[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_228":-5,"_231":232,"_233":234},"routes/shell",{"_40":41,"_227":-5,"_228":-5,"_229":230},"routes/repo",{"_33":-7,"_34":35,"_36":37,"_38":39,"_40":41,"_42":31,"_43":31,"_44":31,"_45":31,"_46":31,"_47":31,"_48":49,"_50":49,"_51":31,"_52":-7,"_53":-7,"_54":55,"_56":57,"_58":59,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68},"routes/repo.blob",{"_13":14,"_15":16,"_17":18,"_19":20,"_21":14,"_22":23,"_24":-5,"_25":26,"_27":28,"_28":29,"_30":31,"_32":14},"ref","1906e8f485d00a4e2d8fcbd68cb63b2c85c483b6","path","apps/server/src/channels/routes.test.ts","oid","5434048730dd0cf0b8f9f0ccdbda3b39d20d3b48","size",30284,"commit","mounts",[],"source","plain",{"_13":14,"_15":16},"kind","text","import { describe, expect, it } from \"bun:test\";\n\nimport { Sessions } from \"../auth/session\";\nimport { Admission } from \"../auth/admission\";\nimport { Router } from \"../http/router\";\nimport { MemoryStorage } from \"../storage/memory/adapter\";\nimport { registerChannelRoutes } from \"./routes\";\n\nimport type { HostedAuth } from \"../auth/routes\";\nimport type {\n\tGitHub,\n\tGitHubTokenGrant,\n\tGitHubUser,\n\tInstallationPage,\n\tRepository,\n\tRepositoryPage,\n} from \"../github/client\";\n\nclass FakeGitHub implements GitHub {\n\taffiliated = true;\n\trepo: Repository = {\n\t\tid: \"R_score\",\n\t\towner: \"octo-org\",\n\t\townerAvatarUrl: \"https://avatars.test/octo-org.png\",\n\t\tname: \"score\",\n\t\tfullName: \"octo-org/score\",\n\t\tprivate: true,\n\t\turl: \"https://github.test/octo-org/score\",\n\t\tdefaultBranch: \"main\",\n\t\tpermissions: { pull: true, push: true, admin: false },\n\t};\n\n\tauthorize(): string {\n\t\treturn \"https://github.test/authorize\";\n\t}\n\n\tasync exchange(): Promise {\n\t\treturn grant(\"ghu_user\");\n\t}\n\n\tasync refresh(): Promise {\n\t\treturn grant(\"ghu_refreshed\");\n\t}\n\n\tasync user(): Promise {\n\t\treturn { id: \"U_octocat\", login: \"octocat\", avatarUrl: \"avatar\" };\n\t}\n\n\tasync organizationMembership() {\n\t\treturn undefined;\n\t}\n\n\tasync installations(): Promise {\n\t\treturn { installations: [], nextPage: undefined };\n\t}\n\n\tasync installationRepositories(): Promise {\n\t\treturn { repositories: [this.repo], nextPage: undefined };\n\t}\n\n\tasync repository(_token: string, owner: string, name: string): Promise {\n\t\treturn { ...this.repo, owner, name, fullName: `${owner}/${name}` };\n\t}\n\n\tasync repositoryAccess(\n\t\ttoken: string,\n\t\towner: string,\n\t\tname: string,\n\t): Promise {\n\t\treturn this.affiliated ? this.repository(token, owner, name) : undefined;\n\t}\n\n\tinvalidate(): void {}\n}\n\nfunction grant(accessToken: string): GitHubTokenGrant {\n\treturn {\n\t\taccessToken,\n\t\taccessExpiresIn: 28_800,\n\t\trefreshToken: \"ghr_user\",\n\t\trefreshExpiresIn: 15_897_600,\n\t};\n}\n\nfunction pair(cookie: string): string {\n\treturn cookie.split(\";\", 1)[0]!;\n}\n\nasync function setup(random?: () => number) {\n\tlet now = new Date(\"2026-08-13T12:00:00.000Z\");\n\tlet storage = new MemoryStorage();\n\tawait storage.users.put({ id: \"U_octocat\", login: \"octocat\", avatarUrl: \"avatar\", now });\n\tlet sessions = new Sessions(storage, true, () => now);\n\tlet issued = await sessions.issue(\"U_octocat\", grant(\"ghu_user\"));\n\tlet github = new FakeGitHub();\n\tlet config = {\n\t\torigin: \"https://chopin.test\",\n\t\tappSlug: \"chopin-test\",\n\t\tclientId: \"client-id\",\n\t\tclientSecret: \"client-secret\",\n\t\tencryptionKey: new Uint8Array(32).fill(4),\n\t};\n\tlet auth: HostedAuth = {\n\t\tconfig,\n\t\tstorage,\n\t\tgithub,\n\t\tadmission: new Admission(config, github, () => now.getTime()),\n\t\tsessions,\n\t\tclock: () => now,\n\t};\n\tlet router = new Router();\n\tlet reset: string[] = [];\n\tlet renamed: string[] = [];\n\tlet archived: Array<{ id: string; changed: boolean }> = [];\n\tlet restored: Array<{ id: string; changed: boolean }> = [];\n\tlet deleted: string[] = [];\n\tregisterChannelRoutes(router, auth, {\n\t\tonAgentReset: async id => {\n\t\t\treset.push(id);\n\t\t},\n\t\tonChannelArchived: async (id, at) => {\n\t\t\tlet result = await storage.channels.archive({ id, now: at });\n\t\t\tarchived.push({ id, changed: result.changed });\n\t\t\treturn result;\n\t\t},\n\t\tonChannelDeleted: async id => {\n\t\t\tdeleted.push(id);\n\t\t\treturn storage.channels.delete(id);\n\t\t},\n\t\tonChannelRenamed: channel => {\n\t\t\trenamed.push(channel.title);\n\t\t},\n\t\tonChannelRestored: async (id, at) => {\n\t\t\tlet result = await storage.channels.restore({ id, now: at });\n\t\t\trestored.push({ id, changed: result.changed });\n\t\t\treturn result;\n\t\t},\n\t\trandom,\n\t});\n\treturn {\n\t\trouter,\n\t\tstorage,\n\t\tgithub,\n\t\tcookie: pair(issued.cookie),\n\t\tsessionId: issued.id,\n\t\treset,\n\t\trenamed,\n\t\tarchived,\n\t\trestored,\n\t\tdeleted,\n\t\tnow,\n\t};\n}\n\nfunction request(path: string, cookie?: string, init: RequestInit = {}): Request {\n\tlet headers = new Headers(init.headers);\n\tif (cookie) headers.set(\"cookie\", cookie);\n\treturn new Request(`https://chopin.test${path}`, { ...init, headers });\n}\n\nfunction createChannel(storage: MemoryStorage, now: Date, title: string) {\n\treturn storage.channels.create({\n\t\tid: crypto.randomUUID(),\n\t\trepositoryId: \"R_score\",\n\t\trepositoryOwner: \"octo-org\",\n\t\trepositoryName: \"score\",\n\t\ttitle,\n\t\tcreatedBy: \"U_octocat\",\n\t\tnow,\n\t});\n}\n\ndescribe(\"channel routes\", () => {\n\tit(\"requires authentication and current repository access\", async () => {\n\t\tlet { router, github, cookie } = await setup();\n\t\tlet anonymous = await router.handle(request(\"/api/repositories/octo-org/score/channels\"));\n\t\texpect(anonymous!.status).toBe(401);\n\n\t\tgithub.repo = { ...github.repo, permissions: { pull: false, push: false, admin: false } };\n\t\tlet denied = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(denied!.status).toBe(403);\n\n\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: false, admin: false } };\n\t\tgithub.affiliated = false;\n\t\tlet outsider = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(outsider!.status).toBe(404);\n\t});\n\n\tit(\"lets an editor create, list and open a canonical repository channel\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet created = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t\t{\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { \"content-type\": \"application/json\", origin: \"https://chopin.test\" },\n\t\t\t\tbody: JSON.stringify({ title: \" Release readiness \" }),\n\t\t\t},\n\t\t));\n\t\texpect(created!.status).toBe(201);\n\t\tlet body = await created!.json();\n\t\texpect(body.channel.title).toBe(\"Release readiness\");\n\t\texpect(body.channel.slug).toBe(\"release-readiness\");\n\t\texpect(body.channel.id[14]).toBe(\"5\");\n\t\texpect(body.channel.repositoryId).toBe(\"R_score\");\n\t\texpect(body.channel.createdBy).toBe(\"U_octocat\");\n\t\texpect(created!.headers.get(\"location\"))\n\t\t\t.toBe(\"/documents/octo-org/score/release-readiness\");\n\t\texpect(await storage.channels.get(body.channel.id)).toMatchObject({\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t});\n\n\t\tlet listed = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?limit=1\",\n\t\t\tcookie,\n\t\t));\n\t\texpect((await listed!.json()).channels).toHaveLength(1);\n\t\tlet detail = await router.handle(request(`/api/channels/${body.channel.id}`, cookie));\n\t\texpect(detail!.status).toBe(200);\n\t\texpect((await detail!.json()).canEdit).toBe(true);\n\t\texpect((await storage.collaboration.load(body.channel.id, now))?.channel.id).toBe(\n\t\t\tbody.channel.id,\n\t\t);\n\t});\n\n\tit(\"exposes child parents without accepting them on top-level creation\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet parent = await createChannel(storage, now, \"Research parent\");\n\t\tlet child = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Research child\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tparentChannelId: parent.id,\n\t\t\tnow,\n\t\t});\n\n\t\tlet detail = await router.handle(request(`/api/channels/${child.id}`, cookie));\n\t\texpect(detail!.status).toBe(200);\n\t\texpect((await detail!.json()).channel.parentChannelId).toBe(parent.id);\n\n\t\tlet listed = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t));\n\t\tlet page = await listed!.json();\n\t\texpect(page.channels.find((channel: { id: string }) => channel.id === child.id))\n\t\t\t.toMatchObject({ parentChannelId: parent.id });\n\n\t\tlet forged = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t\t{\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { \"content-type\": \"application/json\", origin: \"https://chopin.test\" },\n\t\t\t\tbody: JSON.stringify({\n\t\t\t\t\ttitle: \"Forged nested child\",\n\t\t\t\t\tparentChannelId: child.id,\n\t\t\t\t}),\n\t\t\t},\n\t\t));\n\t\texpect(forged!.status).toBe(201);\n\t\tlet forgedChannel = (await forged!.json()).channel;\n\t\texpect(forgedChannel.parentChannelId).toBeUndefined();\n\t\texpect((await storage.channels.get(forgedChannel.id))?.parentChannelId).toBeUndefined();\n\t});\n\n\tit(\"resolves canonical and historical document paths within the authorized repository\", async () => {\n\t\tlet { router, storage, github, cookie, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Release plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tawait storage.channels.rename({\n\t\t\tid: channel.id,\n\t\t\ttitle: \"Résumé 計画\",\n\t\t\tnow: new Date(now.getTime() + 1),\n\t\t});\n\n\t\tlet canonical = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/documents/r%C3%A9sum%C3%A9-%E8%A8%88%E7%94%BB\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(canonical!.status).toBe(200);\n\t\texpect((await canonical!.json()).channel).toMatchObject({\n\t\t\tid: channel.id,\n\t\t\ttitle: \"Résumé 計画\",\n\t\t\tslug: \"résumé-計画\",\n\t\t});\n\n\t\tlet alias = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/documents/Release--Plan\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(alias!.status).toBe(200);\n\t\texpect((await alias!.json()).channel.slug).toBe(\"résumé-計画\");\n\t\texpect(await storage.navigation.projects(\"U_octocat\")).toEqual([]);\n\t\texpect(await storage.navigation.get(\"U_octocat\")).toBeUndefined();\n\t\tlet remembered = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Remembered document\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tawait storage.navigation.setLastDocument(\"U_octocat\", remembered.id, now);\n\n\t\tgithub.repo = { ...github.repo, permissions: { pull: false, push: false, admin: false } };\n\t\tlet denied = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/documents/release-plan\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(denied!.status).toBe(404);\n\t\texpect((await storage.navigation.get(\"U_octocat\"))!.lastDocumentId).toBe(remembered.id);\n\n\t\tgithub.repo = {\n\t\t\t...github.repo,\n\t\t\tid: \"R_recreated\",\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet recreated = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/documents/release-plan\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(recreated!.status).toBe(404);\n\t\texpect((await storage.navigation.get(\"U_octocat\"))!.lastDocumentId).toBe(remembered.id);\n\t});\n\n\tit(\"continues to open a legacy UUIDv4 channel\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet id = \"019c1234-1234-4123-8123-123456789abc\";\n\t\tawait storage.channels.create({\n\t\t\tid,\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Legacy plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\n\t\tlet response = await router.handle(request(`/api/channels/${id}`, cookie));\n\t\texpect(response!.status).toBe(200);\n\t\texpect((await response!.json()).channel.id).toBe(id);\n\t});\n\n\tit(\"does not mutate navigation while resolving authorized metadata\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Deep link\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tlet recorded: Parameters[0][] = [];\n\t\tlet recordVisit = storage.navigation.recordVisit;\n\t\tstorage.navigation.recordVisit = async input => {\n\t\t\trecorded.push(input);\n\t\t\treturn recordVisit(input);\n\t\t};\n\n\t\tlet response = await router.handle(request(`/api/channels/${channel.id}`, cookie));\n\t\texpect(response!.status).toBe(200);\n\t\texpect(recorded).toEqual([]);\n\t\texpect(await storage.navigation.projects(\"U_octocat\")).toEqual([]);\n\t\texpect(await storage.navigation.get(\"U_octocat\")).toBeUndefined();\n\t});\n\n\tit(\"lets an editor rename a document without changing its plan revision\", async () => {\n\t\tlet { router, storage, cookie, renamed, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Release plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tlet response = await router.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\tmethod: \"PATCH\",\n\t\t\theaders: { \"content-type\": \"application/json\", origin: \"https://chopin.test\" },\n\t\t\tbody: JSON.stringify({ title: \" Launch plan \" }),\n\t\t}));\n\n\t\texpect(response!.status).toBe(200);\n\t\tlet body = await response!.json();\n\t\texpect(body.channel).toMatchObject({\n\t\t\tid: channel.id,\n\t\t\ttitle: \"Launch plan\",\n\t\t\tslug: \"launch-plan\",\n\t\t\trevision: channel.revision,\n\t\t});\n\t\texpect((await storage.channels.get(channel.id))!.title).toBe(\"Launch plan\");\n\t\texpect(renamed).toEqual([\"Launch plan\"]);\n\n\t\tlet repeated = await router.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\tmethod: \"PATCH\",\n\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\tbody: JSON.stringify({ title: \"Launch plan\" }),\n\t\t}));\n\t\texpect(repeated!.status).toBe(200);\n\t\texpect(renamed).toEqual([\"Launch plan\"]);\n\t});\n\n\tit(\"validates rename titles and preserves a document after a title conflict\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Release plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tawait storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Launch plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tlet patch = (body: unknown) =>\n\t\t\trouter.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\t\tmethod: \"PATCH\",\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t\tbody: JSON.stringify(body),\n\t\t\t}));\n\n\t\texpect((await patch({}))!.status).toBe(400);\n\t\texpect((await patch({ title: \" \" }))!.status).toBe(400);\n\t\texpect((await patch({ title: \"x\".repeat(121) }))!.status).toBe(400);\n\t\tlet conflict = await patch({ title: \"launch PLAN\" });\n\t\texpect(conflict!.status).toBe(409);\n\t\texpect(await conflict!.json()).toEqual({\n\t\t\terror: \"a document with this title already exists\",\n\t\t});\n\t\texpect((await storage.channels.get(channel.id))!.title).toBe(\"Release plan\");\n\t});\n\n\tit(\"requires current write access and the configured origin to rename\", async () => {\n\t\tlet { router, storage, github, cookie, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Release plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tlet body = JSON.stringify({ title: \"Launch plan\" });\n\t\tlet csrf = await router.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\tmethod: \"PATCH\",\n\t\t\theaders: { origin: \"https://evil.test\" },\n\t\t\tbody,\n\t\t}));\n\t\texpect(csrf!.status).toBe(403);\n\n\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: false, admin: false } };\n\t\tlet viewer = await router.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\tmethod: \"PATCH\",\n\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\tbody,\n\t\t}));\n\t\texpect(viewer!.status).toBe(403);\n\t});\n\n\tit(\"lists matching documents with a query-bound cursor and repository avatar\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet roadmap;\n\t\tfor (let title of [\"Launch notes\", \"Launch checklist\", \"Roadmap\"]) {\n\t\t\tlet channel = await storage.channels.create({\n\t\t\t\tid: crypto.randomUUID(),\n\t\t\t\trepositoryId: \"R_score\",\n\t\t\t\trepositoryOwner: \"octo-org\",\n\t\t\t\trepositoryName: \"score\",\n\t\t\t\ttitle,\n\t\t\t\tcreatedBy: \"U_octocat\",\n\t\t\t\tnow,\n\t\t\t});\n\t\t\tif (title === \"Roadmap\") roadmap = channel;\n\t\t}\n\t\tlet lease = await storage.leases.acquire(\"description-writer\", \"routes\", 60_000);\n\t\tawait storage.channels.publishDescription({\n\t\t\tchannelId: roadmap!.id,\n\t\t\tdescription: \"RFC about payment migration\",\n\t\t\tplanRevision: 2,\n\t\t\tsourceHash: `sha256:${\"a\".repeat(64)}`,\n\t\t\tgeneratorVersion: 1,\n\t\t\tjobId: \"description-job\",\n\t\t\tnow,\n\t\t\tlease: lease!,\n\t\t});\n\t\tlet response = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?query=launch&limit=1\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(response!.status).toBe(200);\n\t\tlet page = await response!.json();\n\t\texpect(page.repository.ownerAvatarUrl).toBe(\"https://avatars.test/octo-org.png\");\n\t\texpect(page.channels[0].title).toMatch(/launch/i);\n\t\texpect(page.nextCursor).toBeString();\n\t\tlet next = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?query=launch&limit=1&cursor=${page.nextCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\texpect((await next!.json()).channels[0].title).toMatch(/launch/i);\n\t\tlet described = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?query=payment\",\n\t\t\tcookie,\n\t\t));\n\t\texpect((await described!.json()).channels).toMatchObject([{\n\t\t\tid: roadmap!.id,\n\t\t\tdescription: \"RFC about payment migration\",\n\t\t\tdescriptionRevision: 1,\n\t\t}]);\n\t\tlet mismatch = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?query=road&cursor=${page.nextCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\texpect(mismatch!.status).toBe(400);\n\t});\n\n\tit(\"excludes archived documents by default and binds cursors to archive mode\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet first = await createChannel(storage, now, \"First active\");\n\t\tlet second = await createChannel(storage, now, \"Second active\");\n\t\tlet archived = await createChannel(storage, now, \"Archived plan\");\n\t\tlet archivedAt = new Date(now.getTime() + 1_000);\n\t\tawait storage.channels.archive({ id: archived.id, now: archivedAt });\n\n\t\tlet defaultResponse = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(defaultResponse!.status).toBe(200);\n\t\tlet defaultPage = await defaultResponse!.json();\n\t\texpect(defaultPage.channels.map((channel: { id: string }) => channel.id).sort()).toEqual(\n\t\t\t[first.id, second.id].sort(),\n\t\t);\n\t\texpect(defaultPage.channels.every((channel: object) => !(\"archivedAt\" in channel))).toBe(true);\n\n\t\tlet includedResponse = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?includeArchived=true\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(includedResponse!.status).toBe(200);\n\t\tlet includedPage = await includedResponse!.json();\n\t\texpect(includedPage.channels).toHaveLength(3);\n\t\texpect(\n\t\t\tincludedPage.channels.find((channel: { id: string }) => channel.id === archived.id),\n\t\t).toMatchObject({ id: archived.id, archivedAt: archivedAt.toISOString() });\n\n\t\tlet activeFirst = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?limit=1\",\n\t\t\tcookie,\n\t\t));\n\t\tlet activeCursor = (await activeFirst!.json()).nextCursor;\n\t\texpect(activeCursor).toBeString();\n\t\tlet activeCursorInArchiveMode = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?limit=1&includeArchived=true&cursor=${activeCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\texpect(activeCursorInArchiveMode!.status).toBe(400);\n\n\t\tlet includedFirst = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?limit=1&includeArchived=true\",\n\t\t\tcookie,\n\t\t));\n\t\tlet includedCursor = (await includedFirst!.json()).nextCursor;\n\t\texpect(includedCursor).toBeString();\n\t\tlet includedCursorInActiveMode = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?limit=1&cursor=${includedCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\texpect(includedCursorInActiveMode!.status).toBe(400);\n\t});\n\n\tit(\"opens archived documents by slug and UUID as manageable but read-only\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet channel = await createChannel(storage, now, \"Archived direct read\");\n\t\tlet archivedAt = new Date(now.getTime() + 1_000);\n\t\tawait storage.channels.archive({ id: channel.id, now: archivedAt });\n\n\t\tfor (\n\t\t\tlet path of [\n\t\t\t\t`/api/repositories/octo-org/score/documents/${channel.slug}`,\n\t\t\t\t`/api/channels/${channel.id}`,\n\t\t\t]\n\t\t) {\n\t\t\tlet response = await router.handle(request(path, cookie));\n\t\t\texpect(response!.status).toBe(200);\n\t\t\texpect(await response!.json()).toMatchObject({\n\t\t\t\tcanEdit: false,\n\t\t\t\tcanManage: true,\n\t\t\t\tchannel: { id: channel.id, archivedAt: archivedAt.toISOString() },\n\t\t\t});\n\t\t}\n\t});\n\n\tit(\"lets viewers read archived documents but not archive, restore or delete\", async () => {\n\t\tlet { router, storage, github, cookie, archived, restored, deleted, now } = await setup();\n\t\tlet active = await createChannel(storage, now, \"Viewer active\");\n\t\tlet inactive = await createChannel(storage, now, \"Viewer archived\");\n\t\tawait storage.channels.archive({\n\t\t\tid: inactive.id,\n\t\t\tnow: new Date(now.getTime() + 1_000),\n\t\t});\n\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: false, admin: false } };\n\n\t\tlet read = await router.handle(request(`/api/channels/${inactive.id}`, cookie));\n\t\texpect(read!.status).toBe(200);\n\t\texpect(await read!.json()).toMatchObject({ canEdit: false, canManage: false });\n\n\t\tfor (\n\t\t\tlet [method, path] of [\n\t\t\t\t[\"POST\", `/api/channels/${active.id}/archive`],\n\t\t\t\t[\"POST\", `/api/channels/${inactive.id}/restore`],\n\t\t\t\t[\"DELETE\", `/api/channels/${inactive.id}`],\n\t\t\t] as const\n\t\t) {\n\t\t\tlet response = await router.handle(request(path, cookie, {\n\t\t\t\tmethod,\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t}));\n\t\t\texpect(response!.status).toBe(403);\n\t\t}\n\t\texpect(archived).toEqual([]);\n\t\texpect(restored).toEqual([]);\n\t\texpect(deleted).toEqual([]);\n\t\texpect((await storage.channels.get(active.id))!.archivedAt).toBeUndefined();\n\t\texpect((await storage.channels.get(inactive.id))!.archivedAt).toBeDate();\n\t});\n\n\tit(\"archives and restores idempotently for a writer\", async () => {\n\t\tlet { router, storage, cookie, archived, restored, now } = await setup();\n\t\tlet channel = await createChannel(storage, now, \"Lifecycle\");\n\t\tlet transition = (action: \"archive\" | \"restore\") =>\n\t\t\trouter.handle(request(`/api/channels/${channel.id}/${action}`, cookie, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t}));\n\n\t\tlet firstArchive = await transition(\"archive\");\n\t\texpect(firstArchive!.status).toBe(200);\n\t\tlet archivedBody = await firstArchive!.json();\n\t\texpect(archivedBody).toMatchObject({ canEdit: false, canManage: true });\n\t\texpect(archivedBody.channel.archivedAt).toBeString();\n\t\tlet repeatedArchive = await transition(\"archive\");\n\t\texpect(repeatedArchive!.status).toBe(200);\n\t\texpect((await repeatedArchive!.json()).channel.archivedAt)\n\t\t\t.toBe(archivedBody.channel.archivedAt);\n\t\texpect(archived).toEqual([\n\t\t\t{ id: channel.id, changed: true },\n\t\t\t{ id: channel.id, changed: false },\n\t\t]);\n\n\t\tlet firstRestore = await transition(\"restore\");\n\t\texpect(firstRestore!.status).toBe(200);\n\t\tlet restoredBody = await firstRestore!.json();\n\t\texpect(restoredBody).toMatchObject({ canEdit: true, canManage: true });\n\t\texpect(restoredBody.channel).not.toHaveProperty(\"archivedAt\");\n\t\tlet repeatedRestore = await transition(\"restore\");\n\t\texpect(repeatedRestore!.status).toBe(200);\n\t\texpect((await repeatedRestore!.json()).channel).not.toHaveProperty(\"archivedAt\");\n\t\texpect(restored).toEqual([\n\t\t\t{ id: channel.id, changed: true },\n\t\t\t{ id: channel.id, changed: false },\n\t\t]);\n\t});\n\n\tit(\"requires the exact configured Origin for lifecycle mutations\", async () => {\n\t\tlet { router, storage, cookie, archived, restored, deleted, now } = await setup();\n\t\tlet active = await createChannel(storage, now, \"Origin active\");\n\t\tlet inactive = await createChannel(storage, now, \"Origin archived\");\n\t\tawait storage.channels.archive({\n\t\t\tid: inactive.id,\n\t\t\tnow: new Date(now.getTime() + 1_000),\n\t\t});\n\n\t\tfor (\n\t\t\tlet [method, path] of [\n\t\t\t\t[\"POST\", `/api/channels/${active.id}/archive`],\n\t\t\t\t[\"POST\", `/api/channels/${inactive.id}/restore`],\n\t\t\t\t[\"DELETE\", `/api/channels/${inactive.id}`],\n\t\t\t] as const\n\t\t) {\n\t\t\tfor (let origin of [undefined, \"https://chopin.test/\", \"https://chopin.test.evil\"]) {\n\t\t\t\tlet response = await router.handle(request(path, cookie, {\n\t\t\t\t\tmethod,\n\t\t\t\t\theaders: origin ? { origin } : undefined,\n\t\t\t\t}));\n\t\t\t\texpect(response!.status).toBe(403);\n\t\t\t}\n\t\t}\n\t\texpect(archived).toEqual([]);\n\t\texpect(restored).toEqual([]);\n\t\texpect(deleted).toEqual([]);\n\t});\n\n\tit(\"requires archival before deletion and delegates archived deletion\", async () => {\n\t\tlet { router, storage, cookie, deleted, now } = await setup();\n\t\tlet channel = await createChannel(storage, now, \"Delete lifecycle\");\n\t\tlet remove = () =>\n\t\t\trouter.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\t\tmethod: \"DELETE\",\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t}));\n\n\t\tlet active = await remove();\n\t\texpect(active!.status).toBe(409);\n\t\texpect(deleted).toEqual([]);\n\t\texpect(await storage.channels.get(channel.id)).toBeDefined();\n\n\t\tawait storage.channels.archive({\n\t\t\tid: channel.id,\n\t\t\tnow: new Date(now.getTime() + 1_000),\n\t\t});\n\t\tlet archived = await remove();\n\t\texpect(archived!.status).toBe(204);\n\t\texpect(archived!.headers.get(\"cache-control\")).toBe(\"no-store\");\n\t\texpect(await archived!.text()).toBe(\"\");\n\t\texpect(deleted).toEqual([channel.id]);\n\t\texpect(await storage.channels.get(channel.id)).toBeUndefined();\n\t});\n\n\tit(\"creates a unique generated document when a title is omitted\", async () => {\n\t\tlet { router, cookie } = await setup();\n\t\tlet create = () =>\n\t\t\trouter.handle(request(\n\t\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\t\tcookie,\n\t\t\t\t{ method: \"POST\", headers: { origin: \"https://chopin.test\" }, body: \"{}\" },\n\t\t\t));\n\t\tlet first = await create();\n\t\tlet second = await create();\n\t\texpect(first!.status).toBe(201);\n\t\texpect(second!.status).toBe(201);\n\t\tlet firstBody = await first!.json();\n\t\tlet secondBody = await second!.json();\n\t\texpect(firstBody.channel.title).toMatch(/^[a-z]+-[a-z]+$/);\n\t\texpect(secondBody.channel.title).not.toBe(firstBody.channel.title);\n\t});\n\n\tit(\"tries another generated title when its random starting title is reserved\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup(() => 0);\n\t\tawait storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"amber-anchor\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tlet created = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t\t{ method: \"POST\", headers: { origin: \"https://chopin.test\" }, body: \"{}\" },\n\t\t));\n\t\texpect(created!.status).toBe(201);\n\t\texpect((await created!.json()).channel.title).toBe(\"amber-arch\");\n\t});\n\n\tit(\"keeps viewers read-only and requires a matching Origin\", async () => {\n\t\tlet { router, github, cookie } = await setup();\n\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: false, admin: false } };\n\t\tlet viewer = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t\t{\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t\tbody: JSON.stringify({ title: \"No\" }),\n\t\t\t},\n\t\t));\n\t\texpect(viewer!.status).toBe(403);\n\n\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: true, admin: false } };\n\t\tlet csrf = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t\t{\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { origin: \"https://evil.test\" },\n\t\t\t\tbody: JSON.stringify({ title: \"No\" }),\n\t\t\t},\n\t\t));\n\t\texpect(csrf!.status).toBe(403);\n\t});\n\n\tit(\"paginates opaquely and rejects malformed cursors\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet ids = [\n\t\t\t\"019c1234-1234-5123-8123-123456789abc\",\n\t\t\t\"119c1234-1234-4123-8123-123456789abc\",\n\t\t\t\"219c1234-1234-5123-8123-123456789abc\",\n\t\t];\n\t\tfor (let [index, id] of ids.entries()) {\n\t\t\tawait storage.channels.create({\n\t\t\t\tid,\n\t\t\t\trepositoryId: \"R_score\",\n\t\t\t\trepositoryOwner: \"octo-org\",\n\t\t\t\trepositoryName: \"score\",\n\t\t\t\ttitle: `Channel ${index}`,\n\t\t\t\tcreatedBy: \"U_octocat\",\n\t\t\t\tnow,\n\t\t\t});\n\t\t}\n\t\tlet first = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?limit=1\",\n\t\t\tcookie,\n\t\t));\n\t\tlet page = await first!.json();\n\t\texpect(page.channels).toHaveLength(1);\n\t\texpect(page.channels[0].id).toBe(ids[0]);\n\t\texpect(page.nextCursor).toBeString();\n\t\tlet second = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?limit=1&cursor=${page.nextCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\tlet secondPage = await second!.json();\n\t\texpect(secondPage.channels[0].id).toBe(ids[1]);\n\t\texpect(secondPage.nextCursor).toBeString();\n\t\tlet third = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?limit=1&cursor=${secondPage.nextCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\texpect((await third!.json()).channels[0].id).toBe(ids[2]);\n\t\tlet bad = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?cursor=not-json\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(bad!.status).toBe(400);\n\t});\n\n\tit(\"refuses a channel whose stored repository id no longer matches\", async () => {\n\t\tlet { router, storage, github, cookie, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_other\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Hidden\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tgithub.repo = { ...github.repo, id: \"R_score\" };\n\t\tlet response = await router.handle(request(`/api/channels/${channel.id}`, cookie));\n\t\texpect(response!.status).toBe(404);\n\t});\n\n\tit(\"lets an editor explicitly release the Copilot owner\", async () => {\n\t\tlet { router, storage, cookie, sessionId, reset, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Reset\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tawait storage.channels.claimAgentOwner(channel.id, sessionId, now);\n\t\tlet response = await router.handle(request(\n\t\t\t`/api/channels/${channel.id}/agent/reset`,\n\t\t\tcookie,\n\t\t\t{ method: \"POST\", headers: { origin: \"https://chopin.test\" } },\n\t\t));\n\t\texpect(response!.status).toBe(204);\n\t\texpect(reset).toEqual([channel.id]);\n\t\texpect((await storage.collaboration.load(channel.id, now))!.agent!.ownerSessionId)\n\t\t\t.toBeUndefined();\n\t});\n});\n","editable",false,"branch","documentNavigation","repo","githubnext/chopin","repoId","7d1a8ac3-35b0-4dea-85d4-06a980f3bada","ownerId","org:89615882","site","nexthub","private","admin","settings","maintainer","triage","starred","stars",0,"watchers","watching","pinned","notify","views",[183,184,185,186,187,188,189,190,191,192,193,194,195],"navigation",{"_54":55,"_139":140,"_141":142,"_143":144,"_145":146,"_147":148,"_149":150},"sources",[],"viewer","meta",{"_131":132,"_133":134,"_135":136,"_42":31,"_137":126,"_138":31,"_48":49,"_50":49},"branches",[73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130],"tags",[69,70,71,72],"cloneUrl","https://git.nexthub.sh/githubnext/chopin.git","color-controls-slice-1","color-controls-slice-2","color-controls-slice-3","color-controls-slice-4","Krzysztof-Cieslak-patch-1","Krzysztof-Cieslak-patch-2","Maggie/app-preview-toolkit","Maggie/ci-playwright-install-timeout","Maggie/collaborative-visual-decision","Maggie/design-audit","Maggie/generic-visual-decision-runtime","Maggie/impeccable-chopin-metadata","Maggie/jev-chat-product","Maggie/jev-composed-assessment","Maggie/native-document-layouts","Maggie/openui-composition-product","Maggie/openui-composition-trial","Maggie/planner-visual-authoring","Maggie/planner-visual-requests","Maggie/visual-selection-eval","artifacts/pr-419-live-preview-20261009","automation/pr-maintenance-state","automation/use-effect/callout-disabled-picker-8cf9e49ba5c09471","automation/use-effect/collaboration-options-ref-4e3a5a08a879a5ae","automation/use-effect/room-workspace-effective-access-a57d40866c71bed0","chore/bun-1.4.2","color-controls","color-controls-plan","comments","design-pr-assets","design/archived-decisions-badge","design/channel-route-remount","design/chat-decision-entry","design/conversation-analysis-markers","design/decision-evidence","design/settled-line-icon","dev/integration","diagram-step-controls","feat/liveapp-frontend-pilot","feat/local-experiments","feat/local-launcher-tracer","fix/autolink-mdx-crash","github-pills/2-pills","github-pills/3-hover-card","maggie/app-preview-toolkit","maggie/ci-playwright-install-timeout","maggie/collaborative-visual-decision","maggie/design-audit","maggie/generic-visual-decision-runtime","maggie/impeccable-chopin-metadata","maggie/jev-composed-assessment","maggie/native-document-layouts","maggie/openui-composition-product","maggie/openui-composition-trial","maggie/planner-visual-authoring","maggie/planner-visual-requests","maggie/visual-selection-eval","main","plain-text-fence-chrome","tokens/09-copy","wireframes/2-renderer","wireframes/3-planner","description","Let's compose rich plans together","owner","githubnext","section","","head","empty","pins",[165,166,167],"documents",{"_160":161,"_162":163},"code",{"_156":157,"_158":159},"automations",{"_153":154,"_155":-5},"delivery",{"_151":49,"_152":-5},"tag","04zvKQ8QOrDUF8TO1Ovz0Zy8_TT","releases","applications","workflows",3,"deployments","commits",1000,"changes",13,"counts",{"_164":163},"total",11,"issue",{"_168":158,"_170":181,"_15":158,"_172":182,"_52":174,"_175":31,"_176":174,"_177":159},{"_168":178,"_170":179,"_15":178,"_172":180,"_52":174,"_175":31,"_176":174,"_177":49},{"_168":169,"_170":171,"_15":169,"_172":173,"_52":174,"_175":31,"_176":174,"_177":163},"id","issues","name","Issues","filters",{},true,"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_168":158,"_170":181,"_15":158,"_172":226,"_52":174,"_175":31,"_176":174},{"_168":178,"_170":179,"_15":178,"_172":225,"_52":174,"_175":31,"_176":174},{"_168":169,"_170":171,"_15":169,"_172":224,"_52":174,"_175":31,"_176":174},{"_168":221,"_170":222,"_15":221,"_172":223,"_52":31,"_175":31,"_176":174},{"_168":218,"_170":219,"_15":218,"_172":220,"_52":31,"_175":31,"_176":174},{"_168":153,"_170":216,"_15":145,"_172":217,"_52":31,"_175":31,"_176":174},{"_168":155,"_170":213,"_15":214,"_172":215,"_52":31,"_175":31,"_176":174},{"_168":151,"_170":211,"_15":151,"_172":212,"_52":31,"_175":31,"_176":174},{"_168":207,"_170":208,"_15":209,"_172":210,"_52":31,"_175":31,"_176":174},{"_168":141,"_170":205,"_15":141,"_172":206,"_52":31,"_175":31,"_176":31},{"_168":202,"_170":203,"_15":202,"_172":204,"_52":31,"_175":31,"_176":31},{"_168":199,"_170":200,"_15":199,"_172":201,"_52":31,"_175":31,"_176":31},{"_168":196,"_170":197,"_15":196,"_172":198,"_52":31,"_175":31,"_176":31},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user","agents",[],"now",1794518006567,"sidebar","expanded"]