@storyshelf/app 0.10.0-next-6e77ceb → 0.10.0-next-e151b58

package/dist/index.mjs

@@ -380,7 +380,7 @@ function registerDocs(app) {
 * from source (dev server, tests).
 */
 function packageVersion() {
-	return "0.10.0-next-6e77ceb";
+	return "0.10.0-next-e151b58";
 }
 export { createAuthSystemHook, createShelfApp, createShelfLogger };
 

package/dist/routers/builds.handlers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"builds.handlers.mjs","names":[],"sources":["../../src/routers/builds.handlers.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport {\n  ReferenceGenerationConflict,\n  type DatabaseAdapter,\n} from \"@storyshelf/core/adapter/database\";\nimport type { StorageAdapter } from \"@storyshelf/core/adapter/storage\";\nimport { emitWebhookEvent } from \"@storyshelf/core/adapter/webhook-events\";\nimport {\n  BaselineApprovalConflict,\n  BaselineModel,\n  BaselineWriteConflict,\n} from \"@storyshelf/core/models\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Build, Snapshot } from \"@storyshelf/core/schema\";\nimport { type BuildStatus, type ProjectRole, BUILD_STATUSES } from \"@storyshelf/core/types\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { Readable, Transform } from \"node:stream\";\nimport type { ReadableStream as NodeWebStream } from \"node:stream/web\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { requestBuildState } from \"../git-status.ts\";\nimport { notifyProject } from \"../notify.ts\";\nimport { getStore } from \"../store.ts\";\nimport { assertBaselineCurrent, baselineChanged } from \"./baseline-guard.ts\";\nimport { notFound } from \"./helpers.ts\";\n/**\n * Create a build record with labels and the `build:created` webhook.\n * Shared by the build-creation route.\n */\nexport async function createBuildRecord(\n  project: Project,\n  meta: BuildCreateMetadata,\n): Promise<Build> {\n  const { db, config } = getStore();\n  if (!meta.gitSha || !meta.gitBranch) {\n    throw new HTTPException(400, {\n      message: \"gitSha and gitBranch are required (revision SHA and baseline namespace)\",\n    });\n  }\n  const build = await new BuildModel(db).create(project.id, {\n    gitSha: meta.gitSha,\n    gitBranch: meta.gitBranch,\n    isDefault: meta.gitBranch === project.gitDefaultBranch,\n    authorEmail: meta.authorEmail,\n    authorName: meta.authorName,\n    message: meta.message,\n    affectedOnly: meta.affectedOnly,\n    baselineSha: await resolveBaselineSha(db, project.id, meta.gitBranch, meta.gitSha),\n  });\n  if (meta.labels && meta.labels.length > 0) {\n    await attachLabels(db, project.id, build.id, meta.labels);\n  }\n  await emitWebhookEvent(\n    db,\n    { webhooks: getStore().db.tables.webhooks },\n    project.id,\n    \"build:created\",\n    {\n      buildId: build.id,\n      gitSha: meta.gitSha,\n      gitBranch: meta.gitBranch,\n      authorEmail: meta.authorEmail,\n      authorName: meta.authorName,\n      message: meta.message,\n    },\n    credentialKeys(config),\n  );\n  await notifyProject(\n    project,\n    \"build:created\",\n    {\n      buildId: build.id,\n      gitSha: meta.gitSha,\n      gitBranch: meta.gitBranch,\n      authorEmail: meta.authorEmail,\n      authorName: meta.authorName,\n      message: meta.message,\n    },\n    `/builds/${build.id}`,\n  );\n  await requestBuildState(build.id);\n  return build;\n}\n\n/**\n * Stream a raw request body into storage with a byte cap, counting the bytes as they pass (a\n * chunked upload has no `Content-Length`). Resolves to the bytes stored.\n * Throws 400 for a missing body, 413 once `maxBytes` is exceeded.\n */\nexport async function storeUploadStream(\n  storage: StorageAdapter,\n  path: string,\n  body: ReadableStream<Uint8Array> | null,\n  maxBytes: number,\n): Promise<number> {\n  if (!body) {\n    throw new HTTPException(400, { message: \"Missing request body\" });\n  }\n  let seen = 0;\n  const limiter = new Transform({\n    transform(\n      chunk: Buffer,\n      _encoding: string,\n      callback: (error?: Error | null, data?: Buffer) => void,\n    ): void {\n      seen += chunk.length;\n      if (seen > maxBytes) {\n        callback(new Error(`Upload exceeds ${maxBytes} byte limit`));\n      } else {\n        callback(null, chunk);\n      }\n    },\n  });\n  try {\n    const nodeBody = Readable.fromWeb(body as unknown as NodeWebStream);\n    await storage.writeStream(path, nodeBody.pipe(limiter));\n    return seen;\n  } catch (error) {\n    if (seen > maxBytes) {\n      throw new HTTPException(413, { message: \"Upload exceeds size limit\" });\n    }\n    throw error;\n  }\n}\n\n/** Query filters accepted by the build list endpoint. */\nexport const buildListQuery = z.object({\n  status: z.enum(BUILD_STATUSES).optional(),\n  branch: z.string().optional(),\n  labelKey: z.string().optional(),\n  labelValue: z.string().optional(),\n});\n\n/** Fetch a build scoped to its project, throwing 404 when it does not belong. */\nexport async function buildForProject(projectId: string, buildId: string): Promise<Build> {\n  const build = await new BuildModel(getStore().db).get(buildId);\n  if (!build || build.projectId !== projectId) {\n    notFound(\"Build not found\");\n  }\n  return build;\n}\n\n/** Fetch a snapshot scoped to its build, throwing 404 when it does not belong. */\nexport async function snapshotForBuild(\n  build: { id: string },\n  snapshotId: string,\n): Promise<Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== build.id) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n\n/** Roll snapshot statuses up into the build's review status. */\nfunction rollupStatus(snapshots: Snapshot[]): \"reviewing\" | \"rejected\" | \"approved\" {\n  if (snapshots.some((s) => s.status === \"new\" || s.status === \"changed\")) {\n    return \"reviewing\";\n  }\n  return snapshots.some((s) => s.status === \"rejected\") ? \"rejected\" : \"approved\";\n}\n\n/** Recompute a build's counts and roll its status up from its snapshots. */\nexport async function refreshBuild(buildId: string): Promise<void> {\n  const { db } = getStore();\n  await new BuildModel(db).updateCounts(buildId);\n  const snapshots = await new SnapshotModel(db).listByBuild(buildId);\n  const status = rollupStatus(snapshots);\n  const build = await new BuildModel(db).get(buildId);\n  // A cancelled build is terminal: its snapshots may still be touched, but no verdict is announced.\n  if (!build || build.status === \"cancelled\") return;\n  await new BuildModel(db).setStatus(buildId, status);\n  await announceBuildStatus(buildId, status, { snapshotCount: snapshots.length });\n}\n\n/**\n * Tell the world a build reached `status`: its git channels, the `build:<status>` webhook and the\n * project's notification channels. Every route that moves a build to a decided status ends here.\n */\nexport async function announceBuildStatus(\n  buildId: string,\n  status: BuildStatus,\n  extra: { snapshotCount?: number } = {},\n): Promise<void> {\n  const { db, config } = getStore();\n  const build = await new BuildModel(db).get(buildId);\n  if (!build) return;\n  await requestBuildState(buildId);\n  const payload = { buildId, status, ...extra };\n  await emitWebhookEvent(\n    db,\n    { webhooks: getStore().db.tables.webhooks },\n    build.projectId,\n    `build:${status}`,\n    payload,\n    credentialKeys(config),\n  );\n  const project = await new ProjectModel(db).get(build.projectId);\n  if (!project) return;\n  await notifyProject(project, `build:${status}`, payload, `/builds/${buildId}`);\n}\n\n/**\n * Approve a snapshot, promote its screenshot to baseline, and refresh the build.\n * Refuses with 409 when the baseline changed since the diff, unless `force` is set.\n * Bulk callers pass `deferRefresh` and call {@link refreshBuild} once, so the build's\n * outcome (and its git status) is announced a single time.\n */\nexport async function approveSnapshot(\n  snapshotId: string,\n  userId: string | null,\n  options: { force?: boolean; deferRefresh?: boolean } = {},\n): Promise<void> {\n  const { db, config } = getStore();\n  const snapshots = new SnapshotModel(db);\n  const snapshot = await snapshots.get(snapshotId);\n  if (!snapshot) {\n    notFound(\"Snapshot not found\");\n  }\n  const project = await new ProjectModel(db).get(snapshot.projectId);\n  const build = await new BuildModel(db).get(snapshot.buildId);\n  if (!project || !build) {\n    notFound(\"Project or build not found\");\n  }\n  if (build.status === \"cancelled\") {\n    throw new HTTPException(409, { message: \"The build was cancelled; retry it to review it\" });\n  }\n  await assertBaselineCurrent(project, build, snapshot, options.force ?? false);\n  if (!db.buildReferenceLifecycle) await snapshots.review(snapshotId, \"approved\", userId);\n  const baselines = new BaselineModel(db, undefined, getStore().storage, credentialKeys(config));\n  const prior = await baselines.getFor(\n    project.id,\n    snapshot.storyId,\n    snapshot.viewportName,\n    build.gitBranch,\n    snapshot.browser,\n  );\n  try {\n    await baselines.upsert(\n      project.id,\n      snapshot.storyId,\n      snapshot.viewportName,\n      build.gitBranch,\n      snapshot.id,\n      snapshot.screenshotPath,\n      undefined,\n      {\n        browser: snapshot.browser,\n        mode: snapshot.mode,\n        approval: db.buildReferenceLifecycle\n          ? { snapshot, reviewedBy: userId, force: options.force ?? false, branch: build.gitBranch }\n          : undefined,\n      },\n    );\n  } catch (error) {\n    if (error instanceof BaselineWriteConflict || error instanceof ReferenceGenerationConflict) {\n      if (error instanceof BaselineApprovalConflict && error.driftStatus)\n        throw baselineChanged(snapshot.id, error.driftStatus);\n      throw new HTTPException(409, { message: error.message });\n    }\n    throw error;\n  }\n  await notifyProject(\n    project,\n    prior ? \"baseline:updated\" : \"baseline:created\",\n    {\n      storyId: snapshot.storyId,\n      viewport: snapshot.viewportName,\n      browser: snapshot.browser ?? \"chromium\",\n      branch: build.gitBranch,\n      snapshotId: snapshot.id,\n      buildId: build.id,\n    },\n    `/builds/${build.id}`,\n  );\n  if (!options.deferRefresh) {\n    await refreshBuild(build.id);\n  }\n}\n\n/** Roles permitted to view builds, snapshots, and comments. */\nexport const VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n/** Roles permitted to upload builds and write comments. */\nexport const DEVELOPER_ROLES: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n/** Roles permitted to approve or reject snapshots and delete builds. */\nexport const APPROVER_ROLES: readonly ProjectRole[] = [\"approver\", \"admin\"];\n\n/** JSON input schema for creating a build before streaming its bundle. */\nexport const buildCreateJsonSchema = z\n  .object({\n    gitSha: z.string().min(1),\n    gitBranch: z.string().min(1),\n    authorEmail: z.string().optional(),\n    authorName: z.string().optional(),\n    message: z.string().optional(),\n    affectedOnly: z.boolean().optional(),\n    labels: z.array(z.object({ key: z.string().min(1), value: z.string() })).optional(),\n  })\n  .openapi(\"BuildCreate\");\n\n/** Metadata accepted by either build-creation route. */\nexport interface BuildCreateMetadata {\n  gitSha: string;\n  gitBranch: string;\n  authorEmail?: string;\n  authorName?: string;\n  message?: string;\n  affectedOnly?: boolean;\n  labels?: { key: string; value: string }[];\n}\n\n/** Latest prior revision on a branch with a build, or null for first builds. */\nasync function resolveBaselineSha(\n  db: DatabaseAdapter,\n  projectId: string,\n  branch: string,\n  sha: string,\n): Promise<string | null> {\n  const builds = await new BuildModel(db).list(projectId, { branch });\n  return builds.find((build) => build.gitSha !== sha)?.gitSha ?? null;\n}\n\n/* oxlint-disable eslint/no-await-in-loop -- label attach is intentionally sequential */\nasync function attachLabels(\n  db: DatabaseAdapter,\n  projectId: string,\n  buildId: string,\n  labels: { key: string; value: string }[],\n): Promise<void> {\n  const models = new LabelModel(db);\n  for (const { key, value } of labels) {\n    const existing = await models.getType(projectId, key);\n    if (!existing) {\n      await models.createType(projectId, { key, name: key });\n    }\n    await models.attach(projectId, buildId, key, value);\n  }\n}\n/* oxlint-enable eslint/no-await-in-loop */\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAgCA,eAAsB,kBACpB,SACA,MACgB;CAChB,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,WACxB,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,0EACX,CAAC;CAEH,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;EACxD,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,WAAW,KAAK,cAAc,QAAQ;EACtC,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,SAAS,KAAK;EACd,cAAc,KAAK;EACnB,aAAa,MAAM,mBAAmB,IAAI,QAAQ,IAAI,KAAK,WAAW,KAAK,MAAM;CACnF,CAAC;CACD,IAAI,KAAK,UAAU,KAAK,OAAO,SAAS,GACtC,MAAM,aAAa,IAAI,QAAQ,IAAI,MAAM,IAAI,KAAK,MAAM;CAE1D,MAAM,iBACJ,IACA,EAAE,UAAU,SAAS,CAAC,CAAC,GAAG,OAAO,SAAS,GAC1C,QAAQ,IACR,iBACA;EACE,SAAS,MAAM;EACf,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,SAAS,KAAK;CAChB,GACA,eAAe,MAAM,CACvB;CACA,MAAM,cACJ,SACA,iBACA;EACE,SAAS,MAAM;EACf,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,SAAS,KAAK;CAChB,GACA,WAAW,MAAM,IACnB;CACA,MAAM,kBAAkB,MAAM,EAAE;CAChC,OAAO;AACT;;;;;;AAOA,eAAsB,kBACpB,SACA,MACA,MACA,UACiB;CACjB,IAAI,CAAC,MACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,uBAAuB,CAAC;CAElE,IAAI,OAAO;CACX,MAAM,UAAU,IAAI,UAAU,EAC5B,UACE,OACA,WACA,UACM;EACN,QAAQ,MAAM;EACd,IAAI,OAAO,UACT,yBAAS,IAAI,MAAM,kBAAkB,SAAS,YAAY,CAAC;OAE3D,SAAS,MAAM,KAAK;CAExB,EACF,CAAC;CACD,IAAI;EACF,MAAM,WAAW,SAAS,QAAQ,IAAgC;EAClE,MAAM,QAAQ,YAAY,MAAM,SAAS,KAAK,OAAO,CAAC;EACtD,OAAO;CACT,SAAS,OAAO;EACd,IAAI,OAAO,UACT,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,4BAA4B,CAAC;EAEvE,MAAM;CACR;AACF;;AAGA,MAAa,iBAAiB,EAAE,OAAO;CACrC,QAAQ,EAAE,KAAK,cAAc,CAAC,CAAC,SAAS;CACxC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;;AAGD,eAAsB,gBAAgB,WAAmB,SAAiC;CACxF,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;CAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,WAChC,SAAS,iBAAiB;CAE5B,OAAO;AACT;;AAGA,eAAsB,iBACpB,OACA,YACmB;CACnB,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,MAAM,IAC1C,SAAS,oBAAoB;CAE/B,OAAO;AACT;;AAGA,SAAS,aAAa,WAA8D;CAClF,IAAI,UAAU,MAAM,MAAM,EAAE,WAAW,SAAS,EAAE,WAAW,SAAS,GACpE,OAAO;CAET,OAAO,UAAU,MAAM,MAAM,EAAE,WAAW,UAAU,IAAI,aAAa;AACvE;;AAGA,eAAsB,aAAa,SAAgC;CACjE,MAAM,EAAE,OAAO,SAAS;CACxB,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,aAAa,OAAO;CAC7C,MAAM,YAAY,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC,YAAY,OAAO;CACjE,MAAM,SAAS,aAAa,SAAS;CACrC,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO;CAElD,IAAI,CAAC,SAAS,MAAM,WAAW,aAAa;CAC5C,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,SAAS,MAAM;CAClD,MAAM,oBAAoB,SAAS,QAAQ,EAAE,eAAe,UAAU,OAAO,CAAC;AAChF;;;;;AAMA,eAAsB,oBACpB,SACA,QACA,QAAoC,CAAC,GACtB;CACf,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO;CAClD,IAAI,CAAC,OAAO;CACZ,MAAM,kBAAkB,OAAO;CAC/B,MAAM,UAAU;EAAE;EAAS;EAAQ,GAAG;CAAM;CAC5C,MAAM,iBACJ,IACA,EAAE,UAAU,SAAS,CAAC,CAAC,GAAG,OAAO,SAAS,GAC1C,MAAM,WACN,SAAS,UACT,SACA,eAAe,MAAM,CACvB;CACA,MAAM,UAAU,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;CAC9D,IAAI,CAAC,SAAS;CACd,MAAM,cAAc,SAAS,SAAS,UAAU,SAAS,WAAW,SAAS;AAC/E;;;;;;;AAQA,eAAsB,gBACpB,YACA,QACA,UAAuD,CAAC,GACzC;CACf,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,MAAM,YAAY,IAAI,cAAc,EAAE;CACtC,MAAM,WAAW,MAAM,UAAU,IAAI,UAAU;CAC/C,IAAI,CAAC,UACH,SAAS,oBAAoB;CAE/B,MAAM,UAAU,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,SAAS,SAAS;CACjE,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;CAC3D,IAAI,CAAC,WAAW,CAAC,OACf,SAAS,4BAA4B;CAEvC,IAAI,MAAM,WAAW,aACnB,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,iDAAiD,CAAC;CAE5F,MAAM,sBAAsB,SAAS,OAAO,UAAU,QAAQ,SAAS,KAAK;CAC5E,IAAI,CAAC,GAAG,yBAAyB,MAAM,UAAU,OAAO,YAAY,YAAY,MAAM;CACtF,MAAM,YAAY,IAAI,cAAc,IAAI,KAAA,GAAW,SAAS,CAAC,CAAC,SAAS,eAAe,MAAM,CAAC;CAC7F,MAAM,QAAQ,MAAM,UAAU,OAC5B,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,SAAS,OACX;CACA,IAAI;EACF,MAAM,UAAU,OACd,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,SAAS,IACT,SAAS,gBACT,KAAA,GACA;GACE,SAAS,SAAS;GAClB,MAAM,SAAS;GACf,UAAU,GAAG,0BACT;IAAE;IAAU,YAAY;IAAQ,OAAO,QAAQ,SAAS;IAAO,QAAQ,MAAM;GAAU,IACvF,KAAA;EACN,CACF;CACF,SAAS,OAAO;EACd,IAAI,iBAAiB,yBAAyB,iBAAiB,6BAA6B;GAC1F,IAAI,iBAAiB,4BAA4B,MAAM,aACrD,MAAM,gBAAgB,SAAS,IAAI,MAAM,WAAW;GACtD,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,MAAM,QAAQ,CAAC;EACzD;EACA,MAAM;CACR;CACA,MAAM,cACJ,SACA,QAAQ,qBAAqB,oBAC7B;EACE,SAAS,SAAS;EAClB,UAAU,SAAS;EACnB,SAAS,SAAS,WAAW;EAC7B,QAAQ,MAAM;EACd,YAAY,SAAS;EACrB,SAAS,MAAM;CACjB,GACA,WAAW,MAAM,IACnB;CACA,IAAI,CAAC,QAAQ,cACX,MAAM,aAAa,MAAM,EAAE;AAE/B;;AAGA,MAAa,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;;AAE7F,MAAa,kBAA0C;CAAC;CAAa;CAAY;AAAO;;AAExF,MAAa,iBAAyC,CAAC,YAAY,OAAO;;AAG1E,MAAa,wBAAwB,EAClC,OAAO;CACN,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACxB,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAC3B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,cAAc,EAAE,QAAQ,CAAC,CAAC,SAAS;CACnC,QAAQ,EAAE,MAAM,EAAE,OAAO;EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EAAG,OAAO,EAAE,OAAO;CAAE,CAAC,CAAC,CAAC,CAAC,SAAS;AACpF,CAAC,CAAC,CACD,QAAQ,aAAa;;AAcxB,eAAe,mBACb,IACA,WACA,QACA,KACwB;CAExB,QAAO,MADc,IAAI,WAAW,EAAE,CAAC,CAAC,KAAK,WAAW,EAAE,OAAO,CAAC,EAAA,CACpD,MAAM,UAAU,MAAM,WAAW,GAAG,CAAC,EAAE,UAAU;AACjE;AAGA,eAAe,aACb,IACA,WACA,SACA,QACe;CACf,MAAM,SAAS,IAAI,WAAW,EAAE;CAChC,KAAK,MAAM,EAAE,KAAK,WAAW,QAAQ;EAEnC,IAAI,CAAC,MADkB,OAAO,QAAQ,WAAW,GAAG,GAElD,MAAM,OAAO,WAAW,WAAW;GAAE;GAAK,MAAM;EAAI,CAAC;EAEvD,MAAM,OAAO,OAAO,WAAW,SAAS,KAAK,KAAK;CACpD;AACF"}
+{"version":3,"file":"builds.handlers.mjs","names":[],"sources":["../../src/routers/builds.handlers.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport {\n  ReferenceGenerationConflict,\n  type DatabaseAdapter,\n} from \"@storyshelf/core/adapter/database\";\nimport type { StorageAdapter } from \"@storyshelf/core/adapter/storage\";\nimport { emitWebhookEvent } from \"@storyshelf/core/adapter/webhook-events\";\nimport {\n  BaselineApprovalConflict,\n  BaselineModel,\n  BaselineWriteConflict,\n} from \"@storyshelf/core/models\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Build, Snapshot } from \"@storyshelf/core/schema\";\nimport { type BuildStatus, type ProjectRole, BUILD_STATUSES } from \"@storyshelf/core/types\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { Readable, Transform } from \"node:stream\";\nimport type { ReadableStream as NodeWebStream } from \"node:stream/web\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { requestBuildState } from \"../git-status.ts\";\nimport { notifyProject } from \"../notify.ts\";\nimport { getStore } from \"../store.ts\";\nimport { assertBaselineCurrent, baselineChanged } from \"./baseline-guard.ts\";\nimport { notFound } from \"./helpers.ts\";\n/**\n * Create a build record with labels and the `build:created` webhook.\n * Shared by the build-creation route.\n */\nexport async function createBuildRecord(\n  project: Project,\n  meta: BuildCreateMetadata,\n): Promise<Build> {\n  const { db, config } = getStore();\n  if (!meta.gitSha || !meta.gitBranch) {\n    throw new HTTPException(400, {\n      message: \"gitSha and gitBranch are required (revision SHA and baseline namespace)\",\n    });\n  }\n  const build = await new BuildModel(db).create(project.id, {\n    gitSha: meta.gitSha,\n    gitBranch: meta.gitBranch,\n    isDefault: meta.gitBranch === project.gitDefaultBranch,\n    authorEmail: meta.authorEmail,\n    authorName: meta.authorName,\n    message: meta.message,\n    affectedOnly: meta.affectedOnly,\n    baselineSha: await resolveBaselineSha(db, project.id, meta.gitBranch, meta.gitSha),\n  });\n  if (meta.labels && meta.labels.length > 0) {\n    await attachLabels(db, project.id, build.id, meta.labels);\n  }\n  await emitWebhookEvent(\n    db,\n    { webhooks: getStore().db.tables.webhooks },\n    project.id,\n    \"build:created\",\n    {\n      buildId: build.id,\n      gitSha: meta.gitSha,\n      gitBranch: meta.gitBranch,\n      authorEmail: meta.authorEmail,\n      authorName: meta.authorName,\n      message: meta.message,\n    },\n    credentialKeys(config),\n  );\n  await notifyProject(\n    project,\n    \"build:created\",\n    {\n      buildId: build.id,\n      gitSha: meta.gitSha,\n      gitBranch: meta.gitBranch,\n      authorEmail: meta.authorEmail,\n      authorName: meta.authorName,\n      message: meta.message,\n    },\n    `/builds/${build.id}`,\n  );\n  await requestBuildState(build.id);\n  return build;\n}\n\n/**\n * Stream a raw request body into storage with a byte cap, counting the bytes as they pass (a\n * chunked upload has no `Content-Length`). Resolves to the bytes stored.\n * Throws 400 for a missing body, 413 once `maxBytes` is exceeded.\n */\nexport async function storeUploadStream(\n  storage: StorageAdapter,\n  path: string,\n  body: ReadableStream<Uint8Array> | null,\n  maxBytes: number,\n): Promise<number> {\n  if (!body) {\n    throw new HTTPException(400, { message: \"Missing request body\" });\n  }\n  let seen = 0;\n  const limiter = new Transform({\n    transform(\n      chunk: Buffer,\n      _encoding: string,\n      callback: (error?: Error | null, data?: Buffer) => void,\n    ): void {\n      seen += chunk.length;\n      if (seen > maxBytes) {\n        callback(new Error(`Upload exceeds ${maxBytes} byte limit`));\n      } else {\n        callback(null, chunk);\n      }\n    },\n  });\n  try {\n    const nodeBody = Readable.fromWeb(body as unknown as NodeWebStream);\n    await storage.writeStream(path, nodeBody.pipe(limiter));\n    return seen;\n  } catch (error) {\n    if (seen > maxBytes) {\n      throw new HTTPException(413, { message: \"Upload exceeds size limit\" });\n    }\n    throw error;\n  }\n}\n\n/** Query filters accepted by the build list endpoint. */\nexport const buildListQuery = z.object({\n  status: z.enum(BUILD_STATUSES).optional(),\n  branch: z.string().optional(),\n  labelKey: z.string().optional(),\n  labelValue: z.string().optional(),\n});\n\n/** Fetch a build scoped to its project, throwing 404 when it does not belong. */\nexport async function buildForProject(projectId: string, buildId: string): Promise<Build> {\n  const build = await new BuildModel(getStore().db).get(buildId);\n  if (!build || build.projectId !== projectId) {\n    notFound(\"Build not found\");\n  }\n  return build;\n}\n\n/** Fetch a snapshot scoped to its build, throwing 404 when it does not belong. */\nexport async function snapshotForBuild(\n  build: { id: string },\n  snapshotId: string,\n): Promise<Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== build.id) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n\n/** Roll snapshot statuses up into the build's review status. */\nfunction rollupStatus(snapshots: Snapshot[]): \"reviewing\" | \"rejected\" | \"approved\" {\n  if (snapshots.some((s) => s.status === \"new\" || s.status === \"changed\")) {\n    return \"reviewing\";\n  }\n  return snapshots.some((s) => s.status === \"rejected\") ? \"rejected\" : \"approved\";\n}\n\n/** Recompute a build's counts and roll its status up from its snapshots. */\nexport async function refreshBuild(buildId: string): Promise<void> {\n  const { db } = getStore();\n  await new BuildModel(db).updateCounts(buildId);\n  const snapshots = await new SnapshotModel(db).listByBuild(buildId);\n  const status = rollupStatus(snapshots);\n  const build = await new BuildModel(db).get(buildId);\n  // A cancelled build is terminal: its snapshots may still be touched, but no verdict is announced.\n  if (!build || build.status === \"cancelled\") return;\n  await new BuildModel(db).setStatus(buildId, status);\n  await announceBuildStatus(buildId, status, { snapshotCount: snapshots.length });\n}\n\n/**\n * Tell the world a build reached `status`: its git channels, the `build:<status>` webhook and the\n * project's notification channels. Every route that moves a build to a decided status ends here.\n */\nexport async function announceBuildStatus(\n  buildId: string,\n  status: BuildStatus,\n  extra: { snapshotCount?: number; reason?: string } = {},\n): Promise<void> {\n  const { db, config } = getStore();\n  const build = await new BuildModel(db).get(buildId);\n  if (!build) return;\n  await requestBuildState(buildId);\n  const payload = { buildId, status, ...extra };\n  await emitWebhookEvent(\n    db,\n    { webhooks: getStore().db.tables.webhooks },\n    build.projectId,\n    `build:${status}`,\n    payload,\n    credentialKeys(config),\n  );\n  const project = await new ProjectModel(db).get(build.projectId);\n  if (!project) return;\n  await notifyProject(project, `build:${status}`, payload, `/builds/${buildId}`);\n}\n\n/**\n * Approve a snapshot, promote its screenshot to baseline, and refresh the build.\n * Refuses with 409 when the baseline changed since the diff, unless `force` is set.\n * Bulk callers pass `deferRefresh` and call {@link refreshBuild} once, so the build's\n * outcome (and its git status) is announced a single time.\n */\nexport async function approveSnapshot(\n  snapshotId: string,\n  userId: string | null,\n  options: { force?: boolean; deferRefresh?: boolean } = {},\n): Promise<void> {\n  const { db, config } = getStore();\n  const snapshots = new SnapshotModel(db);\n  const snapshot = await snapshots.get(snapshotId);\n  if (!snapshot) {\n    notFound(\"Snapshot not found\");\n  }\n  const project = await new ProjectModel(db).get(snapshot.projectId);\n  const build = await new BuildModel(db).get(snapshot.buildId);\n  if (!project || !build) {\n    notFound(\"Project or build not found\");\n  }\n  if (build.status === \"cancelled\") {\n    throw new HTTPException(409, { message: \"The build was cancelled; retry it to review it\" });\n  }\n  await assertBaselineCurrent(project, build, snapshot, options.force ?? false);\n  if (!db.buildReferenceLifecycle) await snapshots.review(snapshotId, \"approved\", userId);\n  const baselines = new BaselineModel(db, undefined, getStore().storage, credentialKeys(config));\n  const prior = await baselines.getFor(\n    project.id,\n    snapshot.storyId,\n    snapshot.viewportName,\n    build.gitBranch,\n    snapshot.browser,\n  );\n  try {\n    await baselines.upsert(\n      project.id,\n      snapshot.storyId,\n      snapshot.viewportName,\n      build.gitBranch,\n      snapshot.id,\n      snapshot.screenshotPath,\n      undefined,\n      {\n        browser: snapshot.browser,\n        mode: snapshot.mode,\n        approval: db.buildReferenceLifecycle\n          ? { snapshot, reviewedBy: userId, force: options.force ?? false, branch: build.gitBranch }\n          : undefined,\n      },\n    );\n  } catch (error) {\n    if (error instanceof BaselineWriteConflict || error instanceof ReferenceGenerationConflict) {\n      if (error instanceof BaselineApprovalConflict && error.driftStatus)\n        throw baselineChanged(snapshot.id, error.driftStatus);\n      throw new HTTPException(409, { message: error.message });\n    }\n    throw error;\n  }\n  await notifyProject(\n    project,\n    prior ? \"baseline:updated\" : \"baseline:created\",\n    {\n      storyId: snapshot.storyId,\n      viewport: snapshot.viewportName,\n      browser: snapshot.browser ?? \"chromium\",\n      branch: build.gitBranch,\n      snapshotId: snapshot.id,\n      buildId: build.id,\n    },\n    `/builds/${build.id}`,\n  );\n  if (!options.deferRefresh) {\n    await refreshBuild(build.id);\n  }\n}\n\n/** Roles permitted to view builds, snapshots, and comments. */\nexport const VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n/** Roles permitted to upload builds and write comments. */\nexport const DEVELOPER_ROLES: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n/** Roles permitted to approve or reject snapshots and delete builds. */\nexport const APPROVER_ROLES: readonly ProjectRole[] = [\"approver\", \"admin\"];\n\n/** JSON input schema for creating a build before streaming its bundle. */\nexport const buildCreateJsonSchema = z\n  .object({\n    gitSha: z.string().min(1),\n    gitBranch: z.string().min(1),\n    authorEmail: z.string().optional(),\n    authorName: z.string().optional(),\n    message: z.string().optional(),\n    affectedOnly: z.boolean().optional(),\n    labels: z.array(z.object({ key: z.string().min(1), value: z.string() })).optional(),\n  })\n  .openapi(\"BuildCreate\");\n\n/** Metadata accepted by either build-creation route. */\nexport interface BuildCreateMetadata {\n  gitSha: string;\n  gitBranch: string;\n  authorEmail?: string;\n  authorName?: string;\n  message?: string;\n  affectedOnly?: boolean;\n  labels?: { key: string; value: string }[];\n}\n\n/** Latest prior revision on a branch with a build, or null for first builds. */\nasync function resolveBaselineSha(\n  db: DatabaseAdapter,\n  projectId: string,\n  branch: string,\n  sha: string,\n): Promise<string | null> {\n  const builds = await new BuildModel(db).list(projectId, { branch });\n  return builds.find((build) => build.gitSha !== sha)?.gitSha ?? null;\n}\n\n/* oxlint-disable eslint/no-await-in-loop -- label attach is intentionally sequential */\nasync function attachLabels(\n  db: DatabaseAdapter,\n  projectId: string,\n  buildId: string,\n  labels: { key: string; value: string }[],\n): Promise<void> {\n  const models = new LabelModel(db);\n  for (const { key, value } of labels) {\n    const existing = await models.getType(projectId, key);\n    if (!existing) {\n      await models.createType(projectId, { key, name: key });\n    }\n    await models.attach(projectId, buildId, key, value);\n  }\n}\n/* oxlint-enable eslint/no-await-in-loop */\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAgCA,eAAsB,kBACpB,SACA,MACgB;CAChB,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,WACxB,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,0EACX,CAAC;CAEH,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;EACxD,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,WAAW,KAAK,cAAc,QAAQ;EACtC,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,SAAS,KAAK;EACd,cAAc,KAAK;EACnB,aAAa,MAAM,mBAAmB,IAAI,QAAQ,IAAI,KAAK,WAAW,KAAK,MAAM;CACnF,CAAC;CACD,IAAI,KAAK,UAAU,KAAK,OAAO,SAAS,GACtC,MAAM,aAAa,IAAI,QAAQ,IAAI,MAAM,IAAI,KAAK,MAAM;CAE1D,MAAM,iBACJ,IACA,EAAE,UAAU,SAAS,CAAC,CAAC,GAAG,OAAO,SAAS,GAC1C,QAAQ,IACR,iBACA;EACE,SAAS,MAAM;EACf,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,SAAS,KAAK;CAChB,GACA,eAAe,MAAM,CACvB;CACA,MAAM,cACJ,SACA,iBACA;EACE,SAAS,MAAM;EACf,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,SAAS,KAAK;CAChB,GACA,WAAW,MAAM,IACnB;CACA,MAAM,kBAAkB,MAAM,EAAE;CAChC,OAAO;AACT;;;;;;AAOA,eAAsB,kBACpB,SACA,MACA,MACA,UACiB;CACjB,IAAI,CAAC,MACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,uBAAuB,CAAC;CAElE,IAAI,OAAO;CACX,MAAM,UAAU,IAAI,UAAU,EAC5B,UACE,OACA,WACA,UACM;EACN,QAAQ,MAAM;EACd,IAAI,OAAO,UACT,yBAAS,IAAI,MAAM,kBAAkB,SAAS,YAAY,CAAC;OAE3D,SAAS,MAAM,KAAK;CAExB,EACF,CAAC;CACD,IAAI;EACF,MAAM,WAAW,SAAS,QAAQ,IAAgC;EAClE,MAAM,QAAQ,YAAY,MAAM,SAAS,KAAK,OAAO,CAAC;EACtD,OAAO;CACT,SAAS,OAAO;EACd,IAAI,OAAO,UACT,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,4BAA4B,CAAC;EAEvE,MAAM;CACR;AACF;;AAGA,MAAa,iBAAiB,EAAE,OAAO;CACrC,QAAQ,EAAE,KAAK,cAAc,CAAC,CAAC,SAAS;CACxC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;;AAGD,eAAsB,gBAAgB,WAAmB,SAAiC;CACxF,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;CAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,WAChC,SAAS,iBAAiB;CAE5B,OAAO;AACT;;AAGA,eAAsB,iBACpB,OACA,YACmB;CACnB,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,MAAM,IAC1C,SAAS,oBAAoB;CAE/B,OAAO;AACT;;AAGA,SAAS,aAAa,WAA8D;CAClF,IAAI,UAAU,MAAM,MAAM,EAAE,WAAW,SAAS,EAAE,WAAW,SAAS,GACpE,OAAO;CAET,OAAO,UAAU,MAAM,MAAM,EAAE,WAAW,UAAU,IAAI,aAAa;AACvE;;AAGA,eAAsB,aAAa,SAAgC;CACjE,MAAM,EAAE,OAAO,SAAS;CACxB,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,aAAa,OAAO;CAC7C,MAAM,YAAY,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC,YAAY,OAAO;CACjE,MAAM,SAAS,aAAa,SAAS;CACrC,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO;CAElD,IAAI,CAAC,SAAS,MAAM,WAAW,aAAa;CAC5C,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,SAAS,MAAM;CAClD,MAAM,oBAAoB,SAAS,QAAQ,EAAE,eAAe,UAAU,OAAO,CAAC;AAChF;;;;;AAMA,eAAsB,oBACpB,SACA,QACA,QAAqD,CAAC,GACvC;CACf,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO;CAClD,IAAI,CAAC,OAAO;CACZ,MAAM,kBAAkB,OAAO;CAC/B,MAAM,UAAU;EAAE;EAAS;EAAQ,GAAG;CAAM;CAC5C,MAAM,iBACJ,IACA,EAAE,UAAU,SAAS,CAAC,CAAC,GAAG,OAAO,SAAS,GAC1C,MAAM,WACN,SAAS,UACT,SACA,eAAe,MAAM,CACvB;CACA,MAAM,UAAU,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;CAC9D,IAAI,CAAC,SAAS;CACd,MAAM,cAAc,SAAS,SAAS,UAAU,SAAS,WAAW,SAAS;AAC/E;;;;;;;AAQA,eAAsB,gBACpB,YACA,QACA,UAAuD,CAAC,GACzC;CACf,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,MAAM,YAAY,IAAI,cAAc,EAAE;CACtC,MAAM,WAAW,MAAM,UAAU,IAAI,UAAU;CAC/C,IAAI,CAAC,UACH,SAAS,oBAAoB;CAE/B,MAAM,UAAU,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,SAAS,SAAS;CACjE,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;CAC3D,IAAI,CAAC,WAAW,CAAC,OACf,SAAS,4BAA4B;CAEvC,IAAI,MAAM,WAAW,aACnB,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,iDAAiD,CAAC;CAE5F,MAAM,sBAAsB,SAAS,OAAO,UAAU,QAAQ,SAAS,KAAK;CAC5E,IAAI,CAAC,GAAG,yBAAyB,MAAM,UAAU,OAAO,YAAY,YAAY,MAAM;CACtF,MAAM,YAAY,IAAI,cAAc,IAAI,KAAA,GAAW,SAAS,CAAC,CAAC,SAAS,eAAe,MAAM,CAAC;CAC7F,MAAM,QAAQ,MAAM,UAAU,OAC5B,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,SAAS,OACX;CACA,IAAI;EACF,MAAM,UAAU,OACd,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,SAAS,IACT,SAAS,gBACT,KAAA,GACA;GACE,SAAS,SAAS;GAClB,MAAM,SAAS;GACf,UAAU,GAAG,0BACT;IAAE;IAAU,YAAY;IAAQ,OAAO,QAAQ,SAAS;IAAO,QAAQ,MAAM;GAAU,IACvF,KAAA;EACN,CACF;CACF,SAAS,OAAO;EACd,IAAI,iBAAiB,yBAAyB,iBAAiB,6BAA6B;GAC1F,IAAI,iBAAiB,4BAA4B,MAAM,aACrD,MAAM,gBAAgB,SAAS,IAAI,MAAM,WAAW;GACtD,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,MAAM,QAAQ,CAAC;EACzD;EACA,MAAM;CACR;CACA,MAAM,cACJ,SACA,QAAQ,qBAAqB,oBAC7B;EACE,SAAS,SAAS;EAClB,UAAU,SAAS;EACnB,SAAS,SAAS,WAAW;EAC7B,QAAQ,MAAM;EACd,YAAY,SAAS;EACrB,SAAS,MAAM;CACjB,GACA,WAAW,MAAM,IACnB;CACA,IAAI,CAAC,QAAQ,cACX,MAAM,aAAa,MAAM,EAAE;AAE/B;;AAGA,MAAa,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;;AAE7F,MAAa,kBAA0C;CAAC;CAAa;CAAY;AAAO;;AAExF,MAAa,iBAAyC,CAAC,YAAY,OAAO;;AAG1E,MAAa,wBAAwB,EAClC,OAAO;CACN,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACxB,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAC3B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,cAAc,EAAE,QAAQ,CAAC,CAAC,SAAS;CACnC,QAAQ,EAAE,MAAM,EAAE,OAAO;EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EAAG,OAAO,EAAE,OAAO;CAAE,CAAC,CAAC,CAAC,CAAC,SAAS;AACpF,CAAC,CAAC,CACD,QAAQ,aAAa;;AAcxB,eAAe,mBACb,IACA,WACA,QACA,KACwB;CAExB,QAAO,MADc,IAAI,WAAW,EAAE,CAAC,CAAC,KAAK,WAAW,EAAE,OAAO,CAAC,EAAA,CACpD,MAAM,UAAU,MAAM,WAAW,GAAG,CAAC,EAAE,UAAU;AACjE;AAGA,eAAe,aACb,IACA,WACA,SACA,QACe;CACf,MAAM,SAAS,IAAI,WAAW,EAAE;CAChC,KAAK,MAAM,EAAE,KAAK,WAAW,QAAQ;EAEnC,IAAI,CAAC,MADkB,OAAO,QAAQ,WAAW,GAAG,GAElD,MAAM,OAAO,WAAW,WAAW;GAAE;GAAK,MAAM;EAAI,CAAC;EAEvD,MAAM,OAAO,OAAO,WAAW,SAAS,KAAK,KAAK;CACpD;AACF"}

package/dist/routers/builds.mjs

@@ -94,6 +94,7 @@ function registerBuilds(app) {
 		const { slug, buildId } = c.req.valid("param");
 		const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);
 		const build = await buildForProject(project.id, buildId);
+		if (build.status === "failed") throw new HTTPException(409, { message: `Build ${build.id} failed; run storyshelf upload again to create a new build` });
 		const maxBytes = getStore().config.maxUploadBytes ?? DEFAULT_MAX_UPLOAD_BYTES;
 		const route = await planOrDiscard(await storeUploadStream(getStore().storage, storybookZipPath(project.id, build.id), c.req.raw.body, maxBytes), project.id, build.id);
 		const reqId = c.get("requestId");
@@ -249,7 +250,11 @@ const uploadZipRoute = createRoute({
 		},
 		422: {
 			content: { "text/plain": { schema: z.string() } },
-			description: "The inline zip is invalid, unsafe, or exceeds the extraction limits"
+			description: "The inline zip is invalid, unsafe, or exceeds the extraction limits. The build ends `failed`; upload again to create a new build."
+		},
+		409: {
+			content: { "application/json": { schema: z.object({ message: z.string() }) } },
+			description: "The build already failed (for example a rejected zip); create a new build"
 		},
 		413: {
 			content: { "application/json": { schema: z.object({ message: z.string() }).openapi("Error") } },

package/dist/routers/builds.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"builds.mjs","names":["notFoundResponse","forbiddenResponse"],"sources":["../../src/routers/builds.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { DEFAULT_MAX_UPLOAD_BYTES } from \"@storyshelf/core/config\";\nimport { BuildModel, PackageUsageModel } from \"@storyshelf/core/models\";\nimport { storybookZipPath } from \"@storyshelf/core/utils\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { registerAttempts } from \"./attempts.ts\";\nimport {\n  VIEW_ROLES,\n  DEVELOPER_ROLES,\n  APPROVER_ROLES,\n  buildCreateJsonSchema,\n  buildListQuery,\n  buildForProject,\n  createBuildRecord,\n  storeUploadStream,\n} from \"./builds.handlers.ts\";\nimport { discardZip, planUpload, publishUpload } from \"./publish-upload.ts\";\n\n/** Decide how the stored zip is published; a zip this host cannot publish is removed and refused. */\nasync function planOrDiscard(\n  zipBytes: number,\n  projectId: string,\n  buildId: string,\n): Promise<\"inline\" | \"job\"> {\n  try {\n    return planUpload(zipBytes);\n  } catch (error) {\n    await discardZip(projectId, buildId);\n    throw error;\n  }\n}\n\nasync function upsertContentRef(hash: string): Promise<void> {\n  try {\n    const contentRefs = getStore().db.tables.contentRefs;\n    const now = new Date().toISOString();\n    const existing = await getStore().db.get(contentRefs, hash);\n    if (existing) {\n      await getStore().db.update(contentRefs, hash, {\n        refCount: (existing as { refCount: number }).refCount + 1,\n        lastSeenAt: now,\n      });\n    } else {\n      await getStore().db.insert(contentRefs, {\n        hash,\n        refCount: 1,\n        lastSeenAt: now,\n        createdAt: now,\n      });\n    }\n  } catch {\n    // ignore — content_refs may not exist on old DB\n  }\n}\nimport { registerBuildCancel } from \"./build-cancel.ts\";\nimport { registerBuildChangeset } from \"./build-changeset.ts\";\nimport { registerBuildReviews } from \"./build-reviews.ts\";\nimport { registerComments } from \"./comments.ts\";\nimport { flashHx } from \"./flash.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { hxRefresh } from \"./htmx.ts\";\nimport {\n  badRequest,\n  buildSchema,\n  forbidden as forbiddenResponse,\n  notFound as notFoundResponse,\n  unauthorized,\n} from \"./schemas.ts\";\nimport { registerSnapshots } from \"./snapshots.ts\";\n/** Register the build list, upload, fetch, retry, and delete endpoints. */\nexport function registerBuilds(app: ShelfRouter): void {\n  app.openapi(listBuildsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    const { status, branch, labelKey, labelValue } = c.req.valid(\"query\");\n    const builds = new BuildModel(getStore().db).list(project.id, {\n      status,\n      branch: branch ?? undefined,\n      labelKey: labelKey ?? undefined,\n      labelValue: labelValue ?? undefined,\n    });\n    return c.json(await builds);\n  });\n\n  app.openapi(createBuildRoute, async (c) => {\n    const project = await resolveAuthorizedProject(\n      c,\n      c.req.valid(\"param\").slug,\n      ...DEVELOPER_ROLES,\n    );\n    const build = await createBuildRecord(project, c.req.valid(\"json\"));\n    const uploadUrl = `/api/v1/projects/${project.slug}/builds/${build.id}/zip`;\n    return c.json(\n      { build, uploadUrl, baselineSha: build.baselineSha, testing: getStore().testing },\n      202,\n    );\n  });\n\n  app.openapi(affectedRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const { baselineSha, changedFiles, affectedImportPaths } = c.req.valid(\"json\");\n    const updated = await new BuildModel(getStore().db).setAffected(build.id, {\n      baselineSha,\n      changedFiles,\n      affectedImportPaths,\n    });\n    return c.json(updated);\n  });\n\n  app.openapi(usageRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const { usage } = c.req.valid(\"json\");\n    const stored = await new PackageUsageModel(getStore().db).replaceForBuild(\n      project.id,\n      build.id,\n      usage,\n    );\n    return c.json({ stored });\n  });\n\n  app.openapi(uploadZipRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const maxBytes = getStore().config.maxUploadBytes ?? DEFAULT_MAX_UPLOAD_BYTES;\n    const zipBytes = await storeUploadStream(\n      getStore().storage,\n      storybookZipPath(project.id, build.id),\n      c.req.raw.body,\n      maxBytes,\n    );\n    const route = await planOrDiscard(zipBytes, project.id, build.id);\n    const reqId = c.get(\"requestId\");\n    const published = await publishUpload(route, build, reqId);\n    await getStore().enqueueCapture?.(build.id, reqId);\n    return c.json(published, 202);\n  });\n\n  app.openapi(dedupRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    await buildForProject(project.id, buildId);\n    const { hashes } = c.req.valid(\"json\");\n    const needed: string[] = [];\n    for (const hash of hashes) {\n      if (!(await getStore().storage.exists(`content/${hash}`))) {\n        needed.push(hash);\n      }\n    }\n    return c.json({ needed });\n  });\n\n  // oxlint-disable eslint(max-depth) -- dedup upload handler is intentionally nested for batch handling\n  app.openapi(contentUploadRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    await buildForProject(project.id, buildId);\n    const contentType = c.req.header(\"content-type\") ?? \"\";\n    if (contentType.includes(\"multipart/\")) {\n      const form = await c.req.formData();\n      for (const [key, value] of form.entries()) {\n        if (value instanceof File) {\n          const hash = key;\n          const buffer = Buffer.from(await value.arrayBuffer());\n          await getStore().storage.write(`content/${hash}`, buffer);\n          await upsertContentRef(hash);\n        }\n      }\n    } else {\n      // Single content upload via PUT with hash header\n      const hash = c.req.header(\"x-content-hash\") ?? \"\";\n      if (!hash) throw new HTTPException(400, { message: \"Missing X-Content-Hash\" });\n      const buffer = Buffer.from(await c.req.arrayBuffer());\n      await getStore().storage.write(`content/${hash}`, buffer);\n    }\n    return c.json({ ok: true });\n  });\n\n  app.openapi(manifestRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const { files } = c.req.valid(\"json\");\n    const manifest: Record<string, string> = {};\n    for (const f of files) {\n      manifest[f.rel] = f.hash;\n    }\n    await getStore().storage.write(\n      `${project.id}/builds/${build.id}/storybook/manifest.json`,\n      Buffer.from(JSON.stringify(manifest)),\n    );\n    // Upsert content_refs for each hash\n    for (const f of files) {\n      try {\n        const contentRefs = getStore().db.tables.contentRefs;\n        const now = new Date().toISOString();\n        const existing = await getStore().db.get(contentRefs, f.hash);\n        // oxlint-disable-next-line unicorn/no-if-else -- upsert is clearer as if/else\n        if (!existing) {\n          await getStore().db.insert(contentRefs, {\n            hash: f.hash,\n            refCount: 1,\n            lastSeenAt: now,\n            createdAt: now,\n          });\n        } else {\n          await getStore().db.update(contentRefs, f.hash, {\n            lastSeenAt: now,\n          });\n        }\n      } catch {\n        // ignore — content_refs may not exist\n      }\n    }\n    // The files are stored content-addressed: nothing to extract, so publishing is complete.\n    await getStore().publish?.completer.complete(build.id, { ok: true });\n    const reqId = c.get(\"requestId\");\n    await getStore().enqueueCapture?.(build.id, reqId);\n    return c.json({ ok: true });\n  });\n\n  app.openapi(getBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    return c.json(build);\n  });\n\n  app.openapi(retryBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const updated = await new BuildModel(getStore().db).resetStatus(build.id, \"pending\");\n    await getStore().enqueueCapture?.(build.id, c.get(\"requestId\"));\n    hxRefresh(c);\n    flashHx(c, \"Capture queued\");\n    return c.json(updated, 202);\n  });\n\n  app.openapi(deleteBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await new BuildModel(getStore().db).remove(build.id);\n    return c.body(null, 204);\n  });\n\n  registerSnapshots(app);\n  registerComments(app);\n  registerBuildReviews(app);\n  registerBuildChangeset(app);\n  registerBuildCancel(app);\n  registerAttempts(app);\n}\n\nconst listBuildsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Builds\"],\n  summary: \"List builds\",\n  path: \"/api/v1/projects/{slug}/builds\",\n  request: { params: z.object({ slug: z.string() }), query: buildListQuery },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: buildSchema.array() } },\n      description: \"List builds for a project\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst buildCreatedSchema = z\n  .object({\n    build: buildSchema,\n    uploadUrl: z.string(),\n    baselineSha: z.string().nullable(),\n    testing: z.boolean().openapi({\n      description:\n        \"False when the server has no `testing` option: the build is published but never captured or compared.\",\n    }),\n  })\n  .openapi(\"BuildCreated\");\n\nconst createBuildRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Create a build\",\n  path: \"/api/v1/projects/{slug}/builds\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: {\n      content: {\n        \"application/json\": { schema: buildCreateJsonSchema },\n      },\n    },\n  },\n  responses: {\n    202: {\n      content: {\n        \"application/json\": {\n          schema: buildCreatedSchema,\n        },\n      },\n      description:\n        \"Build created. PUT the Storybook zip to uploadUrl to publish it (and queue capture when testing is on).\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst uploadZipRoute = createRoute({\n  method: \"put\",\n  tags: [\"Builds\"],\n  summary: \"Upload the Storybook zip\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/zip\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: {\n      content: {\n        \"application/zip\": {\n          schema: z.string().openapi({ type: \"string\", format: \"binary\" }),\n        },\n      },\n    },\n  },\n  responses: {\n    202: {\n      content: { \"application/json\": { schema: buildSchema } },\n      description:\n        \"Zip stored. A zip up to maxInlineUnzipSize (default 50 MB) is extracted inline in this request; a larger one is published by a background job. With testing off, the build becomes approved when publishing finishes on the project's default branch (failed if it cannot be published) and stays pending on other branches; with testing on, capture sets the status.\",\n    },\n    422: {\n      content: { \"text/plain\": { schema: z.string() } },\n      description: \"The inline zip is invalid, unsafe, or exceeds the extraction limits\",\n    },\n    413: {\n      content: {\n        \"application/json\": {\n          schema: z.object({ message: z.string() }).openapi(\"Error\"),\n        },\n      },\n      description:\n        \"Upload exceeds the configured size limit, or the zip is over the inline limit and this host (serverless) runs no publish consumer: upload file by file instead (POST /dedup, PUT /content, POST /manifest)\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst dedupHashesSchema = z.object({ hashes: z.array(z.string()) });\nconst dedupNeededSchema = z.object({ needed: z.array(z.string()) });\nconst dedupRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Check which files need uploading\",\n  description:\n    \"File-by-file upload, step 1 (dedup, content, manifest): needs no zip extraction and works on any host, serverless included. Send the content hashes; the response lists those the server does not hold yet.\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/dedup\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"application/json\": { schema: dedupHashesSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: dedupNeededSchema } },\n      description: \"Hashes needed for upload\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst contentUploadRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Upload build content\",\n  description:\n    \"File-by-file upload, step 2: store the missing files content-addressed (multipart, or one file with an X-Content-Hash header).\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/content\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"multipart/form-data\": { schema: z.any() } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: z.object({ ok: z.boolean() }) } },\n      description: \"Content uploaded\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst manifestFileSchema = z.object({ rel: z.string(), hash: z.string(), size: z.number() });\nconst manifestRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Store the build manifest\",\n  description:\n    \"File-by-file upload, step 3: store the path-to-hash manifest. This completes publishing. With testing off the build becomes approved when it is on the project's default branch and stays pending on other branches; with testing on, a capture is queued and sets the status.\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/manifest\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: {\n      content: {\n        \"application/json\": {\n          schema: z.object({ files: z.array(manifestFileSchema) }),\n        },\n      },\n    },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: z.object({ ok: z.boolean() }) } },\n      description: \"Manifest stored\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst affectedPayloadSchema = z.object({\n  baselineSha: z.string().nullable(),\n  changedFiles: z.array(z.string()).max(20_000),\n  affectedImportPaths: z.array(z.string()).max(20_000).nullable(),\n});\nconst affectedRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Record the affected stories\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/affected\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"application/json\": { schema: affectedPayloadSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: buildSchema } },\n      description: \"Affected set recorded\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst usagePayloadSchema = z.object({\n  usage: z\n    .array(\n      z.object({\n        storyImportPath: z.string().min(1).max(1024),\n        packageName: z.string().min(1).max(214),\n        modulePath: z.string().min(1).max(2048),\n        version: z.string().max(128).nullable().optional(),\n      }),\n    )\n    .max(20_000),\n});\nconst usageRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Record the dependency packages each story uses\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/usage\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"application/json\": { schema: usagePayloadSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: z.object({ stored: z.number() }) } },\n      description: \"Usage recorded (replaces any earlier report for the build)\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst getBuildRoute = createRoute({\n  method: \"get\",\n  tags: [\"Builds\"],\n  summary: \"Get a build\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: buildSchema } }, description: \"Fetch a build\" },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst retryBuildRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Retry capture\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/retry\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    202: {\n      content: { \"application/json\": { schema: buildSchema } },\n      description: \"Build reset to pending and capture re-queued (new attempt)\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteBuildRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Builds\"],\n  summary: \"Delete a build\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    204: { description: \"Build deleted\" },\n    ...notFoundResponse,\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAqBA,eAAe,cACb,UACA,WACA,SAC2B;CAC3B,IAAI;EACF,OAAO,WAAW,QAAQ;CAC5B,SAAS,OAAO;EACd,MAAM,WAAW,WAAW,OAAO;EACnC,MAAM;CACR;AACF;AAEA,eAAe,iBAAiB,MAA6B;CAC3D,IAAI;EACF,MAAM,cAAc,SAAS,CAAC,CAAC,GAAG,OAAO;EACzC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAW,MAAM,SAAS,CAAC,CAAC,GAAG,IAAI,aAAa,IAAI;EAC1D,IAAI,UACF,MAAM,SAAS,CAAC,CAAC,GAAG,OAAO,aAAa,MAAM;GAC5C,UAAW,SAAkC,WAAW;GACxD,YAAY;EACd,CAAC;OAED,MAAM,SAAS,CAAC,CAAC,GAAG,OAAO,aAAa;GACtC;GACA,UAAU;GACV,YAAY;GACZ,WAAW;EACb,CAAC;CAEL,QAAQ,CAER;AACF;;AAiBA,SAAgB,eAAe,KAAwB;CACrD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,MAAM,EAAE,QAAQ,QAAQ,UAAU,eAAe,EAAE,IAAI,MAAM,OAAO;EACpE,MAAM,SAAS,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI;GAC5D;GACA,QAAQ,UAAU,KAAA;GAClB,UAAU,YAAY,KAAA;GACtB,YAAY,cAAc,KAAA;EAC5B,CAAC;EACD,OAAO,EAAE,KAAK,MAAM,MAAM;CAC5B,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBACpB,GACA,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MACrB,GAAG,eACL;EACA,MAAM,QAAQ,MAAM,kBAAkB,SAAS,EAAE,IAAI,MAAM,MAAM,CAAC;EAClE,MAAM,YAAY,oBAAoB,QAAQ,KAAK,UAAU,MAAM,GAAG;EACtE,OAAO,EAAE,KACP;GAAE;GAAO;GAAW,aAAa,MAAM;GAAa,SAAS,SAAS,CAAC,CAAC;EAAQ,GAChF,GACF;CACF,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,EAAE,aAAa,cAAc,wBAAwB,EAAE,IAAI,MAAM,MAAM;EAC7E,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,IAAI;GACxE;GACA;GACA;EACF,CAAC;EACD,OAAO,EAAE,KAAK,OAAO;CACvB,CAAC;CAED,IAAI,QAAQ,YAAY,OAAO,MAAM;EACnC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,MAAM;EACpC,MAAM,SAAS,MAAM,IAAI,kBAAkB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,gBACxD,QAAQ,IACR,MAAM,IACN,KACF;EACA,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;CAC1B,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,SAAS,CAAC,CAAC,OAAO,kBAAkB;EAOrD,MAAM,QAAQ,MAAM,cAAc,MANX,kBACrB,SAAS,CAAC,CAAC,SACX,iBAAiB,QAAQ,IAAI,MAAM,EAAE,GACrC,EAAE,IAAI,IAAI,MACV,QACF,GAC4C,QAAQ,IAAI,MAAM,EAAE;EAChE,MAAM,QAAQ,EAAE,IAAI,WAAW;EAC/B,MAAM,YAAY,MAAM,cAAc,OAAO,OAAO,KAAK;EACzD,MAAM,SAAS,CAAC,CAAC,iBAAiB,MAAM,IAAI,KAAK;EACjD,OAAO,EAAE,KAAK,WAAW,GAAG;CAC9B,CAAC;CAED,IAAI,QAAQ,YAAY,OAAO,MAAM;EACnC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACzC,MAAM,EAAE,WAAW,EAAE,IAAI,MAAM,MAAM;EACrC,MAAM,SAAmB,CAAC;EAC1B,KAAK,MAAM,QAAQ,QACjB,IAAI,CAAE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,WAAW,MAAM,GACrD,OAAO,KAAK,IAAI;EAGpB,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;CAC1B,CAAC;CAGD,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EAEzC,KADoB,EAAE,IAAI,OAAO,cAAc,KAAK,GAAA,CACpC,SAAS,YAAY,GAAG;GACtC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;GAClC,KAAK,MAAM,CAAC,KAAK,UAAU,KAAK,QAAQ,GACtC,IAAI,iBAAiB,MAAM;IACzB,MAAM,OAAO;IACb,MAAM,SAAS,OAAO,KAAK,MAAM,MAAM,YAAY,CAAC;IACpD,MAAM,SAAS,CAAC,CAAC,QAAQ,MAAM,WAAW,QAAQ,MAAM;IACxD,MAAM,iBAAiB,IAAI;GAC7B;EAEJ,OAAO;GAEL,MAAM,OAAO,EAAE,IAAI,OAAO,gBAAgB,KAAK;GAC/C,IAAI,CAAC,MAAM,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,yBAAyB,CAAC;GAC7E,MAAM,SAAS,OAAO,KAAK,MAAM,EAAE,IAAI,YAAY,CAAC;GACpD,MAAM,SAAS,CAAC,CAAC,QAAQ,MAAM,WAAW,QAAQ,MAAM;EAC1D;EACA,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,MAAM;EACpC,MAAM,WAAmC,CAAC;EAC1C,KAAK,MAAM,KAAK,OACd,SAAS,EAAE,OAAO,EAAE;EAEtB,MAAM,SAAS,CAAC,CAAC,QAAQ,MACvB,GAAG,QAAQ,GAAG,UAAU,MAAM,GAAG,2BACjC,OAAO,KAAK,KAAK,UAAU,QAAQ,CAAC,CACtC;EAEA,KAAK,MAAM,KAAK,OACd,IAAI;GACF,MAAM,cAAc,SAAS,CAAC,CAAC,GAAG,OAAO;GACzC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;GAGnC,IAAI,CAAC,MAFkB,SAAS,CAAC,CAAC,GAAG,IAAI,aAAa,EAAE,IAAI,GAG1D,MAAM,SAAS,CAAC,CAAC,GAAG,OAAO,aAAa;IACtC,MAAM,EAAE;IACR,UAAU;IACV,YAAY;IACZ,WAAW;GACb,CAAC;QAED,MAAM,SAAS,CAAC,CAAC,GAAG,OAAO,aAAa,EAAE,MAAM,EAC9C,YAAY,IACd,CAAC;EAEL,QAAQ,CAER;EAGF,MAAM,SAAS,CAAC,CAAC,SAAS,UAAU,SAAS,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC;EACnE,MAAM,QAAQ,EAAE,IAAI,WAAW;EAC/B,MAAM,SAAS,CAAC,CAAC,iBAAiB,MAAM,IAAI,KAAK;EACjD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,OAAO,EAAE,KAAK,KAAK;CACrB,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,IAAI,SAAS;EACnF,MAAM,SAAS,CAAC,CAAC,iBAAiB,MAAM,IAAI,EAAE,IAAI,WAAW,CAAC;EAC9D,UAAU,CAAC;EACX,QAAQ,GAAG,gBAAgB;EAC3B,OAAO,EAAE,KAAK,SAAS,GAAG;CAC5B,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;CAED,kBAAkB,GAAG;CACrB,iBAAiB,GAAG;CACpB,qBAAqB,GAAG;CACxB,uBAAuB,GAAG;CAC1B,oBAAoB,GAAG;CACvB,iBAAiB,GAAG;AACtB;AAEA,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EAAG,OAAO;CAAe;CACzE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,MAAM,EAAE,EAAE;GAC/D,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,EACxB,OAAO;CACN,OAAO;CACP,WAAW,EAAE,OAAO;CACpB,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAC3B,aACE,wGACJ,CAAC;AACH,CAAC,CAAC,CACD,QAAQ,cAAc;AAEzB,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EACJ,SAAS,EACP,oBAAoB,EAAE,QAAQ,sBAAsB,EACtD,EACF;CACF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EACP,oBAAoB,EAClB,QAAQ,mBACV,EACF;GACA,aACE;EACJ;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EACJ,SAAS,EACP,mBAAmB,EACjB,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ;GAAE,MAAM;GAAU,QAAQ;EAAS,CAAC,EACjE,EACF,EACF;CACF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aACE;EACJ;EACA,KAAK;GACH,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;GAChD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EACP,oBAAoB,EAClB,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,OAAO,EAC3D,EACF;GACA,aACE;EACJ;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAClE,MAAM,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAClE,MAAM,aAAa,YAAY;CAC7B,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,aACE;CACF,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CACzE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE;GAC7D,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,aACE;CACF,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;CAClE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;GACzE,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;CAAE,KAAK,EAAE,OAAO;CAAG,MAAM,EAAE,OAAO;CAAG,MAAM,EAAE,OAAO;AAAE,CAAC;AAC3F,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,aACE;CACF,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EACJ,SAAS,EACP,oBAAoB,EAClB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,EAAE,CAAC,EACzD,EACF,EACF;CACF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;GACzE,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;CACrC,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,GAAM;CAC5C,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,GAAM,CAAC,CAAC,SAAS;AAChE,CAAC;AACD,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE,EAAE;CAC7E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO,EAClC,OAAO,EACJ,MACC,EAAE,OAAO;CACP,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;CAC3C,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACtC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;CACtC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AACnD,CAAC,CACH,CAAC,CACA,IAAI,GAAM,EACf,CAAC;AACD,MAAM,aAAa,YAAY;CAC7B,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE,EAAE;CAC1E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC5E,aAAa;EACf;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GAAG,aAAa;EAAgB;EAC9F,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC"}
+{"version":3,"file":"builds.mjs","names":["notFoundResponse","forbiddenResponse"],"sources":["../../src/routers/builds.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { DEFAULT_MAX_UPLOAD_BYTES } from \"@storyshelf/core/config\";\nimport { BuildModel, PackageUsageModel } from \"@storyshelf/core/models\";\nimport { storybookZipPath } from \"@storyshelf/core/utils\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { registerAttempts } from \"./attempts.ts\";\nimport {\n  VIEW_ROLES,\n  DEVELOPER_ROLES,\n  APPROVER_ROLES,\n  buildCreateJsonSchema,\n  buildListQuery,\n  buildForProject,\n  createBuildRecord,\n  storeUploadStream,\n} from \"./builds.handlers.ts\";\nimport { discardZip, planUpload, publishUpload } from \"./publish-upload.ts\";\n\n/** Decide how the stored zip is published; a zip this host cannot publish is removed and refused. */\nasync function planOrDiscard(\n  zipBytes: number,\n  projectId: string,\n  buildId: string,\n): Promise<\"inline\" | \"job\"> {\n  try {\n    return planUpload(zipBytes);\n  } catch (error) {\n    await discardZip(projectId, buildId);\n    throw error;\n  }\n}\n\nasync function upsertContentRef(hash: string): Promise<void> {\n  try {\n    const contentRefs = getStore().db.tables.contentRefs;\n    const now = new Date().toISOString();\n    const existing = await getStore().db.get(contentRefs, hash);\n    if (existing) {\n      await getStore().db.update(contentRefs, hash, {\n        refCount: (existing as { refCount: number }).refCount + 1,\n        lastSeenAt: now,\n      });\n    } else {\n      await getStore().db.insert(contentRefs, {\n        hash,\n        refCount: 1,\n        lastSeenAt: now,\n        createdAt: now,\n      });\n    }\n  } catch {\n    // ignore — content_refs may not exist on old DB\n  }\n}\nimport { registerBuildCancel } from \"./build-cancel.ts\";\nimport { registerBuildChangeset } from \"./build-changeset.ts\";\nimport { registerBuildReviews } from \"./build-reviews.ts\";\nimport { registerComments } from \"./comments.ts\";\nimport { flashHx } from \"./flash.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { hxRefresh } from \"./htmx.ts\";\nimport {\n  badRequest,\n  buildSchema,\n  forbidden as forbiddenResponse,\n  notFound as notFoundResponse,\n  unauthorized,\n} from \"./schemas.ts\";\nimport { registerSnapshots } from \"./snapshots.ts\";\n/** Register the build list, upload, fetch, retry, and delete endpoints. */\nexport function registerBuilds(app: ShelfRouter): void {\n  app.openapi(listBuildsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    const { status, branch, labelKey, labelValue } = c.req.valid(\"query\");\n    const builds = new BuildModel(getStore().db).list(project.id, {\n      status,\n      branch: branch ?? undefined,\n      labelKey: labelKey ?? undefined,\n      labelValue: labelValue ?? undefined,\n    });\n    return c.json(await builds);\n  });\n\n  app.openapi(createBuildRoute, async (c) => {\n    const project = await resolveAuthorizedProject(\n      c,\n      c.req.valid(\"param\").slug,\n      ...DEVELOPER_ROLES,\n    );\n    const build = await createBuildRecord(project, c.req.valid(\"json\"));\n    const uploadUrl = `/api/v1/projects/${project.slug}/builds/${build.id}/zip`;\n    return c.json(\n      { build, uploadUrl, baselineSha: build.baselineSha, testing: getStore().testing },\n      202,\n    );\n  });\n\n  app.openapi(affectedRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const { baselineSha, changedFiles, affectedImportPaths } = c.req.valid(\"json\");\n    const updated = await new BuildModel(getStore().db).setAffected(build.id, {\n      baselineSha,\n      changedFiles,\n      affectedImportPaths,\n    });\n    return c.json(updated);\n  });\n\n  app.openapi(usageRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const { usage } = c.req.valid(\"json\");\n    const stored = await new PackageUsageModel(getStore().db).replaceForBuild(\n      project.id,\n      build.id,\n      usage,\n    );\n    return c.json({ stored });\n  });\n\n  app.openapi(uploadZipRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    if (build.status === \"failed\") {\n      throw new HTTPException(409, {\n        message: `Build ${build.id} failed; run storyshelf upload again to create a new build`,\n      });\n    }\n    const maxBytes = getStore().config.maxUploadBytes ?? DEFAULT_MAX_UPLOAD_BYTES;\n    const zipBytes = await storeUploadStream(\n      getStore().storage,\n      storybookZipPath(project.id, build.id),\n      c.req.raw.body,\n      maxBytes,\n    );\n    const route = await planOrDiscard(zipBytes, project.id, build.id);\n    const reqId = c.get(\"requestId\");\n    const published = await publishUpload(route, build, reqId);\n    await getStore().enqueueCapture?.(build.id, reqId);\n    return c.json(published, 202);\n  });\n\n  app.openapi(dedupRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    await buildForProject(project.id, buildId);\n    const { hashes } = c.req.valid(\"json\");\n    const needed: string[] = [];\n    for (const hash of hashes) {\n      if (!(await getStore().storage.exists(`content/${hash}`))) {\n        needed.push(hash);\n      }\n    }\n    return c.json({ needed });\n  });\n\n  // oxlint-disable eslint(max-depth) -- dedup upload handler is intentionally nested for batch handling\n  app.openapi(contentUploadRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    await buildForProject(project.id, buildId);\n    const contentType = c.req.header(\"content-type\") ?? \"\";\n    if (contentType.includes(\"multipart/\")) {\n      const form = await c.req.formData();\n      for (const [key, value] of form.entries()) {\n        if (value instanceof File) {\n          const hash = key;\n          const buffer = Buffer.from(await value.arrayBuffer());\n          await getStore().storage.write(`content/${hash}`, buffer);\n          await upsertContentRef(hash);\n        }\n      }\n    } else {\n      // Single content upload via PUT with hash header\n      const hash = c.req.header(\"x-content-hash\") ?? \"\";\n      if (!hash) throw new HTTPException(400, { message: \"Missing X-Content-Hash\" });\n      const buffer = Buffer.from(await c.req.arrayBuffer());\n      await getStore().storage.write(`content/${hash}`, buffer);\n    }\n    return c.json({ ok: true });\n  });\n\n  app.openapi(manifestRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const { files } = c.req.valid(\"json\");\n    const manifest: Record<string, string> = {};\n    for (const f of files) {\n      manifest[f.rel] = f.hash;\n    }\n    await getStore().storage.write(\n      `${project.id}/builds/${build.id}/storybook/manifest.json`,\n      Buffer.from(JSON.stringify(manifest)),\n    );\n    // Upsert content_refs for each hash\n    for (const f of files) {\n      try {\n        const contentRefs = getStore().db.tables.contentRefs;\n        const now = new Date().toISOString();\n        const existing = await getStore().db.get(contentRefs, f.hash);\n        // oxlint-disable-next-line unicorn/no-if-else -- upsert is clearer as if/else\n        if (!existing) {\n          await getStore().db.insert(contentRefs, {\n            hash: f.hash,\n            refCount: 1,\n            lastSeenAt: now,\n            createdAt: now,\n          });\n        } else {\n          await getStore().db.update(contentRefs, f.hash, {\n            lastSeenAt: now,\n          });\n        }\n      } catch {\n        // ignore — content_refs may not exist\n      }\n    }\n    // The files are stored content-addressed: nothing to extract, so publishing is complete.\n    await getStore().publish?.completer.complete(build.id, { ok: true });\n    const reqId = c.get(\"requestId\");\n    await getStore().enqueueCapture?.(build.id, reqId);\n    return c.json({ ok: true });\n  });\n\n  app.openapi(getBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    return c.json(build);\n  });\n\n  app.openapi(retryBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const updated = await new BuildModel(getStore().db).resetStatus(build.id, \"pending\");\n    await getStore().enqueueCapture?.(build.id, c.get(\"requestId\"));\n    hxRefresh(c);\n    flashHx(c, \"Capture queued\");\n    return c.json(updated, 202);\n  });\n\n  app.openapi(deleteBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await new BuildModel(getStore().db).remove(build.id);\n    return c.body(null, 204);\n  });\n\n  registerSnapshots(app);\n  registerComments(app);\n  registerBuildReviews(app);\n  registerBuildChangeset(app);\n  registerBuildCancel(app);\n  registerAttempts(app);\n}\n\nconst listBuildsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Builds\"],\n  summary: \"List builds\",\n  path: \"/api/v1/projects/{slug}/builds\",\n  request: { params: z.object({ slug: z.string() }), query: buildListQuery },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: buildSchema.array() } },\n      description: \"List builds for a project\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst buildCreatedSchema = z\n  .object({\n    build: buildSchema,\n    uploadUrl: z.string(),\n    baselineSha: z.string().nullable(),\n    testing: z.boolean().openapi({\n      description:\n        \"False when the server has no `testing` option: the build is published but never captured or compared.\",\n    }),\n  })\n  .openapi(\"BuildCreated\");\n\nconst createBuildRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Create a build\",\n  path: \"/api/v1/projects/{slug}/builds\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: {\n      content: {\n        \"application/json\": { schema: buildCreateJsonSchema },\n      },\n    },\n  },\n  responses: {\n    202: {\n      content: {\n        \"application/json\": {\n          schema: buildCreatedSchema,\n        },\n      },\n      description:\n        \"Build created. PUT the Storybook zip to uploadUrl to publish it (and queue capture when testing is on).\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst uploadZipRoute = createRoute({\n  method: \"put\",\n  tags: [\"Builds\"],\n  summary: \"Upload the Storybook zip\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/zip\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: {\n      content: {\n        \"application/zip\": {\n          schema: z.string().openapi({ type: \"string\", format: \"binary\" }),\n        },\n      },\n    },\n  },\n  responses: {\n    202: {\n      content: { \"application/json\": { schema: buildSchema } },\n      description:\n        \"Zip stored. A zip up to maxInlineUnzipSize (default 50 MB) is extracted inline in this request; a larger one is published by a background job. With testing off, the build becomes approved when publishing finishes on the project's default branch (failed if it cannot be published) and stays pending on other branches; with testing on, capture sets the status.\",\n    },\n    422: {\n      content: { \"text/plain\": { schema: z.string() } },\n      description:\n        \"The inline zip is invalid, unsafe, or exceeds the extraction limits. The build ends `failed`; upload again to create a new build.\",\n    },\n    409: {\n      content: { \"application/json\": { schema: z.object({ message: z.string() }) } },\n      description: \"The build already failed (for example a rejected zip); create a new build\",\n    },\n    413: {\n      content: {\n        \"application/json\": {\n          schema: z.object({ message: z.string() }).openapi(\"Error\"),\n        },\n      },\n      description:\n        \"Upload exceeds the configured size limit, or the zip is over the inline limit and this host (serverless) runs no publish consumer: upload file by file instead (POST /dedup, PUT /content, POST /manifest)\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst dedupHashesSchema = z.object({ hashes: z.array(z.string()) });\nconst dedupNeededSchema = z.object({ needed: z.array(z.string()) });\nconst dedupRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Check which files need uploading\",\n  description:\n    \"File-by-file upload, step 1 (dedup, content, manifest): needs no zip extraction and works on any host, serverless included. Send the content hashes; the response lists those the server does not hold yet.\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/dedup\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"application/json\": { schema: dedupHashesSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: dedupNeededSchema } },\n      description: \"Hashes needed for upload\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst contentUploadRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Upload build content\",\n  description:\n    \"File-by-file upload, step 2: store the missing files content-addressed (multipart, or one file with an X-Content-Hash header).\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/content\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"multipart/form-data\": { schema: z.any() } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: z.object({ ok: z.boolean() }) } },\n      description: \"Content uploaded\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst manifestFileSchema = z.object({ rel: z.string(), hash: z.string(), size: z.number() });\nconst manifestRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Store the build manifest\",\n  description:\n    \"File-by-file upload, step 3: store the path-to-hash manifest. This completes publishing. With testing off the build becomes approved when it is on the project's default branch and stays pending on other branches; with testing on, a capture is queued and sets the status.\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/manifest\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: {\n      content: {\n        \"application/json\": {\n          schema: z.object({ files: z.array(manifestFileSchema) }),\n        },\n      },\n    },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: z.object({ ok: z.boolean() }) } },\n      description: \"Manifest stored\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst affectedPayloadSchema = z.object({\n  baselineSha: z.string().nullable(),\n  changedFiles: z.array(z.string()).max(20_000),\n  affectedImportPaths: z.array(z.string()).max(20_000).nullable(),\n});\nconst affectedRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Record the affected stories\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/affected\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"application/json\": { schema: affectedPayloadSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: buildSchema } },\n      description: \"Affected set recorded\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst usagePayloadSchema = z.object({\n  usage: z\n    .array(\n      z.object({\n        storyImportPath: z.string().min(1).max(1024),\n        packageName: z.string().min(1).max(214),\n        modulePath: z.string().min(1).max(2048),\n        version: z.string().max(128).nullable().optional(),\n      }),\n    )\n    .max(20_000),\n});\nconst usageRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Record the dependency packages each story uses\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/usage\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"application/json\": { schema: usagePayloadSchema } } },\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: z.object({ stored: z.number() }) } },\n      description: \"Usage recorded (replaces any earlier report for the build)\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst getBuildRoute = createRoute({\n  method: \"get\",\n  tags: [\"Builds\"],\n  summary: \"Get a build\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: buildSchema } }, description: \"Fetch a build\" },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst retryBuildRoute = createRoute({\n  method: \"post\",\n  tags: [\"Builds\"],\n  summary: \"Retry capture\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/retry\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    202: {\n      content: { \"application/json\": { schema: buildSchema } },\n      description: \"Build reset to pending and capture re-queued (new attempt)\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteBuildRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Builds\"],\n  summary: \"Delete a build\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    204: { description: \"Build deleted\" },\n    ...notFoundResponse,\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAqBA,eAAe,cACb,UACA,WACA,SAC2B;CAC3B,IAAI;EACF,OAAO,WAAW,QAAQ;CAC5B,SAAS,OAAO;EACd,MAAM,WAAW,WAAW,OAAO;EACnC,MAAM;CACR;AACF;AAEA,eAAe,iBAAiB,MAA6B;CAC3D,IAAI;EACF,MAAM,cAAc,SAAS,CAAC,CAAC,GAAG,OAAO;EACzC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAW,MAAM,SAAS,CAAC,CAAC,GAAG,IAAI,aAAa,IAAI;EAC1D,IAAI,UACF,MAAM,SAAS,CAAC,CAAC,GAAG,OAAO,aAAa,MAAM;GAC5C,UAAW,SAAkC,WAAW;GACxD,YAAY;EACd,CAAC;OAED,MAAM,SAAS,CAAC,CAAC,GAAG,OAAO,aAAa;GACtC;GACA,UAAU;GACV,YAAY;GACZ,WAAW;EACb,CAAC;CAEL,QAAQ,CAER;AACF;;AAiBA,SAAgB,eAAe,KAAwB;CACrD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,MAAM,EAAE,QAAQ,QAAQ,UAAU,eAAe,EAAE,IAAI,MAAM,OAAO;EACpE,MAAM,SAAS,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI;GAC5D;GACA,QAAQ,UAAU,KAAA;GAClB,UAAU,YAAY,KAAA;GACtB,YAAY,cAAc,KAAA;EAC5B,CAAC;EACD,OAAO,EAAE,KAAK,MAAM,MAAM;CAC5B,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBACpB,GACA,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MACrB,GAAG,eACL;EACA,MAAM,QAAQ,MAAM,kBAAkB,SAAS,EAAE,IAAI,MAAM,MAAM,CAAC;EAClE,MAAM,YAAY,oBAAoB,QAAQ,KAAK,UAAU,MAAM,GAAG;EACtE,OAAO,EAAE,KACP;GAAE;GAAO;GAAW,aAAa,MAAM;GAAa,SAAS,SAAS,CAAC,CAAC;EAAQ,GAChF,GACF;CACF,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,EAAE,aAAa,cAAc,wBAAwB,EAAE,IAAI,MAAM,MAAM;EAC7E,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,IAAI;GACxE;GACA;GACA;EACF,CAAC;EACD,OAAO,EAAE,KAAK,OAAO;CACvB,CAAC;CAED,IAAI,QAAQ,YAAY,OAAO,MAAM;EACnC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,MAAM;EACpC,MAAM,SAAS,MAAM,IAAI,kBAAkB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,gBACxD,QAAQ,IACR,MAAM,IACN,KACF;EACA,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;CAC1B,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,IAAI,MAAM,WAAW,UACnB,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,SAAS,MAAM,GAAG,4DAC7B,CAAC;EAEH,MAAM,WAAW,SAAS,CAAC,CAAC,OAAO,kBAAkB;EAOrD,MAAM,QAAQ,MAAM,cAAc,MANX,kBACrB,SAAS,CAAC,CAAC,SACX,iBAAiB,QAAQ,IAAI,MAAM,EAAE,GACrC,EAAE,IAAI,IAAI,MACV,QACF,GAC4C,QAAQ,IAAI,MAAM,EAAE;EAChE,MAAM,QAAQ,EAAE,IAAI,WAAW;EAC/B,MAAM,YAAY,MAAM,cAAc,OAAO,OAAO,KAAK;EACzD,MAAM,SAAS,CAAC,CAAC,iBAAiB,MAAM,IAAI,KAAK;EACjD,OAAO,EAAE,KAAK,WAAW,GAAG;CAC9B,CAAC;CAED,IAAI,QAAQ,YAAY,OAAO,MAAM;EACnC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACzC,MAAM,EAAE,WAAW,EAAE,IAAI,MAAM,MAAM;EACrC,MAAM,SAAmB,CAAC;EAC1B,KAAK,MAAM,QAAQ,QACjB,IAAI,CAAE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,WAAW,MAAM,GACrD,OAAO,KAAK,IAAI;EAGpB,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;CAC1B,CAAC;CAGD,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EAEzC,KADoB,EAAE,IAAI,OAAO,cAAc,KAAK,GAAA,CACpC,SAAS,YAAY,GAAG;GACtC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;GAClC,KAAK,MAAM,CAAC,KAAK,UAAU,KAAK,QAAQ,GACtC,IAAI,iBAAiB,MAAM;IACzB,MAAM,OAAO;IACb,MAAM,SAAS,OAAO,KAAK,MAAM,MAAM,YAAY,CAAC;IACpD,MAAM,SAAS,CAAC,CAAC,QAAQ,MAAM,WAAW,QAAQ,MAAM;IACxD,MAAM,iBAAiB,IAAI;GAC7B;EAEJ,OAAO;GAEL,MAAM,OAAO,EAAE,IAAI,OAAO,gBAAgB,KAAK;GAC/C,IAAI,CAAC,MAAM,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,yBAAyB,CAAC;GAC7E,MAAM,SAAS,OAAO,KAAK,MAAM,EAAE,IAAI,YAAY,CAAC;GACpD,MAAM,SAAS,CAAC,CAAC,QAAQ,MAAM,WAAW,QAAQ,MAAM;EAC1D;EACA,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,MAAM;EACpC,MAAM,WAAmC,CAAC;EAC1C,KAAK,MAAM,KAAK,OACd,SAAS,EAAE,OAAO,EAAE;EAEtB,MAAM,SAAS,CAAC,CAAC,QAAQ,MACvB,GAAG,QAAQ,GAAG,UAAU,MAAM,GAAG,2BACjC,OAAO,KAAK,KAAK,UAAU,QAAQ,CAAC,CACtC;EAEA,KAAK,MAAM,KAAK,OACd,IAAI;GACF,MAAM,cAAc,SAAS,CAAC,CAAC,GAAG,OAAO;GACzC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;GAGnC,IAAI,CAAC,MAFkB,SAAS,CAAC,CAAC,GAAG,IAAI,aAAa,EAAE,IAAI,GAG1D,MAAM,SAAS,CAAC,CAAC,GAAG,OAAO,aAAa;IACtC,MAAM,EAAE;IACR,UAAU;IACV,YAAY;IACZ,WAAW;GACb,CAAC;QAED,MAAM,SAAS,CAAC,CAAC,GAAG,OAAO,aAAa,EAAE,MAAM,EAC9C,YAAY,IACd,CAAC;EAEL,QAAQ,CAER;EAGF,MAAM,SAAS,CAAC,CAAC,SAAS,UAAU,SAAS,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC;EACnE,MAAM,QAAQ,EAAE,IAAI,WAAW;EAC/B,MAAM,SAAS,CAAC,CAAC,iBAAiB,MAAM,IAAI,KAAK;EACjD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,OAAO,EAAE,KAAK,KAAK;CACrB,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,IAAI,SAAS;EACnF,MAAM,SAAS,CAAC,CAAC,iBAAiB,MAAM,IAAI,EAAE,IAAI,WAAW,CAAC;EAC9D,UAAU,CAAC;EACX,QAAQ,GAAG,gBAAgB;EAC3B,OAAO,EAAE,KAAK,SAAS,GAAG;CAC5B,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;CAED,kBAAkB,GAAG;CACrB,iBAAiB,GAAG;CACpB,qBAAqB,GAAG;CACxB,uBAAuB,GAAG;CAC1B,oBAAoB,GAAG;CACvB,iBAAiB,GAAG;AACtB;AAEA,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EAAG,OAAO;CAAe;CACzE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,MAAM,EAAE,EAAE;GAC/D,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,EACxB,OAAO;CACN,OAAO;CACP,WAAW,EAAE,OAAO;CACpB,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAC3B,aACE,wGACJ,CAAC;AACH,CAAC,CAAC,CACD,QAAQ,cAAc;AAEzB,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EACJ,SAAS,EACP,oBAAoB,EAAE,QAAQ,sBAAsB,EACtD,EACF;CACF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EACP,oBAAoB,EAClB,QAAQ,mBACV,EACF;GACA,aACE;EACJ;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EACJ,SAAS,EACP,mBAAmB,EACjB,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ;GAAE,MAAM;GAAU,QAAQ;EAAS,CAAC,EACjE,EACF,EACF;CACF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aACE;EACJ;EACA,KAAK;GACH,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;GAChD,aACE;EACJ;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC7E,aAAa;EACf;EACA,KAAK;GACH,SAAS,EACP,oBAAoB,EAClB,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,OAAO,EAC3D,EACF;GACA,aACE;EACJ;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAClE,MAAM,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAClE,MAAM,aAAa,YAAY;CAC7B,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,aACE;CACF,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CACzE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE;GAC7D,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,aACE;CACF,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;CAClE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;GACzE,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;CAAE,KAAK,EAAE,OAAO;CAAG,MAAM,EAAE,OAAO;CAAG,MAAM,EAAE,OAAO;AAAE,CAAC;AAC3F,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,aACE;CACF,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EACJ,SAAS,EACP,oBAAoB,EAClB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,EAAE,CAAC,EACzD,EACF,EACF;CACF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;GACzE,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;CACrC,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,GAAM;CAC5C,qBAAqB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,GAAM,CAAC,CAAC,SAAS;AAChE,CAAC;AACD,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE,EAAE;CAC7E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO,EAClC,OAAO,EACJ,MACC,EAAE,OAAO;CACP,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;CAC3C,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACtC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;CACtC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AACnD,CAAC,CACH,CAAC,CACA,IAAI,GAAM,EACf,CAAC;AACD,MAAM,aAAa,YAAY;CAC7B,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE,EAAE;CAC1E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC5E,aAAa;EACf;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GAAG,aAAa;EAAgB;EAC9F,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC"}

package/dist/routers/publish-upload.mjs

@@ -2,8 +2,9 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
+import { announceBuildStatus } from "./builds.handlers.mjs";
 import { DEFAULT_SCRATCH_DIR } from "@storyshelf/core/config";
-import { storybookZipPath } from "@storyshelf/core/utils";
+import { sanitizeErrorText, storybookZipPath } from "@storyshelf/core/utils";
 import { FILE_BY_FILE_HINT, ZipInvalidError, ZipLimitError, extractionLimitsOf, publishRoute, publishStoredZip, resolvePublishLimits } from "@storyshelf/core/capture";
 import { BuildModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
@@ -62,12 +63,37 @@ async function publishInline(build) {
 		await publish?.completer.complete(build.id, { ok: true });
 	} catch (error) {
 		if (error instanceof ZipInvalidError || error instanceof ZipLimitError) {
-			await discardZip(build.projectId, build.id);
+			await rejectInlineZip(build, error.message);
 			throw new HTTPException(422, { message: error.message });
 		}
 		await failInlinePublish(build, error);
 	}
 }
+/**
+* An inline zip that is invalid or breaks a cap ends the build `failed`: a retry is a new upload
+* (a new build), so a build left `pending` would never resolve, and a git check already queued for
+* it would stay pending. The validation message is the sanitized reason, sent with `build:failed`.
+* Only a build still waiting for its upload (`pending`) fails: a cancelled one stays cancelled and
+* never raises `build:failed`, and a build past that point (reviewing, approved) keeps its verdict,
+* so a bad re-upload is just refused with the `422`.
+*/
+async function rejectInlineZip(build, reason) {
+	await discardZip(build.projectId, build.id);
+	const { applied } = await new BuildModel(getStore().db).failIfPending(build.id);
+	if (!applied) return;
+	getStore().logger.warn({
+		buildId: build.id,
+		reason
+	}, "inline zip rejected; build failed");
+	try {
+		await announceBuildStatus(build.id, "failed", { reason: sanitizeErrorText(reason, 300) });
+	} catch (error) {
+		getStore().logger.warn({
+			err: error,
+			buildId: build.id
+		}, "inline zip rejection not announced");
+	}
+}
 async function failInlinePublish(build, error) {
 	const { logger, publish } = getStore();
 	const message = error instanceof Error ? error.message : String(error);

package/dist/routers/publish-upload.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"publish-upload.mjs","names":[],"sources":["../../src/routers/publish-upload.ts"],"sourcesContent":["/**\n * What the zip upload route does once the zip is stored (ADR 0006, decision 10): extract it\n * inline when it is small, hand it to a `publish` job when it is larger, or refuse it with a\n * pointer to the file-by-file route on a host that runs no consumer.\n */\nimport {\n  extractionLimitsOf,\n  FILE_BY_FILE_HINT,\n  publishRoute,\n  publishStoredZip,\n  resolvePublishLimits,\n  ZipInvalidError,\n  ZipLimitError,\n} from \"@storyshelf/core/capture\";\nimport { DEFAULT_SCRATCH_DIR } from \"@storyshelf/core/config\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport { storybookZipPath } from \"@storyshelf/core/utils\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { getStore } from \"../store.ts\";\n\n/** How an upload of `zipBytes` will be published, or a 413 when this host cannot publish it. */\nexport function planUpload(zipBytes: number): \"inline\" | \"job\" {\n  const { config, publish } = getStore();\n  const route = publishRoute(zipBytes, resolvePublishLimits(config));\n  if (route === \"job\" && !publish?.enqueuePublish) {\n    throw new HTTPException(413, { message: FILE_BY_FILE_HINT });\n  }\n  return route;\n}\n\n/** Remove a stored zip that was refused (best effort), so no orphan is left behind. */\nexport async function discardZip(projectId: string, buildId: string): Promise<void> {\n  try {\n    await getStore().storage.delete(storybookZipPath(projectId, buildId));\n  } catch (error) {\n    getStore().logger.warn({ err: error, buildId }, \"could not remove a refused zip\");\n  }\n}\n\n/**\n * Publish the stored zip of `build` per `route`. Inline: extract now and complete the build (a\n * failure fails it, or, with a capture to come, is left for capture to backfill). Job: queue it.\n * Resolves to the build as it stands afterwards.\n */\nexport async function publishUpload(\n  route: \"inline\" | \"job\",\n  build: Build,\n  reqId: string | undefined,\n): Promise<Build> {\n  const { publish } = getStore();\n  if (route === \"job\") {\n    await publish?.enqueuePublish?.(build.id, reqId);\n    return build;\n  }\n  await publishInline(build);\n  return (await new BuildModel(getStore().db).get(build.id)) ?? build;\n}\n\nasync function publishInline(build: Build): Promise<void> {\n  const { storage, config, logger, publish, db } = getStore();\n  try {\n    await publishStoredZip(\n      {\n        storage,\n        scratchDir: config.scratchDir ?? DEFAULT_SCRATCH_DIR,\n        limits: extractionLimitsOf(resolvePublishLimits(config)),\n        db,\n        logger,\n      },\n      { projectId: build.projectId, buildId: build.id },\n    );\n    logger.info({ buildId: build.id }, \"upload statics persisted inline\");\n    await publish?.completer.complete(build.id, { ok: true });\n  } catch (error) {\n    if (error instanceof ZipInvalidError || error instanceof ZipLimitError) {\n      await discardZip(build.projectId, build.id);\n      throw new HTTPException(422, { message: error.message });\n    }\n    await failInlinePublish(build, error);\n  }\n}\n\nasync function failInlinePublish(build: Build, error: unknown): Promise<void> {\n  const { logger, publish } = getStore();\n  const message = error instanceof Error ? error.message : String(error);\n  logger.error({ err: error, buildId: build.id }, \"inline publish failed\");\n  await publish?.completer.complete(build.id, { ok: false, error: message });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAsBA,SAAgB,WAAW,UAAoC;CAC7D,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,QAAQ,aAAa,UAAU,qBAAqB,MAAM,CAAC;CACjE,IAAI,UAAU,SAAS,CAAC,SAAS,gBAC/B,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,kBAAkB,CAAC;CAE7D,OAAO;AACT;;AAGA,eAAsB,WAAW,WAAmB,SAAgC;CAClF,IAAI;EACF,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,iBAAiB,WAAW,OAAO,CAAC;CACtE,SAAS,OAAO;EACd,SAAS,CAAC,CAAC,OAAO,KAAK;GAAE,KAAK;GAAO;EAAQ,GAAG,gCAAgC;CAClF;AACF;;;;;;AAOA,eAAsB,cACpB,OACA,OACA,OACgB;CAChB,MAAM,EAAE,YAAY,SAAS;CAC7B,IAAI,UAAU,OAAO;EACnB,MAAM,SAAS,iBAAiB,MAAM,IAAI,KAAK;EAC/C,OAAO;CACT;CACA,MAAM,cAAc,KAAK;CACzB,OAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,KAAM;AAChE;AAEA,eAAe,cAAc,OAA6B;CACxD,MAAM,EAAE,SAAS,QAAQ,QAAQ,SAAS,OAAO,SAAS;CAC1D,IAAI;EACF,MAAM,iBACJ;GACE;GACA,YAAY,OAAO,cAAc;GACjC,QAAQ,mBAAmB,qBAAqB,MAAM,CAAC;GACvD;GACA;EACF,GACA;GAAE,WAAW,MAAM;GAAW,SAAS,MAAM;EAAG,CAClD;EACA,OAAO,KAAK,EAAE,SAAS,MAAM,GAAG,GAAG,iCAAiC;EACpE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC;CAC1D,SAAS,OAAO;EACd,IAAI,iBAAiB,mBAAmB,iBAAiB,eAAe;GACtE,MAAM,WAAW,MAAM,WAAW,MAAM,EAAE;GAC1C,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,MAAM,QAAQ,CAAC;EACzD;EACA,MAAM,kBAAkB,OAAO,KAAK;CACtC;AACF;AAEA,eAAe,kBAAkB,OAAc,OAA+B;CAC5E,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,OAAO,MAAM;EAAE,KAAK;EAAO,SAAS,MAAM;CAAG,GAAG,uBAAuB;CACvE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI;EAAE,IAAI;EAAO,OAAO;CAAQ,CAAC;AAC3E"}
+{"version":3,"file":"publish-upload.mjs","names":[],"sources":["../../src/routers/publish-upload.ts"],"sourcesContent":["/**\n * What the zip upload route does once the zip is stored (ADR 0006, decision 10): extract it\n * inline when it is small, hand it to a `publish` job when it is larger, or refuse it with a\n * pointer to the file-by-file route on a host that runs no consumer.\n */\nimport {\n  extractionLimitsOf,\n  FILE_BY_FILE_HINT,\n  publishRoute,\n  publishStoredZip,\n  resolvePublishLimits,\n  ZipInvalidError,\n  ZipLimitError,\n} from \"@storyshelf/core/capture\";\nimport { DEFAULT_SCRATCH_DIR } from \"@storyshelf/core/config\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport { sanitizeErrorText, storybookZipPath } from \"@storyshelf/core/utils\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { getStore } from \"../store.ts\";\nimport { announceBuildStatus } from \"./builds.handlers.ts\";\n\n/** How an upload of `zipBytes` will be published, or a 413 when this host cannot publish it. */\nexport function planUpload(zipBytes: number): \"inline\" | \"job\" {\n  const { config, publish } = getStore();\n  const route = publishRoute(zipBytes, resolvePublishLimits(config));\n  if (route === \"job\" && !publish?.enqueuePublish) {\n    throw new HTTPException(413, { message: FILE_BY_FILE_HINT });\n  }\n  return route;\n}\n\n/** Remove a stored zip that was refused (best effort), so no orphan is left behind. */\nexport async function discardZip(projectId: string, buildId: string): Promise<void> {\n  try {\n    await getStore().storage.delete(storybookZipPath(projectId, buildId));\n  } catch (error) {\n    getStore().logger.warn({ err: error, buildId }, \"could not remove a refused zip\");\n  }\n}\n\n/**\n * Publish the stored zip of `build` per `route`. Inline: extract now and complete the build (a\n * failure fails it, or, with a capture to come, is left for capture to backfill). Job: queue it.\n * Resolves to the build as it stands afterwards.\n */\nexport async function publishUpload(\n  route: \"inline\" | \"job\",\n  build: Build,\n  reqId: string | undefined,\n): Promise<Build> {\n  const { publish } = getStore();\n  if (route === \"job\") {\n    await publish?.enqueuePublish?.(build.id, reqId);\n    return build;\n  }\n  await publishInline(build);\n  return (await new BuildModel(getStore().db).get(build.id)) ?? build;\n}\n\nasync function publishInline(build: Build): Promise<void> {\n  const { storage, config, logger, publish, db } = getStore();\n  try {\n    await publishStoredZip(\n      {\n        storage,\n        scratchDir: config.scratchDir ?? DEFAULT_SCRATCH_DIR,\n        limits: extractionLimitsOf(resolvePublishLimits(config)),\n        db,\n        logger,\n      },\n      { projectId: build.projectId, buildId: build.id },\n    );\n    logger.info({ buildId: build.id }, \"upload statics persisted inline\");\n    await publish?.completer.complete(build.id, { ok: true });\n  } catch (error) {\n    if (error instanceof ZipInvalidError || error instanceof ZipLimitError) {\n      await rejectInlineZip(build, error.message);\n      throw new HTTPException(422, { message: error.message });\n    }\n    await failInlinePublish(build, error);\n  }\n}\n\n/**\n * An inline zip that is invalid or breaks a cap ends the build `failed`: a retry is a new upload\n * (a new build), so a build left `pending` would never resolve, and a git check already queued for\n * it would stay pending. The validation message is the sanitized reason, sent with `build:failed`.\n * Only a build still waiting for its upload (`pending`) fails: a cancelled one stays cancelled and\n * never raises `build:failed`, and a build past that point (reviewing, approved) keeps its verdict,\n * so a bad re-upload is just refused with the `422`.\n */\nasync function rejectInlineZip(build: Build, reason: string): Promise<void> {\n  await discardZip(build.projectId, build.id);\n  // One conditional write: only a build still `pending` fails. A cancel, a verdict or a retry that\n  // landed since the route read the build keeps its status and raises no `build:failed`.\n  const { applied } = await new BuildModel(getStore().db).failIfPending(build.id);\n  if (!applied) {\n    return;\n  }\n  getStore().logger.warn({ buildId: build.id, reason }, \"inline zip rejected; build failed\");\n  try {\n    await announceBuildStatus(build.id, \"failed\", { reason: sanitizeErrorText(reason, 300) });\n  } catch (error) {\n    // The build is already failed; a notifier or subscription error must not turn the 422 into a 500.\n    getStore().logger.warn({ err: error, buildId: build.id }, \"inline zip rejection not announced\");\n  }\n}\n\nasync function failInlinePublish(build: Build, error: unknown): Promise<void> {\n  const { logger, publish } = getStore();\n  const message = error instanceof Error ? error.message : String(error);\n  logger.error({ err: error, buildId: build.id }, \"inline publish failed\");\n  await publish?.completer.complete(build.id, { ok: false, error: message });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAuBA,SAAgB,WAAW,UAAoC;CAC7D,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,QAAQ,aAAa,UAAU,qBAAqB,MAAM,CAAC;CACjE,IAAI,UAAU,SAAS,CAAC,SAAS,gBAC/B,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,kBAAkB,CAAC;CAE7D,OAAO;AACT;;AAGA,eAAsB,WAAW,WAAmB,SAAgC;CAClF,IAAI;EACF,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,iBAAiB,WAAW,OAAO,CAAC;CACtE,SAAS,OAAO;EACd,SAAS,CAAC,CAAC,OAAO,KAAK;GAAE,KAAK;GAAO;EAAQ,GAAG,gCAAgC;CAClF;AACF;;;;;;AAOA,eAAsB,cACpB,OACA,OACA,OACgB;CAChB,MAAM,EAAE,YAAY,SAAS;CAC7B,IAAI,UAAU,OAAO;EACnB,MAAM,SAAS,iBAAiB,MAAM,IAAI,KAAK;EAC/C,OAAO;CACT;CACA,MAAM,cAAc,KAAK;CACzB,OAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,KAAM;AAChE;AAEA,eAAe,cAAc,OAA6B;CACxD,MAAM,EAAE,SAAS,QAAQ,QAAQ,SAAS,OAAO,SAAS;CAC1D,IAAI;EACF,MAAM,iBACJ;GACE;GACA,YAAY,OAAO,cAAc;GACjC,QAAQ,mBAAmB,qBAAqB,MAAM,CAAC;GACvD;GACA;EACF,GACA;GAAE,WAAW,MAAM;GAAW,SAAS,MAAM;EAAG,CAClD;EACA,OAAO,KAAK,EAAE,SAAS,MAAM,GAAG,GAAG,iCAAiC;EACpE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC;CAC1D,SAAS,OAAO;EACd,IAAI,iBAAiB,mBAAmB,iBAAiB,eAAe;GACtE,MAAM,gBAAgB,OAAO,MAAM,OAAO;GAC1C,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,MAAM,QAAQ,CAAC;EACzD;EACA,MAAM,kBAAkB,OAAO,KAAK;CACtC;AACF;;;;;;;;;AAUA,eAAe,gBAAgB,OAAc,QAA+B;CAC1E,MAAM,WAAW,MAAM,WAAW,MAAM,EAAE;CAG1C,MAAM,EAAE,YAAY,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,MAAM,EAAE;CAC9E,IAAI,CAAC,SACH;CAEF,SAAS,CAAC,CAAC,OAAO,KAAK;EAAE,SAAS,MAAM;EAAI;CAAO,GAAG,mCAAmC;CACzF,IAAI;EACF,MAAM,oBAAoB,MAAM,IAAI,UAAU,EAAE,QAAQ,kBAAkB,QAAQ,GAAG,EAAE,CAAC;CAC1F,SAAS,OAAO;EAEd,SAAS,CAAC,CAAC,OAAO,KAAK;GAAE,KAAK;GAAO,SAAS,MAAM;EAAG,GAAG,oCAAoC;CAChG;AACF;AAEA,eAAe,kBAAkB,OAAc,OAA+B;CAC5E,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,OAAO,MAAM;EAAE,KAAK;EAAO,SAAS,MAAM;CAAG,GAAG,uBAAuB;CACvE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI;EAAE,IAAI;EAAO,OAAO;CAAQ,CAAC;AAC3E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@storyshelf/app",
-  "version": "0.10.0-next-6e77ceb",
+  "version": "0.10.0-next-e151b58",
   "description": "StoryShelf app: Hono app, API routes, and server-rendered UI over @storyshelf/core.",
   "keywords": [
     "chromatic-alternative",
@@ -61,8 +61,8 @@
   "dependencies": {
     "@hono/swagger-ui": "^0.6.1",
     "@hono/zod-openapi": "^1.1.5",
-    "@storyshelf/core": "0.10.0-next-6e77ceb",
-    "@storyshelf/observability": "0.10.0-next-6e77ceb",
+    "@storyshelf/core": "0.10.0-next-e151b58",
+    "@storyshelf/observability": "0.10.0-next-e151b58",
     "hono": "^4.11.0",
     "zod": "^4.6.7"
   },
@@ -72,9 +72,9 @@
     "@opentelemetry/core": "^2.11.0",
     "@opentelemetry/sdk-trace-base": "^2.11.0",
     "@storybook/html-vite": "10.6.5",
-    "@storyshelf/auth": "0.10.0-next-6e77ceb",
-    "@storyshelf/db-sqlite": "0.10.0-next-6e77ceb",
-    "@storyshelf/design-figma": "0.10.0-next-6e77ceb",
+    "@storyshelf/auth": "0.10.0-next-e151b58",
+    "@storyshelf/db-sqlite": "0.10.0-next-e151b58",
+    "@storyshelf/design-figma": "0.10.0-next-e151b58",
     "@types/node": "^26.0.0",
     "@vitest/coverage-v8": "^4.0.0",
     "adm-zip": "0.6.1",