[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_228":-5,"_231":232,"_233":234},"routes/shell",{"_41":42,"_227":-5,"_228":-5,"_229":230},"routes/repo",{"_34":-7,"_35":36,"_37":38,"_39":40,"_41":42,"_43":32,"_44":32,"_45":32,"_46":32,"_47":32,"_48":32,"_49":50,"_51":50,"_52":32,"_53":-7,"_54":-7,"_55":56,"_57":58,"_59":60,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69},"routes/repo.blob",{"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-5,"_26":27,"_28":29,"_29":30,"_31":32,"_33":14},"ref","main","path","apps/server/src/channels/routes.test.ts","oid","9c2c1050cc703ef27109233140301eabfdf7dc15","size",41114,"commit","2182c95de44a8f63fd86af1c5874ae0ca298f807","mounts",[],"source","plain",{"_13":14,"_15":16},"kind","text","import { describe, expect, it } from \"bun:test\";\n\nimport { Sessions } from \"../auth/session\";\nimport { Admission } from \"../auth/admission\";\nimport { GitHubError } from \"../github/client\";\nimport { GitHubReferences } from \"../github/references\";\nimport { Router } from \"../http/router\";\nimport { MemoryStorage } from \"../storage/memory/adapter\";\nimport { registerChannelRoutes } from \"./routes\";\n\nimport type { HostedAuth } from \"../auth/routes\";\nimport type {\n\tGitHub,\n\tGitHubConditional,\n\tGitHubInstallation,\n\tGitHubReferenceSource,\n\tGitHubTokenGrant,\n\tGitHubUser,\n\tInstallationPage,\n\tRepository,\n\tRepositoryPage,\n} from \"../github/client\";\nimport type {\n\tGitHubIssueSummary,\n\tGitHubPullRequestSummary,\n} from \"@chopin/protocol/github-reference\";\nimport type { JsonValue } from \"../storage/model\";\n\nclass FakeGitHub implements GitHub {\n\taffiliated = true;\n\trepo: Repository = {\n\t\tid: \"R_score\",\n\t\towner: \"octo-org\",\n\t\townerAvatarUrl: \"https://avatars.test/octo-org.png\",\n\t\tname: \"score\",\n\t\tfullName: \"octo-org/score\",\n\t\tprivate: true,\n\t\turl: \"https://github.test/octo-org/score\",\n\t\tdefaultBranch: \"main\",\n\t\tpermissions: { pull: true, push: true, admin: false },\n\t};\n\n\tauthorize(): string {\n\t\treturn \"https://github.test/authorize\";\n\t}\n\n\tasync exchange(): Promise {\n\t\treturn grant(\"ghu_user\");\n\t}\n\n\tasync refresh(): Promise {\n\t\treturn grant(\"ghu_refreshed\");\n\t}\n\n\tasync user(): Promise {\n\t\treturn { id: \"U_octocat\", login: \"octocat\", avatarUrl: \"avatar\" };\n\t}\n\n\tasync organizationMembership() {\n\t\treturn undefined;\n\t}\n\n\tasync installations(): Promise {\n\t\treturn { installations: [], nextPage: undefined };\n\t}\n\n\tasync installationRepositories(): Promise {\n\t\treturn { repositories: [this.repo], nextPage: undefined };\n\t}\n\n\tasync repository(_token: string, owner: string, name: string): Promise {\n\t\treturn { ...this.repo, owner, name, fullName: `${owner}/${name}` };\n\t}\n\n\tasync repositoryAccess(\n\t\ttoken: string,\n\t\towner: string,\n\t\tname: string,\n\t): Promise {\n\t\treturn this.affiliated ? this.repository(token, owner, name) : undefined;\n\t}\n\n\tinvalidate(): void {}\n}\n\nclass FakeReferenceSource implements GitHubReferenceSource {\n\t/** Repository names each user token reaches through its App installation. */\n\taccess = new Map>([[\"ghu_user\", new Set([\"score\", \"tools\"])]]);\n\tfetched: Array<{ token: string; path: string }> = [];\n\trateLimited = false;\n\n\tasync installedRepository(token: string, owner: string, name: string) {\n\t\tif (this.rateLimited) throw new GitHubError(\"slow down\", 429);\n\t\tif (owner !== \"octo-org\" || !this.access.get(token)?.has(name)) return undefined;\n\t\tlet installation: GitHubInstallation = {\n\t\t\tid: \"101\",\n\t\t\taccount: { login: \"octo-org\", avatarUrl: \"\", type: \"organization\" },\n\t\t\trepositorySelection: \"selected\",\n\t\t\tconfigureUrl: \"\",\n\t\t\tsuspended: false,\n\t\t\tpermissions: {\n\t\t\t\tcontents: true,\n\t\t\t\tpullRequests: true,\n\t\t\t\tchecks: true,\n\t\t\t\tstatuses: true,\n\t\t\t\tissues: true,\n\t\t\t},\n\t\t};\n\t\treturn {\n\t\t\trepository: {\n\t\t\t\tid: `R_${name}`,\n\t\t\t\towner,\n\t\t\t\tname,\n\t\t\t\tfullName: `${owner}/${name}`,\n\t\t\t\tprivate: true,\n\t\t\t\turl: \"\",\n\t\t\t\tdefaultBranch: \"main\",\n\t\t\t\tpermissions: { pull: true, push: false, admin: false },\n\t\t\t},\n\t\t\tinstallation,\n\t\t};\n\t}\n\n\tasync pullRequest(\n\t\ttoken: string,\n\t\towner: string,\n\t\tname: string,\n\t\tnumber: number,\n\t): Promise> {\n\t\tthis.fetched.push({ token, path: `${owner}/${name}/pull/${number}` });\n\t\treturn {\n\t\t\tkind: \"pull\",\n\t\t\towner,\n\t\t\trepository: name,\n\t\t\tnumber,\n\t\t\turl: `https://github.com/${owner}/${name}/pull/${number}`,\n\t\t\ttitle: \"Ship pills\",\n\t\t\tauthor: null,\n\t\t\tlabels: [],\n\t\t\tcomments: 0,\n\t\t\tcreatedAt: \"2026-10-01T00:00:00.000Z\",\n\t\t\tupdatedAt: \"2026-10-01T00:00:00.000Z\",\n\t\t\tclosedAt: null,\n\t\t\tstate: \"open\",\n\t\t\tdraft: false,\n\t\t\tmergedAt: null,\n\t\t\theadBranch: \"topic\",\n\t\t\tbaseBranch: \"main\",\n\t\t};\n\t}\n\n\tasync issue(\n\t\ttoken: string,\n\t\towner: string,\n\t\tname: string,\n\t\tnumber: number,\n\t): Promise> {\n\t\tthis.fetched.push({ token, path: `${owner}/${name}/issues/${number}` });\n\t\tthrow new GitHubError(\"not found\", 404);\n\t}\n}\n\nfunction grant(accessToken: string): GitHubTokenGrant {\n\treturn {\n\t\taccessToken,\n\t\taccessExpiresIn: 28_800,\n\t\trefreshToken: \"ghr_user\",\n\t\trefreshExpiresIn: 15_897_600,\n\t};\n}\n\nfunction pair(cookie: string): string {\n\treturn cookie.split(\";\", 1)[0]!;\n}\n\nasync function setup(random?: () => number) {\n\tlet now = new Date(\"2026-08-13T12:00:00.000Z\");\n\tlet storage = new MemoryStorage();\n\tawait storage.users.put({ id: \"U_octocat\", login: \"octocat\", avatarUrl: \"avatar\", now });\n\tlet sessions = new Sessions(storage, true, () => now);\n\tlet issued = await sessions.issue(\"U_octocat\", grant(\"ghu_user\"));\n\tawait storage.users.put({ id: \"U_hubot\", login: \"hubot\", avatarUrl: \"avatar\", now });\n\tlet other = await sessions.issue(\"U_hubot\", grant(\"ghu_hubot\"));\n\tlet github = new FakeGitHub();\n\tlet referenceSource = new FakeReferenceSource();\n\tlet config = {\n\t\torigin: \"https://chopin.test\",\n\t\tappSlug: \"chopin-test\",\n\t\tclientId: \"client-id\",\n\t\tclientSecret: \"client-secret\",\n\t\tencryptionKey: new Uint8Array(32).fill(4),\n\t};\n\tlet auth: HostedAuth = {\n\t\tconfig,\n\t\tstorage,\n\t\tgithub,\n\t\tadmission: new Admission(config, github, () => now.getTime()),\n\t\tsessions,\n\t\tclock: () => now,\n\t};\n\tlet router = new Router();\n\tlet reset: string[] = [];\n\tlet renamed: string[] = [];\n\tlet archived: Array<{ id: string; changed: boolean }> = [];\n\tlet restored: Array<{ id: string; changed: boolean }> = [];\n\tlet deleted: string[] = [];\n\tregisterChannelRoutes(router, auth, {\n\t\tonAgentReset: async id => {\n\t\t\treset.push(id);\n\t\t},\n\t\tonChannelArchived: async (id, at) => {\n\t\t\tlet result = await storage.channels.archive({ id, now: at });\n\t\t\tarchived.push({ id, changed: result.changed });\n\t\t\treturn result;\n\t\t},\n\t\tonChannelDeleted: async id => {\n\t\t\tdeleted.push(id);\n\t\t\treturn storage.channels.delete(id);\n\t\t},\n\t\tonChannelRenamed: channel => {\n\t\t\trenamed.push(channel.title);\n\t\t},\n\t\tonChannelRestored: async (id, at) => {\n\t\t\tlet result = await storage.channels.restore({ id, now: at });\n\t\t\trestored.push({ id, changed: result.changed });\n\t\t\treturn result;\n\t\t},\n\t\trandom,\n\t\treferences: new GitHubReferences(referenceSource),\n\t});\n\treturn {\n\t\trouter,\n\t\tstorage,\n\t\tgithub,\n\t\treferenceSource,\n\t\tcookie: pair(issued.cookie),\n\t\totherCookie: pair(other.cookie),\n\t\tsessionId: issued.id,\n\t\treset,\n\t\trenamed,\n\t\tarchived,\n\t\trestored,\n\t\tdeleted,\n\t\tnow,\n\t};\n}\n\nfunction request(path: string, cookie?: string, init: RequestInit = {}): Request {\n\tlet headers = new Headers(init.headers);\n\tif (cookie) headers.set(\"cookie\", cookie);\n\treturn new Request(`https://chopin.test${path}`, { ...init, headers });\n}\n\nfunction decisionRecord(id: string, status: string): JsonValue {\n\treturn { id, status, definition: { questions: [{ id: `${id}-question` }] } };\n}\n\nfunction createChannel(storage: MemoryStorage, now: Date, title: string) {\n\treturn storage.channels.create({\n\t\tid: crypto.randomUUID(),\n\t\trepositoryId: \"R_score\",\n\t\trepositoryOwner: \"octo-org\",\n\t\trepositoryName: \"score\",\n\t\ttitle,\n\t\tcreatedBy: \"U_octocat\",\n\t\tnow,\n\t});\n}\n\ndescribe(\"channel routes\", () => {\n\tit(\"requires authentication and current repository access\", async () => {\n\t\tlet { router, github, cookie } = await setup();\n\t\tlet anonymous = await router.handle(request(\"/api/repositories/octo-org/score/channels\"));\n\t\texpect(anonymous!.status).toBe(401);\n\n\t\tgithub.repo = { ...github.repo, permissions: { pull: false, push: false, admin: false } };\n\t\tlet denied = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(denied!.status).toBe(403);\n\n\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: false, admin: false } };\n\t\tgithub.affiliated = false;\n\t\tlet outsider = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(outsider!.status).toBe(404);\n\t});\n\n\tit(\"lets an editor create, list and open a canonical repository channel\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet created = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t\t{\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { \"content-type\": \"application/json\", origin: \"https://chopin.test\" },\n\t\t\t\tbody: JSON.stringify({ title: \" Release readiness \" }),\n\t\t\t},\n\t\t));\n\t\texpect(created!.status).toBe(201);\n\t\tlet body = await created!.json();\n\t\texpect(body.channel.title).toBe(\"Release readiness\");\n\t\texpect(body.channel.slug).toBe(\"release-readiness\");\n\t\texpect(body.channel.id[14]).toBe(\"5\");\n\t\texpect(body.channel.repositoryId).toBe(\"R_score\");\n\t\texpect(body.channel.createdBy).toBe(\"U_octocat\");\n\t\texpect(created!.headers.get(\"location\"))\n\t\t\t.toBe(\"/documents/octo-org/score/release-readiness\");\n\t\texpect(await storage.channels.get(body.channel.id)).toMatchObject({\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t});\n\n\t\tlet listed = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?limit=1\",\n\t\t\tcookie,\n\t\t));\n\t\texpect((await listed!.json()).channels).toHaveLength(1);\n\t\tlet detail = await router.handle(request(`/api/channels/${body.channel.id}`, cookie));\n\t\texpect(detail!.status).toBe(200);\n\t\texpect((await detail!.json()).canEdit).toBe(true);\n\t\texpect((await storage.collaboration.load(body.channel.id, now))?.channel.id).toBe(\n\t\t\tbody.channel.id,\n\t\t);\n\t});\n\n\tit(\"exposes child parents without accepting them on top-level creation\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet parent = await createChannel(storage, now, \"Research parent\");\n\t\tlet child = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Research child\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tparentChannelId: parent.id,\n\t\t\tnow,\n\t\t});\n\n\t\tlet detail = await router.handle(request(`/api/channels/${child.id}`, cookie));\n\t\texpect(detail!.status).toBe(200);\n\t\texpect((await detail!.json()).channel.parentChannelId).toBe(parent.id);\n\n\t\tlet listed = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t));\n\t\tlet page = await listed!.json();\n\t\texpect(page.channels.find((channel: { id: string }) => channel.id === child.id))\n\t\t\t.toMatchObject({ parentChannelId: parent.id });\n\n\t\tlet forged = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t\t{\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { \"content-type\": \"application/json\", origin: \"https://chopin.test\" },\n\t\t\t\tbody: JSON.stringify({\n\t\t\t\t\ttitle: \"Forged nested child\",\n\t\t\t\t\tparentChannelId: child.id,\n\t\t\t\t}),\n\t\t\t},\n\t\t));\n\t\texpect(forged!.status).toBe(201);\n\t\tlet forgedChannel = (await forged!.json()).channel;\n\t\texpect(forgedChannel.parentChannelId).toBeUndefined();\n\t\texpect((await storage.channels.get(forgedChannel.id))?.parentChannelId).toBeUndefined();\n\t});\n\n\tit(\"resolves canonical and historical document paths within the authorized repository\", async () => {\n\t\tlet { router, storage, github, cookie, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Release plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tawait storage.channels.rename({\n\t\t\tid: channel.id,\n\t\t\ttitle: \"Résumé 計画\",\n\t\t\tnow: new Date(now.getTime() + 1),\n\t\t});\n\n\t\tlet canonical = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/documents/r%C3%A9sum%C3%A9-%E8%A8%88%E7%94%BB\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(canonical!.status).toBe(200);\n\t\texpect((await canonical!.json()).channel).toMatchObject({\n\t\t\tid: channel.id,\n\t\t\ttitle: \"Résumé 計画\",\n\t\t\tslug: \"résumé-計画\",\n\t\t});\n\n\t\tlet alias = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/documents/Release--Plan\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(alias!.status).toBe(200);\n\t\texpect((await alias!.json()).channel.slug).toBe(\"résumé-計画\");\n\t\texpect(await storage.navigation.projects(\"U_octocat\")).toEqual([]);\n\t\texpect(await storage.navigation.get(\"U_octocat\")).toBeUndefined();\n\t\tlet remembered = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Remembered document\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tawait storage.navigation.setLastDocument(\"U_octocat\", remembered.id, now);\n\n\t\tgithub.repo = { ...github.repo, permissions: { pull: false, push: false, admin: false } };\n\t\tlet denied = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/documents/release-plan\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(denied!.status).toBe(404);\n\t\texpect((await storage.navigation.get(\"U_octocat\"))!.lastDocumentId).toBe(remembered.id);\n\n\t\tgithub.repo = {\n\t\t\t...github.repo,\n\t\t\tid: \"R_recreated\",\n\t\t\tpermissions: { pull: true, push: true, admin: false },\n\t\t};\n\t\tlet recreated = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/documents/release-plan\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(recreated!.status).toBe(404);\n\t\texpect((await storage.navigation.get(\"U_octocat\"))!.lastDocumentId).toBe(remembered.id);\n\t});\n\n\tit(\"continues to open a legacy UUIDv4 channel\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet id = \"019c1234-1234-4123-8123-123456789abc\";\n\t\tawait storage.channels.create({\n\t\t\tid,\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Legacy plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\n\t\tlet response = await router.handle(request(`/api/channels/${id}`, cookie));\n\t\texpect(response!.status).toBe(200);\n\t\texpect((await response!.json()).channel.id).toBe(id);\n\t});\n\n\tit(\"does not mutate navigation while resolving authorized metadata\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Deep link\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tlet recorded: Parameters[0][] = [];\n\t\tlet recordVisit = storage.navigation.recordVisit;\n\t\tstorage.navigation.recordVisit = async input => {\n\t\t\trecorded.push(input);\n\t\t\treturn recordVisit(input);\n\t\t};\n\n\t\tlet response = await router.handle(request(`/api/channels/${channel.id}`, cookie));\n\t\texpect(response!.status).toBe(200);\n\t\texpect(recorded).toEqual([]);\n\t\texpect(await storage.navigation.projects(\"U_octocat\")).toEqual([]);\n\t\texpect(await storage.navigation.get(\"U_octocat\")).toBeUndefined();\n\t});\n\n\tit(\"lets an editor rename a document without changing its plan revision\", async () => {\n\t\tlet { router, storage, cookie, renamed, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Release plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tlet response = await router.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\tmethod: \"PATCH\",\n\t\t\theaders: { \"content-type\": \"application/json\", origin: \"https://chopin.test\" },\n\t\t\tbody: JSON.stringify({ title: \" Launch plan \" }),\n\t\t}));\n\n\t\texpect(response!.status).toBe(200);\n\t\tlet body = await response!.json();\n\t\texpect(body.channel).toMatchObject({\n\t\t\tid: channel.id,\n\t\t\ttitle: \"Launch plan\",\n\t\t\tslug: \"launch-plan\",\n\t\t\trevision: channel.revision,\n\t\t});\n\t\texpect((await storage.channels.get(channel.id))!.title).toBe(\"Launch plan\");\n\t\texpect(renamed).toEqual([\"Launch plan\"]);\n\n\t\tlet repeated = await router.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\tmethod: \"PATCH\",\n\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\tbody: JSON.stringify({ title: \"Launch plan\" }),\n\t\t}));\n\t\texpect(repeated!.status).toBe(200);\n\t\texpect(renamed).toEqual([\"Launch plan\"]);\n\t});\n\n\tit(\"validates rename titles and preserves a document after a title conflict\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Release plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tawait storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Launch plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tlet patch = (body: unknown) =>\n\t\t\trouter.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\t\tmethod: \"PATCH\",\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t\tbody: JSON.stringify(body),\n\t\t\t}));\n\n\t\texpect((await patch({}))!.status).toBe(400);\n\t\texpect((await patch({ title: \" \" }))!.status).toBe(400);\n\t\texpect((await patch({ title: \"x\".repeat(121) }))!.status).toBe(400);\n\t\tlet conflict = await patch({ title: \"launch PLAN\" });\n\t\texpect(conflict!.status).toBe(409);\n\t\texpect(await conflict!.json()).toEqual({\n\t\t\terror: \"a document with this title already exists\",\n\t\t});\n\t\texpect((await storage.channels.get(channel.id))!.title).toBe(\"Release plan\");\n\t});\n\n\tit(\"requires current write access and the configured origin to rename\", async () => {\n\t\tlet { router, storage, github, cookie, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Release plan\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tlet body = JSON.stringify({ title: \"Launch plan\" });\n\t\tlet csrf = await router.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\tmethod: \"PATCH\",\n\t\t\theaders: { origin: \"https://evil.test\" },\n\t\t\tbody,\n\t\t}));\n\t\texpect(csrf!.status).toBe(403);\n\n\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: false, admin: false } };\n\t\tlet viewer = await router.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\tmethod: \"PATCH\",\n\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\tbody,\n\t\t}));\n\t\texpect(viewer!.status).toBe(403);\n\t});\n\n\tit(\"lists matching documents with a query-bound cursor and repository avatar\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet roadmap;\n\t\tfor (let title of [\"Launch notes\", \"Launch checklist\", \"Roadmap\"]) {\n\t\t\tlet channel = await storage.channels.create({\n\t\t\t\tid: crypto.randomUUID(),\n\t\t\t\trepositoryId: \"R_score\",\n\t\t\t\trepositoryOwner: \"octo-org\",\n\t\t\t\trepositoryName: \"score\",\n\t\t\t\ttitle,\n\t\t\t\tcreatedBy: \"U_octocat\",\n\t\t\t\tnow,\n\t\t\t});\n\t\t\tif (title === \"Roadmap\") roadmap = channel;\n\t\t}\n\t\tlet lease = await storage.leases.acquire(\"description-writer\", \"routes\", 60_000);\n\t\tawait storage.channels.publishDescription({\n\t\t\tchannelId: roadmap!.id,\n\t\t\tdescription: \"RFC about payment migration\",\n\t\t\tplanRevision: 2,\n\t\t\tsourceHash: `sha256:${\"a\".repeat(64)}`,\n\t\t\tgeneratorVersion: 1,\n\t\t\tjobId: \"description-job\",\n\t\t\tnow,\n\t\t\tlease: lease!,\n\t\t});\n\t\tlet response = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?query=launch&limit=1\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(response!.status).toBe(200);\n\t\tlet page = await response!.json();\n\t\texpect(page.repository.ownerAvatarUrl).toBe(\"https://avatars.test/octo-org.png\");\n\t\texpect(page.channels[0].title).toMatch(/launch/i);\n\t\texpect(page.nextCursor).toBeString();\n\t\tlet next = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?query=launch&limit=1&cursor=${page.nextCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\texpect((await next!.json()).channels[0].title).toMatch(/launch/i);\n\t\tlet described = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?query=payment\",\n\t\t\tcookie,\n\t\t));\n\t\texpect((await described!.json()).channels).toMatchObject([{\n\t\t\tid: roadmap!.id,\n\t\t\tdescription: \"RFC about payment migration\",\n\t\t\tdescriptionRevision: 1,\n\t\t}]);\n\t\tlet mismatch = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?query=road&cursor=${page.nextCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\texpect(mismatch!.status).toBe(400);\n\t});\n\n\tit(\"excludes archived documents by default and binds cursors to archive mode\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet first = await createChannel(storage, now, \"First active\");\n\t\tlet second = await createChannel(storage, now, \"Second active\");\n\t\tlet archived = await createChannel(storage, now, \"Archived plan\");\n\t\tlet archivedAt = new Date(now.getTime() + 1_000);\n\t\tawait storage.channels.archive({ id: archived.id, now: archivedAt });\n\n\t\tlet defaultResponse = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(defaultResponse!.status).toBe(200);\n\t\tlet defaultPage = await defaultResponse!.json();\n\t\texpect(defaultPage.channels.map((channel: { id: string }) => channel.id).sort()).toEqual(\n\t\t\t[first.id, second.id].sort(),\n\t\t);\n\t\texpect(defaultPage.channels.every((channel: object) => !(\"archivedAt\" in channel))).toBe(true);\n\n\t\tlet includedResponse = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?includeArchived=true\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(includedResponse!.status).toBe(200);\n\t\tlet includedPage = await includedResponse!.json();\n\t\texpect(includedPage.channels).toHaveLength(3);\n\t\texpect(\n\t\t\tincludedPage.channels.find((channel: { id: string }) => channel.id === archived.id),\n\t\t).toMatchObject({ id: archived.id, archivedAt: archivedAt.toISOString() });\n\n\t\tlet activeFirst = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?limit=1\",\n\t\t\tcookie,\n\t\t));\n\t\tlet activeCursor = (await activeFirst!.json()).nextCursor;\n\t\texpect(activeCursor).toBeString();\n\t\tlet activeCursorInArchiveMode = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?limit=1&includeArchived=true&cursor=${activeCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\texpect(activeCursorInArchiveMode!.status).toBe(400);\n\n\t\tlet includedFirst = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?limit=1&includeArchived=true\",\n\t\t\tcookie,\n\t\t));\n\t\tlet includedCursor = (await includedFirst!.json()).nextCursor;\n\t\texpect(includedCursor).toBeString();\n\t\tlet includedCursorInActiveMode = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?limit=1&cursor=${includedCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\texpect(includedCursorInActiveMode!.status).toBe(400);\n\t});\n\n\tit(\"lists unanswered decisions per document and for the whole active catalogue\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet lease = (await storage.leases.acquire(\"writer\", \"routes-test\", 60_000))!;\n\t\tlet commit = (channelId: string, questions: JsonValue[]) =>\n\t\t\tstorage.collaboration.commit({\n\t\t\t\tchannelId,\n\t\t\t\tlease,\n\t\t\t\texpectedRevision: 0,\n\t\t\t\toperationId: crypto.randomUUID(),\n\t\t\t\tepoch: \"epoch\",\n\t\t\t\tsidecar: { questions },\n\t\t\t\tevents: [],\n\t\t\t\tnow,\n\t\t\t});\n\t\tlet older = await createChannel(storage, new Date(now.getTime() - 60_000), \"Older plan\");\n\t\tlet newer = await createChannel(storage, now, \"Newer plan\");\n\t\tlet quiet = await createChannel(storage, now, \"Quiet plan\");\n\t\tawait commit(older.id, [decisionRecord(\"one\", \"open\"), decisionRecord(\"two\", \"reopened\")]);\n\t\tawait commit(newer.id, [decisionRecord(\"three\", \"open\"), decisionRecord(\"four\", \"answered\")]);\n\t\tawait commit(quiet.id, [decisionRecord(\"five\", \"discarded\")]);\n\n\t\tlet first = await (await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?limit=1\",\n\t\t\tcookie,\n\t\t)))!.json();\n\t\texpect(first.channels).toHaveLength(1);\n\t\texpect(first.nextCursor).toBeString();\n\t\texpect(first.unansweredDecisions).toBe(3);\n\t\tlet all = await (await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t)))!.json();\n\t\texpect(\n\t\t\tObject.fromEntries(\n\t\t\t\tall.channels.map((channel: { title: string; unansweredDecisions: number }) => [\n\t\t\t\t\tchannel.title,\n\t\t\t\t\tchannel.unansweredDecisions,\n\t\t\t\t]),\n\t\t\t),\n\t\t).toEqual({ \"Older plan\": 2, \"Newer plan\": 1, \"Quiet plan\": 0 });\n\n\t\tfor (\n\t\t\tlet path of [\n\t\t\t\t\"/api/repositories/octo-org/score/channels?query=plan\",\n\t\t\t\t\"/api/repositories/octo-org/score/channels?includeArchived=true\",\n\t\t\t]\n\t\t) {\n\t\t\tlet page = await (await router.handle(request(path, cookie)))!.json();\n\t\t\texpect(page.channels.length).toBeGreaterThan(0);\n\t\t\texpect(page).not.toHaveProperty(\"unansweredDecisions\");\n\t\t}\n\t});\n\n\tit(\"returns the active decision total after archiving or restoring a document\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet lease = (await storage.leases.acquire(\"writer\", \"routes-test\", 60_000))!;\n\t\tlet leaving = await createChannel(storage, now, \"Leaving plan\");\n\t\tlet staying = await createChannel(storage, now, \"Staying plan\");\n\t\tfor (\n\t\t\tlet [channel, questions] of [\n\t\t\t\t[leaving, [decisionRecord(\"one\", \"open\"), decisionRecord(\"two\", \"reopened\")]],\n\t\t\t\t[staying, [decisionRecord(\"three\", \"open\")]],\n\t\t\t] as const\n\t\t) {\n\t\t\tawait storage.collaboration.commit({\n\t\t\t\tchannelId: channel.id,\n\t\t\t\tlease,\n\t\t\t\texpectedRevision: 0,\n\t\t\t\toperationId: crypto.randomUUID(),\n\t\t\t\tepoch: \"epoch\",\n\t\t\t\tsidecar: { questions: [...questions] },\n\t\t\t\tevents: [],\n\t\t\t\tnow,\n\t\t\t});\n\t\t}\n\t\tlet transition = async (action: \"archive\" | \"restore\") =>\n\t\t\t(await router.handle(request(`/api/channels/${leaving.id}/${action}`, cookie, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t})))!.json();\n\n\t\texpect(await transition(\"archive\")).toMatchObject({\n\t\t\tchannel: { id: leaving.id, unansweredDecisions: 2 },\n\t\t\tunansweredDecisions: 1,\n\t\t});\n\t\texpect(await transition(\"restore\")).toMatchObject({\n\t\t\tchannel: { id: leaving.id, unansweredDecisions: 2 },\n\t\t\tunansweredDecisions: 3,\n\t\t});\n\t});\n\n\tit(\"opens archived documents by slug and UUID as manageable but read-only\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet channel = await createChannel(storage, now, \"Archived direct read\");\n\t\tlet archivedAt = new Date(now.getTime() + 1_000);\n\t\tawait storage.channels.archive({ id: channel.id, now: archivedAt });\n\n\t\tfor (\n\t\t\tlet path of [\n\t\t\t\t`/api/repositories/octo-org/score/documents/${channel.slug}`,\n\t\t\t\t`/api/channels/${channel.id}`,\n\t\t\t]\n\t\t) {\n\t\t\tlet response = await router.handle(request(path, cookie));\n\t\t\texpect(response!.status).toBe(200);\n\t\t\texpect(await response!.json()).toMatchObject({\n\t\t\t\tcanEdit: false,\n\t\t\t\tcanManage: true,\n\t\t\t\tchannel: { id: channel.id, archivedAt: archivedAt.toISOString() },\n\t\t\t});\n\t\t}\n\t});\n\n\tit(\"lets viewers read archived documents but not archive, restore or delete\", async () => {\n\t\tlet { router, storage, github, cookie, archived, restored, deleted, now } = await setup();\n\t\tlet active = await createChannel(storage, now, \"Viewer active\");\n\t\tlet inactive = await createChannel(storage, now, \"Viewer archived\");\n\t\tawait storage.channels.archive({\n\t\t\tid: inactive.id,\n\t\t\tnow: new Date(now.getTime() + 1_000),\n\t\t});\n\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: false, admin: false } };\n\n\t\tlet read = await router.handle(request(`/api/channels/${inactive.id}`, cookie));\n\t\texpect(read!.status).toBe(200);\n\t\texpect(await read!.json()).toMatchObject({ canEdit: false, canManage: false });\n\n\t\tfor (\n\t\t\tlet [method, path] of [\n\t\t\t\t[\"POST\", `/api/channels/${active.id}/archive`],\n\t\t\t\t[\"POST\", `/api/channels/${inactive.id}/restore`],\n\t\t\t\t[\"DELETE\", `/api/channels/${inactive.id}`],\n\t\t\t] as const\n\t\t) {\n\t\t\tlet response = await router.handle(request(path, cookie, {\n\t\t\t\tmethod,\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t}));\n\t\t\texpect(response!.status).toBe(403);\n\t\t}\n\t\texpect(archived).toEqual([]);\n\t\texpect(restored).toEqual([]);\n\t\texpect(deleted).toEqual([]);\n\t\texpect((await storage.channels.get(active.id))!.archivedAt).toBeUndefined();\n\t\texpect((await storage.channels.get(inactive.id))!.archivedAt).toBeDate();\n\t});\n\n\tit(\"archives and restores idempotently for a writer\", async () => {\n\t\tlet { router, storage, cookie, archived, restored, now } = await setup();\n\t\tlet channel = await createChannel(storage, now, \"Lifecycle\");\n\t\tlet transition = (action: \"archive\" | \"restore\") =>\n\t\t\trouter.handle(request(`/api/channels/${channel.id}/${action}`, cookie, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t}));\n\n\t\tlet firstArchive = await transition(\"archive\");\n\t\texpect(firstArchive!.status).toBe(200);\n\t\tlet archivedBody = await firstArchive!.json();\n\t\texpect(archivedBody).toMatchObject({ canEdit: false, canManage: true });\n\t\texpect(archivedBody.channel.archivedAt).toBeString();\n\t\tlet repeatedArchive = await transition(\"archive\");\n\t\texpect(repeatedArchive!.status).toBe(200);\n\t\texpect((await repeatedArchive!.json()).channel.archivedAt)\n\t\t\t.toBe(archivedBody.channel.archivedAt);\n\t\texpect(archived).toEqual([\n\t\t\t{ id: channel.id, changed: true },\n\t\t\t{ id: channel.id, changed: false },\n\t\t]);\n\n\t\tlet firstRestore = await transition(\"restore\");\n\t\texpect(firstRestore!.status).toBe(200);\n\t\tlet restoredBody = await firstRestore!.json();\n\t\texpect(restoredBody).toMatchObject({ canEdit: true, canManage: true });\n\t\texpect(restoredBody.channel).not.toHaveProperty(\"archivedAt\");\n\t\tlet repeatedRestore = await transition(\"restore\");\n\t\texpect(repeatedRestore!.status).toBe(200);\n\t\texpect((await repeatedRestore!.json()).channel).not.toHaveProperty(\"archivedAt\");\n\t\texpect(restored).toEqual([\n\t\t\t{ id: channel.id, changed: true },\n\t\t\t{ id: channel.id, changed: false },\n\t\t]);\n\t});\n\n\tit(\"requires the exact configured Origin for lifecycle mutations\", async () => {\n\t\tlet { router, storage, cookie, archived, restored, deleted, now } = await setup();\n\t\tlet active = await createChannel(storage, now, \"Origin active\");\n\t\tlet inactive = await createChannel(storage, now, \"Origin archived\");\n\t\tawait storage.channels.archive({\n\t\t\tid: inactive.id,\n\t\t\tnow: new Date(now.getTime() + 1_000),\n\t\t});\n\n\t\tfor (\n\t\t\tlet [method, path] of [\n\t\t\t\t[\"POST\", `/api/channels/${active.id}/archive`],\n\t\t\t\t[\"POST\", `/api/channels/${inactive.id}/restore`],\n\t\t\t\t[\"DELETE\", `/api/channels/${inactive.id}`],\n\t\t\t] as const\n\t\t) {\n\t\t\tfor (let origin of [undefined, \"https://chopin.test/\", \"https://chopin.test.evil\"]) {\n\t\t\t\tlet response = await router.handle(request(path, cookie, {\n\t\t\t\t\tmethod,\n\t\t\t\t\theaders: origin ? { origin } : undefined,\n\t\t\t\t}));\n\t\t\t\texpect(response!.status).toBe(403);\n\t\t\t}\n\t\t}\n\t\texpect(archived).toEqual([]);\n\t\texpect(restored).toEqual([]);\n\t\texpect(deleted).toEqual([]);\n\t});\n\n\tit(\"requires archival before deletion and delegates archived deletion\", async () => {\n\t\tlet { router, storage, cookie, deleted, now } = await setup();\n\t\tlet channel = await createChannel(storage, now, \"Delete lifecycle\");\n\t\tlet remove = () =>\n\t\t\trouter.handle(request(`/api/channels/${channel.id}`, cookie, {\n\t\t\t\tmethod: \"DELETE\",\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t}));\n\n\t\tlet active = await remove();\n\t\texpect(active!.status).toBe(409);\n\t\texpect(deleted).toEqual([]);\n\t\texpect(await storage.channels.get(channel.id)).toBeDefined();\n\n\t\tawait storage.channels.archive({\n\t\t\tid: channel.id,\n\t\t\tnow: new Date(now.getTime() + 1_000),\n\t\t});\n\t\tlet archived = await remove();\n\t\texpect(archived!.status).toBe(204);\n\t\texpect(archived!.headers.get(\"cache-control\")).toBe(\"no-store\");\n\t\texpect(await archived!.text()).toBe(\"\");\n\t\texpect(deleted).toEqual([channel.id]);\n\t\texpect(await storage.channels.get(channel.id)).toBeUndefined();\n\t});\n\n\tit(\"creates a unique generated document when a title is omitted\", async () => {\n\t\tlet { router, cookie } = await setup();\n\t\tlet create = () =>\n\t\t\trouter.handle(request(\n\t\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\t\tcookie,\n\t\t\t\t{ method: \"POST\", headers: { origin: \"https://chopin.test\" }, body: \"{}\" },\n\t\t\t));\n\t\tlet first = await create();\n\t\tlet second = await create();\n\t\texpect(first!.status).toBe(201);\n\t\texpect(second!.status).toBe(201);\n\t\tlet firstBody = await first!.json();\n\t\tlet secondBody = await second!.json();\n\t\texpect(firstBody.channel.title).toMatch(/^[a-z]+-[a-z]+$/);\n\t\texpect(secondBody.channel.title).not.toBe(firstBody.channel.title);\n\t});\n\n\tit(\"tries another generated title when its random starting title is reserved\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup(() => 0);\n\t\tawait storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"amber-anchor\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tlet created = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t\t{ method: \"POST\", headers: { origin: \"https://chopin.test\" }, body: \"{}\" },\n\t\t));\n\t\texpect(created!.status).toBe(201);\n\t\texpect((await created!.json()).channel.title).toBe(\"amber-arch\");\n\t});\n\n\tit(\"keeps viewers read-only and requires a matching Origin\", async () => {\n\t\tlet { router, github, cookie } = await setup();\n\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: false, admin: false } };\n\t\tlet viewer = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t\t{\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { origin: \"https://chopin.test\" },\n\t\t\t\tbody: JSON.stringify({ title: \"No\" }),\n\t\t\t},\n\t\t));\n\t\texpect(viewer!.status).toBe(403);\n\n\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: true, admin: false } };\n\t\tlet csrf = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels\",\n\t\t\tcookie,\n\t\t\t{\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: { origin: \"https://evil.test\" },\n\t\t\t\tbody: JSON.stringify({ title: \"No\" }),\n\t\t\t},\n\t\t));\n\t\texpect(csrf!.status).toBe(403);\n\t});\n\n\tit(\"paginates opaquely and rejects malformed cursors\", async () => {\n\t\tlet { router, storage, cookie, now } = await setup();\n\t\tlet ids = [\n\t\t\t\"019c1234-1234-5123-8123-123456789abc\",\n\t\t\t\"119c1234-1234-4123-8123-123456789abc\",\n\t\t\t\"219c1234-1234-5123-8123-123456789abc\",\n\t\t];\n\t\tfor (let [index, id] of ids.entries()) {\n\t\t\tawait storage.channels.create({\n\t\t\t\tid,\n\t\t\t\trepositoryId: \"R_score\",\n\t\t\t\trepositoryOwner: \"octo-org\",\n\t\t\t\trepositoryName: \"score\",\n\t\t\t\ttitle: `Channel ${index}`,\n\t\t\t\tcreatedBy: \"U_octocat\",\n\t\t\t\tnow,\n\t\t\t});\n\t\t}\n\t\tlet first = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?limit=1\",\n\t\t\tcookie,\n\t\t));\n\t\tlet page = await first!.json();\n\t\texpect(page.channels).toHaveLength(1);\n\t\texpect(page.channels[0].id).toBe(ids[0]);\n\t\texpect(page.nextCursor).toBeString();\n\t\tlet second = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?limit=1&cursor=${page.nextCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\tlet secondPage = await second!.json();\n\t\texpect(secondPage.channels[0].id).toBe(ids[1]);\n\t\texpect(secondPage.nextCursor).toBeString();\n\t\tlet third = await router.handle(request(\n\t\t\t`/api/repositories/octo-org/score/channels?limit=1&cursor=${secondPage.nextCursor}`,\n\t\t\tcookie,\n\t\t));\n\t\texpect((await third!.json()).channels[0].id).toBe(ids[2]);\n\t\tlet bad = await router.handle(request(\n\t\t\t\"/api/repositories/octo-org/score/channels?cursor=not-json\",\n\t\t\tcookie,\n\t\t));\n\t\texpect(bad!.status).toBe(400);\n\t});\n\n\tit(\"refuses a channel whose stored repository id no longer matches\", async () => {\n\t\tlet { router, storage, github, cookie, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_other\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Hidden\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tgithub.repo = { ...github.repo, id: \"R_score\" };\n\t\tlet response = await router.handle(request(`/api/channels/${channel.id}`, cookie));\n\t\texpect(response!.status).toBe(404);\n\t});\n\n\tit(\"lets an editor explicitly release the Copilot owner\", async () => {\n\t\tlet { router, storage, cookie, sessionId, reset, now } = await setup();\n\t\tlet channel = await storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_score\",\n\t\t\trepositoryOwner: \"octo-org\",\n\t\t\trepositoryName: \"score\",\n\t\t\ttitle: \"Reset\",\n\t\t\tcreatedBy: \"U_octocat\",\n\t\t\tnow,\n\t\t});\n\t\tawait storage.channels.claimAgentOwner(channel.id, sessionId, now);\n\t\tlet response = await router.handle(request(\n\t\t\t`/api/channels/${channel.id}/agent/reset`,\n\t\t\tcookie,\n\t\t\t{ method: \"POST\", headers: { origin: \"https://chopin.test\" } },\n\t\t));\n\t\texpect(response!.status).toBe(204);\n\t\texpect(reset).toEqual([channel.id]);\n\t\texpect((await storage.collaboration.load(channel.id, now))!.agent!.ownerSessionId)\n\t\t\t.toBeUndefined();\n\t});\n\n\tdescribe(\"GitHub references\", () => {\n\t\tfunction references(channelId: string, refs: string[]) {\n\t\t\tlet query = refs.map(ref => `ref=${encodeURIComponent(ref)}`).join(\"&\");\n\t\t\treturn `/api/channels/${channelId}/github-references?${query}`;\n\t\t}\n\n\t\tit(\"requires a session and read access to the document's repository\", async () => {\n\t\t\tlet { router, storage, github, referenceSource, cookie, now } = await setup();\n\t\t\tlet channel = await createChannel(storage, now, \"Pills\");\n\t\t\tlet path = references(channel.id, [\"octo-org/score/pull/1\"]);\n\t\t\texpect((await router.handle(request(path)))!.status).toBe(401);\n\n\t\t\tgithub.repo = { ...github.repo, permissions: { pull: false, push: false, admin: false } };\n\t\t\texpect((await router.handle(request(path, cookie)))!.status).toBe(404);\n\t\t\tgithub.repo = { ...github.repo, permissions: { pull: true, push: false, admin: false } };\n\t\t\tgithub.affiliated = false;\n\t\t\texpect((await router.handle(request(path, cookie)))!.status).toBe(404);\n\t\t\texpect(\n\t\t\t\t(await router.handle(request(references(crypto.randomUUID(), [\"a/b/pull/1\"]), cookie)))!\n\t\t\t\t\t.status,\n\t\t\t).toBe(404);\n\t\t\texpect(referenceSource.fetched).toEqual([]);\n\t\t});\n\n\t\tit(\"summarizes installed references and hides everything else\", async () => {\n\t\t\tlet { router, storage, referenceSource, cookie, now } = await setup();\n\t\t\tlet channel = await createChannel(storage, now, \"Pills\");\n\t\t\tlet response = await router.handle(request(\n\t\t\t\treferences(channel.id, [\n\t\t\t\t\t\"octo-org/score/pull/1\",\n\t\t\t\t\t\"octo-org/tools/pull/2\",\n\t\t\t\t\t\"octo-org/score/issues/3\",\n\t\t\t\t\t\"octo-org/secret/pull/4\",\n\t\t\t\t\t\"elsewhere/score/pull/5\",\n\t\t\t\t\t\"octo-org/score/pull/1\",\n\t\t\t\t]),\n\t\t\t\tcookie,\n\t\t\t));\n\t\t\texpect(response!.status).toBe(200);\n\t\t\texpect(response!.headers.get(\"cache-control\")).toBe(\"no-store\");\n\t\t\tlet body = await response!.json();\n\t\t\texpect(Object.keys(body.references)).toHaveLength(5);\n\t\t\texpect(body.references[\"octo-org/score/pull/1\"]).toMatchObject({\n\t\t\t\tstatus: \"ok\",\n\t\t\t\tsummary: { kind: \"pull\", number: 1, state: \"open\" },\n\t\t\t});\n\t\t\texpect(body.references[\"octo-org/tools/pull/2\"].status).toBe(\"ok\");\n\t\t\texpect(body.references[\"octo-org/score/issues/3\"]).toEqual({ status: \"unavailable\" });\n\t\t\texpect(body.references[\"octo-org/secret/pull/4\"]).toEqual({ status: \"unavailable\" });\n\t\t\texpect(body.references[\"elsewhere/score/pull/5\"]).toEqual({ status: \"unavailable\" });\n\t\t\texpect(referenceSource.fetched.map(call => call.path).sort()).toEqual([\n\t\t\t\t\"octo-org/score/issues/3\",\n\t\t\t\t\"octo-org/score/pull/1\",\n\t\t\t\t\"octo-org/tools/pull/2\",\n\t\t\t]);\n\n\t\t\treferenceSource.rateLimited = true;\n\t\t\tlet limited = await router.handle(request(\n\t\t\t\treferences(channel.id, [\"octo-org/score/pull/9\"]),\n\t\t\t\tcookie,\n\t\t\t));\n\t\t\texpect((await limited!.json()).references[\"octo-org/score/pull/9\"]).toEqual({\n\t\t\t\tstatus: \"rate-limited\",\n\t\t\t});\n\t\t});\n\n\t\tit(\"rejects empty, oversized and malformed batches\", async () => {\n\t\t\tlet { router, storage, referenceSource, cookie, now } = await setup();\n\t\t\tlet channel = await createChannel(storage, now, \"Pills\");\n\t\t\tlet twenty = Array.from({ length: 20 }, (_, index) => `octo-org/score/pull/${index + 1}`);\n\t\t\tfor (\n\t\t\t\tlet refs of [\n\t\t\t\t\t[],\n\t\t\t\t\t[...twenty, \"octo-org/score/pull/21\"],\n\t\t\t\t\t[\"https://github.com/octo-org/score/pull/1\"],\n\t\t\t\t\t[\"octo-org/score/pulls/1\"],\n\t\t\t\t\t[\"octo-org/score/pull/1\", \"octo-org/score/commit/abc\"],\n\t\t\t\t]\n\t\t\t) {\n\t\t\t\tlet response = await router.handle(request(references(channel.id, refs), cookie));\n\t\t\t\texpect(response!.status).toBe(400);\n\t\t\t}\n\t\t\texpect(referenceSource.fetched).toEqual([]);\n\t\t\tlet full = await router.handle(request(references(channel.id, twenty), cookie));\n\t\t\texpect(full!.status).toBe(200);\n\t\t});\n\n\t\tit(\"serves a cached summary to another user only after their own access check\", async () => {\n\t\t\tlet { router, storage, referenceSource, cookie, otherCookie, now } = await setup();\n\t\t\tlet channel = await createChannel(storage, now, \"Pills\");\n\t\t\tlet path = references(channel.id, [\"octo-org/tools/pull/2\"]);\n\t\t\tlet first = await router.handle(request(path, cookie));\n\t\t\texpect((await first!.json()).references[\"octo-org/tools/pull/2\"].status).toBe(\"ok\");\n\n\t\t\treferenceSource.access.set(\"ghu_hubot\", new Set([\"score\"]));\n\t\t\tlet denied = await router.handle(request(path, otherCookie));\n\t\t\texpect(denied!.status).toBe(200);\n\t\t\texpect((await denied!.json()).references[\"octo-org/tools/pull/2\"]).toEqual({\n\t\t\t\tstatus: \"unavailable\",\n\t\t\t});\n\n\t\t\treferenceSource.access.set(\"ghu_hubot\", new Set([\"score\", \"tools\"]));\n\t\t\tlet allowed = await router.handle(request(path, otherCookie));\n\t\t\texpect((await allowed!.json()).references[\"octo-org/tools/pull/2\"].status).toBe(\"ok\");\n\t\t\texpect(referenceSource.fetched).toEqual([{\n\t\t\t\ttoken: \"ghu_user\",\n\t\t\t\tpath: \"octo-org/tools/pull/2\",\n\t\t\t}]);\n\t\t});\n\t});\n});\n","editable",false,"branch","documentNavigation","repo","githubnext/chopin","repoId","7d1a8ac3-35b0-4dea-85d4-06a980f3bada","ownerId","org:89615882","site","nexthub","private","admin","settings","maintainer","triage","starred","stars",0,"watchers","watching","pinned","notify","views",[183,184,185,186,187,188,189,190,191,192,193,194,195],"navigation",{"_55":56,"_139":140,"_141":142,"_143":144,"_145":146,"_147":148,"_149":150},"sources",[],"viewer","meta",{"_131":132,"_133":134,"_135":136,"_43":32,"_137":14,"_138":32,"_49":50,"_51":50},"branches",[74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,14,127,128,129,130],"tags",[70,71,72,73],"cloneUrl","https://git.nexthub.sh/githubnext/chopin.git","color-controls-slice-1","color-controls-slice-2","color-controls-slice-3","color-controls-slice-4","Krzysztof-Cieslak-patch-1","Krzysztof-Cieslak-patch-2","Maggie/app-preview-toolkit","Maggie/ci-playwright-install-timeout","Maggie/collaborative-visual-decision","Maggie/design-audit","Maggie/generic-visual-decision-runtime","Maggie/impeccable-chopin-metadata","Maggie/jev-chat-product","Maggie/jev-composed-assessment","Maggie/native-document-layouts","Maggie/openui-composition-product","Maggie/openui-composition-trial","Maggie/planner-visual-authoring","Maggie/planner-visual-requests","Maggie/visual-selection-eval","artifacts/pr-419-live-preview-20261009","automation/pr-maintenance-state","automation/use-effect/callout-disabled-picker-8cf9e49ba5c09471","automation/use-effect/collaboration-options-ref-4e3a5a08a879a5ae","automation/use-effect/room-workspace-effective-access-a57d40866c71bed0","chore/bun-1.4.2","color-controls","color-controls-plan","comments","design-pr-assets","design/archived-decisions-badge","design/channel-route-remount","design/chat-decision-entry","design/conversation-analysis-markers","design/decision-evidence","design/settled-line-icon","dev/integration","diagram-step-controls","feat/liveapp-frontend-pilot","feat/local-experiments","feat/local-launcher-tracer","fix/autolink-mdx-crash","github-pills/2-pills","github-pills/3-hover-card","maggie/app-preview-toolkit","maggie/ci-playwright-install-timeout","maggie/collaborative-visual-decision","maggie/design-audit","maggie/generic-visual-decision-runtime","maggie/impeccable-chopin-metadata","maggie/jev-composed-assessment","maggie/native-document-layouts","maggie/openui-composition-product","maggie/openui-composition-trial","maggie/planner-visual-authoring","maggie/planner-visual-requests","maggie/visual-selection-eval","plain-text-fence-chrome","tokens/09-copy","wireframes/2-renderer","wireframes/3-planner","description","Let's compose rich plans together","owner","githubnext","section","","head","empty","pins",[165,166,167],"documents",{"_160":161,"_162":163},"code",{"_156":157,"_158":159},"automations",{"_153":154,"_155":-5},"delivery",{"_151":50,"_152":-5},"tag","04zvKQ8QOrDUF8TO1Ovz0Zy8_TT","releases","applications","workflows",3,"deployments","commits",1000,"changes",13,"counts",{"_164":163},"total",11,"issue",{"_168":158,"_170":181,"_15":158,"_172":182,"_53":174,"_175":32,"_176":174,"_177":159},{"_168":178,"_170":179,"_15":178,"_172":180,"_53":174,"_175":32,"_176":174,"_177":50},{"_168":169,"_170":171,"_15":169,"_172":173,"_53":174,"_175":32,"_176":174,"_177":163},"id","issues","name","Issues","filters",{},true,"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_168":158,"_170":181,"_15":158,"_172":226,"_53":174,"_175":32,"_176":174},{"_168":178,"_170":179,"_15":178,"_172":225,"_53":174,"_175":32,"_176":174},{"_168":169,"_170":171,"_15":169,"_172":224,"_53":174,"_175":32,"_176":174},{"_168":221,"_170":222,"_15":221,"_172":223,"_53":32,"_175":32,"_176":174},{"_168":218,"_170":219,"_15":218,"_172":220,"_53":32,"_175":32,"_176":174},{"_168":153,"_170":216,"_15":145,"_172":217,"_53":32,"_175":32,"_176":174},{"_168":155,"_170":213,"_15":214,"_172":215,"_53":32,"_175":32,"_176":174},{"_168":151,"_170":211,"_15":151,"_172":212,"_53":32,"_175":32,"_176":174},{"_168":207,"_170":208,"_15":209,"_172":210,"_53":32,"_175":32,"_176":174},{"_168":141,"_170":205,"_15":141,"_172":206,"_53":32,"_175":32,"_176":32},{"_168":202,"_170":203,"_15":202,"_172":204,"_53":32,"_175":32,"_176":32},{"_168":199,"_170":200,"_15":199,"_172":201,"_53":32,"_175":32,"_176":32},{"_168":196,"_170":197,"_15":196,"_172":198,"_53":32,"_175":32,"_176":32},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user","agents",[],"now",1794436676300,"sidebar","expanded"]