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"status-configs.mjs","names":[],"sources":["../../src/routers/status-configs.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { StatusConfigModel } from \"../models/status-config.ts\";\nimport type { ProjectStatusConfig } from \"../schema/status-config.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { notFound, statusConfigCreateSchema, statusConfigSchema, unauthorized } from \"./schemas.ts\";\n\nconst ADMIN_ROLES = [\"admin\"] as const;\n\nconst listRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/status-configs\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: statusConfigSchema.array() } },\n      description: \"List status configs\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createRouteDef = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/status-configs\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: statusConfigCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: statusConfigSchema } },\n      description: \"Created status config\",\n    },\n    400: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"Bad request\",\n    },\n    ...notFound,\n  },\n});\n\nconst deleteRoute = createRoute({\n  method: \"delete\",\n  path: \"/api/v1/projects/{slug}/status-configs/{id}\",\n  request: { params: z.object({ slug: z.string(), id: z.string() }) },\n  responses: {\n    204: { description: \"Deleted status config\" },\n    ...notFound,\n  },\n});\n\nfunction toPublic(row: ProjectStatusConfig): {\n  id: string;\n  projectId: string;\n  provider: string;\n  config: Record<string, unknown>;\n  hasToken: boolean;\n  createdAt: string;\n  updatedAt: string;\n} {\n  return {\n    id: row.id,\n    projectId: row.projectId,\n    provider: row.provider,\n    config: JSON.parse(row.config) as Record<string, unknown>,\n    hasToken: true,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\n/** Register the git status-config list, create, and delete endpoints. */\nexport function registerStatusConfigs(app: ShelfApp): void {\n  app.openapi(listRoute, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, \"admin\");\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const rows = await model.list(project.id);\n    return c.json(rows.map((row) => toPublic(row)));\n  });\n\n  app.openapi(createRouteDef, async (c) => {\n    const { slug } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const providers = getStore().gitHosts;\n    const provider = providers.find((p) => p.metadata.kind === body.provider);\n    if (!provider) {\n      return c.json({ message: `Unknown provider: ${body.provider}` }, 400);\n    }\n    const parsed = provider.metadata.schema.safeParse(body.config);\n    if (!parsed.success) {\n      return c.json({ message: parsed.error.message }, 400);\n    }\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const row = await model.create(project.id, {\n      provider: body.provider,\n      config: parsed.data,\n      token: body.token,\n    });\n    return c.json(toPublic(row), 201);\n  });\n\n  app.openapi(deleteRoute, async (c) => {\n    const { slug, id } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const model = new StatusConfigModel(getStore().db, getStore().config.secret);\n    const existing = await model.get(project.id, id);\n    if (!existing) {\n      return c.json({ message: \"Status config not found\" }, 404);\n    }\n    await model.remove(project.id, id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;AAQA,MAAM,cAAc,CAAC,OAAO;AAE5B,MAAM,YAAY,YAAY;CAC5B,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE;GACtE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,yBAAyB,EAAE,EAAE;CAChF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,cAAc,YAAY;CAC9B,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,IAAI,EAAE,OAAO;CAAE,CAAC,EAAE;CAClE,WAAW;EACT,KAAK,EAAE,aAAa,wBAAwB;EAC5C,GAAG;CACL;AACF,CAAC;AAED,SAAS,SAAS,KAQhB;CACA,OAAO;EACL,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,QAAQ,KAAK,MAAM,IAAI,MAAM;EAC7B,UAAU;EACV,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;;AAGA,SAAgB,sBAAsB,KAAqB;CACzD,IAAI,QAAQ,WAAW,OAAO,MAAM;EAClC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,OAAO;EAE/D,MAAM,OAAO,MAAM,IADD,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAC9C,CAAC,CAAC,KAAK,QAAQ,EAAE;EACxC,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,SAAS,GAAG,CAAC,CAAC;CAChD,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,SAAS,EAAE,IAAI,MAAM,OAAO;EACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAE/B,MAAM,WADY,SAAS,CAAC,CAAC,SACF,MAAM,MAAM,EAAE,SAAS,SAAS,KAAK,QAAQ;EACxE,IAAI,CAAC,UACH,OAAO,EAAE,KAAK,EAAE,SAAS,qBAAqB,KAAK,WAAW,GAAG,GAAG;EAEtE,MAAM,SAAS,SAAS,SAAS,OAAO,UAAU,KAAK,MAAM;EAC7D,IAAI,CAAC,OAAO,SACV,OAAO,EAAE,KAAK,EAAE,SAAS,OAAO,MAAM,QAAQ,GAAG,GAAG;EAGtD,MAAM,MAAM,MAAM,IADA,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAC/C,CAAC,CAAC,OAAO,QAAQ,IAAI;GACzC,UAAU,KAAK;GACf,QAAQ,OAAO;GACf,OAAO,KAAK;EACd,CAAC;EACD,OAAO,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG;CAClC,CAAC;CAED,IAAI,QAAQ,aAAa,OAAO,MAAM;EACpC,MAAM,EAAE,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,IAAI,kBAAkB,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,MAAM;EAE3E,IAAI,CAAC,MADkB,MAAM,IAAI,QAAQ,IAAI,EAAE,GAE7C,OAAO,EAAE,KAAK,EAAE,SAAS,0BAA0B,GAAG,GAAG;EAE3D,MAAM,MAAM,OAAO,QAAQ,IAAI,EAAE;EACjC,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/storybook.mjs

@@ -1,120 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { BuildModel, isPublicBuild } from "../models/build.mjs";
-import { ProjectModel } from "../models/project.mjs";
-import { storybookDir } from "../paths.mjs";
-import { getStore } from "../store.mjs";
-import { LabelModel } from "../models/label.mjs";
-import { currentProjectRole, notFound } from "./helpers.mjs";
-import { renderStorybookPage, renderStorybookPreparingPage } from "../pages/storybook.mjs";
-import { posix } from "node:path";
-//#region src/routers/storybook.ts
-const VIEW_ROLES = /* @__PURE__ */ new Set([
-	"viewer",
-	"developer",
-	"approver",
-	"admin"
-]);
-const MIME = {
-	".html": "text/html; charset=utf-8",
-	".htm": "text/html; charset=utf-8",
-	".js": "application/javascript",
-	".mjs": "application/javascript",
-	".json": "application/json",
-	".css": "text/css; charset=utf-8",
-	".png": "image/png",
-	".jpg": "image/jpeg",
-	".jpeg": "image/jpeg",
-	".gif": "image/gif",
-	".svg": "image/svg+xml",
-	".webp": "image/webp",
-	".ico": "image/x-icon",
-	".woff": "font/woff",
-	".woff2": "font/woff2",
-	".ttf": "font/ttf",
-	".map": "application/json",
-	".wasm": "application/wasm"
-};
-function contentTypeFor(path) {
-	const ext = posix.extname(path).toLowerCase();
-	return MIME[ext] ?? "application/octet-stream";
-}
-function isSafeSegment(segment) {
-	return segment !== ".." && !segment.startsWith("/") && !segment.includes("\\") && !segment.includes("..");
-}
-/**
-* Decide whether the current request may view `build`'s published Storybook.
-*
-* Public builds (ADR 0011) are viewable without auth; every other build requires
-* a logged-in session with at least `viewer` membership on the project.
-*/
-async function canViewBuild(build, project) {
-	if (isPublicBuild(project, build)) return true;
-	const { authEnabled } = getStore();
-	if (!authEnabled) return true;
-	const role = await currentProjectRole(project.id);
-	return Boolean(role && VIEW_ROLES.has(role));
-}
-/** Check whether a build's extracted statics are available for serving. */
-async function staticsReady(projectId, buildId) {
-	return await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), "iframe.html"));
-}
-/** Register the published Storybook resolver and static-asset routes. */
-function registerStorybook(app) {
-	app.get("/projects/:slug/storybook", async (c) => {
-		const slug = c.req.param("slug");
-		const project = await new ProjectModel(getStore().db).getBySlug(slug);
-		if (!project) notFound("Project not found");
-		const build = await new BuildModel(getStore().db).latestPublished(project);
-		if (!build) notFound("No published Storybook for this project");
-		if (!await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
-		return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);
-	});
-	app.get("/projects/:slug/storybook/:key/:value", async (c) => {
-		const slug = c.req.param("slug");
-		const key = c.req.param("key");
-		if (key === "build") return c.notFound();
-		const value = c.req.param("value");
-		const project = await new ProjectModel(getStore().db).getBySlug(slug);
-		if (!project) notFound("Project not found");
-		const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);
-		if (!buildId) notFound("No build carries that label");
-		const build = await new BuildModel(getStore().db).get(buildId);
-		if (!build || !await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
-		return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);
-	});
-	app.get("/projects/:slug/storybook/build/:buildId/*", async (c) => {
-		const slug = c.req.param("slug");
-		const buildId = c.req.param("buildId");
-		const base = `/projects/${slug}/storybook/build/${buildId}/`;
-		if (!c.req.path.startsWith(base)) return c.notFound();
-		let rest;
-		try {
-			rest = decodeURIComponent(c.req.path.slice(base.length));
-		} catch {
-			return c.notFound();
-		}
-		const project = await new ProjectModel(getStore().db).getBySlug(slug);
-		if (!project) notFound("Project not found");
-		const build = await new BuildModel(getStore().db).get(buildId);
-		if (!build || build.projectId !== project.id) notFound("Build not found");
-		if (!await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
-		if (rest === "") {
-			if (!await staticsReady(project.id, build.id)) return c.html(renderStorybookPreparingPage(project, build, slug), 200);
-			return c.html(renderStorybookPage(project, build, slug), 200);
-		}
-		if (rest.split("/").some((segment) => !isSafeSegment(segment))) return c.notFound();
-		const path = posix.join(storybookDir(project.id, build.id), rest);
-		if (!await getStore().storage.exists(path)) return c.notFound();
-		const buffer = await getStore().storage.read(path);
-		return c.body(new Uint8Array(buffer), 200, {
-			"content-type": contentTypeFor(rest),
-			"cache-control": "public, max-age=3600"
-		});
-	});
-}
-//#endregion
-export { registerStorybook };
-
-//# sourceMappingURL=storybook.mjs.map

package/dist/routers/storybook.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/routers/storybook.ts"],"sourcesContent":["import { posix } from \"node:path\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { isPublicBuild, BuildModel } from \"../models/build.ts\";\nimport { LabelModel } from \"../models/label.ts\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport { renderStorybookPage, renderStorybookPreparingPage } from \"../pages/storybook.tsx\";\nimport type { Build } from \"../schema/build.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport { getStore } from \"../store.ts\";\nimport { storybookDir } from \"../utils/paths.ts\";\nimport { currentProjectRole, notFound } from \"./helpers.ts\";\n\nconst VIEW_ROLES: ReadonlySet<string> = new Set([\"viewer\", \"developer\", \"approver\", \"admin\"]);\n\nconst MIME: Record<string, string> = {\n  \".html\": \"text/html; charset=utf-8\",\n  \".htm\": \"text/html; charset=utf-8\",\n  \".js\": \"application/javascript\",\n  \".mjs\": \"application/javascript\",\n  \".json\": \"application/json\",\n  \".css\": \"text/css; charset=utf-8\",\n  \".png\": \"image/png\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".gif\": \"image/gif\",\n  \".svg\": \"image/svg+xml\",\n  \".webp\": \"image/webp\",\n  \".ico\": \"image/x-icon\",\n  \".woff\": \"font/woff\",\n  \".woff2\": \"font/woff2\",\n  \".ttf\": \"font/ttf\",\n  \".map\": \"application/json\",\n  \".wasm\": \"application/wasm\",\n};\n\nfunction contentTypeFor(path: string): string {\n  const ext = posix.extname(path).toLowerCase();\n  return MIME[ext] ?? \"application/octet-stream\";\n}\n\nfunction isSafeSegment(segment: string): boolean {\n  return (\n    segment !== \"..\" &&\n    !segment.startsWith(\"/\") &&\n    !segment.includes(\"\\\\\") &&\n    !segment.includes(\"..\")\n  );\n}\n\n/**\n * Decide whether the current request may view `build`'s published Storybook.\n *\n * Public builds (ADR 0011) are viewable without auth; every other build requires\n * a logged-in session with at least `viewer` membership on the project.\n */\nasync function canViewBuild(\n  build: Pick<Build, \"public\" | \"gitBranch\">,\n  project: Project,\n): Promise<boolean> {\n  if (isPublicBuild(project, build)) {\n    return true;\n  }\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const role = await currentProjectRole(project.id);\n  return Boolean(role && VIEW_ROLES.has(role));\n}\n\n/** Check whether a build's extracted statics are available for serving. */\nasync function staticsReady(projectId: string, buildId: string): Promise<boolean> {\n  return await getStore().storage.exists(\n    posix.join(storybookDir(projectId, buildId), \"iframe.html\"),\n  );\n}\n\n/** Register the published Storybook resolver and static-asset routes. */\nexport function registerStorybook(app: ShelfApp): void {\n  // Resolver: latest published build on the default branch.\n  app.get(\"/projects/:slug/storybook\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).latestPublished(project);\n    if (!build) {\n      notFound(\"No published Storybook for this project\");\n    }\n    if (!(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);\n  });\n\n  // Resolver: latest build bearing a label (`build` is a reserved label key).\n  app.get(\"/projects/:slug/storybook/:key/:value\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    if (key === \"build\") {\n      return c.notFound();\n    }\n    const value = c.req.param(\"value\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);\n    if (!buildId) {\n      notFound(\"No build carries that label\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || !(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);\n  });\n\n  // Canonical build route: serves the static Storybook and the landing page.\n  app.get(\"/projects/:slug/storybook/build/:buildId/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // remainder from the raw request path (un-encoded) and decode it ourselves.\n    const base = `/projects/${slug}/storybook/build/${buildId}/`;\n    if (!c.req.path.startsWith(base)) {\n      return c.notFound();\n    }\n    let rest: string;\n    try {\n      rest = decodeURIComponent(c.req.path.slice(base.length));\n    } catch {\n      return c.notFound();\n    }\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      notFound(\"Build not found\");\n    }\n    if (!(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n\n    if (rest === \"\") {\n      if (!(await staticsReady(project.id, build.id))) {\n        return c.html(renderStorybookPreparingPage(project, build, slug), 200);\n      }\n      return c.html(renderStorybookPage(project, build, slug), 200);\n    }\n\n    const segments = rest.split(\"/\");\n    if (segments.some((segment) => !isSafeSegment(segment))) {\n      return c.notFound();\n    }\n    const path = posix.join(storybookDir(project.id, build.id), rest);\n    if (!(await getStore().storage.exists(path))) {\n      return c.notFound();\n    }\n    const buffer = await getStore().storage.read(path);\n    return c.body(new Uint8Array(buffer), 200, {\n      \"content-type\": contentTypeFor(rest),\n      \"cache-control\": \"public, max-age=3600\",\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;AAYA,MAAM,6BAAkC,IAAI,IAAI;CAAC;CAAU;CAAa;CAAY;AAAO,CAAC;AAE5F,MAAM,OAA+B;CACnC,SAAS;CACT,QAAQ;CACR,OAAO;CACP,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,SAAS;CACT,UAAU;CACV,QAAQ;CACR,QAAQ;CACR,SAAS;AACX;AAEA,SAAS,eAAe,MAAsB;CAC5C,MAAM,MAAM,MAAM,QAAQ,IAAI,CAAC,CAAC,YAAY;CAC5C,OAAO,KAAK,QAAQ;AACtB;AAEA,SAAS,cAAc,SAA0B;CAC/C,OACE,YAAY,QACZ,CAAC,QAAQ,WAAW,GAAG,KACvB,CAAC,QAAQ,SAAS,IAAI,KACtB,CAAC,QAAQ,SAAS,IAAI;AAE1B;;;;;;;AAQA,eAAe,aACb,OACA,SACkB;CAClB,IAAI,cAAc,SAAS,KAAK,GAC9B,OAAO;CAET,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,OAAO,MAAM,mBAAmB,QAAQ,EAAE;CAChD,OAAO,QAAQ,QAAQ,WAAW,IAAI,IAAI,CAAC;AAC7C;;AAGA,eAAe,aAAa,WAAmB,SAAmC;CAChF,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,OAC9B,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,aAAa,CAC5D;AACF;;AAGA,SAAgB,kBAAkB,KAAqB;CAErD,IAAI,IAAI,6BAA6B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,yCAAyC;EAEpD,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GACrC,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,MAAM,GAAG,IAAI,GAAG;CACzE,CAAC;CAGD,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC5D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAC7B,IAAI,QAAQ,SACV,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO;EACjC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,QAAQ,IAAI,KAAK,KAAK;EACxF,IAAI,CAAC,SACH,SAAS,6BAA6B;EAExC,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,CAAE,MAAM,aAAa,OAAO,OAAO,GAC/C,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,QAAQ,IAAI,GAAG;CACxE,CAAC;CAGD,IAAI,IAAI,8CAA8C,OAAO,MAAM;EACjE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EAGrC,MAAM,OAAO,aAAa,KAAK,mBAAmB,QAAQ;EAC1D,IAAI,CAAC,EAAE,IAAI,KAAK,WAAW,IAAI,GAC7B,OAAO,EAAE,SAAS;EAEpB,IAAI;EACJ,IAAI;GACF,OAAO,mBAAmB,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC;EACzD,QAAQ;GACN,OAAO,EAAE,SAAS;EACpB;EACA,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,SAAS,iBAAiB;EAE5B,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GACrC,OAAO,EAAE,SAAS,eAAe,GAAG;EAGtC,IAAI,SAAS,IAAI;GACf,IAAI,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC3C,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,IAAI,GAAG,GAAG;GAEvE,OAAO,EAAE,KAAK,oBAAoB,SAAS,OAAO,IAAI,GAAG,GAAG;EAC9D;EAGA,IADiB,KAAK,MAAM,GACjB,CAAC,CAAC,MAAM,YAAY,CAAC,cAAc,OAAO,CAAC,GACpD,OAAO,EAAE,SAAS;EAEpB,MAAM,OAAO,MAAM,KAAK,aAAa,QAAQ,IAAI,MAAM,EAAE,GAAG,IAAI;EAChE,IAAI,CAAE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,IAAI,GACxC,OAAO,EAAE,SAAS;EAEpB,MAAM,SAAS,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,IAAI;EACjD,OAAO,EAAE,KAAK,IAAI,WAAW,MAAM,GAAG,KAAK;GACzC,gBAAgB,eAAe,IAAI;GACnC,iBAAiB;EACnB,CAAC;CACH,CAAC;AACH"}

package/dist/routers/tokens.mjs

@@ -1,81 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { randomToken } from "../utils/hash.mjs";
-import { getStore } from "../store.mjs";
-import { TokenModel } from "../models/token.mjs";
-import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
-import { notFound as notFound$1, tokenCreateSchema, tokenCreatedSchema, tokenPublicSchema, unauthorized } from "./schemas.mjs";
-import { createRoute, z } from "@hono/zod-openapi";
-//#region src/routers/tokens.ts
-const ADMIN_ROLES = ["admin"];
-const listTokensRoute = createRoute({
-	method: "get",
-	path: "/api/v1/projects/{slug}/tokens",
-	request: { params: z.object({ slug: z.string() }) },
-	responses: {
-		200: {
-			content: { "application/json": { schema: tokenPublicSchema.array() } },
-			description: "List API tokens"
-		},
-		...notFound$1,
-		...unauthorized
-	}
-});
-const createTokenRoute = createRoute({
-	method: "post",
-	path: "/api/v1/projects/{slug}/tokens",
-	request: {
-		params: z.object({ slug: z.string() }),
-		body: { content: { "application/json": { schema: tokenCreateSchema } } }
-	},
-	responses: {
-		201: {
-			content: { "application/json": { schema: tokenCreatedSchema } },
-			description: "Created token"
-		},
-		...notFound$1
-	}
-});
-const deleteTokenRoute = createRoute({
-	method: "delete",
-	path: "/api/v1/projects/{slug}/tokens/{tokenId}",
-	request: { params: z.object({
-		slug: z.string(),
-		tokenId: z.string()
-	}) },
-	responses: {
-		204: { description: "Deleted token" },
-		...notFound$1
-	}
-});
-/** Register the project API token list, create, and revoke endpoints. */
-function registerTokens(app) {
-	app.openapi(listTokensRoute, async (c) => {
-		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
-		const tokens = await new TokenModel(getStore().db).list(project.id);
-		return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));
-	});
-	app.openapi(createTokenRoute, async (c) => {
-		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
-		const body = c.req.valid("json");
-		const token = randomToken("shelf_");
-		await new TokenModel(getStore().db).create(project.id, body.name, token.hash);
-		return c.json({
-			...body,
-			token: token.value
-		}, 201);
-	});
-	app.openapi(deleteTokenRoute, async (c) => {
-		const { slug, tokenId } = c.req.valid("param");
-		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
-		const found = await new TokenModel(getStore().db).get(project.id, tokenId);
-		if (!found) notFound("Token not found");
-		await new TokenModel(getStore().db).remove(found.id);
-		return c.body(null, 204);
-	});
-}
-//#endregion
-export { registerTokens };
-
-//# sourceMappingURL=tokens.mjs.map

package/dist/routers/tokens.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokens.mjs","names":["notFoundResponse"],"sources":["../../src/routers/tokens.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { TokenModel } from \"../models/token.ts\";\nimport { getStore } from \"../store.ts\";\nimport type { ProjectRole } from \"../types.ts\";\nimport { randomToken } from \"../utils/hash.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  tokenCreatedSchema,\n  tokenCreateSchema,\n  tokenPublicSchema,\n  unauthorized,\n} from \"./schemas.ts\";\n\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listTokensRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: tokenPublicSchema.array() } },\n      description: \"List API tokens\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createTokenRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: tokenCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: tokenCreatedSchema } },\n      description: \"Created token\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteTokenRoute = createRoute({\n  method: \"delete\",\n  path: \"/api/v1/projects/{slug}/tokens/{tokenId}\",\n  request: { params: z.object({ slug: z.string(), tokenId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted token\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project API token list, create, and revoke endpoints. */\nexport function registerTokens(app: ShelfApp): void {\n  app.openapi(listTokensRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const tokens = await new TokenModel(getStore().db).list(project.id);\n    return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));\n  });\n\n  app.openapi(createTokenRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const token = randomToken(\"shelf_\");\n    await new TokenModel(getStore().db).create(project.id, body.name, token.hash);\n    return c.json({ ...body, token: token.value }, 201);\n  });\n\n  app.openapi(deleteTokenRoute, async (c) => {\n    const { slug, tokenId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const found = await new TokenModel(getStore().db).get(project.id, tokenId);\n    if (!found) {\n      notFound(\"Token not found\");\n    }\n    await new TokenModel(getStore().db).remove(found.id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAeA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,MAAM,EAAE,EAAE;GACrE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CACzE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,eAAe,KAAqB;CAClD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,SAAS,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;EAClE,OAAO,EAAE,KAAK,OAAO,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC;CAC9D,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,YAAY,QAAQ;EAClC,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,KAAK,MAAM,MAAM,IAAI;EAC5E,OAAO,EAAE,KAAK;GAAE,GAAG;GAAM,OAAO,MAAM;EAAM,GAAG,GAAG;CACpD,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}