@storyshelf/app 0.5.3

package/dist/pages/settings-tests.mjs

@@ -0,0 +1,111 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { Button } from "../ui/buttons.mjs";
+import { Alert, Meta } from "../ui/feedback.mjs";
+import { CheckField, Field, FormActions } from "../ui/forms.mjs";
+import { Card, SectionTitle } from "../ui/layout.mjs";
+import { csrfField } from "../ui/csrf-field.mjs";
+import { jsx, jsxs } from "hono/jsx/jsx-runtime";
+//#region src/pages/settings-tests.tsx
+/** Interaction-tests settings tab: play execution toggle and timeout. */
+function renderSettingsTests(project, isAdmin, formState) {
+	return /* @__PURE__ */ jsxs("div", {
+		class: "grid max-w-form",
+		children: [
+			formState?.globalError ? /* @__PURE__ */ jsx(Alert, {
+				tone: "danger",
+				children: formState.globalError
+			}) : null,
+			/* @__PURE__ */ jsxs(Card, { children: [
+				/* @__PURE__ */ jsx(SectionTitle, { children: "Interaction tests" }),
+				/* @__PURE__ */ jsxs(Meta, { children: [
+					"When enabled, Storybook ",
+					/* @__PURE__ */ jsx("code", { children: "play" }),
+					" functions run before each screenshot. Failures block the build unless the story is marked",
+					/* @__PURE__ */ jsx("code", { children: "flaky-test" }),
+					" via ",
+					/* @__PURE__ */ jsx("code", { children: "tags: ['flaky-test']" }),
+					" or",
+					/* @__PURE__ */ jsx("code", { children: "parameters: { flakyTest: true }" }),
+					" (supports both",
+					" ",
+					/* @__PURE__ */ jsx("code", { children: "chromatic" }),
+					" and ",
+					/* @__PURE__ */ jsx("code", { children: "storyshelf" }),
+					" keys, story-level, case-insensitive). Use ",
+					/* @__PURE__ */ jsx("code", { children: "disableSnapshot" }),
+					" to skip a story entirely."
+				] }),
+				/* @__PURE__ */ jsxs("form", {
+					method: "post",
+					action: `/projects/${project.slug}/settings/tests`,
+					"hx-post": `/projects/${project.slug}/settings/tests`,
+					"hx-target": "body",
+					"hx-swap": "outerHTML",
+					children: [
+						csrfField(),
+						/* @__PURE__ */ jsx(CheckField, {
+							label: "Enable interaction tests (play)",
+							name: "executePlay",
+							value: "true",
+							checked: project.executePlay ? true : void 0,
+							disabled: !isAdmin,
+							hint: "When enabled, failing play blocks the build (failed). Flaky stories show warnings but status stays successful."
+						}),
+						/* @__PURE__ */ jsx(Field, {
+							label: "Play timeout (ms)",
+							name: "playTimeoutMs",
+							type: "number",
+							min: "1000",
+							max: "30000",
+							step: "1000",
+							value: String(project.playTimeoutMs),
+							disabled: !isAdmin,
+							hint: "Timeout for each play function (1000–30000 ms, default 10000)."
+						}),
+						isAdmin ? /* @__PURE__ */ jsx(FormActions, { children: /* @__PURE__ */ jsx(Button, {
+							variant: "primary",
+							type: "submit",
+							icon: "check",
+							children: "Save changes"
+						}) }) : /* @__PURE__ */ jsx(Meta, { children: "You need admin access to edit settings." })
+					]
+				})
+			] }),
+			/* @__PURE__ */ jsxs(Card, { children: [
+				/* @__PURE__ */ jsx(SectionTitle, {
+					level: 3,
+					children: "How to mark stories"
+				}),
+				/* @__PURE__ */ jsx(Meta, {
+					as: "pre",
+					children: `// Disable snapshot entirely (skip capture + play)
+export const Hidden: Story = {
+  parameters: { storyshelf: { disableSnapshot: true } }
+};
+// Mark as flaky (non-blocking, shows warning)
+export const Flaky: Story = {
+  tags: ['flaky-test'],
+  play: async ({canvasElement}) => { /* ... */ }
+};
+// or via parameters (both keys work, storyshelf wins)
+export const Flaky2: Story = {
+  parameters: { chromatic: { flakyTest: true } }
+};`
+				}),
+				/* @__PURE__ */ jsxs(Meta, { children: [
+					"Tags are story-level and case-insensitive (",
+					/* @__PURE__ */ jsx("code", { children: "flaky-test" }),
+					"). Whole story is non-blocking when flaky. GitHub status stays",
+					/* @__PURE__ */ jsx("code", { children: "success" }),
+					" with a warning comment."
+				] })
+			] })
+		]
+	});
+}
+//#endregion
+export { renderSettingsTests };
+
+//# sourceMappingURL=settings-tests.mjs.map

package/dist/pages/settings-tests.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-tests.mjs","names":[],"sources":["../../src/pages/settings-tests.tsx"],"sourcesContent":["import type { Project } from \"@storyshelf/core/schema\";\nimport {\n  Alert,\n  Button,\n  Card,\n  CheckField,\n  Field,\n  FormActions,\n  Meta,\n  SectionTitle,\n} from \"../ui/components.tsx\";\nimport { csrfField } from \"../ui/csrf-field.tsx\";\n\n/** Interaction-tests settings tab: play execution toggle and timeout. */\nexport function renderSettingsTests(\n  project: Project,\n  isAdmin: boolean,\n  formState?: { globalError?: string },\n): unknown {\n  return (\n    <div class=\"grid max-w-form\">\n      {formState?.globalError ? <Alert tone=\"danger\">{formState.globalError}</Alert> : null}\n      <Card>\n        <SectionTitle>Interaction tests</SectionTitle>\n        <Meta>\n          When enabled, Storybook <code>play</code> functions run before each screenshot. Failures\n          block the build unless the story is marked\n          <code>flaky-test</code> via <code>tags: ['flaky-test']</code> or\n          <code>parameters: &#123; flakyTest: true &#125;</code> (supports both{\" \"}\n          <code>chromatic</code> and <code>storyshelf</code> keys, story-level, case-insensitive).\n          Use <code>disableSnapshot</code> to skip a story entirely.\n        </Meta>\n        <form\n          method=\"post\"\n          action={`/projects/${project.slug}/settings/tests`}\n          hx-post={`/projects/${project.slug}/settings/tests`}\n          hx-target=\"body\"\n          hx-swap=\"outerHTML\"\n        >\n          {csrfField()}\n          <CheckField\n            label=\"Enable interaction tests (play)\"\n            name=\"executePlay\"\n            value=\"true\"\n            checked={project.executePlay ? true : undefined}\n            disabled={!isAdmin}\n            hint=\"When enabled, failing play blocks the build (failed). Flaky stories show warnings but status stays successful.\"\n          />\n          <Field\n            label=\"Play timeout (ms)\"\n            name=\"playTimeoutMs\"\n            type=\"number\"\n            min=\"1000\"\n            max=\"30000\"\n            step=\"1000\"\n            value={String(project.playTimeoutMs)}\n            disabled={!isAdmin}\n            hint=\"Timeout for each play function (1000–30000 ms, default 10000).\"\n          />\n          {isAdmin ? (\n            <FormActions>\n              <Button variant=\"primary\" type=\"submit\" icon=\"check\">\n                Save changes\n              </Button>\n            </FormActions>\n          ) : (\n            <Meta>You need admin access to edit settings.</Meta>\n          )}\n        </form>\n      </Card>\n      <Card>\n        <SectionTitle level={3}>How to mark stories</SectionTitle>\n        <Meta as=\"pre\">\n          {`// Disable snapshot entirely (skip capture + play)\nexport const Hidden: Story = {\n  parameters: { storyshelf: { disableSnapshot: true } }\n};\n// Mark as flaky (non-blocking, shows warning)\nexport const Flaky: Story = {\n  tags: ['flaky-test'],\n  play: async ({canvasElement}) => { /* ... */ }\n};\n// or via parameters (both keys work, storyshelf wins)\nexport const Flaky2: Story = {\n  parameters: { chromatic: { flakyTest: true } }\n};`}\n        </Meta>\n        <Meta>\n          Tags are story-level and case-insensitive (<code>flaky-test</code>). Whole story is\n          non-blocking when flaky. GitHub status stays\n          <code>success</code> with a warning comment.\n        </Meta>\n      </Card>\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;;AAcA,SAAgB,oBACd,SACA,SACA,WACS;CACT,OACE,qBAAC,OAAD;EAAK,OAAM;EAAX,UAAA;GACG,WAAW,cAAc,oBAAC,OAAD;IAAO,MAAK;IAAU,UAAA,UAAU;GAAmB,CAAA,IAAI;GACjF,qBAAC,MAAD,EAAA,UAAA;IACE,oBAAC,cAAD,EAAA,UAAc,oBAA+B,CAAA;IAC7C,qBAAC,MAAD,EAAA,UAAA;KAAM;KACoB,oBAAC,QAAD,EAAA,UAAM,OAAU,CAAA;KAAC;KAEzC,oBAAC,QAAD,EAAA,UAAM,aAAgB,CAAA;KAAC;KAAK,oBAAC,QAAD,EAAA,UAAM,uBAA0B,CAAA;KAAC;KAC7D,oBAAC,QAAD,EAAA,UAAM,kCAA+C,CAAA;KAAC;KAAgB;KACtE,oBAAC,QAAD,EAAA,UAAM,YAAe,CAAA;KAAC;KAAK,oBAAC,QAAD,EAAA,UAAM,aAAgB,CAAA;KAAC;KAC9C,oBAAC,QAAD,EAAA,UAAM,kBAAqB,CAAA;KAAC;IAC5B,EAAA,CAAA;IACN,qBAAC,QAAD;KACE,QAAO;KACP,QAAQ,aAAa,QAAQ,KAAK;KAClC,WAAS,aAAa,QAAQ,KAAK;KACnC,aAAU;KACV,WAAQ;KALV,UAAA;MAOG,UAAU;MACX,oBAAC,YAAD;OACE,OAAM;OACN,MAAK;OACL,OAAM;OACN,SAAS,QAAQ,cAAc,OAAO,KAAA;OACtC,UAAU,CAAC;OACX,MAAK;MACN,CAAA;MACD,oBAAC,OAAD;OACE,OAAM;OACN,MAAK;OACL,MAAK;OACL,KAAI;OACJ,KAAI;OACJ,MAAK;OACL,OAAO,OAAO,QAAQ,aAAa;OACnC,UAAU,CAAC;OACX,MAAK;MACN,CAAA;MACA,UACC,oBAAC,aAAD,EAAA,UACE,oBAAC,QAAD;OAAQ,SAAQ;OAAU,MAAK;OAAS,MAAK;OAAQ,UAAA;MAE7C,CAAA,EACG,CAAA,IAEb,oBAAC,MAAD,EAAA,UAAM,0CAA6C,CAAA;KAEjD;;GACF,EAAA,CAAA;GACN,qBAAC,MAAD,EAAA,UAAA;IACE,oBAAC,cAAD;KAAc,OAAO;KAAG,UAAA;IAAiC,CAAA;IACzD,oBAAC,MAAD;KAAM,IAAG;KACN,UAAA;;;;;;;;;;;;;IAaG,CAAA;IACN,qBAAC,MAAD,EAAA,UAAA;KAAM;KACuC,oBAAC,QAAD,EAAA,UAAM,aAAgB,CAAA;KAAC;KAElE,oBAAC,QAAD,EAAA,UAAM,UAAa,CAAA;KAAC;IAChB,EAAA,CAAA;GACF,EAAA,CAAA;EACH;;AAET"}

package/dist/pages/settings-tokens.mjs

@@ -0,0 +1,90 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { Button } from "../ui/buttons.mjs";
+import { Alert, Meta } from "../ui/feedback.mjs";
+import { Field, FormActions } from "../ui/forms.mjs";
+import { Card, SectionTitle } from "../ui/layout.mjs";
+import { Table } from "../ui/table.mjs";
+import { csrfField } from "../ui/csrf-field.mjs";
+import { jsx, jsxs } from "hono/jsx/jsx-runtime";
+//#region src/pages/settings-tokens.tsx
+/** Tokens settings tab: project CLI tokens plus the create-token form. */
+function renderSettingsTokens(project, tokens, isAdmin, formState) {
+	return /* @__PURE__ */ jsxs("div", {
+		class: "grid max-w-form",
+		children: [
+			formState?.secret ? /* @__PURE__ */ jsxs(Alert, {
+				tone: "success",
+				title: "Token created",
+				children: ["Copy now — shown once: ", /* @__PURE__ */ jsx("code", { children: formState.secret })]
+			}) : null,
+			formState?.globalError ? /* @__PURE__ */ jsx(Alert, {
+				tone: "danger",
+				children: formState.globalError
+			}) : null,
+			/* @__PURE__ */ jsxs(Card, { children: [
+				/* @__PURE__ */ jsx(SectionTitle, { children: "API tokens" }),
+				/* @__PURE__ */ jsx(Meta, { children: "Tokens are used by the CLI to upload builds. They are scoped to this project." }),
+				/* @__PURE__ */ jsx(Table, { children: /* @__PURE__ */ jsxs("table", { children: [/* @__PURE__ */ jsx("thead", { children: /* @__PURE__ */ jsxs("tr", { children: [
+					/* @__PURE__ */ jsx("th", { children: "Name" }),
+					/* @__PURE__ */ jsx("th", { children: "Created" }),
+					/* @__PURE__ */ jsx("th", { children: "Last used" }),
+					/* @__PURE__ */ jsx("th", { children: /* @__PURE__ */ jsx("span", {
+						class: "visually-hidden",
+						children: "Actions"
+					}) })
+				] }) }), /* @__PURE__ */ jsx("tbody", { children: tokens.map((token) => /* @__PURE__ */ jsxs("tr", { children: [
+					/* @__PURE__ */ jsx("td", { children: token.name }),
+					/* @__PURE__ */ jsx("td", { children: new Date(token.createdAt).toLocaleDateString() }),
+					/* @__PURE__ */ jsx("td", { children: token.lastUsedAt ? new Date(token.lastUsedAt).toLocaleDateString() : "—" }),
+					/* @__PURE__ */ jsx("td", { children: isAdmin ? /* @__PURE__ */ jsxs("form", {
+						method: "post",
+						action: `/projects/${project.slug}/settings/tokens/${token.id}/delete`,
+						"hx-post": `/projects/${project.slug}/settings/tokens/${token.id}/delete`,
+						"hx-target": "body",
+						"hx-confirm": "Delete this token? CI jobs using it will stop working.",
+						children: [csrfField(), /* @__PURE__ */ jsx(Button, {
+							variant: "ghost",
+							type: "submit",
+							children: "Revoke"
+						})]
+					}) : null })
+				] }, token.id)) })] }) }),
+				tokens.length === 0 ? /* @__PURE__ */ jsx(Meta, { children: "No tokens yet. Create one for CI." }) : null
+			] }),
+			isAdmin ? /* @__PURE__ */ jsxs(Card, { children: [
+				/* @__PURE__ */ jsx(SectionTitle, {
+					level: 3,
+					children: "Create token"
+				}),
+				/* @__PURE__ */ jsxs("form", {
+					method: "post",
+					action: `/projects/${project.slug}/settings/tokens`,
+					"hx-post": `/projects/${project.slug}/settings/tokens`,
+					"hx-target": "body",
+					children: [
+						csrfField(),
+						/* @__PURE__ */ jsx(Field, {
+							label: "Name",
+							name: "tokenName",
+							required: true,
+							placeholder: "ci"
+						}),
+						/* @__PURE__ */ jsx(FormActions, { children: /* @__PURE__ */ jsx(Button, {
+							variant: "primary",
+							type: "submit",
+							icon: "plus",
+							children: "Create token"
+						}) })
+					]
+				}),
+				/* @__PURE__ */ jsx(Meta, { children: "Token value is shown once after creation. Store it securely." })
+			] }) : null
+		]
+	});
+}
+//#endregion
+export { renderSettingsTokens };
+
+//# sourceMappingURL=settings-tokens.mjs.map

package/dist/pages/settings-tokens.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-tokens.mjs","names":[],"sources":["../../src/pages/settings-tokens.tsx"],"sourcesContent":["import type { Project } from \"@storyshelf/core/schema\";\nimport type { Token } from \"@storyshelf/core/schema\";\nimport type { HtmlEscapedString } from \"hono/utils/html\";\nimport {\n  Alert,\n  Button,\n  Card,\n  Field,\n  FormActions,\n  Meta,\n  SectionTitle,\n  Table,\n} from \"../ui/components.tsx\";\nimport { csrfField } from \"../ui/csrf-field.tsx\";\n\n/** Tokens settings tab: project CLI tokens plus the create-token form. */\nexport function renderSettingsTokens(\n  project: Project,\n  tokens: Omit<Token, \"hash\">[],\n  isAdmin: boolean,\n  formState?: { globalError?: string; secret?: string },\n): unknown {\n  return (\n    <div class=\"grid max-w-form\">\n      {formState?.secret ? (\n        <Alert tone=\"success\" title=\"Token created\">\n          Copy now — shown once: <code>{formState.secret}</code>\n        </Alert>\n      ) : null}\n      {formState?.globalError ? <Alert tone=\"danger\">{formState.globalError}</Alert> : null}\n      <Card>\n        <SectionTitle>API tokens</SectionTitle>\n        <Meta>Tokens are used by the CLI to upload builds. They are scoped to this project.</Meta>\n        <Table>\n          <table>\n            <thead>\n              <tr>\n                <th>Name</th>\n                <th>Created</th>\n                <th>Last used</th>\n                <th>\n                  <span class=\"visually-hidden\">Actions</span>\n                </th>\n              </tr>\n            </thead>\n            <tbody>\n              {tokens.map((token): HtmlEscapedString | Promise<HtmlEscapedString> => (\n                <tr key={token.id}>\n                  <td>{token.name}</td>\n                  <td>{new Date(token.createdAt).toLocaleDateString()}</td>\n                  <td>\n                    {token.lastUsedAt ? new Date(token.lastUsedAt).toLocaleDateString() : \"—\"}\n                  </td>\n                  <td>\n                    {isAdmin ? (\n                      <form\n                        method=\"post\"\n                        action={`/projects/${project.slug}/settings/tokens/${token.id}/delete`}\n                        hx-post={`/projects/${project.slug}/settings/tokens/${token.id}/delete`}\n                        hx-target=\"body\"\n                        hx-confirm=\"Delete this token? CI jobs using it will stop working.\"\n                      >\n                        {csrfField()}\n                        <Button variant=\"ghost\" type=\"submit\">\n                          Revoke\n                        </Button>\n                      </form>\n                    ) : null}\n                  </td>\n                </tr>\n              ))}\n            </tbody>\n          </table>\n        </Table>\n        {tokens.length === 0 ? <Meta>No tokens yet. Create one for CI.</Meta> : null}\n      </Card>\n\n      {isAdmin ? (\n        <Card>\n          <SectionTitle level={3}>Create token</SectionTitle>\n          <form\n            method=\"post\"\n            action={`/projects/${project.slug}/settings/tokens`}\n            hx-post={`/projects/${project.slug}/settings/tokens`}\n            hx-target=\"body\"\n          >\n            {csrfField()}\n            <Field label=\"Name\" name=\"tokenName\" required placeholder=\"ci\" />\n            <FormActions>\n              <Button variant=\"primary\" type=\"submit\" icon=\"plus\">\n                Create token\n              </Button>\n            </FormActions>\n          </form>\n          <Meta>Token value is shown once after creation. Store it securely.</Meta>\n        </Card>\n      ) : null}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAgBA,SAAgB,qBACd,SACA,QACA,SACA,WACS;CACT,OACE,qBAAC,OAAD;EAAK,OAAM;EAAX,UAAA;GACG,WAAW,SACV,qBAAC,OAAD;IAAO,MAAK;IAAU,OAAM;IAA5B,UAAA,CAA4C,2BACnB,oBAAC,QAAD,EAAA,UAAO,UAAU,OAAa,CAAA,CAChD;GACL,CAAA,IAAA;GACH,WAAW,cAAc,oBAAC,OAAD;IAAO,MAAK;IAAU,UAAA,UAAU;GAAmB,CAAA,IAAI;GACjF,qBAAC,MAAD,EAAA,UAAA;IACE,oBAAC,cAAD,EAAA,UAAc,aAAwB,CAAA;IACtC,oBAAC,MAAD,EAAA,UAAM,gFAAmF,CAAA;IACzF,oBAAC,OAAD,EAAA,UACE,qBAAC,SAAD,EAAA,UAAA,CACE,oBAAC,SAAD,EAAA,UACE,qBAAC,MAAD,EAAA,UAAA;KACE,oBAAC,MAAD,EAAA,UAAI,OAAQ,CAAA;KACZ,oBAAC,MAAD,EAAA,UAAI,UAAW,CAAA;KACf,oBAAC,MAAD,EAAA,UAAI,YAAa,CAAA;KACjB,oBAAC,MAAD,EAAA,UACE,oBAAC,QAAD;MAAM,OAAM;MAAkB,UAAA;KAAa,CAAA,EACzC,CAAA;IACF,EAAA,CAAA,EACC,CAAA,GACP,oBAAC,SAAD,EAAA,UACG,OAAO,KAAK,UACX,qBAAC,MAAD,EAAA,UAAA;KACE,oBAAC,MAAD,EAAA,UAAK,MAAM,KAAS,CAAA;KACpB,oBAAC,MAAD,EAAA,UAAK,IAAI,KAAK,MAAM,SAAS,CAAC,CAAC,mBAAmB,EAAM,CAAA;KACxD,oBAAC,MAAD,EAAA,UACG,MAAM,aAAa,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,mBAAmB,IAAI,IACpE,CAAA;KACJ,oBAAC,MAAD,EAAA,UACG,UACC,qBAAC,QAAD;MACE,QAAO;MACP,QAAQ,aAAa,QAAQ,KAAK,mBAAmB,MAAM,GAAG;MAC9D,WAAS,aAAa,QAAQ,KAAK,mBAAmB,MAAM,GAAG;MAC/D,aAAU;MACV,cAAW;MALb,UAAA,CAOG,UAAU,GACX,oBAAC,QAAD;OAAQ,SAAQ;OAAQ,MAAK;OAAS,UAAA;MAE9B,CAAA,CACJ;KACJ,CAAA,IAAA,KACF,CAAA;IACF,EAAA,GAtBK,MAAM,EAsBX,CACL,EACI,CAAA,CACF,EAAA,CAAA,EACF,CAAA;IACN,OAAO,WAAW,IAAI,oBAAC,MAAD,EAAA,UAAM,oCAAuC,CAAA,IAAI;GACpE,EAAA,CAAA;GAEL,UACC,qBAAC,MAAD,EAAA,UAAA;IACE,oBAAC,cAAD;KAAc,OAAO;KAAG,UAAA;IAA0B,CAAA;IAClD,qBAAC,QAAD;KACE,QAAO;KACP,QAAQ,aAAa,QAAQ,KAAK;KAClC,WAAS,aAAa,QAAQ,KAAK;KACnC,aAAU;KAJZ,UAAA;MAMG,UAAU;MACX,oBAAC,OAAD;OAAO,OAAM;OAAO,MAAK;OAAY,UAAA;OAAS,aAAY;MAAM,CAAA;MAChE,oBAAC,aAAD,EAAA,UACE,oBAAC,QAAD;OAAQ,SAAQ;OAAU,MAAK;OAAS,MAAK;OAAO,UAAA;MAE5C,CAAA,EACG,CAAA;KACT;;IACN,oBAAC,MAAD,EAAA,UAAM,+DAAkE,CAAA;GACpE,EAAA,CAAA,IACJ;EACD;;AAET"}

package/dist/pages/settings-webhooks.mjs

@@ -0,0 +1,104 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { Button } from "../ui/buttons.mjs";
+import { Alert, Badge, Meta } from "../ui/feedback.mjs";
+import { Field, FormActions } from "../ui/forms.mjs";
+import { Card, SectionTitle } from "../ui/layout.mjs";
+import { HStack } from "../ui/stacks.mjs";
+import { Table } from "../ui/table.mjs";
+import { csrfField } from "../ui/csrf-field.mjs";
+import { jsx, jsxs } from "hono/jsx/jsx-runtime";
+//#region src/pages/settings-webhooks.tsx
+/** Webhooks settings tab: webhook list plus the create-webhook form. */
+function renderSettingsWebhooks(project, webhooks, isAdmin, formState) {
+	return /* @__PURE__ */ jsxs("div", {
+		class: "grid max-w-form",
+		children: [
+			formState?.secret ? /* @__PURE__ */ jsxs(Alert, {
+				tone: "success",
+				title: "Webhook created",
+				children: ["Copy the signing secret now — shown once: ", /* @__PURE__ */ jsx("code", { children: formState.secret })]
+			}) : null,
+			formState?.globalError ? /* @__PURE__ */ jsx(Alert, {
+				tone: "danger",
+				children: formState.globalError
+			}) : null,
+			/* @__PURE__ */ jsxs(Card, { children: [
+				/* @__PURE__ */ jsx(SectionTitle, { children: "Webhooks" }),
+				/* @__PURE__ */ jsx(Meta, { children: "Notify external services when builds are created, updated, approved or rejected. Payloads are POSTed as JSON and signed with the webhook secret." }),
+				/* @__PURE__ */ jsx(Table, { children: /* @__PURE__ */ jsxs("table", { children: [/* @__PURE__ */ jsx("thead", { children: /* @__PURE__ */ jsxs("tr", { children: [
+					/* @__PURE__ */ jsx("th", { children: "URL" }),
+					/* @__PURE__ */ jsx("th", { children: "Events" }),
+					/* @__PURE__ */ jsx("th", { children: /* @__PURE__ */ jsx("span", {
+						class: "visually-hidden",
+						children: "Actions"
+					}) })
+				] }) }), /* @__PURE__ */ jsx("tbody", { children: webhooks.map((webhook) => /* @__PURE__ */ jsxs("tr", { children: [
+					/* @__PURE__ */ jsx("td", {
+						class: "truncate max-w-cell",
+						title: webhook.url,
+						children: webhook.url
+					}),
+					/* @__PURE__ */ jsx("td", { children: webhook.events.length === 0 ? /* @__PURE__ */ jsx(Meta, {
+						as: "span",
+						children: "all events"
+					}) : /* @__PURE__ */ jsx(HStack, { children: webhook.events.map((event) => /* @__PURE__ */ jsx(Badge, {
+						tone: "neutral",
+						children: event
+					})) }) }),
+					/* @__PURE__ */ jsx("td", { children: isAdmin ? /* @__PURE__ */ jsxs("form", {
+						method: "post",
+						action: `/projects/${project.slug}/settings/webhooks/${webhook.id}/delete`,
+						"hx-post": `/projects/${project.slug}/settings/webhooks/${webhook.id}/delete`,
+						"hx-target": "body",
+						"hx-confirm": "Delete this webhook?",
+						children: [csrfField(), /* @__PURE__ */ jsx(Button, {
+							variant: "ghost",
+							size: "sm",
+							type: "submit",
+							children: "Delete"
+						})]
+					}) : null })
+				] }, webhook.id)) })] }) }),
+				webhooks.length === 0 ? /* @__PURE__ */ jsx(Meta, { children: "No webhooks configured." }) : null
+			] }),
+			isAdmin ? /* @__PURE__ */ jsxs(Card, { children: [/* @__PURE__ */ jsx(SectionTitle, {
+				level: 3,
+				children: "Create webhook"
+			}), /* @__PURE__ */ jsxs("form", {
+				method: "post",
+				action: `/projects/${project.slug}/settings/webhooks`,
+				"hx-post": `/projects/${project.slug}/settings/webhooks`,
+				"hx-target": "body",
+				children: [
+					csrfField(),
+					/* @__PURE__ */ jsx(Field, {
+						label: "URL",
+						name: "url",
+						type: "url",
+						required: true,
+						placeholder: "https://example.com/hooks/storyshelf",
+						error: formState?.errors?.["url"]
+					}),
+					/* @__PURE__ */ jsx(Field, {
+						label: "Events",
+						name: "events",
+						placeholder: "build.created, build.approved, snapshot.reviewed",
+						hint: "Comma-separated. Leave blank to receive all events."
+					}),
+					/* @__PURE__ */ jsx(FormActions, { children: /* @__PURE__ */ jsx(Button, {
+						variant: "primary",
+						type: "submit",
+						icon: "plus",
+						children: "Add webhook"
+					}) })
+				]
+			})] }) : null
+		]
+	});
+}
+//#endregion
+export { renderSettingsWebhooks };
+
+//# sourceMappingURL=settings-webhooks.mjs.map

package/dist/pages/settings-webhooks.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-webhooks.mjs","names":[],"sources":["../../src/pages/settings-webhooks.tsx"],"sourcesContent":["import type { Project } from \"@storyshelf/core/schema\";\nimport type { HtmlEscapedString } from \"hono/utils/html\";\nimport {\n  Alert,\n  Badge,\n  Button,\n  Card,\n  Field,\n  FormActions,\n  HStack,\n  Meta,\n  SectionTitle,\n  Table,\n} from \"../ui/components.tsx\";\nimport { csrfField } from \"../ui/csrf-field.tsx\";\n\n/** Webhook row as rendered in the webhooks settings tab. */\nexport interface SettingsWebhook {\n  id: string;\n  url: string;\n  events: string[];\n}\n\n/** Webhooks settings tab: webhook list plus the create-webhook form. */\nexport function renderSettingsWebhooks(\n  project: Project,\n  webhooks: SettingsWebhook[],\n  isAdmin: boolean,\n  formState?: { errors?: Record<string, string>; globalError?: string; secret?: string },\n): unknown {\n  return (\n    <div class=\"grid max-w-form\">\n      {formState?.secret ? (\n        <Alert tone=\"success\" title=\"Webhook created\">\n          Copy the signing secret now — shown once: <code>{formState.secret}</code>\n        </Alert>\n      ) : null}\n      {formState?.globalError ? <Alert tone=\"danger\">{formState.globalError}</Alert> : null}\n\n      <Card>\n        <SectionTitle>Webhooks</SectionTitle>\n        <Meta>\n          Notify external services when builds are created, updated, approved or rejected. Payloads\n          are POSTed as JSON and signed with the webhook secret.\n        </Meta>\n        <Table>\n          <table>\n            <thead>\n              <tr>\n                <th>URL</th>\n                <th>Events</th>\n                <th>\n                  <span class=\"visually-hidden\">Actions</span>\n                </th>\n              </tr>\n            </thead>\n            <tbody>\n              {webhooks.map((webhook): HtmlEscapedString | Promise<HtmlEscapedString> => (\n                <tr key={webhook.id}>\n                  <td class=\"truncate max-w-cell\" title={webhook.url}>\n                    {webhook.url}\n                  </td>\n                  <td>\n                    {webhook.events.length === 0 ? (\n                      <Meta as=\"span\">all events</Meta>\n                    ) : (\n                      <HStack>\n                        {webhook.events.map(\n                          (event): HtmlEscapedString | Promise<HtmlEscapedString> => (\n                            <Badge tone=\"neutral\">{event}</Badge>\n                          ),\n                        )}\n                      </HStack>\n                    )}\n                  </td>\n                  <td>\n                    {isAdmin ? (\n                      <form\n                        method=\"post\"\n                        action={`/projects/${project.slug}/settings/webhooks/${webhook.id}/delete`}\n                        hx-post={`/projects/${project.slug}/settings/webhooks/${webhook.id}/delete`}\n                        hx-target=\"body\"\n                        hx-confirm=\"Delete this webhook?\"\n                      >\n                        {csrfField()}\n                        <Button variant=\"ghost\" size=\"sm\" type=\"submit\">\n                          Delete\n                        </Button>\n                      </form>\n                    ) : null}\n                  </td>\n                </tr>\n              ))}\n            </tbody>\n          </table>\n        </Table>\n        {webhooks.length === 0 ? <Meta>No webhooks configured.</Meta> : null}\n      </Card>\n\n      {isAdmin ? (\n        <Card>\n          <SectionTitle level={3}>Create webhook</SectionTitle>\n          <form\n            method=\"post\"\n            action={`/projects/${project.slug}/settings/webhooks`}\n            hx-post={`/projects/${project.slug}/settings/webhooks`}\n            hx-target=\"body\"\n          >\n            {csrfField()}\n            <Field\n              label=\"URL\"\n              name=\"url\"\n              type=\"url\"\n              required\n              placeholder=\"https://example.com/hooks/storyshelf\"\n              error={formState?.errors?.[\"url\"]}\n            />\n            <Field\n              label=\"Events\"\n              name=\"events\"\n              placeholder=\"build.created, build.approved, snapshot.reviewed\"\n              hint=\"Comma-separated. Leave blank to receive all events.\"\n            />\n            <FormActions>\n              <Button variant=\"primary\" type=\"submit\" icon=\"plus\">\n                Add webhook\n              </Button>\n            </FormActions>\n          </form>\n        </Card>\n      ) : null}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;AAwBA,SAAgB,uBACd,SACA,UACA,SACA,WACS;CACT,OACE,qBAAC,OAAD;EAAK,OAAM;EAAX,UAAA;GACG,WAAW,SACV,qBAAC,OAAD;IAAO,MAAK;IAAU,OAAM;IAA5B,UAAA,CAA8C,8CACF,oBAAC,QAAD,EAAA,UAAO,UAAU,OAAa,CAAA,CACnE;GACL,CAAA,IAAA;GACH,WAAW,cAAc,oBAAC,OAAD;IAAO,MAAK;IAAU,UAAA,UAAU;GAAmB,CAAA,IAAI;GAEjF,qBAAC,MAAD,EAAA,UAAA;IACE,oBAAC,cAAD,EAAA,UAAc,WAAsB,CAAA;IACpC,oBAAC,MAAD,EAAA,UAAM,mJAGA,CAAA;IACN,oBAAC,OAAD,EAAA,UACE,qBAAC,SAAD,EAAA,UAAA,CACE,oBAAC,SAAD,EAAA,UACE,qBAAC,MAAD,EAAA,UAAA;KACE,oBAAC,MAAD,EAAA,UAAI,MAAO,CAAA;KACX,oBAAC,MAAD,EAAA,UAAI,SAAU,CAAA;KACd,oBAAC,MAAD,EAAA,UACE,oBAAC,QAAD;MAAM,OAAM;MAAkB,UAAA;KAAa,CAAA,EACzC,CAAA;IACF,EAAA,CAAA,EACC,CAAA,GACP,oBAAC,SAAD,EAAA,UACG,SAAS,KAAK,YACb,qBAAC,MAAD,EAAA,UAAA;KACE,oBAAC,MAAD;MAAI,OAAM;MAAsB,OAAO,QAAQ;MAC5C,UAAA,QAAQ;KACP,CAAA;KACJ,oBAAC,MAAD,EAAA,UACG,QAAQ,OAAO,WAAW,IACzB,oBAAC,MAAD;MAAM,IAAG;MAAO,UAAA;KAAgB,CAAA,IAEhC,oBAAC,QAAD,EAAA,UACG,QAAQ,OAAO,KACb,UACC,oBAAC,OAAD;MAAO,MAAK;MAAW,UAAA;KAAa,CAAA,CAExC,EACM,CAAA,EAER,CAAA;KACJ,oBAAC,MAAD,EAAA,UACG,UACC,qBAAC,QAAD;MACE,QAAO;MACP,QAAQ,aAAa,QAAQ,KAAK,qBAAqB,QAAQ,GAAG;MAClE,WAAS,aAAa,QAAQ,KAAK,qBAAqB,QAAQ,GAAG;MACnE,aAAU;MACV,cAAW;MALb,UAAA,CAOG,UAAU,GACX,oBAAC,QAAD;OAAQ,SAAQ;OAAQ,MAAK;OAAK,MAAK;OAAS,UAAA;MAExC,CAAA,CACJ;KACJ,CAAA,IAAA,KACF,CAAA;IACF,EAAA,GAjCK,QAAQ,EAiCb,CACL,EACI,CAAA,CACF,EAAA,CAAA,EACF,CAAA;IACN,SAAS,WAAW,IAAI,oBAAC,MAAD,EAAA,UAAM,0BAA6B,CAAA,IAAI;GAC5D,EAAA,CAAA;GAEL,UACC,qBAAC,MAAD,EAAA,UAAA,CACE,oBAAC,cAAD;IAAc,OAAO;IAAG,UAAA;GAA4B,CAAA,GACpD,qBAAC,QAAD;IACE,QAAO;IACP,QAAQ,aAAa,QAAQ,KAAK;IAClC,WAAS,aAAa,QAAQ,KAAK;IACnC,aAAU;IAJZ,UAAA;KAMG,UAAU;KACX,oBAAC,OAAD;MACE,OAAM;MACN,MAAK;MACL,MAAK;MACL,UAAA;MACA,aAAY;MACZ,OAAO,WAAW,SAAS;KAC5B,CAAA;KACD,oBAAC,OAAD;MACE,OAAM;MACN,MAAK;MACL,aAAY;MACZ,MAAK;KACN,CAAA;KACD,oBAAC,aAAD,EAAA,UACE,oBAAC,QAAD;MAAQ,SAAQ;MAAU,MAAK;MAAS,MAAK;MAAO,UAAA;KAE5C,CAAA,EACG,CAAA;IACT;GACF,CAAA,CAAA,EAAA,CAAA,IACJ;EACD;;AAET"}

package/dist/pages/storybook.mjs

@@ -0,0 +1,116 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+//#region src/pages/storybook.tsx
+/**
+* Placeholder shown while a build's statics are not yet available.
+* Refreshes itself; once extraction lands, the route serves the live page.
+*/
+function renderStorybookPreparingPage(project, build, slug) {
+	const { ui } = getStore();
+	const name = ui.name ?? "StoryShelf";
+	return `<!doctype html>
+<html lang="en" data-theme="system">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta http-equiv="refresh" content="5" />
+    <title>${escapeHtml(project.name)} Storybook · ${name}</title>
+    <style>
+      html, body { margin: 0; height: 100%; display: flex; flex-direction: column; font-family: system-ui, sans-serif; }
+      header { display: flex; align-items: center; gap: .75rem; padding: .5rem 1rem; border-bottom: 1px solid var(--border, #ddd); }
+      header a { color: inherit; text-decoration: none; }
+      header .crumb { opacity: .7; }
+      main { flex: 1; display: flex; align-items: center; justify-content: center; opacity: .7; }
+    </style>
+  </head>
+  <body>
+    <header>
+      <a href="/">${name}</a>
+      <span class="crumb">/</span>
+      <a href="/projects/${escapeAttr(slug)}/builds">${escapeHtml(project.name)}</a>
+      <span class="crumb">/</span>
+      <span>${escapeHtml(build.gitBranch)}</span>
+      <span class="crumb">· ${build.gitSha.slice(0, 7)}</span>
+    </header>
+    <main>
+      <p>Preparing preview — this page refreshes automatically. <a href="/projects/${escapeAttr(slug)}/builds/${escapeAttr(build.id)}">View build status</a></p>
+    </main>
+  </body>
+</html>`;
+}
+/**
+* Landing page for a published Storybook build. Presents the live Storybook
+* (via an iframe against the same build's statics) with the project chrome, so
+* the URL is shareable with designers/managers (ADR 0011).
+*/
+function renderStorybookPage(project, build, slug, options) {
+	const { ui } = getStore();
+	const name = ui.name ?? "StoryShelf";
+	const iframeSrc = storybookIframeSrc(options?.storyId, options?.viewMode);
+	const copyUrl = storybookCopyUrl(slug, build.id, options?.storyId, options?.viewMode);
+	return `<!doctype html>
+<html lang="en" data-theme="system">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>${escapeHtml(project.name)} Storybook · ${name}</title>
+    <style>
+      html, body { margin: 0; height: 100%; display: flex; flex-direction: column; font-family: system-ui, sans-serif; }
+      header { display: flex; align-items: center; gap: .5rem; padding: .5rem 1rem; border-bottom: 1px solid var(--border, #ddd); flex-wrap: wrap; }
+      header a, header button { color: inherit; text-decoration: none; }
+      header .crumb { opacity: .7; }
+      header .branch { font-weight: 600; }
+      header .spacer { flex: 1; }
+      header .actions { display: flex; gap: .5rem; align-items: center; }
+      header .btn-link { padding: .35rem .6rem; border: 1px solid var(--border, #ddd); border-radius: 6px; font-size: .85rem; background: var(--surface-card, #fff); cursor: pointer; }
+      iframe { flex: 1; border: 0; width: 100%; }
+    </style>
+  </head>
+  <body>
+    <header>
+      <a href="/">${name}</a>
+      <span class="crumb">/</span>
+      <a href="/projects/${escapeAttr(slug)}/builds">${escapeHtml(project.name)}</a>
+      <span class="crumb">/</span>
+      <span class="branch">${escapeHtml(build.gitBranch)}</span>
+      <span class="crumb">· ${build.gitSha.slice(0, 7)}</span>
+      <span class="spacer"></span>
+      <span class="actions">
+        <a class="btn-link" href="./index.html" target="_blank" rel="noopener" title="Open full Storybook manager in new tab">View full Storybook ↗</a>
+        <button class="btn-link" type="button" data-copy-url="${escapeAttr(copyUrl)}" onclick="navigator.clipboard.writeText(location.origin+this.dataset.copyUrl).then(()=>{this.textContent='Copied!'; setTimeout(()=>this.textContent='Copy link',1500)})">Copy link</button>
+      </span>
+    </header>
+    <iframe src="${escapeAttr(iframeSrc)}" title="${escapeAttr(project.name)} Storybook"></iframe>
+  </body>
+</html>`;
+}
+function storybookIframeSrc(storyId, viewMode) {
+	const id = storyId?.trim() ?? "";
+	if (id !== "" && /^[a-zA-Z0-9._/-]+$/u.test(id)) return `./iframe.html?id=${encodeURIComponent(id)}${viewMode === "docs" ? "&viewMode=docs" : ""}`;
+	return "./iframe.html";
+}
+function storybookCopyUrl(slug, buildId, storyId, viewMode) {
+	const id = storyId?.trim() ?? "";
+	if (id !== "" && /^[a-zA-Z0-9._/-]+$/u.test(id)) return `/projects/${slug}/storybook/build/${buildId}/?storyId=${encodeURIComponent(id)}${viewMode === "docs" ? "&viewMode=docs" : ""}`;
+	return `/projects/${slug}/storybook/build/${buildId}/`;
+}
+function escapeHtml(value) {
+	return value.replaceAll(/[&<>"']/gu, (ch) => {
+		switch (ch) {
+			case "&": return "&amp;";
+			case "<": return "&lt;";
+			case ">": return "&gt;";
+			case "\"": return "&quot;";
+			default: return "&#39;";
+		}
+	});
+}
+function escapeAttr(value) {
+	return escapeHtml(value);
+}
+//#endregion
+export { renderStorybookPage, renderStorybookPreparingPage };
+
+//# sourceMappingURL=storybook.mjs.map

package/dist/pages/storybook.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/pages/storybook.tsx"],"sourcesContent":["import type { Build } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { getStore } from \"../store.ts\";\n\n/**\n * Placeholder shown while a build's statics are not yet available.\n * Refreshes itself; once extraction lands, the route serves the live page.\n */\nexport function renderStorybookPreparingPage(project: Project, build: Build, slug: string): string {\n  const { ui } = getStore();\n  const name = ui.name ?? \"StoryShelf\";\n  return `<!doctype html>\n<html lang=\"en\" data-theme=\"system\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <meta http-equiv=\"refresh\" content=\"5\" />\n    <title>${escapeHtml(project.name)} Storybook · ${name}</title>\n    <style>\n      html, body { margin: 0; height: 100%; display: flex; flex-direction: column; font-family: system-ui, sans-serif; }\n      header { display: flex; align-items: center; gap: .75rem; padding: .5rem 1rem; border-bottom: 1px solid var(--border, #ddd); }\n      header a { color: inherit; text-decoration: none; }\n      header .crumb { opacity: .7; }\n      main { flex: 1; display: flex; align-items: center; justify-content: center; opacity: .7; }\n    </style>\n  </head>\n  <body>\n    <header>\n      <a href=\"/\">${name}</a>\n      <span class=\"crumb\">/</span>\n      <a href=\"/projects/${escapeAttr(slug)}/builds\">${escapeHtml(project.name)}</a>\n      <span class=\"crumb\">/</span>\n      <span>${escapeHtml(build.gitBranch)}</span>\n      <span class=\"crumb\">· ${build.gitSha.slice(0, 7)}</span>\n    </header>\n    <main>\n      <p>Preparing preview — this page refreshes automatically. <a href=\"/projects/${escapeAttr(slug)}/builds/${escapeAttr(build.id)}\">View build status</a></p>\n    </main>\n  </body>\n</html>`;\n}\n/**\n * Landing page for a published Storybook build. Presents the live Storybook\n * (via an iframe against the same build's statics) with the project chrome, so\n * the URL is shareable with designers/managers (ADR 0011).\n */\nexport function renderStorybookPage(\n  project: Project,\n  build: Build,\n  slug: string,\n  options?: { storyId?: string; viewMode?: \"docs\" },\n): string {\n  const { ui } = getStore();\n  const name = ui.name ?? \"StoryShelf\";\n  const iframeSrc = storybookIframeSrc(options?.storyId, options?.viewMode);\n  const copyUrl = storybookCopyUrl(slug, build.id, options?.storyId, options?.viewMode);\n  return `<!doctype html>\n<html lang=\"en\" data-theme=\"system\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <title>${escapeHtml(project.name)} Storybook · ${name}</title>\n    <style>\n      html, body { margin: 0; height: 100%; display: flex; flex-direction: column; font-family: system-ui, sans-serif; }\n      header { display: flex; align-items: center; gap: .5rem; padding: .5rem 1rem; border-bottom: 1px solid var(--border, #ddd); flex-wrap: wrap; }\n      header a, header button { color: inherit; text-decoration: none; }\n      header .crumb { opacity: .7; }\n      header .branch { font-weight: 600; }\n      header .spacer { flex: 1; }\n      header .actions { display: flex; gap: .5rem; align-items: center; }\n      header .btn-link { padding: .35rem .6rem; border: 1px solid var(--border, #ddd); border-radius: 6px; font-size: .85rem; background: var(--surface-card, #fff); cursor: pointer; }\n      iframe { flex: 1; border: 0; width: 100%; }\n    </style>\n  </head>\n  <body>\n    <header>\n      <a href=\"/\">${name}</a>\n      <span class=\"crumb\">/</span>\n      <a href=\"/projects/${escapeAttr(slug)}/builds\">${escapeHtml(project.name)}</a>\n      <span class=\"crumb\">/</span>\n      <span class=\"branch\">${escapeHtml(build.gitBranch)}</span>\n      <span class=\"crumb\">· ${build.gitSha.slice(0, 7)}</span>\n      <span class=\"spacer\"></span>\n      <span class=\"actions\">\n        <a class=\"btn-link\" href=\"./index.html\" target=\"_blank\" rel=\"noopener\" title=\"Open full Storybook manager in new tab\">View full Storybook ↗</a>\n        <button class=\"btn-link\" type=\"button\" data-copy-url=\"${escapeAttr(copyUrl)}\" onclick=\"navigator.clipboard.writeText(location.origin+this.dataset.copyUrl).then(()=>{this.textContent='Copied!'; setTimeout(()=>this.textContent='Copy link',1500)})\">Copy link</button>\n      </span>\n    </header>\n    <iframe src=\"${escapeAttr(iframeSrc)}\" title=\"${escapeAttr(project.name)} Storybook\"></iframe>\n  </body>\n</html>`;\n}\n\nfunction storybookIframeSrc(storyId?: string, viewMode?: \"docs\"): string {\n  const id = storyId?.trim() ?? \"\";\n  if (id !== \"\" && /^[a-zA-Z0-9._/-]+$/u.test(id)) {\n    const mode = viewMode === \"docs\" ? \"&viewMode=docs\" : \"\";\n    return `./iframe.html?id=${encodeURIComponent(id)}${mode}`;\n  }\n  return \"./iframe.html\";\n}\n\nfunction storybookCopyUrl(\n  slug: string,\n  buildId: string,\n  storyId?: string,\n  viewMode?: \"docs\",\n): string {\n  const id = storyId?.trim() ?? \"\";\n  if (id !== \"\" && /^[a-zA-Z0-9._/-]+$/u.test(id)) {\n    const mode = viewMode === \"docs\" ? \"&viewMode=docs\" : \"\";\n    return `/projects/${slug}/storybook/build/${buildId}/?storyId=${encodeURIComponent(id)}${mode}`;\n  }\n  return `/projects/${slug}/storybook/build/${buildId}/`;\n}\n\nfunction escapeHtml(value: string): string {\n  return value.replaceAll(/[&<>\"']/gu, (ch) => {\n    switch (ch) {\n      case \"&\": {\n        return \"&amp;\";\n      }\n      case \"<\": {\n        return \"&lt;\";\n      }\n      case \">\": {\n        return \"&gt;\";\n      }\n      case '\"': {\n        return \"&quot;\";\n      }\n      default: {\n        return \"&#39;\";\n      }\n    }\n  });\n}\n\nfunction escapeAttr(value: string): string {\n  return escapeHtml(value);\n}\n"],"mappings":";;;;;;;;;AAQA,SAAgB,6BAA6B,SAAkB,OAAc,MAAsB;CACjG,MAAM,EAAE,OAAO,SAAS;CACxB,MAAM,OAAO,GAAG,QAAQ;CACxB,OAAO;;;;;;aAMI,WAAW,QAAQ,IAAI,EAAE,eAAe,KAAK;;;;;;;;;;;oBAWtC,KAAK;;2BAEE,WAAW,IAAI,EAAE,WAAW,WAAW,QAAQ,IAAI,EAAE;;cAElE,WAAW,MAAM,SAAS,EAAE;8BACZ,MAAM,OAAO,MAAM,GAAG,CAAC,EAAE;;;qFAG8B,WAAW,IAAI,EAAE,UAAU,WAAW,MAAM,EAAE,EAAE;;;;AAIrI;;;;;;AAMA,SAAgB,oBACd,SACA,OACA,MACA,SACQ;CACR,MAAM,EAAE,OAAO,SAAS;CACxB,MAAM,OAAO,GAAG,QAAQ;CACxB,MAAM,YAAY,mBAAmB,SAAS,SAAS,SAAS,QAAQ;CACxE,MAAM,UAAU,iBAAiB,MAAM,MAAM,IAAI,SAAS,SAAS,SAAS,QAAQ;CACpF,OAAO;;;;;aAKI,WAAW,QAAQ,IAAI,EAAE,eAAe,KAAK;;;;;;;;;;;;;;;oBAetC,KAAK;;2BAEE,WAAW,IAAI,EAAE,WAAW,WAAW,QAAQ,IAAI,EAAE;;6BAEnD,WAAW,MAAM,SAAS,EAAE;8BAC3B,MAAM,OAAO,MAAM,GAAG,CAAC,EAAE;;;;gEAIS,WAAW,OAAO,EAAE;;;mBAGjE,WAAW,SAAS,EAAE,WAAW,WAAW,QAAQ,IAAI,EAAE;;;AAG7E;AAEA,SAAS,mBAAmB,SAAkB,UAA2B;CACvE,MAAM,KAAK,SAAS,KAAK,KAAK;CAC9B,IAAI,OAAO,MAAM,sBAAsB,KAAK,EAAE,GAE5C,OAAO,oBAAoB,mBAAmB,EAAE,IADnC,aAAa,SAAS,mBAAmB;CAGxD,OAAO;AACT;AAEA,SAAS,iBACP,MACA,SACA,SACA,UACQ;CACR,MAAM,KAAK,SAAS,KAAK,KAAK;CAC9B,IAAI,OAAO,MAAM,sBAAsB,KAAK,EAAE,GAE5C,OAAO,aAAa,KAAK,mBAAmB,QAAQ,YAAY,mBAAmB,EAAE,IADxE,aAAa,SAAS,mBAAmB;CAGxD,OAAO,aAAa,KAAK,mBAAmB,QAAQ;AACtD;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,MAAM,WAAW,cAAc,OAAO;EAC3C,QAAQ,IAAR;GACE,KAAK,KACH,OAAO;GAET,KAAK,KACH,OAAO;GAET,KAAK,KACH,OAAO;GAET,KAAK,MACH,OAAO;GAET,SACE,OAAO;EAEX;CACF,CAAC;AACH;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,WAAW,KAAK;AACzB"}

package/dist/retention-timer.mjs

@@ -0,0 +1,65 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ProjectModel } from "@storyshelf/core/models";
+import { Retention } from "@storyshelf/core/retention";
+//#region src/retention-timer.ts
+const DEFAULT_BRANCH_TTL_DAYS = 30;
+const DEFAULT_BRANCH_GC_INTERVAL_MS = 864e5;
+/**
+* Start a daily sweep that removes baselines for branches that have not
+* been updated within `branchTtlDays`. Returns a timer handle or `null`
+* when GC is disabled (`branchTtlDays: null` or non-positive interval).
+*
+* @param db - Database adapter to list projects
+* @param storage - Storage adapter for baseline cleanup
+* @param config - Shelf config supplying `branchTtlDays` and `branchGcIntervalMs`
+* @param logger - Structured logger for sweep diagnostics
+* @returns Timer handle with `stop()`, or `null` if GC is disabled
+*/
+function startBranchGcTimer(db, storage, config, logger) {
+	const ttlDays = config.branchTtlDays ?? DEFAULT_BRANCH_TTL_DAYS;
+	if (ttlDays === null) return null;
+	const intervalMs = config.branchGcIntervalMs ?? DEFAULT_BRANCH_GC_INTERVAL_MS;
+	if (intervalMs <= 0) return null;
+	return scheduleBranchGc(createBranchGcRunner(db, storage, logger, ttlDays), intervalMs);
+}
+function createBranchGcRunner(db, storage, logger, ttlDays) {
+	return async () => {
+		try {
+			const projects = await new ProjectModel(db).list();
+			const retention = new Retention(db, storage, {
+				builds: db.tables.builds,
+				buildLabels: db.tables.buildLabels,
+				baselines: db.tables.baselines
+			}, logger);
+			const results = await Promise.all(projects.map((project) => retention.purgeStaleBranches(project, ttlDays)));
+			const totalBranches = results.reduce((sum, r) => sum + r.removedBranches, 0);
+			const totalBaselines = results.reduce((sum, r) => sum + r.removedBaselines, 0);
+			if (totalBranches > 0 || totalBaselines > 0) logger.info({
+				totalBranches,
+				totalBaselines
+			}, "branch GC daily sweep complete");
+		} catch (error) {
+			logger.error({ err: error }, "branch GC sweep failed");
+		}
+	};
+}
+function scheduleBranchGc(run, intervalMs) {
+	const timeout = setTimeout(() => {
+		run();
+	}, Math.min(36e5, intervalMs));
+	timeout.unref?.();
+	const interval = setInterval(() => {
+		run();
+	}, intervalMs);
+	interval.unref?.();
+	return { stop: () => {
+		clearTimeout(timeout);
+		clearInterval(interval);
+	} };
+}
+//#endregion
+export { startBranchGcTimer };
+
+//# sourceMappingURL=retention-timer.mjs.map

package/dist/retention-timer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention-timer.mjs","names":[],"sources":["../src/retention-timer.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"@storyshelf/core/adapter/database\";\nimport type { StorageAdapter } from \"@storyshelf/core/adapter/storage\";\nimport type { ShelfConfig } from \"@storyshelf/core/config\";\nimport type { Logger } from \"@storyshelf/core/logger\";\n/* oxlint-disable typescript/promise-function-async -- interval helpers return promise factories */\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { Retention } from \"@storyshelf/core/retention\";\n\nconst DEFAULT_BRANCH_TTL_DAYS = 30;\nconst DEFAULT_BRANCH_GC_INTERVAL_MS = 86_400_000;\n\n/** Handle for the background branch-GC interval; call `stop()` on server shutdown. */\nexport interface BranchGcTimer {\n  stop(): void;\n}\n\n/**\n * Start a daily sweep that removes baselines for branches that have not\n * been updated within `branchTtlDays`. Returns a timer handle or `null`\n * when GC is disabled (`branchTtlDays: null` or non-positive interval).\n *\n * @param db - Database adapter to list projects\n * @param storage - Storage adapter for baseline cleanup\n * @param config - Shelf config supplying `branchTtlDays` and `branchGcIntervalMs`\n * @param logger - Structured logger for sweep diagnostics\n * @returns Timer handle with `stop()`, or `null` if GC is disabled\n */\nexport function startBranchGcTimer(\n  db: DatabaseAdapter,\n  storage: StorageAdapter,\n  config: ShelfConfig,\n  logger: Logger,\n): BranchGcTimer | null {\n  const ttlDays = config.branchTtlDays ?? DEFAULT_BRANCH_TTL_DAYS;\n  if (ttlDays === null) {\n    return null;\n  }\n  const intervalMs = config.branchGcIntervalMs ?? DEFAULT_BRANCH_GC_INTERVAL_MS;\n  if (intervalMs <= 0) {\n    return null;\n  }\n  const run = createBranchGcRunner(db, storage, logger, ttlDays);\n  return scheduleBranchGc(run, intervalMs);\n}\n\n// oxlint-disable-next-line typescript/promise-function-async\nfunction createBranchGcRunner(\n  db: DatabaseAdapter,\n  storage: StorageAdapter,\n  logger: Logger,\n  ttlDays: number,\n): () => Promise<void> {\n  return async (): Promise<void> => {\n    try {\n      const projects = await new ProjectModel(db).list();\n      const retention = new Retention(\n        db,\n        storage,\n        {\n          builds: db.tables.builds,\n          buildLabels: db.tables.buildLabels,\n          baselines: db.tables.baselines,\n        },\n        logger,\n      );\n      const results = await Promise.all(\n        projects.map((project) => retention.purgeStaleBranches(project, ttlDays)),\n      );\n      const totalBranches = results.reduce(\n        (sum: number, r: { removedBranches: number }) => sum + r.removedBranches,\n        0,\n      );\n      const totalBaselines = results.reduce(\n        (sum: number, r: { removedBaselines: number }) => sum + r.removedBaselines,\n        0,\n      );\n      if (totalBranches > 0 || totalBaselines > 0) {\n        logger.info({ totalBranches, totalBaselines }, \"branch GC daily sweep complete\");\n      }\n    } catch (error) {\n      logger.error({ err: error }, \"branch GC sweep failed\");\n    }\n  };\n}\n\nfunction scheduleBranchGc(run: () => Promise<void>, intervalMs: number): BranchGcTimer {\n  const firstDelay = Math.min(3_600_000, intervalMs);\n  const timeout = setTimeout(() => {\n    // oxlint-disable-next-line no-void -- fire-and-forget interval task\n    void run();\n  }, firstDelay);\n  timeout.unref?.();\n\n  const interval = setInterval(() => {\n    // oxlint-disable-next-line no-void -- fire-and-forget interval task\n    void run();\n  }, intervalMs);\n  interval.unref?.();\n\n  return {\n    stop: () => {\n      clearTimeout(timeout);\n      clearInterval(interval);\n    },\n  };\n}\n"],"mappings":";;;;;;AAQA,MAAM,0BAA0B;AAChC,MAAM,gCAAgC;;;;;;;;;;;;AAkBtC,SAAgB,mBACd,IACA,SACA,QACA,QACsB;CACtB,MAAM,UAAU,OAAO,iBAAiB;CACxC,IAAI,YAAY,MACd,OAAO;CAET,MAAM,aAAa,OAAO,sBAAsB;CAChD,IAAI,cAAc,GAChB,OAAO;CAGT,OAAO,iBADK,qBAAqB,IAAI,SAAS,QAAQ,OAC5B,GAAG,UAAU;AACzC;AAGA,SAAS,qBACP,IACA,SACA,QACA,SACqB;CACrB,OAAO,YAA2B;EAChC,IAAI;GACF,MAAM,WAAW,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK;GACjD,MAAM,YAAY,IAAI,UACpB,IACA,SACA;IACE,QAAQ,GAAG,OAAO;IAClB,aAAa,GAAG,OAAO;IACvB,WAAW,GAAG,OAAO;GACvB,GACA,MACF;GACA,MAAM,UAAU,MAAM,QAAQ,IAC5B,SAAS,KAAK,YAAY,UAAU,mBAAmB,SAAS,OAAO,CAAC,CAC1E;GACA,MAAM,gBAAgB,QAAQ,QAC3B,KAAa,MAAmC,MAAM,EAAE,iBACzD,CACF;GACA,MAAM,iBAAiB,QAAQ,QAC5B,KAAa,MAAoC,MAAM,EAAE,kBAC1D,CACF;GACA,IAAI,gBAAgB,KAAK,iBAAiB,GACxC,OAAO,KAAK;IAAE;IAAe;GAAe,GAAG,gCAAgC;EAEnF,SAAS,OAAO;GACd,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,wBAAwB;EACvD;CACF;AACF;AAEA,SAAS,iBAAiB,KAA0B,YAAmC;CAErF,MAAM,UAAU,iBAAiB;EAE/B,IAAS;CACX,GAJmB,KAAK,IAAI,MAAW,UAI3B,CAAC;CACb,QAAQ,QAAQ;CAEhB,MAAM,WAAW,kBAAkB;EAEjC,IAAS;CACX,GAAG,UAAU;CACb,SAAS,QAAQ;CAEjB,OAAO,EACL,YAAY;EACV,aAAa,OAAO;EACpB,cAAc,QAAQ;CACxB,EACF;AACF"}

package/dist/routers/admin-pages.mjs

@@ -0,0 +1,48 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { loadCredentialProbe, reencryptWithCurrent } from "../credentials.mjs";
+import { renderAdminSystemPage } from "../pages/admin-system.mjs";
+import { hxRedirect } from "./htmx.mjs";
+import { flash } from "./flash.mjs";
+import { collectHealthReport } from "./health-report.mjs";
+import { requireSiteAdmin } from "./helpers.mjs";
+//#region src/routers/admin-pages.ts
+/** Register the site-admin System page (adapter inventory + in-depth health). */
+function registerAdminPages(app, deps, auth) {
+	app.get("/admin", async (c) => {
+		requireSiteAdmin(c);
+		const { authEnabled, config, db } = getStore();
+		const credentials = await loadCredentialProbe(db, config);
+		const report = await collectHealthReport(deps.sources, deps.getSettled(), deps.bootTimeMs, deps.version, credentials);
+		const authMethods = auth?.loginMethods().map((method) => method.label);
+		c.header("Cache-Control", "no-store");
+		return c.html(renderAdminSystemPage({
+			report,
+			authEnabled,
+			config,
+			authMethods,
+			credentials
+		}));
+	});
+	app.post("/admin/credentials/reencrypt", async (c) => {
+		requireSiteAdmin(c);
+		const { db, config } = getStore();
+		if (!config.previousSecret) {
+			flash(c, "No previous secret is configured", "warning");
+			return hxRedirect(c, "/admin");
+		}
+		const result = await reencryptWithCurrent(db, config);
+		flash(c, reencryptMessage(result), result.failed > 0 ? "warning" : "success");
+		return hxRedirect(c, "/admin");
+	});
+}
+function reencryptMessage(result) {
+	const base = `Re-encrypted ${result.reencrypted} credential(s)`;
+	return result.failed > 0 ? `${base}; ${result.failed} failed — see server logs` : base;
+}
+//#endregion
+export { registerAdminPages };
+
+//# sourceMappingURL=admin-pages.mjs.map

package/dist/routers/admin-pages.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-pages.mjs","names":[],"sources":["../../src/routers/admin-pages.ts"],"sourcesContent":["import type { Auth } from \"@storyshelf/auth\";\nimport type { AdapterSetupResult, AdapterSetupSources } from \"@storyshelf/core/adapter/setup\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { loadCredentialProbe, reencryptWithCurrent } from \"../credentials.ts\";\nimport { renderAdminSystemPage } from \"../pages/admin-system.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { collectHealthReport } from \"./health-report.ts\";\nimport { requireSiteAdmin } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\n/** Dependencies for the admin System page (same probing inputs as deep health). */\nexport interface AdminPageDeps {\n  sources: AdapterSetupSources;\n  getSettled: () => AdapterSetupResult | null;\n  bootTimeMs: number;\n  version: string;\n}\n\n/** Register the site-admin System page (adapter inventory + in-depth health). */\nexport function registerAdminPages(app: ShelfRouter, deps: AdminPageDeps, auth?: Auth): void {\n  app.get(\"/admin\", async (c) => {\n    requireSiteAdmin(c);\n    const { authEnabled, config, db } = getStore();\n    const credentials = await loadCredentialProbe(db, config);\n    const report = await collectHealthReport(\n      deps.sources,\n      deps.getSettled(),\n      deps.bootTimeMs,\n      deps.version,\n      credentials,\n    );\n    const authMethods = auth?.loginMethods().map((method) => method.label);\n    c.header(\"Cache-Control\", \"no-store\");\n    return c.html(renderAdminSystemPage({ report, authEnabled, config, authMethods, credentials }));\n  });\n\n  app.post(\"/admin/credentials/reencrypt\", async (c) => {\n    requireSiteAdmin(c);\n    const { db, config } = getStore();\n    if (!config.previousSecret) {\n      flash(c, \"No previous secret is configured\", \"warning\");\n      return hxRedirect(c, \"/admin\");\n    }\n    const result = await reencryptWithCurrent(db, config);\n    flash(c, reencryptMessage(result), result.failed > 0 ? \"warning\" : \"success\");\n    return hxRedirect(c, \"/admin\");\n  });\n}\n\nfunction reencryptMessage(result: { reencrypted: number; failed: number }): string {\n  const base = `Re-encrypted ${result.reencrypted} credential(s)`;\n  return result.failed > 0 ? `${base}; ${result.failed} failed — see server logs` : base;\n}\n"],"mappings":";;;;;;;;;;;;AAoBA,SAAgB,mBAAmB,KAAkB,MAAqB,MAAmB;CAC3F,IAAI,IAAI,UAAU,OAAO,MAAM;EAC7B,iBAAiB,CAAC;EAClB,MAAM,EAAE,aAAa,QAAQ,OAAO,SAAS;EAC7C,MAAM,cAAc,MAAM,oBAAoB,IAAI,MAAM;EACxD,MAAM,SAAS,MAAM,oBACnB,KAAK,SACL,KAAK,WAAW,GAChB,KAAK,YACL,KAAK,SACL,WACF;EACA,MAAM,cAAc,MAAM,aAAa,CAAC,CAAC,KAAK,WAAW,OAAO,KAAK;EACrE,EAAE,OAAO,iBAAiB,UAAU;EACpC,OAAO,EAAE,KAAK,sBAAsB;GAAE;GAAQ;GAAa;GAAQ;GAAa;EAAY,CAAC,CAAC;CAChG,CAAC;CAED,IAAI,KAAK,gCAAgC,OAAO,MAAM;EACpD,iBAAiB,CAAC;EAClB,MAAM,EAAE,IAAI,WAAW,SAAS;EAChC,IAAI,CAAC,OAAO,gBAAgB;GAC1B,MAAM,GAAG,oCAAoC,SAAS;GACtD,OAAO,WAAW,GAAG,QAAQ;EAC/B;EACA,MAAM,SAAS,MAAM,qBAAqB,IAAI,MAAM;EACpD,MAAM,GAAG,iBAAiB,MAAM,GAAG,OAAO,SAAS,IAAI,YAAY,SAAS;EAC5E,OAAO,WAAW,GAAG,QAAQ;CAC/B,CAAC;AACH;AAEA,SAAS,iBAAiB,QAAyD;CACjF,MAAM,OAAO,gBAAgB,OAAO,YAAY;CAChD,OAAO,OAAO,SAAS,IAAI,GAAG,KAAK,IAAI,OAAO,OAAO,6BAA6B;AACpF"}