@supersuit/artifacts 0.58.1 → 0.59.0

package/CHANGELOG.md

@@ -3,6 +3,51 @@
 `@supersuit/artifacts`. One entry per version, newest first. Each entry says what changed, how a
 host can tell whether it is affected (DETECTOR), what a host does about it (REMEDY), and the tests.
 
+## 0.59.0 (2026-11-02)
+
+**The deployable hub host ships in the package** (supersuit-dev#1630). `template/hub/` is a complete
+Next.js app for one operator's own artifact hub on Firebase App Hosting: every shell route as a
+one-line file, Google sign-in on the hub's own domain (the same-origin `/__/auth` rewrite and
+`/api/artifact-pass`), `/brand.json`, `/api/health` with the tile app door's version, the door
+itself at `/frapp`, the 410 proxy for shut per-reader links, `apphosting.yaml` with every setting the
+hub setup writes, and the comments feed's Firestore index. It is configured only by `HUB_TENANT`
+and the variables in its README, so it needs nothing from any private repository. Until now the
+only deployable host was private, and an operator's hub setup stopped at its first step with no
+source they could reach (supersuit-dev#1606). `npm version` pins the template to the package's own
+version (`scripts/sync-template-version.mjs`).
+
+- DETECTOR: `ls node_modules/@supersuit/artifacts/template/hub` is empty or missing.
+- REMEDY: update. Supersuit's hub setup uses this host when `--hub-source` is not given.
+- Tests: `test/hub-template.test.mjs`; `npm run test:template` (`scripts/check-template.mjs`)
+  installs the template from the packed tarball outside the repo and runs `next build`, and the
+  publish workflow runs it before publishing.
+
+## 0.58.2 (2026-11-02)
+
+**A letter's greeting and sign-off keep their own lines.** Markdown joins a soft line break with a
+space, so a letter ending "Your friend in Christ," then the name on a plain newline drew as one
+line. `remarkLetterBreaks` (in `ArtifactMarkdown`'s plugin list) turns a paragraph that opens on a
+short line (40 characters or fewer) ending in a comma into real breaks after each short line in it.
+Hard-wrapped prose still joins.
+
+- DETECTOR: a page whose sign-off reads "Love, Gary" on one line.
+- REMEDY: update; nothing to change in the page.
+- Tests: `src/artifacts/letter-breaks.test.tsx`.
+
+**A host that cannot sign in to its own database says so, instead of a bare 500.** When a host's
+cloud credential is refused (a workload identity provider trusting another Vercel team's OIDC
+issuer, or a revoked service account key), every Firestore call threw and every route answered an
+empty 500. Publishers saw "500, no message", and the Supersuit comments client guessed "a missing
+index" (2026-10-28, after a hub's Vercel project moved teams). Every route handler in
+`createArtifactRoutes` now answers that one cause with `503 { error: "backend-auth", message }`. The
+cause itself is logged on the server and kept out of the body. Any other error is unchanged.
+
+- DETECTOR: the server log shows `invalid_grant`, `Getting metadata from plugin failed`,
+  `UNAUTHENTICATED` or `Could not load the default credentials`; clients now get a typed 503.
+- REMEDY: fix the host's credential. For Vercel workload identity, point the provider's issuer at
+  `https://oidc.vercel.com/<team>` and its audience at `https://vercel.com/<team>`.
+- Tests: `src/routes/backend-auth.test.tsx`.
+
 ## 0.58.1 (2026-10-27)
 
 **The no-link door on a per-reader page offers sign-in.** A signed-in owner or hub admin already got

package/README.md

@@ -15,6 +15,17 @@ npm install @supersuit/artifacts
 Peers: `next >= 16`, `react >= 19`, `react-dom >= 19`, `firebase-admin >= 13` (the store is
 Firestore), and optionally `@google-cloud/storage >= 7` for uploaded files.
 
+## A deployable hub host, in the package
+
+`template/hub/` is a complete Next.js app that serves one operator's pages from a Google Cloud
+project they own (Firebase App Hosting, Firestore, Cloud Storage, Google sign-in on their own
+domain), configured entirely by environment variables. It ships in the tarball so anyone can
+deploy a hub without access to any private repository. Supersuit's `create-or-update-my-artifact-hub`
+copies it out of the package, runs `npm install` and deploys it; its own
+[README](./template/hub/README.md) lists every variable. The template pins this package's own
+version (`npm version` keeps it in step), and `npm run test:template` packs the package, installs
+the template from the tarball outside this repo and runs `next build` on it.
+
 ## What you get
 
 | Export | What it is |

package/lib/artifacts/letter-breaks.d.ts

@@ -0,0 +1,2 @@
+import type { Root } from 'mdast';
+export declare function remarkLetterBreaks(): (tree: Root) => void;

package/lib/artifacts/letter-breaks.js

@@ -0,0 +1,68 @@
+const SHORT = 40;
+const isParent = (n) => !!n && Array.isArray(n.children);
+/** The paragraph's text as the writer typed it, soft breaks included. */
+function plain(nodes) {
+    return nodes.map((n) => {
+        const x = n;
+        if (x.type === 'text' || x.type === 'inlineCode')
+            return x.value ?? '';
+        if (x.type === 'break')
+            return '\n';
+        return x.children ? plain(x.children) : '';
+    }).join('');
+}
+function breakLetter(p) {
+    const lines = plain(p.children).split('\n');
+    if (lines.length < 2)
+        return;
+    const short = (l) => l.trim().length <= SHORT;
+    if (!short(lines[0]) || !/,$/.test(lines[0].trim()))
+        return;
+    let line = 0;
+    const walk = (parent) => {
+        const out = [];
+        for (const child of parent.children) {
+            const c = child;
+            if (c.type === 'text') {
+                const parts = c.value.split('\n');
+                parts.forEach((part, k) => {
+                    if (k > 0) {
+                        const keep = short(lines[line]);
+                        line++;
+                        if (keep) {
+                            out.push({ type: 'break' });
+                            part = part.replace(/^\s+/, '');
+                        }
+                        else
+                            part = ' ' + part.replace(/^\s+/, '');
+                    }
+                    if (part)
+                        out.push({ type: 'text', value: part });
+                });
+                continue;
+            }
+            if (c.type === 'break')
+                line++;
+            else if (isParent(c))
+                walk(c);
+            out.push(c);
+        }
+        parent.children = out;
+    };
+    walk(p);
+}
+export function remarkLetterBreaks() {
+    return (tree) => {
+        const visit = (n) => {
+            if (!isParent(n))
+                return;
+            for (const c of n.children) {
+                if (c.type === 'paragraph')
+                    breakLetter(c);
+                else
+                    visit(c);
+            }
+        };
+        visit(tree);
+    };
+}

package/lib/artifacts/render.js

@@ -23,6 +23,7 @@ import { VideoAutoplay } from '../reader/video-autoplay.js';
 import { CodeCopy } from '../reader/code-copy.js';
 import { DefinitionLayer } from '../reader/definition-layer.js';
 import { remarkDefinitions } from './definitions.js';
+import { remarkLetterBreaks } from './letter-breaks.js';
 import { AUDIO_SRC, remarkVoiceNotes, TRANSCRIPT_LANG } from './voice-note.js';
 import { VoiceNote } from '../widgets/voice-note.js';
 // Every colour is a theme variable (brand/theme.ts), so a page follows its light, dark or system mode.
@@ -371,7 +372,7 @@ export function ArtifactMarkdown({ markdown, notes, checklist, definitions, Sect
     // Voice notes first, so a section groups the note node the pair became.
     const voiceNotes = [];
     const voiced = /^ {0,3}(`{3,}|~{3,})\s*transcript\b/m.test(markdown);
-    const plugins = [remarkGfm, ...(voiced ? [remarkVoiceNotes(voiceNotes)] : []), ...(defined ? [remarkDefinitions(defined)] : []), ...(outline.length ? [remarkSections(outline[0].depth)] : [])];
+    const plugins = [remarkGfm, remarkLetterBreaks, ...(voiced ? [remarkVoiceNotes(voiceNotes)] : []), ...(defined ? [remarkDefinitions(defined)] : []), ...(outline.length ? [remarkSections(outline[0].depth)] : [])];
     const lists = /^ {0,3}(`{3,}|~{3,})\s*checklist\b/m.test(markdown) ? checklistsOf(markdown) : null;
     const checklists = lists
         // `send` from the host means it keeps answers and the page declared the `checklist` slot; on a

package/lib/routes/artifacts.js

@@ -40,6 +40,7 @@ import { PageAnalytics } from '../reader/page-analytics.js';
 import { analyticsPlan } from '../reader/analytics-plan.js';
 import { createPersonalRoutes } from './personal-routes.js';
 import { createVoiceRoutes } from './voice-routes.js';
+import { guardRouteTable } from './backend-auth.js';
 /** Ids are 8 chars from the safe alphabet; anything else is not a page and never reaches the store. */
 export const ARTIFACT_ID = ARTIFACT_ID_RE;
 /** A version number as it appears in a URL: no zero, no leading zero, so each version has one address. */
@@ -1124,5 +1125,5 @@ export function createArtifactRoutes(config) {
             + `<p data-per-reader-shut style="max-width:36rem;padding:0 1.5rem;text-align:center;font-size:1.125rem;opacity:.8">${UNAVAILABLE}</p></body></html>`;
         return new Response(html, { status: 410, headers: { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store', 'x-robots-tag': 'noindex, nofollow' } });
     }
-    return { Page, generateMetadata, VersionPage, generateVersionMetadata, VERSIONS, POST, GET, DELETE, LIST, shutPageResponse, PUT_ASSET, UPLOAD, SHARE_IMAGE, ENTER, LEAVE, TRACK, ACK, ACCESS, SETTINGS, READS, sweepReaders, TRANSCRIBE: voiceRoutes.TRANSCRIBE, ...stateRoutes, ...personalRoutes, ...recipientsRoutes, dynamic: 'force-dynamic', maxDuration: 30 };
+    return guardRouteTable({ Page, generateMetadata, VersionPage, generateVersionMetadata, VERSIONS, POST, GET, DELETE, LIST, shutPageResponse, PUT_ASSET, UPLOAD, SHARE_IMAGE, ENTER, LEAVE, TRACK, ACK, ACCESS, SETTINGS, READS, sweepReaders, TRANSCRIBE: voiceRoutes.TRANSCRIBE, ...stateRoutes, ...personalRoutes, ...recipientsRoutes, dynamic: 'force-dynamic', maxDuration: 30 });
 }

package/lib/routes/backend-auth.d.ts

@@ -0,0 +1,9 @@
+import { NextResponse } from 'next/server';
+/** True when an error is the host failing to authenticate to its own backend. */
+export declare function isBackendAuthError(e: unknown): boolean;
+export declare const BACKEND_AUTH_MESSAGE = "This host could not sign in to its database, so nothing was read or saved. Its owner should check the host's cloud credentials (the workload identity provider's issuer and audience, or the service account key).";
+export declare function backendAuthResponse(): NextResponse;
+/** Wrap a route handler so a backend credential failure answers the typed 503. */
+export declare function guardBackendAuth<A extends unknown[], R>(handler: (...args: A) => R | Promise<R>): (...args: A) => Promise<R | NextResponse>;
+/** Every route handler in a route table (its UPPER_CASE functions) gets the guard. */
+export declare function guardRouteTable<T extends Record<string, unknown>>(table: T): T;

package/lib/routes/backend-auth.js

@@ -0,0 +1,42 @@
+// A host whose cloud credential is refused (a workload identity provider trusting another
+// issuer, a revoked or missing service account key) fails every Firestore call. Unhandled, each
+// route then answers a bare 500 that a publisher reads as "something broke" and a client hint
+// can only guess at (on 2026-10-28 it guessed "a missing index"). This turns that one cause into
+// a typed 503 the publisher can name, and leaves every other error exactly as it was.
+import { NextResponse } from 'next/server';
+const AUTH_MESSAGE = /invalid_grant|Getting metadata from plugin failed|Could not load the default credentials|UNAUTHENTICATED|Request had invalid authentication credentials/i;
+/** True when an error is the host failing to authenticate to its own backend. */
+export function isBackendAuthError(e) {
+    if (!(e instanceof Error))
+        return false;
+    if (e.code === 16)
+        return true; // gRPC UNAUTHENTICATED
+    return AUTH_MESSAGE.test(e.message);
+}
+export const BACKEND_AUTH_MESSAGE = "This host could not sign in to its database, so nothing was read or saved. Its owner should check the host's cloud credentials (the workload identity provider's issuer and audience, or the service account key).";
+export function backendAuthResponse() {
+    return NextResponse.json({ error: 'backend-auth', message: BACKEND_AUTH_MESSAGE }, { status: 503, headers: { 'cache-control': 'no-store' } });
+}
+/** Wrap a route handler so a backend credential failure answers the typed 503. */
+export function guardBackendAuth(handler) {
+    return async (...args) => {
+        try {
+            return await handler(...args);
+        }
+        catch (e) {
+            if (!isBackendAuthError(e))
+                throw e;
+            console.error('[artifacts] backend credential refused:', e);
+            return backendAuthResponse();
+        }
+    };
+}
+/** Every route handler in a route table (its UPPER_CASE functions) gets the guard. */
+export function guardRouteTable(table) {
+    const out = { ...table };
+    for (const [k, v] of Object.entries(table)) {
+        if (typeof v === 'function' && /^[A-Z][A-Z0-9_]*$/.test(k))
+            out[k] = guardBackendAuth(v);
+    }
+    return out;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supersuit/artifacts",
-  "version": "0.58.1",
+  "version": "0.59.0",
   "description": "Publish markdown as branded, read-aloud pages from a Next.js app: the artifacts store, the route factory, the read-along reader, brand packs, password and confidential pages, and share cards.",
   "license": "MIT",
   "type": "module",
@@ -54,6 +54,7 @@
   "files": [
     "lib",
     "fonts",
+    "template",
     "README.md",
     "CHANGELOG.md",
     "LICENSE"
@@ -64,7 +65,9 @@
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run",
     "test:packed": "node scripts/check-packed.mjs",
-    "prepack": "npm run build"
+    "prepack": "npm run build",
+    "test:template": "node scripts/check-template.mjs",
+    "version": "node scripts/sync-template-version.mjs"
   },
   "peerDependencies": {
     "@google-cloud/storage": ">=7",

package/template/hub/README.md

@@ -0,0 +1,35 @@
+# The artifact hub host
+
+A deployable Next.js app that serves one operator's published pages on their own domain, from a
+Google Cloud project they own. It is the `@supersuit/artifacts` shell wired to Firestore, Cloud
+Storage and Firebase sign-in, and nothing else. It ships inside the `@supersuit/artifacts` npm
+package at `template/hub/`.
+
+**You do not deploy this by hand.** Supersuit's `create-or-update-my-artifact-hub` skill copies this
+folder out of the installed package, runs `npm install`, and deploys it to Firebase App Hosting with
+the settings it writes for that hub. It reads `apphosting.yaml` for the shape of the settings.
+
+## What configures it
+
+Everything comes from the environment. `apphosting.yaml` lists every variable; the setup writes the
+real values into an `apphosting.hub.yaml` override at deploy time.
+
+| Variable | What it is |
+| --- | --- |
+| `HUB_TENANT` | JSON: `{ host, owner, firebase: { apiKey, appId, authDomain, projectId }, pack? }`. `authDomain` must equal `host`. `pack` is the hub's own colors, type and mark. |
+| `FIREBASE_STORAGE_BUCKET` | The project's default bucket: public page media. |
+| `ARTIFACT_PRIVATE_BUCKET` | A bucket with no public grant, for `media: private`. Unset, private media is refused. |
+| `TENANT_PUBLISH_KEY_HUB` | The publish key (a Secret Manager secret). |
+| `ARTIFACT_PASS_SECRET` | Signs the five-minute reader pass (a secret). |
+| `ARTIFACT_RECIPIENT_SECRET` | Signs per-reader links (a secret). |
+| `TENANT_OWNER_EMAIL_HUB` | The address the owner signs in with. Optional. |
+| `TENANT_ADMINS_HUB` | Comma-separated admin sign-in addresses. Optional. |
+
+With `HUB_TENANT` unset the app still builds, and every page says the hub is not configured yet.
+
+## What it serves
+
+Pages at `/<id>`, past versions at `/<id>/v/<n>`, share cards at `/<id>/share.png`, the publish and
+reader APIs under `/api/`, reader sign-in at `/artifact/sign-in` (Google, against the hub's own
+Firebase project, same-origin through the `/__/auth` rewrite), `/brand.json`, `/api/health`, and the
+tile app door at `/frapp`.

package/template/hub/app/[id]/not-found.tsx

@@ -0,0 +1,8 @@
+export default function ArtifactNotFound() {
+  return (
+    <div className="mx-auto max-w-2xl px-6 pt-32 text-center">
+      <h1 className="text-3xl">Nothing here</h1>
+      <p className="mt-4 opacity-70">This page was unpublished or the link is off by a character.</p>
+    </div>
+  )
+}

package/template/hub/app/[id]/page.tsx

@@ -0,0 +1,15 @@
+// Published pages: /<id>. Thin file; the behaviour is the shell's, the wiring is src/lib/routes.ts.
+import type { Metadata } from 'next'
+import { hubRoutes } from '@/lib/routes'
+
+export const dynamic = 'force-dynamic'
+
+type Props = { params: Promise<{ id: string }>; searchParams?: Promise<{ key?: string | string[] }> }
+
+export function generateMetadata(props: Props): Promise<Metadata> {
+  return hubRoutes().generateMetadata(props)
+}
+
+export default function ArtifactPage(props: Props) {
+  return hubRoutes().Page(props)
+}

package/template/hub/app/[id]/share.png/route.tsx

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().SHARE_IMAGE(request, ctx)
+}

package/template/hub/app/[id]/v/[n]/page.tsx

@@ -0,0 +1,15 @@
+// One past version of a page: /<id>/v/<n>, read-only, behind the page's own door.
+import type { Metadata } from 'next'
+import { hubRoutes } from '@/lib/routes'
+
+export const dynamic = 'force-dynamic'
+
+type Props = { params: Promise<{ id: string; n: string }>; searchParams?: Promise<{ key?: string | string[] }> }
+
+export function generateMetadata(props: Props): Promise<Metadata> {
+  return hubRoutes().generateVersionMetadata(props)
+}
+
+export default function ArtifactVersionPage(props: Props) {
+  return hubRoutes().VersionPage(props)
+}

package/template/hub/app/api/artifact-pass/route.ts

@@ -0,0 +1,24 @@
+import type { NextRequest } from 'next/server'
+import { getAdminAuth } from '@/lib/firebase-admin'
+import { localPass } from '@/lib/local-sign-in'
+import { hubTenant } from '@/tenant'
+
+export const dynamic = 'force-dynamic'
+export const runtime = 'nodejs'
+
+// The pass for a reader who signed in on this host (app/artifact/sign-in).
+export async function GET(request: NextRequest) {
+  const r = await localPass({
+    tenant: hubTenant(),
+    to: request.nextUrl.searchParams.get('to'),
+    authorization: request.headers.get('authorization'),
+    verify: async (t) => {
+      const d = await getAdminAuth().verifyIdToken(t)
+      return { uid: d.uid, email: d.email, emailVerified: d.email_verified === true, name: typeof d.name === 'string' ? d.name : undefined }
+    },
+    secret: process.env.ARTIFACT_PASS_SECRET,
+  })
+  return r.ok
+    ? Response.json({ url: r.url }, { headers: { 'cache-control': 'no-store' } })
+    : Response.json({ error: r.error }, { status: r.status, headers: { 'cache-control': 'no-store' } })
+}

package/template/hub/app/api/artifacts/[id]/access/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().ACCESS(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().ACCESS(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/assets/[name]/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string; name: string }> }
+
+export const maxDuration = 60
+
+export function PUT(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().PUT_ASSET(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/forward/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().FORWARD(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/personal/route.ts

@@ -0,0 +1,18 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().PERSONAL_GET(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().PERSONAL_POST(request, ctx)
+}
+
+export function DELETE(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().PERSONAL_DELETE(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/reads/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().READS(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/recipients/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().RECIPIENTS(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().RECIPIENTS(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/reply/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().REPLY(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/resolve/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().RESOLVE(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/responses/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().RESPONSES(request, ctx)
+}
+
+export function DELETE(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().RESPONSES(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/route.ts

@@ -0,0 +1,12 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().GET(request, ctx)
+}
+
+export function DELETE(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().DELETE(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/seen/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().SEEN(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/settings/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().SETTINGS(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().SETTINGS(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/state/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().STATE_GET(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().STATE_POST(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/transcribe/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().TRANSCRIBE(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/uploads/[name]/route.ts

@@ -0,0 +1,11 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string; name: string }> }
+
+// Big files (narration) skip the function: this signs a URL the publisher PUTs to directly.
+export const maxDuration = 30
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().UPLOAD(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/versions/route.ts

@@ -0,0 +1,14 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().VERSIONS(request, ctx)
+}
+
+export function POST(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().VERSIONS(request, ctx)
+}

package/template/hub/app/api/artifacts/[id]/views/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+type Ctx = { params: Promise<{ id: string }> }
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest, ctx: Ctx) {
+  return hubRoutes().VIEWS(request, ctx)
+}

package/template/hub/app/api/artifacts/route.ts

@@ -0,0 +1,13 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+export const dynamic = 'force-dynamic'
+export const maxDuration = 30
+
+export function POST(request: NextRequest) {
+  return hubRoutes().POST(request)
+}
+
+export function GET(request: NextRequest) {
+  return hubRoutes().LIST(request)
+}

package/template/hub/app/api/comments/route.ts

@@ -0,0 +1,8 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+
+export const dynamic = 'force-dynamic'
+
+export function GET(request: NextRequest) {
+  return hubRoutes().COMMENTS_FEED(request)
+}

package/template/hub/app/api/health/route.ts

@@ -0,0 +1,10 @@
+import type { NextRequest } from 'next/server'
+import { hubRoutes } from '@/lib/routes'
+import { healthOf } from '@/lib/health'
+
+export const dynamic = 'force-dynamic'
+
+// Whether this hub's queries will be served, the comments feed's Firestore index first. No key.
+export function GET(request: NextRequest) {
+  return healthOf(hubRoutes(), request)
+}